last executing test programs: 4m44.913184917s ago: executing program 0 (id=15154): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x9a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 4m42.536168906s ago: executing program 0 (id=15159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x7, 0xc, 0x4, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 4m41.559414969s ago: executing program 0 (id=15164): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x4200) 4m39.359007773s ago: executing program 0 (id=15168): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') 4m36.966694216s ago: executing program 1 (id=15176): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000"], 0x48) 4m35.93656832s ago: executing program 0 (id=15177): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) clock_gettime(0x9e77661b8e7af6c7, 0x0) 4m32.190548871s ago: executing program 1 (id=15189): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'ip_vti0\x00', {'ip6gre0\x00'}, 0xfff}) 4m30.962621829s ago: executing program 0 (id=15193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 4m29.94538316s ago: executing program 1 (id=15197): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000008100000003000000ffffff"], 0x50) 4m22.610544299s ago: executing program 1 (id=15208): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) close_range(r3, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0xd, r3}, 0x10) 4m20.436146681s ago: executing program 1 (id=15214): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2c}, 0x28) 4m15.661861993s ago: executing program 32 (id=15193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 4m15.645902892s ago: executing program 1 (id=15218): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 4m0.687851469s ago: executing program 33 (id=15218): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 1m57.736290308s ago: executing program 4 (id=15450): mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 1m52.902832083s ago: executing program 4 (id=15458): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, 0x0, 0x1) 1m52.265105754s ago: executing program 4 (id=15459): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0xeff, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) 1m51.151514169s ago: executing program 4 (id=15462): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) 1m48.864951133s ago: executing program 4 (id=15465): openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x2006440, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40000) 1m41.3391868s ago: executing program 4 (id=15468): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010000000200ffdbdf2507000000080000000400001e0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m23.763492543s ago: executing program 34 (id=15468): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010000000200ffdbdf2507000000080000000400001e0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.653920814s ago: executing program 2 (id=15597): madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 7.506172169s ago: executing program 2 (id=15599): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) 6.817052874s ago: executing program 3 (id=15600): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x80080400, 0x0, 0x0, 0x0, 0x0, 0x0) 6.359213728s ago: executing program 3 (id=15601): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, 0x0, 0x0) 5.509203366s ago: executing program 2 (id=15602): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 5.197691683s ago: executing program 3 (id=15603): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 4.772422735s ago: executing program 2 (id=15604): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 3.840857055s ago: executing program 3 (id=15605): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0xb, 0x9, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x84) 3.699935359s ago: executing program 2 (id=15606): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.362103457s ago: executing program 3 (id=15607): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="95fb", 0x2}], 0x1}}], 0x1, 0x24000081) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) 148.079µs ago: executing program 3 (id=15608): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) keyctl$reject(0x13, 0x0, 0x8000, 0x0, 0x0) 0s ago: executing program 2 (id=15609): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = userfaultfd(0x80001) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/222, 0xde}], 0x1) kernel console output (not intermixed with test programs): k0: Adding to iommu group 0 [ 782.678345][T29101] Falling back ldisc for ptm0. [ 783.236756][ T6016] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 783.380459][ T6016] usb 5-1: Using ep0 maxpacket: 16 [ 783.383310][ T6016] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 783.383346][ T6016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 783.388227][ T6016] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 783.388261][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.388284][ T6016] usb 5-1: Product: syz [ 783.388300][ T6016] usb 5-1: Manufacturer: syz [ 783.388317][ T6016] usb 5-1: SerialNumber: syz [ 783.463413][ T6016] usb 5-1: config 0 descriptor?? [ 783.480952][ T6016] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 783.481216][ T6016] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 784.073883][ T6016] em28xx 5-1:0.0: chip ID is em2860 [ 784.151466][ T6014] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 784.266172][ T6016] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 784.266655][ T6016] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 784.266674][ T6016] em28xx 5-1:0.0: No AC97 audio processor [ 784.294728][ T6014] usb 3-1: Using ep0 maxpacket: 16 [ 784.305243][ T6014] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 784.305270][ T6014] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.305292][ T6014] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.308665][ T6014] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.308826][ T6014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.308850][ T6014] usb 3-1: Product: syz [ 784.308866][ T6014] usb 3-1: Manufacturer: syz [ 784.308882][ T6014] usb 3-1: SerialNumber: syz [ 784.376529][ T6016] usb 5-1: USB disconnect, device number 127 [ 784.391269][ T6016] em28xx 5-1:0.0: Disconnecting em28xx [ 784.418949][ T6016] em28xx 5-1:0.0: Freeing device [ 784.790788][ T6014] usb 3-1: 0:2 : does not exist [ 784.831133][ T6014] usb 3-1: USB disconnect, device number 123 [ 785.152689][ T6016] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 785.300655][ T6016] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.300691][ T6016] usb 5-1: config 0 interface 0 has no altsetting 0 [ 785.300729][ T6016] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 785.300755][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.345444][ T6016] usb 5-1: config 0 descriptor?? [ 785.782967][ T6016] hid (null): bogus close delimiter [ 785.821883][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.821925][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.821955][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.821982][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.822009][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.822033][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.822060][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.822086][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.822112][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.822139][ T6016] asus 0003:0B05:1A30.001F: unknown main item tag 0x0 [ 785.823380][ T6016] asus 0003:0B05:1A30.001F: bogus close delimiter [ 785.823399][ T6016] asus 0003:0B05:1A30.001F: item 0 2 2 10 parsing failed [ 785.824267][ T6016] asus 0003:0B05:1A30.001F: Asus hid parse failed: -22 [ 785.824384][ T6016] asus 0003:0B05:1A30.001F: probe with driver asus failed with error -22 [ 785.991895][ T5877] usb 5-1: USB disconnect, device number 2 [ 786.321813][ T38] kauditd_printk_skb: 57 callbacks suppressed [ 786.321834][ T38] audit: type=1326 audit(1763431957.291:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.353730][ T38] audit: type=1326 audit(1763431957.291:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.357026][ T38] audit: type=1326 audit(1763431957.333:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.359950][ T38] audit: type=1326 audit(1763431957.333:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.392067][ T38] audit: type=1326 audit(1763431957.364:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.401330][ T38] audit: type=1326 audit(1763431957.385:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.404477][ T38] audit: type=1326 audit(1763431957.385:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.406144][ T38] audit: type=1326 audit(1763431957.385:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.412174][ T38] audit: type=1326 audit(1763431957.385:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.412239][ T38] audit: type=1326 audit(1763431957.396:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.11143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 786.809640][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.342976][T29289] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 787.714304][T29304] program syz.2.11171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.396307][T29326] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11181'. [ 788.396339][T29326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11181'. [ 788.396362][T29326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11181'. [ 788.723778][T29341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11188'. [ 788.723905][T29341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11188'. [ 789.704835][T29388] openvswitch: netlink: nsh attr 0 has unexpected len 29281 expected 0 [ 789.704884][T29388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.381244][ T5877] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 790.555625][ T5877] usb 1-1: config 2 has an invalid interface number: 50 but max is 0 [ 790.555657][ T5877] usb 1-1: config 2 has no interface number 0 [ 790.555709][ T5877] usb 1-1: config 2 interface 50 altsetting 2 endpoint 0x82 has invalid maxpacket 1967, setting to 64 [ 790.555740][ T5877] usb 1-1: config 2 interface 50 has no altsetting 0 [ 790.592596][ T5877] usb 1-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=ac.66 [ 790.592636][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.592661][ T5877] usb 1-1: Product: syz [ 790.592680][ T5877] usb 1-1: Manufacturer: syz [ 790.592700][ T5877] usb 1-1: SerialNumber: syz [ 790.611131][T29415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 790.636064][ T5877] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 790.690305][ T1021] wlan1: Trigger new scan to find an IBSS to join [ 791.250799][ T5877] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67 [ 791.453516][ T5876] usb 1-1: USB disconnect, device number 122 [ 792.478366][T29501] netlink: 'syz.1.11262': attribute type 12 has an invalid length. [ 792.478393][T29501] netlink: 120 bytes leftover after parsing attributes in process `syz.1.11262'. [ 793.528013][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.576115][ T37] wlan1: Trigger new scan to find an IBSS to join [ 794.348477][T29572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11297'. [ 794.517853][ T9299] wlan1: Creating new IBSS network, BSSID 9a:72:4e:f2:5b:46 [ 794.820026][ T5876] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 794.962874][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 794.984201][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.984263][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 794.984292][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 794.984315][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.985864][ T5876] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 794.985893][ T5876] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 794.985915][ T5876] usb 1-1: Manufacturer: syz [ 795.060330][ T5876] usb 1-1: config 0 descriptor?? [ 795.181071][T29601] netlink: 'syz.4.11308': attribute type 13 has an invalid length. [ 795.181105][T29601] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 795.849325][ T6016] usb 1-1: USB disconnect, device number 123 [ 796.192015][ T5891] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 796.339381][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 796.344458][ T5891] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 796.344495][ T5891] usb 2-1: config 0 has no interface number 0 [ 796.350009][ T5891] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 796.350046][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.350072][ T5891] usb 2-1: Product: syz [ 796.350090][ T5891] usb 2-1: Manufacturer: syz [ 796.350108][ T5891] usb 2-1: SerialNumber: syz [ 796.389290][ T5891] usb 2-1: config 0 descriptor?? [ 796.405169][ T5891] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 796.708311][ T5891] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 796.858845][ T5891] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 797.011623][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 797.018391][ T5876] usb 2-1: USB disconnect, device number 13 [ 797.050279][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 797.077813][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 797.081055][ T5876] quatech2 2-1:0.51: device disconnected [ 797.353993][T29650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11335'. [ 797.603478][T29660] netlink: 'syz.2.11342': attribute type 7 has an invalid length. [ 798.876540][T29726] loop8: detected capacity change from 0 to 1 [ 798.903431][T29726] Dev loop8: unable to read RDB block 1 [ 798.903519][T29726] loop8: unable to read partition table [ 798.903765][T29726] loop8: partition table beyond EOD, truncated [ 798.903788][T29726] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 800.754695][ T6016] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 800.908007][ T6016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.908042][ T6016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.908065][ T6016] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 800.908107][ T6016] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 800.908131][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.914771][ T6016] usb 5-1: config 0 descriptor?? [ 801.331157][ T6016] plantronics 0003:047F:FFFF.0020: unbalanced collection at end of report description [ 801.332047][ T6016] plantronics 0003:047F:FFFF.0020: parse failed [ 801.332162][ T6016] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22 [ 801.419912][T29825] netlink: 888 bytes leftover after parsing attributes in process `syz.2.11418'. [ 801.543283][ T5876] usb 5-1: USB disconnect, device number 3 [ 801.681862][T29839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11426'. [ 801.987554][T29848] (syz.1.11433,29848,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 802.574624][T29878] team0: Device gtp0 is of different type [ 803.046289][T29893] bridge0: port 4(macvtap1) entered blocking state [ 803.046555][T29893] bridge0: port 4(macvtap1) entered disabled state [ 803.046778][T29893] macvtap1: entered allmulticast mode [ 803.046797][T29893] bridge0: entered allmulticast mode [ 803.055678][T29893] macvtap1: left allmulticast mode [ 803.055708][T29893] bridge0: left allmulticast mode [ 804.286576][ T5116] Bluetooth: hci0: unexpected event for opcode 0x080f [ 804.689522][ T6016] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 804.870411][ T6016] usb 3-1: Using ep0 maxpacket: 16 [ 804.873184][ T6016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.873240][ T6016] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 804.873267][ T6016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.925192][ T6016] usb 3-1: config 0 descriptor?? [ 804.942448][ T6016] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input68 [ 805.123232][ T5152] bcm5974 3-1:0.0: could not read from device [ 805.755274][T30031] can0: slcan on ptm0. [ 805.994515][ T6016] usb 3-1: USB disconnect, device number 124 [ 806.013115][ T5877] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 806.203990][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 806.206462][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.206498][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.206538][ T5877] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 806.206563][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.215370][ T5877] usb 5-1: config 0 descriptor?? [ 806.454742][T30048] netlink: 'syz.0.11496': attribute type 8 has an invalid length. [ 806.454995][T30048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11496'. [ 806.502964][T30029] can0 (unregistered): slcan off ptm0. [ 806.666069][ T5877] corsair 0003:1B1C:1B02.0021: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 806.839334][ T5877] corsair 0003:1B1C:1B02.0021: Read invalid backlight brightness: ad. [ 807.043501][ T6016] usb 5-1: USB disconnect, device number 4 [ 808.108915][ T6014] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 808.127337][ T5116] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 808.127677][ T5116] Bluetooth: hci0: Injecting HCI hardware error event [ 808.149382][T18786] Bluetooth: hci0: hardware error 0x00 [ 808.262163][ T6014] usb 2-1: Using ep0 maxpacket: 8 [ 808.287550][ T6014] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 808.287585][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.287607][ T6014] usb 2-1: Product: syz [ 808.287623][ T6014] usb 2-1: Manufacturer: syz [ 808.287638][ T6014] usb 2-1: SerialNumber: syz [ 808.340942][ T6014] usb 2-1: config 0 descriptor?? [ 808.354136][ T6014] cdc_ether 2-1:0.0: skipping garbage [ 808.354161][ T6014] usb 2-1: bad CDC descriptors [ 808.369169][ T6014] usb 2-1: unsupported MDLM descriptors [ 808.370350][ T6014] cdc_acm 2-1:0.0: skipping garbage [ 808.625812][ T6014] usb 2-1: USB disconnect, device number 14 [ 809.595566][T30184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11562'. [ 809.687039][T30188] netlink: 360 bytes leftover after parsing attributes in process `syz.0.11564'. [ 809.869007][T30197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11568'. [ 810.194512][T18786] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 810.577284][T30230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11582'. [ 810.898448][T30248] gtp1: entered promiscuous mode [ 810.898478][T30248] gtp1: entered allmulticast mode [ 811.253558][T30262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11599'. [ 812.601937][T30333] netlink: 'syz.2.11634': attribute type 4 has an invalid length. [ 813.125255][T30349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11642'. [ 813.127137][T30349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11642'. [ 813.360790][T30354] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11644'. [ 813.758008][ T5877] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 813.930468][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 813.935428][ T5877] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.935466][ T5877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.935503][ T5877] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 813.935527][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.959679][ T5877] usb 1-1: config 0 descriptor?? [ 814.372837][ T5877] hid_parser_main: 111 callbacks suppressed [ 814.372868][ T5877] aquacomputer_d5next 0003:0C70:F00E.0022: unknown main item tag 0x0 [ 814.372905][ T5877] aquacomputer_d5next 0003:0C70:F00E.0022: unknown main item tag 0x0 [ 814.372934][ T5877] aquacomputer_d5next 0003:0C70:F00E.0022: unknown main item tag 0x0 [ 814.407097][ T5877] aquacomputer_d5next 0003:0C70:F00E.0022: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 814.606419][ T5877] usb 1-1: USB disconnect, device number 124 [ 815.161240][T30403] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 815.857140][T30426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11677'. [ 815.883913][T30429] smc: net device veth1_to_team erased user defined pnetid SYZ0 [ 816.088530][T30437] netlink: 666 bytes leftover after parsing attributes in process `syz.4.11681'. [ 816.482191][ T6016] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 816.486079][T30455] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11691'. [ 816.486244][T30455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11691'. [ 816.566200][T30459] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 816.625497][ T6016] usb 1-1: Using ep0 maxpacket: 8 [ 816.628055][ T6016] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 816.628088][ T6016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.666201][ T6016] pvrusb2: Hardware description: Terratec Grabster AV400 [ 816.666220][ T6016] pvrusb2: ********** [ 816.666229][ T6016] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 816.666242][ T6016] pvrusb2: Important functionality might not be entirely working. [ 816.666252][ T6016] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 816.666265][ T6016] pvrusb2: ********** [ 816.865196][ T2360] pvrusb2: Invalid write control endpoint [ 816.951477][ T2360] pvrusb2: Invalid write control endpoint [ 816.951497][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 816.951508][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 816.951519][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 816.951531][ T2360] pvrusb2: Device being rendered inoperable [ 816.956204][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 816.956276][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 816.961165][ T2360] pvrusb2: Attached sub-driver cx25840 [ 816.961182][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 816.961194][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 817.058960][T30445] pvrusb2: Attempted to execute control transfer when device not ok [ 817.065138][ T6016] usb 1-1: USB disconnect, device number 125 [ 817.691108][ T5877] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 817.691230][ T6016] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 817.837013][ T6016] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 817.837044][ T6016] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.837066][ T6016] usb 5-1: config 0 has no interface number 0 [ 817.837119][ T6016] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 817.837145][ T6016] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.840266][ T6016] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 817.840299][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.840322][ T6016] usb 5-1: Product: syz [ 817.840338][ T6016] usb 5-1: Manufacturer: syz [ 817.840354][ T6016] usb 5-1: SerialNumber: syz [ 817.843273][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 817.852946][ T5877] usb 2-1: config 0 has no interfaces? [ 817.891451][ T5877] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 817.891484][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.891505][ T5877] usb 2-1: Product: syz [ 817.891521][ T5877] usb 2-1: Manufacturer: syz [ 817.891537][ T5877] usb 2-1: SerialNumber: syz [ 817.991167][ T5877] usb 2-1: config 0 descriptor?? [ 817.994772][ T6016] usb 5-1: config 0 descriptor?? [ 818.215760][ T5891] usb 2-1: USB disconnect, device number 15 [ 818.594169][ T5877] usb 5-1: USB disconnect, device number 5 [ 819.914731][T30574] wg1 speed is unknown, defaulting to 1000 [ 820.898618][ T5877] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 820.917609][T30612] netlink: 'syz.4.11764': attribute type 2 has an invalid length. [ 820.928759][ T5877] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 822.272369][ T5877] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 822.434547][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 822.437009][ T5877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 822.440134][ T5877] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 822.440167][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.440190][ T5877] usb 2-1: Product: syz [ 822.440206][ T5877] usb 2-1: Manufacturer: syz [ 822.440222][ T5877] usb 2-1: SerialNumber: syz [ 822.446599][ T5877] usb 2-1: config 0 descriptor?? [ 822.457058][ T5877] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 822.458972][ T5877] usb 2-1: Detected FT232R [ 822.674442][ T5877] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 822.885520][ T5877] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 823.083471][ T5877] usb 2-1: USB disconnect, device number 16 [ 823.225885][ T5877] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 823.226671][ T5877] ftdi_sio 2-1:0.0: device disconnected [ 824.121088][ T5877] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 824.275116][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 824.277517][ T5877] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 824.277549][ T5877] usb 5-1: config 0 has no interface number 0 [ 824.277602][ T5877] usb 5-1: config 0 interface 12 has no altsetting 0 [ 824.282742][ T5877] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 824.282809][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.282831][ T5877] usb 5-1: Product: syz [ 824.282847][ T5877] usb 5-1: Manufacturer: syz [ 824.282863][ T5877] usb 5-1: SerialNumber: syz [ 824.289232][ T5877] usb 5-1: config 0 descriptor?? [ 824.553022][ T5877] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 824.553088][ T5877] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 824.553114][ T5877] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 824.553216][ T5877] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 824.587334][ T5877] usb 5-1: USB disconnect, device number 6 [ 825.240681][T30791] program syz.0.11849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.431523][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 825.431542][ T38] audit: type=1326 audit(1763431998.349:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 825.431582][ T38] audit: type=1326 audit(1763431998.349:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 825.431618][ T38] audit: type=1326 audit(1763431998.359:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 825.431653][ T38] audit: type=1326 audit(1763431998.359:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 825.431703][ T38] audit: type=1326 audit(1763431998.359:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e1cb6df10 code=0x7ffc0000 [ 825.483460][T30803] loop2: detected capacity change from 0 to 7 [ 825.514468][T30803] Dev loop2: unable to read RDB block 7 [ 825.514511][T30803] loop2: AHDI p1 p2 [ 825.514555][T30803] loop2: partition table partially beyond EOD, truncated [ 825.514686][T30803] loop2: p1 start 1835360114 is beyond EOD, truncated [ 825.595063][ T38] audit: type=1326 audit(1763431998.359:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 825.595127][ T38] audit: type=1326 audit(1763431998.527:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 825.652423][ T38] audit: type=1326 audit(1763431998.590:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 825.652487][ T38] audit: type=1326 audit(1763431998.590:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30800 comm="syz.0.11856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 825.813970][ T9056] kworker/1:9 (9056) used greatest stack depth: 13544 bytes left [ 826.389054][T30817] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.464351][T30817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 826.817252][T30822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 826.984175][T30866] program syz.0.11887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.535435][T30895] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11900'. [ 828.422287][T30937] netlink: 'syz.4.11921': attribute type 3 has an invalid length. [ 828.766772][T30957] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 828.766828][T30957] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 828.766880][T30957] overlayfs: conflicting lowerdir path [ 830.701882][T31027] sch_tbf: burst 3 is lower than device lo mtu (14) ! [ 831.057394][T31043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11970'. [ 831.088055][T31043] bond0: entered promiscuous mode [ 831.088082][T31043] bond_slave_0: entered promiscuous mode [ 831.088293][T31043] bond_slave_1: entered promiscuous mode [ 831.088602][T31043] batadv0: entered promiscuous mode [ 831.170015][T31043] bond0: left promiscuous mode [ 831.170041][T31043] bond_slave_0: left promiscuous mode [ 831.170252][T31043] bond_slave_1: left promiscuous mode [ 831.170651][T31043] batadv0: left promiscuous mode [ 832.104394][T31084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11987'. [ 832.104433][T31084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11987'. [ 832.148864][T31084] ip6gretap2: entered allmulticast mode [ 832.493990][ T5891] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 832.636906][T31107] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11998'. [ 832.639990][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 832.642869][ T5891] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 832.642902][ T5891] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 832.642929][ T5891] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.642957][ T5891] usb 2-1: config 1 interface 0 has no altsetting 0 [ 832.705574][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 832.705609][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.705632][ T5891] usb 2-1: Product: syz [ 832.705648][ T5891] usb 2-1: Manufacturer: syz [ 832.705664][ T5891] usb 2-1: SerialNumber: syz [ 832.756412][T31110] input: syz1 as /devices/virtual/input/input71 [ 832.974154][ T5891] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 833.139520][ T5877] usb 2-1: USB disconnect, device number 17 [ 833.166710][ T5877] usblp0: removed [ 833.738276][T31147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12016'. [ 834.832946][T31189] mkiss: ax0: crc mode is auto. [ 836.108312][T31242] netlink: 556 bytes leftover after parsing attributes in process `syz.2.12058'. [ 837.128799][T31291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12081'. [ 837.328647][T31301] Bluetooth: MGMT ver 1.23 [ 838.514005][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.168954][T31378] trusted_key: encrypted_key: key trusted:syz not found [ 839.825613][T31394] sctp: [Deprecated]: syz.2.12131 (pid 31394) Use of int in max_burst socket option deprecated. [ 839.825613][T31394] Use struct sctp_assoc_value instead [ 840.172678][T31405] netlink: 27 bytes leftover after parsing attributes in process `syz.2.12136'. [ 840.235838][T31410] netlink: 'syz.1.12139': attribute type 4 has an invalid length. [ 840.282485][T31413] binder: 31409:31413 ioctl c018620c 200000000000 returned -22 [ 842.192021][T18786] block nbd0: Receive control failed (result -32) [ 842.977744][T31519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12192'. [ 844.459101][T31573] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 844.459168][T31573] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 844.608651][T31551] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 845.321700][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 845.362368][T31610] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 845.643000][T31622] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12244'. [ 845.643058][T31622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12244'. [ 845.812917][ T38] audit: type=1326 audit(1763432019.754:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.815554][ T38] audit: type=1326 audit(1763432019.754:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.815876][ T38] audit: type=1326 audit(1763432019.754:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.816046][ T38] audit: type=1326 audit(1763432019.754:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.816480][ T38] audit: type=1326 audit(1763432019.754:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.817075][ T38] audit: type=1326 audit(1763432019.754:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.817231][ T38] audit: type=1326 audit(1763432019.754:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.817531][ T38] audit: type=1326 audit(1763432019.754:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.817749][ T38] audit: type=1326 audit(1763432019.754:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 845.817897][ T38] audit: type=1326 audit(1763432019.754:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31630 comm="syz.4.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 847.812867][T31706] netlink: 188 bytes leftover after parsing attributes in process `syz.1.12281'. [ 847.945812][T31711] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 847.970380][T31711] macsec2: entered promiscuous mode [ 847.970699][T31711] macsec2: entered allmulticast mode [ 847.970719][T31711] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 848.048322][T31717] ptrace attach of "./syz-executor exec"[5816] was attempted by "./syz-executor exec"[31717] [ 848.353560][ T5891] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 848.510537][ T5891] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 848.510571][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.510594][ T5891] usb 3-1: Product: syz [ 848.510611][ T5891] usb 3-1: Manufacturer: syz [ 848.510627][ T5891] usb 3-1: SerialNumber: syz [ 848.565418][ T5891] usb 3-1: config 0 descriptor?? [ 848.825768][ T8444] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 848.985886][ T5891] airspy 3-1:0.0: Board ID: 00 [ 848.985920][ T5891] airspy 3-1:0.0: Firmware version: [ 848.987714][ T8444] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 848.987739][ T8444] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 848.987755][ T8444] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 848.987772][ T8444] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 848.987790][ T8444] usb 2-1: config 220 has no interface number 2 [ 848.987854][ T8444] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 848.987877][ T8444] usb 2-1: config 220 interface 0 has no altsetting 0 [ 848.987894][ T8444] usb 2-1: config 220 interface 76 has no altsetting 0 [ 848.987913][ T8444] usb 2-1: config 220 interface 1 has no altsetting 0 [ 848.990600][ T8444] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 848.990629][ T8444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.990656][ T8444] usb 2-1: Product: syz [ 848.990672][ T8444] usb 2-1: Manufacturer: syz [ 848.990686][ T8444] usb 2-1: SerialNumber: syz [ 849.245957][ T8444] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 849.245998][ T8444] uvcvideo 2-1:220.0: No valid video chain found. [ 849.246064][ T8444] usb 2-1: selecting invalid altsetting 0 [ 849.333679][ T8444] usb 2-1: selecting invalid altsetting 0 [ 849.333725][ T8444] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 849.349889][ T8444] usb 2-1: USB disconnect, device number 18 [ 849.369940][ T5891] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 849.420042][ T5891] airspy 3-1:0.0: Registered as swradio24 [ 849.420067][ T5891] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 849.443478][ T5891] usb 3-1: USB disconnect, device number 125 [ 852.632277][ T6014] IPVS: starting estimator thread 0... [ 852.634229][T31859] IPVS: ip_vs_add_dest(): server weight less than zero [ 852.716957][T31860] IPVS: using max 7 ests per chain, 16800 per kthread [ 853.981946][T31896] block nbd1: server does not support multiple connections per device. [ 853.982466][T31896] block nbd1: shutting down sockets [ 855.326529][T31951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12400'. [ 855.433719][T31951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12400'. [ 855.835607][T31969] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.12408'. [ 855.835722][T31969] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 855.983997][ T5876] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 856.068252][T31976] program syz.4.12412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.155652][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 856.172626][ T5876] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 856.172659][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.172681][ T5876] usb 3-1: Product: syz [ 856.172696][ T5876] usb 3-1: Manufacturer: syz [ 856.172712][ T5876] usb 3-1: SerialNumber: syz [ 856.218538][ T5876] usb 3-1: config 0 descriptor?? [ 856.252216][ T5876] gspca_main: se401-2.14.0 probing 047d:5003 [ 856.601772][T31996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12422'. [ 856.830110][ T5876] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 857.032051][ T8444] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 857.034390][ T5876] usb 3-1: USB disconnect, device number 126 [ 857.074296][T32013] netlink: 'syz.1.12430': attribute type 10 has an invalid length. [ 857.131296][T32013] syz_tun: entered promiscuous mode [ 857.131467][T32013] syz_tun: entered allmulticast mode [ 857.132271][T32013] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 857.177164][ T8444] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 857.177202][ T8444] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 857.177246][ T8444] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 857.177393][ T8444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.230579][T32002] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 857.249077][ T8444] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.384406][ T6016] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 857.437787][ T5891] usb 5-1: USB disconnect, device number 7 [ 857.530218][ T6016] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 857.530248][ T6016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.541637][ T6016] usb 1-1: config 0 descriptor?? [ 857.562123][ T6016] cp210x 1-1:0.0: cp210x converter detected [ 857.958378][ T6016] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 857.972536][ T6016] usb 1-1: cp210x converter now attached to ttyUSB0 [ 858.157771][ T5876] usb 1-1: USB disconnect, device number 126 [ 858.180130][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 858.309237][ T6016] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 858.313831][ T5876] cp210x 1-1:0.0: device disconnected [ 858.461445][ T6016] usb 2-1: Using ep0 maxpacket: 16 [ 858.464089][ T6016] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 858.464118][ T6016] usb 2-1: config 0 has no interface number 0 [ 858.464185][ T6016] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 858.464213][ T6016] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 858.467290][ T6016] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 858.467324][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.467347][ T6016] usb 2-1: Product: syz [ 858.467363][ T6016] usb 2-1: Manufacturer: syz [ 858.467380][ T6016] usb 2-1: SerialNumber: syz [ 858.476784][ T6016] usb 2-1: config 0 descriptor?? [ 858.478223][T32053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 858.478453][T32053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 858.703929][T32053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 858.705380][T32053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 858.723095][ T38] audit: type=1326 audit(1763432033.307:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.723390][ T38] audit: type=1326 audit(1763432033.307:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.781967][ T38] audit: type=1326 audit(1763432033.370:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.789277][ T38] audit: type=1326 audit(1763432033.381:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.796653][ T38] audit: type=1326 audit(1763432033.381:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.800468][ T38] audit: type=1326 audit(1763432033.381:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.819716][ T38] audit: type=1326 audit(1763432033.402:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.823691][ T38] audit: type=1326 audit(1763432033.412:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.831135][ T38] audit: type=1326 audit(1763432033.412:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 858.887416][ T38] audit: type=1326 audit(1763432033.475:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32075 comm="syz.4.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 859.125472][ T6016] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 859.125509][ T6016] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 859.125824][ T6016] asix 2-1:0.251: probe with driver asix failed with error -71 [ 859.161458][ T6016] usb 2-1: USB disconnect, device number 19 [ 859.343156][T32096] 9p: Unknown access argument 18446744073709551615: -34 [ 860.090835][T32128] program syz.2.12486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.020051][T32176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12507'. [ 861.020079][T32176] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 861.442573][ T5891] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 861.549786][ T5876] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 861.585265][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 861.587505][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.587554][ T5891] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 861.587576][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.592677][ T5891] usb 5-1: config 0 descriptor?? [ 861.720315][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.720353][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.720380][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 861.720428][ T5876] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 861.720454][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.726087][ T5876] usb 2-1: config 0 descriptor?? [ 862.054353][ T5891] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 862.260242][ T5876] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 862.345779][T32204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12520'. [ 862.481618][ T5891] usb 5-1: USB disconnect, device number 8 [ 864.272315][ T5891] usb 2-1: USB disconnect, device number 20 [ 865.281116][T32294] netlink: 'syz.4.12561': attribute type 13 has an invalid length. [ 865.281144][T32294] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.12561'. [ 866.271349][T32327] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.12577'. [ 866.531038][T29999] tipc: Subscription rejected, illegal request [ 867.035865][T32350] netlink: 'syz.2.12588': attribute type 1 has an invalid length. [ 867.107088][T32350] bond5: entered promiscuous mode [ 867.129231][T32350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 867.238207][T32356] 8021q: adding VLAN 0 to HW filter on device bond6 [ 867.250161][T32356] bond5: (slave bond6): making interface the new active one [ 867.250225][T32356] bond6: entered promiscuous mode [ 867.269451][T32356] bond5: (slave bond6): Enslaving as an active interface with an up link [ 867.424640][ T8444] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 867.509461][T32370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12596'. [ 867.509494][T32370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12596'. [ 867.589495][ T8444] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 867.589532][ T8444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.618487][ T8444] usb 5-1: config 0 descriptor?? [ 867.622554][ T8444] cp210x 5-1:0.0: cp210x converter detected [ 868.209145][ T8444] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 868.209208][ T8444] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 868.214404][ T8444] usb 5-1: cp210x converter now attached to ttyUSB0 [ 868.240433][ T8444] usb 5-1: USB disconnect, device number 9 [ 868.282620][ T8444] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 868.283146][ T8444] cp210x 5-1:0.0: device disconnected [ 868.731960][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 868.731977][ T38] audit: type=1326 audit(1763432043.805:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32408 comm="syz.0.12612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 868.732019][ T38] audit: type=1326 audit(1763432043.816:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32408 comm="syz.0.12612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 868.732055][ T38] audit: type=1326 audit(1763432043.816:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32408 comm="syz.0.12612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 868.733345][ T38] audit: type=1326 audit(1763432043.816:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32408 comm="syz.0.12612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 868.733392][ T38] audit: type=1326 audit(1763432043.816:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32408 comm="syz.0.12612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 868.738055][ T38] audit: type=1326 audit(1763432043.816:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32408 comm="syz.0.12612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 868.742770][ T38] audit: type=1326 audit(1763432043.826:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32408 comm="syz.0.12612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 868.742846][ T38] audit: type=1326 audit(1763432043.826:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32408 comm="syz.0.12612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 868.788374][T32412] netlink: 'syz.1.12615': attribute type 11 has an invalid length. [ 869.651620][T32440] veth0: entered promiscuous mode [ 869.652617][T32440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12629'. [ 869.769484][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.015938][ T6016] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 870.058823][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.197865][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.202580][ T6016] usb 2-1: Using ep0 maxpacket: 32 [ 870.205944][ T6016] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 870.205978][ T6016] usb 2-1: config 0 has no interface number 0 [ 870.206020][ T6016] usb 2-1: config 0 interface 85 has no altsetting 0 [ 870.214041][ T6016] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 870.214079][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.214105][ T6016] usb 2-1: Product: syz [ 870.214134][ T6016] usb 2-1: Manufacturer: syz [ 870.214153][ T6016] usb 2-1: SerialNumber: syz [ 870.243175][ T6016] usb 2-1: config 0 descriptor?? [ 870.259621][ T6016] appletouch 2-1:0.85: Could not find int-in endpoint [ 870.259668][ T6016] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 870.264325][ T6016] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 870.334863][T32446] tipc: Started in network mode [ 870.334899][T32446] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 870.334961][T32446] tipc: Enabling of bearer rejected, failed to enable media [ 871.381251][ T8444] usb 2-1: USB disconnect, device number 21 [ 871.575475][T32498] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12656'. [ 871.575503][T32498] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 872.297306][T32520] syzkaller1: entered promiscuous mode [ 872.297332][T32520] syzkaller1: entered allmulticast mode [ 872.493880][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.626446][ T5891] kernel write not supported for file bpf-prog (pid: 5891 comm: kworker/0:4) [ 874.887263][T32633] pim6reg: entered allmulticast mode [ 874.908803][T32633] pim6reg: left allmulticast mode [ 875.593980][T32664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12734'. [ 877.130028][T32718] netem: change failed [ 877.611632][T32734] vivid-003: disconnect [ 877.740472][T32733] vivid-003: reconnect [ 877.815019][T32740] tipc: Started in network mode [ 877.815043][T32740] tipc: Node identity 8, cluster identity 4711 [ 877.815058][T32740] tipc: Node number set to 8 [ 879.617880][ T337] Bluetooth: hci0: load_link_keys: too big key_count value 8192 [ 880.210627][ T359] netlink: 'syz.1.12808': attribute type 29 has an invalid length. [ 880.227181][ T359] netlink: 'syz.1.12808': attribute type 29 has an invalid length. [ 880.246282][ T359] netlink: 500 bytes leftover after parsing attributes in process `syz.1.12808'. [ 881.728546][ T419] input: syz1 as /devices/virtual/input/input77 [ 881.863657][ T425] netlink: 'syz.2.12827': attribute type 8 has an invalid length. [ 882.237578][ T38] audit: type=1326 audit(1763432057.998:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.240320][ T38] audit: type=1326 audit(1763432057.998:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.240940][ T38] audit: type=1326 audit(1763432057.998:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.240999][ T38] audit: type=1326 audit(1763432057.998:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.241816][ T38] audit: type=1326 audit(1763432057.998:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.243937][ T38] audit: type=1326 audit(1763432057.998:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.244955][ T38] audit: type=1326 audit(1763432057.998:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.245256][ T38] audit: type=1326 audit(1763432057.998:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.250878][ T38] audit: type=1326 audit(1763432058.009:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 882.252961][ T38] audit: type=1326 audit(1763432058.009:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=443 comm="syz.2.12837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 883.789746][ T6016] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 883.935659][ T6016] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 883.935691][ T6016] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.935729][ T6016] usb 1-1: config 0 interface 0 has no altsetting 0 [ 883.938792][ T6016] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 883.938823][ T6016] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 883.938845][ T6016] usb 1-1: Product: syz [ 883.938861][ T6016] usb 1-1: Manufacturer: syz [ 883.938876][ T6016] usb 1-1: SerialNumber: syz [ 884.010846][ T6016] usb 1-1: config 0 descriptor?? [ 884.014758][ T6016] hub 1-1:0.0: bad descriptor, ignoring hub [ 884.014802][ T6016] hub 1-1:0.0: probe with driver hub failed with error -5 [ 884.081179][ T6016] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 884.131590][ T503] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12864'. [ 884.862743][ T8444] usb 1-1: reset high-speed USB device number 127 using dummy_hcd [ 885.159855][ T8444] usb 1-1: device firmware changed [ 885.202069][ T8444] usb 1-1: USB disconnect, device number 127 [ 885.477773][ T539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12880'. [ 885.513059][ T8444] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 885.668003][ T8444] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 885.668037][ T8444] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.668079][ T8444] usb 1-1: config 0 interface 0 has no altsetting 0 [ 885.672403][ T8444] usb 1-1: string descriptor 0 read error: -22 [ 885.672584][ T8444] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 885.672610][ T8444] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 885.686808][ T8444] usb 1-1: config 0 descriptor?? [ 885.698277][ T8444] hub 1-1:0.0: bad descriptor, ignoring hub [ 885.698327][ T8444] hub 1-1:0.0: probe with driver hub failed with error -5 [ 885.771880][ T8444] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 886.028824][ T6016] usb 1-1: USB disconnect, device number 2 [ 886.135042][ T559] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12890'. [ 886.310813][ T565] syzkaller1: entered promiscuous mode [ 886.310843][ T565] syzkaller1: entered allmulticast mode [ 887.110252][ T602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12910'. [ 887.264659][ T602] bond4: entered promiscuous mode [ 887.268153][ T602] 8021q: adding VLAN 0 to HW filter on device bond4 [ 887.381462][ T6014] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 887.467195][ T607] veth5: entered promiscuous mode [ 887.468759][ T607] bond4: (slave veth5): Enslaving as an active interface with an up link [ 887.523822][ T6014] usb 2-1: Using ep0 maxpacket: 16 [ 887.526200][ T6014] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.526233][ T6014] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.526258][ T6014] usb 2-1: config 0 interface 0 has no altsetting 0 [ 887.526295][ T6014] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 887.526321][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.592891][ T6014] usb 2-1: config 0 descriptor?? [ 888.002522][ T6014] hid (null): global environment stack underflow [ 888.051173][ T6014] cougar 0003:060B:500A.0026: usage count exceeds max: fixing up report descriptor [ 888.052507][ T6014] cougar 0003:060B:500A.0026: unexpected long global item [ 888.053327][ T6014] cougar 0003:060B:500A.0026: parse failed [ 888.053431][ T6014] cougar 0003:060B:500A.0026: probe with driver cougar failed with error -22 [ 888.235086][ T5877] usb 2-1: USB disconnect, device number 22 [ 889.180411][ T5877] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 889.323605][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 889.333985][ T5877] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 889.334025][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.334050][ T5877] usb 2-1: Product: syz [ 889.334068][ T5877] usb 2-1: Manufacturer: syz [ 889.334086][ T5877] usb 2-1: SerialNumber: syz [ 889.356306][ T5877] usb 2-1: config 0 descriptor?? [ 889.369068][ T5877] gspca_main: sq905-2.14.0 probing 2770:9120 [ 889.869512][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 889.869532][ T38] audit: type=1326 audit(1763432066.008:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.872167][ T38] audit: type=1326 audit(1763432066.008:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.898062][ T38] audit: type=1326 audit(1763432066.040:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.921392][ T38] audit: type=1326 audit(1763432066.061:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.924082][ T38] audit: type=1326 audit(1763432066.061:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.930644][ T38] audit: type=1326 audit(1763432066.061:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.948726][ T38] audit: type=1326 audit(1763432066.082:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.956885][ T38] audit: type=1326 audit(1763432066.082:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.963520][ T38] audit: type=1326 audit(1763432066.103:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 889.969410][ T38] audit: type=1326 audit(1763432066.103:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.12956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 890.353454][ T5877] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 890.353561][ T5877] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 890.387516][ T5877] usb 2-1: USB disconnect, device number 23 [ 891.083990][ T744] tipc: New replicast peer: 0.0.0.0 [ 891.105043][ T744] tipc: Enabled bearer , priority 10 [ 891.166206][ T744] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 891.534288][ T767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12983'. [ 891.726753][ T781] sctp: [Deprecated]: syz.4.12985 (pid 781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.726753][ T781] Use struct sctp_sack_info instead [ 892.151416][ T6014] tipc: Node number set to 1 [ 893.109916][ T829] pim6reg1: entered promiscuous mode [ 893.109945][ T829] pim6reg1: entered allmulticast mode [ 893.354744][ T844] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 893.354744][ T844] The task syz.1.13012 (844) triggered the difference, watch for misbehavior. [ 895.944074][ T5877] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 896.106632][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 896.109181][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.109234][ T5877] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 896.109261][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.118509][ T5877] usb 2-1: config 0 descriptor?? [ 896.551403][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551444][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551474][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551502][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551530][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551557][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551589][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551617][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551645][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.551673][ T5877] sony 0003:054C:0268.0027: unknown main item tag 0x0 [ 896.601031][ T5877] sony 0003:054C:0268.0027: hiddev0,hidraw0: USB HID v80.09 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 896.601070][ T5877] sony 0003:054C:0268.0027: failed to claim input [ 896.772874][ T5877] usb 2-1: USB disconnect, device number 24 [ 896.933675][ T979] input: syz1 as /devices/virtual/input/input78 [ 896.933715][ T979] input: failed to attach handler leds to device input78, error: -6 [ 897.585335][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 897.585356][ T38] audit: type=1326 audit(1763432074.060:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=997 comm="syz.0.13079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 897.585412][ T38] audit: type=1326 audit(1763432074.102:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=997 comm="syz.0.13079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 897.585462][ T38] audit: type=1326 audit(1763432074.102:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=997 comm="syz.0.13079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 897.585511][ T38] audit: type=1326 audit(1763432074.102:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=997 comm="syz.0.13079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 897.585561][ T38] audit: type=1326 audit(1763432074.102:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=997 comm="syz.0.13079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 897.841637][ T1005] netlink: 'syz.4.13081': attribute type 5 has an invalid length. [ 898.122140][ T1020] binder: 1018:1020 ioctl c0306201 2000000002c0 returned -14 [ 898.399945][ T1039] sctp: [Deprecated]: syz.2.13093 (pid 1039) Use of int in maxseg socket option. [ 898.399945][ T1039] Use struct sctp_assoc_value instead [ 899.135744][ T6016] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 899.281002][ T6016] usb 2-1: Using ep0 maxpacket: 8 [ 899.298782][ T6016] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 899.298814][ T6016] usb 2-1: config 0 has no interface number 0 [ 899.298868][ T6016] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 899.298896][ T6016] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 899.298923][ T6016] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 899.298951][ T6016] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.304594][ T6016] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 899.304628][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.304650][ T6016] usb 2-1: Product: syz [ 899.304665][ T6016] usb 2-1: Manufacturer: syz [ 899.304681][ T6016] usb 2-1: SerialNumber: syz [ 899.358570][ T6016] usb 2-1: config 0 descriptor?? [ 899.581209][ T6016] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 899.814320][ T5876] usb 2-1: USB disconnect, device number 25 [ 900.499410][ T1120] Trying to write to read-only block-device nullb0 [ 901.425038][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13145'. [ 902.402329][ T1199] netlink: 136 bytes leftover after parsing attributes in process `syz.4.13159'. [ 902.402359][ T1199] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 902.553368][ T1206] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13162'. [ 902.553401][ T1206] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13162'. [ 903.846003][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 904.944579][ T38] audit: type=1326 audit(1763432081.829:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.944641][ T38] audit: type=1326 audit(1763432081.829:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.961676][ T38] audit: type=1326 audit(1763432081.850:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.961745][ T38] audit: type=1326 audit(1763432081.850:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.962141][ T38] audit: type=1326 audit(1763432081.850:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.963420][ T38] audit: type=1326 audit(1763432081.850:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.972796][ T38] audit: type=1326 audit(1763432081.850:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.972877][ T38] audit: type=1326 audit(1763432081.860:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.972933][ T38] audit: type=1326 audit(1763432081.860:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 904.973071][ T38] audit: type=1326 audit(1763432081.860:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.2.13191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab00bf6c9 code=0x7ffc0000 [ 905.116799][ T5876] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 905.274413][ T1284] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13196'. [ 905.321743][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.321784][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.323860][ T5876] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.323892][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 905.323916][ T5876] usb 2-1: SerialNumber: syz [ 905.607895][ T5876] usb 2-1: 0:2 : does not exist [ 905.680810][ T5876] usb 2-1: USB disconnect, device number 26 [ 907.014071][ T1367] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13231'. [ 907.336814][ T6014] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 907.434374][ T1386] netlink: 'syz.0.13244': attribute type 8 has an invalid length. [ 907.434397][ T1386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13244'. [ 907.480500][ T6014] usb 5-1: Using ep0 maxpacket: 16 [ 907.492297][ T1386] bond0: entered promiscuous mode [ 907.493895][ T1386] bond_slave_0: entered promiscuous mode [ 907.496037][ T1386] bond_slave_1: entered promiscuous mode [ 907.496591][ T6014] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 907.496623][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.496647][ T6014] usb 5-1: Product: syz [ 907.496665][ T6014] usb 5-1: Manufacturer: syz [ 907.496683][ T6014] usb 5-1: SerialNumber: syz [ 907.499513][ T1386] batadv0: entered promiscuous mode [ 907.551497][ T6014] usb 5-1: config 0 descriptor?? [ 907.581619][ T1386] gretap0: entered promiscuous mode [ 907.595246][ T1386] hsr1: entered promiscuous mode [ 907.602673][ T6014] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 907.613503][ T6014] usb 5-1: Detected FT-X [ 907.815014][ T6014] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 908.216036][ T6014] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 908.324596][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324659][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324703][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324747][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324790][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324830][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324873][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324916][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324955][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.324996][ T1411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 908.398050][ T6014] usb 5-1: USB disconnect, device number 10 [ 908.537515][ T6014] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 908.550533][ T6014] ftdi_sio 5-1:0.0: device disconnected [ 909.120759][ T1434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13267'. [ 910.308342][ T5877] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 910.472502][ T5877] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 910.472536][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.523042][ T5877] usb 3-1: config 0 descriptor?? [ 910.608638][ T1474] pim6reg1: entered allmulticast mode [ 910.675516][ T1477] loop4: detected capacity change from 0 to 7 [ 910.752080][ T1477] Dev loop4: unable to read RDB block 7 [ 910.752136][ T1477] loop4: unable to read partition table [ 910.752400][ T1477] loop4: partition table beyond EOD, truncated [ 910.752423][ T1477] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 911.502543][ T5877] usb 3-1: Cannot set autoneg [ 911.502847][ T5877] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 911.532421][ T5877] usb 3-1: USB disconnect, device number 127 [ 912.314247][ T1526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.101255][ T1559] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13323'. [ 914.047671][ T1592] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13339'. [ 914.295359][ T1602] binder: 1601:1602 ioctl c0306201 2000000003c0 returned -14 [ 914.910468][ T1613] cgroup: fork rejected by pids controller in /syz4 [ 914.965841][ T5876] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 915.143527][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.143567][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.144878][ T5876] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 915.144908][ T5876] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 915.144940][ T5876] usb 2-1: Manufacturer: syz [ 915.206533][ T5876] usb 2-1: config 0 descriptor?? [ 915.988251][ T5876] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #100: -71 [ 915.988320][ T5876] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 915.988340][ T5876] uclogic 0003:256C:006D.0028: failed probing pen v1 parameters: -71 [ 915.988399][ T5876] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 915.988512][ T5876] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 916.050735][ T5876] usb 2-1: USB disconnect, device number 27 [ 916.101772][ T1878] netlink: 'syz.4.13366': attribute type 12 has an invalid length. [ 916.101798][ T1878] netlink: 'syz.4.13366': attribute type 29 has an invalid length. [ 916.101814][ T1878] netlink: 148 bytes leftover after parsing attributes in process `syz.4.13366'. [ 916.101861][ T1878] netlink: 'syz.4.13366': attribute type 1 has an invalid length. [ 917.103655][ T1911] netlink: 'syz.2.13381': attribute type 3 has an invalid length. [ 917.166575][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 917.341147][ T5876] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 917.341181][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.372102][ T5876] usb 1-1: config 0 descriptor?? [ 917.387541][ T5876] cp210x 1-1:0.0: cp210x converter detected [ 917.775827][ T5876] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 917.795718][ T5876] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 917.820555][ T5876] usb 1-1: cp210x converter now attached to ttyUSB0 [ 917.995664][ T5876] usb 1-1: USB disconnect, device number 3 [ 918.011696][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 918.022766][ T5876] cp210x 1-1:0.0: device disconnected [ 918.454513][ T1959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13403'. [ 918.883798][ T1977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13412'. [ 919.399180][ T1997] input: syz0 as /devices/virtual/input/input80 [ 919.696837][ T2007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13426'. [ 923.242599][ T2114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13474'. [ 924.528571][ T2174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.186882][ T2253] input: syz0 as /devices/virtual/input/input81 [ 926.192223][ T2253] input: failed to attach handler leds to device input81, error: -6 [ 926.590343][ T2272] input: syz1 as /devices/virtual/input/input82 [ 926.992136][ C0] vkms_vblank_simulate: vblank timer overrun [ 928.284187][ T2337] loop8: detected capacity change from 0 to 8 [ 928.285559][ T2337] Dev loop8: unable to read RDB block 8 [ 928.285606][ T2337] loop8: unable to read partition table [ 928.285858][ T2337] loop8: partition table beyond EOD, truncated [ 928.285880][ T2337] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 928.379240][ T6016] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 928.521601][ T6016] usb 2-1: Using ep0 maxpacket: 8 [ 928.528534][ T6016] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 928.528566][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.528587][ T6016] usb 2-1: Product: syz [ 928.528602][ T6016] usb 2-1: Manufacturer: syz [ 928.528617][ T6016] usb 2-1: SerialNumber: syz [ 928.583083][ T6016] usb 2-1: config 0 descriptor?? [ 928.796085][ T6016] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 929.571778][ T6016] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 929.607937][ T6016] usb 2-1: USB disconnect, device number 28 [ 929.827623][ T2394] net_ratelimit: 3319 callbacks suppressed [ 929.827648][ T2394] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 931.018089][ T2475] batadv_slave_1: entered promiscuous mode [ 931.021423][ T2475] batadv_slave_1: left promiscuous mode [ 931.269188][ T2490] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13640'. [ 932.802037][ T38] kauditd_printk_skb: 254 callbacks suppressed [ 932.802058][ T38] audit: type=1326 audit(1763432111.076:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2564 comm="syz.4.13669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f218102f6c9 code=0x0 [ 933.532692][ T5891] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 933.675874][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 933.678453][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.678497][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.678541][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 933.678566][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.742051][ T5891] usb 2-1: config 0 descriptor?? [ 934.011051][ T5891] usbhid 2-1:0.0: can't add hid device: -71 [ 934.011188][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 934.015437][ T5891] usb 2-1: USB disconnect, device number 29 [ 934.601228][ T2672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13709'. [ 934.851326][ T2685] macvtap1: entered allmulticast mode [ 934.851349][ T2685] veth0_macvtap: entered allmulticast mode [ 936.874044][ T2787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13755'. [ 936.874195][ T2787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.205769][ T2787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.228029][ T866] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 939.390323][ T866] usb 2-1: Using ep0 maxpacket: 32 [ 939.393510][ T866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.398449][ T866] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 939.398479][ T866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.398496][ T866] usb 2-1: Product: syz [ 939.398508][ T866] usb 2-1: Manufacturer: syz [ 939.398521][ T866] usb 2-1: SerialNumber: syz [ 939.412263][ T866] usb 2-1: config 0 descriptor?? [ 939.440230][ T866] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 939.629797][ T866] gspca_sunplus: reg_r err -32 [ 940.809852][ T866] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 940.985925][ T2998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13840'. [ 941.646614][ T3024] netlink: 'syz.4.13854': attribute type 19 has an invalid length. [ 941.646643][ T3024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13854'. [ 941.667030][ T3024] netlink: 'syz.4.13854': attribute type 19 has an invalid length. [ 941.667057][ T3024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13854'. [ 941.903120][ T6016] usb 2-1: USB disconnect, device number 30 [ 942.090978][ T3043] wg1 speed is unknown, defaulting to 1000 [ 943.225090][ T5891] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 943.393718][ T5891] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 943.393751][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.393773][ T5891] usb 2-1: Product: syz [ 943.393790][ T5891] usb 2-1: Manufacturer: syz [ 943.393806][ T5891] usb 2-1: SerialNumber: syz [ 943.442161][ T5891] usb 2-1: config 0 descriptor?? [ 943.445686][ T5891] ch341 2-1:0.0: ch341-uart converter detected [ 943.505935][ T6016] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 943.651936][ T6016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.651975][ T6016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.652076][ T6016] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 943.652102][ T6016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.712947][ T6016] usb 1-1: config 0 descriptor?? [ 944.159140][ T6016] hid_parser_main: 144 callbacks suppressed [ 944.159542][ T6016] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 944.160055][ T6016] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 944.247176][ T6016] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0029/input/input83 [ 944.377944][ T6016] cm6533_jd 0003:0D8C:0022.0029: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 944.462566][ T5877] usb 1-1: USB disconnect, device number 4 [ 944.512729][ T5891] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 944.707436][ T5891] usb 2-1: USB disconnect, device number 31 [ 944.713797][ T5891] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 944.714315][ T5891] ch341 2-1:0.0: device disconnected [ 945.001976][T29965] wlan1: Trigger new scan to find an IBSS to join [ 946.192092][ T3199] wg1 speed is unknown, defaulting to 1000 [ 947.145108][ T6016] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 947.478578][ T6016] usb 1-1: Using ep0 maxpacket: 8 [ 947.484233][ T6016] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 947.484275][ T6016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.484296][ T6016] usb 1-1: Product: syz [ 947.484312][ T6016] usb 1-1: Manufacturer: syz [ 947.484327][ T6016] usb 1-1: SerialNumber: syz [ 947.509434][ T6016] usb 1-1: config 0 descriptor?? [ 947.533295][ T6016] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 949.570453][ T6016] gspca_sonixj: reg_w1 err -71 [ 949.570565][ T6016] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 949.716757][T29990] wlan1: Trigger new scan to find an IBSS to join [ 949.722536][ T6016] usb 1-1: USB disconnect, device number 5 [ 950.773486][ T37] wlan1: Creating new IBSS network, BSSID 66:14:d8:45:bc:92 [ 950.908541][ T3300] loop6: detected capacity change from 0 to 7 [ 950.970857][ T3300] Dev loop6: unable to read RDB block 7 [ 950.970892][ T3300] loop6: AHDI p3 [ 950.970928][ T3300] loop6: partition table partially beyond EOD, truncated [ 959.137415][ T3463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14054'. [ 961.379937][ T3466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14054'. [ 961.379972][ T3466] nbd: device at index 64 is going down [ 962.117244][ T3514] wg1 speed is unknown, defaulting to 1000 [ 962.391900][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 970.689586][ T3567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 977.511709][ T866] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 977.755425][ T866] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 977.755467][ T866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.771844][ T866] usb 2-1: config 0 descriptor?? [ 977.838431][ T866] cp210x 2-1:0.0: cp210x converter detected [ 978.334184][ T866] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 978.378992][ T866] usb 2-1: cp210x converter now attached to ttyUSB0 [ 978.539405][ T5876] usb 2-1: USB disconnect, device number 32 [ 978.552957][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 979.459755][ T3812] netlink: 300 bytes leftover after parsing attributes in process `syz.1.14215'. [ 979.459782][ T3812] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14215'. [ 979.917047][ T5876] cp210x 2-1:0.0: device disconnected [ 981.273085][T30015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 982.408581][ T3881] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 987.144042][ T38] audit: type=1326 audit(1763432168.112:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3975 comm="syz.4.14296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 987.149609][ T38] audit: type=1326 audit(1763432168.122:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3975 comm="syz.4.14296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 987.150441][ T38] audit: type=1326 audit(1763432168.122:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3975 comm="syz.4.14296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 987.277245][ T38] audit: type=1326 audit(1763432168.259:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3975 comm="syz.4.14296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 987.277296][ T38] audit: type=1326 audit(1763432168.259:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3975 comm="syz.4.14296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 988.244564][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14308'. [ 988.714277][ T38] audit: type=1326 audit(1763432169.771:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4012 comm="syz.4.14312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 988.716765][ T38] audit: type=1326 audit(1763432169.781:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4012 comm="syz.4.14312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 988.721437][ T38] audit: type=1326 audit(1763432169.781:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4012 comm="syz.4.14312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 988.796562][ T38] audit: type=1326 audit(1763432169.781:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4012 comm="syz.4.14312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 988.798176][ T38] audit: type=1326 audit(1763432169.855:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4012 comm="syz.4.14312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 989.280643][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14315'. [ 990.650229][ T5876] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 990.828565][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 990.831358][ T5876] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.831398][ T5876] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.831427][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 990.831468][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 990.831493][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.895097][ T5876] usb 2-1: config 0 descriptor?? [ 991.471791][ T5876] apple 0003:05AC:0247.002A: unexpected long global item [ 991.496645][ T5876] apple 0003:05AC:0247.002A: parse failed [ 991.496770][ T5876] apple 0003:05AC:0247.002A: probe with driver apple failed with error -22 [ 991.732537][ T5876] usb 2-1: USB disconnect, device number 33 [ 995.142833][ T4137] input: syz0 as /devices/virtual/input/input84 [ 996.157297][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14380'. [ 996.322034][ T4161] team1: entered promiscuous mode [ 996.322064][ T4161] team1: entered allmulticast mode [ 997.064785][ T5876] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 997.269599][ T5876] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 997.269633][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.269656][ T5876] usb 1-1: Product: syz [ 997.269673][ T5876] usb 1-1: Manufacturer: syz [ 997.269688][ T5876] usb 1-1: SerialNumber: syz [ 997.690491][ T5876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 997.690556][ T5876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 997.690579][ T5876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 998.053481][ T5876] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 998.121255][ T5876] usb 1-1: USB disconnect, device number 6 [ 1001.758663][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 1001.758685][ T38] audit: type=1326 audit(1763432183.470:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1001.801798][ T38] audit: type=1326 audit(1763432183.470:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1001.801862][ T38] audit: type=1326 audit(1763432183.502:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1001.801913][ T38] audit: type=1326 audit(1763432183.502:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1007.307812][ T866] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1007.469899][ T866] usb 5-1: Using ep0 maxpacket: 32 [ 1007.472628][ T866] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1007.472656][ T866] usb 5-1: config 0 has no interface number 0 [ 1007.472714][ T866] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1007.475851][ T866] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1007.475881][ T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.475905][ T866] usb 5-1: Product: syz [ 1007.475920][ T866] usb 5-1: Manufacturer: syz [ 1007.475937][ T866] usb 5-1: SerialNumber: syz [ 1007.621108][ T866] usb 5-1: config 0 descriptor?? [ 1007.683793][ T866] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1007.683833][ T866] em28xx 5-1:0.132: Video interface 132 found: [ 1007.870249][T18786] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1008.181809][ T866] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1008.565976][ T866] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1008.566017][ T866] em28xx 5-1:0.132: board has no eeprom [ 1008.641755][ T866] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1008.641787][ T866] em28xx 5-1:0.132: analog set to bulk mode. [ 1008.670109][ T866] em28xx 5-1:0.132: Registering V4L2 extension [ 1008.813046][ T5890] usb 5-1: USB disconnect, device number 11 [ 1008.815563][ T5890] em28xx 5-1:0.132: Disconnecting em28xx [ 1009.174750][ T5877] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1009.365511][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 1009.375882][ T5877] usb 1-1: config 0 has no interfaces? [ 1009.379227][ T5877] usb 1-1: New USB device found, idVendor=19d2, idProduct=0167, bcdDevice=bc.89 [ 1009.379260][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.379282][ T5877] usb 1-1: Product: syz [ 1009.379298][ T5877] usb 1-1: Manufacturer: syz [ 1009.379314][ T5877] usb 1-1: SerialNumber: syz [ 1009.438222][ T5877] usb 1-1: config 0 descriptor?? [ 1009.738340][ T866] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1009.738430][ T866] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1009.738447][ T866] em28xx 5-1:0.132: No AC97 audio processor [ 1009.983308][ T866] usb 5-1: Decoder not found [ 1009.985373][ T866] em28xx 5-1:0.132: failed to create media graph [ 1009.985427][ T866] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1010.193577][ T866] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1010.205219][ T5890] em28xx 5-1:0.132: Closing input extension [ 1010.436676][ T5890] em28xx 5-1:0.132: Freeing device [ 1010.501882][ T4388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14482'. [ 1010.726142][ T5877] usb 1-1: USB disconnect, device number 7 [ 1012.976505][T30016] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1015.747695][ T8444] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1015.977162][ T8444] usb 1-1: Using ep0 maxpacket: 32 [ 1015.978089][ T8444] usb 1-1: no configurations [ 1015.978107][ T8444] usb 1-1: can't read configurations, error -22 [ 1016.138383][ T8444] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1016.225404][ T4527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14549'. [ 1016.309590][ T8444] usb 1-1: Using ep0 maxpacket: 32 [ 1016.310627][ T8444] usb 1-1: no configurations [ 1016.310645][ T8444] usb 1-1: can't read configurations, error -22 [ 1016.363343][ T8444] usb usb1-port1: attempt power cycle [ 1016.728919][ T8444] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1016.758098][ T8444] usb 1-1: Using ep0 maxpacket: 32 [ 1016.758967][ T8444] usb 1-1: no configurations [ 1016.758985][ T8444] usb 1-1: can't read configurations, error -22 [ 1016.919054][ T8444] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1016.948611][ T8444] usb 1-1: Using ep0 maxpacket: 32 [ 1016.949511][ T8444] usb 1-1: no configurations [ 1016.949529][ T8444] usb 1-1: can't read configurations, error -22 [ 1016.955765][ T8444] usb usb1-port1: unable to enumerate USB device [ 1019.805871][ T4613] loop2: detected capacity change from 0 to 7 [ 1019.812051][ T4613] loop2: [ 1019.812091][ T4613] loop2: partition table partially beyond EOD, truncated [ 1020.902364][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1020.999590][ T4642] trusted_key: syz.4.14603 sent an empty control message without MSG_MORE. [ 1025.357366][ T4725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14644'. [ 1025.419912][ T38] audit: type=1326 audit(1763432208.256:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.457149][ T38] audit: type=1326 audit(1763432208.309:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.465611][ T38] audit: type=1326 audit(1763432208.351:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.465675][ T38] audit: type=1326 audit(1763432208.351:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.465726][ T38] audit: type=1326 audit(1763432208.351:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.679542][ T38] audit: type=1326 audit(1763432208.571:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.679603][ T38] audit: type=1326 audit(1763432208.571:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.679654][ T38] audit: type=1326 audit(1763432208.571:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.831142][ T38] audit: type=1326 audit(1763432208.739:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.831204][ T38] audit: type=1326 audit(1763432208.739:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4723 comm="syz.0.14643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1cb6f6c9 code=0x7ffc0000 [ 1025.834293][ T4725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1026.430629][ T4740] netlink: 'syz.1.14650': attribute type 10 has an invalid length. [ 1026.627988][ T4740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.646322][ T4740] team0: entered promiscuous mode [ 1026.646347][ T4740] team_slave_0: entered promiscuous mode [ 1026.646586][ T4740] : entered promiscuous mode [ 1026.674163][ T4740] team0: entered allmulticast mode [ 1026.674188][ T4740] team_slave_0: entered allmulticast mode [ 1026.674208][ T4740] : entered allmulticast mode [ 1026.702434][ T4740] bond0: (slave team0): Enslaving as an active interface with an up link [ 1042.972041][ T5877] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1043.143162][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 1043.145600][ T5877] usb 5-1: no configurations [ 1043.145633][ T5877] usb 5-1: can't read configurations, error -22 [ 1043.329276][ T5877] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1043.505610][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 1043.506662][ T5877] usb 5-1: no configurations [ 1043.506679][ T5877] usb 5-1: can't read configurations, error -22 [ 1043.507253][ T5877] usb usb5-port1: attempt power cycle [ 1043.858118][ T5877] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1043.878128][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 1043.879005][ T5877] usb 5-1: no configurations [ 1043.879022][ T5877] usb 5-1: can't read configurations, error -22 [ 1044.022256][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1044.083420][T29990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1044.105661][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 1044.106699][ T5877] usb 5-1: no configurations [ 1044.106715][ T5877] usb 5-1: can't read configurations, error -22 [ 1044.107337][ T5877] usb usb5-port1: unable to enumerate USB device [ 1049.580520][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14902'. [ 1051.691276][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 1051.691297][ T38] audit: type=1326 audit(1763432235.887:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5338 comm="syz.4.14929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f218102f6c9 code=0x0 [ 1052.748172][ T5362] io-wq is not configured for unbound workers [ 1056.212686][ T5890] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1056.374531][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 1056.377324][ T5890] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1056.377355][ T5890] usb 1-1: config 1 has no interface number 1 [ 1056.377406][ T5890] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1056.377430][ T5890] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1056.377485][ T5890] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1056.380581][ T5890] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1056.380612][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.380634][ T5890] usb 1-1: Product: syz [ 1056.380650][ T5890] usb 1-1: Manufacturer: syz [ 1056.380665][ T5890] usb 1-1: SerialNumber: syz [ 1056.732056][ T5890] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1056.865160][ T5890] usb 1-1: USB disconnect, device number 12 [ 1058.960571][ T5890] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1059.126943][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 1059.129687][ T5890] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1059.129719][ T5890] usb 2-1: config 0 has no interface number 0 [ 1059.132880][ T5890] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1059.132911][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.132932][ T5890] usb 2-1: Product: syz [ 1059.132949][ T5890] usb 2-1: Manufacturer: syz [ 1059.132964][ T5890] usb 2-1: SerialNumber: syz [ 1059.214822][ T5890] usb 2-1: config 0 descriptor?? [ 1059.246368][ T5890] smsc95xx v2.0.0 [ 1059.719754][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1059.719790][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1060.707565][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1060.707919][ T5890] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1060.785277][ T5890] usb 2-1: USB disconnect, device number 34 [ 1062.023992][ T5536] syzkaller1: entered promiscuous mode [ 1062.024021][ T5536] syzkaller1: entered allmulticast mode [ 1073.470963][ T5724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15109'. [ 1074.573526][T30004] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1079.432681][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.480784][ T5914] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1100.446985][ T5980] netlink: 'syz.4.15194': attribute type 1 has an invalid length. [ 1101.183119][ T5980] bond3: entered promiscuous mode [ 1101.207316][ T5980] bond3: entered allmulticast mode [ 1101.223770][ T5980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1106.241629][ T9299] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1116.109128][ T6033] wg1 speed is unknown, defaulting to 1000 [ 1119.429863][ T38] audit: type=1326 audit(1763432307.000:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.4.15229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x0 [ 1123.204674][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1123.339540][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1123.349538][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1123.359720][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1123.364921][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1125.443659][ T5116] Bluetooth: hci4: command tx timeout [ 1128.264368][ T5116] Bluetooth: hci4: command tx timeout [ 1128.916518][ T6094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1130.417891][ T5116] Bluetooth: hci4: command tx timeout [ 1131.143168][ T3786] bond0: (slave syz_tun): Releasing backup interface [ 1132.379626][ T5116] Bluetooth: hci4: command tx timeout [ 1136.392621][T18786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1136.407095][T18786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1136.411383][T18786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1136.438361][T18786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1136.442213][T18786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1137.948777][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1137.961495][ T6068] wg1 speed is unknown, defaulting to 1000 [ 1138.417432][T18786] Bluetooth: hci5: command tx timeout [ 1138.677901][ T9299] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1140.467027][T18786] Bluetooth: hci5: command tx timeout [ 1140.685063][ T6118] wg1 speed is unknown, defaulting to 1000 [ 1142.486307][T18786] Bluetooth: hci5: command tx timeout [ 1144.419629][T18786] Bluetooth: hci5: command tx timeout [ 1152.167844][ T6188] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1152.167876][ T6188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1152.167987][ T6188] vhci_hcd vhci_hcd.0: Device attached [ 1152.168197][ T6194] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 1152.168220][ T6194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1152.168285][ T6194] vhci_hcd vhci_hcd.0: Device attached [ 1152.168476][ T6192] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1152.168499][ T6192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1152.168562][ T6192] vhci_hcd vhci_hcd.0: Device attached [ 1152.171972][ T6200] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1153.023147][ T6188] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1153.068703][ T6188] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 1153.068734][ T6188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1153.088303][ T6188] vhci_hcd vhci_hcd.0: Device attached [ 1153.095520][ T6188] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1153.132724][ T6188] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 1153.132756][ T6188] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1153.132905][ T6188] vhci_hcd vhci_hcd.0: Device attached [ 1153.168541][ T6204] vhci_hcd: connection closed [ 1153.193759][ T37] vhci_hcd: stop threads [ 1153.193783][ T37] vhci_hcd: release socket [ 1153.194580][ T37] vhci_hcd: disconnect device [ 1153.197109][ T6202] vhci_hcd: connection closed [ 1153.220904][ T6195] vhci_hcd: connection closed [ 1153.228394][ T6193] vhci_hcd: connection closed [ 1153.236475][ T6189] vhci_hcd: connection closed [ 1153.245787][ T37] vhci_hcd: stop threads [ 1153.245809][ T37] vhci_hcd: release socket [ 1153.245884][ T37] vhci_hcd: disconnect device [ 1153.246259][ T37] vhci_hcd: stop threads [ 1153.246270][ T37] vhci_hcd: release socket [ 1153.246303][ T37] vhci_hcd: disconnect device [ 1153.246619][ T37] vhci_hcd: stop threads [ 1153.246629][ T37] vhci_hcd: release socket [ 1153.246662][ T37] vhci_hcd: disconnect device [ 1153.246971][ T37] vhci_hcd: stop threads [ 1153.246981][ T37] vhci_hcd: release socket [ 1153.247014][ T37] vhci_hcd: disconnect device [ 1153.312735][ T8444] vhci_hcd: vhci_device speed not set [ 1155.718679][ T6210] can: request_module (can-proto-0) failed. [ 1159.234190][ T6033] bond0: (slave syz_tun): Releasing backup interface [ 1160.968624][ T6033] syz_tun (unregistering): left promiscuous mode [ 1160.968657][ T6033] syz_tun (unregistering): left allmulticast mode [ 1163.243082][ T8444] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1164.072233][ T8444] usb 5-1: Using ep0 maxpacket: 8 [ 1164.103991][ T8444] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1164.104025][ T8444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.104047][ T8444] usb 5-1: Product: syz [ 1164.104063][ T8444] usb 5-1: Manufacturer: syz [ 1164.104078][ T8444] usb 5-1: SerialNumber: syz [ 1164.147452][ T8444] usb 5-1: config 0 descriptor?? [ 1165.310450][ T8444] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1167.074467][ T8444] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1167.262662][ T866] usb 5-1: USB disconnect, device number 16 [ 1168.262817][ T6068] chnl_net:caif_netlink_parms(): no params data found [ 1170.456765][T30016] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1179.674183][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15335'. [ 1179.674215][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15335'. [ 1179.674233][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15335'. [ 1183.741816][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.741856][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 1184.367156][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1184.412585][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1184.427851][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1184.477797][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1184.481566][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1187.053759][ T5116] Bluetooth: hci0: command tx timeout [ 1189.152142][ T5116] Bluetooth: hci0: command tx timeout [ 1190.642993][T18786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1190.672386][T18786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1190.683169][T18786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1190.713236][T18786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1190.722444][T18786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1191.226240][T18786] Bluetooth: hci0: command tx timeout [ 1193.505307][ T5116] Bluetooth: hci0: command tx timeout [ 1194.867699][ T5116] Bluetooth: hci4: command tx timeout [ 1197.160138][ T5116] Bluetooth: hci4: command tx timeout [ 1197.167906][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1199.144543][ T5116] Bluetooth: hci4: command tx timeout [ 1199.164391][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.164429][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 1200.749058][T29990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1200.759674][ T6343] wg1 speed is unknown, defaulting to 1000 [ 1201.117495][ T5116] Bluetooth: hci4: command tx timeout [ 1207.773074][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.773116][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 1208.929221][ T6306] wg1 speed is unknown, defaulting to 1000 [ 1223.024372][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.024415][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 1227.918184][ T6477] netlink: 'syz.4.15417': attribute type 1 has an invalid length. [ 1227.986705][ T6343] chnl_net:caif_netlink_parms(): no params data found [ 1228.381613][ T6477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1229.422285][ T6478] bond4: (slave geneve3): making interface the new active one [ 1229.860938][ T6478] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1230.925433][ T6492] usb usb9: usbfs: process 6492 (syz.4.15421) did not claim interface 0 before use [ 1232.890258][T30015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1235.971909][ T37] bridge0: port 3(dummy0) entered disabled state [ 1239.319665][ T37] bridge_slave_1: left allmulticast mode [ 1239.319836][ T37] bridge_slave_1: left promiscuous mode [ 1239.320130][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.859403][T18786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1241.914888][T18786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1241.919383][T18786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1241.920688][T18786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1241.921567][T18786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1242.101850][ T37] bridge_slave_0: left allmulticast mode [ 1242.101882][ T37] bridge_slave_0: left promiscuous mode [ 1242.102147][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.062798][ T5116] Bluetooth: hci5: command tx timeout [ 1246.008543][T18786] Bluetooth: hci5: command tx timeout [ 1247.992048][T18786] Bluetooth: hci5: command tx timeout [ 1250.037088][T18786] Bluetooth: hci5: command tx timeout [ 1251.806360][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1251.834694][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1251.838964][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1251.896950][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1252.255015][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1252.423120][ T6557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15449'. [ 1254.533752][T18786] Bluetooth: hci0: command tx timeout [ 1255.172473][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1256.445781][T18786] Bluetooth: hci0: command tx timeout [ 1258.431893][T18786] Bluetooth: hci0: command tx timeout [ 1259.503321][ T38] audit: type=1326 audit(1763432454.046:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.570007][ T38] audit: type=1326 audit(1763432454.109:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.570069][ T38] audit: type=1326 audit(1763432454.119:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.570119][ T38] audit: type=1326 audit(1763432454.119:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.572816][ T38] audit: type=1326 audit(1763432454.119:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.572871][ T38] audit: type=1326 audit(1763432454.119:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.572920][ T38] audit: type=1326 audit(1763432454.119:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.746826][ T38] audit: type=1326 audit(1763432454.277:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.754855][ T38] audit: type=1326 audit(1763432454.308:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1259.754914][ T38] audit: type=1326 audit(1763432454.308:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.4.15462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f218102f6c9 code=0x7ffc0000 [ 1260.413546][T18786] Bluetooth: hci0: command tx timeout [ 1260.868320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1260.868449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1260.868890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1260.869989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1261.005298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1261.005755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1261.006905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1261.008022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1261.009153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1266.805308][T30015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1289.809309][ T37] gretap0 (unregistering): left promiscuous mode [ 1291.910821][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1291.962261][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1291.966315][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1291.967786][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1291.968748][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1294.925314][T18786] Bluetooth: hci6: command tx timeout [ 1295.329804][ T5116] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1296.658630][ T5116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1296.703146][ T5116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1296.704460][ T5116] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1296.725757][ T5116] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1297.047074][T18786] Bluetooth: hci6: command tx timeout [ 1298.868516][T18786] Bluetooth: hci7: command tx timeout [ 1298.964785][T18786] Bluetooth: hci6: command tx timeout [ 1299.606605][T30023] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1300.805939][ T5116] Bluetooth: hci7: command tx timeout [ 1300.944718][ T5116] Bluetooth: hci6: command tx timeout [ 1302.791510][ T5116] Bluetooth: hci7: command tx timeout [ 1304.836200][ T5116] Bluetooth: hci7: command tx timeout [ 1310.545402][ T6750] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1310.567353][ T6750] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1310.588532][ T6750] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1310.589891][ T6750] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1310.590801][ T6750] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1311.327724][T18786] Bluetooth: hci4: command 0x0406 tx timeout [ 1312.698620][T18786] Bluetooth: hci8: command tx timeout [ 1313.695364][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1314.820413][ T5116] Bluetooth: hci8: command tx timeout [ 1316.795553][ T5116] Bluetooth: hci8: command tx timeout [ 1318.776681][ T5116] Bluetooth: hci8: command tx timeout [ 1329.979776][T29990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1333.404184][ T37] bond0 (unregistering): left promiscuous mode [ 1333.404210][ T37] bond_slave_0: left promiscuous mode [ 1333.404426][ T37] bond_slave_1: left promiscuous mode [ 1333.404578][ T37] batadv0: left promiscuous mode [ 1336.685085][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.788422][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.681034][ T37] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1343.784468][ T37] bond0 (unregistering): Released all slaves [ 1343.863607][ T37] bond1 (unregistering): Released all slaves [ 1345.231312][ T37] bond2 (unregistering): Released all slaves [ 1352.205893][T18786] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1352.221348][T18786] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1352.254925][T18786] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1352.256429][T18786] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1352.258302][T18786] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1353.140202][ T6750] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1353.171068][ T6750] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1353.185565][ T6750] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1353.190284][ T6750] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1353.191172][ T6750] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1355.786350][ T5116] Bluetooth: hci10: command tx timeout [ 1355.786968][ T5116] Bluetooth: hci9: command tx timeout [ 1357.883400][ T5116] Bluetooth: hci9: command tx timeout [ 1357.883442][ T5116] Bluetooth: hci10: command tx timeout [ 1359.951624][ T5116] Bluetooth: hci5: command 0x0406 tx timeout [ 1359.951667][ T5116] Bluetooth: hci10: command tx timeout [ 1359.951693][ T5116] Bluetooth: hci9: command tx timeout [ 1361.899153][T29999] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1362.310272][T18786] Bluetooth: hci9: command tx timeout [ 1362.310312][T18786] Bluetooth: hci10: command tx timeout [ 1363.684934][ T37] bond3 (unregistering): Released all slaves [ 1369.129634][ T39] INFO: task kworker/u8:62:30016 blocked for more than 144 seconds. [ 1369.129664][ T39] Not tainted syzkaller #0 [ 1369.129676][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1369.129687][ T39] task:kworker/u8:62 state:D stack:20984 pid:30016 tgid:30016 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1369.129752][ T39] Workqueue: events_unbound linkwatch_event [ 1369.129788][ T39] Call Trace: [ 1369.129797][ T39] [ 1369.129814][ T39] __schedule+0x16f3/0x4c20 [ 1369.129863][ T39] ? __mod_timer+0xb64/0xf60 [ 1369.129900][ T39] ? __pfx___schedule+0x10/0x10 [ 1369.129953][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1369.129990][ T39] rt_mutex_schedule+0x77/0xf0 [ 1369.130013][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1369.130041][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1369.130089][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1369.130119][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1369.130148][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1369.130188][ T39] ? linkwatch_event+0xe/0x60 [ 1369.130224][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1369.130268][ T39] ? linkwatch_event+0xe/0x60 [ 1369.130294][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1369.130319][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1369.130351][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1369.130382][ T39] linkwatch_event+0xe/0x60 [ 1369.130409][ T39] process_scheduled_works+0xae1/0x17b0 [ 1369.130472][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1369.130521][ T39] worker_thread+0x8a0/0xda0 [ 1369.130581][ T39] kthread+0x711/0x8a0 [ 1369.130620][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1369.130649][ T39] ? __pfx_kthread+0x10/0x10 [ 1369.130679][ T39] ? rt_spin_unlock+0x150/0x200 [ 1369.130711][ T39] ? rt_spin_unlock+0x161/0x200 [ 1369.130735][ T39] ? __pfx_kthread+0x10/0x10 [ 1369.130768][ T39] ret_from_fork+0x4bc/0x870 [ 1369.130799][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1369.130836][ T39] ? __switch_to_asm+0x39/0x70 [ 1369.130859][ T39] ? __switch_to_asm+0x33/0x70 [ 1369.130880][ T39] ? __pfx_kthread+0x10/0x10 [ 1369.130915][ T39] ret_from_fork_asm+0x1a/0x30 [ 1369.130959][ T39] [ 1369.131004][ T39] [ 1369.131004][ T39] Showing all locks held in the system: [ 1369.131019][ T39] 3 locks held by ktimers/0/16: [ 1369.131035][ T39] 4 locks held by rcuc/1/28: [ 1369.131048][ T39] 4 locks held by ktimers/1/29: [ 1369.131062][ T39] 4 locks held by kworker/u8:2/37: [ 1369.131075][ T39] 1 lock held by khungtaskd/39: [ 1369.131088][ T39] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1369.131156][ T39] 3 locks held by kworker/u8:7/1021: [ 1369.131169][ T39] #0: ffff88802f600938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1369.131235][ T39] #1: ffffc900047c7ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1369.131293][ T39] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 1369.131363][ T39] 2 locks held by getty/5554: [ 1369.131376][ T39] #0: ffff88823bf848a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1369.131433][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1369.131495][ T39] 4 locks held by syz-executor/5785: [ 1369.131509][ T39] 2 locks held by syz-executor/5811: [ 1369.131526][ T39] 3 locks held by kworker/1:3/5876: [ 1369.131540][ T39] 3 locks held by kworker/1:8/8444: [ 1369.131553][ T39] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1369.131609][ T39] #1: ffffc900048a7ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1369.131664][ T39] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1369.131730][ T39] 3 locks held by kworker/u9:0/18786: [ 1369.131743][ T39] #0: ffff88805dfed138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1369.131799][ T39] #1: ffffc9000c677ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1369.131857][ T39] #2: ffff888062154e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1369.131913][ T39] 3 locks held by kworker/u8:62/30016: [ 1369.131927][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1369.131989][ T39] #1: ffffc9001ebefba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1369.132045][ T39] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1369.132100][ T39] 5 locks held by kworker/u8:67/30023: [ 1369.132116][ T39] 1 lock held by syz-executor/6306: [ 1369.132128][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1369.132186][ T39] 2 locks held by syz-executor/6343: [ 1369.132200][ T39] #0: ffffffff8ed65910 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1369.132265][ T39] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1369.132316][ T39] 1 lock held by syz-executor/6514: [ 1369.132330][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1369.132392][ T39] 1 lock held by syz-executor/6552: [ 1369.132404][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1369.132465][ T39] 1 lock held by syz.4.15468/6603: [ 1369.132478][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 1369.132528][ T39] 1 lock held by syz-executor/6678: [ 1369.132541][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1369.132601][ T39] 1 lock held by syz-executor/6686: [ 1369.132614][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1369.132674][ T39] 1 lock held by syz-executor/6748: [ 1369.132688][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1369.132749][ T39] 1 lock held by syz-executor/6853: [ 1369.132762][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1369.132822][ T39] 1 lock held by syz-executor/6860: [ 1369.132834][ T39] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1369.132894][ T39] 1 lock held by syz.2.15606/6906: [ 1369.132906][ T39] [ 1369.132912][ T39] ============================================= [ 1369.132912][ T39] [ 1369.132922][ T39] NMI backtrace for cpu 0 [ 1369.132938][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1369.132962][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1369.132976][ T39] Call Trace: [ 1369.132985][ T39] [ 1369.132995][ T39] dump_stack_lvl+0x189/0x250 [ 1369.133033][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1369.133066][ T39] ? __pfx__printk+0x10/0x10 [ 1369.133107][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1369.133137][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1369.133166][ T39] ? __pfx__printk+0x10/0x10 [ 1369.133198][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1369.133233][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1369.133263][ T39] watchdog+0xf60/0xfa0 [ 1369.133300][ T39] ? watchdog+0x1e2/0xfa0 [ 1369.133338][ T39] kthread+0x711/0x8a0 [ 1369.133373][ T39] ? __pfx_watchdog+0x10/0x10 [ 1369.133404][ T39] ? __pfx_kthread+0x10/0x10 [ 1369.133433][ T39] ? rt_spin_unlock+0x150/0x200 [ 1369.133465][ T39] ? rt_spin_unlock+0x161/0x200 [ 1369.133489][ T39] ? __pfx_kthread+0x10/0x10 [ 1369.133523][ T39] ret_from_fork+0x4bc/0x870 [ 1369.133553][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1369.133588][ T39] ? __switch_to_asm+0x39/0x70 [ 1369.133609][ T39] ? __switch_to_asm+0x33/0x70 [ 1369.133630][ T39] ? __pfx_kthread+0x10/0x10 [ 1369.133663][ T39] ret_from_fork_asm+0x1a/0x30 [ 1369.133705][ T39] [ 1369.133714][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1369.133742][ C1] NMI backtrace for cpu 1 [ 1369.133765][ C1] CPU: 1 UID: 0 PID: 5876 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1369.133787][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1369.133800][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 1369.133830][ C1] RIP: 0010:rt_mutex_slowunlock+0x493/0x8a0 [ 1369.133855][ C1] Code: 49 8d 7d 50 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 40 81 5d f7 49 c7 45 50 00 00 00 00 4c 89 ef 4c 89 f6 e8 7d 25 01 00 87 01 00 00 31 f6 4c 8b 74 24 18 4c 89 ff e8 39 f7 cd f6 48 8b [ 1369.133872][ C1] RSP: 0018:ffffc90004fd7900 EFLAGS: 00000246 [ 1369.133888][ C1] RAX: 96151914c8894d00 RBX: ffffffff8dfc51c0 RCX: 0000000000000000 [ 1369.133902][ C1] RDX: 0000000000000006 RSI: ffffffff8cd8e679 RDI: 00000000ffffffff [ 1369.133915][ C1] RBP: ffffc90004fd79f8 R08: ffffffff8ed64077 R09: 1ffffffff1dac80e [ 1369.133930][ C1] R10: dffffc0000000000 R11: fffffbfff1dac80f R12: dffffc0000000000 [ 1369.133945][ C1] R13: ffffffff8dfc5180 R14: 0000000000000a06 R15: 1ffff920009faf28 [ 1369.133959][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 1369.133976][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1369.133989][ C1] CR2: 00007ffdf21a666c CR3: 00000000705f0000 CR4: 00000000003526f0 [ 1369.134007][ C1] Call Trace: [ 1369.134015][ C1] [ 1369.134023][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 1369.134047][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1369.134072][ C1] ? rt_spin_unlock+0x150/0x200 [ 1369.134096][ C1] ? rt_spin_unlock+0x161/0x200 [ 1369.134119][ C1] wg_ratelimiter_gc_entries+0x3a8/0x480 [ 1369.134147][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1369.134171][ C1] process_scheduled_works+0xae1/0x17b0 [ 1369.134211][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1369.134245][ C1] worker_thread+0x8a0/0xda0 [ 1369.134284][ C1] kthread+0x711/0x8a0 [ 1369.134313][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1369.134335][ C1] ? __pfx_kthread+0x10/0x10 [ 1369.134360][ C1] ? rt_spin_unlock+0x150/0x200 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1369.134384][ C1] ? rt_spin_unlock+0x161/0x200 [ 1369.134405][ C1] ? __pfx_kthread+0x10/0x10 [ 1369.134432][ C1] ret_from_fork+0x4bc/0x870 [ 1369.134455][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1369.134489][ C1] ? __switch_to_asm+0x39/0x70 [ 1369.134507][ C1] ? __switch_to_asm+0x33/0x70 [ 1369.134524][ C1] ? __pfx_kthread+0x10/0x10 [ 1369.134551][ C1] ret_from_fork_asm+0x1a/0x30 [ 1369.134580][ C1] [ 1369.681805][ T6750] Bluetooth: hci0: command 0x0406 tx timeout [ 1370.986005][ T5116] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1372.012330][ T5116] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1372.261690][ T5116] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1372.282801][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.378811][ T5116] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1372.379678][ T5116] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1374.448553][ T5116] Bluetooth: hci11: command tx timeout [ 1376.708922][ T5116] Bluetooth: hci11: command tx timeout [ 1379.054880][ T5116] Bluetooth: hci11: command tx timeout