last executing test programs: 46.158990488s ago: executing program 4 (id=4014): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x120) 45.935631016s ago: executing program 4 (id=4017): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) 45.7116579s ago: executing program 4 (id=4021): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006500)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000065c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 45.244253414s ago: executing program 4 (id=4026): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/17, 0x11}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 27.276984653s ago: executing program 4 (id=4026): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/17, 0x11}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11.465724309s ago: executing program 4 (id=4026): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/17, 0x11}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 9.823886511s ago: executing program 2 (id=4281): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) open(0x0, 0x580200, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b0000000b002a80dc35e1461f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.57836829s ago: executing program 2 (id=4293): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000100)=""/85, 0x55) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x3}, 0x2) 6.547377094s ago: executing program 0 (id=4301): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x24, r2, 0x69b83c609c2271bb, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5}]}, 0x24}}, 0x0) 6.09798816s ago: executing program 1 (id=4306): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0a00180003030303030300001c005a8018000480140005"], 0x44}}, 0x0) 6.016990251s ago: executing program 0 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x3c}}, 0x0) 2.265972392s ago: executing program 1 (id=4315): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000009}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000d00), 0x4) 2.18099224s ago: executing program 0 (id=4316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2.041715133s ago: executing program 1 (id=4318): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f373b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000258000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00001f5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) 1.867599372s ago: executing program 1 (id=4320): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) 1.627709542s ago: executing program 3 (id=4321): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0xc, 0xffffff34) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='N-N:'], 0x6a) 1.53451306s ago: executing program 2 (id=4322): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/llc/socket\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_open_procfs(0x0, &(0x7f0000000380)='pagemap\x00') mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x1) 1.467767251s ago: executing program 1 (id=4323): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) 1.380996834s ago: executing program 3 (id=4324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x8, 0xf8}, @val, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x8100, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 1.072826403s ago: executing program 0 (id=4325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4018aee2, &(0x7f0000000080)) 907.595892ms ago: executing program 2 (id=4326): newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 737.75676ms ago: executing program 3 (id=4327): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000}) 645.813667ms ago: executing program 2 (id=4328): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x48073000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 567.203275ms ago: executing program 0 (id=4329): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xe8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x98, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x7c, 0x6, [@m_connmark={0x78, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xd, 0x6, "66396e732cf67237ec"}, {0xc}, {0xc}}}]}]}}]}, 0xe8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 327.62557ms ago: executing program 3 (id=4330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 249.850416ms ago: executing program 1 (id=4331): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 191.950616ms ago: executing program 0 (id=4332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x3f, {[@window={0x9, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 138.654438ms ago: executing program 3 (id=4333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x4) 20.926175ms ago: executing program 2 (id=4334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) 0s ago: executing program 3 (id=4335): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) clock_adjtime(0x0, &(0x7f0000000040)={0x200d54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x18, &(0x7f0000000100)={r2}, &(0x7f0000002380)=0x18) kernel console output (not intermixed with test programs): ace, different from the descriptor's value: 0 [ 349.088032][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 349.089305][T12054] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 349.137924][ T8] usb 1-1: string descriptor 0 read error: -22 [ 349.167749][ T8] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 349.196670][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.237571][ T8] usb 1-1: config 0 descriptor?? [ 349.263505][T12037] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 349.305161][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 349.316735][ T5268] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 349.326773][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 349.356035][ T8] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input36 [ 349.486895][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 349.521160][ T5268] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 349.530633][ T5268] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 349.548168][ T5268] usb 5-1: Manufacturer: syz [ 349.549781][ T51] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 349.564644][ T5268] usb 5-1: config 0 descriptor?? [ 349.635566][ T8] usb 1-1: USB disconnect, device number 21 [ 349.688713][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.706969][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.737868][ T9] usb 3-1: config 0 descriptor?? [ 349.748465][ T9] cp210x 3-1:0.0: cp210x converter detected [ 349.787576][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 349.798624][ T51] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 349.827222][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.876157][ T51] usb 4-1: config 0 descriptor?? [ 349.981981][ T5268] gs_usb 5-1:0.0: Configuring for 58 interfaces [ 349.989747][ T5268] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 350.016816][ T5268] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 350.226972][ T5268] usb 5-1: USB disconnect, device number 26 [ 350.239300][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 350.293885][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 350.514458][ T5268] usb 3-1: USB disconnect, device number 22 [ 350.532495][ T5268] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 350.588782][ T5268] cp210x 3-1:0.0: device disconnected [ 350.837384][T12077] team_slave_0: entered allmulticast mode [ 350.931082][ T51] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 350.956972][ T51] asix 4-1:0.0: probe with driver asix failed with error -71 [ 350.989073][ T51] usb 4-1: USB disconnect, device number 30 [ 350.996908][ T943] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 351.198556][ T943] usb 2-1: Using ep0 maxpacket: 32 [ 351.215570][ T943] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 351.226924][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.257749][ T943] usb 2-1: config 0 descriptor?? [ 351.273711][ T943] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 351.351988][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 351.549250][ T8] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 351.581746][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.621161][ T8] usb 1-1: config 0 descriptor?? [ 352.145340][ T8] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 352.283775][ T943] gspca_sunplus: reg_w_riv err -71 [ 352.289407][ T943] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 352.319911][ T943] usb 2-1: USB disconnect, device number 29 [ 352.784818][T12121] sg_write: data in/out 12335450/2 bytes for SCSI command 0x0-- guessing data in; [ 352.784818][T12121] program syz.3.3022 not setting count and/or reply_len properly [ 352.833493][ T943] usb 1-1: USB disconnect, device number 22 [ 353.558218][ T29] audit: type=1326 audit(1724434662.241:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12131 comm="syz.1.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3d79e79 code=0x7ffc0000 [ 353.663171][ T29] audit: type=1326 audit(1724434662.251:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12131 comm="syz.1.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f48a3d79e79 code=0x7ffc0000 [ 353.747137][ T29] audit: type=1326 audit(1724434662.251:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12131 comm="syz.1.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3d79e79 code=0x7ffc0000 [ 353.829005][ T29] audit: type=1326 audit(1724434662.251:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12131 comm="syz.1.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3d79e79 code=0x7ffc0000 [ 353.907065][ T29] audit: type=1326 audit(1724434662.251:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12131 comm="syz.1.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f48a3d79e79 code=0x7ffc0000 [ 353.964070][ T29] audit: type=1326 audit(1724434662.251:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12131 comm="syz.1.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3d79e79 code=0x7ffc0000 [ 354.028323][ T29] audit: type=1326 audit(1724434662.251:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12131 comm="syz.1.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48a3d79e79 code=0x7ffc0000 [ 354.204631][T12155] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 354.229279][T12155] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.279078][T12159] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3040'. [ 354.394252][T12162] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.3041'. [ 354.426264][T12162] openvswitch: netlink: IP tunnel dst address not specified [ 354.448325][T12165] netlink: 'syz.1.3043': attribute type 3 has an invalid length. [ 354.476966][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 354.857017][ T51] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 355.084446][ T51] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 355.115810][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.156068][ T51] usb 1-1: config 0 descriptor?? [ 355.179226][ T51] cp210x 1-1:0.0: cp210x converter detected [ 355.606109][ T51] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 355.638406][ T51] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 355.658222][ T51] usb 1-1: cp210x converter now attached to ttyUSB0 [ 355.842675][ T51] usb 1-1: USB disconnect, device number 23 [ 355.868017][ T51] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 355.907468][ T51] cp210x 1-1:0.0: device disconnected [ 356.457080][ T51] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 356.673111][ T51] usb 5-1: config 0 has no interfaces? [ 356.697821][ T51] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.741796][ T51] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.762773][ T51] usb 5-1: Product: syz [ 356.775280][ T51] usb 5-1: Manufacturer: syz [ 356.798835][ T51] usb 5-1: config 0 descriptor?? [ 357.072028][ T5323] usb 5-1: USB disconnect, device number 27 [ 357.477061][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 357.536701][ T943] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 357.677350][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 357.684974][ T25] usb 3-1: config 0 has no interfaces? [ 357.700313][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 357.730939][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.735862][ T943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.753811][ T25] usb 3-1: config 0 descriptor?? [ 357.785436][ T943] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 357.816833][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.849309][ T943] usb 1-1: config 0 descriptor?? [ 357.894451][ T943] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 358.129578][T12256] netlink: 'syz.4.3084': attribute type 27 has an invalid length. [ 358.368544][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.410680][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.422898][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.431255][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.581511][ T5215] usb 1-1: USB disconnect, device number 24 [ 358.968659][T12256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.097595][T12256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.530358][T12256] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.567158][T12256] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.598713][T12256] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.629387][T12256] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.082776][T12271] usb 3-1: USB disconnect, device number 23 [ 360.428932][T12311] mmap: syz.1.3101 (12311): VmData 37351424 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 360.747997][T12315] pim6reg1: entered promiscuous mode [ 360.753346][T12315] pim6reg1: entered allmulticast mode [ 361.547127][ T5312] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 361.757028][ T5312] usb 1-1: Using ep0 maxpacket: 16 [ 361.764623][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.790658][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.818837][ T5312] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 361.848135][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.877890][ T5312] usb 1-1: config 0 descriptor?? [ 362.337386][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.371276][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.445864][ T5312] hid (null): unknown global tag 0xd [ 362.467107][ T5312] hid (null): unknown global tag 0xd [ 362.474284][ T5312] hid (null): report_id 40203 is invalid [ 362.474310][ T5312] hid (null): invalid report_size -1862471209 [ 362.474349][ T5312] hid (null): invalid report_size -1217885453 [ 362.474917][ T5312] hid (null): unknown global tag 0x36 [ 362.706831][ T5312] usb 1-1: string descriptor 0 read error: -71 [ 362.759496][ T5312] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 362.784018][ T5312] letsketch 0003:6161:4D15.001F: probe with driver letsketch failed with error -32 [ 362.821340][ T5312] usb 1-1: USB disconnect, device number 25 [ 363.430162][T12397] netlink: 544 bytes leftover after parsing attributes in process `syz.1.3136'. [ 363.619861][T12285] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 363.652595][T12285] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 363.674804][T12285] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 363.696691][T12285] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 363.727612][T12408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3143'. [ 363.746269][T12285] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 363.769769][T12410] netlink: 'syz.0.3142': attribute type 9 has an invalid length. [ 363.839209][T12410] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3142'. [ 363.917070][ T5312] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 363.985624][T12413] netlink: 'syz.0.3142': attribute type 9 has an invalid length. [ 364.024151][T12413] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3142'. [ 364.107152][T12285] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 364.131894][ T5312] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 364.156625][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.175008][ T5312] usb 4-1: Product: syz [ 364.180948][ T5312] usb 4-1: Manufacturer: syz [ 364.185800][ T5312] usb 4-1: SerialNumber: syz [ 364.211381][ T5312] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 364.236281][T12277] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 364.329401][T12285] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 364.343751][T12285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.367892][T12285] usb 2-1: config 0 descriptor?? [ 364.386196][T12285] cp210x 2-1:0.0: cp210x converter detected [ 364.406868][T12271] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 364.609658][T12271] usb 5-1: Using ep0 maxpacket: 32 [ 364.629717][ T51] usb 4-1: USB disconnect, device number 31 [ 364.650273][T12271] usb 5-1: config 0 has no interfaces? [ 364.660386][T12271] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 364.698930][T12271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.729112][T12271] usb 5-1: config 0 descriptor?? [ 364.842352][T12285] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 365.067913][ T5312] usb 5-1: USB disconnect, device number 28 [ 365.087380][T12285] usb 2-1: cp210x converter now attached to ttyUSB0 [ 365.193768][T12432] input: syz0 as /devices/virtual/input/input37 [ 365.311724][T12277] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 365.318531][T12271] usb 2-1: USB disconnect, device number 30 [ 365.338630][T12271] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 365.367533][T12277] ath9k_htc: Failed to initialize the device [ 365.374788][ T51] usb 4-1: ath9k_htc: USB layer deinitialized [ 365.381194][T12271] cp210x 2-1:0.0: device disconnected [ 367.079578][T12478] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3172'. [ 368.272289][T12272] kernel read not supported for file /rfkill (pid: 12272 comm: kworker/0:15) [ 368.427196][ T5228] Bluetooth: hci5: command 0x1003 tx timeout [ 368.436320][ T4608] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 368.787010][T12272] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 368.988601][T12272] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 369.015945][T12272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.042091][T12272] usb 4-1: config 0 descriptor?? [ 369.080870][T12272] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 369.616752][ T51] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 369.830822][ T51] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.882447][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.901466][T12272] gspca_stv06xx: I2C: Read error writing address: -71 [ 369.918609][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.938576][T12272] usb 4-1: USB disconnect, device number 32 [ 369.976700][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.030985][ T51] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.061058][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.097476][ T51] usb 3-1: config 0 descriptor?? [ 370.137503][T12538] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 370.609151][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 370.630109][ T51] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 370.678830][ T51] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 370.727066][ T51] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 370.808187][T12567] bridge0: entered allmulticast mode [ 370.887855][T12277] usb 3-1: USB disconnect, device number 24 [ 371.098997][ T29] audit: type=1326 audit(1724434679.781:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.180881][ T29] audit: type=1326 audit(1724434679.781:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.207348][ T51] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 371.246765][ T29] audit: type=1326 audit(1724434679.851:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.322114][ T29] audit: type=1326 audit(1724434679.851:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.393672][ T29] audit: type=1326 audit(1724434679.851:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.421997][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 371.447108][ T51] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.467027][ T51] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.472003][ T29] audit: type=1326 audit(1724434679.861:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.496200][ T51] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.520527][ T51] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.569481][ T29] audit: type=1326 audit(1724434679.861:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.577245][ T51] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.636712][ T29] audit: type=1326 audit(1724434679.861:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.656670][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.737124][ T29] audit: type=1326 audit(1724434679.861:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.808412][ T29] audit: type=1326 audit(1724434679.861:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12574 comm="syz.0.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 371.894343][T12598] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 371.939853][ T51] usb 4-1: GET_CAPABILITIES returned 0 [ 371.998213][ T51] usbtmc 4-1:16.0: can't read capabilities [ 372.284838][T12271] usb 4-1: USB disconnect, device number 33 [ 372.866899][T12271] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 373.058715][T12271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.108664][T12271] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.131689][T12271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.146812][T12271] usb 5-1: Product: syz [ 373.155516][T12271] usb 5-1: Manufacturer: syz [ 373.165631][T12271] usb 5-1: SerialNumber: syz [ 373.267010][T12269] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 373.472715][T12269] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 373.508997][T12269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.540569][T12269] usb 1-1: Product: syz [ 373.544869][T12269] usb 1-1: Manufacturer: syz [ 373.577245][T12269] usb 1-1: SerialNumber: syz [ 373.602194][T12269] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 373.679343][T12272] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 373.947196][T12277] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 374.040660][T12267] usb 1-1: USB disconnect, device number 26 [ 374.153146][T12277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.169779][T12277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.224110][T12277] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.234571][T12277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.253085][T12271] cdc_ncm 5-1:1.0: failed to get mac address [ 374.253349][T12277] usb 3-1: SerialNumber: syz [ 374.273237][T12271] cdc_ncm 5-1:1.0: bind() failure [ 374.299844][T12271] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 374.327559][T12271] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 374.353427][T12271] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 374.392266][T12271] usb 5-1: USB disconnect, device number 29 [ 374.493796][T12277] usb 3-1: 0:2 : does not exist [ 374.527593][T12277] usb 3-1: USB disconnect, device number 25 [ 374.750710][T12272] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 374.773869][T12272] ath9k_htc: Failed to initialize the device [ 374.788897][T12267] usb 1-1: ath9k_htc: USB layer deinitialized [ 374.847970][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 376.337663][ T51] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 376.537917][ T51] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 376.576918][ T51] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.608666][ T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.661611][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 376.702663][ T51] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.741847][ T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.801353][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 376.838904][T12727] netlink: 'syz.3.3284': attribute type 3 has an invalid length. [ 376.847412][ T51] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.856335][ T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.876198][T12727] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3284'. [ 376.899277][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 377.007372][ T51] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.016320][ T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.057392][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 377.084472][ T51] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.127133][ T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.167045][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 377.174797][ T51] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.225462][ T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.257655][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 377.287173][ T51] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.311744][ T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.368368][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 377.407236][ T51] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.428354][ T51] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.463509][ T51] usb 1-1: config 0 interface 0 has no altsetting 0 [ 377.501256][ T51] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 377.537052][ T51] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 377.545436][ T51] usb 1-1: Product: syz [ 377.558116][ T51] usb 1-1: Manufacturer: syz [ 377.562761][ T51] usb 1-1: SerialNumber: syz [ 377.591756][ T51] usb 1-1: config 0 descriptor?? [ 377.630654][ T51] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 377.994644][ T51] usb 1-1: USB disconnect, device number 27 [ 378.009750][ T51] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 378.827235][T12777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'. [ 378.876854][T12777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'. [ 378.917414][T12277] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 378.989775][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.996997][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.096828][T12786] Bluetooth: hci3: unsupported parameter 64512 [ 379.106721][T12786] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 379.150157][T12277] usb 4-1: Using ep0 maxpacket: 32 [ 379.182420][T12277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.210044][T12277] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72 [ 379.226714][T12277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.234769][T12277] usb 4-1: Product: syz [ 379.264058][T12277] usb 4-1: Manufacturer: syz [ 379.277151][T12277] usb 4-1: SerialNumber: syz [ 379.298039][T12277] usb 4-1: config 0 descriptor?? [ 379.522556][T12277] usb 4-1: unknown interface protocol 0xf, assuming v1 [ 379.560136][T12277] usb 4-1: USB disconnect, device number 34 [ 380.384428][T12820] netlink: 'syz.4.3327': attribute type 3 has an invalid length. [ 380.405545][T12820] netlink: 'syz.4.3327': attribute type 11 has an invalid length. [ 380.429001][T12820] netlink: 128512 bytes leftover after parsing attributes in process `syz.4.3327'. [ 381.446903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 381.487169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 381.557039][ T5312] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 381.746786][ T5312] usb 4-1: Using ep0 maxpacket: 32 [ 381.770674][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.807109][T12285] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 381.814867][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.828231][ T5312] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 381.844935][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.869115][ T5312] usb 4-1: config 0 descriptor?? [ 382.020691][T12285] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 382.030742][T12285] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 382.071368][T12285] usb 2-1: Manufacturer: syz [ 382.088211][T12285] usb 2-1: config 0 descriptor?? [ 382.314224][ T5312] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 382.337202][T12277] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 382.495878][ T5312] ft260 0003:0403:6030.0022: chip code: 5e81 abf2 [ 382.524638][T12285] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 382.551100][T12277] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.577484][T12277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.617334][T12277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 382.628787][T12277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.642424][T12277] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.654419][T12277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.697852][ T5312] ft260 0003:0403:6030.0022: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 382.714931][T12277] usb 3-1: config 0 descriptor?? [ 382.898269][ T5312] ft260 0003:0403:6030.0022: failed to retrieve status: -71, no wakeup [ 382.929570][ T5312] ft260 0003:0403:6030.0022: failed to retrieve status: -71 [ 382.957919][ T5312] ft260 0003:0403:6030.0022: failed to reset I2C controller: -71 [ 383.025954][ T5312] usb 4-1: USB disconnect, device number 35 [ 383.140752][T12285] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 383.173797][T12285] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 383.202397][T12277] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 383.228161][T12285] usb 2-1: USB disconnect, device number 31 [ 383.238624][T12277] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 383.259887][T12277] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 383.400956][T12889] tun0: tun_chr_ioctl cmd 1074025675 [ 383.418225][T12889] tun0: persist enabled [ 383.428189][T12889] tun0: tun_chr_ioctl cmd 1074025675 [ 383.443935][T12889] tun0: persist disabled [ 383.493756][T12285] usb 3-1: USB disconnect, device number 26 [ 384.902215][T12935] vivid-000: ================= START STATUS ================= [ 384.921664][T12935] vivid-000: Radio HW Seek Mode: Bounded [ 384.940013][T12935] vivid-000: Radio Programmable HW Seek: false [ 384.956660][T12935] vivid-000: RDS Rx I/O Mode: Block I/O [ 384.985766][T12935] vivid-000: Generate RBDS Instead of RDS: false [ 385.027476][T12285] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 385.087912][T12935] vivid-000: RDS Reception: true [ 385.092925][T12935] vivid-000: RDS Program Type: 0 inactive [ 385.156399][T12935] vivid-000: RDS PS Name: inactive [ 385.197755][T12935] vivid-000: RDS Radio Text: inactive [ 385.203336][T12935] vivid-000: RDS Traffic Announcement: false inactive [ 385.218902][T12285] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 385.240413][T12285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 385.259232][T12285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 385.276684][T12935] vivid-000: RDS Traffic Program: false inactive [ 385.283090][T12935] vivid-000: RDS Music: false inactive [ 385.295623][T12285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.334618][T12285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 385.353593][T12935] vivid-000: ================== END STATUS ================== [ 385.359315][T12285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 385.426631][T12285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.460957][T12285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 385.491012][T12285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 385.542634][T12285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.568486][T12285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 385.583995][T12285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 385.625739][T12285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.654786][T12285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 385.677150][T12285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 385.736688][T12285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.764896][T12285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 385.774456][T12285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 385.845084][T12285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.853745][T12285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 385.873401][T12285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 385.918781][T12285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.950746][T12285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 385.960353][T12285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 385.997410][T12285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 386.035154][T12285] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 386.065055][T12285] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 386.089110][T12285] usb 5-1: Product: syz [ 386.093321][T12285] usb 5-1: Manufacturer: syz [ 386.124855][T12285] usb 5-1: SerialNumber: syz [ 386.138838][T12285] usb 5-1: config 0 descriptor?? [ 386.210205][T12285] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 386.598746][T12267] usb 5-1: USB disconnect, device number 30 [ 386.619438][T12267] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 387.388197][T12277] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 387.510452][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 387.510469][ T29] audit: type=1326 audit(1724434696.192:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12980 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48b779e79 code=0x7ffc0000 [ 387.587116][T12277] usb 4-1: Using ep0 maxpacket: 16 [ 387.605684][T12277] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 387.607656][ T29] audit: type=1326 audit(1724434696.192:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12980 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48b779e79 code=0x7ffc0000 [ 387.636609][T12277] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.687095][T12277] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.692075][ T29] audit: type=1326 audit(1724434696.222:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12980 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fe48b779e79 code=0x7ffc0000 [ 387.716012][T12277] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.737083][T12277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.775803][T12277] usb 4-1: Product: syz [ 387.784588][ T29] audit: type=1326 audit(1724434696.222:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12980 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48b779e79 code=0x7ffc0000 [ 387.785914][T12277] usb 4-1: Manufacturer: syz [ 387.853586][T12277] usb 4-1: SerialNumber: syz [ 387.870315][ T29] audit: type=1326 audit(1724434696.222:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12980 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48b779e79 code=0x7ffc0000 [ 387.946129][ T29] audit: type=1326 audit(1724434696.232:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12980 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fe48b779e79 code=0x7ffc0000 [ 388.001467][ T29] audit: type=1326 audit(1724434696.232:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12980 comm="syz.2.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48b779e79 code=0x7ffc0000 [ 388.151852][T13002] loop2: detected capacity change from 0 to 7 [ 388.192652][T13002] Dev loop2: unable to read RDB block 7 [ 388.207255][T13002] loop2: unable to read partition table [ 388.223854][T13002] loop2: partition table beyond EOD, truncated [ 388.238580][T13002] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 388.290529][T12277] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 388.487267][ T5312] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 388.696679][ T5312] usb 2-1: Using ep0 maxpacket: 32 [ 388.713064][ T5312] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 388.739277][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.765884][ T5312] usb 2-1: Product: syz [ 388.779692][ T5312] usb 2-1: Manufacturer: syz [ 388.793662][ T5312] usb 2-1: SerialNumber: syz [ 388.813630][ T5312] usb 2-1: config 0 descriptor?? [ 388.824190][ T5312] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 389.040309][T12277] usb 2-1: USB disconnect, device number 32 [ 389.445834][T13029] netlink: 'syz.4.3418': attribute type 10 has an invalid length. [ 389.471041][T13029] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 389.487169][ T5312] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 389.696757][ T5312] usb 3-1: Using ep0 maxpacket: 8 [ 389.704387][ T5312] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 389.727785][ T5312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.767239][ T5312] usb 3-1: config 0 has no interface number 0 [ 389.780076][ T5312] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 389.812068][ T5312] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.862461][ T5312] usb 3-1: config 0 interface 52 has no altsetting 0 [ 389.892286][ T5312] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 389.930582][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 389.974167][ T5312] usb 3-1: Product: syz [ 389.994303][ T5312] usb 3-1: SerialNumber: syz [ 390.016342][ T5312] usb 3-1: config 0 descriptor?? [ 390.072417][T13043] Bluetooth: hci3: unsupported parameter 64512 [ 390.093649][T13043] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 390.145423][T12277] usb 4-1: USB disconnect, device number 36 [ 390.248965][ T5312] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input39 [ 390.571889][T13057] netlink: 'syz.4.3431': attribute type 1 has an invalid length. [ 390.611614][T13057] netlink: 9320 bytes leftover after parsing attributes in process `syz.4.3431'. [ 390.617420][ T5312] usb 3-1: USB disconnect, device number 27 [ 390.631650][T13057] netlink: 'syz.4.3431': attribute type 1 has an invalid length. [ 390.653454][T13057] netlink: 'syz.4.3431': attribute type 2 has an invalid length. [ 390.991789][T12287] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 391.221633][T12287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.239981][T12287] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 391.274728][T12287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.304583][T12287] usb 2-1: config 0 descriptor?? [ 391.529565][T12287] usb 2-1: string descriptor 0 read error: -71 [ 391.535973][T12287] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 391.571699][T12287] usb 2-1: No valid video chain found. [ 391.587938][T12287] usb 2-1: USB disconnect, device number 33 [ 392.287573][T13110] netlink: 'syz.3.3456': attribute type 29 has an invalid length. [ 392.335717][T13110] netlink: 'syz.3.3456': attribute type 29 has an invalid length. [ 392.370749][T13110] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3456'. [ 392.985738][T13135] netlink: 'syz.2.3467': attribute type 21 has an invalid length. [ 393.023637][T12287] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 393.036747][T13135] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3467'. [ 393.045897][T13135] netlink: 'syz.2.3467': attribute type 5 has an invalid length. [ 393.115427][T13135] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3467'. [ 393.229880][T12287] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 393.249088][T12287] usb 4-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 393.280632][T12287] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 393.312243][T12287] usb 4-1: config 0 has no interface number 0 [ 393.322057][T13141] overlayfs: upper fs does not support tmpfile. [ 393.326669][T12287] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 393.357376][T12287] usb 4-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 393.395737][T12287] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 393.422524][T12287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.447046][T12287] usb 4-1: Product: syz [ 393.451433][T12287] usb 4-1: Manufacturer: syz [ 393.497340][T12287] usb 4-1: SerialNumber: syz [ 393.513786][T12287] usb 4-1: config 0 descriptor?? [ 393.537925][T12287] cdc_ether 4-1:0.185: skipping garbage [ 393.562886][T12287] cdc_ether 4-1:0.185: skipping garbage [ 393.597054][T12287] cdc_ether 4-1:0.185: skipping garbage [ 393.612930][T12287] usb 4-1: bad CDC descriptors [ 393.630558][T12287] usb 4-1: unsupported MDLM descriptors [ 393.893219][T12277] usb 4-1: USB disconnect, device number 37 [ 393.900326][T13162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3477'. [ 394.183953][T13170] bridge0: port 3(vlan0) entered blocking state [ 394.230627][T13170] bridge0: port 3(vlan0) entered disabled state [ 394.290152][T13170] vlan0: entered allmulticast mode [ 394.323950][T13170] xfrm0: entered allmulticast mode [ 394.361959][T13170] vlan0: entered promiscuous mode [ 394.381694][T13170] xfrm0: entered promiscuous mode [ 394.466106][T13170] bridge0: port 3(vlan0) entered blocking state [ 394.472661][T13170] bridge0: port 3(vlan0) entered forwarding state [ 395.684837][T13213] netlink: 'syz.1.3500': attribute type 2 has an invalid length. [ 395.903539][T13219] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3504'. [ 395.947250][T13219] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3504'. [ 396.345003][T13234] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 396.622311][ T29] audit: type=1326 audit(1724434705.282:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13241 comm="syz.1.3514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48a3d79e79 code=0x0 [ 397.359213][T13261] bridge0: port 1(team0) entered blocking state [ 397.386814][T13261] bridge0: port 1(team0) entered disabled state [ 397.393390][T13261] team0: entered allmulticast mode [ 397.409024][T13261] team_slave_0: entered allmulticast mode [ 397.415646][T13261] team_slave_1: entered allmulticast mode [ 397.466246][T13261] team0: entered promiscuous mode [ 397.486833][T13261] team_slave_0: entered promiscuous mode [ 397.507015][T13264] Bluetooth: hci3: unsupported parameter 64512 [ 397.514944][T13261] team_slave_1: entered promiscuous mode [ 397.536151][T13264] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 397.537577][T13261] bridge0: port 1(team0) entered blocking state [ 397.550785][T13261] bridge0: port 1(team0) entered forwarding state [ 398.031506][T13281] netlink: 'syz.2.3528': attribute type 1 has an invalid length. [ 398.110303][T13281] netlink: 3440 bytes leftover after parsing attributes in process `syz.2.3528'. [ 398.235660][T13281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3528'. [ 398.255147][T13281] netlink: 'syz.2.3528': attribute type 1 has an invalid length. [ 398.307366][T13281] netlink: 5888 bytes leftover after parsing attributes in process `syz.2.3528'. [ 398.686701][T12272] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 398.783985][T13307] sctp: [Deprecated]: syz.2.3537 (pid 13307) Use of int in max_burst socket option deprecated. [ 398.783985][T13307] Use struct sctp_assoc_value instead [ 398.906895][T12272] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 398.919417][T12272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.935026][T12272] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.958149][T12272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.970963][T12272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.990488][T12272] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.011158][T12272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.028244][T12272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.048022][T12272] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.096706][T12272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.104756][T12272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.114306][T12272] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.135526][T12272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.143642][T12272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.160259][T12272] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.198298][T12272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.214363][T12272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.235020][T12272] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.255829][T12272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.274117][T12272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.286388][T12272] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.308845][T12272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.326853][T12272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.336045][T12272] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.362646][T12272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.402251][T12272] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 399.427228][T12272] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 399.435900][T12272] usb 4-1: Product: syz [ 399.449241][T12272] usb 4-1: Manufacturer: syz [ 399.471748][T12272] usb 4-1: SerialNumber: syz [ 399.478859][T12272] usb 4-1: config 0 descriptor?? [ 399.488160][T12272] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 399.837537][T12277] usb 4-1: USB disconnect, device number 38 [ 399.857698][T12277] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 400.737304][T13352] bridge0: port 3(team0) entered blocking state [ 400.741301][T13354] binder: 13353:13354 unknown command 1969368878 [ 400.774219][T13352] bridge0: port 3(team0) entered disabled state [ 400.776773][T13354] binder: 13353:13354 ioctl c0306201 200001c0 returned -22 [ 400.798280][T13352] team0: entered allmulticast mode [ 400.803437][T13352] team_slave_0: entered allmulticast mode [ 400.840740][T13352] team_slave_1: entered allmulticast mode [ 400.877355][T13352] team0: entered promiscuous mode [ 400.897144][T13352] team_slave_0: entered promiscuous mode [ 400.913365][T13352] team_slave_1: entered promiscuous mode [ 401.707614][T13388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3574'. [ 402.576769][T12272] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 402.667365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 402.777294][T12272] usb 4-1: Using ep0 maxpacket: 32 [ 402.815467][T12272] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 402.849507][T12272] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 402.867745][T13424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3590'. [ 402.876663][T12272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.903640][T12272] usb 4-1: Product: syz [ 402.923973][T12272] usb 4-1: Manufacturer: syz [ 402.946049][T12272] usb 4-1: SerialNumber: syz [ 402.969550][T12272] usb 4-1: config 0 descriptor?? [ 402.987443][T13415] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.007139][T13426] sctp: [Deprecated]: syz.4.3591 (pid 13426) Use of int in max_burst socket option. [ 403.007139][T13426] Use struct sctp_assoc_value instead [ 403.011913][T12272] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 403.378838][T12267] usb 4-1: USB disconnect, device number 39 [ 403.678006][T13436] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 403.688422][ T29] audit: type=1400 audit(1724434712.372:526): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=13435 comm="syz.0.3595" saddr=172.20.20.187 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 403.766893][T13438] tipc: Enabling of bearer rejected, failed to enable media [ 403.876658][T13440] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 404.269156][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'. [ 404.543382][T13463] bridge0: port 4(team0) entered blocking state [ 404.577286][T13463] bridge0: port 4(team0) entered disabled state [ 404.583770][T13463] team0: entered allmulticast mode [ 404.637538][T13463] team_slave_1: entered allmulticast mode [ 404.664746][T13463] team0: entered promiscuous mode [ 404.693206][T13463] team_slave_0: entered promiscuous mode [ 404.718894][T13463] team_slave_1: entered promiscuous mode [ 404.751362][T13463] bridge0: port 4(team0) entered blocking state [ 404.757812][T13463] bridge0: port 4(team0) entered forwarding state [ 405.069691][ T29] audit: type=1326 audit(1724434713.752:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13475 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 405.091350][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.176770][ T29] audit: type=1326 audit(1724434713.752:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13475 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 405.250647][ T29] audit: type=1326 audit(1724434713.752:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13475 comm="syz.0.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5828179e79 code=0x7ffc0000 [ 405.272357][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.316756][ T29] audit: type=1326 audit(1724434713.752:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13475 comm="syz.0.3613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x0 [ 405.337836][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.882334][T13509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3628'. [ 405.908351][T13509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3628'. [ 406.326904][T12272] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 406.530376][T12267] kernel write not supported for file /sequencer (pid: 12267 comm: kworker/0:10) [ 406.549309][T12272] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 406.566764][T12272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.600919][T12272] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 406.616702][T12272] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 406.634958][T12272] usb 2-1: Manufacturer: syz [ 406.655889][T12272] usb 2-1: config 0 descriptor?? [ 406.798874][T12272] rc_core: IR keymap rc-hauppauge not found [ 406.806650][T12272] Registered IR keymap rc-empty [ 406.812393][T12272] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 406.830476][T12277] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 406.849421][T12272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 406.957754][T13513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.983930][T13513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.010896][T12272] usb 2-1: USB disconnect, device number 34 [ 407.029132][T12277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.057255][T12277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.079809][T12277] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 407.100131][T12277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.119299][T12277] usb 5-1: config 0 descriptor?? [ 407.357967][T13547] bridge0: port 3(team0) entered blocking state [ 407.379484][T13547] bridge0: port 3(team0) entered disabled state [ 407.397057][T13547] team0: entered allmulticast mode [ 407.411723][T13547] team_slave_0: entered allmulticast mode [ 407.427308][T13547] team_slave_1: entered allmulticast mode [ 407.450355][T13547] team0: entered promiscuous mode [ 407.467735][T13547] team_slave_0: entered promiscuous mode [ 407.484641][T13547] team_slave_1: entered promiscuous mode [ 407.510311][T13547] bridge0: port 3(team0) entered blocking state [ 407.516943][T13547] bridge0: port 3(team0) entered forwarding state [ 407.558254][T12277] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 407.580769][T12277] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 407.620425][T12277] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0024/input/input41 [ 407.678759][T12277] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 407.888964][ T5312] usb 5-1: USB disconnect, device number 31 [ 408.468048][T12267] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 408.679586][T12267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.701075][T12267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.729851][T12267] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.766694][T12267] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 408.796349][T12267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.827156][T12272] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 408.846117][T12267] usb 2-1: config 0 descriptor?? [ 409.025758][T12272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.036495][T12272] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 409.056922][T12272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.086041][T13560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.096131][T12272] usb 5-1: config 0 descriptor?? [ 409.120668][T12272] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 409.142901][T13560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.144642][T12272] usb 5-1: No valid video chain found. [ 409.194389][T13560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.233949][T13560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.282627][T12267] usbhid 2-1:0.0: can't add hid device: -71 [ 409.299190][T12267] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 409.349296][T12267] usb 2-1: USB disconnect, device number 35 [ 409.379924][T12271] usb 5-1: USB disconnect, device number 32 [ 409.946978][T12267] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 410.027076][ T5228] Bluetooth: hci4: command 0x0405 tx timeout [ 410.176549][T12267] usb 2-1: Using ep0 maxpacket: 8 [ 410.188728][T12267] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.216890][T12267] usb 2-1: config 0 has no interface number 0 [ 410.227915][T12267] usb 2-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 410.265651][T12267] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 256 [ 410.286374][T12267] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.326709][T12267] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.350559][T12267] usb 2-1: config 0 interface 1 has no altsetting 0 [ 410.363230][T12267] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 410.396771][T12267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.436442][T12267] usb 2-1: config 0 descriptor?? [ 410.447137][T12267] hso 2-1:0.1: Failed to find BULK OUT ep [ 410.519624][T13594] syz.4.3665[13594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.519779][T13594] syz.4.3665[13594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.588733][T13594] tipc: Enabling of bearer rejected, failed to enable media [ 410.732666][T12267] usb 2-1: USB disconnect, device number 36 [ 410.936764][T13602] dccp_v6_rcv: dropped packet with invalid checksum [ 411.527595][T13618] batadv_slave_1: entered promiscuous mode [ 411.650325][T13616] batadv_slave_1: left promiscuous mode [ 411.767093][T12277] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 411.946704][T12272] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 411.967164][T12277] usb 3-1: Using ep0 maxpacket: 8 [ 411.976231][T12277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.997109][T12277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 412.014881][T12277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 412.039302][T12277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 412.063657][T12277] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 412.085153][T12277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.121975][T12277] hub 3-1:1.0: bad descriptor, ignoring hub [ 412.134048][T12277] hub 3-1:1.0: probe with driver hub failed with error -5 [ 412.136793][T12272] usb 2-1: Using ep0 maxpacket: 8 [ 412.158616][T12277] cdc_wdm 3-1:1.0: skipping garbage [ 412.168690][T12272] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 412.173808][T12277] cdc_wdm 3-1:1.0: skipping garbage [ 412.184880][T12272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.198701][T12277] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 412.213772][T12277] cdc_wdm 3-1:1.0: Unknown control protocol [ 412.222559][T12272] usb 2-1: config 0 descriptor?? [ 412.244596][T12272] usb 2-1: unknown interface protocol 0x3f, assuming v1 [ 412.261117][T12272] usb 2-1: cannot find UAC_HEADER [ 412.322587][T12272] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 412.544694][T12267] usb 2-1: USB disconnect, device number 37 [ 412.627528][T12272] usb 3-1: USB disconnect, device number 28 [ 412.707158][T12277] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 412.904192][T12277] usb 5-1: Using ep0 maxpacket: 16 [ 412.926255][T12277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.966697][T12277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.987269][T12277] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 412.996351][T12277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.027853][T12277] usb 5-1: config 0 descriptor?? [ 413.033072][T12287] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 413.257443][T12287] usb 3-1: Using ep0 maxpacket: 8 [ 413.288676][T12287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.306658][T12287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.357217][T12287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 413.397150][T12287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 413.437202][T12287] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 413.466631][T12287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.481322][T12277] creative-sb0540 0003:041E:3100.0025: item fetching failed at offset 2/5 [ 413.510275][T12287] hub 3-1:1.0: bad descriptor, ignoring hub [ 413.516251][T12287] hub 3-1:1.0: probe with driver hub failed with error -5 [ 413.527252][T12277] creative-sb0540 0003:041E:3100.0025: parse failed [ 413.557177][T12277] creative-sb0540 0003:041E:3100.0025: probe with driver creative-sb0540 failed with error -22 [ 413.568539][T12287] cdc_wdm 3-1:1.0: skipping garbage [ 413.573779][T12287] cdc_wdm 3-1:1.0: skipping garbage [ 413.599891][T12287] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 413.616995][T12287] cdc_wdm 3-1:1.0: Unknown control protocol [ 413.720270][T12272] usb 5-1: USB disconnect, device number 33 [ 413.927506][T12287] usb 3-1: USB disconnect, device number 29 [ 414.071360][T13648] bridge0: port 5(gretap0) entered blocking state [ 414.098464][T13648] bridge0: port 5(gretap0) entered disabled state [ 414.148298][T13648] gretap0: entered allmulticast mode [ 414.157153][T13648] gretap0: entered promiscuous mode [ 414.177779][T13648] bridge0: port 5(gretap0) entered blocking state [ 414.184337][T13648] bridge0: port 5(gretap0) entered forwarding state [ 414.219057][T13649] gretap0: left allmulticast mode [ 414.247101][T13649] gretap0: left promiscuous mode [ 414.254137][T13649] bridge0: port 5(gretap0) entered disabled state [ 415.926895][T12272] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 416.133577][T12272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.154399][T12272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.187320][T12272] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 416.196930][T12272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 416.227143][T12272] usb 2-1: SerialNumber: syz [ 416.458597][T12272] usb 2-1: 0:2 : does not exist [ 416.503906][T12272] usb 2-1: USB disconnect, device number 38 [ 417.842671][T13764] xt_bpf: check failed: parse error [ 418.325322][T13786] netlink: 198116 bytes leftover after parsing attributes in process `syz.3.3748'. [ 418.907480][T13808] sctp: [Deprecated]: syz.3.3757 (pid 13808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.907480][T13808] Use struct sctp_sack_info instead [ 419.857140][T12285] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 420.061191][T12285] usb 2-1: Using ep0 maxpacket: 8 [ 420.079336][T12285] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.097199][T12285] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.117947][T12285] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.137088][T12285] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.161232][T12285] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.182902][T12285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.426255][T12285] usb 2-1: GET_CAPABILITIES returned 0 [ 420.443933][T12285] usbtmc 2-1:16.0: can't read capabilities [ 420.655951][T12285] usb 2-1: USB disconnect, device number 39 [ 420.912002][T13851] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 421.947956][T12277] kernel write not supported for file bpf-prog (pid: 12277 comm: kworker/1:13) [ 422.383455][ T29] audit: type=1326 audit(1724434731.062:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.0.3796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5828179e79 code=0x0 [ 422.431548][T13905] netlink: 'syz.1.3797': attribute type 3 has an invalid length. [ 422.466689][T13905] netlink: 'syz.1.3797': attribute type 4 has an invalid length. [ 422.474455][T13905] netlink: 'syz.1.3797': attribute type 7 has an invalid length. [ 422.519534][T13905] netlink: 'syz.1.3797': attribute type 8 has an invalid length. [ 422.556271][T13905] netlink: 'syz.1.3797': attribute type 7 has an invalid length. [ 422.585693][T13905] netlink: 198180 bytes leftover after parsing attributes in process `syz.1.3797'. [ 422.930295][T13915] gretap0: entered promiscuous mode [ 422.946534][T13915] vlan0: entered promiscuous mode [ 422.961252][T13915] vlan0: entered allmulticast mode [ 422.975539][T13915] gretap0: entered allmulticast mode [ 424.607328][T12285] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 424.753167][ T29] audit: type=1804 audit(1724434733.432:532): pid=13974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3824" name="/newroot/640/file0/bus" dev="hugetlbfs" ino=46227 res=1 errno=0 [ 424.815135][T12285] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 424.832828][T12285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.875252][T12285] usb 3-1: config 0 descriptor?? [ 425.167483][T12285] kaweth 3-1:0.0: Firmware present in device. [ 425.341224][T12285] kaweth 3-1:0.0: Statistics collection: 0 [ 425.357361][T12285] kaweth 3-1:0.0: Multicast filter limit: 0 [ 425.370388][T12285] kaweth 3-1:0.0: MTU: 0 [ 425.379157][T12285] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 425.958908][T12285] kaweth 3-1:0.0: Error setting receive filter [ 425.965286][T12285] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 425.992961][T12285] usb 3-1: USB disconnect, device number 30 [ 427.053000][T14014] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3836'. [ 427.649134][T14063] netlink: 'syz.2.3846': attribute type 2 has an invalid length. [ 427.839612][T14068] loop2: detected capacity change from 0 to 7 [ 427.887214][T14068] Dev loop2: unable to read RDB block 7 [ 427.892844][T14068] loop2: AHDI p1 p3 [ 427.913815][T14068] loop2: partition table partially beyond EOD, truncated [ 427.929903][T14068] loop2: p1 start 2048 is beyond EOD, truncated [ 428.367774][T12287] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 428.501977][ T4608] Bluetooth: hci4: link tx timeout [ 428.508409][ T4608] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 428.519839][ T4608] Bluetooth: hci4: link tx timeout [ 428.524996][ T4608] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 428.569106][T12287] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.595051][T12287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.606555][T12287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.620053][T12287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 428.633074][T12287] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.642186][T12287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.652930][T12287] usb 2-1: config 0 descriptor?? [ 428.664861][T14079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 428.918155][T14106] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 429.121089][T12287] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 429.147451][T12287] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 429.155019][T12287] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 429.197140][T12287] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 429.204596][T12287] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 429.232394][T12287] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 429.246509][T12287] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 429.264989][ T5222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 429.277217][ T5222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.287976][ T5222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.300978][ T5222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.309589][ T5222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 429.320742][ T5222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 429.337175][T12287] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 429.354828][T12287] usb 2-1: USB disconnect, device number 40 [ 430.146431][T14111] chnl_net:caif_netlink_parms(): no params data found [ 430.587096][ T5222] Bluetooth: hci4: command 0x0405 tx timeout [ 430.607102][T12287] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 430.662114][T14111] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.670693][T14111] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.678603][T14111] bridge_slave_0: entered allmulticast mode [ 430.686103][T14111] bridge_slave_0: entered promiscuous mode [ 430.695387][T14111] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.703085][T14111] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.711282][T14111] bridge_slave_1: entered allmulticast mode [ 430.718750][T14111] bridge_slave_1: entered promiscuous mode [ 430.812570][T12287] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 430.836232][T12287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.856507][T12287] usb 4-1: Product: syz [ 430.875982][T12287] usb 4-1: Manufacturer: syz [ 430.880440][T14111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.895409][T12287] usb 4-1: SerialNumber: syz [ 430.908385][T12287] usb 4-1: config 0 descriptor?? [ 430.920008][T14111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.084294][T14111] team0: Port device team_slave_0 added [ 431.119781][T14111] team0: Port device team_slave_1 added [ 431.259114][T14111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.282780][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.343863][T14111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.374338][T12287] usb 4-1: Firmware: major: 0, minor: 102, hardware type: UNKNOWN (102) [ 431.375887][T14111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.440630][T14111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.477438][ T5222] Bluetooth: hci5: command tx timeout [ 431.496455][T14111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.575825][T12287] usb 4-1: failed to fetch extended address, random address set [ 431.584981][T12287] usb 4-1: atusb_probe: initialization failed, error = -524 [ 431.603108][T12287] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 431.627948][T12287] usb 4-1: USB disconnect, device number 40 [ 431.721020][T14111] hsr_slave_0: entered promiscuous mode [ 431.802224][T14111] hsr_slave_1: entered promiscuous mode [ 431.809335][T14111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.827124][T14111] Cannot create hsr debugfs directory [ 432.668663][ T5222] Bluetooth: hci4: command 0x0405 tx timeout [ 432.967137][T14543] input: syz1 as /devices/virtual/input/input42 [ 433.142141][T14111] bond0: (slave netdevsim0): Releasing backup interface [ 433.195968][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 433.383488][T14563] veth1_macvtap: left promiscuous mode [ 433.399581][T14563] macsec0: entered promiscuous mode [ 433.405619][T14563] macsec0: entered allmulticast mode [ 433.551255][T14569] veth1_macvtap: entered promiscuous mode [ 433.557643][ T5228] Bluetooth: hci5: command tx timeout [ 433.567131][T14569] veth1_macvtap: entered allmulticast mode [ 433.603842][T14569] macsec0: left promiscuous mode [ 433.752500][T14111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.793650][T14111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.830795][T14111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.838778][T12287] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 433.869998][T14111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.047697][T12287] usb 4-1: Using ep0 maxpacket: 8 [ 434.054931][T12287] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.082713][T14111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.097106][T12287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.120223][T12287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.157209][T12287] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.160360][T14601] loop2: detected capacity change from 0 to 7 [ 434.171748][T14111] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.198532][T12287] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.218130][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.225315][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.238635][T12287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.262957][T14601] Dev loop2: unable to read RDB block 7 [ 434.285011][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.292281][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.308556][T14601] loop2: unable to read partition table [ 434.314513][T14601] loop2: partition table beyond EOD, truncated [ 434.342979][T14601] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 434.517482][T12287] usb 4-1: GET_CAPABILITIES returned 0 [ 434.523049][T12287] usbtmc 4-1:16.0: can't read capabilities [ 434.773230][T12267] usb 4-1: USB disconnect, device number 41 [ 434.773338][T14111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.972830][T14639] netlink: 'syz.1.3916': attribute type 29 has an invalid length. [ 435.020116][T14639] netlink: 'syz.1.3916': attribute type 29 has an invalid length. [ 435.305359][T12267] kernel write not supported for file /vcsa1 (pid: 12267 comm: kworker/0:10) [ 435.473214][T14111] veth0_vlan: entered promiscuous mode [ 435.520366][T14111] veth1_vlan: entered promiscuous mode [ 435.627583][T14111] veth0_macvtap: entered promiscuous mode [ 435.627920][ T5228] Bluetooth: hci5: command tx timeout [ 435.678269][T14111] veth1_macvtap: entered promiscuous mode [ 435.697466][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.713832][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.723855][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.734534][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.745643][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.759513][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.781472][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.826831][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.866700][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.897793][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.926816][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.951047][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.988469][T14111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.020913][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.031857][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.055460][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.087208][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.118931][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.129814][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.177697][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.205638][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.227819][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.246791][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.261995][T14111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.296518][T14111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.322059][T14111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.367287][T14111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.396364][T14111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.406473][T14111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.447788][T14111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.694526][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.729198][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.750019][T14705] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.3936'. [ 436.808566][T14705] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 436.829359][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.866659][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.707067][ T5228] Bluetooth: hci5: command tx timeout [ 438.636793][T12272] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 438.648258][T14810] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 438.856897][T12272] usb 5-1: Using ep0 maxpacket: 16 [ 438.866714][T12272] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 438.890376][T12272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.926875][T12272] usb 5-1: Product: syz [ 438.931095][T12272] usb 5-1: Manufacturer: syz [ 438.952867][T12272] usb 5-1: SerialNumber: syz [ 438.987221][T12272] usb 5-1: config 0 descriptor?? [ 439.067592][T12285] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 439.207328][T12272] speedtch 5-1:0.0: speedtch_bind: wrong device class 68 [ 439.215248][T12272] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 439.270339][T12272] usb 5-1: USB disconnect, device number 34 [ 439.293622][T12285] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 439.314171][T12285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.347948][T12285] usb 1-1: Product: syz [ 439.363084][T12285] usb 1-1: Manufacturer: syz [ 439.373134][T12285] usb 1-1: SerialNumber: syz [ 439.408292][T12285] usb 1-1: config 0 descriptor?? [ 439.921753][T12285] usb 1-1: Firmware: major: 202, minor: 255, hardware type: RZUSB (3) [ 440.087646][ T5312] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 440.133799][T12285] usb 1-1: failed to fetch extended address, random address set [ 440.161999][T14872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3982'. [ 440.203314][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3982'. [ 440.299302][ T5312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 440.317396][T12285] usb 1-1: USB disconnect, device number 28 [ 440.327330][ T5312] usb 2-1: config 1 has no interface number 0 [ 440.333482][ T5312] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.397098][ T5312] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 440.420977][ T5312] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 206 [ 440.433639][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.433736][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.477677][ T5312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.488741][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.497702][ T5312] usb 2-1: Product: syz [ 440.501899][ T5312] usb 2-1: Manufacturer: syz [ 440.506512][ T5312] usb 2-1: SerialNumber: syz [ 440.634682][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 440.661452][T14903] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 440.725998][T14859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 441.368189][T14859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 441.390051][ T5312] cdc_ncm 2-1:1.1: bind() failure [ 441.594679][T12267] usb 2-1: USB disconnect, device number 41 [ 441.994062][T14952] syzkaller1: entered promiscuous mode [ 442.015801][T14952] syzkaller1: entered allmulticast mode [ 442.447227][ T51] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 442.510351][ T5222] Bluetooth: hci1: command 0x0406 tx timeout [ 442.647235][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 442.658353][ T51] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 442.687227][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.708710][ T51] usb 1-1: config 0 descriptor?? [ 443.634103][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.829673][ T51] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 443.860129][ T51] asix 1-1:0.0: probe with driver asix failed with error -71 [ 443.912064][ T51] usb 1-1: USB disconnect, device number 29 [ 444.029255][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.269307][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.285244][T12267] kernel write not supported for file /sysvipc/msg (pid: 12267 comm: kworker/0:10) [ 444.428423][ T5222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 444.441219][ T5222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 444.459117][ T5222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.477262][ T5222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 444.488555][ T5222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 444.495987][ T5222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.627507][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.311857][ T35] bridge_slave_1: left allmulticast mode [ 445.334996][ T35] bridge_slave_1: left promiscuous mode [ 445.356980][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.417797][ T35] bridge_slave_0: left allmulticast mode [ 445.423841][ T35] bridge_slave_0: left promiscuous mode [ 445.463366][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.747052][T12277] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 445.947159][T12277] usb 1-1: Using ep0 maxpacket: 8 [ 445.969927][T12277] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 446.008344][T12277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.042252][T12277] usb 1-1: config 0 descriptor?? [ 446.118205][T12277] usb 1-1: unknown interface protocol 0x3f, assuming v1 [ 446.155791][T12277] usb 1-1: cannot find UAC_HEADER [ 446.273189][T12277] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 446.531200][ T51] usb 1-1: USB disconnect, device number 30 [ 446.588014][ T5228] Bluetooth: hci5: command tx timeout [ 447.152566][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.177417][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.209114][ T35] bond0 (unregistering): Released all slaves [ 447.669519][T15058] chnl_net:caif_netlink_parms(): no params data found [ 448.202616][T15058] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.218798][T15058] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.230718][T15058] bridge_slave_0: entered allmulticast mode [ 448.249674][T15058] bridge_slave_0: entered promiscuous mode [ 448.301948][ T35] hsr_slave_0: left promiscuous mode [ 448.313647][ T35] hsr_slave_1: left promiscuous mode [ 448.323762][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.336458][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.355367][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.382308][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.437128][T12268] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 448.496617][ T35] veth1_macvtap: left promiscuous mode [ 448.521238][ T35] veth0_macvtap: left promiscuous mode [ 448.538478][ T35] veth1_vlan: left promiscuous mode [ 448.543864][ T35] veth0_vlan: left promiscuous mode [ 448.654892][T12268] usb 2-1: Using ep0 maxpacket: 32 [ 448.663118][T12268] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.673971][ T5228] Bluetooth: hci5: command tx timeout [ 448.695897][T12268] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 448.717524][T12268] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 448.727370][T12268] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.739080][T12268] usb 2-1: config 1 interface 1 has no altsetting 0 [ 448.758526][T12268] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.768758][T12268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.796843][T12268] usb 2-1: Product: syz [ 448.801310][T12268] usb 2-1: Manufacturer: syz [ 448.813708][T12268] usb 2-1: SerialNumber: syz [ 449.057681][T12268] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 449.086946][T12268] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 449.253286][T12268] usb 2-1: USB disconnect, device number 42 [ 450.730195][ T35] team0 (unregistering): Port device team_slave_1 removed [ 450.747233][ T5228] Bluetooth: hci5: command tx timeout [ 450.957838][ T35] team0 (unregistering): Port device team_slave_0 removed [ 451.627257][T12267] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 451.826882][T12267] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 451.855378][T12267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.893730][T12267] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.926338][T12267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 451.977091][T12267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.006683][T12267] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.056674][T12267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.070285][T12267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.106010][T12267] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.141222][T12267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.176926][T12267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.185889][T12267] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.226757][T12267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.268086][T12267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.286792][T12267] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.312550][T12267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.320779][T12267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.336710][T12267] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.358169][T12267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.368724][T12267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.386858][T12267] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.406739][T12267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.456874][T12267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.465847][T12267] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.496767][T12267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.558152][T12267] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 452.576736][T12267] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 452.585212][T12267] usb 3-1: Product: syz [ 452.632818][T12267] usb 3-1: Manufacturer: syz [ 452.637744][T12267] usb 3-1: SerialNumber: syz [ 452.665330][T12267] usb 3-1: config 0 descriptor?? [ 452.707290][T12267] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 452.707622][T15058] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.767223][T15058] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.774622][T15058] bridge_slave_1: entered allmulticast mode [ 452.800647][T15058] bridge_slave_1: entered promiscuous mode [ 452.827081][ T5228] Bluetooth: hci5: command tx timeout [ 452.949899][T15058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.009621][T15058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.144101][T12272] usb 3-1: USB disconnect, device number 31 [ 453.177298][T12272] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 453.268257][T15058] team0: Port device team_slave_0 added [ 453.308809][T15058] team0: Port device team_slave_1 added [ 453.473354][T15058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.496776][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.583914][T15058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.639648][T15058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.656706][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.682732][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.732792][T15058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.986808][T12272] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 454.055457][T15058] hsr_slave_0: entered promiscuous mode [ 454.069534][T15058] hsr_slave_1: entered promiscuous mode [ 454.086393][T15058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.094319][T15058] Cannot create hsr debugfs directory [ 454.179226][T12272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 454.189494][T12272] usb 1-1: config 1 has no interface number 0 [ 454.214617][T12272] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.268133][T12272] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 454.311690][T12272] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 454.335484][T12272] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 23 [ 454.367743][T12272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.379771][T12272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.401221][T12272] usb 1-1: Product: syz [ 454.411219][T12272] usb 1-1: Manufacturer: syz [ 454.425324][T12272] usb 1-1: SerialNumber: syz [ 454.685161][T15545] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.839315][T15648] Bluetooth: hci4: Opcode 0x0c20 failed: -4 [ 455.340387][T15545] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 455.379379][T12272] cdc_ncm 1-1:1.1: bind() failure [ 455.717095][T12271] usb 1-1: USB disconnect, device number 31 [ 456.019700][T15058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.060247][T15058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.090388][T15058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.150444][T15058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.403812][T15058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.412080][T15726] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4119'. [ 456.481459][T15058] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.601388][ T2505] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.608694][ T2505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.637862][T15732] netlink: 'syz.0.4120': attribute type 4 has an invalid length. [ 456.667250][T15732] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4120'. [ 456.785104][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.792351][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.827282][ T5228] Bluetooth: hci4: command 0x0405 tx timeout [ 457.080071][T12271] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 457.306888][T12271] usb 4-1: Using ep0 maxpacket: 8 [ 457.324781][T12271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.337948][T12271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.352958][T12271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 457.386820][T12271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 457.406871][T12271] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 457.424256][T12271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.468102][T12271] hub 4-1:1.0: bad descriptor, ignoring hub [ 457.487204][T12271] hub 4-1:1.0: probe with driver hub failed with error -5 [ 457.507153][T12271] cdc_wdm 4-1:1.0: skipping garbage [ 457.512419][T12271] cdc_wdm 4-1:1.0: skipping garbage [ 457.557298][T12271] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 457.576676][T12271] cdc_wdm 4-1:1.0: Unknown control protocol [ 457.802816][T15058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.847256][ T5312] usb 4-1: USB disconnect, device number 42 [ 458.193087][T15816] syzkaller1: entered promiscuous mode [ 458.218213][T15816] syzkaller1: entered allmulticast mode [ 458.262232][ T51] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 458.487071][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 458.528593][ T51] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.566750][ T51] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 458.606313][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 458.647119][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 458.690429][ T51] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 458.722797][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.765614][ T51] hub 4-1:1.0: bad descriptor, ignoring hub [ 458.793567][ T51] hub 4-1:1.0: probe with driver hub failed with error -5 [ 458.817551][ T51] cdc_wdm 4-1:1.0: skipping garbage [ 458.822809][ T51] cdc_wdm 4-1:1.0: skipping garbage [ 458.851289][T15058] veth0_vlan: entered promiscuous mode [ 458.870718][ T51] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 458.889795][ T51] cdc_wdm 4-1:1.0: Unknown control protocol [ 459.053102][T15058] veth1_vlan: entered promiscuous mode [ 459.159163][T12285] usb 4-1: USB disconnect, device number 43 [ 459.218623][T15058] veth0_macvtap: entered promiscuous mode [ 459.250491][T15058] veth1_macvtap: entered promiscuous mode [ 459.315908][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.357220][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.380812][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.416139][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.437015][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.458769][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.477134][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.503118][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.513778][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.551068][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.572863][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.583849][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.596144][T15058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.628963][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.648719][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.667062][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.687166][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.699211][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.721634][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.741621][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.758630][T15880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4139'. [ 459.777146][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.798256][T15882] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4140'. [ 459.820083][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.837128][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.860847][T15058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.877196][T15058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.899764][T15058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.958902][T15058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.985596][T15058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.005692][T15058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.026064][T15058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.467209][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.495326][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.594129][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.628108][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.493624][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.964756][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.167736][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.458303][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.491500][T15959] [U]  [ 462.521565][ T5222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.535368][ T5222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.544819][ T5222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.610600][ T5222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 462.626984][ T5222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 462.639018][ T5222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.015412][ T81] bridge_slave_1: left allmulticast mode [ 463.030302][ T81] bridge_slave_1: left promiscuous mode [ 463.036090][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.117221][ T81] bridge_slave_0: left allmulticast mode [ 463.122926][ T81] bridge_slave_0: left promiscuous mode [ 463.137994][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.258732][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.287518][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.314965][ T81] bond0 (unregistering): Released all slaves [ 464.748196][ T5228] Bluetooth: hci5: command tx timeout [ 464.837902][T15961] chnl_net:caif_netlink_parms(): no params data found [ 465.068140][T16156] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 465.594769][ T81] hsr_slave_0: left promiscuous mode [ 465.606994][T12268] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 465.638925][ T81] hsr_slave_1: left promiscuous mode [ 465.657730][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.665353][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.685102][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.696661][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.750583][ T81] veth1_macvtap: left promiscuous mode [ 465.766466][ T81] veth0_macvtap: left promiscuous mode [ 465.777159][ T81] veth1_vlan: left promiscuous mode [ 465.782563][ T81] veth0_vlan: left promiscuous mode [ 465.808757][T12268] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.832955][T12268] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.860574][T12268] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 465.884632][T12268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 465.904036][T12268] usb 2-1: SerialNumber: syz [ 466.150708][T12268] usb 2-1: 0:2 : does not exist [ 466.201249][T12268] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 466.256543][T12268] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 466.308590][T12268] usb 2-1: USB disconnect, device number 43 [ 466.731213][T16240] input: syz0 as /devices/virtual/input/input43 [ 466.826725][ T5228] Bluetooth: hci5: command tx timeout [ 466.995694][T16250] netlink: 1704 bytes leftover after parsing attributes in process `syz.1.4202'. [ 467.608368][ T81] team0 (unregistering): Port device team_slave_1 removed [ 467.721475][ T81] team0 (unregistering): Port device team_slave_0 removed [ 468.906822][ T5228] Bluetooth: hci5: command tx timeout [ 469.080613][T15961] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.106772][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.116840][T15961] bridge_slave_0: entered allmulticast mode [ 469.136939][T15961] bridge_slave_0: entered promiscuous mode [ 469.168807][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.186745][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.194045][T15961] bridge_slave_1: entered allmulticast mode [ 469.222111][T15961] bridge_slave_1: entered promiscuous mode [ 469.630929][T15961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.671217][T15961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.982843][T15961] team0: Port device team_slave_0 added [ 470.024098][T15961] team0: Port device team_slave_1 added [ 470.222174][T15961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.237330][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.307213][T15961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.467987][T15961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.475076][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.555021][T15961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.799649][T15961] hsr_slave_0: entered promiscuous mode [ 470.819693][T15961] hsr_slave_1: entered promiscuous mode [ 470.846130][T15961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.870257][T15961] Cannot create hsr debugfs directory [ 470.986743][ T5228] Bluetooth: hci5: command tx timeout [ 471.218927][T12272] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 471.430029][T12272] usb 2-1: Using ep0 maxpacket: 16 [ 471.471140][T12272] usb 2-1: config 0 has no interfaces? [ 471.488118][T12272] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.523122][T12272] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.545215][T12272] usb 2-1: Manufacturer: syz [ 471.558946][T12272] usb 2-1: config 0 descriptor?? [ 471.877464][T12277] usb 2-1: USB disconnect, device number 44 [ 472.151735][T15961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.178390][T15961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.196099][T15961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.220258][T15961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.319225][T12285] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 472.436243][T15961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.529428][T12285] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 472.542556][T15961] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.568731][T12285] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.573924][T16247] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.589259][T16247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.627223][T12285] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.665116][ T2539] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.672352][ T2539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.679136][T12285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 472.706174][T12285] usb 4-1: SerialNumber: syz [ 472.743974][T16495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 472.769382][T16495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 473.042667][T16495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 473.071620][T16495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 473.157868][T16531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4235'. [ 473.259579][T15961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.563616][T12285] cdc_ether 4-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.3-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 473.839211][T12277] usb 4-1: USB disconnect, device number 44 [ 473.855727][T12277] cdc_ether 4-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.3-1, Mobile Broadband Network Device [ 474.009749][T15961] veth0_vlan: entered promiscuous mode [ 474.044118][T15961] veth1_vlan: entered promiscuous mode [ 474.125155][T15961] veth0_macvtap: entered promiscuous mode [ 474.159020][T15961] veth1_macvtap: entered promiscuous mode [ 474.277781][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.298273][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.318569][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.341675][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.363429][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.392740][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.429925][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.466871][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.490704][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.517656][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.544301][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.576694][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.617792][T15961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.680627][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.694529][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.726834][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.756665][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.778605][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.818239][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.836829][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.869327][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.889689][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.910866][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.932156][T15961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.954804][T15961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.984362][T15961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.040689][T15961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.060187][T15961] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.081038][T15961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.100202][T15961] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.320428][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.335757][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.410208][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.420521][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.016237][T16629] loop2: detected capacity change from 0 to 7 [ 476.028917][T16629] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 476.056742][T16629] loop2: partition table partially beyond EOD, truncated [ 476.074272][T16629] loop2: p1 size 6333 extends beyond EOD, truncated [ 477.083641][T16675] input: syz1 as /devices/virtual/input/input44 [ 477.427479][ T2562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.373604][ T5222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 478.389718][ T5222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 478.399230][ T5222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 478.408461][ T5222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 478.416238][ T5222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 478.420395][ T2562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.424483][ T5222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 478.671183][ T2562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.876982][ T2562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.951178][T16726] hsr0: entered allmulticast mode [ 478.977235][T16726] hsr_slave_0: entered allmulticast mode [ 478.993290][T16726] hsr_slave_1: entered allmulticast mode [ 479.137729][T12277] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 479.378298][T12277] usb 3-1: Using ep0 maxpacket: 8 [ 479.390399][T12277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.424191][T12277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.449107][T12277] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 479.459787][T12277] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 479.468248][T12277] usb 3-1: Manufacturer: syz [ 479.488672][T12277] usb 3-1: config 0 descriptor?? [ 479.525816][ T2562] bridge_slave_1: left allmulticast mode [ 479.543435][ T2562] bridge_slave_1: left promiscuous mode [ 479.561179][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.627772][ T2562] bridge_slave_0: left allmulticast mode [ 479.643719][ T2562] bridge_slave_0: left promiscuous mode [ 479.656966][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.697117][T12271] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 479.889993][T12271] usb 2-1: config 0 has an invalid interface number: 138 but max is 0 [ 479.898983][T12271] usb 2-1: config 0 has no interface number 0 [ 479.905112][T12271] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 479.953551][T12271] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 479.986708][T12271] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 480.007402][T12277] wacom 0003:056A:00C5.0027: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 480.018896][T12271] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 480.064361][T12271] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01f0, bcdDevice=6d.75 [ 480.075738][T12271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.087246][T12272] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 480.117181][T12271] usb 2-1: Product: syz [ 480.121407][T12271] usb 2-1: Manufacturer: syz [ 480.142573][T12271] usb 2-1: SerialNumber: syz [ 480.149900][T12271] usb 2-1: config 0 descriptor?? [ 480.174881][T12271] ftdi_sio 2-1:0.138: FTDI USB Serial Device converter detected [ 480.188453][T12271] ftdi_sio ttyUSB0: unknown device type: 0x6d75 [ 480.269718][T12271] usb 3-1: USB disconnect, device number 32 [ 480.313145][T12272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.335989][T12272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.371264][T12268] usb 2-1: USB disconnect, device number 45 [ 480.388937][T12268] ftdi_sio 2-1:0.138: device disconnected [ 480.397266][T12272] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 480.406338][T12272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.455574][T12272] usb 4-1: config 0 descriptor?? [ 480.507966][ T5222] Bluetooth: hci5: command tx timeout [ 480.907270][T12272] cougar 0003:060B:700A.0028: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 481.093707][T12272] usb 4-1: USB disconnect, device number 45 [ 481.110571][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.167235][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.202228][ T2562] bond0 (unregistering): Released all slaves [ 481.477172][T12271] psmouse serio3: Failed to reset mouse on : -5 [ 481.614507][T16716] chnl_net:caif_netlink_parms(): no params data found [ 482.048165][T16971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.232845][T16716] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.268721][T16716] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.276080][T16716] bridge_slave_0: entered allmulticast mode [ 482.308530][T16716] bridge_slave_0: entered promiscuous mode [ 482.340838][T16716] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.357713][T16716] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.365011][T16716] bridge_slave_1: entered allmulticast mode [ 482.408575][T16716] bridge_slave_1: entered promiscuous mode [ 482.528773][ T2562] hsr_slave_0: left promiscuous mode [ 482.567499][ T2562] hsr_slave_1: left promiscuous mode [ 482.587592][ T5222] Bluetooth: hci5: command tx timeout [ 482.597917][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.605395][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.655340][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.670188][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.735439][ T2562] veth1_macvtap: left promiscuous mode [ 482.750108][ T2562] veth0_macvtap: left promiscuous mode [ 482.760378][ T2562] veth1_vlan: left promiscuous mode [ 482.772654][ T2562] veth0_vlan: left promiscuous mode [ 484.466163][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 484.599062][ T5312] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 484.623729][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 484.667075][ T5222] Bluetooth: hci5: command tx timeout [ 484.832355][ T5312] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.867348][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 484.895867][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 484.927449][ T5312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.956663][ T5312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.976211][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.993809][ T5312] usb 4-1: config 0 descriptor?? [ 485.021861][T17037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.326784][T12271] misc userio: Buffer overflowed, userio client isn't keeping up [ 485.464244][ T5312] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 485.484451][ T5312] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 485.515538][ T5312] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 485.526708][ T5312] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 485.534260][ T5312] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 485.570200][ T5312] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 485.617827][ T5312] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 485.868612][T12272] usb 4-1: USB disconnect, device number 46 [ 486.352205][T16716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.391279][T12271] input: PS/2 Generic Mouse as /devices/serio3/input/input48 [ 486.446965][T16716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.649291][T12271] psmouse serio3: Failed to enable mouse on [ 486.702052][T16716] team0: Port device team_slave_0 added [ 486.747946][T16716] team0: Port device team_slave_1 added [ 486.751937][ T5222] Bluetooth: hci5: command tx timeout [ 486.842392][T12271] kernel write not supported for file /snd/seq (pid: 12271 comm: kworker/0:14) [ 486.916506][T16716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.935086][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.986612][T16716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.010280][T16716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.017871][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.104237][T16716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.279789][T16716] hsr_slave_0: entered promiscuous mode [ 487.311403][T16716] hsr_slave_1: entered promiscuous mode [ 487.319669][T16716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.338306][T16716] Cannot create hsr debugfs directory [ 487.421760][T17189] syzkaller1: entered promiscuous mode [ 487.437539][T17189] syzkaller1: entered allmulticast mode [ 593.806609][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 593.813619][ C1] rcu: 0-...!: (1 GPs behind) idle=363c/1/0x4000000000000000 softirq=48771/48772 fqs=1 [ 593.825447][ C1] rcu: (detected by 1, t=10505 jiffies, g=71321, q=127 ncpus=2) [ 593.833209][ C1] Sending NMI from CPU 1 to CPUs 0: [ 593.838469][ C0] NMI backtrace for cpu 0 [ 593.838497][ C0] CPU: 0 UID: 0 PID: 17300 Comm: syz.3.4335 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 593.838516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 593.838529][ C0] RIP: 0010:check_preemption_disabled+0x49/0x120 [ 593.838556][ C0] Code: 74 65 8b 05 71 8e 55 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b <41> 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 [ 593.838572][ C0] RSP: 0018:ffffc90000007a20 EFLAGS: 00000086 [ 593.838587][ C0] RAX: 0000000000000000 RBX: ffffc90000007aa0 RCX: cc574bdb2c73bc00 [ 593.838599][ C0] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f9980 [ 593.838611][ C0] RBP: ffffc90000007b88 R08: ffffffff934f4847 R09: 1ffffffff269e908 [ 593.838623][ C0] R10: dffffc0000000000 R11: fffffbfff269e909 R12: 1ffff92000000f50 [ 593.838634][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000046 [ 593.838645][ C0] FS: 00007f9dbadcc6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 593.838660][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.838672][ C0] CR2: 00007f9dbadcbf98 CR3: 0000000060412000 CR4: 00000000003506f0 [ 593.838686][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 593.838696][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 593.838706][ C0] Call Trace: [ 593.838715][ C0] [ 593.838725][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 593.838751][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 593.838771][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 593.838797][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 593.838815][ C0] ? nmi_handle+0x14f/0x5a0 [ 593.838830][ C0] ? nmi_handle+0x2a/0x5a0 [ 593.838845][ C0] ? check_preemption_disabled+0x49/0x120 [ 593.838861][ C0] ? default_do_nmi+0x63/0x160 [ 593.838879][ C0] ? exc_nmi+0x123/0x1f0 [ 593.838896][ C0] ? end_repeat_nmi+0xf/0x53 [ 593.838919][ C0] ? check_preemption_disabled+0x49/0x120 [ 593.838935][ C0] ? check_preemption_disabled+0x49/0x120 [ 593.838952][ C0] ? check_preemption_disabled+0x49/0x120 [ 593.838969][ C0] [ 593.838974][ C0] [ 593.838980][ C0] lock_acquire+0x1fd/0x550 [ 593.839002][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 593.839023][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 593.839043][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 593.839064][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 593.839083][ C0] ? debug_object_deactivate+0x158/0x390 [ 593.839100][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 593.839123][ C0] debug_object_deactivate+0x158/0x390 [ 593.839142][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 593.839160][ C0] ? timerqueue_add+0x260/0x290 [ 593.839177][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 593.839199][ C0] debug_deactivate+0x1b/0x220 [ 593.839216][ C0] __hrtimer_run_queues+0x305/0xd50 [ 593.839232][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 593.839258][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 593.839275][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 593.839296][ C0] hrtimer_interrupt+0x396/0x990 [ 593.839322][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 593.839345][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 593.839366][ C0] [ 593.839371][ C0] [ 593.839377][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.839395][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 593.839415][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 3e 65 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 e3 c0 aa f5 65 8b 05 54 95 4b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 593.839427][ C0] RSP: 0018:ffffc90002ed79c0 EFLAGS: 00000206 [ 593.839441][ C0] RAX: cc574bdb2c73bc00 RBX: 1ffff920005daf3c RCX: ffffffff94cec903 [ 593.839458][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: 0000000000000001 [ 593.839468][ C0] RBP: ffffc90002ed7a50 R08: ffffffff8ff6c72f R09: 1ffffffff1fed8e5 [ 593.839480][ C0] R10: dffffc0000000000 R11: fffffbfff1fed8e6 R12: dffffc0000000000 [ 593.839492][ C0] R13: 1ffff920005daf38 R14: ffffc90002ed79e0 R15: 0000000000000246 [ 593.839511][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 593.839531][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 593.839548][ C0] ? ttwu_do_activate+0x200/0x7e0 [ 593.839570][ C0] try_to_wake_up+0x8fb/0x1470 [ 593.839594][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 593.839613][ C0] ? __pfx_lock_release+0x10/0x10 [ 593.839632][ C0] ? plist_del+0x3f1/0x410 [ 593.839652][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 593.839670][ C0] wake_up_q+0xc8/0x120 [ 593.839688][ C0] futex_wake+0x523/0x5c0 [ 593.839709][ C0] ? sctp_getsockopt+0xb6d/0xbb0 [ 593.839731][ C0] ? __pfx_futex_wake+0x10/0x10 [ 593.839753][ C0] ? sctp_getsockopt+0xb6d/0xbb0 [ 593.839771][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 593.839790][ C0] do_futex+0x392/0x560 [ 593.839809][ C0] ? __pfx_do_futex+0x10/0x10 [ 593.839824][ C0] ? __fget_files+0x3f6/0x470 [ 593.839845][ C0] __se_sys_futex+0x3f9/0x480 [ 593.839866][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 593.839883][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 593.839902][ C0] ? do_syscall_64+0x100/0x230 [ 593.839919][ C0] ? __x64_sys_futex+0x21/0xf0 [ 593.839937][ C0] do_syscall_64+0xf3/0x230 [ 593.839952][ C0] ? clear_bhb_loop+0x35/0x90 [ 593.839970][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.839987][ C0] RIP: 0033:0x7f9db9f79e79 [ 593.840006][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.840019][ C0] RSP: 002b:00007f9dbadcc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 593.840034][ C0] RAX: ffffffffffffffda RBX: 00007f9dba115f88 RCX: 00007f9db9f79e79 [ 593.840045][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9dba115f8c [ 593.840056][ C0] RBP: 00007f9dba115f80 R08: 7fffffffffffffff R09: 0000000000000000 [ 593.840066][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f9dba115f8c [ 593.840078][ C0] R13: 0000000000000000 R14: 00007ffc933ba580 R15: 00007ffc933ba668 [ 593.840096][ C0] [ 593.840459][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g71321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 594.453639][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 594.463697][ C1] rcu: RCU grace-period kthread stack dump: [ 594.469582][ C1] task:rcu_preempt state:R running task stack:25232 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 594.481329][ C1] Call Trace: [ 594.484615][ C1] [ 594.487647][ C1] __schedule+0x17ae/0x4a10 [ 594.492188][ C1] ? __pfx___schedule+0x10/0x10 [ 594.497052][ C1] ? __pfx_lock_release+0x10/0x10 [ 594.502087][ C1] ? __asan_memset+0x23/0x50 [ 594.506688][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 594.512502][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 594.518840][ C1] ? schedule+0x90/0x320 [ 594.523090][ C1] schedule+0x14b/0x320 [ 594.527269][ C1] schedule_timeout+0x1be/0x310 [ 594.532214][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 594.537596][ C1] ? __pfx_process_timeout+0x10/0x10 [ 594.542895][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 594.548455][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 594.553313][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 594.558544][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 594.565060][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 594.570381][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 594.576328][ C1] ? finish_swait+0xd4/0x1e0 [ 594.580932][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 594.585535][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 594.590739][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 594.596643][ C1] ? __kthread_parkme+0x169/0x1d0 [ 594.601681][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 594.606887][ C1] kthread+0x2f0/0x390 [ 594.610967][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 594.616256][ C1] ? __pfx_kthread+0x10/0x10 [ 594.620855][ C1] ret_from_fork+0x4b/0x80 [ 594.625279][ C1] ? __pfx_kthread+0x10/0x10 [ 594.630142][ C1] ret_from_fork_asm+0x1a/0x30 [ 594.634928][ C1] [ 594.637949][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 594.644273][ C1] CPU: 1 UID: 0 PID: 2505 Comm: kworker/u8:6 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 594.655123][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 594.665180][ C1] Workqueue: events_unbound toggle_allocation_gate [ 594.671696][ C1] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 594.678462][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 19 15 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 c4 10 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 a8 10 [ 594.698068][ C1] RSP: 0018:ffffc9000934f700 EFLAGS: 00000293 [ 594.704140][ C1] RAX: ffffffff81877a08 RBX: 1ffff11017248c59 RCX: ffff888029a53c00 [ 594.712115][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 594.720096][ C1] RBP: ffffc9000934f8e0 R08: ffffffff818779d7 R09: 1ffffffff269e908 [ 594.728242][ C1] R10: dffffc0000000000 R11: fffffbfff269e909 R12: dffffc0000000000 [ 594.736218][ C1] R13: ffff8880b92462c8 R14: ffff8880b933fb00 R15: 0000000000000000 [ 594.744189][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 594.753119][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.759713][ C1] CR2: 0000000020017030 CR3: 000000000e534000 CR4: 00000000003506f0 [ 594.767689][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 594.775672][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 594.783645][ C1] Call Trace: [ 594.786925][ C1] [ 594.789773][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 594.796119][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 594.801777][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 594.807589][ C1] ? __pfx_lock_release+0x10/0x10 [ 594.812629][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 594.818881][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 594.824274][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 594.829934][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 594.835138][ C1] ? acct_account_cputime+0x207/0x210 [ 594.840528][ C1] ? update_process_times+0x1ce/0x230 [ 594.845911][ C1] ? tick_nohz_handler+0x37c/0x500 [ 594.851032][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 594.856499][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 594.861876][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 594.867883][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 594.873608][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 594.879696][ C1] ? hrtimer_interrupt+0x396/0x990 [ 594.884834][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 594.890997][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 594.896816][ C1] [ 594.899748][ C1] [ 594.902686][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 594.908852][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 594.915009][ C1] ? smp_call_function_many_cond+0x1878/0x29d0 [ 594.921192][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 594.927361][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 594.933453][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 594.938527][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 594.944707][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 594.951038][ C1] ? __pfx___might_resched+0x10/0x10 [ 594.956329][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 594.961966][ C1] ? __pfx___might_resched+0x10/0x10 [ 594.967261][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 594.972304][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 594.977439][ C1] text_poke_bp_batch+0x352/0xb30 [ 594.982568][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 594.988118][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 594.993160][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 594.999440][ C1] text_poke_finish+0x30/0x50 [ 595.004131][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 595.010123][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 595.016465][ C1] static_key_enable+0x1a/0x20 [ 595.021237][ C1] toggle_allocation_gate+0xb5/0x250 [ 595.026531][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 595.032432][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 595.038783][ C1] ? process_scheduled_works+0x945/0x1830 [ 595.044594][ C1] process_scheduled_works+0xa2c/0x1830 [ 595.050172][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 595.056178][ C1] ? assign_work+0x364/0x3d0 [ 595.060784][ C1] worker_thread+0x86d/0xd40 [ 595.065389][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 595.071296][ C1] ? __kthread_parkme+0x169/0x1d0 [ 595.076331][ C1] ? __pfx_worker_thread+0x10/0x10 [ 595.081459][ C1] kthread+0x2f0/0x390 [ 595.085560][ C1] ? __pfx_worker_thread+0x10/0x10 [ 595.090697][ C1] ? __pfx_kthread+0x10/0x10 [ 595.095310][ C1] ret_from_fork+0x4b/0x80 [ 595.099738][ C1] ? __pfx_kthread+0x10/0x10 [ 595.104345][ C1] ret_from_fork_asm+0x1a/0x30 [ 595.109131][ C1]