last executing test programs: 1m26.377120609s ago: executing program 0 (id=1868): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x408, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2}}}}}}}]}}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 1m24.992176538s ago: executing program 0 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) 1m24.773385699s ago: executing program 0 (id=1880): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x84000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m24.330250579s ago: executing program 0 (id=1886): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 1m24.169084032s ago: executing program 0 (id=1889): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000004, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 1m23.902047184s ago: executing program 0 (id=1893): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, &(0x7f0000000300)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1m23.586674309s ago: executing program 32 (id=1893): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, &(0x7f0000000300)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 3.232264662s ago: executing program 4 (id=2899): iopl(0x3) msgsnd(0x0, 0x0, 0x2000, 0x800) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100004114f540f30c75939e1a000000010902240011000000000904000002befff9000905030000000000000905f4f636"], 0x0) mlockall(0x4) syz_usb_connect$cdc_ncm(0x2, 0x98, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xf3, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xffff8001, 0x100, 0x7, 0x2}, {0x6, 0x24, 0x1a, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x7fff}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x8, 0x27}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 2.515070634s ago: executing program 1 (id=2912): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x850) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300), &(0x7f0000000200)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x46, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b18) 2.340552942s ago: executing program 1 (id=2916): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r2, 0x0) 2.154692019s ago: executing program 1 (id=2919): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r1, 0x93) 1.685580922s ago: executing program 4 (id=2925): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000001d40)=[{&(0x7f00000011c0)="bc", 0x1}], 0x1}}], 0x1, 0x40080) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1.596875233s ago: executing program 5 (id=2927): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x7}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x20}}, {{&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/40, 0x28}], 0x1, &(0x7f0000000680)=""/131, 0x83}, 0x80000000}], 0x2, 0x40000000, 0x0) 1.530703808s ago: executing program 4 (id=2929): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.470212459s ago: executing program 5 (id=2930): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x8e, 0xcf, 0xc3, 0x40, 0x5ac, 0x120a, 0x13df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0xa4, 0x4, 0x0, 0x75, 0x3b, 0xcc, 0x5}}]}}]}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) 1.421251846s ago: executing program 2 (id=2931): socket$inet_smc(0x2b, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x208400, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x40050) 1.421013807s ago: executing program 4 (id=2932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.318188986s ago: executing program 2 (id=2933): landlock_create_ruleset(&(0x7f0000000100)={0x200, 0x1}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 1.251073078s ago: executing program 4 (id=2934): r0 = syz_io_uring_setup(0x7f54, &(0x7f0000000100)={0x0, 0x0, 0x3e00, 0x0, 0x3b}, &(0x7f0000000000), &(0x7f00000000c0)) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 1.183603263s ago: executing program 3 (id=2935): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd, 0xfffffffc}) r0 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.183096228s ago: executing program 1 (id=2936): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.168340256s ago: executing program 2 (id=2937): syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 969.749108ms ago: executing program 3 (id=2938): r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) write(r0, &(0x7f0000000340)="badcb39e3e6ab27fa01a3fd16f8eeceb", 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000001000/0x4000)=nil) 946.757931ms ago: executing program 2 (id=2939): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) 857.298943ms ago: executing program 3 (id=2940): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x4, 0x4) recvmmsg(r0, &(0x7f0000020f00)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000122, 0x0) 733.199169ms ago: executing program 5 (id=2941): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) chdir(&(0x7f0000000240)='./file0\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 689.302559ms ago: executing program 2 (id=2942): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x0) 663.689298ms ago: executing program 3 (id=2943): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x3, 0x614, 0x1, 0x5, 0x7, 0x9}, 0x9c) 643.444721ms ago: executing program 5 (id=2944): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r0, &(0x7f0000001480)=""/4096, 0x1000) 521.782561ms ago: executing program 2 (id=2945): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd2d}, 0x700}], 0xf000, 0x10002, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) 393.11333ms ago: executing program 5 (id=2946): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 289.639565ms ago: executing program 3 (id=2947): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="58d8", 0x2}], 0x1}, 0x20008040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040041}, 0x80) 249.462299ms ago: executing program 5 (id=2948): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x50, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) 208.858632ms ago: executing program 4 (id=2949): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x22) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f00000000c0)=0x272) 159.913684ms ago: executing program 1 (id=2950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x0, 0x0, @val=@tracing={0x0, 0x2}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x41, &(0x7f0000000100)}, 0x10) 89.926142ms ago: executing program 3 (id=2951): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {r1, r2+60000000}}, 0x0) 0s ago: executing program 1 (id=2952): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000200)={0xec9, 0x23}) kernel console output (not intermixed with test programs): 167808][ T29] audit: type=1326 audit(1734448460.534:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9264 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf7b85d29 code=0x7ffc0000 [ 194.191709][ T29] audit: type=1326 audit(1734448460.534:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9264 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1cf7b85d29 code=0x7ffc0000 [ 194.200543][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.273253][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.563343][ T5912] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 194.572489][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.580694][ T5912] usb 4-1: SerialNumber: syz [ 194.795782][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.015746][ T5912] usb 4-1: 0:2 : does not exist [ 195.032203][ T5912] usb 4-1: USB disconnect, device number 13 [ 195.189202][ T9320] sp0: Synchronizing with TNC [ 195.457019][ T9325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1502'. [ 196.565934][ T9366] syz.2.1520 (9366) used greatest stack depth: 17424 bytes left [ 197.203054][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 197.230068][ T9402] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 197.426772][ T9412] ip6_vti0: entered promiscuous mode [ 197.438495][ T9412] ip6_vti0: left promiscuous mode [ 197.504223][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 197.805768][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 197.815015][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.843746][ T25] usb 3-1: config 0 descriptor?? [ 198.130434][ T25] ath6kl: Failed to submit usb control message: -71 [ 198.151981][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 198.179814][ T25] ath6kl: Unable to send get target info: -71 [ 198.222157][ T25] ath6kl: Failed to init ath6kl core: -71 [ 198.228733][ T25] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 198.275108][ T25] usb 3-1: USB disconnect, device number 16 [ 198.648705][ T9451] bridge0: port 3(syz_tun) entered blocking state [ 198.662949][ T9451] bridge0: port 3(syz_tun) entered disabled state [ 198.680882][ T9451] syz_tun: entered allmulticast mode [ 198.693343][ T9451] syz_tun: entered promiscuous mode [ 198.699565][ T9451] bridge0: port 3(syz_tun) entered blocking state [ 198.706624][ T9451] bridge0: port 3(syz_tun) entered forwarding state [ 199.043213][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 199.153379][ T5912] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 199.185329][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'. [ 199.212889][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 199.224812][ T25] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 199.233765][ T25] usb 5-1: config 0 has no interface number 0 [ 199.250190][ T25] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.276761][ T25] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.288424][ T25] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 199.303199][ T25] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 199.333072][ T25] usb 5-1: Product: syz [ 199.337322][ T25] usb 5-1: SerialNumber: syz [ 199.364259][ T25] usb 5-1: config 0 descriptor?? [ 199.365612][ T5912] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 199.386413][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.387243][ T25] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 199.400615][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.415994][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input25 [ 199.421189][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.447672][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.463369][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.479399][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.499304][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.511085][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.532901][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.548562][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.569369][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.598524][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.613358][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.622324][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.652995][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.660953][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.670065][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.709914][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.711024][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.753116][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.753155][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.754441][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.754487][ T5912] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.754520][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.757186][ T5912] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 199.757222][ T5912] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 199.757249][ T5912] usb 3-1: Product: syz [ 199.757268][ T5912] usb 3-1: Manufacturer: syz [ 199.757295][ T5912] usb 3-1: SerialNumber: syz [ 199.759385][ T5912] usb 3-1: config 0 descriptor?? [ 199.763873][ T5912] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 199.882357][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.889672][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.897006][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.904190][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.911496][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.919089][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.926599][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.933989][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.941238][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.948726][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.956933][ T62] usb 5-1: USB disconnect, device number 16 [ 199.962957][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 199.999161][ T62] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 200.119949][ T25] usb 3-1: USB disconnect, device number 17 [ 200.144017][ T25] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 200.564457][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 200.690175][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1584'. [ 200.722971][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 200.892997][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 200.900308][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.911637][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.913894][ T5870] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 200.922570][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.958774][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.983893][ T25] usb 4-1: config 0 descriptor?? [ 200.994721][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 201.004855][ T25] hub 4-1:0.0: USB hub found [ 201.083264][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 201.113527][ T5870] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.129556][ T5870] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.151066][ T5870] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.172361][ T5870] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.219394][ T25] hub 4-1:0.0: 1 port detected [ 201.220654][ T5870] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.233963][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.253285][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 201.264174][ T9536] bond0: option min_links: invalid value (18446744072400961536) [ 201.271901][ T9536] bond0: option min_links: allowed values 0 - 2147483647 [ 201.470104][ T5870] usb 1-1: GET_CAPABILITIES returned 0 [ 201.475852][ T5870] usbtmc 1-1:16.0: can't read capabilities [ 201.603202][ T5877] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 201.627955][ T25] usb 4-1: USB disconnect, device number 14 [ 201.689079][ T62] usb 1-1: USB disconnect, device number 20 [ 201.707873][ T9547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.762897][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 201.772302][ T5877] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 201.782205][ T5877] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 201.792751][ T5877] usb 3-1: config 0 has no interface number 0 [ 201.803209][ T5877] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.820657][ T5877] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.832466][ T5877] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 201.856365][ T5877] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 201.866786][ T5877] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 201.878905][ T5877] usb 3-1: Product: syz [ 201.883242][ T5877] usb 3-1: Manufacturer: syz [ 201.900633][ T5877] usb 3-1: config 0 descriptor?? [ 201.965907][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 201.974153][ T5132] Bluetooth: hci3: command 0x0406 tx timeout [ 202.320699][ T9562] IPv6: NLM_F_REPLACE set, but no existing node found! [ 202.521316][ T5877] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input26 [ 202.550470][ T5877] input: failed to attach handler kbd to device input26, error: -5 [ 202.738166][ T5877] usb 3-1: USB disconnect, device number 18 [ 202.982019][ T9580] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.144670][ T9580] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.233120][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.235678][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 203.305630][ T9580] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.453034][ T5870] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 203.454663][ T9580] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.613179][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 203.631444][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.654475][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.685286][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.697957][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 203.711341][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.766636][ T9580] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.803017][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.822617][ T5870] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.846262][ T5870] usb 4-1: Manufacturer: syz [ 203.852121][ T9580] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.861569][ T5870] usb 4-1: config 0 descriptor?? [ 203.867496][ T9580] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.882308][ T9580] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.302905][ T5870] rc_core: IR keymap rc-hauppauge not found [ 204.310107][ T5870] Registered IR keymap rc-empty [ 204.316024][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.354517][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.390396][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 204.419021][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 204.458018][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.481656][ T9614] tipc: Started in network mode [ 204.487086][ T9614] tipc: Node identity aee, cluster identity 1024 [ 204.493669][ T9614] tipc: Node number set to 2798 [ 204.540622][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.595002][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.623062][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.663180][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.687130][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.712969][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.755730][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.793347][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.813548][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.844121][ T5870] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 0 [ 204.870530][ T5870] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 204.882328][ T5870] usb 4-1: USB disconnect, device number 15 [ 204.993017][ T5877] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 205.214662][ T5877] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 205.224006][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.234964][ T5877] usb 3-1: config 0 descriptor?? [ 205.433036][ T57] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 205.535510][ T9656] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input28 [ 205.606734][ T57] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 205.621349][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.629747][ T57] usb 2-1: Product: syz [ 205.633108][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 205.634029][ T57] usb 2-1: Manufacturer: syz [ 205.646382][ T57] usb 2-1: SerialNumber: syz [ 205.654151][ T57] usb 2-1: config 0 descriptor?? [ 205.677377][ T5877] playstation 0003:054C:0DF2.0013: ignoring exceeding usage max [ 205.693875][ T5877] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 205.845701][ T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.855412][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.873746][ T25] usb 5-1: config 0 descriptor?? [ 205.879849][ T5877] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 9: -71 [ 205.897161][ T5877] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense pairing info: -71 [ 205.910352][ T25] cp210x 5-1:0.0: cp210x converter detected [ 205.933258][ T5877] playstation 0003:054C:0DF2.0013: Failed to get MAC address from DualSense [ 205.942303][ T5877] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 205.964966][ T5877] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -71 [ 205.993316][ T5877] usb 3-1: USB disconnect, device number 19 [ 206.309687][ T57] mos7840 2-1:0.0: required endpoints missing [ 206.318037][ T25] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 206.320165][ T57] usb 2-1: USB disconnect, device number 15 [ 206.339524][ T25] usb 5-1: cp210x converter now attached to ttyUSB0 [ 206.537248][ T25] usb 5-1: USB disconnect, device number 17 [ 206.549598][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.570580][ T25] cp210x 5-1:0.0: device disconnected [ 206.693202][ T62] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 206.820278][ T9692] input: syz0 as /devices/virtual/input/input29 [ 206.873072][ T62] usb 1-1: Using ep0 maxpacket: 32 [ 206.887819][ T62] usb 1-1: config 0 has an invalid interface number: 252 but max is 0 [ 206.909428][ T62] usb 1-1: config 0 has no interface number 0 [ 206.921401][ T62] usb 1-1: config 0 interface 252 has no altsetting 0 [ 206.930677][ T62] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8 [ 206.940702][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.952861][ T62] usb 1-1: Product: syz [ 206.959003][ T62] usb 1-1: Manufacturer: syz [ 206.968167][ T62] usb 1-1: SerialNumber: syz [ 206.975323][ T62] usb 1-1: config 0 descriptor?? [ 206.985246][ T62] pcwd_usb: The device isn't a Human Interface Device [ 207.243351][ T57] usb 1-1: USB disconnect, device number 21 [ 207.654675][ T9722] vlan0: entered promiscuous mode [ 207.667843][ T9722] bond0: entered promiscuous mode [ 207.687239][ T9722] bond_slave_0: entered promiscuous mode [ 207.701819][ T9722] bond_slave_1: entered promiscuous mode [ 207.720421][ T9722] bond0: left promiscuous mode [ 207.728497][ T9722] bond_slave_0: left promiscuous mode [ 207.738862][ T9722] bond_slave_1: left promiscuous mode [ 207.827979][ T9726] pim6reg1: entered promiscuous mode [ 207.847093][ T9726] pim6reg1: entered allmulticast mode [ 208.131728][ T53] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 208.141926][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 208.152662][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 208.162777][ T53] Workqueue: hci0 hci_rx_work [ 208.167542][ T53] Call Trace: [ 208.170872][ T53] [ 208.174287][ T53] dump_stack_lvl+0x241/0x360 [ 208.179039][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.184303][ T53] ? __pfx__printk+0x10/0x10 [ 208.188956][ T53] ? __kmalloc_cache_noprof+0x243/0x390 [ 208.194556][ T53] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 208.199876][ T53] sysfs_create_dir_ns+0x2ce/0x3a0 [ 208.205012][ T53] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 208.210671][ T53] kobject_add_internal+0x435/0x8d0 [ 208.215903][ T53] kobject_add+0x152/0x220 [ 208.220363][ T53] ? do_raw_spin_unlock+0x13c/0x8b0 [ 208.225595][ T53] ? device_add+0x3e7/0xbf0 [ 208.230112][ T53] ? __pfx_kobject_add+0x10/0x10 [ 208.235074][ T53] ? _raw_spin_unlock+0x28/0x50 [ 208.239944][ T53] ? get_device_parent+0x165/0x410 [ 208.245072][ T53] device_add+0x4e5/0xbf0 [ 208.249421][ T53] hci_conn_add_sysfs+0xe8/0x200 [ 208.254382][ T53] le_conn_complete_evt+0xc9f/0x12e0 [ 208.259691][ T53] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 208.265426][ T53] ? __mutex_unlock_slowpath+0x21e/0x790 [ 208.271082][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 208.276223][ T53] ? skb_pull_data+0x112/0x230 [ 208.281020][ T53] hci_le_conn_complete_evt+0x18c/0x420 [ 208.286591][ T53] hci_event_packet+0xa55/0x1540 [ 208.291563][ T53] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 208.296874][ T53] ? __pfx_hci_event_packet+0x10/0x10 [ 208.302270][ T53] ? do_raw_spin_unlock+0x13c/0x8b0 [ 208.307504][ T53] ? hci_send_to_monitor+0xd8/0x7f0 [ 208.312726][ T53] ? kcov_remote_start+0x97/0x7d0 [ 208.317774][ T53] hci_rx_work+0x3f3/0xdb0 [ 208.322232][ T53] ? process_scheduled_works+0x976/0x1840 [ 208.327985][ T53] process_scheduled_works+0xa66/0x1840 [ 208.333582][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 208.339598][ T53] ? assign_work+0x364/0x3d0 [ 208.344217][ T53] worker_thread+0x870/0xd30 [ 208.348836][ T53] ? __kthread_parkme+0x169/0x1d0 [ 208.353882][ T53] ? __pfx_worker_thread+0x10/0x10 [ 208.359006][ T53] kthread+0x2f0/0x390 [ 208.363092][ T53] ? __pfx_worker_thread+0x10/0x10 [ 208.368239][ T53] ? __pfx_kthread+0x10/0x10 [ 208.372849][ T53] ret_from_fork+0x4b/0x80 [ 208.377276][ T53] ? __pfx_kthread+0x10/0x10 [ 208.381880][ T53] ret_from_fork_asm+0x1a/0x30 [ 208.386695][ T53] [ 208.389806][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.397554][ T53] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 208.411712][ T53] Bluetooth: hci0: failed to register connection device [ 209.024419][ T9762] syzkaller1: entered promiscuous mode [ 209.044512][ T9762] syzkaller1: entered allmulticast mode [ 209.312974][ T5877] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 209.493446][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 209.506728][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.541112][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.562736][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 209.572049][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.621837][ T5877] usb 1-1: config 0 descriptor?? [ 210.083472][ T5877] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 210.213006][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 210.250185][ T9808] netlink: 'syz.4.1709': attribute type 10 has an invalid length. [ 210.267357][ T9808] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1709'. [ 210.344128][ T5912] usb 1-1: USB disconnect, device number 22 [ 210.377082][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.389955][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 210.410867][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.432896][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.460794][ T9796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.488558][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.753469][ T57] usb 3-1: USB disconnect, device number 20 [ 211.584878][ T9823] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 211.601976][ T9823] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 211.612192][ T9854] binder: 9853:9854 ioctl c0306201 20000480 returned -14 [ 211.753878][ T9856] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1730'. [ 211.771496][ T9859] vivid-000: disconnect [ 211.777839][ T9856] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1730'. [ 211.789410][ T9857] vivid-000: reconnect [ 211.803196][ T5877] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 212.004743][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.013577][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 212.028697][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.069080][ T5877] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 212.098700][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.122601][ T5877] usb 2-1: config 0 descriptor?? [ 212.493029][ T62] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 212.546654][ T5877] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 212.564306][ T5877] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 212.584356][ T5877] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 212.591658][ T5877] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 212.611443][ T5877] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 212.635728][ T5877] cm6533_jd 0003:0D8C:0022.0015: No inputs registered, leaving [ 212.647056][ T5877] cm6533_jd 0003:0D8C:0022.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 212.675874][ T62] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.685721][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.705308][ T62] usb 3-1: config 0 descriptor?? [ 212.729178][ T62] cp210x 3-1:0.0: cp210x converter detected [ 212.742600][ T9891] tmpfs: Unknown parameter 'usrquota·' [ 212.868371][ T5877] usb 2-1: USB disconnect, device number 16 [ 212.889402][ T9893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.182969][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 213.203953][ T62] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 213.342904][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 213.359607][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.389383][ T8] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 213.400230][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.415937][ T8] usb 5-1: Product: syz [ 213.420189][ T8] usb 5-1: Manufacturer: syz [ 213.429141][ T62] usb 3-1: cp210x converter now attached to ttyUSB0 [ 213.429532][ T8] usb 5-1: SerialNumber: syz [ 213.449795][ T8] usb 5-1: config 0 descriptor?? [ 213.458667][ T8] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 213.645075][ T57] usb 3-1: USB disconnect, device number 21 [ 213.668844][ T57] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.694252][ T57] cp210x 3-1:0.0: device disconnected [ 213.819702][ T9910] cgroup: fork rejected by pids controller in /syz3 [ 214.102434][ T8806] bridge0: port 3(syz_tun) entered disabled state [ 214.135116][ T8806] syz_tun (unregistering): left allmulticast mode [ 214.141888][ T8806] syz_tun (unregistering): left promiscuous mode [ 214.156978][ T8806] bridge0: port 3(syz_tun) entered disabled state [ 214.383611][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.472523][ T8] gspca_sunplus: reg_w_riv err -71 [ 214.493883][ T8] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 214.529052][ T8] usb 5-1: USB disconnect, device number 18 [ 214.556611][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.593105][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 214.730002][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.896423][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.964388][ T5877] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 214.984302][ T9935] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 214.997344][ T9935] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 215.008861][ T9935] overlayfs: failed to get uuid (98/file1, err=-13); falling back to uuid=null. [ 215.010676][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.029298][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.039842][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.056001][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.065258][ T5819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.075517][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.124940][ T5877] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 215.142924][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.161827][ T5877] usb 2-1: config 0 descriptor?? [ 215.170020][ T5877] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 215.241974][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1768'. [ 215.291500][ T9943] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1767'. [ 215.307731][ T9943] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1767'. [ 215.318875][ T9940] all: renamed from gre0 (while UP) [ 215.382722][ T5877] gp8psk: usb in 128 operation failed. [ 215.590628][ T5877] gp8psk: FW Version = 144.22.38 (0x901626) Build 2022/167/212 [ 215.761476][ T1102] bridge_slave_1: left allmulticast mode [ 215.792059][ T1102] bridge_slave_1: left promiscuous mode [ 215.809445][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.853968][ T1102] bridge_slave_0: left allmulticast mode [ 215.870405][ T1102] bridge_slave_0: left promiscuous mode [ 215.878793][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.583025][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 216.618197][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.630003][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.641984][ T1102] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 216.658570][ T1102] bond0 (unregistering): Released all slaves [ 216.678266][ T5877] gp8psk: usb in 149 operation failed. [ 216.692864][ T5877] gp8psk: failed to get FPGA version [ 216.694320][ T9936] chnl_net:caif_netlink_parms(): no params data found [ 216.699790][ T5877] gp8psk: usb in 138 operation failed. [ 216.720567][ T5877] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 216.743134][ T5877] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 216.743208][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 216.764871][ T5877] usb 2-1: USB disconnect, device number 17 [ 216.808276][ T1102] tipc: Left network mode [ 216.823690][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.843472][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.882896][ T8] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 216.897890][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.905013][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 216.914767][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.936282][ T8] usb 5-1: config 0 descriptor?? [ 217.132765][ T9936] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.140226][ T9936] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.149313][ T9936] bridge_slave_0: entered allmulticast mode [ 217.156776][ T5819] Bluetooth: hci3: command tx timeout [ 217.165456][ T9936] bridge_slave_0: entered promiscuous mode [ 217.175095][ T9936] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.182339][ T9936] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.192438][ T9936] bridge_slave_1: entered allmulticast mode [ 217.200095][ T9936] bridge_slave_1: entered promiscuous mode [ 217.345606][ T9936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.395491][ T9936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.411077][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0016/input/input30 [ 217.521151][ T8] kye 0003:0458:5010.0016: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 217.551256][ T9936] team0: Port device team_slave_0 added [ 217.621509][ T1102] hsr_slave_0: left promiscuous mode [ 217.644383][ T1102] hsr_slave_1: left promiscuous mode [ 217.652996][ T62] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 217.675254][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.687553][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.708664][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.719567][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.788161][ T1102] veth1_to_team: left promiscuous mode [ 217.803284][ T1102] veth1_macvtap: left promiscuous mode [ 217.819881][ T1102] veth0_macvtap: left promiscuous mode [ 217.840496][ T1102] veth1_vlan: left promiscuous mode [ 217.848955][ T62] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 217.861174][ T1102] veth0_vlan: left promiscuous mode [ 217.872993][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.881374][ T62] usb 1-1: Product: syz [ 217.889887][ T62] usb 1-1: Manufacturer: syz [ 217.903218][ T62] usb 1-1: SerialNumber: syz [ 217.929461][ T62] usb 1-1: config 0 descriptor?? [ 218.063094][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 218.126857][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 218.126879][ T29] audit: type=1400 audit(1734448485.144:157): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=10005 comm="syz.1.1795" name="355" dev="tmpfs" ino=1814 [ 218.189918][ T5870] usb 1-1: USB disconnect, device number 23 [ 218.215969][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.248110][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.264420][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.274281][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.293845][ T8] usb 3-1: config 0 descriptor?? [ 218.552839][ C0] kye 0003:0458:5010.0016: usb_submit_urb(ctrl) failed: -1 [ 218.571131][ T5912] usb 5-1: USB disconnect, device number 19 [ 218.725165][ T8] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 218.739430][ T8] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 218.750149][ T8] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 218.854048][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 218.904194][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 218.982972][ T62] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 219.058810][ T5877] usb 3-1: USB disconnect, device number 22 [ 219.163003][ T62] usb 2-1: Using ep0 maxpacket: 32 [ 219.181056][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.207673][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.217857][ T62] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 219.237735][ T5819] Bluetooth: hci3: command tx timeout [ 219.240364][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.266814][ T62] usb 2-1: config 0 descriptor?? [ 219.559858][ T9936] team0: Port device team_slave_1 added [ 219.576938][T10020] batadv_slave_1: entered promiscuous mode [ 219.643908][T10019] batadv_slave_1: left promiscuous mode [ 219.653764][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.660770][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.705209][ T62] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 219.735249][ T9936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.760205][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.772149][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.840486][ T9936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.986719][ T9936] hsr_slave_0: entered promiscuous mode [ 219.999546][ T5877] usb 2-1: USB disconnect, device number 18 [ 220.024086][ T9936] hsr_slave_1: entered promiscuous mode [ 220.079885][ T9936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.088093][ T9936] Cannot create hsr debugfs directory [ 220.450751][ T1102] IPVS: stop unused estimator thread 0... [ 221.037789][ T9936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.066203][ T9936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.113410][ T9936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.119450][T10067] netlink: 'syz.2.1820': attribute type 10 has an invalid length. [ 221.166998][ T9936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.210977][T10067] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 221.315103][ T5819] Bluetooth: hci3: command tx timeout [ 221.390263][ T9936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.466170][ T9936] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.504223][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.511424][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.554027][ T8] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 221.573698][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.580909][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.663558][ T9936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.735264][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.756020][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.795055][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.822915][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.851471][ T8] usb 1-1: Product: syz [ 221.861630][ T8] usb 1-1: Manufacturer: syz [ 221.871896][ T8] usb 1-1: SerialNumber: syz [ 222.027394][ T9936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.100435][ T8] usb 1-1: 0:2 : does not exist [ 222.112004][ T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 222.175549][ T9936] veth0_vlan: entered promiscuous mode [ 222.196533][ T9936] veth1_vlan: entered promiscuous mode [ 222.221877][ T8] usb 1-1: USB disconnect, device number 24 [ 222.271899][ T9936] veth0_macvtap: entered promiscuous mode [ 222.300129][ T9936] veth1_macvtap: entered promiscuous mode [ 222.345243][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.369883][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.383632][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.394529][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.405890][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.416604][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.431431][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.447972][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.459708][ T9936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.485374][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.501221][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.512259][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.523129][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.533063][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.576209][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.598732][ T9936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.633606][ T9936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.642568][ T9936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.662892][ T9936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.671668][ T9936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.681460][T10113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.842468][ T8] IPVS: starting estimator thread 0... [ 222.873958][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.894162][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.943104][T10122] IPVS: using max 21 ests per chain, 50400 per kthread [ 222.971804][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.992677][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.393483][ T5819] Bluetooth: hci3: command tx timeout [ 223.672989][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 223.784726][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 223.808485][ T29] audit: type=1326 audit(1734448490.824:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.4.1859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f201c385d29 code=0x0 [ 223.892057][T10167] netlink: 'syz.2.1861': attribute type 10 has an invalid length. [ 223.915202][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.926732][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.939295][ T5870] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 223.948849][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.960674][ T5870] usb 4-1: config 0 descriptor?? [ 223.978798][T10167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.008154][T10167] team0: Port device bond0 added [ 224.033813][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 224.050479][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.071997][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.112719][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 224.135489][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.151359][ T8] usb 2-1: config 0 descriptor?? [ 224.378325][ T5870] dragonrise 0003:0079:0011.0019: unknown global tag 0xd [ 224.386824][ T5870] dragonrise 0003:0079:0011.0019: item 0 2 1 13 parsing failed [ 224.404926][ T5870] dragonrise 0003:0079:0011.0019: parse failed [ 224.417705][ T5870] dragonrise 0003:0079:0011.0019: probe with driver dragonrise failed with error -22 [ 224.569927][ T8] savu 0003:1E7D:2D5A.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 224.592499][ T8] usb 4-1: USB disconnect, device number 16 [ 224.803019][ T62] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 224.834994][ T5901] usb 2-1: USB disconnect, device number 19 [ 224.972944][ T62] usb 1-1: Using ep0 maxpacket: 8 [ 224.982372][ T62] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 224.996239][ T62] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 225.017995][ T62] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.045689][ T62] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.055194][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.067297][ T62] usb 1-1: Product: syz [ 225.071536][ T62] usb 1-1: Manufacturer: syz [ 225.081146][ T62] usb 1-1: SerialNumber: syz [ 225.314777][ T62] usb 1-1: 0:2 : does not exist [ 225.375639][ T62] usb 1-1: USB disconnect, device number 25 [ 225.575566][T10202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.793753][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 226.946022][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.958862][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 226.972951][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.985648][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.013028][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.036203][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 227.045431][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.082956][ T25] usb 5-1: config 0 descriptor?? [ 227.095716][T10218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.100936][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.235793][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.404704][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.425730][T10242] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 227.670261][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.678870][ T25] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 227.690237][ T25] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 227.703999][ T25] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 227.723729][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.734660][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.744004][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.758914][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.766921][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.775133][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.884762][ T62] usb 5-1: USB disconnect, device number 20 [ 228.197176][ T51] bridge_slave_1: left allmulticast mode [ 228.211683][ T51] bridge_slave_1: left promiscuous mode [ 228.243867][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.284775][ T25] kernel write not supported for file [eventfd] (pid: 25 comm: kworker/1:0) [ 228.343666][ T51] bridge_slave_0: left allmulticast mode [ 228.354919][ T51] bridge_slave_0: left promiscuous mode [ 228.370481][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.134898][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 229.294901][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.315845][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.331994][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.343762][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.348615][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.361081][ T8] usb 4-1: SerialNumber: syz [ 229.370904][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.407520][ T51] bond0 (unregistering): Released all slaves [ 229.592306][ T8] usb 4-1: 0:2 : does not exist [ 229.664337][T10246] chnl_net:caif_netlink_parms(): no params data found [ 229.873178][ T5819] Bluetooth: hci1: command tx timeout [ 229.959624][ T51] hsr_slave_0: left promiscuous mode [ 229.971340][ T51] hsr_slave_1: left promiscuous mode [ 229.989774][ T5870] usb 4-1: USB disconnect, device number 17 [ 230.018301][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.026716][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.035579][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.051074][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.062929][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 230.105812][ T51] veth1_macvtap: left promiscuous mode [ 230.119648][ T51] veth0_macvtap: left promiscuous mode [ 230.140928][ T51] veth1_vlan: left promiscuous mode [ 230.146543][ T51] veth0_vlan: left promiscuous mode [ 230.216458][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 230.244748][ T8] usb 5-1: config 0 has no interfaces? [ 230.251499][ T8] usb 5-1: config 0 has no interfaces? [ 230.274372][ T8] usb 5-1: config 0 has no interfaces? [ 230.292622][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.311247][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.336055][ T8] usb 5-1: Product: syz [ 230.340356][ T8] usb 5-1: Manufacturer: syz [ 230.345348][ T8] usb 5-1: SerialNumber: syz [ 230.352235][ T8] usb 5-1: config 0 descriptor?? [ 230.630334][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.670657][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.698359][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.738168][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.862918][ T25] usb 5-1: USB disconnect, device number 21 [ 231.662916][ T25] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 231.854847][ T25] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 231.864111][ T25] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 231.872533][ T25] usb 5-1: config 0 has no interface number 1 [ 231.902924][ T25] usb 5-1: config 0 has no interface number 2 [ 231.903425][ T51] team0 (unregistering): Port device team_slave_1 removed [ 231.909132][ T25] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=29.ac [ 231.909165][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.943797][ T25] usb 5-1: config 0 descriptor?? [ 231.963775][ T5819] Bluetooth: hci1: command tx timeout [ 231.971195][ T25] imon 5-1:0.6: inconsistent driver matching [ 231.977957][ T25] imon 5-1:0.6: unable to register, err -22 [ 231.984875][ T25] imon 5-1:0.6: probe with driver imon failed with error -22 [ 231.995885][ T25] imon 5-1:0.176: inconsistent driver matching [ 232.002194][ T25] imon 5-1:0.176: unable to register, err -22 [ 232.009201][ T25] imon 5-1:0.176: probe with driver imon failed with error -22 [ 232.020738][ T25] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 232.030800][ T25] imon 5-1:0.0: unable to initialize intf0, err -19 [ 232.037975][ T25] imon:imon_probe: failed to initialize context! [ 232.044979][ T25] imon 5-1:0.0: unable to register, err -19 [ 232.081721][ T51] team0 (unregistering): Port device team_slave_0 removed [ 232.213970][ T25] usb 5-1: USB disconnect, device number 22 [ 232.894807][T10246] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.903828][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.911082][T10246] bridge_slave_0: entered allmulticast mode [ 232.918311][T10246] bridge_slave_0: entered promiscuous mode [ 232.926502][T10246] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.933744][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.940974][T10246] bridge_slave_1: entered allmulticast mode [ 232.947942][T10246] bridge_slave_1: entered promiscuous mode [ 233.076875][T10246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.125563][T10246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.338244][T10246] team0: Port device team_slave_0 added [ 233.382017][T10344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1938'. [ 233.410899][T10342] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.418500][T10342] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.494489][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.502024][T10342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.511933][T10342] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.519178][T10342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.571454][T10342] team0: Port device bridge0 added [ 233.604702][T10246] team0: Port device team_slave_1 added [ 233.785262][T10246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.792281][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.840427][T10246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.865070][ T51] IPVS: stop unused estimator thread 0... [ 233.875730][T10246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.882738][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.958888][T10246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.033496][ T5819] Bluetooth: hci1: command tx timeout [ 234.194657][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1943'. [ 234.271302][T10246] hsr_slave_0: entered promiscuous mode [ 234.293333][T10246] hsr_slave_1: entered promiscuous mode [ 234.314061][T10246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.326673][T10246] Cannot create hsr debugfs directory [ 234.698301][T10246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.709558][T10246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.726267][T10246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.746814][T10246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.898985][T10246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.970960][T10246] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.020314][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.027555][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.053610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.060783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.518683][T10246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.572910][ T5900] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 235.749011][ T5900] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.775903][ T5900] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.816760][ T5900] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.832544][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.855538][T10370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 235.857519][T10246] veth0_vlan: entered promiscuous mode [ 235.870711][ T5900] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.875355][T10246] veth1_vlan: entered promiscuous mode [ 235.915627][T10246] veth0_macvtap: entered promiscuous mode [ 235.925166][T10246] veth1_macvtap: entered promiscuous mode [ 235.977915][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.008389][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.024919][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.043983][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.054398][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.065315][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.076947][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.087818][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.112133][T10246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.123216][ T53] Bluetooth: hci1: command tx timeout [ 236.138032][ T5900] usb 5-1: USB disconnect, device number 23 [ 236.151611][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.174210][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.191444][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.202590][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.213183][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.224137][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.236619][T10246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.257785][T10246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.267376][T10246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.290768][T10246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.302556][T10246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.394755][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.422960][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.475868][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.500026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.508946][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 237.235349][T10442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1971'. [ 237.254197][T10442] erspan0: entered promiscuous mode [ 237.333770][T10442] erspan0: left promiscuous mode [ 237.713115][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 238.513898][T10469] Bluetooth: MGMT ver 1.23 [ 238.879386][T10487] Bluetooth: MGMT ver 1.23 [ 239.066570][T10494] netlink: 'syz.1.1992': attribute type 2 has an invalid length. [ 239.093254][T10492] syzkaller1: entered promiscuous mode [ 239.106217][T10492] syzkaller1: entered allmulticast mode [ 239.689759][T10519] sctp: [Deprecated]: syz.2.2002 (pid 10519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.689759][T10519] Use struct sctp_sack_info instead [ 239.713416][ T5900] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 239.874875][ T5900] usb 6-1: config index 0 descriptor too short (expected 4114, got 18) [ 239.918770][ T5900] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 239.933050][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.962208][ T5900] usb 6-1: Product: syz [ 239.966634][ T5900] usb 6-1: Manufacturer: syz [ 239.971281][ T5900] usb 6-1: SerialNumber: syz [ 239.983944][ T5900] usb 6-1: config 0 descriptor?? [ 240.614579][ T5900] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 240.826983][ T5900] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 240.857425][ T5900] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 240.884265][ T5900] asix 6-1:0.0: probe with driver asix failed with error -71 [ 240.926399][ T5900] usb 6-1: USB disconnect, device number 2 [ 241.166182][ T29] audit: type=1400 audit(1734448508.184:159): lsm=SMACK fn=smk_curacc_shm action=denied subject="w" object="_" requested=rw pid=10555 comm="syz.2.2021" ipc_key=0 [ 241.973814][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2030'. [ 242.420789][T10483] syz.4.1991 (10483): drop_caches: 1 [ 242.446945][T10594] vlan2: entered promiscuous mode [ 242.452063][T10594] vlan2: entered allmulticast mode [ 242.458518][T10594] vlan0: entered allmulticast mode [ 242.464251][T10594] veth0_vlan: entered allmulticast mode [ 242.470056][T10594] vlan0: entered promiscuous mode [ 242.484729][T10594] team0: Port device vlan2 added [ 243.154964][T10616] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 243.154964][T10616] The task syz.1.2047 (10616) triggered the difference, watch for misbehavior. [ 243.893094][T10637] input: syz1 as /devices/virtual/input/input33 [ 244.308149][T10651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.864054][ T5819] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 245.200712][ T5900] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 245.279483][T10679] vlan3: entered promiscuous mode [ 245.291632][T10679] ip6gretap0: entered promiscuous mode [ 245.299610][T10679] vlan3: entered allmulticast mode [ 245.311366][T10679] ip6gretap0: entered allmulticast mode [ 245.331964][T10679] ip6gretap0: left allmulticast mode [ 245.338702][T10679] ip6gretap0: left promiscuous mode [ 245.367062][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 245.373992][ T5900] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 245.382331][ T5900] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 245.400323][ T5900] usb 5-1: config 0 has no interface number 0 [ 245.420029][ T5900] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.453516][ T5900] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.482926][ T5900] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.504093][ T5900] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 245.517034][T10684] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2074'. [ 245.526128][ T5900] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 245.526162][ T5900] usb 5-1: Product: syz [ 245.526182][ T5900] usb 5-1: Manufacturer: syz [ 245.544922][ T5900] usb 5-1: config 0 descriptor?? [ 245.615752][T10688] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.952337][T10701] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 246.169734][ T5900] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input34 [ 246.238242][ T5900] input: failed to attach handler kbd to device input34, error: -5 [ 246.412128][ T25] usb 5-1: USB disconnect, device number 24 [ 246.903831][T10710] sctp: [Deprecated]: syz.3.2086 (pid 10710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.903831][T10710] Use struct sctp_sack_info instead [ 247.377750][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 247.808450][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028f82000: rx timeout, send abort [ 247.819002][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028f83000: rx timeout, send abort [ 247.827558][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888028f82000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 247.842333][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888028f83000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 248.043075][ T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 248.088654][T10751] ptrace attach of "./syz-executor exec"[10754] was attempted by "./syz-executor exec"[10751] [ 248.212933][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 248.224212][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.236386][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 248.248066][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 248.259513][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 248.270822][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.317428][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 248.326834][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.334944][ T25] usb 2-1: Product: syz [ 248.339144][ T25] usb 2-1: Manufacturer: syz [ 248.343918][ T25] usb 2-1: SerialNumber: syz [ 248.356831][ T25] usb 2-1: config 0 descriptor?? [ 248.618134][ T25] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 248.619340][T10764] overlayfs: workdir and upperdir must reside under the same mount [ 248.629159][ T25] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 248.656798][ T25] usb 2-1: USB disconnect, device number 20 [ 249.323124][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 249.493694][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.512240][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 249.530593][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.530645][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.530694][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.530723][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.534055][ T25] usb 6-1: config 0 descriptor?? [ 249.534955][T10781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 250.005041][ T25] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 250.005083][ T25] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 250.005115][ T25] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 250.005146][ T25] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 250.005177][ T25] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 250.005946][ T25] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 250.054964][ T25] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 250.170911][T10800] loop2: detected capacity change from 0 to 7 [ 250.190593][T10800] Dev loop2: unable to read RDB block 7 [ 250.190672][T10800] loop2: unable to read partition table [ 250.223186][T10800] loop2: partition table beyond EOD, truncated [ 250.223220][T10800] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 250.893014][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 251.016725][ T29] audit: type=1400 audit(1734448518.024:160): lsm=SMACK fn=smack_inode_removexattr action=denied subject="w" object="_" requested=w pid=10821 comm="syz.1.2138" name="file1" dev="tmpfs" ino=2269 [ 251.057279][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.085274][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.141323][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 251.170591][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.187378][ T8] usb 5-1: config 0 descriptor?? [ 251.629493][ T8] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 251.641495][ T8] cp2112 0003:10C4:EA90.001D: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 251.828297][ T8] cp2112 0003:10C4:EA90.001D: Part Number: 0x82 Device Version: 0xFE [ 252.010077][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 252.158164][ T5912] usb 6-1: USB disconnect, device number 3 [ 252.232499][ T8] cp2112 0003:10C4:EA90.001D: error setting SMBus config [ 252.253809][ T8] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -71 [ 252.269956][ T8] usb 5-1: USB disconnect, device number 25 [ 252.762930][ T62] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 252.932919][ T62] usb 6-1: Using ep0 maxpacket: 32 [ 252.940753][ T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.971754][ T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.004823][ T62] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 253.030800][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.071659][ T62] usb 6-1: config 0 descriptor?? [ 253.510750][ T62] savu 0003:1E7D:2D5A.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 253.785363][ T8] usb 6-1: USB disconnect, device number 4 [ 254.202907][ T5912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 254.388529][ T5912] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 254.398758][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.407507][ T5912] usb 2-1: Product: syz [ 254.411979][ T5912] usb 2-1: Manufacturer: syz [ 254.417321][ T5912] usb 2-1: SerialNumber: syz [ 254.426079][ T5912] usb 2-1: config 0 descriptor?? [ 254.434525][ T5912] ch341 2-1:0.0: ch341-uart converter detected [ 254.463394][T10963] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2195'. [ 255.489573][ T5912] ch341-uart ttyUSB0: failed to read break control: -71 [ 255.503150][ T5912] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 255.525196][ T5912] usb 2-1: USB disconnect, device number 21 [ 255.532086][ T5912] ch341 2-1:0.0: device disconnected [ 256.115319][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.245082][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2219'. [ 256.273284][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2219'. [ 256.412899][ T5870] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 256.424860][T11025] input: syz1 as /devices/virtual/input/input36 [ 256.588206][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 256.623701][ T5870] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 256.638256][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.653314][ T5870] usb 4-1: Product: syz [ 256.663106][ T5870] usb 4-1: Manufacturer: syz [ 256.677245][ T5870] usb 4-1: SerialNumber: syz [ 256.691142][ T5870] usb 4-1: config 0 descriptor?? [ 256.718087][ T5870] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 256.805760][ T29] audit: type=1326 audit(1734448523.824:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11030 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201c385d29 code=0x7fc00000 [ 257.028884][ T25] usb 4-1: USB disconnect, device number 18 [ 257.453507][ T29] audit: type=1326 audit(1734448524.464:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11030 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f201c385d29 code=0x7fc00000 [ 258.023002][T11083] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.410518][T11096] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 258.491256][T11103] evm: overlay not supported [ 258.950027][T11121] overlayfs: maximum fs stacking depth exceeded [ 259.292896][ T29] audit: type=1326 audit(1734448526.304:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11134 comm="syz.3.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b28385d29 code=0x7ffc0000 [ 259.322938][ T62] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 259.383690][ T29] audit: type=1326 audit(1734448526.304:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11134 comm="syz.3.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4b28385d29 code=0x7ffc0000 [ 259.423766][ T29] audit: type=1326 audit(1734448526.304:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11134 comm="syz.3.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b28385d29 code=0x7ffc0000 [ 259.449502][T11141] netlink: 'syz.1.2268': attribute type 21 has an invalid length. [ 259.470916][ T29] audit: type=1326 audit(1734448526.304:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11134 comm="syz.3.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b28385d29 code=0x7ffc0000 [ 259.474000][T11141] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2268'. [ 259.509666][ T29] audit: type=1326 audit(1734448526.304:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11134 comm="syz.3.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4b28385d29 code=0x7ffc0000 [ 259.533428][ T62] usb 3-1: Using ep0 maxpacket: 32 [ 259.555504][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.569289][ T62] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.589400][ T62] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 259.599118][ T29] audit: type=1326 audit(1734448526.314:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11134 comm="syz.3.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b28385d29 code=0x7ffc0000 [ 259.637136][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.658759][ T62] usb 3-1: config 0 descriptor?? [ 259.672863][ T29] audit: type=1326 audit(1734448526.314:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11134 comm="syz.3.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b28385d29 code=0x7ffc0000 [ 259.735072][ T29] audit: type=1326 audit(1734448526.314:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11134 comm="syz.3.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4b28385d29 code=0x7ffc0000 [ 259.916853][T11153] QAT: Invalid ioctl 1075883590 [ 259.931219][T11153] QAT: Invalid ioctl 1075883590 [ 259.943534][T11153] QAT: Invalid ioctl 1075883590 [ 259.957621][T11153] QAT: Invalid ioctl 1075883590 [ 259.971699][T11153] QAT: Invalid ioctl 1075883590 [ 259.981854][T11153] QAT: Invalid ioctl 1075883590 [ 259.997725][T11153] QAT: Invalid ioctl 1075883590 [ 260.010553][T11153] QAT: Invalid ioctl 1075883590 [ 260.020721][T11153] QAT: Invalid ioctl 1075883590 [ 260.036293][T11153] QAT: Invalid ioctl 1075883590 [ 260.120962][ T62] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 260.301985][T11166] tipc: Started in network mode [ 260.308798][T11166] tipc: Node identity 2a69c6063af6, cluster identity 4711 [ 260.323204][T11166] tipc: Enabled bearer , priority 10 [ 260.323969][ T62] ft260 0003:0403:6030.001F: chip code: 5e81 abf2 [ 260.352894][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 260.361076][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 260.386804][T11166] tipc: Enabling of bearer rejected, already enabled [ 260.811714][ T5912] usb 3-1: USB disconnect, device number 23 [ 261.127698][T11208] ALSA: mixer_oss: invalid OSS volume 'ß' [ 261.446559][ T5912] tipc: Node number set to 278906374 [ 262.179583][ T5912] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 262.335447][ T5912] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.343935][ T5912] usb 3-1: config 0 has no interface number 0 [ 262.350164][ T5912] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 262.366729][ T5912] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 262.401943][ T5912] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.412984][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.423473][ T5912] usb 3-1: config 0 descriptor?? [ 262.429784][T11240] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.441191][ T5912] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 262.451685][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 262.655983][ T5912] usb 3-1: USB disconnect, device number 24 [ 264.547856][T11336] syzkaller1: entered promiscuous mode [ 264.564456][T11336] syzkaller1: entered allmulticast mode [ 265.063027][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 265.182892][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 265.215491][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.230475][ T25] usb 3-1: config 1 has no interface number 0 [ 265.247482][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.275386][ T25] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 265.292845][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 105, setting to 64 [ 265.333121][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.342260][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.367688][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.369935][ T25] usb 3-1: Product: syz [ 265.398892][ T25] usb 3-1: Manufacturer: syz [ 265.400244][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.413912][ T25] usb 3-1: SerialNumber: syz [ 265.437471][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.460527][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.488743][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.534936][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.560426][ T8] usb 5-1: config 0 descriptor?? [ 266.027760][ T8] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 266.038388][ T8] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 266.163264][ T5900] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 266.305013][ T25] cdc_ncm 3-1:1.1: bind() failure [ 266.334468][ T8] usb 5-1: USB disconnect, device number 26 [ 266.334665][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.356764][ T5900] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.388412][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.405796][ T5900] usb 2-1: config 0 descriptor?? [ 266.422935][ T5900] pwc: Askey VC010 type 2 USB webcam detected. [ 266.573573][ T62] usb 3-1: USB disconnect, device number 25 [ 266.859840][ T5900] pwc: recv_control_msg error -32 req 02 val 2b00 [ 266.919056][ T5900] pwc: recv_control_msg error -32 req 02 val 2700 [ 267.109696][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2375'. [ 267.191163][ T5900] pwc: recv_control_msg error -71 req 04 val 1000 [ 267.198520][ T5900] pwc: recv_control_msg error -71 req 04 val 1300 [ 267.219802][ T5900] pwc: recv_control_msg error -71 req 04 val 1400 [ 267.234970][ T25] kernel write not supported for file /input/mice (pid: 25 comm: kworker/1:0) [ 267.263807][ T5900] pwc: recv_control_msg error -71 req 02 val 2000 [ 267.283901][ T5900] pwc: recv_control_msg error -71 req 02 val 2100 [ 267.292999][ T5900] pwc: recv_control_msg error -71 req 04 val 1500 [ 267.334301][ T5900] pwc: recv_control_msg error -71 req 02 val 2500 [ 267.359975][ T5900] pwc: recv_control_msg error -71 req 02 val 2400 [ 267.367794][ T5900] pwc: recv_control_msg error -71 req 02 val 2600 [ 267.383231][ T5900] pwc: recv_control_msg error -71 req 02 val 2900 [ 267.391134][ T5900] pwc: recv_control_msg error -71 req 02 val 2800 [ 267.405664][ T5900] pwc: recv_control_msg error -71 req 04 val 1100 [ 267.412641][ T5900] pwc: recv_control_msg error -71 req 04 val 1200 [ 267.429824][ T5900] pwc: Registered as video103. [ 267.435876][ T5900] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 267.456633][ T5900] usb 2-1: USB disconnect, device number 22 [ 267.644474][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 267.770648][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 267.773053][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 267.812905][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 267.820816][ T25] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 267.830505][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.853803][ T25] usb 5-1: config 0 descriptor?? [ 267.862044][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 267.887587][T11435] zonefs (nullb0) ERROR: Not a zoned block device [ 267.955114][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.969398][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.985435][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.999015][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.008316][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.021786][ T8] usb 3-1: config 0 descriptor?? [ 268.054018][ T5900] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 268.213026][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 268.224532][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.249235][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.261215][ T5900] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 268.270968][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.288051][ T5900] usb 2-1: config 0 descriptor?? [ 268.455745][ T8] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 268.469345][ T8] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 268.481287][ T8] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 268.732092][T11448] netlink: 'syz.5.2397': attribute type 177 has an invalid length. [ 268.906493][ T25] gspca_nw80x: reg_w err -71 [ 268.911352][ T25] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 268.925660][T11452] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 268.939726][ T5900] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 268.947727][ T25] usb 5-1: USB disconnect, device number 27 [ 268.969664][T11452] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 269.134204][ T5900] ft260 0003:0403:6030.0022: chip code: 0181 189f [ 269.337077][ T5900] ft260 0003:0403:6030.0022: failed to retrieve system status [ 269.347472][ T5900] ft260 0003:0403:6030.0022: probe with driver ft260 failed with error -71 [ 269.367100][ T5900] usb 2-1: USB disconnect, device number 23 [ 270.153943][T11479] sctp: [Deprecated]: syz.1.2410 (pid 11479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.153943][T11479] Use struct sctp_sack_info instead [ 270.446851][T11488] netlink: 'syz.5.2414': attribute type 1 has an invalid length. [ 270.736395][ T5912] usb 3-1: USB disconnect, device number 26 [ 270.803030][T11504] netlink: 'syz.4.2419': attribute type 2 has an invalid length. [ 271.988743][ T5877] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 272.172983][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 272.191045][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.229639][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.266276][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.307772][ T5877] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 272.337462][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.373231][ T5877] usb 6-1: config 0 descriptor?? [ 273.241171][ T5877] hid-led 0003:27B8:01ED.0023: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 273.302390][ T5877] hid-led 0003:27B8:01ED.0023: ThingM blink(1) initialized [ 273.460024][ T5900] usb 6-1: USB disconnect, device number 5 [ 273.639611][ T5877] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 273.824607][ T5877] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 273.833209][ T5877] usb 2-1: config 0 has no interface number 0 [ 273.842940][ T5877] usb 2-1: New USB device found, idVendor=050d, idProduct=0128, bcdDevice=bc.ae [ 273.855016][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.872520][ T5877] usb 2-1: Product: syz [ 273.884129][ T5877] usb 2-1: Manufacturer: syz [ 273.889099][ T5877] usb 2-1: SerialNumber: syz [ 273.900018][ T5877] usb 2-1: config 0 descriptor?? [ 273.908222][ T5877] ax88179_178a 2-1:0.65: probe with driver ax88179_178a failed with error -22 [ 273.932897][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 274.115549][ T25] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 274.136846][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.152600][ T25] usb 3-1: config 0 descriptor?? [ 274.165258][ T25] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 274.373188][ T25] usb 3-1: USB disconnect, device number 27 [ 274.492894][ T5877] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 274.572887][ T5912] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 274.646623][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.678413][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.694095][ T5877] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 274.699079][ T5870] usb 2-1: USB disconnect, device number 24 [ 274.707092][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.727568][ T5877] usb 5-1: config 0 descriptor?? [ 274.757089][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.786153][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.807868][ T5912] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 274.832658][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.861655][ T5912] usb 6-1: config 0 descriptor?? [ 275.148200][ T5877] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 275.158626][ T5877] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 275.180021][ T5877] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0024/input/input38 [ 275.205158][ T5877] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 275.399040][ T5877] usb 5-1: USB disconnect, device number 28 [ 275.433071][ T5870] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 275.500636][ T5912] usb 6-1: language id specifier not provided by device, defaulting to English [ 275.592911][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 275.600402][ T5870] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 275.609026][ T5870] usb 4-1: config 0 has no interface number 0 [ 275.616155][ T5870] usb 4-1: config 0 interface 12 has no altsetting 0 [ 275.630252][ T5870] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 275.643048][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.651333][ T5870] usb 4-1: Product: syz [ 275.661043][ T5870] usb 4-1: Manufacturer: syz [ 275.666541][ T5870] usb 4-1: SerialNumber: syz [ 275.673894][ T5870] usb 4-1: config 0 descriptor?? [ 275.701361][ T5912] letsketch 0003:6161:4D15.0025: Device info: ã°Š [ 275.763919][T11604] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2462'. [ 275.938779][ T5912] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 275.957706][ T5912] letsketch 0003:6161:4D15.0025: probe with driver letsketch failed with error -71 [ 275.980949][ T5912] usb 6-1: USB disconnect, device number 6 [ 276.562903][ T5877] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 276.722950][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 276.730626][ T5877] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.762683][ T5870] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 276.762818][ T5877] usb 5-1: config 0 has no interface number 0 [ 276.781260][ T5870] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 276.807335][ T5877] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.811616][ T5870] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 276.844061][ T5877] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.847022][ T5870] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 276.876569][ T5870] usb 4-1: USB disconnect, device number 19 [ 276.885510][ T5877] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 276.913013][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.945338][ T5877] usb 5-1: config 0 descriptor?? [ 277.652915][ T5870] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 277.655630][ T5877] uclogic 0003:28BD:0071.0026: pen parameters not found [ 277.667694][ T5877] uclogic 0003:28BD:0071.0026: interface is invalid, ignoring [ 277.837709][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.888421][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.943758][ T8] usb 5-1: USB disconnect, device number 29 [ 277.953810][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 277.982310][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.033162][ T5870] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.058854][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.079643][ T5870] usb 6-1: config 0 descriptor?? [ 278.566691][ T5870] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 278.605034][ T5870] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 278.854877][ T8] usb 6-1: USB disconnect, device number 7 [ 279.061282][T11663] loop1: detected capacity change from 0 to 1 [ 279.186478][ T8] kernel write not supported for file /snd/pcmC1D0p (pid: 8 comm: kworker/0:0) [ 279.284923][T11608] Set syz1 is full, maxelem 65536 reached [ 279.579436][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 279.579467][ T29] audit: type=1400 audit(1734448546.594:176): lsm=SMACK fn=smack_ipc_permission action=denied subject="w" object="_" requested=w pid=11685 comm="syz.1.2497" ipc_key=0 [ 280.318556][T11720] netlink: 'syz.2.2512': attribute type 4 has an invalid length. [ 281.016180][T11747] ALSA: seq fatal error: cannot create timer (-22) [ 282.634072][T11788] input: syz1 as /devices/virtual/input/input39 [ 283.278398][T11804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2545'. [ 283.858322][T11834] macvlan2: entered promiscuous mode [ 283.902031][T11834] team_slave_0: entered promiscuous mode [ 283.908328][T11834] team_slave_1: entered promiscuous mode [ 283.914492][T11834] bond_slave_0: entered promiscuous mode [ 283.920742][T11834] bond_slave_1: entered promiscuous mode [ 283.926658][T11834] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 283.996093][T11834] team0: entered promiscuous mode [ 284.002501][T11834] bond0: entered promiscuous mode [ 284.019376][T11834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.056152][T11834] team0: left promiscuous mode [ 284.078048][T11834] bond0: left promiscuous mode [ 284.098659][T11834] team_slave_0: left promiscuous mode [ 284.104249][T11834] team_slave_1: left promiscuous mode [ 284.110046][T11834] bond_slave_0: left promiscuous mode [ 284.115568][T11834] bond_slave_1: left promiscuous mode [ 284.121261][T11834] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 284.730566][ T29] audit: type=1326 audit(1734448551.744:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11868 comm="syz.1.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3528385d29 code=0x7ffc0000 [ 284.778884][ T29] audit: type=1326 audit(1734448551.754:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11868 comm="syz.1.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3528385d29 code=0x7ffc0000 [ 284.813202][ T29] audit: type=1326 audit(1734448551.754:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11868 comm="syz.1.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3528385d29 code=0x7ffc0000 [ 284.883125][ T29] audit: type=1326 audit(1734448551.774:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11868 comm="syz.1.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3528385d29 code=0x7ffc0000 [ 284.906823][ T29] audit: type=1326 audit(1734448551.784:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11868 comm="syz.1.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3528385d29 code=0x7ffc0000 [ 284.930184][ T29] audit: type=1326 audit(1734448551.784:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11868 comm="syz.1.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3528385d29 code=0x7ffc0000 [ 284.961796][ T29] audit: type=1326 audit(1734448551.784:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11868 comm="syz.1.2571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3528385d29 code=0x0 [ 285.009860][T11881] netem: change failed [ 286.135604][T11927] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2593'. [ 286.482611][T11941] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 286.529496][T11941] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.555222][T11945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2602'. [ 286.585623][T11945] netlink: 'syz.3.2602': attribute type 7 has an invalid length. [ 286.613200][T11945] netlink: 'syz.3.2602': attribute type 8 has an invalid length. [ 286.621145][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2602'. [ 286.711641][T11945] gretap0: entered promiscuous mode [ 286.751412][T11945] batadv_slave_1: entered promiscuous mode [ 287.562498][ T5900] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 287.762911][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 287.769981][ T5900] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 287.779535][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.790152][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.819162][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.829316][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.843476][ T5900] usb 3-1: Product: syz [ 287.847706][ T5900] usb 3-1: Manufacturer: syz [ 287.862727][ T5900] usb 3-1: SerialNumber: syz [ 288.093233][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 288.129797][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2617'. [ 288.243766][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 288.283959][ T8] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 288.292407][ T8] usb 2-1: config 0 has no interface number 0 [ 288.309788][ T5900] usb 3-1: 0:2 : does not exist [ 288.378284][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 288.402874][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.421515][ T8] usb 2-1: Product: syz [ 288.426213][ T8] usb 2-1: Manufacturer: syz [ 288.430904][ T8] usb 2-1: SerialNumber: syz [ 288.453918][ T8] usb 2-1: config 0 descriptor?? [ 288.480717][ T8] smsc95xx v2.0.0 [ 288.493438][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 288.517681][ T8] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 288.772914][ T25] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 288.792173][T11995] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2623'. [ 288.925464][T11975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.933044][ T5900] usb 3-1: USB disconnect, device number 28 [ 288.945693][T11975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.955064][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.960583][ T8] usb 2-1: USB disconnect, device number 25 [ 288.975213][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 288.997755][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 289.029570][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 144, setting to 64 [ 289.045348][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.065589][ T25] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 289.092829][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 289.101101][ T25] usb 4-1: Product: syz [ 289.105597][ T25] usb 4-1: Manufacturer: syz [ 289.110354][ T25] usb 4-1: SerialNumber: syz [ 289.123734][ T25] usb 4-1: config 0 descriptor?? [ 289.129491][T11988] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 289.219383][ T29] audit: type=1326 audit(1734448556.234:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.4.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201c385d29 code=0x7ffc0000 [ 289.251372][ T29] audit: type=1326 audit(1734448556.234:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.4.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201c385d29 code=0x7ffc0000 [ 289.297754][ T29] audit: type=1326 audit(1734448556.234:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12000 comm="syz.4.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f201c385d29 code=0x7ffc0000 [ 289.358736][ T25] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 289.365736][ T25] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 289.560808][ T25] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 289.586046][ T25] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 289.619944][ T25] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 289.772906][ T25] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 289.791842][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.799513][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.806460][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.813244][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.819921][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.827087][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.833815][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.840465][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.847167][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.853850][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.860516][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.867184][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.873965][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.880604][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.887252][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.893993][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.900665][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.907414][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.914119][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.920809][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.927506][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.934241][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.940905][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.947569][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.954555][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.961291][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.968137][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.974851][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.981524][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.988248][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 289.994920][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.002625][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.009311][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.015966][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.022600][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.029347][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.037246][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.043955][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.050691][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.057351][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.064014][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.070767][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.077463][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.084165][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.090840][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.097540][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.106386][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.113076][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.119759][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.126299][ T25] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 290.134763][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.141432][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 290.148682][ T25] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 290.167400][ T25] usb 4-1: USB disconnect, device number 20 [ 290.390767][T12030] macvtap0: entered promiscuous mode [ 290.410222][T12030] macvtap0: left promiscuous mode [ 290.444006][T12035] syzkaller1: entered promiscuous mode [ 290.449557][T12035] syzkaller1: entered allmulticast mode [ 291.454687][T12080] input: syz0 as /devices/virtual/input/input40 [ 291.786190][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2662'. [ 291.793255][ T8] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 291.974754][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.980399][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 291.995605][ T8] usb 3-1: config 0 has no interfaces? [ 292.025882][ T8] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 292.048232][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.064104][ T8] usb 3-1: Product: syz [ 292.068531][ T8] usb 3-1: Manufacturer: syz [ 292.073496][ T8] usb 3-1: SerialNumber: syz [ 292.081540][ T8] usb 3-1: config 0 descriptor?? [ 292.339120][ T5912] usb 3-1: USB disconnect, device number 29 [ 292.795205][T12126] Invalid source name [ 292.807057][T12126] UBIFS error (pid: 12126): cannot open "./file0", error -22 [ 293.073513][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 293.096252][ T53] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 293.208536][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 293.640355][T12156] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2691'. [ 293.660249][T12156] netlink: 'syz.5.2691': attribute type 1 has an invalid length. [ 293.927592][T12168] batadv0: entered promiscuous mode [ 293.935527][T12168] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.970970][T12168] batadv0: left promiscuous mode [ 294.596497][T12190] loop2: detected capacity change from 0 to 7 [ 294.611263][T12190] Dev loop2: unable to read RDB block 7 [ 294.617504][T12190] loop2: unable to read partition table [ 294.623876][T12190] loop2: partition table beyond EOD, truncated [ 294.630127][T12190] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.453731][ T5900] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 295.615231][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.627282][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.650923][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.672899][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.713707][ T5900] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.749422][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.784369][ T5900] usb 2-1: config 0 descriptor?? [ 296.266579][ T5900] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 296.286674][ T5900] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 296.584104][ T5912] usb 2-1: USB disconnect, device number 26 [ 296.818762][ T62] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 296.997582][ T62] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 297.007587][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.016476][ T62] usb 3-1: Product: syz [ 297.020699][ T62] usb 3-1: Manufacturer: syz [ 297.030306][ T62] usb 3-1: SerialNumber: syz [ 297.039614][ T62] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 297.082073][ T5900] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.339799][ T53] Bluetooth: hci2: unexpected event 0x3e length: 318 > 260 [ 297.339842][ T53] Bluetooth: hci2: unexpected subevent 0x0d length: 317 > 260 [ 297.357357][T12270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.367001][T12270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.495890][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 297.574002][T12307] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 297.656951][ T5912] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 297.677676][ T5912] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 297.692635][ T5912] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 297.713232][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.723000][ T62] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 297.731141][ T5912] usb 4-1: Product: syz [ 297.735840][ T5912] usb 4-1: Manufacturer: syz [ 297.740488][ T5912] usb 4-1: SerialNumber: syz [ 297.747477][ T5912] usb 4-1: config 0 descriptor?? [ 297.753402][T12296] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.760726][T12296] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.987445][T12296] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.093296][T12296] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.093342][ T25] usb 3-1: USB disconnect, device number 30 [ 298.206369][ T62] usb 6-1: Using ep0 maxpacket: 16 [ 298.220570][ T62] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 298.237011][ T62] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.249089][ T62] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.265258][ T62] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.280301][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.289734][ T62] usb 6-1: Product: syz [ 298.298806][ T62] usb 6-1: Manufacturer: syz [ 298.304731][ T62] usb 6-1: SerialNumber: syz [ 298.432906][ T5900] usb 3-1: Service connection timeout for: 256 [ 298.439243][ T5900] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 298.449641][ T5900] ath9k_htc: Failed to initialize the device [ 298.463316][ T25] usb 3-1: ath9k_htc: USB layer deinitialized [ 298.524025][ T5912] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 298.633785][ T5901] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 298.737412][ T62] usb 6-1: 0:2 : does not exist [ 298.793007][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 298.802372][ T5901] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 298.814665][ T5901] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 298.832902][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 298.853795][ T5901] usb 2-1: config 1 has no interface number 0 [ 298.860004][ T5901] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.872034][ T5901] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 298.886155][ T5901] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 298.895441][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.925962][ T5901] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 298.936526][ T5912] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 298.955471][ T5912] usb 4-1: USB disconnect, device number 21 [ 299.359650][ T62] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 299.393374][ T62] usb 6-1: USB disconnect, device number 8 [ 299.500487][ T5901] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 299.720805][ T8] usb 2-1: USB disconnect, device number 27 [ 299.730330][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 300.072640][T12370] batman_adv: batadv0: Adding interface: ipvlan2 [ 300.082017][T12370] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (256) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.107337][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.122726][T12370] batman_adv: batadv0: Interface activated: ipvlan2 [ 300.308793][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'. [ 300.328242][T12378] netlink: 22 bytes leftover after parsing attributes in process `syz.5.2788'. [ 300.348822][T12378] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2788'. [ 300.373940][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'. [ 300.902247][T12412] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2803'. [ 301.344458][T12428] loop4: detected capacity change from 0 to 2 [ 301.893054][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 302.053170][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 302.092999][ T8] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 302.101776][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.120062][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.140105][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.158618][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.172046][ T8] usb 6-1: Product: syz [ 302.194792][ T8] usb 6-1: Manufacturer: syz [ 302.208127][ T8] usb 6-1: SerialNumber: syz [ 302.466650][T12439] netlink: 'syz.5.2816': attribute type 6 has an invalid length. [ 302.492854][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2816'. [ 302.624241][ T8] usb 6-1: 0:2 : does not exist [ 302.673296][ T8] usb 6-1: USB disconnect, device number 9 [ 303.123297][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 303.242968][ T57] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 303.283215][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 303.290441][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 303.309712][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.327421][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.337757][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.346448][ T8] usb 5-1: Product: syz [ 303.350817][ T8] usb 5-1: Manufacturer: syz [ 303.357120][ T8] usb 5-1: SerialNumber: syz [ 303.367000][T12464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 303.415921][ T57] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 303.429989][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.442509][ T57] usb 4-1: config 0 descriptor?? [ 303.493002][ T5870] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 303.581641][T12464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.593422][T12464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.602986][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 303.627912][ T8] usb 5-1: USB disconnect, device number 30 [ 303.660080][ T5870] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 303.669322][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.682014][ T5870] usb 2-1: config 0 descriptor?? [ 303.689768][ T5870] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 303.726863][ T5901] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 303.863685][ T57] playstation 0003:054C:0DF2.0029: unbalanced collection at end of report description [ 303.874373][ T57] playstation 0003:054C:0DF2.0029: Parse failed [ 303.880744][ T57] playstation 0003:054C:0DF2.0029: probe with driver playstation failed with error -22 [ 303.890657][ T62] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 303.900140][ T5870] gp8psk: usb in 128 operation failed. [ 303.906301][ T5901] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.915762][ T5901] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 303.926169][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.936929][ T5901] usb 3-1: config 0 descriptor?? [ 304.072961][ T62] usb 6-1: Using ep0 maxpacket: 8 [ 304.078977][ T5901] usb 4-1: USB disconnect, device number 22 [ 304.089507][ T62] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.100151][ T62] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.108008][ T5870] gp8psk: usb in 146 operation failed. [ 304.110181][ T62] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.122935][ T5870] gp8psk: failed to get FW version [ 304.126357][ T62] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.138037][ T5870] gp8psk: FPGA Version = 130 [ 304.162592][ T62] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 304.168863][ T57] usb 3-1: USB disconnect, device number 31 [ 304.178057][ T62] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 304.192201][ T62] usb 6-1: Product: syz [ 304.339774][ T5870] gp8psk: usb in 138 operation failed. [ 304.345528][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 304.358275][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 304.376523][ T5870] usb 2-1: USB disconnect, device number 28 [ 304.418827][ T62] usb 6-1: GET_CAPABILITIES returned 0 [ 304.424553][ T62] usbtmc 6-1:16.0: can't read capabilities [ 304.622987][ T5901] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 304.658840][ T5870] usb 6-1: USB disconnect, device number 10 [ 304.793211][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 304.807774][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.822733][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.863132][ T5901] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 304.888096][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.907544][ T5901] usb 5-1: config 0 descriptor?? [ 305.042279][T12508] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526 [ 305.340701][ T5901] appleir 0003:05AC:8241.002A: unknown main item tag 0x0 [ 305.354627][ T5901] appleir 0003:05AC:8241.002A: unknown main item tag 0x0 [ 305.382927][ T5901] appleir 0003:05AC:8241.002A: unknown main item tag 0x0 [ 305.390111][ T5901] appleir 0003:05AC:8241.002A: unknown main item tag 0x0 [ 305.412625][ T5901] appleir 0003:05AC:8241.002A: unknown main item tag 0x0 [ 305.421598][ T5901] appleir 0003:05AC:8241.002A: No inputs registered, leaving [ 305.453973][ T5901] appleir 0003:05AC:8241.002A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 305.528656][T12530] netlink: 'syz.1.2855': attribute type 29 has an invalid length. [ 305.551453][T12530] netlink: 'syz.1.2855': attribute type 29 has an invalid length. [ 305.561966][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 305.655232][ T57] usb 5-1: USB disconnect, device number 31 [ 305.732846][ T62] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 305.895024][ T62] usb 6-1: not running at top speed; connect to a high speed hub [ 305.905467][ T62] usb 6-1: config 0 has an invalid interface number: 243 but max is 0 [ 305.914090][ T62] usb 6-1: config 0 has no interface number 0 [ 305.920539][ T62] usb 6-1: config 0 interface 243 has no altsetting 0 [ 305.933234][ T62] usb 6-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=ec.26 [ 305.951310][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.974151][ T62] usb 6-1: Product: syz [ 305.978398][ T62] usb 6-1: Manufacturer: syz [ 305.993323][ T62] usb 6-1: SerialNumber: syz [ 306.011515][ T62] usb 6-1: config 0 descriptor?? [ 306.033580][T12549] syzkaller1: entered promiscuous mode [ 306.049179][T12549] syzkaller1: entered allmulticast mode [ 306.058869][T12549] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 306.265495][ T62] usb 6-1: selecting invalid altsetting 3 [ 306.288661][ T62] comedi comedi0: could not set alternate setting 3 in high speed [ 306.298844][ T62] usbdux 6-1:0.243: driver 'usbdux' failed to auto-configure device. [ 306.320094][ T62] usbdux 6-1:0.243: probe with driver usbdux failed with error -22 [ 306.330747][ T62] usb 6-1: USB disconnect, device number 11 [ 306.761457][T12575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input41 [ 306.907723][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 306.969240][T12585] netlink: 'syz.1.2882': attribute type 3 has an invalid length. [ 306.977811][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2882'. [ 307.520240][T12611] trusted_key: syz.4.2890 sent an empty control message without MSG_MORE. [ 307.855350][T12627] syzkaller1: entered promiscuous mode [ 307.860909][T12627] syzkaller1: entered allmulticast mode [ 308.037817][T12634] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2906'. [ 308.053056][ T5870] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 308.175870][T12641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.214704][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 308.232972][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.252891][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 308.287470][ T5870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 54 [ 308.318194][ T5870] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 308.342913][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.378901][ T5870] usb 5-1: config 0 descriptor?? [ 308.390966][T12623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.606022][T12623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.617282][T12623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.632552][ T5870] ath6kl: Failed to submit usb control message: -71 [ 308.639409][ T5870] ath6kl: unable to send the bmi data to the device: -71 [ 308.646639][ T5870] ath6kl: Unable to send get target info: -71 [ 308.654712][ T5870] ath6kl: Failed to init ath6kl core: -71 [ 308.661444][ T5870] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 308.682944][ T5870] usb 5-1: USB disconnect, device number 32 [ 309.518344][T12692] netlink: 'syz.5.2930': attribute type 1 has an invalid length. [ 309.559642][T12692] netlink: 'syz.5.2930': attribute type 2 has an invalid length. [ 309.632975][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 309.648953][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 415.992730][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 415.999765][ C0] rcu: 1-...!: (1 GPs behind) idle=d484/1/0x4000000000000000 softirq=45971/45973 fqs=2 [ 416.011122][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5818/1:b..l [ 416.019085][ C0] rcu: (detected by 0, t=10502 jiffies, g=50357, q=208 ncpus=2) [ 416.026842][ C0] Sending NMI from CPU 0 to CPUs 1: [ 416.026880][ C1] NMI backtrace for cpu 1 [ 416.026907][ C1] CPU: 1 UID: 0 PID: 12735 Comm: syz.4.2949 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 416.026926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 416.026942][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 416.026972][ C1] Code: e8 4b a8 3b 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 50 fb 2c 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 3c 42 7e 00 48 c7 c3 d8 7c 03 00 49 03 1e 48 89 [ 416.026985][ C1] RSP: 0018:ffffc90000a18c50 EFLAGS: 00000046 [ 416.026999][ C1] RAX: 1ffffffff1c59f6b RBX: 0000000000000001 RCX: ffff8880340c1e00 [ 416.027012][ C1] RDX: ffff8880340c1e00 RSI: ffffffff8c5ed800 RDI: ffffffff8c5ed7c0 [ 416.027030][ C1] RBP: 0000000000000001 R08: ffffffff89c5aa32 R09: 1ffffffff284e110 [ 416.027042][ C1] R10: dffffc0000000000 R11: fffffbfff284e111 R12: dffffc0000000000 [ 416.027054][ C1] R13: ffff8880317a0408 R14: ffffffff8e2cfb58 R15: dffffc0000000000 [ 416.027067][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 416.027098][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.027111][ C1] CR2: 0000000020003c80 CR3: 000000004af3e000 CR4: 00000000003526f0 [ 416.027129][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.027140][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 416.027151][ C1] Call Trace: [ 416.027159][ C1] [ 416.027169][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 416.027192][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 416.027213][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 416.027234][ C1] ? nmi_handle+0x2a/0x5a0 [ 416.027261][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 416.027287][ C1] ? nmi_handle+0x14f/0x5a0 [ 416.027306][ C1] ? nmi_handle+0x2a/0x5a0 [ 416.027326][ C1] ? rcu_is_watching+0x3a/0xb0 [ 416.027347][ C1] ? default_do_nmi+0x63/0x160 [ 416.027367][ C1] ? exc_nmi+0x123/0x1f0 [ 416.027385][ C1] ? end_repeat_nmi+0xf/0x53 [ 416.027404][ C1] ? advance_sched+0xa32/0xca0 [ 416.027427][ C1] ? rcu_is_watching+0x3a/0xb0 [ 416.027449][ C1] ? rcu_is_watching+0x3a/0xb0 [ 416.027473][ C1] ? rcu_is_watching+0x3a/0xb0 [ 416.027495][ C1] [ 416.027501][ C1] [ 416.027506][ C1] ? advance_sched+0xa02/0xca0 [ 416.027526][ C1] advance_sched+0xa3b/0xca0 [ 416.027554][ C1] ? __pfx_advance_sched+0x10/0x10 [ 416.027574][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 416.027607][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 416.027629][ C1] ? sched_clock+0x4a/0x70 [ 416.027654][ C1] ? read_tsc+0x9/0x20 [ 416.027677][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 416.027699][ C1] hrtimer_interrupt+0x403/0xa40 [ 416.027734][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 416.027756][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 416.027780][ C1] [ 416.027785][ C1] [ 416.027792][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.027819][ C1] RIP: 0010:lock_release+0x17f/0xa30 [ 416.027838][ C1] Code: 07 de 93 49 39 06 0f 84 ee 04 00 00 4c 8d b4 24 b0 00 00 00 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 01 7b 88 00 <4c> 89 6c 24 50 48 c7 84 24 b0 00 00 00 00 00 00 00 9c 8f 84 24 b0 [ 416.027852][ C1] RSP: 0018:ffffc9000bb9f180 EFLAGS: 00000246 [ 416.027866][ C1] RAX: ffffffff93de0750 RBX: 1ffff92001773e46 RCX: ffffffff817ad660 [ 416.027880][ C1] RDX: 0000000000000000 RSI: ffffffff8c5ed800 RDI: ffffffff8c5ed7c0 [ 416.027892][ C1] RBP: ffffc9000bb9f2c0 R08: ffffffff90184f37 R09: 1ffffffff20309e6 [ 416.027912][ C1] R10: dffffc0000000000 R11: fffffbfff20309e7 R12: 1ffff92001773e3c [ 416.027925][ C1] R13: ffffffff820ed5b7 R14: ffffc9000bb9f230 R15: dffffc0000000000 [ 416.027939][ C1] ? page_ext_put+0x97/0xc0 [ 416.027966][ C1] ? lock_release+0xb0/0xa30 [ 416.027987][ C1] ? __pfx_lock_release+0x10/0x10 [ 416.028007][ C1] ? __pte_offset_map_lock+0x273/0x300 [ 416.028027][ C1] ? __pfx_lock_release+0x10/0x10 [ 416.028049][ C1] ? page_ext_get+0x20/0x2a0 [ 416.028072][ C1] ? page_ext_get+0x1d6/0x2a0 [ 416.028099][ C1] page_ext_put+0xa3/0xc0 [ 416.028123][ C1] unmap_page_range+0x2c2e/0x4040 [ 416.028169][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 416.028200][ C1] ? mas_next_slot+0xdc6/0xea0 [ 416.028226][ C1] ? uprobe_munmap+0x183/0x460 [ 416.028247][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 416.028277][ C1] unmap_vmas+0x3cc/0x5f0 [ 416.028306][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 416.028341][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 416.028368][ C1] exit_mmap+0x275/0xc20 [ 416.028394][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 416.028421][ C1] ? __pfx_exit_aio+0x10/0x10 [ 416.028448][ C1] ? uprobe_clear_state+0x271/0x290 [ 416.028466][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 416.028485][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 416.028512][ C1] __mmput+0x115/0x3b0 [ 416.028538][ C1] exit_mm+0x220/0x310 [ 416.028557][ C1] ? __pfx_exit_mm+0x10/0x10 [ 416.028575][ C1] ? taskstats_exit+0x326/0xa60 [ 416.028596][ C1] do_exit+0x9b2/0x28e0 [ 416.028618][ C1] ? __pfx_do_exit+0x10/0x10 [ 416.028636][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 416.028664][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 416.028683][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 416.028701][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 416.028725][ C1] do_group_exit+0x207/0x2c0 [ 416.028744][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.028764][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 416.028789][ C1] get_signal+0x16b2/0x1750 [ 416.028821][ C1] ? __pfx_get_signal+0x10/0x10 [ 416.028849][ C1] arch_do_signal_or_restart+0x96/0x860 [ 416.028876][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 416.028905][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 416.028930][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 416.028956][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 416.028982][ C1] do_syscall_64+0x100/0x230 [ 416.029008][ C1] ? clear_bhb_loop+0x35/0x90 [ 416.029026][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.029051][ C1] RIP: 0033:0x7f201c385d29 [ 416.029066][ C1] Code: Unable to access opcode bytes at 0x7f201c385cff. [ 416.029075][ C1] RSP: 002b:00007f201a1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 416.029092][ C1] RAX: fffffffffffffe00 RBX: 00007f201c575fa8 RCX: 00007f201c385d29 [ 416.029104][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f201c575fa8 [ 416.029115][ C1] RBP: 00007f201c575fa0 R08: 0000000000000000 R09: 0000000000000000 [ 416.029127][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f201c575fac [ 416.029138][ C1] R13: 0000000000000000 R14: 00007ffe5d26f120 R15: 00007ffe5d26f208 [ 416.029158][ C1] [ 416.029873][ C0] task:syz-executor state:R running task stack:19440 pid:5818 tgid:5818 ppid:5812 flags:0x00004000 [ 416.693000][ C0] Call Trace: [ 416.696338][ C0] [ 416.699310][ C0] __schedule+0x17fb/0x4be0 [ 416.703902][ C0] ? __pfx___schedule+0x10/0x10 [ 416.708802][ C0] ? mark_lock+0x9a/0x360 [ 416.713178][ C0] ? preempt_schedule+0xe1/0xf0 [ 416.718054][ C0] preempt_schedule_common+0x84/0xd0 [ 416.723366][ C0] preempt_schedule+0xe1/0xf0 [ 416.728074][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 416.733477][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 416.739398][ C0] ? __page_table_check_ptes_set+0x30f/0x410 [ 416.745421][ C0] ? copy_pmd_range+0x6d6d/0x77a0 [ 416.750471][ C0] preempt_schedule_thunk+0x1a/0x30 [ 416.755703][ C0] _raw_spin_unlock+0x3e/0x50 [ 416.760428][ C0] copy_pmd_range+0x6dc8/0x77a0 [ 416.765343][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 416.770579][ C0] ? look_up_lock_class+0x77/0x170 [ 416.775725][ C0] ? register_lock_class+0x102/0x980 [ 416.781047][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 416.786023][ C0] ? mark_lock+0x9a/0x360 [ 416.790383][ C0] ? __lock_acquire+0x1397/0x2100 [ 416.795464][ C0] copy_page_range+0x99f/0xe90 [ 416.800281][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 416.805605][ C0] ? __pfx_up_write+0x10/0x10 [ 416.810311][ C0] ? __asan_memset+0x23/0x50 [ 416.814929][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 416.821726][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 416.828013][ C0] copy_mm+0x11c7/0x1f90 [ 416.832309][ C0] ? __pfx_copy_mm+0x10/0x10 [ 416.836955][ C0] ? __init_rwsem+0x122/0x160 [ 416.841683][ C0] ? copy_signal+0x51c/0x640 [ 416.846307][ C0] copy_process+0x1845/0x3d50 [ 416.851027][ C0] ? copy_process+0x9fa/0x3d50 [ 416.855825][ C0] ? __lock_acquire+0x1397/0x2100 [ 416.860880][ C0] ? __pfx_copy_process+0x10/0x10 [ 416.865954][ C0] kernel_clone+0x223/0x870 [ 416.870483][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 416.875545][ C0] __x64_sys_clone+0x258/0x2a0 [ 416.880353][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 416.885667][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 416.891695][ C0] ? exc_page_fault+0x590/0x8b0 [ 416.896602][ C0] ? do_syscall_64+0xb6/0x230 [ 416.901319][ C0] do_syscall_64+0xf3/0x230 [ 416.905858][ C0] ? clear_bhb_loop+0x35/0x90 [ 416.910556][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.916494][ C0] RIP: 0033:0x7f352837c593 [ 416.920931][ C0] RSP: 002b:00007fff5e8b1438 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 416.929379][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f352837c593 [ 416.937365][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 416.945721][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 416.953819][ C0] R10: 0000555559a137d0 R11: 0000000000000246 R12: 0000000000000000 [ 416.961827][ C0] R13: 000000000004be18 R14: 00007fff5e8b15c0 R15: 000000000000025e [ 416.969857][ C0] [ 416.972914][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g50357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 416.984125][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 416.994111][ C0] rcu: RCU grace-period kthread stack dump: [ 417.000185][ C0] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 417.011967][ C0] Call Trace: [ 417.015352][ C0] [ 417.018317][ C0] __schedule+0x17fb/0x4be0 [ 417.022876][ C0] ? __pfx___schedule+0x10/0x10 [ 417.027774][ C0] ? __pfx_lock_release+0x10/0x10 [ 417.032842][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.039198][ C0] ? schedule+0x90/0x320 [ 417.043468][ C0] schedule+0x14b/0x320 [ 417.047656][ C0] schedule_timeout+0x15a/0x290 [ 417.052534][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 417.057929][ C0] ? __pfx_process_timeout+0x10/0x10 [ 417.063249][ C0] ? prepare_to_swait_event+0x330/0x350 [ 417.068826][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 417.073694][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 417.078934][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 417.085119][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 417.090442][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 417.096369][ C0] ? finish_swait+0xd4/0x1e0 [ 417.101021][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 417.105650][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 417.110868][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 417.116826][ C0] ? __kthread_parkme+0x169/0x1d0 [ 417.121875][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 417.127119][ C0] kthread+0x2f0/0x390 [ 417.131297][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 417.136537][ C0] ? __pfx_kthread+0x10/0x10 [ 417.141164][ C0] ret_from_fork+0x4b/0x80 [ 417.145614][ C0] ? __pfx_kthread+0x10/0x10 [ 417.150228][ C0] ret_from_fork_asm+0x1a/0x30 [ 417.155039][ C0] [ 417.158076][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 417.164412][ C0] CPU: 0 UID: 0 PID: 12740 Comm: syz.3.2951 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 417.175184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 417.185255][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 417.192051][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 417.211682][ C0] RSP: 0018:ffffc90003197680 EFLAGS: 00000293 [ 417.217775][ C0] RAX: ffffffff81938ebb RBX: 1ffff110170e88b9 RCX: ffff8880340c3c00 [ 417.225768][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 417.233795][ C0] RBP: ffffc90003197880 R08: ffffffff81938e8a R09: 1ffffffff20309e6 [ 417.241796][ C0] R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 417.249793][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 417.257789][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 417.266737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.273340][ C0] CR2: 00000000200cd030 CR3: 000000006752e000 CR4: 00000000003526f0 [ 417.281338][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.289327][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.297320][ C0] Call Trace: [ 417.300639][ C0] [ 417.303500][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 417.309862][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 417.315535][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 417.321370][ C0] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 417.327641][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 417.334256][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 417.339841][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 417.346109][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 417.351512][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 417.357180][ C0] ? acct_account_cputime+0x207/0x210 [ 417.362595][ C0] ? update_process_times+0x242/0x2f0 [ 417.368026][ C0] ? tick_nohz_handler+0x37c/0x500 [ 417.373164][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 417.378647][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 417.384058][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 417.389823][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 417.394811][ C0] ? read_tsc+0x9/0x20 [ 417.398906][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 417.404997][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 417.410149][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 417.416327][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 417.422161][ C0] [ 417.425109][ C0] [ 417.428051][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.434235][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 417.440412][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 417.446609][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 417.452791][ C0] ? kmem_cache_free+0x195/0x410 [ 417.457759][ C0] ? native_tlb_remove_table+0x3d/0x50 [ 417.463255][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 417.468495][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 417.474851][ C0] ? __pfx_free_pgd_range+0x10/0x10 [ 417.480080][ C0] ? rcu_is_watching+0x15/0xb0 [ 417.484872][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 417.490096][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 417.495237][ C0] flush_tlb_mm_range+0x329/0x5c0 [ 417.500291][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 417.505877][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 417.511069][ C0] tlb_flush_mmu+0x1aa/0x680 [ 417.515704][ C0] ? __pfx_down_write+0x10/0x10 [ 417.520579][ C0] tlb_finish_mmu+0xd4/0x200 [ 417.525201][ C0] exit_mmap+0x496/0xc20 [ 417.529509][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 417.534312][ C0] ? __pfx_exit_aio+0x10/0x10 [ 417.539029][ C0] ? uprobe_clear_state+0x271/0x290 [ 417.544250][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 417.549556][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 417.554803][ C0] __mmput+0x115/0x3b0 [ 417.558908][ C0] exit_mm+0x220/0x310 [ 417.563003][ C0] ? __pfx_exit_mm+0x10/0x10 [ 417.567635][ C0] ? taskstats_exit+0x326/0xa60 [ 417.572513][ C0] do_exit+0x9b2/0x28e0 [ 417.576694][ C0] ? preempt_schedule_common+0x84/0xd0 [ 417.582204][ C0] ? __pfx_do_exit+0x10/0x10 [ 417.586812][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 417.592813][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.599163][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 417.604560][ C0] do_group_exit+0x207/0x2c0 [ 417.609186][ C0] __x64_sys_exit_group+0x3f/0x40 [ 417.614228][ C0] x64_sys_call+0x26a8/0x26b0 [ 417.618932][ C0] do_syscall_64+0xf3/0x230 [ 417.623463][ C0] ? clear_bhb_loop+0x35/0x90 [ 417.628258][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.634181][ C0] RIP: 0033:0x7f4b28385d29 [ 417.638614][ C0] Code: Unable to access opcode bytes at 0x7f4b28385cff. [ 417.645743][ C0] RSP: 002b:00007fff479c9468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 417.654198][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b28385d29 [ 417.662219][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.670216][ C0] RBP: 00007fff479c94bc R08: 00007fff479c954f R09: 000000000004bdb4 [ 417.678204][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 417.686539][ C0] R13: 000000000004bdb4 R14: 00007fff479c9510 R15: 00007fff479c9510 [ 417.694552][ C0]