last executing test programs: 3m21.257391068s ago: executing program 0 (id=70): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000440)="bb0f", 0x2}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200042, 0x0) 3m18.06338447s ago: executing program 0 (id=83): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r2, 0x4) 3m17.59689169s ago: executing program 0 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0xfe8d, 0x11a, 0x1, 0x2}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x7fffffff}}], 0x28}, 0x0) 3m17.461301059s ago: executing program 0 (id=88): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m17.179313492s ago: executing program 0 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESHEX=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername(r1, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 3m16.114777688s ago: executing program 0 (id=99): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x4) 3m15.035939064s ago: executing program 32 (id=99): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x4) 2m33.209315622s ago: executing program 4 (id=203): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) sendmmsg$sock(r0, &(0x7f0000003d80)=[{{&(0x7f0000001a00)=@can={0x1d, r1}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001a80)="3c351f69d9210311454873bc0f87b1e4d0e5ec72d3c54e4305b0820851f6ca8122dba8652bddc322972e461b95cdc1e317bb2ef0f68f3ff0fae39987ea5b09066b91040cb586da04dcb27083d5e277e12645ca022541add06ed87e8cc8b282127dcae76a06a9a191a8d71bffebe74049ba94649fefca5a", 0x77}, {&(0x7f0000001b00)="144a97d3bf5d7cf9e4c8a88a05c01e319f6dafce476c1eb429f6f56b0469a3d1c8372a50e065173f68b66fdfd7649fb8ea4e25d5a090fb81bfffb8589cf36c2b70ce95036815a64393934ccde57b3006d749e5db0f7bcad15d3ab8608f81ad57313272a14eb55d4a097106d612d28a8bdd1f5371e716af3c573876f41d1641d38fed214c8aef243ea946b22da4db6bfcac1f49163438a5a4809ccfb2eb595c7366d6b21dd86c6f2c4ee8826cd2682584398fa13dbb3a0f6b4162fc08ebdd6322d34079402cfddfcc66685204fc1856570ae8c6ca4487184ac1350e1135d9f3c72c0abe7f21c8c4322790ff15eedf2fd0e1308a9bcb590f86dd78fd567b0b9a33c295afda5433bfc197bdca052bbddf2f369d58a1608c129c1a0ee16d154464900f71370f25f220246047016be4f241fef9169252345db3df5ecd70622499040f939b234fcb089e556e2f6339fbaad42bac3a84fbeebe59018bff6770f09c8f556b29150871d6e039c7341bc65b7b8c916cea8f4f799c452d407aa091bece89d409301651c88699ea2cc1b0050d6827b02cb53c63727557d317c618a668904f7dd80c1e3b9e2ceb25f920ab292d353c27a18bf467a9bd6a4ac1993f9ce2c4c0eab9e583050791068fee4a20a31b2f55b406ee97f63a3447df8e29fb07702abc755bc21a3e067aa78224e23820567e4db0d6b3bca35007b53705edde421a9f613721d8fb0bbea70175b2bb3c1feeaa51b5c8905693f21061b0b726fcba000f56671991a65e0cf2911f52a1e9e54ac7b5e765f1e919356abc234aa2f5d2dabd71cec6ac99a5cffe441de5086f020bfbb403fb7adc6d0a606c3e45398945139099e976430e44586ab83eca33896c300ece2ec21af85c75908a092fbda01f2fff4d54c8963a6fb591dcade3af5a78f65d8673222e06b6e1c30759eae41a4cf97a93987fc1b9a57818b8eb666494fe21999726c7bde72db669fe485fb2813aaada8d6e59132c421c070874bbc870526f6d4f9e090c566b1cb7ce5dc7653f3dba5d02e5a2273b22e55e72f12641579fe2dc276894a4d94e76ac1f281ef394237ab2f1b38689d1950fc033031f8759b1ab3f239bc7c315b646ce1243d8afc427fd51cd25f541d08390d2dcc8180a2bf9d357676050e05bebe6243c525460b21ebe3d8ee1f223710be2fa9ce3b349b7e3b2098d52fe514865ffdf852296e25eea0da62e7699aa5530a0c92103fb103fb502f3bfcf86cee56fd06b06d24caba19eb0949edda0f92a1d4f95b4eb513129851171fd466b5be86ecc68703b7b54127e11fa6d1a0e467ed2be801876894e1d15f7cda540d204bda763d21a43eaced4849bb0ee0350dcc5590397a2c57c7b78ddb6376cf958e963a6de613448ef5c5a2e20f84159ce1f5d1ef1b5a2fa1f786b4ca5e20e2e9bdf8bad973d328ab73fe7bf303259ff75b2df787a61d11849ca1dc259b7da933e7af07a537a0bf59d5f243c756c29dc814ac81d484c5e008df852df565306d3148c380bb7d8b16bf214119c2490cdc3236a1f62658da660358c80099c0bee6595aec7c2139731a2d1928cd2821441af2af95c060c015438ddd2024d945f5bf706f03d4840027ad92af8cb3fc4585ad9602d2df161618a58743591eb65667c04cf89135f870bb8ff8e46040342823fc4f30500b86d11865543ea561e79c5fe6895eab388322abe5eaf129331a590b71b83e14816111c10e477733a059369dfb01e48393ae98ea1d2831d9aa8dc038b348f92591837ba0f18f849d5508ca76c6487d5d53fe1f90f8cde39c564c6397a8ef0548404c54f2899ee4b3d0858c85921bd5de096e178aa31caca04c89de62534a66bbc0d825beec7be0db194a9c50a33e8d7b5e4d416aa2666cd350d3d5938a9fb4faf1d692ac9d7ac49b4f4784bf86167fcb8960f84b5c554c9b0fbbb8ebf74ee6644d682469b51292b433712a5af087240b0a3d51f442ce7a1f9ff9f62845138d774ce1a1dca92e356f29e972cb9abbabc1813169db4dfb926545029f4476e284195f55a24ef6c49452ab60ccfd53e153b6aff97f3341c38a2d564c4a83c9712ea1b5452542eba6eeec7962565603dea6950198118ee5c8f1912eb9a32477faa486588d09e7af304aca2ac19da4af79078002681a7f58a6d0bc8e74af9c17aab05a793bffa7098dbfc4ebc326c794d92adfbe8d6df931367c3d0d8b947ccaafd82b6e42d843e27ad43a8bbff09e07d1d09119b6fb7a3de23183cd28deb1ed85245f5a79a7610c99ed11adbef4c88d38887fc465b9cb581179409e527d24a6e14477432f7e19dff8f718c0ab29621fdeedfe197518d3c38b04e67b9a33c8230533a5e", 0x683}], 0x2}}], 0x1, 0x4000000) 2m30.478938714s ago: executing program 4 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m30.292007832s ago: executing program 4 (id=215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f8", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2}, 0x8d0) 2m29.924764792s ago: executing program 4 (id=216): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x8) 2m29.525713165s ago: executing program 4 (id=219): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="151ba456fae8ccb87dde651d135bec18e9580c09f9f5202c03e2de092e5998cf96438b4300bf20660ff26bd75d4f95ee849b9416a97f73805275951d2c7b147c1157afde16e5a29204cf8a62fa816574a1f689c39fe8", 0x56, 0x44884, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m27.280566652s ago: executing program 4 (id=227): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) getpeername$netrom(r1, 0x0, &(0x7f00000002c0)) 4.469252218s ago: executing program 3 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1f000000fb000000fffb"], 0x10002) 4.300958006s ago: executing program 3 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.513163022s ago: executing program 3 (id=583): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2.787145511s ago: executing program 2 (id=586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000520001000000000000000008"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400200010000100000000b40d0011"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 2.707123151s ago: executing program 3 (id=587): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 2.552029173s ago: executing program 3 (id=588): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r2, 0x80000001}, &(0x7f0000000440)=0x8) r3 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 2.334010423s ago: executing program 1 (id=589): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r5], 0x1, r3, r4, 0x3, 0x100, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf48, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x158, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 2.097208968s ago: executing program 1 (id=590): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) 1.892286861s ago: executing program 1 (id=591): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r7, &(0x7f0000000000)=""/42, 0x2a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) 1.531164855s ago: executing program 2 (id=593): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x87, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/10, 0xa}, 0x80000001}], 0x1, 0x143, 0x0) 1.268608905s ago: executing program 2 (id=594): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@broadcast, @random="385946601e7a", @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x4, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x3, 0x8, 0x28, 0x65, 0x0, 0x7, 0x6, 0x0, @multicast1, @remote}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x5, 0x0, 0x5}}}}}}}, 0x0) 1.225152729s ago: executing program 3 (id=595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.136848738s ago: executing program 2 (id=596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) sendto$inet(r1, &(0x7f00000000c0)="f7", 0x1, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) 920.908655ms ago: executing program 2 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 763.920093ms ago: executing program 1 (id=598): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 579.308306ms ago: executing program 2 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xc, 0x6}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x20040054) 401.155472ms ago: executing program 1 (id=600): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$cec(0x0, 0x0, 0x101441) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 0s ago: executing program 1 (id=601): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)={r7}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdn', @ANYBLOB]) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) kernel console output (not intermixed with test programs): submit urb error = -90 [ 111.558505][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 111.609114][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 111.623833][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 111.646611][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 111.665776][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 111.692259][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 111.703428][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 111.797233][ T5931] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 111.797260][ T5931] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 111.923461][ T5931] usb 1-1: USB disconnect, device number 2 [ 112.283481][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.433309][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 112.441893][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.441957][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.441986][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 112.442012][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.442034][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.450063][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.450096][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.450120][ T10] usb 4-1: Manufacturer: syz [ 112.505605][ T10] usb 4-1: config 0 descriptor?? [ 112.823311][ T5931] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.943652][ T10] rc_core: IR keymap rc-hauppauge not found [ 112.943674][ T10] Registered IR keymap rc-empty [ 112.943831][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.965417][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.984013][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 112.998855][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 113.002396][ T5931] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 113.002430][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.002460][ T5931] usb 5-1: Product: syz [ 113.002477][ T5931] usb 5-1: Manufacturer: syz [ 113.002495][ T5931] usb 5-1: SerialNumber: syz [ 113.077631][ T5931] usb 5-1: config 0 descriptor?? [ 113.086404][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 113.101323][ T5931] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 113.120765][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.135685][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.155122][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.183271][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.200602][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.214815][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.236735][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.254879][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.286041][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.305082][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.326710][ T5911] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.388428][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 113.390280][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 113.506669][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.506705][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 113.506794][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.506823][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.506869][ T5911] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.506953][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.579119][ T10] usb 4-1: USB disconnect, device number 2 [ 113.744927][ T5911] usb 3-1: config 0 descriptor?? [ 113.746776][ T6001] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 114.264737][ T5911] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 114.581382][ T5911] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.611626][ T5931] gspca_sonixj: reg_w1 err -71 [ 114.611728][ T5931] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 114.662314][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.670442][ T5931] usb 5-1: USB disconnect, device number 2 [ 114.672906][ T5911] usb 3-1: USB disconnect, device number 2 [ 114.823332][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 114.827011][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.827054][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.827078][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.888061][ T10] usb 2-1: config 0 descriptor?? [ 115.049626][ T6022] fido_id[6022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 115.508155][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.531454][ T10] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 116.609069][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 116.729746][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 116.733654][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 116.736749][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.736776][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.736798][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.756332][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.756367][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.756391][ T9] usb 1-1: Product: syz [ 116.756407][ T9] usb 1-1: Manufacturer: syz [ 116.756424][ T9] usb 1-1: SerialNumber: syz [ 116.857831][ T10] usb 2-1: USB disconnect, device number 3 [ 117.240685][ T9] usb 1-1: 0:2 : does not exist [ 118.052814][ T49] usb 1-1: USB disconnect, device number 3 [ 118.567397][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.884967][ T9] usb 4-1: device descriptor read/all, error -71 [ 122.242540][ T6074] Bluetooth: MGMT ver 1.23 [ 122.453346][ T49] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.631056][ T49] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.631089][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.638816][ T49] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.638851][ T49] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.638876][ T49] usb 2-1: Product: syz [ 122.638892][ T49] usb 2-1: Manufacturer: syz [ 122.638908][ T49] usb 2-1: SerialNumber: syz [ 122.730173][ T49] usb 2-1: config 0 descriptor?? [ 122.813652][ T49] usb 2-1: selecting invalid altsetting 0 [ 123.136847][ T49] usb 2-1: USB disconnect, device number 4 [ 123.329992][ T6098] Zero length message leads to an empty skb [ 123.388796][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.651921][ T5959] kernel write not supported for file /27/loginuid (pid: 5959 comm: kworker/1:6) [ 125.703295][ T5991] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.833266][ T3121] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.917149][ T5991] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.917206][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.917233][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.917256][ T5991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.992754][ T3121] usb 1-1: Using ep0 maxpacket: 8 [ 125.999442][ T3121] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 125.999473][ T3121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.138918][ T3121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 126.138939][ T3121] pvrusb2: ********** [ 126.138946][ T3121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 126.138959][ T3121] pvrusb2: Important functionality might not be entirely working. [ 126.138968][ T3121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 126.138980][ T3121] pvrusb2: ********** [ 126.241852][ T5991] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 126.241886][ T5991] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 126.241907][ T5991] usb 2-1: Manufacturer: syz [ 126.255964][ T5991] usb 2-1: config 0 descriptor?? [ 127.089351][ T2365] pvrusb2: Invalid write control endpoint [ 127.442768][ T3121] usb 1-1: USB disconnect, device number 4 [ 127.556446][ T5991] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 127.626101][ T6146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.679146][ T5991] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 127.729466][ T2365] pvrusb2: Invalid write control endpoint [ 127.729482][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.729491][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.729500][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.729510][ T2365] pvrusb2: Device being rendered inoperable [ 127.729653][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 127.729714][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 127.889144][ T2365] pvrusb2: Attached sub-driver cx25840 [ 127.889175][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 127.889187][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 127.903328][ T9] usb 2-1: USB disconnect, device number 5 [ 128.516333][ T6164] fido_id[6164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 128.774103][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.586055][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.394518][ T3121] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.555923][ T3121] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.555953][ T3121] usb 1-1: config 0 has no interface number 0 [ 130.559095][ T3121] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.559123][ T3121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.559144][ T3121] usb 1-1: Product: syz [ 130.559158][ T3121] usb 1-1: Manufacturer: syz [ 130.559173][ T3121] usb 1-1: SerialNumber: syz [ 130.589039][ T3121] usb 1-1: config 0 descriptor?? [ 130.673298][ T5959] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.833476][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 130.840851][ T5959] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 130.840881][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.864232][ T3121] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 130.899393][ T5959] usb 5-1: config 0 descriptor?? [ 130.947384][ T3121] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.948077][ T3121] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 130.948165][ T3121] usb 1-1: media controller created [ 131.175418][ T6201] netlink: 'syz.2.76': attribute type 30 has an invalid length. [ 131.694233][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.271844][ T3121] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.329382][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.445265][ T3121] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 132.805501][ T3121] usb 1-1: USB disconnect, device number 5 [ 132.825352][ T5972] udevd[5972]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 132.984543][ T5959] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 132.984574][ T5959] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 132.985156][ T5959] asix 5-1:0.0: probe with driver asix failed with error -71 [ 133.032965][ T5959] usb 5-1: USB disconnect, device number 3 [ 133.375257][ T3121] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 133.528751][ T3121] usb 2-1: config 0 has no interfaces? [ 133.528791][ T3121] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 133.528816][ T3121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.546580][ T3121] usb 2-1: config 0 descriptor?? [ 133.760008][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 133.760066][ T6232] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 133.760082][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 133.783386][ T3121] usb 2-1: USB disconnect, device number 6 [ 134.883366][ T3121] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.045615][ T3121] usb 2-1: Using ep0 maxpacket: 8 [ 135.070901][ T3121] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 135.070932][ T3121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.105517][ T6212] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.137894][ T3121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 135.137911][ T3121] pvrusb2: ********** [ 135.137919][ T3121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 135.137931][ T3121] pvrusb2: Important functionality might not be entirely working. [ 135.137941][ T3121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 135.137953][ T3121] pvrusb2: ********** [ 135.287877][ T6212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.287910][ T6212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.287948][ T6212] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.288063][ T6212] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 135.288088][ T6212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.368611][ T2365] pvrusb2: Invalid write control endpoint [ 135.404445][ T6212] usb 4-1: config 0 descriptor?? [ 135.623822][ T6252] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.638896][ T6252] pvrusb2: Killing an I2C read to 1 that has wlen too large (desired=102 limit=60) [ 135.662685][ T49] usb 2-1: USB disconnect, device number 7 [ 135.820783][ T2365] pvrusb2: Invalid write control endpoint [ 135.820800][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 135.820810][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 135.820819][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 135.820830][ T2365] pvrusb2: Device being rendered inoperable [ 135.846577][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 135.846653][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 135.886157][ T2365] pvrusb2: Attached sub-driver cx25840 [ 135.886174][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 135.886192][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 135.897524][ T6212] elecom 0003:056E:00FB.0004: unknown main item tag 0x0 [ 135.933986][ T6212] elecom 0003:056E:00FB.0004: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.3-1/input0 [ 136.075323][ T6260] ptrace attach of "./syz-executor exec"[6262] was attempted by "./syz-executor exec"[6260] [ 136.138060][ T3121] usb 4-1: USB disconnect, device number 5 [ 136.318063][ T6264] fido_id[6264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 136.444525][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.830250][ T6273] syz.2.105 uses obsolete (PF_INET,SOCK_PACKET) [ 136.866329][ T49] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.583301][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 137.587184][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.587218][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.587258][ T49] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 137.587283][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.595691][ T49] usb 5-1: config 0 descriptor?? [ 137.910068][ T6277] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.936929][ T6275] lo speed is unknown, defaulting to 1000 [ 137.937070][ T6275] lo speed is unknown, defaulting to 1000 [ 137.940959][ T6275] lo speed is unknown, defaulting to 1000 [ 137.949453][ T6275] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.961745][ T6275] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 138.006761][ T6275] lo speed is unknown, defaulting to 1000 [ 138.010145][ T6275] lo speed is unknown, defaulting to 1000 [ 138.013472][ T6275] lo speed is unknown, defaulting to 1000 [ 138.018111][ T6275] lo speed is unknown, defaulting to 1000 [ 138.021300][ T6275] lo speed is unknown, defaulting to 1000 [ 138.083911][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.084010][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.249385][ T49] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 138.393691][ T49] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 138.570776][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.594864][ T49] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 139.002186][ T49] ft260 0003:0403:6030.0005: failed to retrieve status: -71 [ 139.002753][ T49] ft260 0003:0403:6030.0005: failed to reset I2C controller: -71 [ 139.074345][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.082591][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.084638][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.087686][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.088725][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.092596][ T6282] warning: `syz.3.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.114721][ T49] usb 5-1: USB disconnect, device number 4 [ 140.396971][ T6293] input: syz1 as /devices/virtual/input/input8 [ 140.480639][ T6298] Bluetooth: MGMT ver 1.23 [ 140.480680][ T6298] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 140.714420][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.763575][ T49] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.914740][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 140.918001][ T49] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.918134][ T49] usb 4-1: config 0 has no interface number 0 [ 140.918186][ T49] usb 4-1: config 0 interface 184 has no altsetting 0 [ 140.921395][ T49] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.921422][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.921443][ T49] usb 4-1: Product: syz [ 140.921457][ T49] usb 4-1: Manufacturer: syz [ 140.921472][ T49] usb 4-1: SerialNumber: syz [ 140.982129][ T49] usb 4-1: config 0 descriptor?? [ 141.002526][ T49] smsc75xx v1.0.0 [ 141.310135][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.398121][ T6281] lo speed is unknown, defaulting to 1000 [ 141.893659][ T5849] Bluetooth: hci0: command tx timeout [ 141.946911][ T6311] input: syz1 as /devices/virtual/input/input9 [ 142.003027][ T6312] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 142.236353][ T49] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 142.236385][ T49] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.237108][ T49] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 142.237135][ T49] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 142.237155][ T49] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 142.237178][ T49] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 142.237513][ T49] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 142.317604][ T49] usb 4-1: USB disconnect, device number 6 [ 143.979347][ T5848] Bluetooth: hci0: command tx timeout [ 144.089385][ T12] bridge_slave_1: left allmulticast mode [ 144.089936][ T12] bridge_slave_1: left promiscuous mode [ 144.092829][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.368006][ T12] bridge_slave_0: left allmulticast mode [ 144.368041][ T12] bridge_slave_0: left promiscuous mode [ 144.368393][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.866878][ T6338] siw: device registration error -23 [ 145.863262][ T3121] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.028348][ T3121] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 146.028421][ T3121] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.028449][ T3121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.028476][ T3121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.028495][ T3121] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.028538][ T3121] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.028562][ T3121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.043702][ T5848] Bluetooth: hci0: command tx timeout [ 146.150132][ T3121] usb 3-1: config 0 descriptor?? [ 146.426065][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 146.426099][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 146.656238][ T3121] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 146.872073][ T3121] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 147.044051][ T5959] usb 3-1: USB disconnect, device number 3 [ 147.128967][ T6352] process 'syz.1.130' launched '/dev/fd/3' with NULL argv: empty string added [ 147.743144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.728665][ T5848] Bluetooth: hci0: command tx timeout [ 151.353294][ T49] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.543032][ T49] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 151.543063][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.562122][ T49] usb 3-1: Product: syz [ 151.562143][ T49] usb 3-1: Manufacturer: syz [ 151.562157][ T49] usb 3-1: SerialNumber: syz [ 151.581882][ T49] usb 3-1: config 0 descriptor?? [ 151.847192][ T5931] usb 3-1: USB disconnect, device number 4 [ 152.082230][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 152.243220][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 152.266754][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.266806][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.266882][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.266906][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.316759][ T10] usb 2-1: config 0 descriptor?? [ 152.326324][ T10] hub 2-1:0.0: USB hub found [ 152.483218][ T3121] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 152.532335][ T10] hub 2-1:0.0: 1 port detected [ 152.594504][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.640817][ T3121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.640845][ T3121] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.647605][ T3121] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.647642][ T3121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.647666][ T3121] usb 4-1: Product: syz [ 152.647683][ T3121] usb 4-1: Manufacturer: syz [ 152.647701][ T3121] usb 4-1: SerialNumber: syz [ 152.709489][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.821045][ T12] bond0 (unregistering): Released all slaves [ 152.895994][ T3121] usb 4-1: 0:2 : does not exist [ 152.920470][ T3121] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 153.119530][ T3121] usb 4-1: USB disconnect, device number 7 [ 153.137901][ T5931] hub 2-1:0.0: activate --> -90 [ 153.168003][ T6281] chnl_net:caif_netlink_parms(): no params data found [ 153.401459][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.546915][ T3121] usb 2-1: USB disconnect, device number 8 [ 153.683175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.092254][ T5931] usb 2-1-port1: config error [ 154.531345][ T38] audit: type=1326 audit(1756387628.677:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.1.149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ce7f3ebe9 code=0x0 [ 157.323329][ T49] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.493774][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 157.528968][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.529019][ T49] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 157.529042][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.699996][ T49] usb 5-1: config 0 descriptor?? [ 157.793595][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 158.131007][ T49] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 158.131044][ T49] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 158.131071][ T49] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 158.131098][ T49] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 158.131125][ T49] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 158.132089][ T49] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 158.345715][ T6002] Process accounting resumed [ 158.363251][ T49] usb 5-1: USB disconnect, device number 5 [ 158.683760][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.063184][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.686611][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.149218][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.340022][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.453644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 160.481535][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.583240][ T49] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.735420][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.735444][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.735459][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.735490][ T49] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.735505][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.819323][ T49] usb 5-1: config 0 descriptor?? [ 160.899324][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.899472][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.899727][ T6281] bridge_slave_0: entered allmulticast mode [ 160.933814][ T6281] bridge_slave_0: entered promiscuous mode [ 160.980449][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.981933][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.982162][ T6281] bridge_slave_1: entered allmulticast mode [ 161.009748][ T6281] bridge_slave_1: entered promiscuous mode [ 161.445859][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.684241][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.490683][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.577111][ T49] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 163.202054][ T6487] siw: device registration error -23 [ 164.038260][ T49] usb 5-1: USB disconnect, device number 6 [ 165.105452][ T12] hsr_slave_0: left promiscuous mode [ 165.163447][ T12] hsr_slave_1: left promiscuous mode [ 165.165831][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.165900][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.258778][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.258812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.277916][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.463502][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 165.833790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.020693][ T49] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.020736][ T49] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 166.020760][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.095321][ T49] usb 4-1: config 0 descriptor?? [ 166.204992][ T12] veth1_macvtap: left promiscuous mode [ 166.205939][ T12] veth0_macvtap: left promiscuous mode [ 166.206275][ T12] veth1_vlan: left promiscuous mode [ 166.206632][ T12] veth0_vlan: left promiscuous mode [ 166.547082][ T49] corsair-cpro 0003:1B1C:0C10.0009: unknown main item tag 0x0 [ 166.547120][ T49] corsair-cpro 0003:1B1C:0C10.0009: unknown main item tag 0x0 [ 166.547148][ T49] corsair-cpro 0003:1B1C:0C10.0009: unknown main item tag 0x0 [ 166.547174][ T49] corsair-cpro 0003:1B1C:0C10.0009: unknown main item tag 0x0 [ 166.547201][ T49] corsair-cpro 0003:1B1C:0C10.0009: unknown main item tag 0x0 [ 166.579694][ T49] corsair-cpro 0003:1B1C:0C10.0009: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 166.777748][ T49] corsair-cpro 0003:1B1C:0C10.0009: probe with driver corsair-cpro failed with error -71 [ 166.851060][ T49] usb 4-1: USB disconnect, device number 8 [ 166.939418][ T6509] fido_id[6509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 167.629384][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.634924][ T49] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.790885][ T6524] siw: device registration error -23 [ 167.798995][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.933884][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 168.155614][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.323424][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.368729][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.413794][ T49] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.413829][ T49] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.413853][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.413888][ T49] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 168.413913][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.490432][ T49] usb 2-1: config 0 descriptor?? [ 168.613116][ T5931] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.798778][ T5931] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 168.798809][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.798830][ T5931] usb 4-1: Product: syz [ 168.798845][ T5931] usb 4-1: Manufacturer: syz [ 168.798862][ T5931] usb 4-1: SerialNumber: syz [ 168.854144][ T5931] usb 4-1: config 0 descriptor?? [ 168.964782][ T49] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 168.964819][ T49] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 168.964845][ T49] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 168.964872][ T49] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 168.964898][ T49] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 169.013246][ T49] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 169.130265][ T5931] usb 4-1: USB disconnect, device number 9 [ 169.170301][ T5991] usb 2-1: USB disconnect, device number 9 [ 169.198886][ T6527] fido_id[6527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 169.816291][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.084548][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.775690][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.670156][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 171.670191][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 173.025726][ T12] team0 (unregistering): Port device team_slave_1 removed [ 173.224097][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.507543][ T6533] vxcan1: entered allmulticast mode [ 175.538710][ T6281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.903227][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.903441][ T6010] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 175.910437][ T6281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.053317][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 176.053474][ T6010] usb 2-1: Using ep0 maxpacket: 32 [ 176.058978][ T6010] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 176.059004][ T6010] usb 2-1: config 0 has no interface number 0 [ 176.059109][ T6010] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.064060][ T6010] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 176.064094][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.064116][ T6010] usb 2-1: Product: syz [ 176.064133][ T6010] usb 2-1: Manufacturer: syz [ 176.064150][ T6010] usb 2-1: SerialNumber: syz [ 176.073997][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.075717][ T9] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 176.075752][ T9] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.075782][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 176.098758][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 176.098790][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.098814][ T9] usb 4-1: Product: syz [ 176.098831][ T9] usb 4-1: Manufacturer: syz [ 176.098848][ T9] usb 4-1: SerialNumber: syz [ 176.111909][ T6010] usb 2-1: config 0 descriptor?? [ 176.139064][ T6560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.141250][ T6565] hsr0: entered allmulticast mode [ 176.141272][ T6565] hsr_slave_0: entered allmulticast mode [ 176.141300][ T6565] hsr_slave_1: entered allmulticast mode [ 176.212124][ T6010] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 176.212162][ T6010] em28xx 2-1:0.132: Video interface 132 found: [ 176.256925][ T6566] hsr_slave_0: left promiscuous mode [ 176.305890][ T6566] hsr_slave_1: left promiscuous mode [ 176.363503][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.367871][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.410769][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 176.472469][ T5192] bcm5974 4-1:1.0: could not read from device [ 176.502323][ T6566] hsr0 (unregistering): left allmulticast mode [ 176.557515][ T6010] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 176.574771][ T5192] bcm5974 4-1:1.0: could not read from device [ 176.590387][ T9] usb 4-1: USB disconnect, device number 10 [ 176.936192][ T6570] bridge0: entered promiscuous mode [ 176.965448][ T6570] batman_adv: batadv0: Adding interface: macsec2 [ 176.965531][ T6570] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.965567][ T6570] batman_adv: batadv0: Interface activated: macsec2 [ 177.036932][ T6281] team0: Port device team_slave_0 added [ 177.067984][ T6281] team0: Port device team_slave_1 added [ 177.389203][ T6576] Bluetooth: hci0: unsupported parameter 32780 [ 177.389225][ T6576] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 177.532587][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.532604][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.536625][ T6281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.664424][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.664442][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.664469][ T6281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.737712][ T6010] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 177.740809][ T6010] em28xx 2-1:0.132: board has no eeprom [ 177.813365][ T6010] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 177.813416][ T6010] em28xx 2-1:0.132: analog set to bulk mode. [ 177.863418][ T5931] em28xx 2-1:0.132: Registering V4L2 extension [ 177.895612][ T6010] usb 2-1: USB disconnect, device number 10 [ 177.898116][ T6010] em28xx 2-1:0.132: Disconnecting em28xx [ 178.150478][ T6281] hsr_slave_0: entered promiscuous mode [ 178.151892][ T6281] hsr_slave_1: entered promiscuous mode [ 178.152835][ T6281] debugfs: 'hsr0' already exists in 'hsr' [ 178.152860][ T6281] Cannot create hsr debugfs directory [ 178.264621][ T5931] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 178.264649][ T5931] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 178.264663][ T5931] em28xx 2-1:0.132: No AC97 audio processor [ 178.277759][ T5931] usb 2-1: Decoder not found [ 178.277782][ T5931] em28xx 2-1:0.132: failed to create media graph [ 178.277850][ T5931] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 178.328275][ T5931] em28xx 2-1:0.132: Remote control support is not available for this card. [ 178.330540][ T6010] em28xx 2-1:0.132: Closing input extension [ 178.357614][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888049a01000: rx timeout, send abort [ 178.547884][ T6010] em28xx 2-1:0.132: Freeing device [ 178.631117][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.204'. [ 178.734063][ T6596] netlink: 'syz.1.204': attribute type 3 has an invalid length. [ 178.734085][ T6596] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 178.734099][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 178.803325][ T3121] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.858708][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888049a01000: abort rx timeout. Force session deactivation [ 178.861524][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e6f2000: rx timeout, send abort [ 178.963188][ T3121] usb 4-1: Using ep0 maxpacket: 16 [ 178.966090][ T3121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.966123][ T3121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.966147][ T3121] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.966191][ T3121] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 178.966214][ T3121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.028686][ T3121] usb 4-1: config 0 descriptor?? [ 179.362958][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e6f2000: abort rx timeout. Force session deactivation [ 179.514454][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.525719][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.564010][ T3121] HID 045e:07da: Invalid code 65791 type 1 [ 179.581435][ T3121] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input12 [ 179.630570][ T3121] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 179.683235][ T6010] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.753271][ T5931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.838448][ T6010] usb 3-1: Using ep0 maxpacket: 8 [ 179.840865][ T6010] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.840889][ T6010] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.840943][ T6010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 179.840971][ T6010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 179.841015][ T6010] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 179.841038][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.910140][ T6010] hub 3-1:1.0: bad descriptor, ignoring hub [ 179.910182][ T6010] hub 3-1:1.0: probe with driver hub failed with error -5 [ 179.911228][ T6010] cdc_wdm 3-1:1.0: skipping garbage [ 179.911244][ T6010] cdc_wdm 3-1:1.0: skipping garbage [ 179.937175][ T5931] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 179.937243][ T5931] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.937275][ T5931] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.937305][ T5931] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 179.937342][ T5931] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 179.937398][ T5931] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 179.937426][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.988073][ T6610] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 180.034762][ T3121] usb 4-1: USB disconnect, device number 11 [ 180.109632][ T6614] fido_id[6614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 180.120812][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e6f1800: rx timeout, send abort [ 180.210294][ T5931] ath6kl: Failed to submit usb control message: -71 [ 180.210365][ T5931] ath6kl: unable to send the bmi data to the device: -71 [ 180.210381][ T5931] ath6kl: Unable to send get target info: -71 [ 180.248335][ T6010] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 180.248373][ T6010] cdc_wdm 3-1:1.0: Unknown control protocol [ 180.248656][ T5931] ath6kl: Failed to init ath6kl core: -71 [ 180.249317][ T5931] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 180.355377][ T6281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.460925][ T5931] usb 2-1: USB disconnect, device number 11 [ 180.468641][ T6281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.494277][ T6010] usb 3-1: USB disconnect, device number 5 [ 180.602447][ T6281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.620881][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e6f1800: abort rx timeout. Force session deactivation [ 180.730104][ T6281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.773400][ T6625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.973174][ T6010] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 181.143262][ T6010] usb 3-1: Using ep0 maxpacket: 8 [ 181.147349][ T6010] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.147373][ T6010] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.147431][ T6010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 181.147460][ T6010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 181.147504][ T6010] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 181.147528][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.188313][ T6010] hub 3-1:1.0: bad descriptor, ignoring hub [ 181.188362][ T6010] hub 3-1:1.0: probe with driver hub failed with error -5 [ 181.189572][ T6010] cdc_wdm 3-1:1.0: skipping garbage [ 181.189591][ T6010] cdc_wdm 3-1:1.0: skipping garbage [ 181.253672][ T6010] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 181.253693][ T6010] cdc_wdm 3-1:1.0: Unknown control protocol [ 181.361728][ T6281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.501052][ T6281] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.527339][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.529217][ T6209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.563697][ T6010] usb 3-1: USB disconnect, device number 6 [ 181.587754][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.587932][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.933321][ T6010] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 182.083732][ T6010] usb 2-1: Using ep0 maxpacket: 32 [ 182.087194][ T6010] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 182.087223][ T6010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.143009][ T6010] usb 2-1: config 0 descriptor?? [ 182.383429][ T6010] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 182.406314][ T6010] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.407630][ T6010] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 182.407688][ T6010] usb 2-1: media controller created [ 182.550112][ T6010] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.924889][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 183.133369][ T6010] az6027: usb out operation failed. (-71) [ 183.143353][ T6010] az6027: usb out operation failed. (-71) [ 183.143372][ T6010] stb0899_attach: Driver disabled by Kconfig [ 183.143383][ T6010] az6027: no front-end attached [ 183.143383][ T6010] [ 183.175700][ T6010] az6027: usb out operation failed. (-71) [ 183.175732][ T6010] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 183.213273][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 183.233665][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.233729][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 183.233754][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.239274][ T6010] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 183.306950][ T6010] dvb-usb: schedule remote query interval to 400 msecs. [ 183.306980][ T6010] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 183.353507][ T9] usb 4-1: config 0 descriptor?? [ 183.361786][ T6010] usb 2-1: USB disconnect, device number 12 [ 183.396787][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 184.084025][ T6010] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 184.737038][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.753987][ T9] gspca_vc032x: reg_w err -71 [ 184.754079][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 184.790261][ T9] usb 4-1: USB disconnect, device number 12 [ 185.033041][ T6688] input: syz0 as /devices/virtual/input/input14 [ 185.375792][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.382957][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.407662][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.410924][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.415628][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.653192][ T6212] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.703481][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.775952][ T6281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.860136][ T6212] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.860173][ T6212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.860200][ T6212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.860224][ T6212] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.860269][ T6212] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.860293][ T6212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.928926][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.962489][ T6212] usb 4-1: config 0 descriptor?? [ 186.083412][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 186.086645][ T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 186.086674][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.134051][ T9] usb 3-1: config 0 descriptor?? [ 186.171240][ T9] as10x_usb: device has been detected [ 186.172215][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 186.206729][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 186.288929][ T9] as10x_usb: error during firmware upload part1 [ 186.289664][ T9] Registered device nBox DVB-T Dongle [ 186.361590][ T5936] usb 3-1: USB disconnect, device number 7 [ 186.381359][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.436163][ T6212] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 186.594662][ T6212] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 186.692225][ T6212] usb 4-1: USB disconnect, device number 13 [ 186.699267][ T5936] Unregistered device nBox DVB-T Dongle [ 186.742599][ T5936] as10x_usb: device has been disconnected [ 186.756533][ T6706] fido_id[6706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 186.770546][ T6689] lo speed is unknown, defaulting to 1000 [ 186.960279][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.023258][ T49] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.173331][ T5936] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 187.181480][ T49] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 187.181508][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.214187][ T49] usb 2-1: config 0 descriptor?? [ 187.336863][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 187.346975][ T5936] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 187.347082][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.462050][ T49] kaweth 2-1:0.0: Firmware present in device. [ 187.481341][ T5936] usb 3-1: config 0 descriptor?? [ 187.483374][ T5848] Bluetooth: hci3: command tx timeout [ 187.641549][ T49] kaweth 2-1:0.0: Statistics collection: 0 [ 187.641573][ T49] kaweth 2-1:0.0: Multicast filter limit: 0 [ 187.641588][ T49] kaweth 2-1:0.0: MTU: 0 [ 187.641602][ T49] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 187.702155][ T5936] as10x_usb: device has been detected [ 187.715703][ T5936] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 187.996293][ T6722] syz.3.234 (6722) used greatest stack depth: 18968 bytes left [ 188.035208][ T5936] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 188.266583][ T5936] as10x_usb: error during firmware upload part1 [ 188.267307][ T5936] Registered device nBox DVB-T Dongle [ 188.320871][ T5936] usb 3-1: USB disconnect, device number 8 [ 188.452950][ T5936] Unregistered device nBox DVB-T Dongle [ 188.504197][ T5936] as10x_usb: device has been disconnected [ 188.620786][ T49] kaweth 2-1:0.0: kaweth interface created at eth6 [ 188.622657][ T6727] syzkaller1: entered promiscuous mode [ 188.622685][ T6727] syzkaller1: entered allmulticast mode [ 188.640501][ T49] usb 2-1: USB disconnect, device number 13 [ 189.043045][ T6734] syz_tun: entered allmulticast mode [ 189.096182][ T6732] syz_tun: left allmulticast mode [ 189.473288][ T37] bridge_slave_1: left allmulticast mode [ 189.473318][ T37] bridge_slave_1: left promiscuous mode [ 189.473574][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.484186][ T5936] IPVS: starting estimator thread 0... [ 189.486038][ T6744] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.689435][ T5848] Bluetooth: hci3: command tx timeout [ 189.713546][ T6748] IPVS: using max 6 ests per chain, 14400 per kthread [ 189.791783][ T37] bridge_slave_0: left allmulticast mode [ 189.791817][ T37] bridge_slave_0: left promiscuous mode [ 189.792103][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.843615][ T49] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 191.047826][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.047860][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.047899][ T49] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 191.047922][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.088429][ T49] usb 4-1: config 0 descriptor?? [ 191.483338][ T5931] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 191.522996][ T49] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 191.645718][ T5931] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.645748][ T5931] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 191.645767][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.645823][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 191.645851][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 191.683299][ T6212] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 191.693167][ T5931] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.693195][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.693214][ T5931] usb 3-1: Product: syz [ 191.693228][ T5931] usb 3-1: Manufacturer: syz [ 191.723452][ T5848] Bluetooth: hci3: command tx timeout [ 191.762845][ T5931] cdc_wdm 3-1:1.0: skipping garbage [ 191.762865][ T5931] cdc_wdm 3-1:1.0: skipping garbage [ 191.795842][ T49] usb 4-1: USB disconnect, device number 14 [ 191.815133][ T5931] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 191.815163][ T5931] cdc_wdm 3-1:1.0: Unknown control protocol [ 191.836933][ T6212] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.836962][ T6212] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.837006][ T6212] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.837031][ T6212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.017852][ T5936] usb 3-1: USB disconnect, device number 9 [ 192.160679][ T6212] usb 2-1: usb_control_msg returned -32 [ 192.160729][ T6212] usbtmc 2-1:16.0: can't read capabilities [ 193.804243][ T5848] Bluetooth: hci3: command tx timeout [ 194.301877][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.438076][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.489378][ T6212] usb 2-1: USB disconnect, device number 14 [ 194.539139][ T37] bond0 (unregistering): Released all slaves [ 194.985941][ T6281] veth0_vlan: entered promiscuous mode [ 196.265336][ T6281] veth1_vlan: entered promiscuous mode [ 196.524738][ T6689] chnl_net:caif_netlink_parms(): no params data found [ 197.554249][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.557511][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.560325][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.602125][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.620395][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.499568][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.499647][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.764807][ T5848] Bluetooth: hci5: command tx timeout [ 201.219297][ T6849] siw: device registration error -23 [ 201.803275][ T5848] Bluetooth: hci5: command tx timeout [ 202.384373][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.384408][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.547401][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.547434][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.843363][ T37] veth1_macvtap: left promiscuous mode [ 203.843502][ T37] veth0_macvtap: left promiscuous mode [ 203.843793][ T37] veth1_vlan: left promiscuous mode [ 203.843998][ T37] veth0_vlan: left promiscuous mode [ 203.883260][ T5848] Bluetooth: hci5: command tx timeout [ 204.940676][ T6892] siw: device registration error -23 [ 205.977838][ T5848] Bluetooth: hci5: command tx timeout [ 206.153244][ T5931] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.313254][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 206.442080][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.442131][ T5931] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.442156][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.500585][ T5931] usb 3-1: config 0 descriptor?? [ 206.733736][ T5931] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 206.970735][ T5931] usb 3-1: USB disconnect, device number 10 [ 207.886436][ T49] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.036008][ T49] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 208.036041][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.072084][ T49] usb 3-1: config 0 descriptor?? [ 208.083415][ T49] cp210x 3-1:0.0: cp210x converter detected [ 208.334699][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.336299][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.548878][ T49] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 208.593360][ T49] usb 3-1: cp210x converter now attached to ttyUSB0 [ 208.761540][ T49] usb 3-1: USB disconnect, device number 11 [ 208.798780][ T49] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.954854][ T49] cp210x 3-1:0.0: device disconnected [ 209.448355][ T37] team0 (unregistering): Port device team_slave_1 removed [ 210.063088][ T6929] siw: device registration error -23 [ 210.906490][ T37] team0 (unregistering): Port device team_slave_0 removed [ 215.681072][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.413702][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.412875][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.658425][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.834528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 217.834600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.554058][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.680931][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.550297][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.403981][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.404140][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.404387][ T6689] bridge_slave_0: entered allmulticast mode [ 220.413473][ T6689] bridge_slave_0: entered promiscuous mode [ 220.874742][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.874890][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.875125][ T6689] bridge_slave_1: entered allmulticast mode [ 220.878032][ T6689] bridge_slave_1: entered promiscuous mode [ 220.879253][ T6809] lo speed is unknown, defaulting to 1000 [ 221.371579][ T7002] bridge1: entered promiscuous mode [ 221.429812][ T6689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.492686][ T6689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.119897][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 222.119935][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 222.193103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 222.193156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 222.193194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 222.193233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 222.669093][ T6689] team0: Port device team_slave_0 added [ 222.757696][ T6689] team0: Port device team_slave_1 added [ 222.993249][ T49] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 223.143347][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 223.145983][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.146014][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.146044][ T49] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.146087][ T49] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 223.146110][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.165362][ T49] usb 2-1: config 0 descriptor?? [ 223.186528][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.186546][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.186578][ T6689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.220928][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.220947][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.220977][ T6689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.640335][ T49] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 223.640374][ T49] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 223.640402][ T49] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 223.640428][ T49] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 223.640455][ T49] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 223.683721][ T49] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 223.830208][ T7017] random: crng reseeded on system resumption [ 224.256839][ T49] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 224.257365][ T49] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 224.349965][ T5936] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 224.377730][ T5936] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 224.379086][ T5936] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 224.379991][ T6689] hsr_slave_0: entered promiscuous mode [ 224.380324][ T5936] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 224.393843][ T49] usb 2-1: USB disconnect, device number 15 [ 224.446416][ T6689] hsr_slave_1: entered promiscuous mode [ 224.490169][ T6689] debugfs: 'hsr0' already exists in 'hsr' [ 224.490199][ T6689] Cannot create hsr debugfs directory [ 224.897947][ T5849] Bluetooth: hci4: unexpected subevent 0x01 length: 37 > 18 [ 224.904491][ T5849] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 224.904543][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.904567][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.904581][ T5849] Workqueue: hci4 hci_rx_work [ 224.904623][ T5849] Call Trace: [ 224.904632][ T5849] [ 224.904641][ T5849] dump_stack_lvl+0x189/0x250 [ 224.904680][ T5849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.904713][ T5849] ? __pfx__printk+0x10/0x10 [ 224.904740][ T5849] ? __rcu_read_unlock+0x84/0xe0 [ 224.904768][ T5849] ? kernfs_path_from_node+0x2c/0x280 [ 224.904790][ T5849] ? kernfs_path_from_node+0x243/0x280 [ 224.904810][ T5849] ? kernfs_path_from_node+0x2c/0x280 [ 224.904835][ T5849] sysfs_create_dir_ns+0x259/0x280 [ 224.904867][ T5849] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 224.904891][ T5849] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 224.904937][ T5849] ? rt_spin_unlock+0x65/0x80 [ 224.904967][ T5849] kobject_add_internal+0x5a5/0xb50 [ 224.905009][ T5849] kobject_add+0x155/0x220 [ 224.905045][ T5849] ? __pfx_kobject_add+0x10/0x10 [ 224.905086][ T5849] ? get_device_parent+0x370/0x3a0 [ 224.905123][ T5849] device_add+0x408/0xb50 [ 224.905161][ T5849] hci_conn_add_sysfs+0xd5/0x1e0 [ 224.905197][ T5849] le_conn_complete_evt+0xc3a/0x1220 [ 224.905240][ T5849] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 224.905267][ T5849] ? __pfx_bt_warn+0x10/0x10 [ 224.905291][ T5849] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 224.905321][ T5849] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.905353][ T5849] ? skb_pull_data+0xfb/0x200 [ 224.905381][ T5849] hci_le_conn_complete_evt+0x187/0x450 [ 224.905416][ T5849] hci_event_packet+0x78f/0x1200 [ 224.905462][ T5849] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 224.905493][ T5849] ? __pfx_hci_event_packet+0x10/0x10 [ 224.905514][ T5849] ? __pfx_migrate_enable+0x10/0x10 [ 224.905552][ T5849] ? hci_send_to_monitor+0xe2/0x570 [ 224.905584][ T5849] hci_rx_work+0x46a/0xe80 [ 224.905616][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 224.905645][ T5849] process_scheduled_works+0xade/0x17b0 [ 224.905708][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.905758][ T5849] worker_thread+0x8a0/0xda0 [ 224.905803][ T5849] ? __kthread_parkme+0x7b/0x200 [ 224.905845][ T5849] kthread+0x711/0x8a0 [ 224.905883][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 224.905911][ T5849] ? __pfx_kthread+0x10/0x10 [ 224.905960][ T5849] ? __pfx_kthread+0x10/0x10 [ 224.905996][ T5849] ret_from_fork+0x3fc/0x770 [ 224.906029][ T5849] ? __pfx_ret_from_fork+0x10/0x10 [ 224.906067][ T5849] ? __switch_to_asm+0x39/0x70 [ 224.906086][ T5849] ? __switch_to_asm+0x33/0x70 [ 224.906105][ T5849] ? __pfx_kthread+0x10/0x10 [ 224.906141][ T5849] ret_from_fork_asm+0x1a/0x30 [ 224.906182][ T5849] [ 224.906218][ T5849] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 224.906260][ T5849] Bluetooth: hci4: failed to register connection device [ 225.646618][ T49] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.753983][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.854198][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.971072][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.002186][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.150805][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.220551][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.256125][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.314724][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.343176][ T49] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.343205][ T49] usb 3-1: config 0 has no interface number 0 [ 226.343256][ T49] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.343281][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.403470][ T49] usb 3-1: config 0 descriptor?? [ 226.416431][ T49] cp210x 3-1:0.1: cp210x converter detected [ 226.808078][ T49] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 227.050834][ T49] usb 3-1: cp210x converter now attached to ttyUSB0 [ 227.224179][ T6010] usb 3-1: USB disconnect, device number 12 [ 227.244283][ T6010] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.363568][ T6010] cp210x 3-1:0.1: device disconnected [ 227.579303][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.679892][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.813233][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 227.941614][ T6809] chnl_net:caif_netlink_parms(): no params data found [ 227.975584][ T10] usb 2-1: config 0 has no interfaces? [ 227.975621][ T10] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 227.975645][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.011804][ T10] usb 2-1: config 0 descriptor?? [ 228.264211][ T5936] usb 2-1: USB disconnect, device number 16 [ 229.233441][ T3121] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 229.383414][ T3121] usb 3-1: Using ep0 maxpacket: 16 [ 229.385916][ T3121] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.385980][ T3121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.386008][ T3121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 229.386032][ T3121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.386054][ T3121] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.405173][ T3121] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.405206][ T3121] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.405226][ T3121] usb 3-1: Manufacturer: syz [ 229.419349][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.419532][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.419790][ T6809] bridge_slave_0: entered allmulticast mode [ 229.439559][ T3121] usb 3-1: config 0 descriptor?? [ 229.463752][ T6809] bridge_slave_0: entered promiscuous mode [ 229.572812][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.575882][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.580606][ T6809] bridge_slave_1: entered allmulticast mode [ 229.602417][ T6809] bridge_slave_1: entered promiscuous mode [ 230.063339][ T3121] rc_core: IR keymap rc-hauppauge not found [ 230.063360][ T3121] Registered IR keymap rc-empty [ 230.063528][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.083278][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.117915][ T3121] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 230.147087][ T3121] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 230.194769][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.226210][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.243345][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.263362][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.285717][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.303397][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.323312][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.343276][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.363582][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.383322][ T3121] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.813639][ T3121] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 230.813666][ T3121] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 230.939963][ T3121] usb 3-1: USB disconnect, device number 13 [ 230.976567][ T7104] sctp: [Deprecated]: syz.1.344 (pid 7104) Use of int in max_burst socket option deprecated. [ 230.976567][ T7104] Use struct sctp_assoc_value instead [ 231.060271][ T6809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.208602][ T6809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.562432][ T38] audit: type=1326 audit(1756387705.717:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.2.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddbc69ebe9 code=0x0 [ 232.027061][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 232.050596][ T7119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.160604][ T6809] team0: Port device team_slave_0 added [ 232.162649][ T37] bridge_slave_1: left allmulticast mode [ 232.162681][ T37] bridge_slave_1: left promiscuous mode [ 232.163887][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.187869][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 232.190471][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.190502][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.190525][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.190568][ T10] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 232.190592][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.254828][ T10] usb 2-1: config 0 descriptor?? [ 232.309083][ T37] bridge_slave_0: left allmulticast mode [ 232.309134][ T37] bridge_slave_0: left promiscuous mode [ 232.309424][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.846580][ T10] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 232.846619][ T10] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 232.846655][ T10] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 232.846683][ T10] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 232.846711][ T10] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 232.851440][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 233.006056][ T10] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 233.006496][ T10] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 233.044214][ T7130] random: crng reseeded on system resumption [ 234.340439][ T7135] siw: device registration error -23 [ 234.730631][ T5931] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 234.730972][ T5931] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 234.731446][ T5931] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 234.731856][ T10] usb 2-1: USB disconnect, device number 17 [ 237.702957][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.865118][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.043147][ T7179] siw: device registration error -23 [ 238.051361][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.379986][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.547777][ T1433] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 239.955749][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.044258][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.092036][ T37] bond0 (unregistering): Released all slaves [ 240.212783][ T6809] team0: Port device team_slave_1 added [ 240.652935][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.652952][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.652978][ T6809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.659047][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.659064][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.659095][ T6809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.931978][ T37] hsr_slave_0: left promiscuous mode [ 241.235617][ T37] hsr_slave_1: left promiscuous mode [ 241.237940][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.505256][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.263344][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.530394][ T37] veth1_vlan: left promiscuous mode [ 242.559148][ T37] veth0_vlan: left promiscuous mode [ 243.183139][ T7227] siw: device registration error -23 [ 243.663325][ T3121] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.833478][ T3121] usb 3-1: Using ep0 maxpacket: 32 [ 243.835800][ T3121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.835828][ T3121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.835863][ T3121] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 243.835884][ T3121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.906590][ T3121] usb 3-1: config 0 descriptor?? [ 244.431237][ T3121] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 244.638632][ T10] usb 3-1: USB disconnect, device number 14 [ 245.467307][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.493692][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.497699][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.513686][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.514500][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.533524][ T5959] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.686956][ T5959] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.687031][ T5959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.687074][ T5959] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.691500][ T5959] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.691528][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.691556][ T5959] usb 3-1: Product: syz [ 245.691570][ T5959] usb 3-1: Manufacturer: syz [ 245.691584][ T5959] usb 3-1: SerialNumber: syz [ 245.759153][ T10] kernel read not supported for file /admmidi2 (pid: 10 comm: kworker/0:1) [ 245.770755][ T37] team0 (unregistering): Port device team_slave_1 removed [ 245.827820][ T5959] cdc_mbim 3-1:1.0: skipping garbage [ 246.312635][ T37] team0 (unregistering): Port device team_slave_0 removed [ 247.032370][ T7249] syz.3.390 (7249) used greatest stack depth: 18840 bytes left [ 247.078639][ T5959] cdc_mbim 3-1:1.0: bind() failure [ 247.124207][ T5959] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 247.124256][ T5959] cdc_ncm 3-1:1.1: bind() failure [ 247.152922][ T5959] usb 3-1: USB disconnect, device number 15 [ 247.330555][ T7254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.643229][ T5857] Bluetooth: hci0: command tx timeout [ 249.733245][ T5857] Bluetooth: hci0: command tx timeout [ 251.223276][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 251.563535][ T6809] hsr_slave_0: entered promiscuous mode [ 251.565009][ T6809] hsr_slave_1: entered promiscuous mode [ 251.566073][ T6809] debugfs: 'hsr0' already exists in 'hsr' [ 251.566098][ T6809] Cannot create hsr debugfs directory [ 252.499852][ T5849] Bluetooth: hci0: command tx timeout [ 252.545610][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.545702][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.548882][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.548910][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.548930][ T10] usb 2-1: Product: syz [ 252.548945][ T10] usb 2-1: Manufacturer: syz [ 252.548959][ T10] usb 2-1: SerialNumber: syz [ 252.794820][ T7238] lo speed is unknown, defaulting to 1000 [ 252.875261][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 253.918573][ T10] cdc_ncm 2-1:1.0: bind() failure [ 253.950656][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 253.950702][ T10] cdc_ncm 2-1:1.1: bind() failure [ 254.129521][ T3121] usb 2-1: USB disconnect, device number 18 [ 254.523707][ T5857] Bluetooth: hci0: command tx timeout [ 254.645019][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.411'. [ 255.411480][ T7314] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 255.411502][ T7314] netlink: 'syz.2.411': attribute type 2 has an invalid length. [ 255.411516][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 258.021507][ T7352] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.602793][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.645517][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.650541][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.671161][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.673555][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.309793][ T7387] input: syz1 as /devices/virtual/input/input19 [ 259.613338][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.273226][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 260.423221][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 260.429749][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 260.429817][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.429850][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.429876][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.429901][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.429946][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.429969][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.763229][ T5857] Bluetooth: hci3: command tx timeout [ 260.871437][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.931893][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.931948][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.261090][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.305080][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.315697][ T10] usb 2-1: usb_control_msg returned -32 [ 261.315883][ T10] usbtmc 2-1:16.0: can't read capabilities [ 261.587614][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.965918][ T7412] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 262.008205][ T7238] chnl_net:caif_netlink_parms(): no params data found [ 262.194775][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.222196][ T10] usb 2-1: USB disconnect, device number 19 [ 262.679895][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.057649][ T5857] Bluetooth: hci3: command tx timeout [ 263.248504][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.431108][ T7365] lo speed is unknown, defaulting to 1000 [ 264.619185][ T7435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.433'. [ 264.619210][ T7435] netlink: 64 bytes leftover after parsing attributes in process `syz.1.433'. [ 265.250767][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.250920][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.251151][ T7238] bridge_slave_0: entered allmulticast mode [ 265.253590][ T5857] Bluetooth: hci3: command tx timeout [ 265.294344][ T7238] bridge_slave_0: entered promiscuous mode [ 265.315884][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 265.334328][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.334553][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.334760][ T7238] bridge_slave_1: entered allmulticast mode [ 265.337612][ T7238] bridge_slave_1: entered promiscuous mode [ 265.473244][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 265.490346][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 265.490379][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.523187][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.523220][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.523239][ T10] usb 4-1: Product: syz [ 265.523253][ T10] usb 4-1: Manufacturer: syz [ 265.523268][ T10] usb 4-1: SerialNumber: syz [ 265.606270][ T10] usb 4-1: config 0 descriptor?? [ 265.623267][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.623304][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 267.263337][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 267.283179][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 267.490682][ T5857] Bluetooth: hci3: command tx timeout [ 267.608175][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 267.608196][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 268.705386][ T10] usb 4-1: USB disconnect, device number 15 [ 268.707740][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 268.739911][ T10] em28xx 4-1:0.0: Freeing device [ 269.133261][ T5931] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 269.372455][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 269.372486][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.559793][ T5931] usb 2-1: config 0 descriptor?? [ 269.611422][ T5931] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 269.796507][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.967232][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.986182][ T37] bridge_slave_1: left allmulticast mode [ 269.986213][ T37] bridge_slave_1: left promiscuous mode [ 269.986452][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.118094][ T37] bridge_slave_0: left allmulticast mode [ 270.118128][ T37] bridge_slave_0: left promiscuous mode [ 270.118418][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.463407][ T3121] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 270.614506][ T3121] usb 4-1: Using ep0 maxpacket: 8 [ 270.616933][ T3121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.616966][ T3121] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.617021][ T3121] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 270.617051][ T3121] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 270.617095][ T3121] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 270.617117][ T3121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.669455][ T3121] hub 4-1:1.0: bad descriptor, ignoring hub [ 270.669498][ T3121] hub 4-1:1.0: probe with driver hub failed with error -5 [ 270.670582][ T3121] cdc_wdm 4-1:1.0: skipping garbage [ 270.670601][ T3121] cdc_wdm 4-1:1.0: skipping garbage [ 270.684711][ T3121] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 270.684736][ T3121] cdc_wdm 4-1:1.0: Unknown control protocol [ 271.037883][ T5931] usb 2-1: USB disconnect, device number 20 [ 271.153689][ T3121] usb 4-1: USB disconnect, device number 16 [ 271.184036][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.314066][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.398476][ T37] bond0 (unregistering): Released all slaves [ 271.526179][ T3121] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 271.753201][ T3121] usb 4-1: Using ep0 maxpacket: 8 [ 271.755791][ T3121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.755823][ T3121] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 271.755876][ T3121] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 271.755905][ T3121] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 271.755948][ T3121] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 271.755970][ T3121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.060502][ T3121] hub 4-1:1.0: bad descriptor, ignoring hub [ 272.060543][ T3121] hub 4-1:1.0: probe with driver hub failed with error -5 [ 272.061543][ T3121] cdc_wdm 4-1:1.0: skipping garbage [ 272.061558][ T3121] cdc_wdm 4-1:1.0: skipping garbage [ 272.258638][ T3121] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 272.258661][ T3121] cdc_wdm 4-1:1.0: Unknown control protocol [ 272.306577][ T3121] usb 4-1: USB disconnect, device number 17 [ 272.949061][ T7238] team0: Port device team_slave_0 added [ 272.982847][ T7238] team0: Port device team_slave_1 added [ 273.133272][ T37] hsr_slave_0: left promiscuous mode [ 273.153254][ T6002] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 273.162282][ T7520] loop2: detected capacity change from 0 to 7 [ 273.190193][ T37] hsr_slave_1: left promiscuous mode [ 273.195137][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.230152][ T7520] Dev loop2: unable to read RDB block 7 [ 273.230204][ T7520] loop2: unable to read partition table [ 273.230444][ T7520] loop2: partition table beyond EOD, truncated [ 273.230477][ T7520] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 273.274118][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.303563][ T3121] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 273.332953][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.332988][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.333011][ T6002] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.334917][ T6002] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.334949][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.357400][ T6002] usb 2-1: config 0 descriptor?? [ 273.463194][ T3121] usb 3-1: Using ep0 maxpacket: 8 [ 273.466136][ T3121] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 273.466199][ T3121] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.466225][ T3121] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.466250][ T3121] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.466276][ T3121] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.466325][ T3121] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.466350][ T3121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.786822][ T3121] usb 3-1: GET_CAPABILITIES returned 0 [ 273.786872][ T3121] usbtmc 3-1:16.0: can't read capabilities [ 273.902127][ T6002] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 274.372554][ T7517] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 274.386148][ T6002] usb 3-1: USB disconnect, device number 16 [ 275.893434][ T6002] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 275.949140][ T37] team0 (unregistering): Port device team_slave_1 removed [ 275.962729][ T3121] usb 2-1: USB disconnect, device number 21 [ 276.062222][ T6002] usb 3-1: Using ep0 maxpacket: 16 [ 276.066731][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.066764][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.066804][ T6002] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 276.066827][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.233949][ T6002] usb 3-1: config 0 descriptor?? [ 277.594559][ T37] team0 (unregistering): Port device team_slave_0 removed [ 278.178948][ T6002] letsketch 0003:6161:4D15.0012: Device info: ఁ [ 278.418581][ T6002] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 278.418681][ T6002] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -71 [ 278.453857][ T6002] usb 3-1: USB disconnect, device number 17 [ 278.736948][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 282.872827][ C1] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff88804a270000: rx timeout, send abort [ 283.372955][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88804a270000: abort rx timeout. Force session deactivation [ 283.724041][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.724059][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.724091][ T7238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.736139][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.736156][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.736187][ T7238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.787595][ T7365] chnl_net:caif_netlink_parms(): no params data found [ 284.854703][ T7238] hsr_slave_0: entered promiscuous mode [ 284.879651][ T7238] hsr_slave_1: entered promiscuous mode [ 284.880609][ T7238] debugfs: 'hsr0' already exists in 'hsr' [ 284.880636][ T7238] Cannot create hsr debugfs directory [ 285.943463][ T5936] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 286.093200][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 286.098926][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 286.098959][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.098981][ T5936] usb 2-1: Product: syz [ 286.098995][ T5936] usb 2-1: Manufacturer: syz [ 286.099011][ T5936] usb 2-1: SerialNumber: syz [ 286.150060][ T5936] usb 2-1: config 0 descriptor?? [ 286.408876][ T5936] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 286.884507][ T5931] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 286.905869][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.906225][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.908363][ T7365] bridge_slave_0: entered allmulticast mode [ 286.962651][ T7365] bridge_slave_0: entered promiscuous mode [ 287.043122][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 287.046271][ T5931] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.046300][ T5931] usb 3-1: config 0 has no interface number 0 [ 287.051011][ T5931] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 287.051041][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.051062][ T5931] usb 3-1: Product: syz [ 287.051078][ T5931] usb 3-1: Manufacturer: syz [ 287.051093][ T5931] usb 3-1: SerialNumber: syz [ 287.112906][ T5931] usb 3-1: config 0 descriptor?? [ 287.144405][ T5931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.229433][ T5931] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 287.254450][ T5936] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 287.268098][ T5936] usb 2-1: USB disconnect, device number 22 [ 287.288257][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.288402][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.292661][ T7365] bridge_slave_1: entered allmulticast mode [ 287.304042][ T7365] bridge_slave_1: entered promiscuous mode [ 287.388589][ T37] bridge_slave_1: left allmulticast mode [ 287.388623][ T37] bridge_slave_1: left promiscuous mode [ 287.390807][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.415205][ T3121] usb 3-1: USB disconnect, device number 18 [ 287.469806][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.529900][ T37] bridge_slave_0: left allmulticast mode [ 287.529927][ T37] bridge_slave_0: left promiscuous mode [ 287.530124][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.915413][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.044545][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.130852][ T37] bond0 (unregistering): Released all slaves [ 288.340040][ C1] Unknown status report in ack skb [ 288.767331][ T7365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.004872][ T37] hsr_slave_0: left promiscuous mode [ 289.053827][ T37] hsr_slave_1: left promiscuous mode [ 289.054958][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.095635][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.703478][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 289.873077][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 289.876929][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.876955][ T10] usb 3-1: config 0 has no interface number 0 [ 289.880212][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 289.880243][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.880265][ T10] usb 3-1: Product: syz [ 289.880280][ T10] usb 3-1: Manufacturer: syz [ 289.880296][ T10] usb 3-1: SerialNumber: syz [ 289.948448][ T10] usb 3-1: config 0 descriptor?? [ 289.993190][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 290.228863][ T37] team0 (unregistering): Port device team_slave_1 removed [ 290.405252][ T37] team0 (unregistering): Port device team_slave_0 removed [ 291.190374][ T10] gspca_spca1528: reg_w err -71 [ 291.190493][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 291.220077][ T10] usb 3-1: USB disconnect, device number 19 [ 291.332552][ T7365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.478973][ T7365] team0: Port device team_slave_0 added [ 292.627350][ T7365] team0: Port device team_slave_1 added [ 294.433264][ T5936] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 294.498384][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.498401][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.498431][ T7365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.590689][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.590726][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.590768][ T5936] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.590793][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.914345][ T5936] usb 2-1: config 0 descriptor?? [ 294.920380][ T5936] hub 2-1:0.0: USB hub found [ 295.609830][ T5936] hub 2-1:0.0: 1 port detected [ 296.334316][ T5936] hub 2-1:0.0: activate --> -90 [ 296.426322][ T5959] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 296.597387][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.597483][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.597525][ T5959] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 296.597550][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.670060][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.670079][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.670668][ T7365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.727122][ T5959] usb 3-1: config 0 descriptor?? [ 296.745207][ T5936] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 296.777376][ T5936] usb 2-1: USB disconnect, device number 23 [ 296.792695][ T3121] usb 2-1: Failed to suspend device, error -19 [ 297.191442][ T5959] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 297.211466][ T5959] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 297.385573][ T7365] hsr_slave_0: entered promiscuous mode [ 297.389616][ T5959] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x4D [ 297.393806][ T7365] hsr_slave_1: entered promiscuous mode [ 297.400450][ T5936] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 297.416784][ T7365] debugfs: 'hsr0' already exists in 'hsr' [ 297.416814][ T7365] Cannot create hsr debugfs directory [ 297.583281][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 297.585270][ T5936] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 297.588388][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.591934][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.639854][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.673561][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.694313][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.737395][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.746476][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.748883][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.755158][ T5936] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 297.770996][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 297.771025][ T5936] usb 4-1: SerialNumber: syz [ 297.822951][ T5936] usb 4-1: config 0 descriptor?? [ 297.879000][ T5936] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 298.135453][ T7707] input: syz1 as /devices/virtual/input/input21 [ 298.193904][ T5192] bcm5974 4-1:0.0: could not read from device [ 298.202895][ T10] usb 3-1: USB disconnect, device number 20 [ 298.300885][ T5192] bcm5974 4-1:0.0: could not read from device [ 298.325618][ T5936] usb 4-1: USB disconnect, device number 18 [ 299.443326][ T7238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.519689][ T7238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.536215][ T6010] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 299.582812][ T7238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.683206][ T6010] usb 4-1: Using ep0 maxpacket: 32 [ 299.686917][ T6010] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 299.686961][ T6010] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 299.687022][ T6010] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 299.687051][ T6010] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 299.687081][ T6010] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.749489][ T6010] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 299.749520][ T6010] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 299.749544][ T6010] usb 4-1: Product: syz [ 299.749559][ T6010] usb 4-1: Manufacturer: syz [ 299.749575][ T6010] usb 4-1: SerialNumber: syz [ 299.808035][ T6010] usb 4-1: config 0 descriptor?? [ 299.840543][ T6010] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 299.871844][ T6010] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 300.021731][ T7730] siw: device registration error -23 [ 300.592973][ T7238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.822050][ T6002] usb 4-1: USB disconnect, device number 19 [ 300.860275][ T6002] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 301.306191][ T7745] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 301.306215][ T7745] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 301.306229][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'. [ 302.762710][ T7365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.814013][ T7365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.871045][ T7365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.957577][ T7365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.433404][ T6002] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 303.455864][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.569992][ T7238] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.590800][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.590834][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.590859][ T6002] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.590904][ T6002] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.590929][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.627201][ T6002] usb 4-1: config 0 descriptor?? [ 303.688753][ T1373] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.688907][ T1373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.869246][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.869411][ T1433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.958342][ T7365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.126304][ T6002] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xe [ 304.126349][ T6002] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 304.174290][ T6002] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 304.325431][ T7365] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.407368][ T10] usb 4-1: USB disconnect, device number 20 [ 304.520634][ T1433] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.520893][ T1433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.615448][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.617322][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.228286][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.251236][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.252831][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.257694][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.258576][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.363656][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 306.377036][ T38] audit: type=1326 audit(1756387780.527:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7843 comm="syz.1.544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ce7f3ebe9 code=0x0 [ 306.515542][ T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 306.515597][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 306.515619][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.544143][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 306.544175][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 306.544196][ T10] usb 4-1: Product: syz [ 306.544211][ T10] usb 4-1: Manufacturer: syz [ 306.544225][ T10] usb 4-1: SerialNumber: syz [ 306.587564][ T10] usb 4-1: config 0 descriptor?? [ 306.600836][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 306.600888][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 306.625278][ T10] usb 4-1: selecting invalid altsetting 0 [ 306.743132][ T6002] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 306.895383][ T6002] usb 3-1: config 0 has no interfaces? [ 306.897770][ T6002] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.897801][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.897823][ T6002] usb 3-1: Product: syz [ 306.897838][ T6002] usb 3-1: Manufacturer: syz [ 306.946360][ T6002] usb 3-1: config 0 descriptor?? [ 307.089502][ T5936] usb 4-1: USB disconnect, device number 21 [ 307.196174][ T5931] usb 3-1: USB disconnect, device number 21 [ 307.198257][ T7842] lo speed is unknown, defaulting to 1000 [ 307.225510][ T7365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.296540][ T5857] Bluetooth: hci5: command tx timeout [ 310.373131][ T5857] Bluetooth: hci5: command tx timeout [ 311.737946][ T7365] veth0_vlan: entered promiscuous mode [ 312.171712][ T7842] chnl_net:caif_netlink_parms(): no params data found [ 312.444669][ T5857] Bluetooth: hci5: command tx timeout [ 312.448287][ T7917] loop6: detected capacity change from 0 to 7 [ 312.483967][ T7917] Dev loop6: unable to read RDB block 7 [ 312.484015][ T7917] loop6: AHDI p3 p4 [ 312.484056][ T7917] loop6: partition table partially beyond EOD, truncated [ 312.484331][ T7917] loop6: p3 start 7893504 is beyond EOD, truncated [ 313.174078][ T7365] veth1_vlan: entered promiscuous mode [ 313.287305][ T7927] siw: device registration error -23 [ 313.305979][ T6002] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 314.162023][ T67] bridge_slave_1: left allmulticast mode [ 314.162058][ T67] bridge_slave_1: left promiscuous mode [ 314.162342][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.263161][ T6002] usb 3-1: Using ep0 maxpacket: 8 [ 314.265602][ T6002] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 314.273297][ T6002] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 314.273329][ T6002] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 314.273353][ T6002] usb 3-1: Product: syz [ 314.273371][ T6002] usb 3-1: Manufacturer: syz [ 314.273387][ T6002] usb 3-1: SerialNumber: syz [ 314.356726][ T67] bridge_slave_0: left allmulticast mode [ 314.356762][ T67] bridge_slave_0: left promiscuous mode [ 314.357057][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.523192][ T5857] Bluetooth: hci5: command tx timeout [ 314.595983][ T6002] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 314.596009][ T6002] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 314.596030][ T6002] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 314.596050][ T6002] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 314.797153][ T6002] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 314.797242][ T6002] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 314.873712][ T6002] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 314.888776][ T6002] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 314.935190][ T6002] usb 3-1: USB disconnect, device number 22 [ 314.974463][ T6002] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 315.002785][ T6002] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 315.008565][ T6002] visor 3-1:1.0: device disconnected [ 316.113262][ T49] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 316.263332][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 316.269045][ T49] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 316.269073][ T49] usb 2-1: config 0 has no interface number 0 [ 316.269133][ T49] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.305182][ T49] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 316.305213][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.305235][ T49] usb 2-1: Product: syz [ 316.305250][ T49] usb 2-1: Manufacturer: syz [ 316.305264][ T49] usb 2-1: SerialNumber: syz [ 316.354879][ T49] usb 2-1: config 0 descriptor?? [ 316.370400][ T49] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 316.370434][ T49] em28xx 2-1:0.132: Video interface 132 found: [ 316.786328][ T49] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 316.812025][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880285ea800: rx timeout, send abort [ 316.817599][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880285ea800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.164518][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.203915][ T49] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 317.203952][ T49] em28xx 2-1:0.132: board has no eeprom [ 317.234432][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.288647][ T67] bond0 (unregistering): Released all slaves [ 317.303316][ T49] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 317.303347][ T49] em28xx 2-1:0.132: analog set to bulk mode. [ 317.305110][ T3121] em28xx 2-1:0.132: Registering V4L2 extension [ 317.460216][ T49] usb 2-1: USB disconnect, device number 24 [ 317.505007][ T49] em28xx 2-1:0.132: Disconnecting em28xx [ 317.878076][ T3121] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 317.878104][ T3121] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 317.878119][ T3121] em28xx 2-1:0.132: No AC97 audio processor [ 317.896223][ T3121] usb 2-1: Decoder not found [ 317.896241][ T3121] em28xx 2-1:0.132: failed to create media graph [ 317.896276][ T3121] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 317.919548][ T3121] em28xx 2-1:0.132: Remote control support is not available for this card. [ 317.936563][ T49] em28xx 2-1:0.132: Closing input extension [ 318.056578][ T49] em28xx 2-1:0.132: Freeing device [ 318.123341][ T7842] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.123486][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.123715][ T7842] bridge_slave_0: entered allmulticast mode [ 318.158324][ T7842] bridge_slave_0: entered promiscuous mode [ 318.495649][ T67] hsr_slave_0: left promiscuous mode [ 318.505849][ T7961] netlink: 'syz.2.568': attribute type 4 has an invalid length. [ 318.583228][ T67] hsr_slave_1: left promiscuous mode [ 318.584598][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.634139][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.770499][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.781468][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.792908][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.803120][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.806141][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.853976][ T67] team0 (unregistering): Port device team_slave_1 removed [ 320.065477][ T67] team0 (unregistering): Port device team_slave_0 removed [ 320.923691][ T5857] Bluetooth: hci0: command tx timeout [ 322.106765][ T7842] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.107755][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.107994][ T7842] bridge_slave_1: entered allmulticast mode [ 322.110060][ T7842] bridge_slave_1: entered promiscuous mode [ 322.111939][ T7958] lo speed is unknown, defaulting to 1000 [ 322.374320][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.374398][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.003705][ T5857] Bluetooth: hci0: command tx timeout [ 323.169062][ T7842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.220717][ T7842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.790703][ T7842] team0: Port device team_slave_0 added [ 323.795732][ T7974] lo speed is unknown, defaulting to 1000 [ 323.826359][ T7842] team0: Port device team_slave_1 added [ 325.083598][ T5857] Bluetooth: hci0: command tx timeout [ 325.421721][ T7842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.421740][ T7842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.421770][ T7842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.761580][ T7842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.761598][ T7842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.761628][ T7842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.838911][ T8026] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-61) [ 326.909240][ T7842] hsr_slave_0: entered promiscuous mode [ 326.910661][ T7842] hsr_slave_1: entered promiscuous mode [ 326.911709][ T7842] debugfs: 'hsr0' already exists in 'hsr' [ 326.911735][ T7842] Cannot create hsr debugfs directory [ 327.166575][ T5857] Bluetooth: hci0: command tx timeout [ 330.333400][ T6002] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 330.485792][ T6002] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.485821][ T6002] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.485841][ T6002] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.485902][ T6002] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 330.485931][ T6002] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 330.546566][ T6002] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.546598][ T6002] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.546619][ T6002] usb 4-1: Product: syz [ 330.546634][ T6002] usb 4-1: Manufacturer: syz [ 330.617848][ T6002] cdc_wdm 4-1:1.0: skipping garbage [ 330.617871][ T6002] cdc_wdm 4-1:1.0: skipping garbage [ 330.643946][ T6002] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 330.643966][ T6002] cdc_wdm 4-1:1.0: Unknown control protocol [ 330.743584][ T7974] chnl_net:caif_netlink_parms(): no params data found [ 330.837372][ T3121] usb 4-1: USB disconnect, device number 22 [ 331.324902][ C0] ------------[ cut here ]------------ [ 331.324928][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 331.324973][ C0] Modules linked in: [ 331.324997][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.325025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.325041][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 331.325068][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 331.325090][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 331.325112][ C0] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801c2cd940 [ 331.325130][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 331.325146][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 331.325162][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000007 [ 331.325180][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802964f068 [ 331.325197][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 331.325216][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.325233][ C0] CR2: 00005590f2daa660 CR3: 0000000030c1e000 CR4: 00000000003526f0 [ 331.325254][ C0] Call Trace: [ 331.325263][ C0] [ 331.325292][ C0] ? __pfx_est_timer+0x10/0x10 [ 331.325335][ C0] call_timer_fn+0x17b/0x5f0 [ 331.325368][ C0] ? __pfx_est_timer+0x10/0x10 [ 331.325393][ C0] ? call_timer_fn+0xbe/0x5f0 [ 331.325424][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 331.325469][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.325501][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.325529][ C0] ? __pfx_est_timer+0x10/0x10 [ 331.325558][ C0] __run_timer_base+0x648/0x970 [ 331.325608][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 331.325660][ C0] run_timer_softirq+0xb7/0x180 [ 331.325691][ C0] handle_softirqs+0x22c/0x710 [ 331.325736][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 331.325787][ C0] run_ktimerd+0xcf/0x190 [ 331.325821][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 331.325852][ C0] ? schedule+0x91/0x360 [ 331.325890][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 331.325919][ C0] smpboot_thread_fn+0x542/0xa60 [ 331.325952][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 331.325994][ C0] kthread+0x711/0x8a0 [ 331.326036][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 331.326066][ C0] ? __pfx_kthread+0x10/0x10 [ 331.326109][ C0] ? __pfx_kthread+0x10/0x10 [ 331.326148][ C0] ret_from_fork+0x3fc/0x770 [ 331.326183][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 331.326223][ C0] ? __switch_to_asm+0x39/0x70 [ 331.326245][ C0] ? __switch_to_asm+0x33/0x70 [ 331.326267][ C0] ? __pfx_kthread+0x10/0x10 [ 331.326305][ C0] ret_from_fork_asm+0x1a/0x30 [ 331.326350][ C0] [ 331.326363][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 331.326380][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.326408][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.326422][ C0] Call Trace: [ 331.326431][ C0] [ 331.326440][ C0] dump_stack_lvl+0x99/0x250 [ 331.326476][ C0] ? __asan_memcpy+0x40/0x70 [ 331.326503][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.326538][ C0] ? __pfx__printk+0x10/0x10 [ 331.326582][ C0] vpanic+0x281/0x750 [ 331.326618][ C0] ? __pfx__printk+0x10/0x10 [ 331.326644][ C0] ? __pfx_vpanic+0x10/0x10 [ 331.326678][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 331.326726][ C0] panic+0xb9/0xc0 [ 331.326761][ C0] ? __pfx_panic+0x10/0x10 [ 331.326825][ C0] __warn+0x31b/0x4b0 [ 331.326858][ C0] ? est_timer+0x6dc/0x9f0 [ 331.326886][ C0] ? est_timer+0x6dc/0x9f0 [ 331.326911][ C0] report_bug+0x2be/0x4f0 [ 331.326939][ C0] ? est_timer+0x6dc/0x9f0 [ 331.326966][ C0] ? est_timer+0x6dc/0x9f0 [ 331.326991][ C0] ? est_timer+0x6de/0x9f0 [ 331.327015][ C0] handle_bug+0x84/0x160 [ 331.327051][ C0] exc_invalid_op+0x1a/0x50 [ 331.327086][ C0] asm_exc_invalid_op+0x1a/0x20 [ 331.327109][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 331.327135][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 331.327156][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 331.327177][ C0] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801c2cd940 [ 331.327195][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 331.327210][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 331.327226][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000007 [ 331.327243][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802964f068 [ 331.327269][ C0] ? est_timer+0x6db/0x9f0 [ 331.327322][ C0] ? __pfx_est_timer+0x10/0x10 [ 331.327363][ C0] call_timer_fn+0x17b/0x5f0 [ 331.327394][ C0] ? __pfx_est_timer+0x10/0x10 [ 331.327419][ C0] ? call_timer_fn+0xbe/0x5f0 [ 331.327450][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 331.327495][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.327525][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.327553][ C0] ? __pfx_est_timer+0x10/0x10 [ 331.327581][ C0] __run_timer_base+0x648/0x970 [ 331.327630][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 331.327681][ C0] run_timer_softirq+0xb7/0x180 [ 331.327713][ C0] handle_softirqs+0x22c/0x710 [ 331.327756][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 331.327807][ C0] run_ktimerd+0xcf/0x190 [ 331.327840][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 331.327870][ C0] ? schedule+0x91/0x360 [ 331.327908][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 331.327936][ C0] smpboot_thread_fn+0x542/0xa60 [ 331.327968][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 331.328010][ C0] kthread+0x711/0x8a0 [ 331.328050][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 331.328080][ C0] ? __pfx_kthread+0x10/0x10 [ 331.328122][ C0] ? __pfx_kthread+0x10/0x10 [ 331.328160][ C0] ret_from_fork+0x3fc/0x770 [ 331.328195][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 331.328234][ C0] ? __switch_to_asm+0x39/0x70 [ 331.328256][ C0] ? __switch_to_asm+0x33/0x70 [ 331.328277][ C0] ? __pfx_kthread+0x10/0x10 [ 331.328314][ C0] ret_from_fork_asm+0x1a/0x30 [ 331.328359][ C0] [ 331.328700][ C0] Kernel Offset: disabled