last executing test programs: 18.173048758s ago: executing program 3 (id=12198): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.394643619s ago: executing program 3 (id=12214): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000180)={0x2, r1, 0x9c, 0x200, 0x6, 0x18, 0x3}) 16.27395711s ago: executing program 3 (id=12215): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x853, 0x146, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 14.166130521s ago: executing program 3 (id=12242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r1, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) 14.031623214s ago: executing program 3 (id=12244): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004200010a"], 0x1c}}, 0x0) 13.865282229s ago: executing program 3 (id=12248): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 9.07779673s ago: executing program 4 (id=12308): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x300, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000033c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 8.951274186s ago: executing program 4 (id=12309): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0x1}) 8.781889694s ago: executing program 4 (id=12313): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) 8.631514083s ago: executing program 4 (id=12316): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4100, 0xf0cb2f4a0c2cfc5d, 0x0) 8.455385749s ago: executing program 4 (id=12318): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000008640)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x4008000) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.203859696s ago: executing program 4 (id=12320): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd2, 0x15, 0x34, 0x8, 0x41e, 0x401c, 0x1d9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4b, 0x19, 0x86}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[], 0x0) 5.109710921s ago: executing program 2 (id=12339): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) 4.808024876s ago: executing program 2 (id=12341): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000040)=0x633, 0x4) sendto$inet(r0, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x240, 0x0, 0x0) 4.730427419s ago: executing program 2 (id=12342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000000c0)=0x46, 0x4) 4.568020318s ago: executing program 2 (id=12343): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20042, 0x0) 4.368272141s ago: executing program 2 (id=12345): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.365378698s ago: executing program 2 (id=12348): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x38011, r1, 0xa03bb000) cachestat(r0, &(0x7f0000000040)={0x4, 0xa500}, &(0x7f0000000280), 0x0) 2.00984404s ago: executing program 1 (id=12352): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)=0x3d4) 1.852726302s ago: executing program 1 (id=12353): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0xfffffffc, 0x10, 0x10, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x0, @dev}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @local, 0x1}, {0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @remote}, 0x226}, r1, 0x80000001}}, 0x48) 1.690192075s ago: executing program 1 (id=12354): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27) 1.609902912s ago: executing program 1 (id=12355): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f0300", 0x4}], 0x1}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 1.424941317s ago: executing program 1 (id=12358): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) geteuid() 1.353615889s ago: executing program 0 (id=12359): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) 1.171492366s ago: executing program 0 (id=12360): io_setup(0xedf, &(0x7f0000001740)=0x0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x82) io_submit(r0, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 946.281245ms ago: executing program 0 (id=12361): keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) r0 = request_key(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) 866.876609ms ago: executing program 0 (id=12362): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3424, 0x8001}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 202.193004ms ago: executing program 0 (id=12363): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) 36.018171ms ago: executing program 0 (id=12364): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/196, 0xc4}, {&(0x7f0000001b00)=""/175, 0xaf}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001cc0)=""/208, 0xd0}, {&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/126, 0x7e}, {&(0x7f0000002f00)=""/219, 0xdb}, {&(0x7f0000003000)=""/175, 0xaf}, {&(0x7f00000030c0)=""/55, 0x37}], 0x7}}], 0x2, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 0s ago: executing program 1 (id=12365): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={0x0, 0x1000}, 0x8) kernel console output (not intermixed with test programs): valid wMaxPacketSize 0 [ 709.119540][ T5329] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.40 [ 709.131844][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.155212][ T5329] usb 3-1: config 0 descriptor?? [ 709.187210][ T5329] ttusbir 3-1:0.0: cannot find expected altsetting [ 709.192058][T28091] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 709.197985][ T5329] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 709.356866][T28091] usb 2-1: Using ep0 maxpacket: 16 [ 709.364363][T28091] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 709.379058][T28091] usb 2-1: config 0 has no interface number 0 [ 709.390020][T28091] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 709.403366][ T5270] usb 3-1: USB disconnect, device number 46 [ 709.437851][T28091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.446831][T28091] usb 2-1: Product: syz [ 709.451040][T28091] usb 2-1: Manufacturer: syz [ 709.475170][T28091] usb 2-1: SerialNumber: syz [ 709.509990][T28091] usb 2-1: config 0 descriptor?? [ 709.541865][T28091] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 709.988560][T28091] gspca_spca1528: reg_w err -71 [ 710.015201][T28091] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 710.040462][T28091] usb 2-1: USB disconnect, device number 40 [ 710.555627][T29107] fuse: Invalid rootmode [ 710.896153][ T5329] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 711.100238][ T5329] usb 2-1: Using ep0 maxpacket: 16 [ 711.134601][ T5329] usb 2-1: New USB device found, idVendor=0fde, idProduct=ca05, bcdDevice=b5.f3 [ 711.151127][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.182807][ T5329] usb 2-1: Product: syz [ 711.187618][ T5329] usb 2-1: Manufacturer: syz [ 711.192476][ T5329] usb 2-1: SerialNumber: syz [ 711.205461][ T5329] usb 2-1: config 0 descriptor?? [ 711.231303][ T5329] cp210x 2-1:0.0: cp210x converter detected [ 711.256608][ T29] audit: type=1800 audit(1729406568.017:363): pid=29127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11186" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 711.587585][T29135] openvswitch: netlink: Actions may not be safe on all matching packets [ 711.900554][ T5329] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 711.908930][ T5329] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 711.949407][ T5329] usb 2-1: cp210x converter now attached to ttyUSB0 [ 712.015970][ T5329] usb 2-1: USB disconnect, device number 41 [ 712.040921][ T5329] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 712.049262][ T5329] cp210x 2-1:0.0: device disconnected [ 712.275131][ T5270] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 712.435596][ T5270] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 712.474912][ T5270] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 712.491135][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.533463][ T5270] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 713.617119][ T5270] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 713.621495][T29203] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 713.804854][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 713.818785][ T5270] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 713.846689][ T5270] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 713.867299][ T5270] usb 4-1: USB disconnect, device number 44 [ 713.965487][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 713.983574][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 713.992699][ T9] usb 3-1: config 253 has an invalid interface number: 202 but max is 0 [ 714.001765][ T9] usb 3-1: config 253 has no interface number 0 [ 714.008878][ T9] usb 3-1: config 253 interface 202 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 714.021552][ T9] usb 3-1: config 253 interface 202 altsetting 0 endpoint 0x3 has invalid maxpacket 16804, setting to 1024 [ 714.033454][ T9] usb 3-1: config 253 interface 202 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 714.057240][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 714.067438][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.076864][ T9] usb 3-1: Product: syz [ 714.081079][ T9] usb 3-1: Manufacturer: syz [ 714.094962][ T9] usb 3-1: SerialNumber: syz [ 714.357765][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 714.360708][ T11] usb 3-1: Failed to submit usb control message: -71 [ 714.376130][ T11] usb 3-1: unable to send the bmi data to the device: -71 [ 714.405062][ T11] usb 3-1: unable to get target info from device [ 714.424894][ T11] usb 3-1: could not get target info (-71) [ 714.442650][ T11] usb 3-1: could not probe fw (-71) [ 714.594840][ T9] usb 3-1: USB disconnect, device number 47 [ 715.053313][T29230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11235'. [ 715.175065][T29232] dvmrp0: entered allmulticast mode [ 715.202197][T29231] dvmrp0: left allmulticast mode [ 715.282931][T29169] syz.4.11206 (29169): drop_caches: 1 [ 715.922842][ T29] audit: type=1326 audit(1729406572.677:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 716.055052][ T29] audit: type=1326 audit(1729406572.677:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 716.079997][ T29] audit: type=1326 audit(1729406572.687:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 716.102645][ T29] audit: type=1326 audit(1729406572.687:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.4.11252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 716.555688][ T29] audit: type=1326 audit(1729406573.327:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.4.11264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 716.591428][T29294] netlink: zone id is out of range [ 716.620493][ T29] audit: type=1326 audit(1729406573.367:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.4.11264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 716.679293][T29294] netlink: set zone limit has 4 unknown bytes [ 716.695128][ T29] audit: type=1326 audit(1729406573.367:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.4.11264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 716.717906][ T29] audit: type=1326 audit(1729406573.367:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.4.11264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 717.317527][T29321] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11278'. [ 717.362303][T29321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11278'. [ 717.394990][T29321] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11278'. [ 717.815544][T29341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11287'. [ 718.916355][T29308] warn_alloc: 3 callbacks suppressed [ 718.916378][T29308] syz.2.11272: vmalloc error: size 3268608, failed to allocated page array size 6384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 718.940643][T29308] CPU: 0 UID: 0 PID: 29308 Comm: syz.2.11272 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 718.951552][T29308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 718.961656][T29308] Call Trace: [ 718.964975][T29308] [ 718.967946][T29308] dump_stack_lvl+0x241/0x360 [ 718.972695][T29308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.977947][T29308] ? __pfx__printk+0x10/0x10 [ 718.982599][T29308] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 718.989065][T29308] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 718.995617][T29308] warn_alloc+0x278/0x410 [ 719.000009][T29308] ? __pfx_warn_alloc+0x10/0x10 [ 719.004901][T29308] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 719.011110][T29308] ? __get_vm_area_node+0x23d/0x270 [ 719.016347][T29308] __vmalloc_node_range_noprof+0x691/0x13f0 [ 719.022277][T29308] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 719.028283][T29308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 719.034625][T29308] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 719.040804][T29308] ? __get_vm_area_node+0x23d/0x270 [ 719.046032][T29308] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 719.051945][T29308] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 719.058125][T29308] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 719.063883][T29308] ? rcu_is_watching+0x15/0xb0 [ 719.068663][T29308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 719.075001][T29308] ? rcu_is_watching+0x15/0xb0 [ 719.079778][T29308] ? trace_kmalloc+0x1f/0xd0 [ 719.084380][T29308] ? __kmalloc_node_noprof+0x247/0x440 [ 719.089852][T29308] ? __kvmalloc_node_noprof+0x72/0x190 [ 719.095337][T29308] __kvmalloc_node_noprof+0x142/0x190 [ 719.100727][T29308] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 719.106895][T29308] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 719.112891][T29308] ? tpg_update_mv_step+0x361/0x4f0 [ 719.118107][T29308] vivid_update_format_cap+0x133c/0x2090 [ 719.123765][T29308] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 719.129767][T29308] ? __pfx___mutex_lock+0x10/0x10 [ 719.134825][T29308] vidioc_s_input+0x374/0x1560 [ 719.139623][T29308] ? video_devdata+0x6b/0xc0 [ 719.144254][T29308] __video_do_ioctl+0xc23/0xdd0 [ 719.149157][T29308] ? __pfx___video_do_ioctl+0x10/0x10 [ 719.154557][T29308] ? __might_fault+0xc6/0x120 [ 719.159254][T29308] video_usercopy+0x89b/0x1180 [ 719.164047][T29308] ? __pfx___video_do_ioctl+0x10/0x10 [ 719.169443][T29308] ? __pfx_video_usercopy+0x10/0x10 [ 719.174681][T29308] ? __fget_files+0x29/0x470 [ 719.179293][T29308] ? __fget_files+0x3f3/0x470 [ 719.183992][T29308] v4l2_ioctl+0x189/0x1e0 [ 719.188342][T29308] ? __pfx_v4l2_ioctl+0x10/0x10 [ 719.193217][T29308] __se_sys_ioctl+0xf9/0x170 [ 719.197834][T29308] do_syscall_64+0xf3/0x230 [ 719.202467][T29308] ? clear_bhb_loop+0x35/0x90 [ 719.207176][T29308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.213099][T29308] RIP: 0033:0x7f4e6ab7dff9 [ 719.217531][T29308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.237163][T29308] RSP: 002b:00007f4e6b9aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.245605][T29308] RAX: ffffffffffffffda RBX: 00007f4e6ad35f80 RCX: 00007f4e6ab7dff9 [ 719.253591][T29308] RDX: 00000000200000c0 RSI: 00000000c0045627 RDI: 0000000000000003 [ 719.261576][T29308] RBP: 00007f4e6abf0296 R08: 0000000000000000 R09: 0000000000000000 [ 719.269563][T29308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.277543][T29308] R13: 0000000000000000 R14: 00007f4e6ad35f80 R15: 00007f4e6ae5fa28 [ 719.285542][T29308] [ 719.289435][T29308] Mem-Info: [ 719.292597][T29308] active_anon:7039 inactive_anon:0 isolated_anon:0 [ 719.292597][T29308] active_file:921 inactive_file:3207 isolated_file:0 [ 719.292597][T29308] unevictable:768 dirty:324 writeback:0 [ 719.292597][T29308] slab_reclaimable:5581 slab_unreclaimable:104787 [ 719.292597][T29308] mapped:29174 shmem:1270 pagetables:1144 [ 719.292597][T29308] sec_pagetables:0 bounce:0 [ 719.292597][T29308] kernel_misc_reclaimable:0 [ 719.292597][T29308] free:1313011 free_pcp:5607 free_cma:0 [ 719.338838][T29308] Node 0 active_anon:28256kB inactive_anon:0kB active_file:3684kB inactive_file:12824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116696kB dirty:1296kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no [ 719.372862][T29308] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 719.403316][T29308] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.430670][T29308] lowmem_reserve[]: 0 2465 2466 0 0 [ 719.436990][T29308] Node 0 DMA32 free:1314192kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:27980kB inactive_anon:0kB active_file:3684kB inactive_file:12360kB unevictable:1536kB writepending:1296kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:9020kB local_pcp:8244kB free_cma:0kB [ 719.468499][T29308] lowmem_reserve[]: 0 0 0 0 0 [ 719.473303][T29308] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:356kB inactive_anon:0kB active_file:0kB inactive_file:464kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:20kB free_cma:0kB [ 719.500536][T29308] lowmem_reserve[]: 0 0 0 0 0 [ 719.504979][ T5329] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 719.505635][T29308] Node 1 [ 719.513106][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 719.513164][T29308] Normal free:3922392kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13384kB local_pcp:13384kB free_cma:0kB [ 719.553397][T29308] lowmem_reserve[]: 0 0 0 0 0 [ 719.559156][T29308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 719.572115][T29308] Node 0 DMA32: 1338*4kB (UM) 1097*8kB (UME) 1128*16kB (ME) 804*32kB (ME) 558*64kB (UME) 171*128kB (ME) 40*256kB (UME) 77*512kB (UME) 154*1024kB (UME) 16*2048kB (UM) 234*4096kB (UM) = 1314096kB [ 719.591694][T29308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 719.603428][T29308] Node 1 Normal: 16*4kB (UME) 7*8kB (UME) 8*16kB (ME) 9*32kB (UME) 3*64kB (E) 10*128kB (UE) 16*256kB (UME) 11*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 952*4096kB (ME) = 3922392kB [ 719.621523][T29308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.633481][T29308] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 719.644164][T29308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.654078][T29308] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 719.663552][T29308] 5398 total pagecache pages [ 719.668259][T29308] 0 pages in swap cache [ 719.672449][T29308] Free swap = 124456kB [ 719.677199][T29308] Total swap = 124996kB [ 719.681399][T29308] 2097051 pages RAM [ 719.685571][T29308] 0 pages HighMem/MovableOnly [ 719.690506][T29308] 427076 pages reserved [ 719.694813][T29308] 0 pages cma reserved [ 719.695225][ T5329] usb 5-1: Using ep0 maxpacket: 16 [ 719.707268][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 719.718351][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 719.729758][ T5329] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 719.738744][ T5329] usb 5-1: config 0 has no interface number 0 [ 719.765686][ T5329] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 719.777276][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 719.807642][ T5329] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 719.824940][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 719.856019][ T5329] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 719.866324][ T5326] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 719.876511][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 719.913684][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 719.949180][ T5329] usb 5-1: Product: syz [ 719.953999][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 719.975467][ T5329] usb 5-1: SerialNumber: syz [ 719.985245][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 720.004750][ T5329] usb 5-1: config 0 descriptor?? [ 720.032155][ T25] usb 4-1: SerialNumber: syz [ 720.037165][ T5326] usb 2-1: Using ep0 maxpacket: 16 [ 720.046250][ T5329] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 720.055668][ T5326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.081905][ T25] usb 4-1: config 0 descriptor?? [ 720.096703][ T5329] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input158 [ 720.109241][ T5326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.120366][T29372] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 720.135679][T29372] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 720.181138][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 720.194754][ T5326] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 720.204743][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 720.266285][ T25] port100 4-1:0.0: NFC: Could not get supported command types [ 720.306242][ T5326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.339195][ T5326] usb 2-1: config 0 descriptor?? [ 720.470204][ T25] usb 4-1: USB disconnect, device number 45 [ 720.480970][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.488241][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.496085][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.503273][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.512321][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.519506][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.527196][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.534368][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.541817][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.548979][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 720.709199][ T5329] usb 5-1: USB disconnect, device number 46 [ 720.715324][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 720.783268][ T5326] uclogic 0003:5543:0004.0081: unknown main item tag 0x0 [ 720.836209][ T5326] uclogic 0003:5543:0004.0081: item fetching failed at offset 5/7 [ 720.856270][ T5329] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 720.885462][ T5326] uclogic 0003:5543:0004.0081: parse failed [ 720.939557][ T5326] uclogic 0003:5543:0004.0081: probe with driver uclogic failed with error -22 [ 721.048219][ T5326] usb 2-1: USB disconnect, device number 42 [ 721.594870][T29409] program syz.4.11321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.614828][T29409] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 722.574907][ T5334] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 722.793848][ T5334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.838370][ T5334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.886791][ T5334] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 722.938190][ T5334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.025775][ T5334] usb 4-1: config 0 descriptor?? [ 723.621249][ T5334] magicmouse 0003:05AC:0265.0082: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 723.854287][ T25] usb 4-1: USB disconnect, device number 46 [ 724.273469][T29487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11356'. [ 724.688603][ T29] audit: type=1326 audit(1729406581.467:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29473 comm="syz.1.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7fc00000 [ 724.722791][ T29] audit: type=1326 audit(1729406581.467:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29473 comm="syz.1.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dafb7dff9 code=0x7fc00000 [ 724.820109][ T29] audit: type=1326 audit(1729406581.467:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29473 comm="syz.1.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7fc00000 [ 724.866035][ T29] audit: type=1326 audit(1729406581.467:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29473 comm="syz.1.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7fc00000 [ 724.927431][ T29] audit: type=1326 audit(1729406581.467:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29473 comm="syz.1.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7fc00000 [ 724.950913][ T29] audit: type=1326 audit(1729406581.467:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29473 comm="syz.1.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7fc00000 [ 724.990847][ T29] audit: type=1326 audit(1729406581.467:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29473 comm="syz.1.11351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7fc00000 [ 726.244079][T29573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 727.866841][T29658] tipc: Enabled bearer , priority 10 [ 728.140723][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11439'. [ 728.150143][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11439'. [ 728.160317][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11439'. [ 728.434384][ T29] audit: type=1800 audit(1729406585.217:379): pid=29690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11447" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 728.798306][T29670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 728.817995][T29670] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 728.859745][T29670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 728.870189][T29670] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 728.893080][T29670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 728.915458][T29670] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 728.963385][T29670] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 729.000743][T29670] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 729.007144][T29670] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 729.044498][T29670] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 729.072319][T29670] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 729.095787][T29670] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 729.132696][T29670] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 729.404855][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 729.412586][ T5270] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 729.420570][ T5334] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 729.574844][ T5334] usb 4-1: Using ep0 maxpacket: 32 [ 729.580308][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 729.591437][ T5270] usb 5-1: too many configurations: 49, using maximum allowed: 8 [ 729.600870][ T5334] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.615930][ T5334] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.628720][ T5270] usb 5-1: config index 0 descriptor too short (expected 161, got 72) [ 729.640920][ T5334] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 729.650426][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 729.658579][ T5334] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 729.667320][ T5334] usb 4-1: Product: syz [ 729.671517][ T5334] usb 4-1: Manufacturer: syz [ 729.681183][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 729.690342][ T5270] usb 5-1: config index 1 descriptor too short (expected 161, got 72) [ 729.699316][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.709745][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 729.718848][ T9] usb 3-1: config 1 has no interface number 1 [ 729.725401][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 729.738505][ T9] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 729.750266][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 729.762673][ T5334] hub 4-1:4.0: USB hub found [ 729.768171][ T5270] usb 5-1: config index 2 descriptor too short (expected 161, got 72) [ 729.780176][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.790815][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.799024][ T9] usb 3-1: Product: syz [ 729.803327][ T9] usb 3-1: Manufacturer: syz [ 729.810872][ T9] usb 3-1: SerialNumber: syz [ 729.817335][ T5270] usb 5-1: config index 3 descriptor too short (expected 161, got 72) [ 729.830588][ T5270] usb 5-1: config index 4 descriptor too short (expected 161, got 72) [ 729.847911][ T5270] usb 5-1: config index 5 descriptor too short (expected 161, got 72) [ 729.861513][ T5270] usb 5-1: config index 6 descriptor too short (expected 161, got 72) [ 729.872234][ T5270] usb 5-1: config index 7 descriptor too short (expected 161, got 72) [ 729.884647][ T5270] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 729.895260][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.903325][ T5270] usb 5-1: Product: syz [ 729.907661][ T5270] usb 5-1: Manufacturer: syz [ 729.912406][ T5270] usb 5-1: SerialNumber: syz [ 729.918579][ T5334] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 729.937661][ T5270] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 730.094423][ T5334] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 730.144070][ T9] usb 3-1: USB disconnect, device number 48 [ 730.246918][T29705] udevd[29705]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.325219][ T5319] usb 4-1: USB disconnect, device number 47 [ 730.335011][ T5268] Bluetooth: hci3: command 0x0406 tx timeout [ 730.548431][ T5329] usb 5-1: USB disconnect, device number 47 [ 730.659904][ T9] IPVS: starting estimator thread 0... [ 730.754892][T29732] IPVS: using max 15 ests per chain, 36000 per kthread [ 730.824915][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 730.894968][ T5268] Bluetooth: hci0: command 0x0c1a tx timeout [ 730.895478][T22318] Bluetooth: hci4: command 0x0405 tx timeout [ 731.036527][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.054888][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.065174][T22318] Bluetooth: hci5: command 0x0c1a tx timeout [ 731.104998][ T25] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 731.124724][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.135627][ T5334] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 731.142667][ T5334] ath9k_htc: Failed to initialize the device [ 731.145121][ T25] usb 2-1: config 0 descriptor?? [ 731.155088][T22318] Bluetooth: hci6: command 0x0c1a tx timeout [ 731.255935][ T5329] usb 5-1: ath9k_htc: USB layer deinitialized [ 731.490102][T29761] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 731.716426][ T25] cm6533_jd 0003:0D8C:0022.0083: unknown main item tag 0x0 [ 731.732277][ T25] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0083/input/input160 [ 731.778107][ T25] cm6533_jd 0003:0D8C:0022.0083: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 731.939514][ T5319] usb 2-1: USB disconnect, device number 43 [ 732.415131][T22318] Bluetooth: hci3: command 0x0406 tx timeout [ 732.716481][ T5329] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 732.895203][ T5329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.905603][ T5329] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 732.923391][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.936505][ T5329] usb 3-1: config 0 descriptor?? [ 732.975004][T22318] Bluetooth: hci0: command 0x0c1a tx timeout [ 732.975033][ T5268] Bluetooth: hci4: command 0x0405 tx timeout [ 733.134853][T22318] Bluetooth: hci5: command 0x0c1a tx timeout [ 733.186051][ T5329] usb 3-1: USB disconnect, device number 49 [ 733.187108][T29804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11498'. [ 733.216636][T22318] Bluetooth: hci6: command 0x0c1a tx timeout [ 733.344853][ T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 733.439650][T29811] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11501'. [ 733.515307][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.550523][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.561229][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.582880][ T25] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 733.592767][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.612044][ T25] usb 5-1: config 0 descriptor?? [ 734.030173][ T25] uclogic 0003:5543:0003.0084: item fetching failed at offset 5/7 [ 734.043483][ T25] uclogic 0003:5543:0003.0084: parse failed [ 734.068523][ T25] uclogic 0003:5543:0003.0084: probe with driver uclogic failed with error -22 [ 734.248081][ T5326] usb 5-1: USB disconnect, device number 48 [ 734.384983][ T25] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 734.553164][ T25] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 734.590151][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.624802][ T25] usb 4-1: Product: syz [ 734.629862][ T25] usb 4-1: Manufacturer: syz [ 734.634507][ T25] usb 4-1: SerialNumber: syz [ 734.659888][ T25] usb 4-1: config 0 descriptor?? [ 734.674562][ T25] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 734.683339][ T25] usb 4-1: bad CDC descriptors [ 734.688711][ T25] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 734.887204][ T25] usb 4-1: USB disconnect, device number 48 [ 734.930006][T29862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11524'. [ 734.934862][ T5319] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 734.940503][T29862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11524'. [ 734.974433][T29862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11524'. [ 735.005890][T29862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11524'. [ 735.065145][T22318] Bluetooth: hci0: command 0x0c1a tx timeout [ 735.114902][ T5319] usb 3-1: Using ep0 maxpacket: 32 [ 735.146872][ T5319] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 735.174920][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.183006][ T5319] usb 3-1: Product: syz [ 735.199609][ T5319] usb 3-1: Manufacturer: syz [ 735.204857][ T5319] usb 3-1: SerialNumber: syz [ 735.213199][ T5319] usb 3-1: config 0 descriptor?? [ 735.226090][T22318] Bluetooth: hci5: command 0x0c1a tx timeout [ 735.247822][ T29] audit: type=1326 audit(1729406592.037:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29868 comm="syz.1.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7ffc0000 [ 735.270266][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.314244][T22318] Bluetooth: hci6: command 0x0c1a tx timeout [ 735.334915][ T29] audit: type=1326 audit(1729406592.067:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29868 comm="syz.1.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7ffc0000 [ 735.424858][ T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 735.473832][ T29] audit: type=1326 audit(1729406592.067:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29868 comm="syz.1.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f9dafb7dff9 code=0x7ffc0000 [ 735.546241][ T29] audit: type=1326 audit(1729406592.067:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29868 comm="syz.1.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7ffc0000 [ 735.594830][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 735.601697][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.624615][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.645845][ T29] audit: type=1326 audit(1729406592.067:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29868 comm="syz.1.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7ffc0000 [ 735.647755][ T25] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 735.668291][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.668780][ T29] audit: type=1326 audit(1729406592.067:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29868 comm="syz.1.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9dafb7dff9 code=0x7ffc0000 [ 735.709781][ T29] audit: type=1326 audit(1729406592.077:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29868 comm="syz.1.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7ffc0000 [ 735.756942][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.778522][ T29] audit: type=1326 audit(1729406592.077:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29868 comm="syz.1.11528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dafb7dff9 code=0x7ffc0000 [ 735.800979][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.816591][ T25] usb 5-1: config 0 descriptor?? [ 735.933420][ T5319] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 736.036799][ T5319] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 736.064884][ T5319] usb 3-1: USB disconnect, device number 50 [ 736.289483][ T25] nzxt-smart2 0003:1E71:200F.0085: item fetching failed at offset 2/5 [ 736.301158][ T25] nzxt-smart2 0003:1E71:200F.0085: probe with driver nzxt-smart2 failed with error -22 [ 736.578798][ T5319] usb 5-1: USB disconnect, device number 49 [ 737.234941][ T29] audit: type=1326 audit(1729406594.027:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29932 comm="syz.4.11557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 737.314835][ T29] audit: type=1326 audit(1729406594.027:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29932 comm="syz.4.11557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b497dff9 code=0x7ffc0000 [ 738.100905][T29962] macvlan2: entered promiscuous mode [ 738.144213][T29962] macvlan2: entered allmulticast mode [ 738.435205][T29974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11573'. [ 738.713285][T29986] sg_write: data in/out 588840944/2 bytes for SCSI command 0x94-- guessing data in; [ 738.713285][T29986] program syz.0.11580 not setting count and/or reply_len properly [ 738.916330][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 739.077925][ T25] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 739.087463][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.114142][ T25] usb 3-1: config 0 descriptor?? [ 739.140301][ T25] gspca_main: spca508-2.14.0 probing 8086:0110 [ 739.363076][ T25] gspca_spca508: reg_read err -32 [ 739.368455][ T5329] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 739.405284][T28091] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 739.535215][ T5329] usb 2-1: Using ep0 maxpacket: 8 [ 739.554177][ T5329] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 739.557289][T28091] usb 5-1: Using ep0 maxpacket: 16 [ 739.565494][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.580633][ T25] gspca_spca508: reg_read err -71 [ 739.586533][ T5329] usb 2-1: Product: syz [ 739.591791][ T25] gspca_spca508: reg_read err -71 [ 739.597011][ T5329] usb 2-1: Manufacturer: syz [ 739.602732][ T5329] usb 2-1: SerialNumber: syz [ 739.608459][ T25] gspca_spca508: reg_read err -71 [ 739.618680][T28091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.626067][ T25] gspca_spca508: reg write: error -71 [ 739.637401][ T5329] usb 2-1: config 0 descriptor?? [ 739.646318][ T25] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 739.653663][T28091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.659269][ T25] usb 3-1: USB disconnect, device number 51 [ 739.714613][T28091] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.766752][T28091] usb 5-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 739.776057][T28091] usb 5-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 739.784327][T28091] usb 5-1: Manufacturer: syz [ 739.794600][T28091] usb 5-1: config 0 descriptor?? [ 739.906387][ T5329] kaweth 2-1:0.0: Firmware present in device. [ 740.099765][ T5329] kaweth 2-1:0.0: Statistics collection: 0 [ 740.126152][ T5329] kaweth 2-1:0.0: Multicast filter limit: 0 [ 740.152500][ T5329] kaweth 2-1:0.0: MTU: 0 [ 740.167921][ T5329] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 740.231928][T28091] wacom 0003:056A:2A22.0086: Unknown device_type for 'syz'. Ignoring. [ 740.303139][ T5329] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 740.343755][ T5329] usb 2-1: USB disconnect, device number 44 [ 740.513376][T28091] usb 5-1: USB disconnect, device number 50 [ 740.934896][ T5319] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 740.946349][ T5329] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 741.102879][ T5319] usb 3-1: Using ep0 maxpacket: 16 [ 741.116107][ T5329] usb 4-1: Using ep0 maxpacket: 8 [ 741.123126][ T5329] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 741.126351][ T5319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.140988][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.157883][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.173290][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.184447][ T5329] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.195729][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 187, changing to 11 [ 741.208291][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59276, setting to 1024 [ 741.225387][ T5329] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 741.235731][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.244109][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 741.265905][ T5329] usb 4-1: config 0 descriptor?? [ 741.272012][T30023] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 741.281677][T30023] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 741.295474][ T5319] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.370754][ T5319] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 741.385768][ T5319] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.393910][ T5319] usb 3-1: Manufacturer: syz [ 741.401844][ T5319] usb 3-1: config 0 descriptor?? [ 741.414992][ T5318] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 741.417696][ T5319] usbhid 3-1:0.0: can't add hid device: -22 [ 741.434466][ T5319] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 741.586661][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.613251][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.665013][ T5329] usb 3-1: USB disconnect, device number 52 [ 741.679486][ T5318] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 741.715066][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.736862][ T5318] usb 2-1: config 0 descriptor?? [ 741.760920][ T25] usb 4-1: USB disconnect, device number 49 [ 742.197826][ T5318] petalynx 0003:18B1:0037.0087: unknown main item tag 0x0 [ 742.205199][ T5318] petalynx 0003:18B1:0037.0087: unknown main item tag 0x0 [ 742.220241][ T5318] petalynx 0003:18B1:0037.0087: unknown main item tag 0x0 [ 742.229736][ T5318] petalynx 0003:18B1:0037.0087: unknown main item tag 0x0 [ 742.252958][ T5318] petalynx 0003:18B1:0037.0087: unknown main item tag 0x0 [ 742.263223][ T5318] petalynx 0003:18B1:0037.0087: unknown main item tag 0x0 [ 742.279502][ T5318] petalynx 0003:18B1:0037.0087: unknown main item tag 0x0 [ 742.288722][ T5318] petalynx 0003:18B1:0037.0087: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 742.397278][T30047] random: crng reseeded on system resumption [ 742.412537][ T5318] usb 2-1: USB disconnect, device number 45 [ 743.394902][T30047] Unrecognized hibernate image header format! [ 743.402285][T30047] PM: hibernation: Image mismatch: architecture specific data [ 743.403143][T22318] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 743.734929][ T5329] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 743.766521][T30090] netlink: 'syz.3.11630': attribute type 6 has an invalid length. [ 743.774406][T30090] netlink: 'syz.3.11630': attribute type 7 has an invalid length. [ 743.787581][T30090] netlink: 'syz.3.11630': attribute type 8 has an invalid length. [ 743.790037][T30092] openvswitch: netlink: Actions may not be safe on all matching packets [ 743.898242][ T5329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.925550][ T5329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.925591][ T5329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 743.925636][ T5329] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 743.958558][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.980798][ T5329] usb 2-1: config 0 descriptor?? [ 744.479230][ T5329] cherry 0003:046A:0027.0088: unknown main item tag 0x0 [ 744.535030][ T5329] cherry 0003:046A:0027.0088: unknown main item tag 0x0 [ 744.551225][ T5329] cherry 0003:046A:0027.0088: unknown main item tag 0x0 [ 744.558528][ T5329] cherry 0003:046A:0027.0088: unknown main item tag 0x0 [ 744.565773][ T5329] cherry 0003:046A:0027.0088: unknown main item tag 0x0 [ 744.572290][T30111] tipc: Enabled bearer , priority 10 [ 744.588118][ T5329] cherry 0003:046A:0027.0088: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.1-1/input0 [ 744.758816][T30115] dlm: non-version read from control device 36 [ 744.874344][T28091] usb 2-1: USB disconnect, device number 46 [ 745.045066][T30125] netlink: 'syz.3.11644': attribute type 1 has an invalid length. [ 745.225848][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 745.225869][ T29] audit: type=1326 audit(1729406602.007:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30107 comm="syz.2.11636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6ab7dff9 code=0x7fc00000 [ 745.254503][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.393726][ T29] audit: type=1326 audit(1729406602.177:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30141 comm="syz.3.11653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 745.437618][ T29] audit: type=1326 audit(1729406602.207:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30141 comm="syz.3.11653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 745.525435][T30147] openvswitch: netlink: Actions may not be safe on all matching packets [ 745.535468][ T29] audit: type=1326 audit(1729406602.207:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30141 comm="syz.3.11653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 745.557907][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.633507][ T29] audit: type=1326 audit(1729406602.207:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30141 comm="syz.3.11653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 745.656037][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.704982][ T29] audit: type=1326 audit(1729406602.207:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30141 comm="syz.3.11653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 745.770259][ T29] audit: type=1326 audit(1729406602.207:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30141 comm="syz.3.11653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 745.798587][ T29] audit: type=1326 audit(1729406602.207:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30141 comm="syz.3.11653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 745.842089][ T29] audit: type=1326 audit(1729406602.207:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30141 comm="syz.3.11653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 745.875762][ T5334] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 746.041252][ T5334] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 746.064797][ T5334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.074180][ T5329] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 746.085376][ T5334] usb 5-1: Product: syz [ 746.089591][ T5334] usb 5-1: Manufacturer: syz [ 746.120203][ T5334] usb 5-1: SerialNumber: syz [ 746.140068][ T5334] usb 5-1: config 0 descriptor?? [ 746.242573][ T5329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.290956][ T5329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.301228][ T5329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.314355][ T5329] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 746.328818][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.373807][ T5329] usb 2-1: config 0 descriptor?? [ 746.436840][ T5334] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 746.631966][ T5334] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 746.641444][ T5334] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 746.665744][ T5334] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 746.821119][ T5334] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 746.834522][ T5329] holtek_mouse 0003:04D9:A070.0089: item fetching failed at offset 1/5 [ 746.852193][ T5329] holtek_mouse 0003:04D9:A070.0089: hid parse failed: -22 [ 746.861389][ T5329] holtek_mouse 0003:04D9:A070.0089: probe with driver holtek_mouse failed with error -22 [ 746.884374][ T5334] usb 5-1: USB disconnect, device number 51 [ 746.949185][T30180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11670'. [ 747.077150][T22318] Bluetooth: hci6: unexpected event for opcode 0x2002 [ 747.101842][ T5319] usb 2-1: USB disconnect, device number 47 [ 747.353811][T30196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11678'. [ 747.384024][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.391507][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.514928][ T5329] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 747.667309][ T5329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.691129][ T5329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 747.761999][ T5329] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 747.785725][T30202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11681'. [ 747.835675][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.931699][ T5329] usb 3-1: config 0 descriptor?? [ 747.955822][T30206] sctp: [Deprecated]: syz.1.11682 (pid 30206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.955822][T30206] Use struct sctp_sack_info instead [ 748.185195][ T5326] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 748.360132][ T5326] usb 4-1: Using ep0 maxpacket: 16 [ 748.376533][ T5329] plantronics 0003:047F:FFFF.008A: unbalanced collection at end of report description [ 748.392098][ T5326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.419310][ T5329] plantronics 0003:047F:FFFF.008A: parse failed [ 748.427402][ T5326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.438770][ T5329] plantronics 0003:047F:FFFF.008A: probe with driver plantronics failed with error -22 [ 748.452206][ T5326] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 748.473879][ T5326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.491114][ T5326] usb 4-1: config 0 descriptor?? [ 748.575870][ T5319] usb 3-1: USB disconnect, device number 53 [ 749.107404][ T5326] razer 0003:1532:011B.008B: failed to enable macro keys: -71 [ 749.124523][ T5326] razer 0003:1532:011B.008B: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.3-1/input0 [ 749.153634][ T5326] usb 4-1: USB disconnect, device number 50 [ 749.607261][T30252] program syz.1.11705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 749.714829][ T5326] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 749.872844][ T5326] usb 3-1: Using ep0 maxpacket: 16 [ 749.883039][ T5326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.941447][ T5326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.989338][ T5326] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 749.998602][ T5326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.011283][ T5326] usb 3-1: config 0 descriptor?? [ 750.130786][T30272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11715'. [ 750.478226][ T5326] corsair 0003:1B1C:1B02.008C: unbalanced collection at end of report description [ 750.490592][ T5326] corsair 0003:1B1C:1B02.008C: parse failed [ 750.497091][ T5326] corsair 0003:1B1C:1B02.008C: probe with driver corsair failed with error -22 [ 750.721293][T27267] usb 3-1: USB disconnect, device number 54 [ 751.138005][T22318] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 751.147208][T22318] Bluetooth: hci6: Injecting HCI hardware error event [ 751.157343][T22318] Bluetooth: hci6: hardware error 0x00 [ 751.474787][ T5319] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 751.636628][ T5319] usb 4-1: Using ep0 maxpacket: 8 [ 751.656958][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.680115][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.700802][ T5319] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 751.713073][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.744297][ T5319] usb 4-1: config 0 descriptor?? [ 752.182013][ T5319] wacom 0003:056A:0028.008D: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 752.199198][ T5319] wacom 0003:056A:0028.008D: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 752.217253][ T5319] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.008D/input/input164 [ 752.441276][ T5319] usb 4-1: USB disconnect, device number 51 [ 752.493128][T30303] program syz.2.11730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.215803][T22318] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 753.409410][T30330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11740'. [ 754.542394][T30377] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 754.832161][T28091] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 754.886920][T30391] dccp_invalid_packet: P.Data Offset(0) too small [ 754.890351][T30393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11769'. [ 755.026847][T28091] usb 4-1: Using ep0 maxpacket: 16 [ 755.100819][T28091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.114623][T28091] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 755.130750][T28091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.144825][T28091] usb 4-1: Product: syz [ 755.149047][T28091] usb 4-1: Manufacturer: syz [ 755.153680][T28091] usb 4-1: SerialNumber: syz [ 755.161583][T28091] usb 4-1: config 0 descriptor?? [ 755.169780][T28091] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 755.794255][T28091] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 755.807147][T28091] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 755.819107][T28091] usb 4-1: USB disconnect, device number 52 [ 756.384892][ T5318] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 756.545602][T30422] netlink: 'syz.3.11783': attribute type 1 has an invalid length. [ 756.555934][ T5318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.575845][ T5318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.589115][ T5318] usb 3-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 756.599943][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.631078][ T5318] usb 3-1: config 0 descriptor?? [ 757.055316][ T5318] wacom 0003:056A:009F.008E: hidraw0: USB HID v0.00 Device [HID 056a:009f] on usb-dummy_hcd.2-1/input0 [ 757.270143][ T5318] usb 3-1: USB disconnect, device number 55 [ 758.743669][T30475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11805'. [ 758.752954][T30475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11805'. [ 758.781700][T30475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11805'. [ 758.813322][T30475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11805'. [ 759.982991][ T5268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 759.995117][ T5268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 760.016651][ T5268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 760.039212][ T5268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 760.049649][ T5268] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 760.061421][ T5268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 760.239637][ T29] audit: type=1326 audit(1729406617.007:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30529 comm="syz.3.11831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 760.396025][ T29] audit: type=1326 audit(1729406617.007:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30529 comm="syz.3.11831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 760.418490][ C1] vkms_vblank_simulate: vblank timer overrun [ 760.446663][T22318] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 760.476222][T22318] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 760.488020][T22318] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 760.503723][T22318] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 760.518024][T22318] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 760.520546][T30538] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11832'. [ 760.525556][T22318] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 760.593319][ T29] audit: type=1326 audit(1729406617.057:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30529 comm="syz.3.11831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 760.643736][T30538] netlink: 124 bytes leftover after parsing attributes in process `syz.0.11832'. [ 760.666866][ T29] audit: type=1326 audit(1729406617.057:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30529 comm="syz.3.11831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 760.690883][ T29] audit: type=1326 audit(1729406617.057:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30529 comm="syz.3.11831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 760.714204][ T29] audit: type=1326 audit(1729406617.077:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30529 comm="syz.3.11831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 760.737609][ T29] audit: type=1326 audit(1729406617.077:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30529 comm="syz.3.11831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 760.744810][T28091] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 760.760217][ T29] audit: type=1326 audit(1729406617.077:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30529 comm="syz.3.11831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2e77dff9 code=0x7ffc0000 [ 760.788679][T30527] chnl_net:caif_netlink_parms(): no params data found [ 760.955948][T28091] usb 4-1: Using ep0 maxpacket: 16 [ 760.964583][T28091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.986257][T28091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.001360][T28091] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 761.016234][T28091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.036083][T28091] usb 4-1: config 0 descriptor?? [ 761.251238][T30527] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.260149][T30527] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.267707][T30527] bridge_slave_0: entered allmulticast mode [ 761.275046][T30527] bridge_slave_0: entered promiscuous mode [ 761.283650][T30527] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.290802][T30527] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.298097][T30527] bridge_slave_1: entered allmulticast mode [ 761.305173][T30527] bridge_slave_1: entered promiscuous mode [ 761.487416][T28091] mcp2200 0003:04D8:00DF.008F: unbalanced delimiter at end of report description [ 761.501682][T30562] netlink: 'syz.0.11841': attribute type 1 has an invalid length. [ 761.515769][T28091] mcp2200 0003:04D8:00DF.008F: can't parse reports [ 761.529943][T28091] mcp2200 0003:04D8:00DF.008F: probe with driver mcp2200 failed with error -22 [ 761.592681][T30541] chnl_net:caif_netlink_parms(): no params data found [ 761.626043][T30527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.656098][T30527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.757230][ T5329] usb 4-1: USB disconnect, device number 53 [ 761.834290][T30570] netlink: 'syz.0.11843': attribute type 3 has an invalid length. [ 761.860785][T30570] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.11843'. [ 761.915145][ T5318] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 761.916595][T30527] team0: Port device team_slave_0 added [ 761.939205][T30527] team0: Port device team_slave_1 added [ 762.079283][ T5318] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 762.093930][ T5318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.104877][ T5318] usb 3-1: Product: syz [ 762.110164][ T5318] usb 3-1: Manufacturer: syz [ 762.111592][T30527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.117247][ T5318] usb 3-1: SerialNumber: syz [ 762.149001][ T5318] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 762.157936][T30527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.182972][ T5326] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 762.195875][ T5268] Bluetooth: hci7: command tx timeout [ 762.234126][T30527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.277066][T30527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.284068][T30527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.359489][T30527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.378232][T30541] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.386358][T30541] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.428196][T30541] bridge_slave_0: entered allmulticast mode [ 762.437066][T30541] bridge_slave_0: entered promiscuous mode [ 762.453945][T30541] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.463643][T30541] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.473596][T30541] bridge_slave_1: entered allmulticast mode [ 762.484399][T30541] bridge_slave_1: entered promiscuous mode [ 762.575457][ T5268] Bluetooth: hci8: command tx timeout [ 762.792432][T30527] hsr_slave_0: entered promiscuous mode [ 762.876031][T30527] hsr_slave_1: entered promiscuous mode [ 762.918762][T30527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.928615][T30527] Cannot create hsr debugfs directory [ 762.942601][T30541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.970678][T30541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.207507][T30541] team0: Port device team_slave_0 added [ 763.215355][ T5326] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 763.222762][ T5326] ath9k_htc: Failed to initialize the device [ 763.226536][T30541] team0: Port device team_slave_1 added [ 763.287301][ T5326] usb 3-1: ath9k_htc: USB layer deinitialized [ 763.295924][ T5319] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 763.388692][T30541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.396903][T30541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.476188][T30541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.502011][T30541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.515763][ T5319] usb 4-1: Using ep0 maxpacket: 16 [ 763.522798][ T5326] usb 3-1: USB disconnect, device number 56 [ 763.532788][ T5319] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 763.542335][ T5319] usb 4-1: config 0 has no interface number 0 [ 763.543023][T30541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.554811][ T5319] usb 4-1: config 0 interface 183 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.610363][ T5319] usb 4-1: config 0 interface 183 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.634836][ T5319] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 763.648068][T30541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.648904][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.692082][ T5319] usb 4-1: config 0 descriptor?? [ 763.934256][T30541] hsr_slave_0: entered promiscuous mode [ 763.961540][T30541] hsr_slave_1: entered promiscuous mode [ 763.976636][T30541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.996321][T30541] Cannot create hsr debugfs directory [ 764.120527][ T5319] uclogic 0003:5543:0781.0090: item fetching failed at offset 2/5 [ 764.134619][ T5319] uclogic 0003:5543:0781.0090: parse failed [ 764.140994][ T5319] uclogic 0003:5543:0781.0090: probe with driver uclogic failed with error -22 [ 764.174120][T30527] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.255501][ T5268] Bluetooth: hci7: command tx timeout [ 764.347316][ T5326] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 764.421109][T30527] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.467466][ T5329] usb 4-1: USB disconnect, device number 54 [ 764.530511][ T5326] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 764.540094][ T5326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.560841][ T5326] usb 3-1: config 0 descriptor?? [ 764.635476][T30527] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.678987][T22318] Bluetooth: hci8: command tx timeout [ 764.779312][T30527] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.798556][ T5326] [drm] vendor descriptor length:6 data:06 5f 01 b5 61 30 00 00 00 00 00 [ 764.807425][ T5326] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 764.983370][T30541] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.994322][ T5326] [drm:udl_init] *ERROR* Selecting channel failed [ 765.007652][ T5326] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 765.014391][ T5326] [drm] Initialized udl on minor 2 [ 765.020257][ T5326] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 765.106488][ T5326] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 765.115589][ T5318] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 765.123564][ T5318] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 765.157126][ T5326] usb 3-1: USB disconnect, device number 57 [ 765.242454][T30541] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.372762][T30541] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.510416][T30541] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.624904][ T5334] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 765.713535][T30541] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 765.777265][T30541] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 765.811992][T30541] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 765.823897][ T5334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.845528][ T5334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.866692][ T5334] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 765.871207][T30541] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 765.876959][ T5334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.902229][ T5334] usb 4-1: config 0 descriptor?? [ 766.080568][T30527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 766.100914][T30527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 766.139274][T30527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 766.156570][T30527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 766.310396][T30527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.332266][ T5334] wacom 0003:056A:030A.0091: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.3-1/input0 [ 766.343699][T22318] Bluetooth: hci7: command tx timeout [ 766.355183][T30541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.369970][T30527] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.424449][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.431641][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.476577][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.483762][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.515246][T30541] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.540537][ T5334] usb 4-1: USB disconnect, device number 55 [ 766.648810][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.655991][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.681920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.689124][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.736689][T22318] Bluetooth: hci8: command tx timeout [ 766.773585][T30527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.989681][T30541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.029365][T30527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.289202][T30541] veth0_vlan: entered promiscuous mode [ 767.316202][T30541] veth1_vlan: entered promiscuous mode [ 767.344298][T30527] veth0_vlan: entered promiscuous mode [ 767.433691][T30527] veth1_vlan: entered promiscuous mode [ 767.595550][T30541] veth0_macvtap: entered promiscuous mode [ 767.623451][T30541] veth1_macvtap: entered promiscuous mode [ 767.734600][T30527] veth0_macvtap: entered promiscuous mode [ 767.777578][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.802822][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.860248][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.872516][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.882871][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.906250][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.923478][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.936098][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.946068][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.957452][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.968986][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.981793][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.992814][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.004418][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.018975][T30541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.029914][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.040455][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.050578][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.062145][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.073100][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.130542][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.140602][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.153117][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.164502][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.177931][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.189024][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.200907][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.212006][T30541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.213195][T30661] program syz.2.11885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.251039][T30541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.285887][T30541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.359879][T30541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.413511][T30541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.424038][T22318] Bluetooth: hci7: command tx timeout [ 768.436628][T30541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.446726][T30541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.467801][T30527] veth1_macvtap: entered promiscuous mode [ 768.600816][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.644696][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.675727][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.694839][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.714688][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.734345][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.754740][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.774722][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.784936][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.812787][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.822969][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.833641][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.843558][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.849334][T22318] Bluetooth: hci8: command tx timeout [ 768.854056][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.869359][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.877083][T30677] netlink: 209800 bytes leftover after parsing attributes in process `syz.3.11893'. [ 768.879864][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.902126][T30527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.912362][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.922886][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.933093][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.943914][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.954065][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.964934][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.975365][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.986044][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.996682][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.007808][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.017793][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.028281][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.038181][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.048696][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.058848][T30527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.069366][T30527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.080711][T30527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.117917][T30527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.130458][T30527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.171974][T30527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.207187][T30527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.526632][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.535486][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.576959][T30690] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11900'. [ 769.793693][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.803216][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.887814][T28011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.912053][T30701] netlink: 'syz.2.11903': attribute type 1 has an invalid length. [ 769.942727][T28011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.949946][T30701] openvswitch: netlink: Actions may not be safe on all matching packets [ 769.976525][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.991821][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.407100][T30718] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 770.442017][T30718] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 770.480338][T30718] gretap1: entered promiscuous mode [ 770.496875][T30718] gretap1: entered allmulticast mode [ 770.497203][ T5318] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 770.724983][ T5318] usb 2-1: Using ep0 maxpacket: 16 [ 770.735523][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.755672][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.773792][ T5318] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 770.790898][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.802641][ T5318] usb 2-1: config 0 descriptor?? [ 770.809094][ T29] audit: type=1326 audit(1729406627.597:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30734 comm="syz.2.11917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6ab7dff9 code=0x7ffc0000 [ 770.859650][ T29] audit: type=1326 audit(1729406627.647:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30734 comm="syz.2.11917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6ab7dff9 code=0x7ffc0000 [ 770.882527][ T29] audit: type=1326 audit(1729406627.647:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30734 comm="syz.2.11917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e6ab7dff9 code=0x7ffc0000 [ 770.906414][ T29] audit: type=1326 audit(1729406627.647:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30734 comm="syz.2.11917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6ab7dff9 code=0x7ffc0000 [ 770.929142][ T29] audit: type=1326 audit(1729406627.647:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30734 comm="syz.2.11917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6ab7dff9 code=0x7ffc0000 [ 770.957107][ T5326] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 770.989512][ T29] audit: type=1326 audit(1729406627.747:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30734 comm="syz.2.11917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f4e6ab7dff9 code=0x7ffc0000 [ 771.039378][ T29] audit: type=1326 audit(1729406627.747:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30734 comm="syz.2.11917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6ab7dff9 code=0x7ffc0000 [ 771.063400][ T29] audit: type=1326 audit(1729406627.747:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30734 comm="syz.2.11917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6ab7dff9 code=0x7ffc0000 [ 771.114957][ T5326] usb 5-1: Using ep0 maxpacket: 16 [ 771.127518][ T5326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.160530][ T5326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.178331][ T5326] usb 5-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 771.197648][ T5326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.216243][ T5326] usb 5-1: config 0 descriptor?? [ 771.321729][ T5318] uclogic 0003:5543:0781.0092: No inputs registered, leaving [ 771.353503][ T5318] uclogic 0003:5543:0781.0092: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 771.612735][ T5319] usb 2-1: USB disconnect, device number 48 [ 771.650155][ T5326] wacom 0003:056A:00F0.0093: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.4-1/input0 [ 771.918636][T28091] usb 5-1: USB disconnect, device number 52 [ 772.271419][T30776] kernel read not supported for file /eth0 (pid: 30776 comm: syz.0.11936) [ 772.285087][ T29] audit: type=1800 audit(1729406629.067:429): pid=30776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11936" name="eth0" dev="mqueue" ino=96629 res=0 errno=0 [ 772.384794][T28091] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 772.547196][T28091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.566748][T28091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.597603][T28091] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 772.613744][T28091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.632801][T28091] usb 4-1: config 0 descriptor?? [ 773.069872][T28091] hid-led 0003:0FC5:B080.0094: unknown main item tag 0x0 [ 773.269616][T28091] hid-led 0003:0FC5:B080.0094: probe with driver hid-led failed with error -71 [ 773.336230][T28091] usb 4-1: USB disconnect, device number 56 [ 773.684366][T30830] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.696704][T30830] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.951229][T30831] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.958506][T30831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.004381][T30831] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.011637][T30831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.237869][T30849] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11968'. [ 774.270336][T30846] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11968'. [ 774.661460][T30862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11976'. [ 774.685807][ T5334] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 774.735418][ T5319] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 774.844996][ T5334] usb 2-1: Using ep0 maxpacket: 16 [ 774.876503][ T5334] usb 2-1: config 0 has an invalid interface number: 159 but max is 1 [ 774.898054][ T5319] usb 5-1: Using ep0 maxpacket: 16 [ 774.903374][ T5334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.931251][ T5319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.952624][ T5334] usb 2-1: config 0 has no interface number 0 [ 774.959987][ T5334] usb 2-1: config 0 interface 159 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 774.982812][ T5319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.007417][T28091] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 775.024848][ T5319] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 775.034326][ T5319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.043889][ T5334] usb 2-1: config 0 interface 159 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 775.055907][ T5334] usb 2-1: config 0 interface 159 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 775.071021][ T5334] usb 2-1: too many endpoints for config 0 interface 1 altsetting 1: 99, using maximum allowed: 30 [ 775.083890][ T5319] usb 5-1: config 0 descriptor?? [ 775.095904][ T5334] usb 2-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 775.115172][ T5334] usb 2-1: config 0 interface 1 has no altsetting 0 [ 775.129646][ T5334] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 775.142418][ T5334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.150601][ T5334] usb 2-1: Product: syz [ 775.154922][ T5334] usb 2-1: Manufacturer: syz [ 775.159593][ T5334] usb 2-1: SerialNumber: syz [ 775.169811][ T5334] usb 2-1: config 0 descriptor?? [ 775.210002][T28091] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 775.225367][T28091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.247323][T28091] usb 3-1: Product: syz [ 775.251588][T28091] usb 3-1: Manufacturer: syz [ 775.266182][T28091] usb 3-1: SerialNumber: syz [ 775.275162][T28091] usb 3-1: config 0 descriptor?? [ 775.338999][T30872] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 775.402675][ T5334] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 775.428178][ T5334] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 775.437256][ T5334] dib0700: firmware download failed at 7 with -22 [ 775.456712][ T5334] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 775.471729][ T5334] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 775.494214][ T5334] dib0700: firmware download failed at 7 with -22 [ 775.507105][ T5334] usb 2-1: USB disconnect, device number 49 [ 775.525890][ T5319] bigben 0003:146B:0902.0095: unexpected rdesc, please submit for review [ 775.539144][ T5319] bigben 0003:146B:0902.0095: unknown main item tag 0x2 [ 775.547861][ T5319] bigben 0003:146B:0902.0095: unbalanced collection at end of report description [ 775.564020][ T5319] bigben 0003:146B:0902.0095: parse failed [ 775.572227][ T5319] bigben 0003:146B:0902.0095: probe with driver bigben failed with error -22 [ 775.703450][T28091] mos7840 3-1:0.0: required endpoints missing [ 775.707682][T28091] usb 3-1: USB disconnect, device number 58 [ 775.743863][ T5334] usb 5-1: USB disconnect, device number 53 [ 776.872009][T30916] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 2, id = 0 [ 777.378584][T30935] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 777.654785][T27267] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 777.814797][T27267] usb 4-1: Using ep0 maxpacket: 32 [ 777.826168][T27267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.845979][T27267] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 777.858523][T27267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.872506][T27267] usb 4-1: config 0 descriptor?? [ 778.335096][T27267] nintendo 0003:057E:200E.0096: unknown main item tag 0x0 [ 778.367476][T27267] nintendo 0003:057E:200E.0096: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 778.436601][T27267] nintendo 0003:057E:200E.0096: Failed charging grip handshake [ 778.447524][T27267] nintendo 0003:057E:200E.0096: Failed to initialize controller; ret=-110 [ 778.472070][T27267] nintendo 0003:057E:200E.0096: probe - fail = -110 [ 778.478937][T27267] nintendo 0003:057E:200E.0096: probe with driver nintendo failed with error -110 [ 778.547183][T27267] usb 4-1: USB disconnect, device number 57 [ 779.206375][ T5334] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 779.401177][ T5334] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 779.410857][ T5334] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 779.434845][ T5334] usb 3-1: Manufacturer: syz [ 779.444773][T27267] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 779.457369][ T5334] usb 3-1: config 0 descriptor?? [ 779.594728][T27267] usb 5-1: Using ep0 maxpacket: 16 [ 779.612752][T27267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.656585][T27267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.666566][T27267] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 779.679485][T27267] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 779.688632][T27267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.712004][T27267] usb 5-1: config 0 descriptor?? [ 779.785039][ T5318] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 779.871178][ T5334] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 779.979807][ T5318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.012962][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 780.026907][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 780.038776][ T5318] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.058130][ T5318] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 780.069326][ T5318] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 780.078033][ T5318] usb 2-1: Manufacturer: syz [ 780.079323][ T5334] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 780.087060][ T5318] usb 2-1: config 0 descriptor?? [ 780.119127][ T5334] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 780.135668][T27267] microsoft 0003:045E:07DA.0097: No inputs registered, leaving [ 780.150569][T27267] microsoft 0003:045E:07DA.0097: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 780.165674][T27267] microsoft 0003:045E:07DA.0097: no inputs found [ 780.173485][T27267] microsoft 0003:045E:07DA.0097: could not initialize ff, continuing anyway [ 780.187316][ T5334] usb 3-1: USB disconnect, device number 59 [ 780.412316][T27267] usb 5-1: USB disconnect, device number 54 [ 780.418812][ T5318] rc_core: IR keymap rc-hauppauge not found [ 780.434734][ T5318] Registered IR keymap rc-empty [ 780.441506][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.475968][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.505534][ T5318] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 780.518842][ T5318] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input178 [ 780.538660][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.569146][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.604885][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.637129][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.664908][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.705026][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.745036][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.764900][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.795607][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.815006][ T5318] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.836115][ T5318] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 780.853153][ T5318] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 780.866768][ T5318] usb 2-1: USB disconnect, device number 50 [ 780.881873][T31023] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 780.888457][T31023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 780.905632][T31023] vhci_hcd vhci_hcd.0: Device attached [ 781.164963][ T25] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 781.184898][T27267] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 781.280748][ T29] audit: type=1326 audit(1729406638.067:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.4.12052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 781.335974][ T29] audit: type=1326 audit(1729406638.107:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.4.12052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 781.358438][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.383525][ T29] audit: type=1326 audit(1729406638.107:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.4.12052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 781.407668][ T29] audit: type=1326 audit(1729406638.107:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.4.12052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 781.430621][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.437988][ T29] audit: type=1326 audit(1729406638.107:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.4.12052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 781.460430][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.466654][ T29] audit: type=1326 audit(1729406638.107:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.4.12052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 781.490143][ T29] audit: type=1326 audit(1729406638.107:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.4.12052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 781.512569][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.522421][T27267] usb 4-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d [ 781.531641][T27267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.551998][T27267] usb 4-1: config 0 descriptor?? [ 781.778488][T28091] usb 4-1: USB disconnect, device number 58 [ 781.786115][T31024] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 781.800918][ T52] vhci_hcd: stop threads [ 781.805643][ T52] vhci_hcd: release socket [ 781.815218][ T52] vhci_hcd: disconnect device [ 782.408208][T31061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12065'. [ 782.824854][ T5319] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 783.025505][ T5319] usb 4-1: Using ep0 maxpacket: 16 [ 783.032538][ T5319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.044582][ T5319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 783.063778][ T5319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 783.082284][T31078] binder: 31077:31078 ioctl c0306201 0 returned -14 [ 783.104887][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.112900][ T5319] usb 4-1: Product: syz [ 783.152686][T31078] binder: 31077:31078 ioctl c0306201 20000240 returned -11 [ 783.155300][T31082] tipc: Enabling of bearer rejected, failed to enable media [ 783.164778][ T5319] usb 4-1: Manufacturer: syz [ 783.172910][ T5319] usb 4-1: SerialNumber: syz [ 783.498994][T31088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12077'. [ 783.552202][ T5319] usb 4-1: 0:2 : does not exist [ 783.572619][ T5319] usb 4-1: USB disconnect, device number 59 [ 783.584817][T28091] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 783.606766][T29705] udevd[29705]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.744856][T28091] usb 2-1: Using ep0 maxpacket: 32 [ 783.788956][T28091] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.852379][T28091] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.852436][T28091] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 783.852467][T28091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.897535][T28091] hub 2-1:4.0: USB hub found [ 784.102512][T28091] hub 2-1:4.0: 2 ports detected [ 784.102564][T28091] usb 2-1: selecting invalid altsetting 1 [ 784.102584][T28091] hub 2-1:4.0: Using single TT (err -22) [ 784.303545][T28091] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 784.315423][T28091] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 784.424295][T28091] usb 2-1: USB disconnect, device number 51 [ 785.195928][T27267] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 785.387796][T27267] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 785.419522][T27267] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 785.446886][T27267] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 785.474912][T27267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.507824][T31128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 785.528795][T27267] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 785.803870][ T5334] usb 3-1: USB disconnect, device number 60 [ 786.149726][T31177] netlink: 211388 bytes leftover after parsing attributes in process `syz.4.12118'. [ 786.270802][ T25] vhci_hcd: vhci_device speed not set [ 786.352938][T31181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12120'. [ 786.709710][ T29] audit: type=1326 audit(1729406643.497:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31190 comm="syz.1.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb97dff9 code=0x7ffc0000 [ 786.758418][T31195] netlink: 245 bytes leftover after parsing attributes in process `syz.4.12126'. [ 786.769405][T31195] openvswitch: netlink: Actions may not be safe on all matching packets [ 786.800338][ T29] audit: type=1326 audit(1729406643.547:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31190 comm="syz.1.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb97dff9 code=0x7ffc0000 [ 786.829994][ T29] audit: type=1326 audit(1729406643.557:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31190 comm="syz.1.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8efb97dff9 code=0x7ffc0000 [ 786.882504][ T29] audit: type=1326 audit(1729406643.557:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31190 comm="syz.1.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb97dff9 code=0x7ffc0000 [ 787.006902][ T29] audit: type=1326 audit(1729406643.557:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31190 comm="syz.1.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb97dff9 code=0x7ffc0000 [ 787.155030][ T29] audit: type=1326 audit(1729406643.587:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31190 comm="syz.1.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f8efb97dff9 code=0x7ffc0000 [ 787.177406][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.304774][ T29] audit: type=1326 audit(1729406643.587:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31190 comm="syz.1.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb97dff9 code=0x7ffc0000 [ 787.434859][ T29] audit: type=1326 audit(1729406643.587:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31190 comm="syz.1.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb97dff9 code=0x7ffc0000 [ 787.682130][T31225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12142'. [ 788.574881][ T25] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 788.724833][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 788.731913][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 788.749794][ T25] usb 2-1: config 0 has no interface number 0 [ 788.788465][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.811910][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 788.834610][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.855754][ T25] usb 2-1: config 0 descriptor?? [ 788.873350][ T25] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 789.117939][ T5319] usb 2-1: USB disconnect, device number 52 [ 789.157472][ T5319] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 789.874886][ T5318] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 790.044737][ T5318] usb 5-1: Using ep0 maxpacket: 32 [ 790.051797][ T5318] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.055276][T31298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12177'. [ 790.063624][ T5318] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.088369][ T5318] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 790.143720][ T5318] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 790.159587][ T5318] usb 5-1: Product: syz [ 790.164006][ T5318] usb 5-1: Manufacturer: syz [ 790.180812][ T5318] hub 5-1:4.0: USB hub found [ 790.391136][ T5318] hub 5-1:4.0: 2 ports detected [ 790.598397][ T5318] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 790.615946][ T5318] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 790.666089][ T5318] usb 5-1: USB disconnect, device number 55 [ 791.384818][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 791.534944][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 791.550187][ T25] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 791.559657][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.567855][ T25] usb 3-1: Product: syz [ 791.572107][ T25] usb 3-1: Manufacturer: syz [ 791.577069][ T25] usb 3-1: SerialNumber: syz [ 791.586006][ T25] usb 3-1: config 0 descriptor?? [ 791.595877][ T25] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 791.755025][T28091] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 791.937484][T28091] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 791.949963][T28091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.006521][T28091] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 792.026095][T28091] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 792.034159][T28091] usb 4-1: Manufacturer: syz [ 792.043929][T28091] usb 4-1: config 0 descriptor?? [ 792.144818][T28091] rc_core: IR keymap rc-hauppauge not found [ 792.150796][T28091] Registered IR keymap rc-empty [ 792.158227][T28091] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 792.200337][T28091] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input179 [ 792.261096][ T25] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 792.293520][ T25] usb 3-1: USB disconnect, device number 61 [ 792.305035][ T5334] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 792.467828][ T5334] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 792.477074][ T5334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.496052][ T5334] usb 2-1: config 0 has no interface number 0 [ 792.507748][ T5334] usb 2-1: New USB device found, idVendor=1110, idProduct=9001, bcdDevice=b2.a9 [ 792.519923][ T5334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.529611][ T5334] usb 2-1: Product: syz [ 792.536435][ T5334] usb 2-1: Manufacturer: syz [ 792.541287][ T5334] usb 2-1: SerialNumber: syz [ 792.553857][ T5334] usb 2-1: config 0 descriptor?? [ 792.607533][ T5334] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9001) Rev (0XB2A9): ADI930 [ 792.719596][ T25] usb 4-1: USB disconnect, device number 60 [ 792.747815][ T5334] usb 2-1: reset high-speed USB device number 53 using dummy_hcd [ 793.018541][T31375] usb usb8: usbfs: process 31375 (syz.4.12210) did not claim interface 0 before use [ 793.256337][ T25] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 793.430580][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.472732][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 793.498270][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.518295][ T25] usb 3-1: config 0 descriptor?? [ 793.527016][ T25] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 793.534272][ T25] usb 3-1: No valid video chain found. [ 793.580684][ T5334] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 793.604869][ T5319] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 793.612796][ T5334] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 793.621482][T28091] usb 2-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2 [ 793.634836][T28091] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw [ 793.651801][ T5334] usb 2-1: USB disconnect, device number 53 [ 793.665715][T29705] udevd[29705]: setting mode of /dev/bus/usb/002/053 to 020664 failed: No such file or directory [ 793.703056][T29705] udevd[29705]: setting owner of /dev/bus/usb/002/053 to uid=0, gid=0 failed: No such file or directory [ 793.759473][ T5270] usb 3-1: USB disconnect, device number 62 [ 793.794802][ T5319] usb 4-1: Using ep0 maxpacket: 32 [ 793.810462][ T29] audit: type=1326 audit(1729406650.597:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31391 comm="syz.4.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 793.834566][ T29] audit: type=1326 audit(1729406650.617:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31391 comm="syz.4.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 793.837419][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.871084][ T29] audit: type=1326 audit(1729406650.657:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31391 comm="syz.4.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 793.893461][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.903250][ T29] audit: type=1326 audit(1729406650.657:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31391 comm="syz.4.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 793.925719][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.933027][ T29] audit: type=1326 audit(1729406650.657:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31391 comm="syz.4.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 793.958046][ T29] audit: type=1326 audit(1729406650.667:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31391 comm="syz.4.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 793.967157][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.980405][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.983458][ T29] audit: type=1326 audit(1729406650.667:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31391 comm="syz.4.12218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688717dff9 code=0x7ffc0000 [ 794.080127][ T5319] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 794.112411][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.127366][ T5319] usb 4-1: config 0 descriptor?? [ 794.475862][T31400] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 794.589397][ T5319] topre 0003:0853:0146.0098: item fetching failed at offset 5/7 [ 794.604055][ T5319] topre 0003:0853:0146.0098: probe with driver topre failed with error -22 [ 794.660584][T31404] netlink: 'syz.4.12224': attribute type 16 has an invalid length. [ 794.882190][ T5334] usb 4-1: USB disconnect, device number 61 [ 795.477750][T31433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12238'. [ 796.047404][T31462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12251'. [ 796.094131][T31462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12251'. [ 796.132809][T31466] vivid-007: ================= START STATUS ================= [ 796.138962][T31462] netlink: 'syz.1.12251': attribute type 20 has an invalid length. [ 796.150394][T31466] vivid-007: Enable Output Cropping: true grabbed [ 796.165206][T31466] vivid-007: Enable Output Composing: true grabbed [ 796.171801][T31466] vivid-007: Enable Output Scaler: true grabbed [ 796.228740][T31466] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 796.252751][T31466] vivid-007: Transmit Mode: HDMI grabbed [ 796.259698][T31466] vivid-007: Hotplug Present: 0x00000000 [ 796.265705][T31466] vivid-007: RxSense Present: 0x00000000 [ 796.272861][T31466] vivid-007: EDID Present: 0x00000000 [ 796.278559][T31466] vivid-007: ================== END STATUS ================== [ 796.397416][ T29] audit: type=1326 audit(1729406653.187:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31472 comm="syz.1.12257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8efb97dff9 code=0x0 [ 796.947979][T31492] vlan2: entered promiscuous mode [ 796.970886][T31492] vlan2: entered allmulticast mode [ 797.025426][ T5318] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 797.075721][T31496] openvswitch: netlink: Actions may not be safe on all matching packets [ 797.227889][ T5318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.239691][ T5318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.255064][ T5318] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 797.266132][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.288463][ T5318] usb 3-1: config 0 descriptor?? [ 797.494844][ T5334] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 797.658132][ T5334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.695373][ T5334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.713602][ T5334] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 797.727459][ T5318] uclogic 0003:5543:0522.0099: unknown main item tag 0x0 [ 797.732115][ T5334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.755272][ T5334] usb 5-1: config 0 descriptor?? [ 797.772229][ T5318] uclogic 0003:5543:0522.0099: unknown main item tag 0x0 [ 797.810563][ T5318] uclogic 0003:5543:0522.0099: unknown main item tag 0x0 [ 797.825407][ T5318] uclogic 0003:5543:0522.0099: unknown main item tag 0x0 [ 797.837235][ T5318] uclogic 0003:5543:0522.0099: unknown main item tag 0x0 [ 797.857633][ T5318] uclogic 0003:5543:0522.0099: No inputs registered, leaving [ 797.888970][ T5318] uclogic 0003:5543:0522.0099: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 797.955374][ T5318] usb 3-1: USB disconnect, device number 63 [ 798.123351][T31527] openvswitch: netlink: Actions may not be safe on all matching packets [ 798.177351][ T5334] appleir 0003:05AC:8241.009A: item fetching failed at offset 5/7 [ 798.201927][ T5334] appleir 0003:05AC:8241.009A: parse failed [ 798.210561][ T5334] appleir 0003:05AC:8241.009A: probe with driver appleir failed with error -22 [ 798.403138][ T5334] usb 5-1: USB disconnect, device number 56 [ 798.414026][T31534] [U]  [ 798.900412][ T5318] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 799.023208][T31551] tipc: Started in network mode [ 799.035399][T31551] tipc: Node identity 3a000000000000000000000000000001, cluster identity 4711 [ 799.044436][T31551] tipc: Enabling of bearer rejected, failed to enable media [ 799.056630][ T5318] usb 2-1: Using ep0 maxpacket: 8 [ 799.086573][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.125181][ T5318] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 799.146653][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.170422][ T5318] usb 2-1: config 0 descriptor?? [ 799.619986][ T5318] hid-alps 0003:044E:121E.009B: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.1-1/input0 [ 799.822029][ T5318] usb 2-1: USB disconnect, device number 54 [ 800.806256][T31581] pimreg3: entered allmulticast mode [ 801.282900][ T5334] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 801.464799][ T5334] usb 3-1: Using ep0 maxpacket: 16 [ 801.475310][ T5334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.503962][ T5334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.524353][ T5334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 801.547345][ T5334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 801.559922][ T5334] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 801.570308][ T5334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.586445][ T5334] usb 3-1: config 0 descriptor?? [ 801.718195][T28011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.961131][T28011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.030213][ T5334] hid-u2fzero 0003:10C4:8ACF.009C: unknown main item tag 0x0 [ 802.054770][ T5334] hid-u2fzero 0003:10C4:8ACF.009C: unknown main item tag 0x0 [ 802.062483][ T5334] hid-u2fzero 0003:10C4:8ACF.009C: unknown main item tag 0x0 [ 802.072361][ T5334] hid-u2fzero 0003:10C4:8ACF.009C: unknown main item tag 0x0 [ 802.080514][ T5334] hid-u2fzero 0003:10C4:8ACF.009C: unknown main item tag 0x0 [ 802.089812][ T5334] hid-u2fzero 0003:10C4:8ACF.009C: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 802.141407][ T5334] hid-u2fzero 0003:10C4:8ACF.009C: U2F Zero LED initialised [ 802.165017][ T5334] hid-u2fzero 0003:10C4:8ACF.009C: U2F Zero RNG initialised [ 802.169228][T28011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.255272][T27267] usb 3-1: USB disconnect, device number 64 [ 802.480870][T28011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.664519][ T5268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 802.681097][ T5268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 802.693172][ T5268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 802.706436][ T5268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 802.745278][ T5268] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 802.752784][ T5268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 802.845231][T28011] bridge_slave_1: left allmulticast mode [ 802.850954][T28011] bridge_slave_1: left promiscuous mode [ 802.869033][T28011] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.952065][T28011] bridge_slave_0: left allmulticast mode [ 802.962587][T28011] bridge_slave_0: left promiscuous mode [ 802.981635][T28011] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.072659][T28011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.100665][T28011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.118059][T28011] bond0 (unregistering): Released all slaves [ 804.814894][T22318] Bluetooth: hci7: command tx timeout [ 804.833592][T31617] chnl_net:caif_netlink_parms(): no params data found [ 805.130844][T28011] hsr_slave_0: left promiscuous mode [ 805.188976][T28011] hsr_slave_1: left promiscuous mode [ 805.212884][T28011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.237062][T28011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.261757][T28011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.270622][T28011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.366127][T28011] veth1_macvtap: left promiscuous mode [ 805.371647][T28011] veth0_macvtap: left promiscuous mode [ 805.394887][T31673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 805.410509][T28011] veth1_vlan: left promiscuous mode [ 805.444971][T28011] veth0_vlan: left promiscuous mode [ 805.754926][ T5270] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 805.893595][T28011] pimreg3 (unregistering): left allmulticast mode [ 805.916374][ T5270] usb 2-1: Using ep0 maxpacket: 16 [ 805.924310][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.960033][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.989824][ T5270] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 806.040423][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.067132][ T5270] usb 2-1: config 0 descriptor?? [ 806.503653][ T5268] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 806.519823][ T5268] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 806.540871][ T5268] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 806.541903][ T5270] corsair 0003:1B1C:1B02.009D: unknown main item tag 0x0 [ 806.566951][ T5268] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 806.568055][ T5270] corsair 0003:1B1C:1B02.009D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 806.590033][ T5268] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 806.601982][ T5268] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 806.899391][T22318] Bluetooth: hci7: command tx timeout [ 807.059848][ T5334] usb 2-1: USB disconnect, device number 55 [ 807.506548][T28011] team0 (unregistering): Port device team_slave_1 removed [ 807.579169][T28011] team0 (unregistering): Port device team_slave_0 removed [ 808.662535][T22318] Bluetooth: hci9: command tx timeout [ 808.832363][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.840241][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.014772][T22318] Bluetooth: hci7: command tx timeout [ 809.270116][T31713] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.491867][T31617] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.520793][T31617] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.532913][T31617] bridge_slave_0: entered allmulticast mode [ 809.553295][T31617] bridge_slave_0: entered promiscuous mode [ 809.583056][T31617] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.590484][T31617] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.626486][T31617] bridge_slave_1: entered allmulticast mode [ 809.640042][T31617] bridge_slave_1: entered promiscuous mode [ 809.834101][T31617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.857855][T31617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.098284][ T30] INFO: task syz.2.10713:28013 blocked for more than 143 seconds. [ 810.106482][ T30] Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 810.114374][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.123283][ T30] task:syz.2.10713 state:D stack:27360 pid:28013 tgid:28012 ppid:21607 flags:0x00000004 [ 810.133899][ T30] Call Trace: [ 810.137463][ T30] [ 810.140436][ T30] __schedule+0x1895/0x4b30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 810.145282][ T30] ? __pfx___schedule+0x10/0x10 [ 810.150399][ T30] ? __pfx_lock_release+0x10/0x10 [ 810.155575][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 810.162682][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 810.169207][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 810.174375][ T30] ? schedule+0x90/0x320 [ 810.176399][T31617] team0: Port device team_slave_0 added [ 810.178725][ T30] schedule+0x14b/0x320 [ 810.188702][ T30] schedule_preempt_disabled+0x13/0x30 [ 810.194205][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 810.200301][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 810.201530][T31617] team0: Port device team_slave_1 added [ 810.206384][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 810.218223][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 810.223328][ T30] down_write+0x1d7/0x220 [ 810.227814][ T30] ? __pfx_down_write+0x10/0x10 [ 810.232733][ T30] blkdev_fallocate+0x20e/0x490 [ 810.237701][ T30] vfs_fallocate+0x569/0x6e0 [ 810.242345][ T30] __x64_sys_fallocate+0xbd/0x110 [ 810.247507][ T30] do_syscall_64+0xf3/0x230 [ 810.252053][ T30] ? clear_bhb_loop+0x35/0x90 [ 810.256846][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.263971][ T30] RIP: 0033:0x7ffa43f7dff9 [ 810.268523][ T30] RSP: 002b:00007ffa44dc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 810.277154][ T30] RAX: ffffffffffffffda RBX: 00007ffa44135f80 RCX: 00007ffa43f7dff9 [ 810.285323][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 810.293903][ T30] RBP: 00007ffa43ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 810.302059][ T30] R10: 0000000000055000 R11: 0000000000000246 R12: 0000000000000000 [ 810.310169][ T30] R13: 0000000000000000 R14: 00007ffa44135f80 R15: 00007ffa4425fa28 [ 810.318697][ T30] [ 810.321795][ T30] [ 810.321795][ T30] Showing all locks held in the system: [ 810.329622][ T30] 1 lock held by khungtaskd/30: [ 810.334503][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 810.344593][ T30] 3 locks held by kworker/u8:2/35: [ 810.349875][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 810.361816][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 810.373639][ T30] #2: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 810.383556][ T30] 2 locks held by getty/4982: [ 810.388522][ T30] #0: ffff8880323d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 810.398601][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 810.409042][ T30] 1 lock held by sshd/5215: [ 810.413578][ T30] #0: ffff888074bc8468 (&pipe->mutex){+.+.}-{3:3}, at: pipe_read+0x127/0x13e0 [ 810.422989][ T30] 1 lock held by syz-executor/5217: [ 810.428596][ T30] 3 locks held by syz-executor/27914: [ 810.434001][ T30] 1 lock held by syz.1.10683/27929: [ 810.439611][ T30] 4 locks held by kworker/u8:8/28011: [ 810.445097][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 810.456123][ T30] #1: ffffc9000fbafd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 810.466843][ T30] #2: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 810.477637][ T30] #3: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x20/0x90 [ 810.487553][ T30] 1 lock held by syz.2.10713/28013: [ 810.492786][ T30] #0: ffff888148db6540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 810.503791][ T30] 3 locks held by kworker/0:2/28091: [ 810.509204][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 810.520324][ T30] #1: ffffc9000ef8fd00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 810.532514][ T30] #2: ffffffff8e7e1030 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_lock_wait+0x14e/0x260 [ 810.543293][ T30] 1 lock held by syz.4.11699/30239: [ 810.548611][ T30] #0: ffff888148db6540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 810.559380][ T30] 1 lock held by syz.1.11714/30271: [ 810.564608][ T30] #0: ffff888148db6540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 810.576141][ T30] 1 lock held by syz.3.12248/31454: [ 810.581378][ T30] #0: ffff888148db6540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 810.593310][ T30] 2 locks held by syz-executor/31617: [ 810.598914][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 810.608470][ T30] #1: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 810.619580][ T30] 1 lock held by syz.2.12348/31679: [ 810.624905][ T30] #0: ffff888148db6540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 810.636307][ T30] 1 lock held by syz-executor/31683: [ 810.641626][ T30] #0: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 810.650869][ T30] 4 locks held by sed/31730: [ 810.655872][ T30] [ 810.658227][ T30] ============================================= [ 810.658227][ T30] [ 810.666747][ T30] NMI backtrace for cpu 0 [ 810.671108][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 810.681640][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 810.691723][ T30] Call Trace: [ 810.695032][ T30] [ 810.697994][ T30] dump_stack_lvl+0x241/0x360 [ 810.702708][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.707945][ T30] ? __pfx__printk+0x10/0x10 [ 810.712585][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 810.717588][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 810.723090][ T30] ? _printk+0xd5/0x120 [ 810.727283][ T30] ? __pfx__printk+0x10/0x10 [ 810.731908][ T30] ? __wake_up_klogd+0xcc/0x110 [ 810.736803][ T30] ? __pfx__printk+0x10/0x10 [ 810.741458][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 810.746531][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 810.752553][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 810.758578][ T30] watchdog+0xff4/0x1040 [ 810.762874][ T30] ? watchdog+0x1ea/0x1040 [ 810.767339][ T30] ? __pfx_watchdog+0x10/0x10 [ 810.772064][ T30] kthread+0x2f0/0x390 [ 810.776170][ T30] ? __pfx_watchdog+0x10/0x10 [ 810.780888][ T30] ? __pfx_kthread+0x10/0x10 [ 810.785517][ T30] ret_from_fork+0x4b/0x80 [ 810.789978][ T30] ? __pfx_kthread+0x10/0x10 [ 810.794605][ T30] ret_from_fork_asm+0x1a/0x30 [ 810.799426][ T30] [ 810.803482][ T30] Sending NMI from CPU 0 to CPUs 1: [ 810.809321][ C1] NMI backtrace for cpu 1 [ 810.809335][ C1] CPU: 1 UID: 0 PID: 27914 Comm: syz-executor Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 810.809355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 810.809365][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x329/0x780 [ 810.809393][ C1] Code: 5d 4a 85 03 48 ba 00 00 00 00 00 fc ff df e9 3d ff ff ff 48 8b 44 24 10 48 8d 98 c0 0a 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 2b 03 00 00 83 3b 00 0f 84 f7 00 00 00 41 0f b6 04 17 [ 810.809407][ C1] RSP: 0018:ffffc9001423f280 EFLAGS: 00000802 [ 810.809424][ C1] RAX: 0000000000000000 RBX: ffff888042b98ac0 RCX: ffffffff8170ce6a [ 810.809437][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff942c9898 [ 810.809448][ C1] RBP: ffffc9001423f328 R08: ffffffff942c989f R09: 1ffffffff2859313 [ 810.809461][ C1] R10: dffffc0000000000 R11: fffffbfff2859314 R12: ffff888042b98b50 [ 810.809472][ C1] R13: 0000000000000002 R14: ffff888042b98ad8 R15: 1ffff1100857315b [ 810.809484][ C1] FS: 0000555592256500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 810.809499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.809511][ C1] CR2: 0000555592299708 CR3: 0000000034d6e000 CR4: 00000000003526f0 [ 810.809528][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 810.809538][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 810.809549][ C1] Call Trace: [ 810.809556][ C1] [ 810.809563][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 810.809591][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 810.809614][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 810.809638][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 810.809658][ C1] ? nmi_handle+0x14f/0x5a0 [ 810.809675][ C1] ? nmi_handle+0x2a/0x5a0 [ 810.809691][ C1] ? lockdep_hardirqs_on_prepare+0x329/0x780 [ 810.809712][ C1] ? default_do_nmi+0x63/0x160 [ 810.809732][ C1] ? exc_nmi+0x123/0x1f0 [ 810.809750][ C1] ? end_repeat_nmi+0xf/0x53 [ 810.809769][ C1] ? mark_lock+0x9a/0x360 [ 810.809785][ C1] ? lockdep_hardirqs_on_prepare+0x329/0x780 [ 810.809806][ C1] ? lockdep_hardirqs_on_prepare+0x329/0x780 [ 810.809828][ C1] ? lockdep_hardirqs_on_prepare+0x329/0x780 [ 810.809850][ C1] [ 810.809856][ C1] [ 810.809863][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 810.809886][ C1] ? rcu_is_watching+0x15/0xb0 [ 810.809904][ C1] trace_hardirqs_on+0x28/0x40 [ 810.809923][ C1] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 810.809946][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 810.809977][ C1] ? klist_dec_and_del+0x154/0x3f0 [ 810.809992][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 810.810012][ C1] klist_next+0x291/0x330 [ 810.810030][ C1] class_find_device+0x1d5/0x390 [ 810.810051][ C1] ? __pfx_device_match_devt+0x10/0x10 [ 810.810069][ C1] ? __pfx_class_find_device+0x10/0x10 [ 810.810092][ C1] alloc_tty_struct+0x67c/0x7d0 [ 810.810112][ C1] ? __pfx_alloc_tty_struct+0x10/0x10 [ 810.810130][ C1] ? pty_common_install+0xd3/0x710 [ 810.810147][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 810.810169][ C1] pty_common_install+0x15f/0x710 [ 810.810188][ C1] tty_init_dev+0xc1/0x4c0 [ 810.810207][ C1] ptmx_open+0xda/0x2c0 [ 810.810225][ C1] chrdev_open+0x521/0x600 [ 810.810243][ C1] ? __pfx_apparmor_file_open+0x10/0x10 [ 810.810266][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 810.810285][ C1] ? bpf_lsm_file_open+0x9/0x10 [ 810.810301][ C1] ? security_file_open+0x509/0x990 [ 810.810316][ C1] ? __pfx_chrdev_open+0x10/0x10 [ 810.810334][ C1] do_dentry_open+0x978/0x1460 [ 810.810357][ C1] vfs_open+0x3e/0x330 [ 810.810376][ C1] path_openat+0x2c84/0x3590 [ 810.810406][ C1] ? __pfx_path_openat+0x10/0x10 [ 810.810433][ C1] do_filp_open+0x235/0x490 [ 810.810455][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 810.810483][ C1] ? _raw_spin_unlock+0x28/0x50 [ 810.810502][ C1] ? alloc_fd+0x5a1/0x640 [ 810.810521][ C1] do_sys_openat2+0x13e/0x1d0 [ 810.810540][ C1] ? do_unlinkat+0x7b0/0x830 [ 810.810555][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 810.810580][ C1] ? do_unlinkat+0x7b0/0x830 [ 810.810599][ C1] __x64_sys_openat+0x247/0x2a0 [ 810.810619][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 810.810639][ C1] ? do_syscall_64+0x100/0x230 [ 810.810656][ C1] ? do_syscall_64+0xb6/0x230 [ 810.810673][ C1] do_syscall_64+0xf3/0x230 [ 810.810689][ C1] ? clear_bhb_loop+0x35/0x90 [ 810.810705][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.810728][ C1] RIP: 0033:0x7f0008b7c990 [ 810.810742][ C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 810.810755][ C1] RSP: 002b:00007f0008e5b980 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 810.810771][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0008b7c990 [ 810.810783][ C1] RDX: 0000000000000000 RSI: 00007f0008e5bab0 RDI: 00000000ffffff9c [ 810.810795][ C1] RBP: 00007f0008e5bab0 R08: 0000000000000000 R09: 0000000000000000 [ 810.810805][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f0008e5cba0 [ 810.810817][ C1] R13: 00007f0008bf0134 R14: 00005555922564a8 R15: 0000000000000008 [ 810.810833][ C1] [ 810.811324][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 811.328056][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0 [ 811.338594][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 811.348676][ T30] Call Trace: [ 811.351986][ T30] [ 811.354948][ T30] dump_stack_lvl+0x241/0x360 [ 811.359674][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.364913][ T30] ? __pfx__printk+0x10/0x10 [ 811.369534][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 811.375565][ T30] ? vscnprintf+0x5d/0x90 [ 811.379935][ T30] panic+0x349/0x880 [ 811.383866][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 811.390063][ T30] ? __pfx_panic+0x10/0x10 [ 811.394514][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 811.399923][ T30] ? __irq_work_queue_local+0x137/0x410 [ 811.405516][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 811.410922][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 811.417117][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 811.423318][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 811.429515][ T30] watchdog+0x1033/0x1040 [ 811.433886][ T30] ? watchdog+0x1ea/0x1040 [ 811.438353][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.443076][ T30] kthread+0x2f0/0x390 [ 811.447180][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.451895][ T30] ? __pfx_kthread+0x10/0x10 [ 811.456522][ T30] ret_from_fork+0x4b/0x80 [ 811.460980][ T30] ? __pfx_kthread+0x10/0x10 [ 811.465607][ T30] ret_from_fork_asm+0x1a/0x30 [ 811.470424][ T30] [ 811.473611][ T30] Kernel Offset: disabled [ 811.477933][ T30] Rebooting in 86400 seconds..