last executing test programs: 14.913622883s ago: executing program 1 (id=4545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.687913555s ago: executing program 1 (id=4546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 14.507116153s ago: executing program 1 (id=4549): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5, 0x81b, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "733c94a4115b1895dcd22c6e6b0348305e8144f0c8e9b26c1bca6d823b5ae8c7b21c821737bbda4c288414427c2c98707bd65a0260675cde1e7d4a721c74b077"}}, 0x80}}, 0x0) 14.410011523s ago: executing program 1 (id=4550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) 13.117674389s ago: executing program 1 (id=4556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009402"]) 12.624893292s ago: executing program 1 (id=4564): mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=interleave=stjc:']) 4.123496214s ago: executing program 0 (id=4599): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[], 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4095, 0x1014}, {&(0x7f00000003c0)=""/254, 0xf0}], 0x4, 0x0, 0x353}}], 0xebadb096fd1881, 0x0, 0x0) 3.992217829s ago: executing program 2 (id=4602): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r2, 0x0, 0x0, 0x0) 3.862309719s ago: executing program 0 (id=4603): get_robust_list(0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) 3.79442186s ago: executing program 4 (id=4604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000200)="e3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @mss, @sack_perm, @timestamp, @mss, @window], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 3.711944616s ago: executing program 2 (id=4605): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) unshare(0x22020600) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) 3.708319765s ago: executing program 0 (id=4606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 3.4845324s ago: executing program 4 (id=4607): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 3.395678798s ago: executing program 3 (id=4608): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 3.34589342s ago: executing program 4 (id=4609): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = io_uring_setup(0x0, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) getpgid(r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.337334361s ago: executing program 2 (id=4610): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000440)={r1, 0x2, 0x6, @remote}, 0x10) 3.247750674s ago: executing program 0 (id=4611): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {0x1d}, {0x6}]}, 0x10) 3.070542583s ago: executing program 0 (id=4612): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0xff}, {0x6}]}) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) 1.166654657s ago: executing program 3 (id=4613): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}}}, 0xb8}}, 0x0) 1.061674477s ago: executing program 4 (id=4614): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x6c}}, 0x0) 999.934335ms ago: executing program 2 (id=4615): get_robust_list(0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) 999.59394ms ago: executing program 3 (id=4616): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x10}, 0x0) 949.134236ms ago: executing program 2 (id=4617): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 903.365225ms ago: executing program 0 (id=4618): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 804.653614ms ago: executing program 4 (id=4619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chdir(0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 786.12913ms ago: executing program 3 (id=4620): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 644.42668ms ago: executing program 3 (id=4621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 575.790358ms ago: executing program 4 (id=4622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001800)={'syztnl2\x00', &(0x7f0000001780)={'ip6tnl0\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x3, 0x8000}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001940)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r3, 0x277f826df11ec41b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x2c}}, 0x0) 396.201063ms ago: executing program 3 (id=4623): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = io_uring_setup(0x0, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) getpgid(r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x45, 0x0, 0x2}, {}, {}, {0x20}]}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=4624): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000bd0f3363ffd630c5003e90e0aa31bcda20c276dd8d1c1a6e1403797b266067e58ed88a3e5021c7eae064811975c9ab78a6c7e086ed6c55f03268dbd4a78523488adf8ab9aee3915745803c73459a72c0a220ad274ffbd671b322417c9b55f14e"], 0x1c}}, 0x0) ioperm(0x0, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) madvise(&(0x7f0000a2e000/0x3000)=nil, 0xffffffffdf5d1fff, 0x12) syz_emit_ethernet(0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() kernel console output (not intermixed with test programs): or -71 [ 1431.683636][T14373] usb 3-1: USB disconnect, device number 102 [ 1431.760450][ T29] audit: type=1326 audit(1720122458.410:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21118 comm="syz.0.4211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x0 [ 1431.907708][T21124] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4213'. [ 1432.012881][T21132] team0: Device ipvlan2 is already an upper device of the team interface [ 1432.026906][T14202] Bluetooth: hci1: command 0x0406 tx timeout [ 1432.106900][T13454] Bluetooth: hci5: command 0x0406 tx timeout [ 1432.633363][T21144] binder: 21139:21144 ioctl c0306201 0 returned -14 [ 1433.003854][T21145] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4218'. [ 1433.436996][ T5185] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1433.678954][ T5185] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.716030][ T5185] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.741737][ T5185] usb 4-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1433.780894][ T5185] usb 4-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1433.820711][ T5185] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1433.842854][ T5185] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1433.863640][ T5185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.880561][ T5185] usb 4-1: Product: syz [ 1433.890855][ T5185] usb 4-1: Manufacturer: syz [ 1433.908914][ T5185] usb 4-1: SerialNumber: syz [ 1433.928271][ T5185] usb 4-1: selecting invalid altsetting 1 [ 1433.949018][ T5185] usb 4-1: selecting invalid altsetting 0 [ 1433.961776][ T5185] usb 4-1: selecting invalid altsetting 0 [ 1434.007699][ T5185] cdc_ncm 4-1:1.0: bind() failure [ 1434.526870][T14373] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1435.310523][T14373] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1435.344986][T14373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.409223][T14373] usb 5-1: config 0 descriptor?? [ 1435.590164][T13834] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1435.738574][T21170] netlink: 'syz.1.4226': attribute type 11 has an invalid length. [ 1435.849073][T13834] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1435.922424][T13834] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1435.982749][T13834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.025951][T13834] usb 3-1: config 0 descriptor?? [ 1436.397573][T21174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4227'. [ 1436.576282][T14373] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 1436.696941][ T29] audit: type=1326 audit(1720122463.260:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21171 comm="syz.1.4227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1436.951246][T14373] usb 5-1: USB disconnect, device number 114 [ 1436.987084][T13834] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 1437.156855][T13454] Bluetooth: hci4: command 0x0406 tx timeout [ 1437.636828][T13834] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1437.875589][T13834] usb 2-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 1437.901865][T13834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.926835][T13834] usb 2-1: Product: syz [ 1437.937073][T13834] usb 2-1: Manufacturer: syz [ 1437.953208][T13834] usb 2-1: SerialNumber: syz [ 1437.976134][T13834] usb 2-1: config 0 descriptor?? [ 1438.000729][T13834] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1438.063013][T21188] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4230'. [ 1438.206185][ T5185] usb 4-1: selecting invalid altsetting 0 [ 1438.226344][ T5185] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1438.265332][ T5185] usb 4-1: USB disconnect, device number 14 [ 1438.353721][ T5183] usb 3-1: USB disconnect, device number 103 [ 1438.614002][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4232'. [ 1439.077973][T21204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.467945][ T5183] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1439.732407][ T5183] usb 1-1: Using ep0 maxpacket: 32 [ 1439.840984][ T5183] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1439.996499][ T5183] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1440.158962][ T5183] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1440.221086][T14373] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1440.297697][ T5183] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1440.397050][ T5183] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1440.430285][ T5183] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1440.448951][ T5183] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1440.475633][ T5183] usb 1-1: Product: syz [ 1440.480614][ T5183] usb 1-1: Manufacturer: syz [ 1440.485486][ T5183] usb 1-1: SerialNumber: syz [ 1440.494064][ T5183] usb 1-1: config 0 descriptor?? [ 1440.511374][ T5183] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1440.529394][T14373] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.543401][ T5183] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1440.554556][T14373] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1440.572849][T21216] netlink: 'syz.4.4237': attribute type 11 has an invalid length. [ 1440.597880][T14373] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1440.621161][T14373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1440.650431][T14373] usb 3-1: SerialNumber: syz [ 1441.251755][T14373] usb 3-1: 0:2 : does not exist [ 1441.256830][T14373] usb 3-1: unit 5: unexpected type 0x09 [ 1441.286850][T14373] usb 3-1: USB disconnect, device number 104 [ 1441.386463][T13834] usb 1-1: USB disconnect, device number 109 [ 1441.392492][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 1441.421485][T13834] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1441.868226][T20410] udevd[20410]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1441.914008][T13834] usb 2-1: USB disconnect, device number 9 [ 1441.920355][T21204] ldusb: No device or device unplugged -19 [ 1442.135836][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4239'. [ 1442.224221][ T29] audit: type=1326 audit(1720122468.860:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21221 comm="syz.4.4239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x0 [ 1442.258832][T21202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.406981][T13662] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1442.456766][T13834] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1442.620708][T13662] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1442.634355][T13662] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1442.643119][T13834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.648427][T13662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.656837][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1442.670162][T13662] usb 4-1: config 0 descriptor?? [ 1442.687616][T13834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.715727][T13834] usb 3-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1442.727826][T13834] usb 3-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1442.742166][T13834] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1442.768954][T13834] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1442.786825][T13834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.794884][T13834] usb 3-1: Product: syz [ 1442.829534][T13834] usb 3-1: Manufacturer: syz [ 1442.834212][T13834] usb 3-1: SerialNumber: syz [ 1442.851254][T13834] usb 3-1: selecting invalid altsetting 1 [ 1442.859559][T13834] usb 3-1: selecting invalid altsetting 0 [ 1442.865373][T13834] usb 3-1: selecting invalid altsetting 0 [ 1442.871828][T13834] cdc_ncm 3-1:1.0: bind() failure [ 1442.893415][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1442.903061][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.947815][ T9] usb 2-1: config 0 descriptor?? [ 1445.327146][ T9] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 1445.493349][T13834] usb 3-1: selecting invalid altsetting 0 [ 1445.590641][T13834] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 1445.723871][T13834] usb 3-1: USB disconnect, device number 105 [ 1445.867390][T21240] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1445.892093][ T5176] usb 2-1: USB disconnect, device number 10 [ 1446.709501][T13662] pegasus 4-1:0.0: probe with driver pegasus failed with error -110 [ 1447.153379][T13834] usb 4-1: USB disconnect, device number 15 [ 1447.458617][T14203] Bluetooth: hci4: unexpected subevent 0x01 length: 25 > 18 [ 1447.776838][T13834] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1447.856805][ T5176] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1447.886859][T13662] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1447.968632][T21268] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1447.995314][T13834] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1448.007636][T21268] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1448.025690][T13834] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1448.054073][T13834] usb 1-1: config 1 has no interface number 1 [ 1448.081985][T13834] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1448.112629][ T5176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.130115][T13662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 1448.141261][ T5176] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1448.155354][T13834] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1448.173034][ T5176] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1448.178299][T13662] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1448.186844][T13834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.193157][T13662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.226552][T13662] usb 3-1: config 0 descriptor?? [ 1448.232748][ T5176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1448.257821][ T5176] usb 2-1: SerialNumber: syz [ 1448.263712][T13834] usb 1-1: Product: చ [ 1448.317218][T13834] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1448.343947][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4253'. [ 1448.409240][T13834] usb 1-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1448.413504][ T29] audit: type=1326 audit(1720122475.060:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21270 comm="syz.4.4253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x0 [ 1448.479636][T21261] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1448.514509][ T5176] usb 2-1: 0:2 : does not exist [ 1448.528538][ T5176] usb 2-1: unit 5: unexpected type 0x09 [ 1448.790872][T13834] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1448.876457][T13834] usb 1-1: USB disconnect, device number 110 [ 1448.946714][ T5176] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1449.159408][ T5176] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1449.172357][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.188642][ T5176] usb 4-1: config 0 descriptor?? [ 1449.208868][T20410] udevd[20410]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1449.210020][ T5176] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1449.307038][T14203] Bluetooth: hci0: command 0x0406 tx timeout [ 1449.313316][T13662] ath6kl: Failed to submit usb control message: -110 [ 1449.359681][T13662] ath6kl: unable to send the bmi data to the device: -110 [ 1449.379027][T13662] ath6kl: Unable to send get target info: -110 [ 1449.386921][T19686] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1449.398448][T13662] ath6kl: Failed to init ath6kl core: -110 [ 1449.405614][T13662] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1449.546995][T14203] Bluetooth: hci4: command 0x0406 tx timeout [ 1449.597743][T19686] usb 5-1: Using ep0 maxpacket: 32 [ 1449.617009][T19686] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1449.638214][T19686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.662306][T19686] usb 5-1: Product: syz [ 1449.674864][T19686] usb 5-1: Manufacturer: syz [ 1449.690437][T19686] usb 5-1: SerialNumber: syz [ 1449.711566][T19686] usb 5-1: config 0 descriptor?? [ 1449.826980][T13834] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1449.940602][T19686] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 1449.967333][T19686] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1450.008826][T19686] usb 5-1: USB disconnect, device number 115 [ 1450.030721][T13834] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.053940][T13834] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.071305][T13834] usb 1-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1450.089350][T13834] usb 1-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1450.103066][T13834] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1450.140463][T13834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1450.169893][T13834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.183745][T13834] usb 1-1: Product: syz [ 1450.207128][T13834] usb 1-1: Manufacturer: syz [ 1450.211976][T13834] usb 1-1: SerialNumber: syz [ 1450.264177][T13834] usb 1-1: selecting invalid altsetting 1 [ 1450.286082][T13834] usb 1-1: selecting invalid altsetting 0 [ 1450.297524][T13834] usb 1-1: selecting invalid altsetting 0 [ 1450.304176][T13834] cdc_ncm 1-1:1.0: bind() failure [ 1450.327808][T19686] usb 3-1: USB disconnect, device number 106 [ 1450.370875][T13662] usb 2-1: USB disconnect, device number 11 [ 1451.233795][ T5176] usb 4-1: USB disconnect, device number 16 [ 1453.895980][T13834] usb 1-1: selecting invalid altsetting 0 [ 1453.904894][T13834] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 1453.936533][T13834] usb 1-1: USB disconnect, device number 111 [ 1454.088066][T21296] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4261'. [ 1454.176734][T13662] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1454.185505][ T5183] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1454.216842][T14373] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1454.390064][ T5183] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.405209][ T5183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.553599][T13662] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1454.570631][T14373] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1454.587170][ T5183] usb 3-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1454.601078][T13662] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1454.614311][T14373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.625469][T14373] usb 2-1: config 0 descriptor?? [ 1454.630617][T13662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.638886][ T5183] usb 3-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1454.658669][T13662] usb 5-1: config 0 descriptor?? [ 1454.665520][ T5183] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1454.696759][ T5183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1454.707278][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.716814][ T5183] usb 3-1: Product: syz [ 1454.726730][ T5183] usb 3-1: Manufacturer: syz [ 1454.731490][ T5183] usb 3-1: SerialNumber: syz [ 1454.769546][ T5183] usb 3-1: selecting invalid altsetting 1 [ 1454.781835][ T5183] usb 3-1: selecting invalid altsetting 0 [ 1454.801050][ T5183] usb 3-1: selecting invalid altsetting 0 [ 1454.809816][ T5183] cdc_ncm 3-1:1.0: bind() failure [ 1455.744990][T14373] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 1455.884930][T13834] usb 2-1: USB disconnect, device number 12 [ 1455.914387][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1456.278961][T13662] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 1456.400324][T21311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4265'. [ 1456.496060][ T29] audit: type=1326 audit(1720122483.140:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21309 comm="syz.1.4265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1456.863272][ T5183] usb 3-1: selecting invalid altsetting 0 [ 1456.964299][ T5183] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 1456.994943][ T5183] usb 3-1: USB disconnect, device number 107 [ 1457.074065][T21318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.330189][T13834] usb 5-1: USB disconnect, device number 116 [ 1457.516895][T13662] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1457.546829][ T5183] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1457.608220][T21335] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4272'. [ 1457.719069][T13662] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.741106][T13662] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1457.755837][ T5183] usb 3-1: Using ep0 maxpacket: 32 [ 1457.770780][T13662] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1457.786943][ T1148] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1457.795086][T13662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1457.804572][ T5183] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1457.818411][ T5183] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1457.834031][T13662] usb 4-1: SerialNumber: syz [ 1457.850537][ T5183] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1457.864829][ T5183] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1457.893006][ T5183] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1457.906964][ T5183] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1457.916177][ T5183] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1457.924895][ T5183] usb 3-1: Product: syz [ 1457.929403][ T5183] usb 3-1: Manufacturer: syz [ 1457.934140][ T5183] usb 3-1: SerialNumber: syz [ 1457.951263][ T5183] usb 3-1: config 0 descriptor?? [ 1457.961572][ T5183] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1457.975224][ T5183] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1457.989074][ T1148] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1458.016985][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.051119][ T1148] usb 1-1: config 0 descriptor?? [ 1458.070199][ T1148] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1458.070950][T13662] usb 4-1: 0:2 : does not exist [ 1458.089251][T13662] usb 4-1: unit 5: unexpected type 0x09 [ 1458.363941][T13662] usb 3-1: USB disconnect, device number 108 [ 1458.364000][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1458.460782][T13662] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1458.514040][ T5183] usb 4-1: USB disconnect, device number 17 [ 1458.650564][T21318] ldusb: No device or device unplugged -19 [ 1458.770744][T21316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.816803][T13834] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1459.009663][T13834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.036852][T13834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.064369][T13834] usb 5-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1459.094375][T13834] usb 5-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1459.120279][T13834] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1459.139616][T13834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.175553][T13834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.191363][T13834] usb 5-1: Product: syz [ 1459.195625][T13834] usb 5-1: Manufacturer: syz [ 1459.202838][T13834] usb 5-1: SerialNumber: syz [ 1459.223941][T13834] usb 5-1: selecting invalid altsetting 1 [ 1459.243435][T13834] usb 5-1: selecting invalid altsetting 0 [ 1459.263930][T13834] usb 5-1: selecting invalid altsetting 0 [ 1459.276746][T13834] cdc_ncm 5-1:1.0: bind() failure [ 1459.887132][ T5176] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1460.227529][ T5176] usb 4-1: Using ep0 maxpacket: 16 [ 1461.119374][ T5176] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1461.156849][ T5176] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1461.171223][ T5176] usb 4-1: string descriptor 0 read error: -22 [ 1461.179141][ T5176] usb 4-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 1461.195607][ T1148] usb 1-1: USB disconnect, device number 112 [ 1461.214907][ T5176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.332375][T21352] vlan0: entered promiscuous mode [ 1461.404078][T21352] vlan0 (unregistering): left promiscuous mode [ 1461.464699][T21356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1461.486806][ T5183] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1461.507191][ T29] audit: type=1326 audit(1720122488.160:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21353 comm="syz.1.4279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1461.719779][ T5183] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.837420][ T5183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.022578][ T5183] usb 3-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1462.186398][T13834] usb 5-1: selecting invalid altsetting 0 [ 1462.263330][ T5183] usb 3-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1462.303966][T13834] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 1462.346965][ T1148] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1462.368698][T13834] usb 5-1: USB disconnect, device number 117 [ 1462.385500][ T5183] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1462.423582][ T5183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1462.465844][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.501831][ T5176] usbhid 4-1:1.0: can't add hid device: -71 [ 1462.513680][ T5183] usb 3-1: Product: syz [ 1462.518243][ T5183] usb 3-1: Manufacturer: syz [ 1462.523767][ T5183] usb 3-1: SerialNumber: syz [ 1462.529967][ T5176] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1462.547861][ T29] audit: type=1326 audit(1720122489.180:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1462.556986][ T5176] usb 4-1: USB disconnect, device number 18 [ 1462.571374][ T5183] usb 3-1: selecting invalid altsetting 1 [ 1462.597033][ T1148] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1462.597971][ T5183] usb 3-1: selecting invalid altsetting 0 [ 1462.632826][ T29] audit: type=1326 audit(1720122489.190:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1462.662414][ T5183] usb 3-1: selecting invalid altsetting 0 [ 1462.673150][ T1148] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1462.678788][ T5183] cdc_ncm 3-1:1.0: bind() failure [ 1462.701662][T21364] syz_tun: entered allmulticast mode [ 1462.705930][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.710468][ T29] audit: type=1326 audit(1720122489.190:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1462.727354][ T1148] usb 1-1: config 0 descriptor?? [ 1462.744845][ T29] audit: type=1326 audit(1720122489.200:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1463.096139][ T29] audit: type=1326 audit(1720122489.200:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1463.372828][ T29] audit: type=1326 audit(1720122489.200:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1463.492825][ T29] audit: type=1326 audit(1720122489.240:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1463.531053][ T29] audit: type=1326 audit(1720122489.240:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1463.556687][ T29] audit: type=1326 audit(1720122489.240:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21360 comm="syz.4.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x7ffc0000 [ 1463.618075][T21363] syz_tun: left allmulticast mode [ 1463.789846][T21374] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4283'. [ 1463.936385][ T1148] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 1464.625635][ T5183] usb 3-1: selecting invalid altsetting 0 [ 1464.634030][ T5183] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 1464.674169][ T5183] usb 3-1: USB disconnect, device number 109 [ 1464.810312][T21385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4287'. [ 1465.143040][ T5183] usb 1-1: USB disconnect, device number 113 [ 1465.262431][T21391] can: request_module (can-proto-0) failed. [ 1465.486953][ T5176] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1465.576775][ T1148] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1465.738865][ T5176] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.800670][ T5176] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1465.810622][T21404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4292'. [ 1465.840001][ T1148] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1465.886328][ T5176] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1465.932591][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.965201][ T5176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.003538][ T1148] usb 5-1: config 0 descriptor?? [ 1466.032709][ T5176] usb 3-1: Product: చ [ 1466.047163][ T5176] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1466.051090][ T1148] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1466.082934][ T5176] usb 3-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1466.378731][ T5176] usb 3-1: 0:2 : does not exist [ 1466.430199][ T5176] usb 3-1: USB disconnect, device number 110 [ 1466.537331][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1466.537353][ T29] audit: type=1326 audit(1720123005.190:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21407 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1466.588858][ T29] audit: type=1326 audit(1720123005.220:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21407 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1466.595454][T21411] binder: 21410:21411 ioctl 4018620d 0 returned -22 [ 1466.611079][ T29] audit: type=1326 audit(1720123005.220:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21407 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1466.640231][ T29] audit: type=1326 audit(1720123005.220:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21407 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1466.662372][ T29] audit: type=1326 audit(1720123005.220:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21407 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1466.807125][ T29] audit: type=1326 audit(1720123005.220:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21407 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1466.897174][ T29] audit: type=1326 audit(1720123517.238:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21407 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1467.024214][ T29] audit: type=1326 audit(1720123517.238:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21407 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1467.419708][T20410] udevd[20410]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1467.689183][T21419] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 1467.717223][T21419] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 1467.787121][ T5176] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1468.007875][ T5176] usb 4-1: Using ep0 maxpacket: 16 [ 1468.020130][ T5176] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1468.062155][ T5176] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1468.091092][ T5176] usb 4-1: string descriptor 0 read error: -22 [ 1468.102685][ T5176] usb 4-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 1468.129110][ T5176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.259302][ T1148] usb 5-1: USB disconnect, device number 118 [ 1468.337396][T14373] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1468.435866][T21426] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4298'. [ 1468.494481][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1468.548735][T14373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.571270][T14373] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.611434][T14373] usb 1-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1468.711085][T14373] usb 1-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1468.800210][T14373] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1468.822036][T14373] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1468.839889][T14373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.897398][T14373] usb 1-1: Product: syz [ 1468.919374][T14373] usb 1-1: Manufacturer: syz [ 1468.936795][ T5183] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1468.979275][T14373] usb 1-1: SerialNumber: syz [ 1469.007009][T14373] usb 1-1: selecting invalid altsetting 1 [ 1469.034303][T14373] usb 1-1: selecting invalid altsetting 0 [ 1469.042688][T14373] usb 1-1: selecting invalid altsetting 0 [ 1469.050372][T14373] cdc_ncm 1-1:1.0: bind() failure [ 1469.088020][ T5176] usbhid 4-1:1.0: can't add hid device: -71 [ 1469.111554][ T5176] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1469.162454][ T5176] usb 4-1: USB disconnect, device number 19 [ 1469.169471][ T5183] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1469.253792][ T5183] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1469.301369][ T5183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.528287][ T5183] usb 3-1: config 0 descriptor?? [ 1469.546879][T14203] Bluetooth: hci4: command 0x0406 tx timeout [ 1470.481769][ T5183] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 1470.512827][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4304'. [ 1470.537658][T13662] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1470.626711][ T29] audit: type=1326 audit(1720123521.278:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21447 comm="syz.3.4304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x0 [ 1470.756836][T13662] usb 2-1: Using ep0 maxpacket: 16 [ 1470.846673][T13662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1470.987069][T13662] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1471.017374][T13662] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1471.063582][T13662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.127395][T13662] usb 2-1: config 0 descriptor?? [ 1471.382185][ T29] audit: type=1326 audit(1720123522.038:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21453 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x7ffc0000 [ 1471.682148][ T5183] usb 3-1: USB disconnect, device number 111 [ 1471.753647][T21446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.754626][T14373] usb 1-1: selecting invalid altsetting 0 [ 1471.792791][T21446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.802868][T14373] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 1471.860597][T14373] usb 1-1: USB disconnect, device number 114 [ 1471.917204][T13662] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 1471.945207][T13662] hid-generic 0003:0158:0100.000F: unexpected long global item [ 1471.974962][T13662] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 1472.107798][T13662] usb 2-1: USB disconnect, device number 13 [ 1472.320274][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4310'. [ 1472.346156][T21472] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 1472.367130][T21472] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 1472.387104][T21468] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1472.706830][T14373] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1472.916279][T14373] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1472.949619][T14373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.998651][T14373] usb 3-1: config 0 descriptor?? [ 1473.461880][T21486] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1473.487232][ T9] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1473.718007][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1473.738689][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xDF has invalid wMaxPacketSize 0 [ 1473.759531][ T9] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1473.776621][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.794969][ T9] usb 1-1: Product: syz [ 1473.799389][ T9] usb 1-1: Manufacturer: syz [ 1473.804035][ T9] usb 1-1: SerialNumber: syz [ 1473.807022][T13662] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1473.823544][ T9] usb 1-1: config 0 descriptor?? [ 1474.009186][T13662] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1474.037093][T13662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.078867][T21485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.090747][T13662] usb 5-1: config 0 descriptor?? [ 1474.123386][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4315'. [ 1474.126482][T21485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.177309][T14373] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 1474.192113][ T9] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 1474.227242][T14373] usb 3-1: USB disconnect, device number 112 [ 1474.240712][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1474.240761][ T29] audit: type=1326 audit(1720124036.896:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21487 comm="syz.1.4315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1474.253624][ T9] usb 1-1: USB disconnect, device number 115 [ 1474.280526][T14203] Bluetooth: hci1: command 0x0406 tx timeout [ 1475.176841][ T9] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1475.284526][T13662] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 1475.332358][T13662] usb 5-1: USB disconnect, device number 119 [ 1475.380148][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1475.404756][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1475.433356][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.458966][ T9] usb 1-1: config 0 descriptor?? [ 1475.996777][T14373] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1476.220442][T14373] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.267781][T14373] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.296796][T14373] usb 3-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1476.319268][T14373] usb 3-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1476.349188][T14373] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1476.377539][T14373] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1476.403989][T14373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.437511][T14373] usb 3-1: Product: syz [ 1476.441756][T14373] usb 3-1: Manufacturer: syz [ 1476.446386][T14373] usb 3-1: SerialNumber: syz [ 1476.467490][T14373] usb 3-1: selecting invalid altsetting 1 [ 1476.486669][T14373] usb 3-1: selecting invalid altsetting 0 [ 1476.492747][T14373] usb 3-1: selecting invalid altsetting 0 [ 1476.511392][T14373] cdc_ncm 3-1:1.0: bind() failure [ 1476.632922][ T9] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 1477.552881][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 1477.918669][ T9] usb 1-1: USB disconnect, device number 116 [ 1478.402729][T21523] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 1478.416009][T14373] usb 3-1: selecting invalid altsetting 0 [ 1478.443582][T14373] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 1478.510282][T21523] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 1478.558147][T14373] usb 3-1: USB disconnect, device number 113 [ 1478.780739][T21533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1478.825583][ T29] audit: type=1326 audit(1720124041.476:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21529 comm="syz.4.4327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x0 [ 1479.038244][T14373] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1479.261214][T14373] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1479.290331][T14373] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.332407][T14373] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1479.368393][T14373] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.404483][T14373] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.437769][T14373] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1479.482593][T14373] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1479.502180][T14373] usb 3-1: Product: syz [ 1479.513267][T14373] usb 3-1: Manufacturer: syz [ 1479.584115][T14373] cdc_wdm 3-1:1.0: skipping garbage [ 1479.611347][T14373] cdc_wdm 3-1:1.0: skipping garbage [ 1479.648482][T14373] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1479.669686][T14373] cdc_wdm 3-1:1.0: Unknown control protocol [ 1479.798244][T21527] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 1479.860480][T14373] usb 3-1: USB disconnect, device number 114 [ 1480.107118][T14203] Bluetooth: hci1: command 0x0406 tx timeout [ 1480.306786][T13662] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1480.437030][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1480.488687][T13662] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1480.503377][T13662] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1480.515067][T13662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.526986][T13662] usb 5-1: config 0 descriptor?? [ 1480.631463][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.656691][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.673400][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1480.684984][ T9] usb 4-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1480.700775][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1480.719029][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1480.729539][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.738209][ T9] usb 4-1: Product: syz [ 1480.742506][ T9] usb 4-1: Manufacturer: syz [ 1480.748036][ T9] usb 4-1: SerialNumber: syz [ 1480.767252][ T9] usb 4-1: selecting invalid altsetting 1 [ 1480.773146][ T9] usb 4-1: selecting invalid altsetting 0 [ 1480.783509][ T9] usb 4-1: selecting invalid altsetting 0 [ 1480.789939][ T9] cdc_ncm 4-1:1.0: bind() failure [ 1481.836765][ T5183] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1481.972238][T13662] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 1482.026812][ T5183] usb 1-1: Using ep0 maxpacket: 16 [ 1482.042809][ T5183] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1482.052762][ T5183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.061160][ T5183] usb 1-1: Product: syz [ 1482.065839][ T5183] usb 1-1: Manufacturer: syz [ 1482.071515][ T5183] usb 1-1: SerialNumber: syz [ 1482.096430][ T5183] usb 1-1: config 0 descriptor?? [ 1482.123626][ T5183] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1482.689836][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4342'. [ 1482.726393][ T29] audit: type=1326 audit(1720124045.376:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21586 comm="syz.2.4342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6b9375bd9 code=0x0 [ 1483.027274][ T5183] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1483.301617][ T9] usb 4-1: selecting invalid altsetting 0 [ 1483.370449][ T5183] usb 5-1: USB disconnect, device number 120 [ 1483.412427][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1483.416327][T13662] usb 1-1: USB disconnect, device number 117 [ 1483.465914][ T9] usb 4-1: USB disconnect, device number 20 [ 1483.956701][ T5176] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1484.237146][T13662] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1484.524540][T13662] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1484.580308][T13662] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.790309][T13662] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1484.826727][T13662] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.862050][ T5176] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.864406][T13662] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.892294][ T5176] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.920738][ T5176] usb 3-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1484.932108][ T5176] usb 3-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1484.945790][ T5176] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1484.956089][ T5176] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1484.959190][T13662] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1484.965237][ T5176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.976782][T13662] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1485.008076][ T5176] usb 3-1: Product: syz [ 1485.024190][ T5176] usb 3-1: Manufacturer: syz [ 1485.026511][T13662] usb 2-1: Product: syz [ 1485.028943][ T5176] usb 3-1: SerialNumber: syz [ 1485.038459][T13662] usb 2-1: Manufacturer: syz [ 1485.049817][ T5176] usb 3-1: selecting invalid altsetting 1 [ 1485.059511][T13662] cdc_wdm 2-1:1.0: skipping garbage [ 1485.064907][T13662] cdc_wdm 2-1:1.0: skipping garbage [ 1485.072130][ T5176] usb 3-1: selecting invalid altsetting 0 [ 1485.077846][T13662] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1485.084310][ T5176] usb 3-1: selecting invalid altsetting 0 [ 1485.084722][T13662] cdc_wdm 2-1:1.0: Unknown control protocol [ 1485.096640][T14373] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1485.104863][ T5176] cdc_ncm 3-1:1.0: bind() failure [ 1485.185105][T21594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4343'. [ 1485.275771][T21603] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 1485.296881][T14373] usb 1-1: Using ep0 maxpacket: 16 [ 1485.313599][T14373] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1485.332428][T14373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.341260][T13662] usb 2-1: USB disconnect, device number 14 [ 1485.546143][T14373] usb 1-1: Product: syz [ 1485.561233][T14373] usb 1-1: Manufacturer: syz [ 1485.593646][T14373] usb 1-1: SerialNumber: syz [ 1485.635884][T14373] usb 1-1: config 0 descriptor?? [ 1485.665533][T14373] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1486.274631][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.377416][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1486.387899][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1486.406376][ T29] audit: type=1326 audit(1720124049.056:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21630 comm="syz.1.4355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1486.466823][ T1148] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1486.602651][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1486.614245][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.625815][T14373] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1486.626454][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1486.657719][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1486.692326][ T1148] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1486.706829][T14373] usb 1-1: USB disconnect, device number 118 [ 1486.721030][ T1148] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1486.738299][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1486.770360][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.780520][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1486.813070][ T9] usb 4-1: Product: syz [ 1486.850252][ T9] usb 4-1: Manufacturer: syz [ 1486.881400][ T1148] usb 5-1: config 0 descriptor?? [ 1486.906011][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1487.122503][T13834] usb 4-1: USB disconnect, device number 21 [ 1487.375249][T14203] Bluetooth: Unexpected start frame (len 10) [ 1487.677018][T19686] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1487.694658][ T5176] usb 3-1: selecting invalid altsetting 0 [ 1487.711359][ T5176] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 1487.731201][ T5176] usb 3-1: USB disconnect, device number 115 [ 1487.838144][ T1148] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 1487.846963][T13662] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1487.941476][T19686] usb 2-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 1487.959761][T19686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.991587][T19686] usb 2-1: Product: syz [ 1487.995833][T19686] usb 2-1: Manufacturer: syz [ 1488.021156][T19686] usb 2-1: SerialNumber: syz [ 1488.098191][T19686] usb 2-1: config 0 descriptor?? [ 1488.141851][T19686] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1488.686720][T13662] usb 1-1: Using ep0 maxpacket: 16 [ 1488.700760][T13662] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1488.716537][T13662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.724743][T13662] usb 1-1: Product: syz [ 1488.729043][T13662] usb 1-1: Manufacturer: syz [ 1488.733674][T13662] usb 1-1: SerialNumber: syz [ 1488.761941][T13662] usb 1-1: config 0 descriptor?? [ 1488.786291][T13662] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1489.065606][T14203] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1489.240966][ T5176] usb 5-1: USB disconnect, device number 121 [ 1489.697533][T13662] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1489.728422][ T1148] usb 1-1: USB disconnect, device number 119 [ 1489.787614][ T5176] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1489.992887][ T5176] usb 5-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 1490.018008][ T5176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1490.049547][ T5176] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1490.067771][ T5176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.086635][ T5176] usb 5-1: Product: చ [ 1490.106831][ T5176] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1490.176723][ T5176] usb 5-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1490.449825][T13662] usb 2-1: USB disconnect, device number 15 [ 1490.567055][ T5176] usb 5-1: 0:2 : does not exist [ 1490.627189][ T5176] usb 5-1: USB disconnect, device number 122 [ 1490.796784][ T5183] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1490.825114][T21684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4366'. [ 1490.861049][T21686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1490.877195][ T29] audit: type=1326 audit(1720124053.526:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21678 comm="syz.1.4366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1490.963427][T20406] udevd[20406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1491.000118][ T5183] usb 1-1: device descriptor read/64, error -71 [ 1491.015405][T13662] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1491.216994][T14373] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1491.239875][T13662] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1491.256825][T13662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.292362][T13662] usb 3-1: config 0 descriptor?? [ 1491.306954][ T5183] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1491.338742][T13662] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1491.436915][T14373] usb 4-1: Using ep0 maxpacket: 32 [ 1491.474751][T14373] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1491.485131][T14373] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1491.497416][ T5183] usb 1-1: device descriptor read/64, error -71 [ 1491.515624][T14373] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1491.550963][T14373] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1491.566469][T14373] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1491.578279][T14373] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1491.588777][T14373] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1491.597574][T14373] usb 4-1: Product: syz [ 1491.603445][T14373] usb 4-1: Manufacturer: syz [ 1491.609410][T14373] usb 4-1: SerialNumber: syz [ 1491.621195][ T5183] usb usb1-port1: attempt power cycle [ 1491.632032][T14373] usb 4-1: config 0 descriptor?? [ 1491.643812][T14373] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1491.661700][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4372'. [ 1491.663899][T14373] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1491.851629][T14373] usb 4-1: USB disconnect, device number 22 [ 1491.857679][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1491.888804][T14373] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1492.027050][T19686] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1492.046959][ T5183] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1492.075441][T21686] ldusb: No device or device unplugged -19 [ 1492.097622][ T5183] usb 1-1: device descriptor read/8, error -71 [ 1492.119667][T21685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.248361][T19686] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1492.265648][T19686] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1492.287098][T19686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.324425][T19686] usb 2-1: config 0 descriptor?? [ 1492.378735][ T5183] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1492.430614][ T5183] usb 1-1: device descriptor read/8, error -71 [ 1492.557985][ T5183] usb usb1-port1: unable to enumerate USB device [ 1492.995100][T13662] gspca_stv06xx: I2C: Read error writing address: -71 [ 1493.018037][T13662] usb 3-1: USB disconnect, device number 116 [ 1493.040205][ T5183] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1493.214166][T19686] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 1493.234522][ T5183] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.257751][ T5183] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1493.275888][ T5183] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1493.286371][ T5183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.301186][ T5183] usb 4-1: Product: చ [ 1493.305383][ T5183] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1493.346270][ T5183] usb 4-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1493.626042][ T5183] usb 4-1: 0:2 : does not exist [ 1493.657125][ T5183] usb 4-1: USB disconnect, device number 23 [ 1493.906277][T21716] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 1493.915744][T21716] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 1493.956339][T20406] udevd[20406]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1494.405382][T14203] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1494.553407][ T29] audit: type=1326 audit(1720124057.206:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1494.596823][T14373] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1494.606303][ T29] audit: type=1326 audit(1720124057.206:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1494.684981][ T29] audit: type=1326 audit(1720124057.206:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1494.793052][ T29] audit: type=1326 audit(1720124057.206:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1494.828551][ T5183] usb 2-1: USB disconnect, device number 16 [ 1494.862454][T14373] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1494.871741][T21733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4383'. [ 1494.906428][T14373] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.946154][T14373] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1494.975067][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4384'. [ 1494.976847][ T29] audit: type=1326 audit(1720124057.206:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1495.019433][T14373] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1495.040290][T14373] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1495.064880][T14373] usb 3-1: Manufacturer: syz [ 1495.107484][T14373] usb 3-1: config 0 descriptor?? [ 1495.136146][ T29] audit: type=1326 audit(1720124057.206:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1495.260657][ T29] audit: type=1326 audit(1720124057.206:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1495.386720][ T29] audit: type=1326 audit(1720124057.206:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1495.471943][ T29] audit: type=1326 audit(1720124057.206:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21727 comm="syz.0.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x7ffc0000 [ 1495.627470][T14203] Bluetooth: hci1: command 0x0406 tx timeout [ 1496.170713][T21750] geneve2: entered promiscuous mode [ 1496.200298][T21750] geneve2: entered allmulticast mode [ 1496.768395][T21756] syz_tun: entered allmulticast mode [ 1496.815343][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1496.815367][ T29] audit: type=1326 audit(1720124571.461:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21754 comm="syz.1.4392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1497.196764][ T5176] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1497.227151][ T1148] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1497.333238][T13834] usb 3-1: USB disconnect, device number 117 [ 1497.398015][ T5176] usb 4-1: Using ep0 maxpacket: 32 [ 1497.410566][ T5176] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1497.442097][ T1148] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.455169][ T5176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.477285][ T1148] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1497.491537][ T5176] usb 4-1: Product: syz [ 1497.501203][ T5176] usb 4-1: Manufacturer: syz [ 1497.512829][ T5176] usb 4-1: SerialNumber: syz [ 1497.524093][ T1148] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1497.538155][T21754] syz_tun: left allmulticast mode [ 1497.577530][ T5176] usb 4-1: config 0 descriptor?? [ 1497.582759][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1497.605837][ T5176] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1497.617000][ T1148] usb 1-1: SerialNumber: syz [ 1497.810657][ T29] audit: type=1326 audit(1720124572.461:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1497.886008][ T1148] usb 1-1: 0:2 : does not exist [ 1497.894077][ T29] audit: type=1326 audit(1720124572.471:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1497.926851][ T1148] usb 1-1: unit 5: unexpected type 0x09 [ 1497.947530][T13834] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1497.993157][ T29] audit: type=1326 audit(1720124572.471:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1498.014926][ C1] vkms_vblank_simulate: vblank timer overrun [ 1498.063610][ T29] audit: type=1326 audit(1720124572.471:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1498.123975][ T5176] gspca_stk1135: reg_w 0x0 err -71 [ 1498.130649][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 1498.146381][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4397'. [ 1498.169824][ T29] audit: type=1326 audit(1720124572.471:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1498.176220][ T5176] gspca_stk1135: Sensor write failed [ 1498.214389][T13834] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1498.233037][ T29] audit: type=1326 audit(1720124572.471:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1498.264984][T13834] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.14 [ 1498.286808][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 1498.308415][T13834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.313227][ T29] audit: type=1326 audit(1720124572.471:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1498.347423][ T5176] gspca_stk1135: Sensor write failed [ 1498.354509][ T29] audit: type=1326 audit(1720124572.471:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1498.390066][T14373] usb 1-1: USB disconnect, device number 124 [ 1498.402819][ T29] audit: type=1326 audit(1720124572.471:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21767 comm="syz.1.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x7ffc0000 [ 1498.407316][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 1498.436475][T13834] usb 3-1: config 0 descriptor?? [ 1498.446896][ T5183] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1498.488059][ T5176] gspca_stk1135: Sensor read failed [ 1498.495557][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 1498.502700][ T5176] gspca_stk1135: Sensor read failed [ 1498.511374][ T5176] gspca_stk1135: Detected sensor type unknown (0x0) [ 1498.524325][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 1498.531220][ T5176] gspca_stk1135: Sensor read failed [ 1498.539195][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 1498.555566][ T5176] gspca_stk1135: Sensor read failed [ 1498.577930][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 1498.589899][ T5176] gspca_stk1135: Sensor write failed [ 1498.615487][ T5176] gspca_stk1135: serial bus timeout: status=0x00 [ 1498.626290][ T5176] gspca_stk1135: Sensor write failed [ 1498.634738][ T5176] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1498.643304][ T5183] usb 5-1: Using ep0 maxpacket: 16 [ 1498.650713][ T5176] usb 4-1: USB disconnect, device number 24 [ 1498.707157][ T5183] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1498.716988][ T5183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.747146][ T5183] usb 5-1: Product: syz [ 1498.758484][ T5183] usb 5-1: Manufacturer: syz [ 1498.779087][ T5183] usb 5-1: SerialNumber: syz [ 1498.796264][ T5183] usb 5-1: config 0 descriptor?? [ 1498.815726][ T5183] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1499.296893][ T5176] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1499.975433][ T5183] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 1500.050550][ T5183] usb 5-1: USB disconnect, device number 123 [ 1500.177782][T13834] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 1500.288661][ T5176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.302660][ T5176] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.328493][ T5176] usb 2-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1500.362720][ T5176] usb 2-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1500.382385][ T5176] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1500.401273][ T5176] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1500.416774][ T5176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.425051][ T5176] usb 2-1: Product: syz [ 1500.435257][ T5176] usb 2-1: Manufacturer: syz [ 1500.446312][ T5176] usb 2-1: SerialNumber: syz [ 1500.486097][ T5176] usb 2-1: selecting invalid altsetting 1 [ 1500.502602][ T5176] usb 2-1: selecting invalid altsetting 0 [ 1500.509506][ T5176] usb 2-1: selecting invalid altsetting 0 [ 1500.515509][ T5176] cdc_ncm 2-1:1.0: bind() failure [ 1500.646993][T14373] usb 3-1: USB disconnect, device number 118 [ 1502.086669][T21804] syz_tun: entered allmulticast mode [ 1502.197053][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1502.197074][ T29] audit: type=1326 audit(1720125088.851:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21801 comm="syz.4.4406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x0 [ 1503.105983][T15338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.143867][T13454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1503.162569][T13454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1503.173081][T13454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1503.185526][T15338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.215302][T13454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1503.228388][T13454] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1503.237787][T15338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1503.248807][T13454] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1503.277199][T13454] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1503.319220][T21801] syz_tun: left allmulticast mode [ 1503.570152][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4410'. [ 1503.645693][T15338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.685070][T15338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.700413][T15338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1503.740959][T21828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1503.751791][ T29] audit: type=1326 audit(1720125090.401:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21822 comm="syz.3.4410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x0 [ 1503.967089][T15338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.978128][T15338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.993002][T15338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1504.191529][T15338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1504.222552][T15338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.256206][T15338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1504.456806][T14373] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1504.671107][T14373] usb 1-1: Using ep0 maxpacket: 32 [ 1504.695829][T14373] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1504.720238][T14373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.740983][T14373] usb 1-1: Product: syz [ 1504.752183][T14373] usb 1-1: Manufacturer: syz [ 1504.776674][T14373] usb 1-1: SerialNumber: syz [ 1504.802676][T14373] usb 1-1: config 0 descriptor?? [ 1504.845883][T14373] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1505.078114][ T5176] usb 2-1: selecting invalid altsetting 0 [ 1505.094330][ T5176] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 1505.138512][ T5176] usb 2-1: USB disconnect, device number 17 [ 1505.196387][T15338] bridge_slave_1: left allmulticast mode [ 1505.205052][T15338] bridge_slave_1: left promiscuous mode [ 1505.233178][T15338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.307163][T13454] Bluetooth: hci2: command tx timeout [ 1505.322463][T14373] gspca_stk1135: reg_w 0x0 err -71 [ 1505.348898][T15338] bridge_slave_0: left allmulticast mode [ 1505.367483][T15338] bridge_slave_0: left promiscuous mode [ 1505.373458][T15338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.379664][T14373] gspca_stk1135: serial bus timeout: status=0x00 [ 1505.405022][T14373] gspca_stk1135: Sensor write failed [ 1505.427691][T14373] gspca_stk1135: serial bus timeout: status=0x00 [ 1505.454154][T14373] gspca_stk1135: Sensor write failed [ 1505.470120][T14373] gspca_stk1135: serial bus timeout: status=0x00 [ 1505.490791][T14373] gspca_stk1135: Sensor read failed [ 1505.509141][T14373] gspca_stk1135: serial bus timeout: status=0x00 [ 1505.522523][T14373] gspca_stk1135: Sensor read failed [ 1505.541347][T14373] gspca_stk1135: Detected sensor type unknown (0x0) [ 1505.569817][T14373] gspca_stk1135: serial bus timeout: status=0x00 [ 1505.585238][T14373] gspca_stk1135: Sensor read failed [ 1505.605986][T14373] gspca_stk1135: serial bus timeout: status=0x00 [ 1505.635009][T14373] gspca_stk1135: Sensor read failed [ 1505.648746][T14373] gspca_stk1135: serial bus timeout: status=0x00 [ 1505.673666][T14373] gspca_stk1135: Sensor write failed [ 1505.686909][T14373] gspca_stk1135: serial bus timeout: status=0x00 [ 1505.716797][T14373] gspca_stk1135: Sensor write failed [ 1505.742824][T14373] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1505.786344][T14373] usb 1-1: USB disconnect, device number 125 [ 1505.838769][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1506.067886][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1506.100423][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1506.135128][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1506.201198][ T9] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1506.262473][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.298559][ T9] usb 2-1: config 0 descriptor?? [ 1506.336928][ T1148] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1506.547117][ T1148] usb 4-1: Using ep0 maxpacket: 16 [ 1506.577701][ T1148] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1506.621477][ T1148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.651893][ T1148] usb 4-1: Product: syz [ 1506.656690][ T1148] usb 4-1: Manufacturer: syz [ 1506.662289][ T1148] usb 4-1: SerialNumber: syz [ 1506.710906][ T1148] usb 4-1: config 0 descriptor?? [ 1506.761700][ T1148] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1506.960847][T15338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.996237][T15338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.024053][T15338] bond0 (unregistering): Released all slaves [ 1507.036471][T21872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.059807][T21872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.069434][T13454] Bluetooth: hci5: command 0x0406 tx timeout [ 1507.086215][T21850] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1507.127260][ T9] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 1507.134799][ T9] hid-generic 0003:0158:0100.0010: unexpected long global item [ 1507.144292][ T9] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22 [ 1507.176278][T21850] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1507.390715][T13454] Bluetooth: hci2: command tx timeout [ 1507.423553][T21816] chnl_net:caif_netlink_parms(): no params data found [ 1507.721976][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4423'. [ 1507.737743][ T1148] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 1507.839928][T14373] usb 2-1: USB disconnect, device number 18 [ 1507.909133][ T1148] usb 4-1: USB disconnect, device number 25 [ 1507.993164][ T29] audit: type=1326 audit(1720125094.641:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21876 comm="syz.0.4423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x0 [ 1508.373735][T21816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.443824][T21816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.476998][T21816] bridge_slave_0: entered allmulticast mode [ 1508.518329][T21816] bridge_slave_0: entered promiscuous mode [ 1508.549698][T21816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.575113][T21816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.613123][T21816] bridge_slave_1: entered allmulticast mode [ 1508.638688][T21816] bridge_slave_1: entered promiscuous mode [ 1508.970874][T15338] hsr_slave_0: left promiscuous mode [ 1509.029958][T15338] hsr_slave_1: left promiscuous mode [ 1509.087273][T15338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.095423][T15338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.115951][T15338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.125976][T15338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.469547][T13454] Bluetooth: hci2: command tx timeout [ 1510.697048][T15338] veth1_macvtap: left promiscuous mode [ 1510.741986][T15338] veth0_macvtap: left promiscuous mode [ 1510.777160][T15338] veth1_vlan: left promiscuous mode [ 1510.821699][T15338] veth0_vlan: left promiscuous mode [ 1511.337943][T13662] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1511.601073][T13662] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.621920][T13662] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.682505][T13662] usb 5-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1511.726932][T13662] usb 5-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1511.769399][T13662] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1511.789138][T13662] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1511.808087][T13662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.826461][T13662] usb 5-1: Product: syz [ 1511.831453][T13662] usb 5-1: Manufacturer: syz [ 1511.843532][T13662] usb 5-1: SerialNumber: syz [ 1511.871800][T13662] usb 5-1: selecting invalid altsetting 1 [ 1511.877915][T13662] usb 5-1: selecting invalid altsetting 0 [ 1511.883954][T13662] usb 5-1: selecting invalid altsetting 0 [ 1511.890673][T13662] cdc_ncm 5-1:1.0: bind() failure [ 1512.599449][T13454] Bluetooth: hci2: command tx timeout [ 1514.267997][ T9] IPVS: starting estimator thread 0... [ 1514.360745][T21940] IPVS: using max 24 ests per chain, 57600 per kthread [ 1514.516138][T15338] team0 (unregistering): Port device team_slave_1 removed [ 1515.599956][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1515.775086][ T29] audit: type=1326 audit(1720125102.401:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21947 comm="syz.1.4434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1515.878724][T21816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.943068][T21816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.096310][T13662] usb 5-1: selecting invalid altsetting 0 [ 1516.126242][T21954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1516.174822][T13662] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 1516.188927][T21816] team0: Port device team_slave_0 added [ 1516.217852][T13662] usb 5-1: USB disconnect, device number 124 [ 1516.262523][T21816] team0: Port device team_slave_1 added [ 1516.481355][T21816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.491342][T21816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.573891][T21816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.620377][T21816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.646951][T21816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.724673][T21816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.827904][ T1148] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1516.966125][T15338] IPVS: stop unused estimator thread 0... [ 1516.968563][T21816] hsr_slave_0: entered promiscuous mode [ 1517.005862][T21816] hsr_slave_1: entered promiscuous mode [ 1517.027389][ T1148] usb 1-1: Using ep0 maxpacket: 16 [ 1517.043200][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1517.083394][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1517.127969][ T1148] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1517.187105][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.225350][ T1148] usb 1-1: config 0 descriptor?? [ 1517.837754][T13662] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1517.850117][T21957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.882161][T21957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.965968][ T1148] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 1517.983886][ T1148] hid-generic 0003:0158:0100.0011: unexpected long global item [ 1518.004886][ T1148] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 1518.006069][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1518.099635][T13662] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.131366][T13662] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1518.201507][T21997] team0: entered promiscuous mode [ 1518.212920][T13662] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1518.218891][T21997] team_slave_1: entered promiscuous mode [ 1518.295968][T13662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1518.331504][ T1148] usb 1-1: USB disconnect, device number 126 [ 1518.401112][T13662] usb 4-1: SerialNumber: syz [ 1518.504534][T21993] team0: left promiscuous mode [ 1518.511933][T21993] team_slave_1: left promiscuous mode [ 1518.709732][T13662] usb 4-1: 0:2 : does not exist [ 1518.736855][T13662] usb 4-1: unit 5: unexpected type 0x09 [ 1518.895889][T21816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1518.919633][T21816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1518.986888][T21816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1519.010884][ T5138] usb 4-1: USB disconnect, device number 26 [ 1519.028981][T21816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1519.093622][T20410] udevd[20410]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1519.174061][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1519.233593][ T29] audit: type=1326 audit(1720125105.871:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22005 comm="syz.4.4446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x0 [ 1519.256744][ T5183] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1519.373816][T21816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.431931][T21816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.458505][ T5183] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.474725][ T5183] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1519.486950][T13834] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1519.497488][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.504726][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.522801][ T5183] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1519.533500][ T5183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1519.557234][T14373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.564480][T14373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.573965][ T5183] usb 2-1: SerialNumber: syz [ 1519.729426][T13834] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.783161][T13834] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1519.806285][ T5183] usb 2-1: 0:2 : does not exist [ 1519.819141][ T5183] usb 2-1: unit 5: unexpected type 0x09 [ 1519.870007][T13834] usb 1-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1519.932127][T13834] usb 1-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1519.961085][T13834] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1519.989694][T13834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1520.025276][T13834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.066093][T13834] usb 1-1: Product: syz [ 1520.110801][T13834] usb 1-1: Manufacturer: syz [ 1520.115542][T13834] usb 1-1: SerialNumber: syz [ 1520.168683][T13834] usb 1-1: selecting invalid altsetting 1 [ 1520.219375][T13834] usb 1-1: selecting invalid altsetting 0 [ 1520.225599][T13834] usb 1-1: selecting invalid altsetting 0 [ 1520.278864][T13834] cdc_ncm 1-1:1.0: bind() failure [ 1520.508266][ T5183] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1520.859662][ T5183] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1520.897187][ T5183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.925330][T21816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.932522][ T5183] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1520.934093][ T5183] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1520.990838][ T5183] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1521.019662][ T5183] usb 4-1: Manufacturer: syz [ 1521.049517][T22038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4450'. [ 1521.053113][ T5183] usb 4-1: config 0 descriptor?? [ 1521.408597][T21816] veth0_vlan: entered promiscuous mode [ 1521.465548][T21816] veth1_vlan: entered promiscuous mode [ 1521.925127][ T5183] usb 2-1: USB disconnect, device number 19 [ 1522.001825][T21816] veth0_macvtap: entered promiscuous mode [ 1522.074508][T21816] veth1_macvtap: entered promiscuous mode [ 1522.295776][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.334857][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.382543][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.431876][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.485532][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.542619][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.576315][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.640755][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.679519][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.731594][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.813119][T21816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.886158][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.950824][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.022423][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.056141][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.080221][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.114749][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.143302][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.187422][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.214504][T21816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.257649][T21816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.311956][T21816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.379747][T21816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.440201][ T5138] IPVS: starting estimator thread 0... [ 1523.454622][T21816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.509996][ T1148] usb 4-1: USB disconnect, device number 27 [ 1523.516699][T21816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.578516][T21816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.637892][T22066] IPVS: using max 20 ests per chain, 48000 per kthread [ 1524.076372][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.114224][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.203856][T14177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.250939][T14177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.360921][T13834] usb 1-1: selecting invalid altsetting 0 [ 1524.392992][T13834] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 1524.467562][T13834] usb 1-1: USB disconnect, device number 127 [ 1525.685995][T22089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1525.751719][ T29] audit: type=1326 audit(1720125112.391:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22087 comm="syz.4.4458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d7575bd9 code=0x0 [ 1525.870303][T22098] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4405'. [ 1525.925224][T22101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4460'. [ 1526.386269][T13662] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1526.826884][T13662] usb 4-1: Using ep0 maxpacket: 32 [ 1526.857424][T13662] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1527.578159][T13662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.586318][T13662] usb 4-1: Product: syz [ 1527.594198][T13662] usb 4-1: Manufacturer: syz [ 1527.599381][T13662] usb 4-1: SerialNumber: syz [ 1527.617465][T13662] usb 4-1: config 0 descriptor?? [ 1527.643199][T13662] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1527.898823][ T5183] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1527.970382][T22123] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1527.987334][T22123] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1528.082042][T13662] gspca_stk1135: reg_w 0x0 err -71 [ 1528.112029][T13662] gspca_stk1135: serial bus timeout: status=0x00 [ 1528.137006][T13662] gspca_stk1135: Sensor write failed [ 1528.148760][ T5183] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.174020][T13662] gspca_stk1135: serial bus timeout: status=0x00 [ 1528.187392][ T5183] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.198952][T13662] gspca_stk1135: Sensor write failed [ 1528.206671][T13662] gspca_stk1135: serial bus timeout: status=0x00 [ 1528.236322][ T5183] usb 1-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1528.250058][T13662] gspca_stk1135: Sensor read failed [ 1528.266915][T13662] gspca_stk1135: serial bus timeout: status=0x00 [ 1528.273598][T13662] gspca_stk1135: Sensor read failed [ 1528.281440][ T5183] usb 1-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1528.305631][T13662] gspca_stk1135: Detected sensor type unknown (0x0) [ 1528.321210][T13662] gspca_stk1135: serial bus timeout: status=0x00 [ 1528.329284][ T5183] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1528.353151][ T5183] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1528.364140][T13662] gspca_stk1135: Sensor read failed [ 1528.372286][T13662] gspca_stk1135: serial bus timeout: status=0x00 [ 1528.380316][ T5183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.406771][T13662] gspca_stk1135: Sensor read failed [ 1528.417584][ T5183] usb 1-1: Product: syz [ 1528.426764][T13662] gspca_stk1135: serial bus timeout: status=0x00 [ 1528.436690][ T5183] usb 1-1: Manufacturer: syz [ 1528.446664][T13662] gspca_stk1135: Sensor write failed [ 1528.452756][T13662] gspca_stk1135: serial bus timeout: status=0x00 [ 1528.471173][ T5183] usb 1-1: SerialNumber: syz [ 1528.727414][T13662] gspca_stk1135: Sensor write failed [ 1528.735228][T13662] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1528.748435][ T5183] usb 1-1: selecting invalid altsetting 1 [ 1528.754839][ T5183] usb 1-1: selecting invalid altsetting 0 [ 1528.763323][T13662] usb 4-1: USB disconnect, device number 28 [ 1528.774807][ T5183] usb 1-1: selecting invalid altsetting 0 [ 1528.781329][ T5183] cdc_ncm 1-1:1.0: bind() failure [ 1528.837497][T13454] Bluetooth: hci5: command 0x0406 tx timeout [ 1530.691173][ T5138] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1530.970935][ T5138] usb 3-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 1531.078864][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.531548][ T5138] usb 3-1: Product: syz [ 1531.575799][ T5138] usb 3-1: Manufacturer: syz [ 1531.648566][ T5138] usb 3-1: SerialNumber: syz [ 1532.046914][ T5183] usb 1-1: selecting invalid altsetting 0 [ 1532.067969][ T5138] usb 3-1: config 0 descriptor?? [ 1532.153184][ T5183] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 1532.177293][ T5138] usb 3-1: can't set config #0, error -71 [ 1532.227104][ T5183] usb 1-1: USB disconnect, device number 2 [ 1532.289279][ T5138] usb 3-1: USB disconnect, device number 119 [ 1532.421096][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4473'. [ 1532.449143][T22177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4475'. [ 1532.482802][T13454] Bluetooth: hci6: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1532.529257][ T29] audit: type=1326 audit(1720125119.181:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22165 comm="syz.0.4473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3f8175bd9 code=0x0 [ 1532.802491][T22187] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 1532.814455][T22187] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 1532.846789][ T5138] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1533.046938][ T5138] usb 3-1: Using ep0 maxpacket: 16 [ 1533.059681][ T5138] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1533.091633][ T5138] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1533.115543][ T5138] usb 3-1: string descriptor 0 read error: -22 [ 1533.126203][ T5138] usb 3-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 1533.166000][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.206761][T19686] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1534.408150][ T5183] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1534.447438][T19686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.507321][T13454] Bluetooth: hci6: command 0x0406 tx timeout [ 1534.509455][T19686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.637982][T19686] usb 5-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1534.649649][T19686] usb 5-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1534.816759][T19686] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1534.841635][T19686] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1534.845194][ T5183] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.874292][T19686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.989680][T19686] usb 5-1: Product: syz [ 1535.004434][T19686] usb 5-1: Manufacturer: syz [ 1535.012440][T19686] usb 5-1: SerialNumber: syz [ 1535.076239][T19686] usb 5-1: selecting invalid altsetting 1 [ 1535.086841][T19686] usb 5-1: selecting invalid altsetting 0 [ 1535.095287][T19686] usb 5-1: selecting invalid altsetting 0 [ 1535.114098][T19686] cdc_ncm 5-1:1.0: bind() failure [ 1535.397975][ T5183] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1535.425315][ T5183] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1535.473310][ T5183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1535.907358][ T5183] usb 4-1: SerialNumber: syz [ 1537.449221][T19686] usb 5-1: selecting invalid altsetting 0 [ 1537.515697][T19686] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 1537.568557][ T5183] usb 4-1: can't set config #1, error -71 [ 1537.577160][ T5183] usb 4-1: USB disconnect, device number 29 [ 1537.668794][T19686] usb 5-1: USB disconnect, device number 125 [ 1537.795300][T20406] udevd[20406]: setting owner of /dev/bus/usb/005/125 to uid=0, gid=0 failed: No such file or directory [ 1537.915812][T22242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4489'. [ 1538.118978][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4490'. [ 1538.202874][ T29] audit: type=1326 audit(1720125124.851:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22243 comm="syz.1.4490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1729975bd9 code=0x0 [ 1538.508344][ T5138] usbhid 3-1:1.0: can't add hid device: -32 [ 1538.518566][ T5138] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 1538.680429][T22251] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1538.925761][T22252] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1539.129001][ T5138] usb 3-1: USB disconnect, device number 120 [ 1539.515714][T22262] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1539.537099][T22262] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1539.561424][T19686] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1539.783974][T14520] IPVS: starting estimator thread 0... [ 1540.190098][T22273] IPVS: using max 15 ests per chain, 36000 per kthread [ 1540.356803][T19686] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1540.365741][T19686] usb 2-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 1540.425822][T19686] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1540.481526][T19686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 1540.511031][T13454] Bluetooth: hci1: command 0x0406 tx timeout [ 1540.520234][T19686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8279, setting to 1024 [ 1540.538239][T19686] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1540.550213][T19686] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1540.561210][T19686] usb 2-1: Product: syz [ 1540.567132][T19686] usb 2-1: Manufacturer: syz [ 1540.576515][T19686] cdc_wdm 2-1:1.0: skipping garbage [ 1540.582488][T19686] cdc_wdm 2-1:1.0: skipping garbage [ 1540.592511][T19686] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1540.602410][T19686] cdc_wdm 2-1:1.0: Unknown control protocol [ 1540.873600][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4501'. [ 1540.986723][T13454] Bluetooth: hci5: command 0x0406 tx timeout [ 1541.124160][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.132389][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.138744][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.145737][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.153222][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.159925][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.166269][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.173073][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.179401][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.187072][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.193903][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.200572][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.207284][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.213905][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.220302][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.227307][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.233617][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.240504][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.247003][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.253794][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.276074][ T5138] usb 2-1: USB disconnect, device number 20 [ 1541.282558][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1541.641762][ T5183] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1541.862085][ T5183] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1541.892895][ T5183] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.930147][ T5183] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1541.948940][T22301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1541.962003][ T5183] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1541.972811][ T5183] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1541.988661][T22302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4504'. [ 1541.998734][ T5183] usb 5-1: Manufacturer: syz [ 1542.006239][ T5183] usb 5-1: config 0 descriptor?? [ 1542.057396][ T29] audit: type=1326 audit(1720125128.701:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22299 comm="syz.3.4504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9263f75bd9 code=0x0 [ 1542.078640][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.911632][T13454] Bluetooth: Unexpected start frame (len 12) [ 1543.176681][T13662] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1543.297013][ T5183] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1543.381565][T13662] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.417037][T13662] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.461155][T13662] usb 4-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 1543.493499][T13662] usb 4-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1543.507552][ T5183] usb 2-1: Using ep0 maxpacket: 16 [ 1543.513675][T13662] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1543.523741][ T5183] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1543.535566][ T5183] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1543.547528][T13662] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1543.559086][T13662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.568325][T13662] usb 4-1: Product: syz [ 1543.575784][T13662] usb 4-1: Manufacturer: syz [ 1543.582329][ T5183] usb 2-1: string descriptor 0 read error: -22 [ 1543.599058][ T5183] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 1543.609017][T13662] usb 4-1: SerialNumber: syz [ 1543.618711][ T5183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.647758][T13662] usb 4-1: selecting invalid altsetting 1 [ 1543.662488][T13662] usb 4-1: selecting invalid altsetting 0 [ 1543.676816][T13662] usb 4-1: selecting invalid altsetting 0 [ 1543.688977][T13662] cdc_ncm 4-1:1.0: bind() failure [ 1546.371141][T13662] usb 4-1: selecting invalid altsetting 0 [ 1546.443196][T13662] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1546.474034][T13662] usb 4-1: USB disconnect, device number 30 [ 1546.664521][ T5138] usb 5-1: USB disconnect, device number 126 [ 1546.720342][ T5183] usbhid 2-1:1.0: can't add hid device: -71 [ 1546.755022][ T5183] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1546.804996][ T5183] usb 2-1: USB disconnect, device number 21 [ 1546.887834][T13454] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1547.012066][T22319] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 1547.040823][T22319] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 1547.500118][T22334] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 1547.514259][T22334] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 1547.720450][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.081488][T22351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1548.142166][ T5138] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1548.369142][ T5138] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1548.401393][ T5138] usb 2-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 1548.450292][ T5138] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1548.467092][T13834] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1548.482990][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 1548.508879][T13454] Bluetooth: hci1: command 0x0406 tx timeout [ 1548.544824][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8279, setting to 1024 [ 1548.570221][ T5138] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1548.591341][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1548.613772][ T5138] usb 2-1: Product: syz [ 1548.625433][ T5138] usb 2-1: Manufacturer: syz [ 1548.645841][ T5138] cdc_wdm 2-1:1.0: skipping garbage [ 1548.658806][ T5138] cdc_wdm 2-1:1.0: skipping garbage [ 1548.674510][ T5138] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1548.689234][T13834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.693410][ T5138] cdc_wdm 2-1:1.0: Unknown control protocol [ 1548.741406][T13834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1548.907196][T13454] Bluetooth: hci5: command 0x0406 tx timeout [ 1548.956782][T13834] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1548.976235][T13834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.986395][T13834] usb 5-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣ [ 1548.996360][T13834] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1549.776729][T13834] usb 5-1: SerialNumber: syz [ 1550.018878][ C0] wdm_int_callback: 98 callbacks suppressed [ 1550.018908][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.032115][ C0] wdm_int_callback: 98 callbacks suppressed [ 1550.032139][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.044431][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.051178][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.057587][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.064800][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.071298][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.077963][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.084750][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.091491][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.098625][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.105287][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.112045][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.118971][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.125295][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.132161][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.138527][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.145200][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.151992][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1550.159171][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1550.217913][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1550.227912][T14520] usb 2-1: USB disconnect, device number 22 [ 1550.407054][T13834] usb 5-1: 0:2 : does not exist [ 1550.516509][T13834] usb 5-1: USB disconnect, device number 127 [ 1551.448111][T20406] udevd[20406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.483881][T22393] tipc: Started in network mode [ 1551.498478][T22393] tipc: Node identity 1, cluster identity 4711 [ 1551.504847][T22393] tipc: Node number set to 1 [ 1551.798974][T22404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4536'. [ 1551.810291][T13662] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1552.018618][T13662] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.054814][T13662] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1552.099388][T13662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.108521][ T29] audit: type=1107 audit(1720125138.751:337): pid=22413 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=':Y$nJ5 9Icc}֨ V}L(ΤO*?S\HSsdLY۞D|UsH;=' [ 1552.144189][T13662] usb 5-1: config 0 descriptor?? [ 1552.162966][T13662] pwc: Askey VC010 type 2 USB webcam detected. [ 1552.170912][T22417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.178289][T22417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.321643][T22420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.329230][T22420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.337303][T22420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.344723][T22420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.377699][T22420] bridge0: entered promiscuous mode [ 1552.403670][T22420] bridge0: entered allmulticast mode [ 1552.482574][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1552.561641][T22422] netlink: 'syz.3.4540': attribute type 18 has an invalid length. [ 1552.580699][T13662] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1552.592588][T13662] pwc: recv_control_msg error -32 req 02 val 2700 [ 1552.641926][T22422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.650971][T22422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.659797][T22422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.668817][T22422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.682511][T22422] vxlan0: entered promiscuous mode [ 1552.750757][T22432] netlink: 'syz.0.4547': attribute type 12 has an invalid length. [ 1552.812935][T13662] pwc: recv_control_msg error -71 req 04 val 1000 [ 1552.833535][T13662] pwc: recv_control_msg error -71 req 04 val 1300 [ 1552.851208][T13662] pwc: recv_control_msg error -71 req 04 val 1400 [ 1552.869427][T13662] pwc: recv_control_msg error -71 req 02 val 2000 [ 1552.908132][T13662] pwc: recv_control_msg error -71 req 02 val 2100 [ 1553.152138][T13662] pwc: recv_control_msg error -71 req 04 val 1500 [ 1553.160144][T13662] pwc: recv_control_msg error -71 req 02 val 2500 [ 1553.168355][T13662] pwc: recv_control_msg error -71 req 02 val 2400 [ 1553.175673][T13662] pwc: recv_control_msg error -71 req 02 val 2600 [ 1553.183229][T13662] pwc: recv_control_msg error -71 req 02 val 2900 [ 1553.191204][T13662] pwc: recv_control_msg error -71 req 02 val 2800 [ 1553.199503][T13662] pwc: recv_control_msg error -71 req 04 val 1100 [ 1553.209820][T13662] pwc: recv_control_msg error -71 req 04 val 1200 [ 1553.237299][T13662] pwc: Registered as video71. [ 1553.400106][T13662] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 1553.947593][T13662] usb 5-1: USB disconnect, device number 2 [ 1554.417650][T22467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4558'. [ 1554.623361][T22475] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4032167445 (64514679120 ns) > initial count (63607699792 ns). Using initial count to start timer. [ 1555.256741][ T29] audit: type=1326 audit(1720125141.901:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.2.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb54775bd9 code=0x7ffc0000 [ 1555.329389][ T29] audit: type=1326 audit(1720125141.941:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.2.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb54775bd9 code=0x7ffc0000 [ 1555.411916][ T29] audit: type=1326 audit(1720125141.961:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.2.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7ffb54775bd9 code=0x7ffc0000 [ 1555.482047][ T29] audit: type=1326 audit(1720125141.961:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.2.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb54775bd9 code=0x7ffc0000 [ 1555.503643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.528661][ T29] audit: type=1326 audit(1720125141.961:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.2.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb54775bd9 code=0x7ffc0000 [ 1555.642701][T14203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1555.669901][T14203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1555.779593][T14203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1555.836981][T14373] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1555.870958][T14203] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1555.883456][T14203] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1555.896995][T14203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1556.129798][T14373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.199740][T14373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.287409][ T954] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.322493][T14373] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1556.587254][T14373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.600191][T14373] usb 4-1: config 0 descriptor?? [ 1557.205269][ T954] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.456865][T14373] itetech 0003:258A:6A88.0012: unexpected long global item [ 1557.477419][T14373] itetech 0003:258A:6A88.0012: probe with driver itetech failed with error -22 [ 1557.550969][T22524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4581'. [ 1557.604189][ T954] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.797710][T14373] usb 4-1: USB disconnect, device number 31 [ 1557.885049][T22532] o2cb: This node has not been configured. [ 1557.892021][T22532] o2cb: Cluster check failed. Fix errors before retrying. [ 1557.900351][T22532] (syz.0.4582,22532,1):user_dlm_register:674 ERROR: status = -22 [ 1557.908424][T22532] (syz.0.4582,22532,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1558.308392][T14203] Bluetooth: hci4: command tx timeout [ 1558.874616][ T954] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.346945][T14203] Bluetooth: hci4: command tx timeout [ 1560.403127][ T954] bridge_slave_1: left allmulticast mode [ 1560.453770][ T954] bridge_slave_1: left promiscuous mode [ 1560.479982][ T954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.537370][ T954] bridge_slave_0: left allmulticast mode [ 1560.871800][ T954] bridge_slave_0: left promiscuous mode [ 1560.911671][ T954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.695520][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4596'. [ 1562.426870][T14203] Bluetooth: hci4: command tx timeout [ 1562.808496][ T954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.821087][ T954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.835163][ T954] bond0 (unregistering): Released all slaves [ 1562.860078][T22569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1562.871061][T22569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1562.899363][T22569] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1562.914538][T22569] batadv_slave_0: entered promiscuous mode [ 1563.065749][T22501] chnl_net:caif_netlink_parms(): no params data found [ 1563.946997][ T954] hsr_slave_0: left promiscuous mode [ 1563.966473][ T954] hsr_slave_1: left promiscuous mode [ 1563.984991][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.020321][ T954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.054008][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.072136][ T954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.094751][T22640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4609'. [ 1564.180200][ T954] veth1_macvtap: left promiscuous mode [ 1564.191958][ T954] veth0_macvtap: left promiscuous mode [ 1564.200941][ T954] veth1_vlan: left promiscuous mode [ 1564.207166][ T954] veth0_vlan: left promiscuous mode [ 1564.506845][T14203] Bluetooth: hci4: command tx timeout [ 1565.269165][ T954] team0 (unregistering): Port device team_slave_1 removed [ 1565.940117][T22501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.947992][T22501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.955229][T22501] bridge_slave_0: entered allmulticast mode [ 1565.963980][T22501] bridge_slave_0: entered promiscuous mode [ 1565.974958][T22638] team0: entered promiscuous mode [ 1565.985483][T22638] team_slave_0: entered promiscuous mode [ 1565.991639][T22638] team_slave_1: entered promiscuous mode [ 1566.019228][T22642] team0: left promiscuous mode [ 1566.025304][T22642] team_slave_0: left promiscuous mode [ 1566.033052][T22642] team_slave_1: left promiscuous mode [ 1566.188909][T22501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.216995][T22501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.224351][T22501] bridge_slave_1: entered allmulticast mode [ 1566.246473][T22501] bridge_slave_1: entered promiscuous mode [ 1566.409759][T22664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.418856][T22664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.568274][T22501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.612881][T22667] bridge_slave_1: left allmulticast mode [ 1566.626849][T22667] bridge_slave_1: left promiscuous mode [ 1566.642485][T22667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.694634][T22667] bridge_slave_0: left allmulticast mode [ 1566.706316][T22667] bridge_slave_0: left promiscuous mode [ 1566.765984][T22667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.927574][T22501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.993352][T22680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4623'. [ 1567.364097][T22501] team0: Port device team_slave_0 added [ 1567.450252][T22501] team0: Port device team_slave_1 added [ 1567.569815][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4624'. [ 1672.606508][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1672.613526][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22666/1:b..l [ 1672.622082][ C1] rcu: (detected by 1, t=10502 jiffies, g=171997, q=451 ncpus=2) [ 1672.629887][ C1] task:syz.0.4618 state:R running task stack:23536 pid:22666 tgid:22665 ppid:19968 flags:0x00004002 [ 1672.642877][ C1] Call Trace: [ 1672.646195][ C1] [ 1672.649142][ C1] __schedule+0x1796/0x49d0 [ 1672.653700][ C1] ? __pfx___schedule+0x10/0x10 [ 1672.658567][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1672.664548][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1672.669622][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 1672.674910][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1672.680032][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1672.685777][ C1] irqentry_exit+0x5e/0x90 [ 1672.690407][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1672.696395][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 1672.701980][ C1] Code: db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 6f e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 1672.721688][ C1] RSP: 0018:ffffc9000c547418 EFLAGS: 00000282 [ 1672.727786][ C1] RAX: ffffffff81ff9855 RBX: 0000000000000000 RCX: ffffffff81ff9866 [ 1672.735759][ C1] RDX: ffffc9000ad79000 RSI: 0000000000000004 RDI: ffffea0001e6e7b0 [ 1672.743733][ C1] RBP: ffffc9000c5477f0 R08: ffffffff81ff984a R09: 1ffffd40003cdcf0 [ 1672.751704][ C1] R10: dffffc0000000000 R11: fffff940003cdcf1 R12: ffffea0001e6e780 [ 1672.759677][ C1] R13: 0000000000000000 R14: ffffea0001e6e7b0 R15: dffffc0000000000 [ 1672.767656][ C1] ? folio_mapcount+0x8a/0x1e0 [ 1672.772444][ C1] ? folio_mapcount+0x95/0x1e0 [ 1672.777239][ C1] ? folio_mapcount+0xa6/0x1e0 [ 1672.782010][ C1] folio_mapcount+0xa6/0x1e0 [ 1672.786605][ C1] hpage_collapse_scan_file+0x7ac/0x6300 [ 1672.792344][ C1] ? mt_find+0x226/0x850 [ 1672.796623][ C1] ? hpage_collapse_scan_file+0x27b/0x6300 [ 1672.802454][ C1] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 1672.808531][ C1] ? mt_find+0x62d/0x850 [ 1672.812813][ C1] ? mt_find+0x226/0x850 [ 1672.817065][ C1] ? __pfx_mt_find+0x10/0x10 [ 1672.821696][ C1] ? madvise_collapse+0x5af/0xcf0 [ 1672.826729][ C1] ? __pfx___up_read+0x10/0x10 [ 1672.831504][ C1] madvise_collapse+0x5e0/0xcf0 [ 1672.836367][ C1] ? __pfx_madvise_collapse+0x10/0x10 [ 1672.841766][ C1] ? blk_start_plug+0x70/0x1b0 [ 1672.846597][ C1] do_madvise+0xc5f/0x4590 [ 1672.851047][ C1] ? futex_wait_queue+0x27/0x1d0 [ 1672.856015][ C1] ? futex_unqueue+0xcb/0xf0 [ 1672.860640][ C1] ? __pfx_do_madvise+0x10/0x10 [ 1672.865495][ C1] ? __pfx___futex_wait+0x10/0x10 [ 1672.870533][ C1] ? get_futex_key+0xaeb/0x1050 [ 1672.875394][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 1672.880707][ C1] ? futex_hash+0x1e/0x1f0 [ 1672.885131][ C1] ? futex_wait+0x285/0x360 [ 1672.889637][ C1] ? __pfx_futex_wait+0x10/0x10 [ 1672.894503][ C1] ? do_futex+0x33b/0x560 [ 1672.898842][ C1] ? __pfx_do_futex+0x10/0x10 [ 1672.903542][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1672.909906][ C1] ? do_syscall_64+0x100/0x230 [ 1672.914687][ C1] __x64_sys_madvise+0xa6/0xc0 [ 1672.919462][ C1] do_syscall_64+0xf3/0x230 [ 1672.923977][ C1] ? clear_bhb_loop+0x35/0x90 [ 1672.928664][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.934678][ C1] RIP: 0033:0x7fd3f8175bd9 [ 1672.939091][ C1] RSP: 002b:00007fd3f8f66048 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1672.947508][ C1] RAX: ffffffffffffffda RBX: 00007fd3f8303f60 RCX: 00007fd3f8175bd9 [ 1672.955480][ C1] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000000020000000 [ 1672.963558][ C1] RBP: 00007fd3f81e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1672.971543][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1672.979517][ C1] R13: 000000000000000b R14: 00007fd3f8303f60 R15: 00007ffe715c84c8 [ 1672.987505][ C1] [ 1672.990521][ C1] rcu: rcu_preempt kthread starved for 10375 jiffies! g171997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1673.001813][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1673.011873][ C1] rcu: RCU grace-period kthread stack dump: [ 1673.017771][ C1] task:rcu_preempt state:R running task stack:24720 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1673.029593][ C1] Call Trace: [ 1673.032884][ C1] [ 1673.035815][ C1] __schedule+0x1796/0x49d0 [ 1673.040339][ C1] ? __pfx___schedule+0x10/0x10 [ 1673.045193][ C1] ? __pfx_lock_release+0x10/0x10 [ 1673.050232][ C1] ? __asan_memset+0x23/0x50 [ 1673.054843][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1673.060654][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1673.066988][ C1] ? schedule+0x90/0x320 [ 1673.071255][ C1] schedule+0x14b/0x320 [ 1673.075456][ C1] schedule_timeout+0x1be/0x310 [ 1673.080447][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1673.085847][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1673.091315][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 1673.096875][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1673.101755][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1673.106723][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 1673.112809][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1673.118118][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1673.124116][ C1] ? finish_swait+0xd4/0x1e0 [ 1673.128799][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1673.133404][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1673.138600][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1673.144615][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1673.149660][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1673.154883][ C1] kthread+0x2f0/0x390 [ 1673.158985][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1673.164209][ C1] ? __pfx_kthread+0x10/0x10 [ 1673.168806][ C1] ret_from_fork+0x4b/0x80 [ 1673.173248][ C1] ? __pfx_kthread+0x10/0x10 [ 1673.177841][ C1] ret_from_fork_asm+0x1a/0x30 [ 1673.182620][ C1] [ 1673.185649][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1673.192070][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1673.197323][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30