last executing test programs: 13.532742166s ago: executing program 3 (id=1654): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086607, 0x20001419) 13.29514843s ago: executing program 3 (id=1655): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc5a8100ae541d002007000000", @ANYRES32=r1, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}}, 0x0) 9.983906149s ago: executing program 3 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec9700000c2f"], 0xffe) 9.630505935s ago: executing program 3 (id=1670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x26, 0x140b, 0x4d567f5d6d405241}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xb}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x48021) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) fstat(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) syz_clone(0x0, 0x0, 0xffffffffffffff89, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x1f, 0x0, 0x8000, 0x3}, &(0x7f0000000500)=0x18) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6be9a6ca1982f067b8bb7c823cd3c35be6f37fd57ce03e65426ba651e8d3ed1c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44090}, 0x4000) 9.2498779s ago: executing program 3 (id=1675): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 9.032780901s ago: executing program 3 (id=1676): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\xdb\x00p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw^I\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6kYH+\xa5\xdcxUY30xffffffffffffffff}) recvfrom(r0, &(0x7f0000000100)=""/31, 0x1f, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r2 = dup(r1) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() write$FUSE_NOTIFY_STORE(r2, 0x0, 0x0) 5.010092714s ago: executing program 1 (id=1695): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(r0, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4.165476192s ago: executing program 4 (id=1704): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, 0x0, 0x0) 3.288980581s ago: executing program 4 (id=1708): syz_usb_connect(0x0, 0xa0e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000ec69a008cd0c8000c9f0010203010902fc0903020000000904"], 0x0) 2.182273757s ago: executing program 2 (id=1714): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) 1.852134299s ago: executing program 1 (id=1717): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socketpair(0x0, 0x0, 0x0, 0x0) 1.827604753s ago: executing program 2 (id=1718): socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) 1.722368969s ago: executing program 4 (id=1719): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, 0x0, 0x0) 1.603153074s ago: executing program 2 (id=1721): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 1.497842249s ago: executing program 0 (id=1722): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x10) 1.469934083s ago: executing program 2 (id=1723): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 1.382907439s ago: executing program 1 (id=1724): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x85, 0x0) 1.351812405s ago: executing program 0 (id=1725): syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f00000001c0)) close(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.262797111s ago: executing program 0 (id=1726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = epoll_create(0x9) dup2(r2, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.151495844s ago: executing program 1 (id=1727): socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x58, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[{0x10}, {0x10}], 0x20}, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.086937461s ago: executing program 2 (id=1728): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0x6}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = accept$alg(r0, 0x0, 0x0) r7 = dup(r6) r8 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r8, 0x200004) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) 1.063869086s ago: executing program 0 (id=1729): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "216bda", 0x8, 0x11, 0x0, @private1, @empty, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 962.189022ms ago: executing program 0 (id=1730): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0xa4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6f, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100000}]}, 0xa4}}, 0x0) 773.123261ms ago: executing program 4 (id=1731): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 541.394244ms ago: executing program 1 (id=1732): openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r4}}, 0x48) 476.756899ms ago: executing program 4 (id=1733): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x0, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='cpuset\x00', 0x0) ioperm(0x0, 0xd6, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bc090000001b00005509010000000000"], 0x0, 0x0, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 256.083712ms ago: executing program 4 (id=1734): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f000032b000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x1010, r3, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x25) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)={0x0, 0x5, 0x1, 0x8, 0x0, "dadd1023b1df022dace17a32d21100000000de"}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0xd) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r6, @ANYRESDEC=r5, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) r8 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r8, &(0x7f0000000000)=""/53, 0x35) getdents(r8, 0xfffffffffffffffd, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 70.281481ms ago: executing program 0 (id=1735): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x1, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000340)='3\x00', 0x2) 0s ago: executing program 2 (id=1736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000003d80)=ANY=[@ANYBLOB="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"], 0x1009, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001d80)="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", 0x282}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): sim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.046892][ T9378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.067838][ T9378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.427569][ T5127] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 378.455445][ T2842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.463561][ T2842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.712792][ T5246] usb 4-1: USB disconnect, device number 58 [ 378.728576][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.751893][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.771627][ T5127] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 378.787874][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.806974][ T5127] usb 3-1: config 0 descriptor?? [ 378.826141][ T5127] usb-storage 3-1:0.0: USB Mass Storage device detected [ 378.846412][ T5127] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 378.870648][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.873964][ T5133] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 378.877468][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.070642][ T5133] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.105371][ T5133] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.124156][ T5133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.145205][ T5133] usb 1-1: Product: syz [ 379.155232][ T5133] usb 1-1: Manufacturer: syz [ 379.168107][ T5133] usb 1-1: SerialNumber: syz [ 379.188557][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.197407][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.213653][ T5127] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 379.419120][ T5127] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.469817][ T5127] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.516137][ T5127] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.545832][ T5127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.575234][ T5127] usb 2-1: invalid MIDI out EP 0 [ 379.677733][ T5127] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 379.819757][ T5127] usb 2-1: USB disconnect, device number 64 [ 379.845136][ T5133] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 379.874426][ T5133] cdc_ncm 1-1:1.0: bind() failure [ 379.902174][ T5133] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 380.152660][ T5133] cdc_ncm 1-1:1.1: bind() failure [ 380.180700][ T5133] usb 1-1: USB disconnect, device number 58 [ 380.811300][ T9515] loop0: detected capacity change from 0 to 6 [ 380.834409][ T9515] Dev loop0: unable to read RDB block 6 [ 380.853633][ T9515] loop0: unable to read partition table [ 380.881201][ T9515] loop0: partition table beyond EOD, truncated [ 380.917448][ T9515] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 380.917448][ T9515] ) failed (rc=-5) [ 381.023309][ T5127] usb 3-1: USB disconnect, device number 55 [ 381.170643][ T5129] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 381.185140][ T9525] loop0: detected capacity change from 0 to 7 [ 381.224549][ T9525] Dev loop0: unable to read RDB block 7 [ 381.242244][ T9525] loop0: unable to read partition table [ 381.491432][ T5129] usb 1-1: not running at top speed; connect to a high speed hub [ 381.509922][ T9525] loop0: partition table beyond EOD, truncated [ 381.571291][ T29] audit: type=1800 audit(1719546716.751:121): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1269" name="file0" dev="sda1" ino=1986 res=0 errno=0 [ 381.615627][ T5129] usb 1-1: config 9 has an invalid interface number: 29 but max is 3 [ 381.697046][ T9525] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 381.697046][ T9525] ) failed (rc=-5) [ 381.753981][ T5129] usb 1-1: config 9 has an invalid interface number: 4 but max is 3 [ 381.825109][ T5129] usb 1-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 381.953536][ T5129] usb 1-1: config 9 has an invalid interface number: 48 but max is 3 [ 381.972435][ T5129] usb 1-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 382.000047][ T5129] usb 1-1: config 9 has 3 interfaces, different from the descriptor's value: 4 [ 382.015509][ T5129] usb 1-1: config 9 has no interface number 0 [ 382.094410][ T5129] usb 1-1: config 9 has no interface number 1 [ 382.100625][ T5129] usb 1-1: config 9 has no interface number 2 [ 382.107702][ T5129] usb 1-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 382.121079][ T5129] usb 1-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 382.133688][ T5129] usb 1-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 382.144731][ T5129] usb 1-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 382.156822][ T5129] usb 1-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 382.184938][ T5129] usb 1-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 382.206789][ T5129] usb 1-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 382.220628][ T5129] usb 1-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 382.247815][ T5129] usb 1-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.264046][ T5129] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 382.284128][ T5129] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 382.297228][ T5129] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 382.342462][ T5129] usb 1-1: config 9 interface 48 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 382.384580][ T5129] usb 1-1: config 9 interface 29 has no altsetting 0 [ 382.413646][ T5129] usb 1-1: config 9 interface 4 has no altsetting 0 [ 382.425797][ T5129] usb 1-1: config 9 interface 48 has no altsetting 0 [ 382.436029][ T5129] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 382.457498][ T8] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 382.465189][ T5129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.486351][ T5129] usb 1-1: Product: Е [ 382.787641][ T9548] ebtables: ebtables: counters copy to user failed while replacing table [ 382.964130][ T5129] usb 1-1: Manufacturer: о [ 383.059481][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.077405][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 383.097435][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 383.116354][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.137953][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.215973][ T9565] netlink: 'syz.4.1277': attribute type 10 has an invalid length. [ 383.250451][ T8] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 383.260988][ T9565] team0: Device ipvlan1 failed to register rx_handler [ 383.269753][ T5129] usb 1-1: unknown interface protocol 0x4f, assuming v1 [ 383.277069][ T5129] usb 1-1: cannot find UAC_HEADER [ 383.317598][ T56] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 383.324083][ T5129] snd-usb-audio 1-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 383.379326][ T5129] usb 1-1: USB disconnect, device number 59 [ 383.404605][ T9565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1277'. [ 383.420444][ T8] usb 4-1: USB disconnect, device number 59 [ 383.429646][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1277'. [ 383.446091][ T9565] netlink: 'syz.4.1277': attribute type 2 has an invalid length. [ 383.538286][ T56] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 383.557369][ T56] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 383.577359][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.598770][ T56] usb 2-1: config 0 descriptor?? [ 383.609609][ T56] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 383.616489][ T56] usb 2-1: No valid video chain found. [ 383.846142][ T8] usb 2-1: USB disconnect, device number 65 [ 384.043860][ T9576] netlink: 'syz.4.1282': attribute type 10 has an invalid length. [ 384.076862][ T9576] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1282'. [ 384.097474][ T56] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 384.117111][ T9576] team0: entered promiscuous mode [ 384.137399][ T9576] team_slave_0: entered promiscuous mode [ 384.145048][ T9576] team_slave_1: entered promiscuous mode [ 384.158127][ T9576] bridge0: port 3(team0) entered blocking state [ 384.164823][ T9576] bridge0: port 3(team0) entered disabled state [ 384.177663][ T9576] team0: entered allmulticast mode [ 384.193800][ T9576] team_slave_0: entered allmulticast mode [ 384.210030][ T9576] team_slave_1: entered allmulticast mode [ 384.223429][ T9576] bridge0: port 3(team0) entered blocking state [ 384.229838][ T9576] bridge0: port 3(team0) entered forwarding state [ 385.030914][ T56] usb 1-1: config 0 has no interfaces? [ 385.060254][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.116750][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.147404][ T56] usb 1-1: Product: syz [ 385.151606][ T56] usb 1-1: Manufacturer: syz [ 385.162740][ T56] usb 1-1: SerialNumber: syz [ 385.170866][ T56] usb 1-1: config 0 descriptor?? [ 386.564402][ T5129] usb 1-1: USB disconnect, device number 60 [ 386.867682][ T9605] block nbd2: shutting down sockets [ 386.935889][ T29] audit: type=1326 audit(1719546722.121:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec6975b29 code=0x7ffc0000 [ 387.027519][ T29] audit: type=1326 audit(1719546722.121:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feec696cba7 code=0x7ffc0000 [ 387.082272][ T29] audit: type=1326 audit(1719546722.121:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feec6911559 code=0x7ffc0000 [ 387.167409][ T29] audit: type=1326 audit(1719546722.121:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec6975b29 code=0x7ffc0000 [ 387.188886][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.225978][ T29] audit: type=1326 audit(1719546722.121:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7feec6975b29 code=0x7ffc0000 [ 387.253280][ T29] audit: type=1326 audit(1719546722.121:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec6975b29 code=0x7ffc0000 [ 387.274750][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.281392][ T29] audit: type=1326 audit(1719546722.121:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feec6975b29 code=0x7ffc0000 [ 387.305313][ T29] audit: type=1326 audit(1719546722.121:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec6975b29 code=0x7ffc0000 [ 387.347684][ T29] audit: type=1326 audit(1719546722.121:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7feec6975b29 code=0x7ffc0000 [ 387.352029][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.380659][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.391621][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.391645][ T29] audit: type=1326 audit(1719546722.121:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9604 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec6975b29 code=0x7ffc0000 [ 387.441100][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.454863][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.462369][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.497657][ T5172] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 387.538525][ T9615] ip6gretap0 speed is unknown, defaulting to 1000 [ 387.587427][ T56] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 387.693449][ T5172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 387.707174][ T5172] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 387.721617][ T5172] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 387.740920][ T5172] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 387.759897][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.772803][ T5172] usb 3-1: Product: syz [ 387.777598][ T5172] usb 3-1: Manufacturer: syz [ 387.782747][ T5172] usb 3-1: SerialNumber: syz [ 387.787654][ T56] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.799022][ T56] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 387.810248][ T56] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 387.821050][ T5172] usb 3-1: config 0 descriptor?? [ 387.827505][ T56] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.843587][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.935560][ T9615] chnl_net:caif_netlink_parms(): no params data found [ 387.936357][ T56] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 388.082406][ T8] usb 5-1: USB disconnect, device number 58 [ 388.443537][ T9635] CIFS mount error: No usable UNC path provided in device string! [ 388.443537][ T9635] [ 388.453679][ T9635] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 388.612934][ T9615] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.714648][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.859787][ T9615] bridge_slave_0: entered allmulticast mode [ 388.985203][ T9615] bridge_slave_0: entered promiscuous mode [ 389.028941][ T9615] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.057142][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.078149][ T9615] bridge_slave_1: entered allmulticast mode [ 389.094403][ T9615] bridge_slave_1: entered promiscuous mode [ 389.160324][ T9615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.205298][ T9615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.587554][ T5089] Bluetooth: hci3: command tx timeout [ 389.641768][ T9615] team0: Port device team_slave_0 added [ 389.655704][ T9615] team0: Port device team_slave_1 added [ 390.347864][ T5078] usb 3-1: USB disconnect, device number 56 [ 390.458422][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'. [ 390.536750][ T5082] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 390.553874][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.561744][ T9656] block nbd4: shutting down sockets [ 390.571618][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.606171][ T9615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.619339][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.626318][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.653151][ T9615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.754447][ T9615] hsr_slave_0: entered promiscuous mode [ 390.772582][ T9615] hsr_slave_1: entered promiscuous mode [ 390.781151][ T9615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.788943][ T9615] Cannot create hsr debugfs directory [ 390.989492][ T5078] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 391.016690][ T9666] ebtables: ebtables: counters copy to user failed while replacing table [ 391.214892][ T9615] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.221068][ T5078] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 391.247469][ T5078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.266832][ T5078] usb 2-1: config 0 descriptor?? [ 391.286950][ T5078] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 391.389170][ T9615] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.497392][ T56] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 391.513409][ T9615] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.634883][ T9615] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.669906][ T5089] Bluetooth: hci3: command tx timeout [ 391.695589][ T5078] gspca_sonixj: reg_r err -32 [ 391.707582][ T5078] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 391.718335][ T5172] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 391.736087][ T56] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 391.781600][ T56] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 391.800065][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.827073][ T56] usb 3-1: config 0 descriptor?? [ 391.843477][ T9615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.857915][ T56] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 391.864814][ T56] usb 3-1: No valid video chain found. [ 391.874960][ T9615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.892889][ T9615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.918057][ T9615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.936904][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 391.951193][ T5172] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.978943][ T5172] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 392.009772][ T5172] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 392.019665][ T5172] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 392.029265][ T5172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.103267][ T56] usb 3-1: USB disconnect, device number 57 [ 392.178316][ T5172] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 392.218437][ T9615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.248362][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.274107][ T9615] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.276801][ T5246] usb 5-1: USB disconnect, device number 59 [ 392.287381][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.296603][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.303796][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.369778][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.376933][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.508802][ T5172] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 392.730085][ T5172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 392.747647][ T5172] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 392.770509][ T5172] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.793912][ T9615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.806603][ T5172] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 392.835897][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.864589][ T5172] usb 1-1: Product: syz [ 392.874715][ T5172] usb 1-1: Manufacturer: syz [ 392.884830][ T5172] usb 1-1: SerialNumber: syz [ 392.906499][ T5172] usb 1-1: config 0 descriptor?? [ 392.967463][ T9615] veth0_vlan: entered promiscuous mode [ 393.000862][ T9615] veth1_vlan: entered promiscuous mode [ 393.632569][ T9690] CIFS mount error: No usable UNC path provided in device string! [ 393.632569][ T9690] [ 393.642767][ T9690] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 393.947065][ T5089] Bluetooth: hci3: command tx timeout [ 393.967277][ T9615] veth0_macvtap: entered promiscuous mode [ 393.999882][ T9615] veth1_macvtap: entered promiscuous mode [ 394.119278][ T5246] usb 2-1: USB disconnect, device number 66 [ 394.440237][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.986464][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.139635][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.152449][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.162454][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.175258][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.191733][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.239941][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.269206][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.298741][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.317449][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.334636][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.354572][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.365244][ T5246] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 395.387726][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.407832][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.437810][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.465452][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.540175][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.540278][ T5128] usb 1-1: USB disconnect, device number 61 [ 395.550921][ T5246] usb 2-1: Using ep0 maxpacket: 32 [ 395.601599][ T5246] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 395.629357][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.637339][ T5246] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 395.657435][ T5246] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 395.686445][ T5246] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.721763][ T5246] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 395.743774][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.765116][ T5246] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.776450][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.796689][ T5246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 395.807628][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.828320][ T5246] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 395.847387][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.876663][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.892397][ T5246] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 395.932216][ T5246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.940564][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.998211][ T5089] Bluetooth: hci3: command tx timeout [ 396.003925][ T5246] usb 2-1: Product: В [ 396.029508][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.229125][ T5129] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 396.864360][ T5246] usb 2-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 396.883850][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.887353][ T5246] usb 2-1: SerialNumber: syz [ 396.909749][ T5246] usb 2-1: config 0 descriptor?? [ 396.930420][ T5246] pvrusb2: Hardware description: Terratec Grabster AV400 [ 396.934187][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.947330][ T5246] pvrusb2: ********** [ 396.952485][ T5246] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 396.990085][ T5246] pvrusb2: Important functionality might not be entirely working. [ 396.997540][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.004410][ T5246] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 397.017802][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.027324][ T5246] pvrusb2: ********** [ 397.169302][ T1965] pvrusb2: Invalid write control endpoint [ 397.190414][ T5129] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 397.223745][ T5129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.223891][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.242246][ T1965] pvrusb2: Invalid write control endpoint [ 397.253237][ T1965] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 397.275650][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.279184][ T5129] usb 3-1: config 0 descriptor?? [ 397.288566][ T1965] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 397.317097][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.329581][ T5129] usb-storage 3-1:0.0: USB Mass Storage device detected [ 397.336873][ T1965] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 397.339267][ T5129] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 397.406832][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.442345][ T1965] pvrusb2: Device being rendered inoperable [ 397.472334][ T1965] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 397.483934][ T1965] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 397.492559][ T1965] pvrusb2: Attached sub-driver cx25840 [ 397.498913][ T1965] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 397.502194][ T9615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.517854][ T1965] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 397.588727][ T9615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.633071][ T9705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.634530][ T9615] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.652976][ T9705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.728787][ T9615] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.003327][ T9723] veth0_vlan: entered allmulticast mode [ 398.378925][ T9723] veth0_vlan: left promiscuous mode [ 398.546718][ T9723] veth0_vlan: entered promiscuous mode [ 398.594977][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.632756][ T5172] usb 2-1: USB disconnect, device number 67 [ 398.667471][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.791847][ T2479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.801001][ T2479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.845389][ T56] usb 3-1: USB disconnect, device number 58 [ 399.457408][ T5127] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 399.690061][ T5127] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 399.728773][ T5127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.751266][ T5127] usb 1-1: config 0 descriptor?? [ 399.771186][ T5127] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 400.716178][ T5127] gspca_sonixj: reg_r err -32 [ 400.746290][ T5127] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 401.329543][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.363177][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.427493][ T5089] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 401.720438][ T9752] ebtables: ebtables: counters copy to user failed while replacing table [ 402.177484][ T5078] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 402.487877][ T5129] usb 1-1: USB disconnect, device number 62 [ 402.509328][ T5078] usb 4-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 402.523815][ T5078] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 402.542092][ T5078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.582021][ T5078] usb 4-1: config 0 descriptor?? [ 402.591604][ T5078] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 402.617636][ T5078] usb 4-1: No valid video chain found. [ 402.765115][ T9775] loop0: detected capacity change from 0 to 7 [ 402.782891][ T9775] Dev loop0: unable to read RDB block 7 [ 402.797462][ T9775] loop0: AHDI p4 [ 402.805148][ T9775] loop0: partition table partially beyond EOD, truncated [ 402.836969][ T5129] usb 4-1: USB disconnect, device number 60 [ 402.905641][ T5089] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 405.825921][ T9795] loop0: detected capacity change from 0 to 7 [ 405.867704][ T9795] Dev loop0: unable to read RDB block 7 [ 405.876365][ T9795] loop0: unable to read partition table [ 405.889915][ T9795] loop0: partition table beyond EOD, truncated [ 405.910669][ T9795] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 405.910669][ T9795] ) failed (rc=-5) [ 406.600838][ T9808] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1338'. [ 407.287435][ T5128] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 407.474277][ T5128] usb 2-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 407.499915][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.553282][ T5128] usb 2-1: config 0 descriptor?? [ 407.597132][ T5128] usb-storage 2-1:0.0: USB Mass Storage device detected [ 407.628650][ T5128] usb-storage 2-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 407.647502][ T5246] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 407.844792][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.857983][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.864055][ T5246] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 407.889207][ T5246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.919650][ T5246] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.944292][ T5246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.956990][ T5246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.999307][ T5246] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.047423][ T5246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.069924][ T5246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 408.079156][ T5246] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.110146][ T5246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.129693][ T5246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 408.161923][ T5246] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.182228][ T5246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.223039][ T5246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 408.240891][ T5246] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.279176][ T5246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.292288][ T5246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 408.314044][ T5246] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.346616][ T5246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.364880][ T5246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 408.379168][ T9834] siw: device registration error -23 [ 408.394654][ T5246] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.426444][ T5246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.448598][ T5246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 408.465615][ T5246] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.593198][ T5246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.615636][ T5246] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 408.624878][ T5246] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 408.638184][ T5246] usb 3-1: Product: syz [ 408.647614][ T5246] usb 3-1: Manufacturer: syz [ 409.373151][ T5246] usb 3-1: SerialNumber: syz [ 409.382969][ T5246] usb 3-1: config 0 descriptor?? [ 409.397671][ T5246] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 409.408032][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 409.497103][ T5129] usb 2-1: USB disconnect, device number 68 [ 409.600772][ T5128] usb 3-1: USB disconnect, device number 59 [ 409.631945][ T5128] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 410.871232][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 410.871250][ T29] audit: type=1800 audit(1719546746.061:362): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1354" name="file0" dev="sda1" ino=1984 res=0 errno=0 [ 411.097507][ T5172] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 411.187685][ T5129] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 411.381594][ T5129] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 411.418088][ T5129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.439307][ T5172] usb 3-1: config 0 has no interfaces? [ 411.449457][ T5172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.450714][ T5129] usb 1-1: config 0 descriptor?? [ 411.984806][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.084865][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.143477][ T5129] usb 1-1: string descriptor 0 read error: -71 [ 412.156816][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.165975][ T5172] usb 3-1: Product: syz [ 412.177461][ T5172] usb 3-1: Manufacturer: syz [ 412.182083][ T5172] usb 3-1: SerialNumber: syz [ 412.188434][ T5129] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 412.198369][ T9886] siw: device registration error -23 [ 412.199019][ T5172] usb 3-1: config 0 descriptor?? [ 412.209498][ T5129] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 412.251081][ T5129] usb 1-1: USB disconnect, device number 63 [ 412.458547][ T5089] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 412.587598][ T5078] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 412.789324][ T5078] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 412.828265][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 412.861985][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 412.891468][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1362'. [ 412.895256][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 412.928841][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 412.938098][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 412.949495][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 412.964361][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.008643][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.042729][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.054142][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.063404][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.074748][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.089344][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.106860][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.151896][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.172480][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.187129][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.215898][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.245188][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.255427][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.267200][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.275582][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.285925][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 413.316183][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.365864][ T5078] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 413.386554][ T5078] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 413.399634][ T5078] usb 4-1: Product: syz [ 413.405559][ T5078] usb 4-1: Manufacturer: syz [ 413.410881][ T5078] usb 4-1: SerialNumber: syz [ 413.429088][ T5078] usb 4-1: config 0 descriptor?? [ 413.438739][ T5078] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 413.484886][ T29] audit: type=1800 audit(1719546748.671:363): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1366" name="file0" dev="sda1" ino=1983 res=0 errno=0 [ 413.651720][ T9] usb 4-1: USB disconnect, device number 61 [ 413.665060][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 413.902497][ T5172] usb 3-1: USB disconnect, device number 60 [ 413.961228][ T5078] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 414.147902][ T5078] usb 1-1: Using ep0 maxpacket: 16 [ 414.224890][ T5078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 414.341975][ T5078] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 414.504609][ T5078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.671838][ T5078] usb 1-1: config 0 descriptor?? [ 414.703654][ T5078] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 414.932467][ T9928] afs: Bad value for 'source' [ 415.107595][ T5078] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 415.331009][ T5078] usb 4-1: Using ep0 maxpacket: 8 [ 415.344684][ T5078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.385475][ T5078] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 415.425426][ T5078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.455836][ T5078] usb 4-1: config 0 descriptor?? [ 415.465383][ T9913] afs: Bad value for 'source' [ 415.481041][ T5078] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 415.488120][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 415.567564][ T5128] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 415.700589][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 415.727480][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.745800][ T5128] usb 3-1: device descriptor read/64, error -71 [ 415.761566][ T9] usb 2-1: config 0 descriptor?? [ 415.898055][ T9930] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1372'. [ 415.968526][ T5078] gspca_vc032x: reg_w err -71 [ 415.973342][ T5078] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 416.009613][ T5078] usb 4-1: USB disconnect, device number 62 [ 416.037632][ T5128] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 416.060250][ T9934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.103187][ T9934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.126787][ T5089] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 416.145854][ T9] usb 2-1: string descriptor 0 read error: -71 [ 416.168286][ T9] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 416.175545][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 416.216218][ T9] usb 2-1: USB disconnect, device number 69 [ 416.222317][ T5128] usb 3-1: device descriptor read/64, error -71 [ 416.367869][ T5128] usb usb3-port1: attempt power cycle [ 416.430029][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.447644][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.689203][ T9942] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 416.788243][ T5128] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 416.828272][ T5128] usb 3-1: device descriptor read/8, error -71 [ 417.107658][ T5128] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 417.133328][ T9960] siw: device registration error -23 [ 417.160050][ T5128] usb 3-1: device descriptor read/8, error -71 [ 417.287986][ T5128] usb usb3-port1: unable to enumerate USB device [ 417.517614][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 417.559613][ T56] usb 1-1: USB disconnect, device number 64 [ 418.564425][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 418.573989][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.583115][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.596485][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.623934][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.648547][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.687829][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.703984][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.726414][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.743038][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.753410][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.776222][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.807435][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.823052][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.842466][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.863966][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.872671][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.885206][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 418.934594][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.959601][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.984634][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.023578][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 419.048929][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.068608][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.090717][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 419.110755][ T56] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 419.111822][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 419.237579][ T5128] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 419.257735][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 419.269231][ T9] usb 4-1: Product: syz [ 419.273428][ T9] usb 4-1: Manufacturer: syz [ 419.297476][ T9] usb 4-1: SerialNumber: syz [ 419.304367][ T9] usb 4-1: config 0 descriptor?? [ 419.321695][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 419.360837][ T56] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 419.391183][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.429686][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.443111][ T5128] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 419.459180][ T5128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.472956][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.498776][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.499391][ T5128] usb 5-1: config 0 descriptor?? [ 419.527275][ T5078] usb 4-1: USB disconnect, device number 63 [ 419.544367][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.557067][ T5078] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 419.591917][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.627912][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.657349][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.704150][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.737830][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.764487][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.768129][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.797600][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.834708][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.842406][ T5089] Bluetooth: hci1: link tx timeout [ 419.848060][ T5089] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 419.858549][ T5128] usb 5-1: string descriptor 0 read error: -71 [ 419.866002][ T5128] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 419.884726][ T5128] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 419.900016][ T5128] usb 5-1: USB disconnect, device number 60 [ 419.934889][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.977547][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.034879][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.083629][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.107431][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.146638][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.199783][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.222878][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.267370][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.304825][ T56] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.345093][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.376452][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.466117][ T56] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 420.519109][ T56] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 420.547148][ T56] usb 2-1: Product: syz [ 420.557583][ T56] usb 2-1: Manufacturer: syz [ 420.562221][ T56] usb 2-1: SerialNumber: syz [ 420.597536][ T56] usb 2-1: config 0 descriptor?? [ 420.622631][ T56] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 420.710598][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 420.843069][ T56] usb 2-1: USB disconnect, device number 70 [ 420.877884][ T56] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 420.897399][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 420.928731][ T9] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 420.957557][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.060359][ T9] usb 1-1: config 0 descriptor?? [ 421.121439][ T9] as10x_usb: device has been detected [ 421.166213][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 421.907488][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 422.217317][ C1] sched: RT throttling activated [ 422.271908][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 422.290799][ T9] as10x_usb: error during firmware upload part1 [ 422.321572][ T9] Registered device nBox DVB-T Dongle [ 422.323461][ T9] usb 1-1: USB disconnect, device number 65 [ 422.480344][ T9] Unregistered device nBox DVB-T Dongle [ 422.481960][ T9] as10x_usb: device has been disconnected [ 423.866701][T10031] trusted_key: encrypted_key: key user:syz not found [ 424.262977][ T5172] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 424.277530][ T5246] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 424.497368][ T5172] usb 2-1: Using ep0 maxpacket: 32 [ 424.505004][ T5246] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 424.524797][ T5246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.534933][ T5172] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 424.549455][ T5172] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 424.570539][ T5246] usb 5-1: config 0 descriptor?? [ 424.579602][ T5172] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 424.606651][ T5172] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.617868][ T5172] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 424.628776][ T5172] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.639842][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 424.647520][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 424.650953][ T5172] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 424.687165][ T5172] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 424.706135][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.720318][ T5172] usb 2-1: Product: В [ 424.724623][ T5172] usb 2-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 424.742320][ T5172] usb 2-1: SerialNumber: syz [ 424.753728][ T5172] usb 2-1: config 0 descriptor?? [ 424.772777][ T5172] pvrusb2: Hardware description: Terratec Grabster AV400 [ 424.789279][ T5172] pvrusb2: ********** [ 424.800247][ T5172] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 424.814864][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.826700][ T5172] pvrusb2: Important functionality might not be entirely working. [ 424.845363][ T5172] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 424.847598][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.860013][ T5172] pvrusb2: ********** [ 424.870598][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 424.900751][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.914382][ T5246] usb 5-1: string descriptor 0 read error: -71 [ 424.927382][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.928493][ T5246] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 424.951034][ T5246] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 424.963868][ T5246] usb 5-1: USB disconnect, device number 61 [ 424.990382][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.001506][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.028062][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.046093][ T1965] pvrusb2: Invalid write control endpoint [ 425.053160][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.068626][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.086999][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.108882][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.121821][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.137457][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.152158][ T1965] pvrusb2: Invalid write control endpoint [ 425.157396][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.168621][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.176214][ T1965] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 425.188011][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.199900][ T1965] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 425.210613][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.228638][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.247397][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.261287][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.277430][ T1965] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 425.313960][ T1965] pvrusb2: Device being rendered inoperable [ 425.331546][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.356092][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.356106][ T1965] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 425.356129][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.367812][ T1965] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 425.394399][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.400179][ T1965] pvrusb2: Attached sub-driver cx25840 [ 425.407375][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.421545][ T1965] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 425.439031][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.440088][ T1965] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 425.458804][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 425.469752][T10049] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 425.477911][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 425.486296][ T9] usb 1-1: Product: syz [ 425.505234][ T9] usb 1-1: Manufacturer: syz [ 425.512659][T10049] team0: Device ipvlan1 failed to register rx_handler [ 425.528613][ T9] usb 1-1: SerialNumber: syz [ 425.539455][ T9] usb 1-1: config 0 descriptor?? [ 425.562574][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 425.597594][ T56] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 425.627752][T10052] loop0: detected capacity change from 0 to 7 [ 425.655624][T10052] Dev loop0: unable to read RDB block 7 [ 425.665703][T10052] loop0: AHDI p4 [ 425.665834][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'. [ 425.670871][T10052] loop0: partition table partially beyond EOD, truncated [ 425.686571][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 425.716468][T10049] netlink: 'syz.3.1407': attribute type 2 has an invalid length. [ 425.763328][ T9] usb 1-1: USB disconnect, device number 66 [ 425.776431][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 425.789349][ T56] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 425.798600][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.822600][ T56] usb 3-1: config 0 descriptor?? [ 425.837133][T10054] loop0: detected capacity change from 0 to 7 [ 425.860532][T10054] Dev loop0: unable to read RDB block 7 [ 425.866237][T10054] loop0: AHDI p3 [ 425.872194][T10054] loop0: partition table partially beyond EOD, truncated [ 426.040742][T10045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.057594][T10045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.086159][ T5082] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 426.104566][ T56] usb 3-1: string descriptor 0 read error: -71 [ 426.127623][ T56] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 426.134417][ T56] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 426.156430][ T56] usb 3-1: USB disconnect, device number 65 [ 426.229710][ T5172] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 427.281196][ T56] usb 2-1: USB disconnect, device number 71 [ 427.346003][ T5172] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 427.376367][ T5172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.395530][ T5172] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.418341][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 427.429860][ T5172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.448361][ T5172] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 427.472796][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 427.490185][ T5172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 427.795457][T10072] afs: Bad value for 'source' [ 427.839007][ T5172] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.267736][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.310765][ T5172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.320257][ T5172] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.361759][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.411054][ T5172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.427753][ T5172] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.459178][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.467038][ T5172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.486456][ T5172] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.506442][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.514700][ T5172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.527394][ T5172] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.547711][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.571871][ T5172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.594491][ T5172] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.631310][ T5082] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 428.632581][ T5172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.659662][ T5172] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 428.673540][ T5172] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 428.687457][ T56] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 428.729877][ T5172] usb 5-1: Product: syz [ 428.744396][ T5172] usb 5-1: Manufacturer: syz [ 428.756803][ T5172] usb 5-1: SerialNumber: syz [ 428.780579][ T5172] usb 5-1: config 0 descriptor?? [ 428.806047][ T5172] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 428.878001][ T56] usb 1-1: device descriptor read/64, error -71 [ 429.029252][ T5172] usb 5-1: USB disconnect, device number 62 [ 429.049549][ T5172] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 429.152256][ T29] audit: type=1800 audit(1719546764.341:364): pid=10087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1419" name="file0" dev="sda1" ino=1985 res=0 errno=0 [ 429.237645][ T56] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 429.427993][ T56] usb 1-1: device descriptor read/64, error -71 [ 429.558973][ T56] usb usb1-port1: attempt power cycle [ 430.027694][ T56] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 430.148347][ T56] usb 1-1: device descriptor read/8, error -71 [ 431.250956][T10108] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1422'. [ 431.397473][ T5078] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 431.467418][ T5127] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 431.608128][ T5078] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 431.617577][ T5078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.626773][ T5078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.667984][ T5078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 431.678275][ T5078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.687272][ T5078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.691575][ T5127] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 431.714063][ T5078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 431.732389][ T5078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.748160][ T5078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.756912][ T5127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.778203][ T5127] usb 2-1: config 0 descriptor?? [ 431.791963][ T5078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 431.815448][ T5078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.834537][ T5078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.876948][ T5078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 431.898630][ T5078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.907953][ T5078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.937933][ T5078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 431.956252][ T5078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.977782][ T5078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 432.000105][ T5078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.008182][ T5078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.022906][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.031599][ T5078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 432.057430][ T5078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.066445][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.075337][ T5078] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.097635][ T5078] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 432.117418][ T5078] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.129777][ T5078] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 432.139100][ T5078] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 432.149949][ T5082] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 432.167619][ T5078] usb 3-1: Product: syz [ 432.174391][ T5127] usb 2-1: string descriptor 0 read error: -71 [ 432.177421][ T5078] usb 3-1: Manufacturer: syz [ 432.190405][ T5078] usb 3-1: SerialNumber: syz [ 432.201535][ T5127] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 432.206352][ T5078] usb 3-1: config 0 descriptor?? [ 432.224079][ T5078] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 432.227197][ T5127] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 432.284225][ T5127] usb 2-1: USB disconnect, device number 72 [ 432.436834][ T5078] usb 3-1: USB disconnect, device number 66 [ 432.457591][ T5078] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 432.537742][ T5390] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 432.750206][ T5390] usb 5-1: not running at top speed; connect to a high speed hub [ 432.774804][ T5390] usb 5-1: config 9 has an invalid interface number: 29 but max is 3 [ 432.789967][ T5390] usb 5-1: config 9 has an invalid interface number: 4 but max is 3 [ 432.805832][ T5390] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 432.836123][ T5390] usb 5-1: config 9 has an invalid interface number: 48 but max is 3 [ 432.856030][ T5390] usb 5-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 432.886138][ T5390] usb 5-1: config 9 has 3 interfaces, different from the descriptor's value: 4 [ 432.915990][ T5390] usb 5-1: config 9 has no interface number 0 [ 432.935464][ T5390] usb 5-1: config 9 has no interface number 1 [ 432.964241][ T5390] usb 5-1: config 9 has no interface number 2 [ 432.967466][ T5128] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 432.981602][ T5390] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 433.013979][ T5390] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 433.032285][ T5390] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 433.104875][ T5390] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 433.219663][ T5390] usb 5-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 433.374062][ T5390] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 433.529327][ T5390] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 433.699529][ T5390] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 433.747409][ T5390] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 433.793497][ T5390] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 433.808160][ T5128] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 433.817553][ T5128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.826811][ T5128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 433.849591][ T5128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 433.869171][ T5128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.887573][ T5128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 433.927724][ T5128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 433.959057][ T5128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.985516][ T5128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 434.017021][ T5390] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 434.027862][ T5390] usb 5-1: config 9 interface 48 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 434.045277][ T5390] usb 5-1: config 9 interface 29 has no altsetting 0 [ 434.045982][ T5128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.058696][ T5390] usb 5-1: config 9 interface 4 has no altsetting 0 [ 434.058721][ T5390] usb 5-1: config 9 interface 48 has no altsetting 0 [ 434.060764][ T5390] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 434.075446][ T5128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 434.734585][ T5390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.742726][ T5390] usb 5-1: Product: Е [ 434.746831][ T5390] usb 5-1: Manufacturer: о [ 434.751510][ T5128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 434.801944][ T5128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.830202][ T5128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 434.857025][ T5128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 434.877718][ T5128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.918146][ T5128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 434.960211][ T5128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 434.997402][ T5128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.998213][ T5390] usb 5-1: unknown interface protocol 0x4f, assuming v1 [ 435.026125][ T5128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.036911][ T5128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.039632][ T5390] usb 5-1: cannot find UAC_HEADER [ 435.062956][T10152] ebtables: ebtables: counters copy to user failed while replacing table [ 435.077910][ T5128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.095263][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'. [ 435.109154][ T5128] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.109985][ T5390] snd-usb-audio 5-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 435.127690][ T5128] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.151709][ T5128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.169985][ T5128] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 435.181864][ T5128] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 435.197409][ T5128] usb 4-1: Product: syz [ 435.202263][ T5128] usb 4-1: Manufacturer: syz [ 435.212033][ T5128] usb 4-1: SerialNumber: syz [ 435.244910][ T5128] usb 4-1: config 0 descriptor?? [ 435.254948][ T5390] usb 5-1: USB disconnect, device number 63 [ 435.306802][ T5128] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 435.371253][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 435.476069][ T5128] usb 4-1: USB disconnect, device number 64 [ 435.493441][ T5128] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 435.499838][ T5078] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 435.889249][ T5078] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 435.907987][ T5078] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 435.917063][ T5078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.169545][T10172] ebtables: ebtables: counters copy to user failed while replacing table [ 436.701490][ T5078] usb 3-1: config 0 descriptor?? [ 436.711599][ T5078] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 436.718906][ T5078] usb 3-1: No valid video chain found. [ 436.957370][ T5082] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 436.975834][ T5246] usb 3-1: USB disconnect, device number 67 [ 437.672122][ T5127] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 437.900701][ T5127] usb 5-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 437.920150][ T5127] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 437.936709][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.956838][ T5127] usb 5-1: config 0 descriptor?? [ 437.973883][ T5127] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 437.993289][ T5127] usb 5-1: No valid video chain found. [ 438.212836][ T5127] usb 5-1: USB disconnect, device number 64 [ 438.427582][ T5078] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 438.629374][ T5078] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 438.638915][ T5128] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 438.658120][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.670093][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.682607][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 438.691270][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.707481][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.719981][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 438.731357][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.741445][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.762954][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 438.774354][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.792863][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.811931][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 438.828665][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.841413][ T5128] usb 1-1: not running at top speed; connect to a high speed hub [ 438.850353][ T5082] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 438.858523][ T5082] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 438.860542][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.880846][ T5128] usb 1-1: config 9 has an invalid interface number: 29 but max is 3 [ 438.897669][ T5128] usb 1-1: config 9 has an invalid interface number: 4 but max is 3 [ 438.923416][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 438.931264][ T5128] usb 1-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 438.952944][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.974236][ T5128] usb 1-1: config 9 has an invalid interface number: 48 but max is 3 [ 438.987456][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.007936][ T5128] usb 1-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 439.019298][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 439.033794][ T5128] usb 1-1: config 9 has 3 interfaces, different from the descriptor's value: 4 [ 439.046162][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.063378][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.074675][ T5128] usb 1-1: config 9 has no interface number 0 [ 439.081947][ T5128] usb 1-1: config 9 has no interface number 1 [ 439.089363][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 439.107577][ T5128] usb 1-1: config 9 has no interface number 2 [ 439.114327][ T5078] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.123347][ T5128] usb 1-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 439.146846][ T5078] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.169534][ T5128] usb 1-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 439.181053][ T5078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 439.193160][ T5078] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 439.202591][ T5078] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 439.211080][ T5129] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 439.218981][ T5128] usb 1-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 439.235099][ T5078] usb 4-1: Product: syz [ 439.242316][ T5078] usb 4-1: Manufacturer: syz [ 439.246921][ T5078] usb 4-1: SerialNumber: syz [ 439.251820][ T5128] usb 1-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 439.267638][ T5078] usb 4-1: config 0 descriptor?? [ 439.272674][ T5128] usb 1-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 439.292975][ T5078] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 439.308536][ T5128] usb 1-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 439.321102][ T5128] usb 1-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 439.368461][ T5128] usb 1-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 439.404731][ T5128] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 439.416329][ T5129] usb 2-1: Using ep0 maxpacket: 32 [ 439.437458][ T5129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7D has invalid maxpacket 57883, setting to 1024 [ 439.463752][ T5128] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 439.474776][ T5129] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 439.503348][ T5078] usb 4-1: USB disconnect, device number 65 [ 439.512277][ T5078] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 439.519232][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.527563][ T5128] usb 1-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 439.552898][ T5129] usb 2-1: config 0 descriptor?? [ 439.558554][ T5128] usb 1-1: config 9 interface 48 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 439.572099][ T5128] usb 1-1: config 9 interface 29 has no altsetting 0 [ 439.579177][ T5128] usb 1-1: config 9 interface 4 has no altsetting 0 [ 439.586965][ T5129] hub 2-1:0.0: bad descriptor, ignoring hub [ 439.593941][ T5129] hub 2-1:0.0: probe with driver hub failed with error -5 [ 439.602832][ T5128] usb 1-1: config 9 interface 48 has no altsetting 0 [ 439.620044][ T5129] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 439.640644][ T5128] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 439.652314][ T5128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.662549][ T5128] usb 1-1: Product: Е [ 439.670824][ T5128] usb 1-1: Manufacturer: о [ 439.977724][ T5128] usb 1-1: unknown interface protocol 0x4f, assuming v1 [ 439.997613][ T5128] usb 1-1: cannot find UAC_HEADER [ 440.103461][ T5128] snd-usb-audio 1-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 440.137868][ T5128] usb 1-1: USB disconnect, device number 71 [ 440.313659][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.320249][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.457472][ T5129] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 440.869349][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 441.609816][ T5129] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 441.639836][ T5129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.682453][ T5129] usb 5-1: config 0 descriptor?? [ 441.710359][ T5129] usb-storage 5-1:0.0: USB Mass Storage device detected [ 441.769065][ T5129] usb-storage 5-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 442.139038][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.168747][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.537877][T10263] netlink: 'syz.3.1465': attribute type 10 has an invalid length. [ 442.661529][ T5129] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 443.392111][T10263] team0: Device ipvlan1 failed to register rx_handler [ 443.452024][ T5078] usb 5-1: USB disconnect, device number 65 [ 443.479291][ T5082] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 443.501893][ T5082] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 443.593246][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'. [ 443.597500][ T5129] usb 1-1: device descriptor read/64, error -71 [ 443.615652][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'. [ 443.627810][ T8] usb 2-1: USB disconnect, device number 73 [ 443.658653][T10263] netlink: 'syz.3.1465': attribute type 2 has an invalid length. [ 443.748839][ T5082] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 443.771818][ T5082] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 443.927532][ T5129] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 444.873410][ T5078] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 444.947519][ T5129] usb 1-1: device descriptor read/64, error -71 [ 445.068680][ T5078] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 445.081292][ T5129] usb usb1-port1: attempt power cycle [ 445.098491][ T5078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.123336][ T5078] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.162804][ T5078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.197145][ T5078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.221489][ T5078] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.297658][ T5078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.324855][ T5078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.348400][ T5078] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.385092][ T5078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.421778][ T5078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.446970][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 445.475391][ T5078] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.488373][ T5078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.508129][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 445.509746][ T5078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.546494][ T5078] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.629077][ T5078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.651527][ T5078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.663084][ T5078] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.675776][ T5078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.677602][ T5246] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 445.688084][ T5078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.719783][ T5078] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.731219][ T5078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.761647][ T5078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.772511][ T5078] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 445.786689][ T5078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.823947][ T5078] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 445.833071][ T5082] Bluetooth: hci5: command 0x0406 tx timeout [ 445.899966][ T5078] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 445.956826][ T5078] usb 5-1: Product: syz [ 445.976143][ T5078] usb 5-1: Manufacturer: syz [ 445.999977][ T5078] usb 5-1: SerialNumber: syz [ 446.004814][ T5246] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 446.022601][ T5078] usb 5-1: config 0 descriptor?? [ 446.052589][ T5246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.092663][ T5078] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 446.098627][ T5246] usb 3-1: config 0 descriptor?? [ 446.138630][ T5246] usb-storage 3-1:0.0: USB Mass Storage device detected [ 446.147110][T10294] siw: device registration error -23 [ 446.174291][ T5246] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 446.264996][ T5127] usb 5-1: USB disconnect, device number 66 [ 446.299266][ T5127] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 447.220382][T10284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.229253][T10284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.774389][ T5082] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 447.800177][ T5082] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 447.910020][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 447.937483][ T5246] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 448.107608][ T5246] usb 4-1: device descriptor read/64, error -71 [ 448.387603][ T5246] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 448.523804][ T5390] usb 3-1: USB disconnect, device number 68 [ 448.572686][ T5246] usb 4-1: device descriptor read/64, error -71 [ 448.721733][ T5246] usb usb4-port1: attempt power cycle [ 449.727588][ T5078] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 449.808582][ T5082] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 449.822774][ T5082] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 449.827829][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 449.937861][ T5078] usb 3-1: Using ep0 maxpacket: 32 [ 449.945343][ T5078] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 449.974007][ T5246] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 450.002095][ T5078] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 450.022725][ T5078] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 450.047909][ T5246] usb 4-1: device descriptor read/8, error -71 [ 450.060969][ T5078] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 450.095170][ T5078] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 450.130105][ T5078] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 450.178479][ T5078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 450.206482][ T5078] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 450.247195][ T5078] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 450.269733][ T5078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.280407][ T5078] usb 3-1: Product: В [ 450.306317][ T5078] usb 3-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 450.327041][ T5078] usb 3-1: SerialNumber: syz [ 450.340628][ T5078] usb 3-1: config 0 descriptor?? [ 450.347482][ T5246] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 450.377248][ T5078] pvrusb2: Hardware description: Terratec Grabster AV400 [ 450.392547][ T5078] pvrusb2: ********** [ 450.406894][ T5078] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 450.436408][ T5078] pvrusb2: Important functionality might not be entirely working. [ 450.496626][ T5078] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 450.544916][ T5078] pvrusb2: ********** [ 450.611439][ T5246] usb 4-1: device not accepting address 69, error -71 [ 450.629324][ T5246] usb usb4-port1: unable to enumerate USB device [ 450.666622][ T1965] pvrusb2: Invalid write control endpoint [ 450.840605][ T1965] pvrusb2: Invalid write control endpoint [ 450.846471][ T1965] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 450.872272][ T1965] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 450.918910][ T1965] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 450.950210][ T5082] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 450.962276][ T1965] pvrusb2: Device being rendered inoperable [ 450.987455][ T5246] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 450.998676][ T1965] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 451.017580][ T5082] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 451.031916][ T1965] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 451.117522][ T1965] pvrusb2: Attached sub-driver cx25840 [ 451.162498][ T1965] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 451.219684][ T5246] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 451.221796][ T1965] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 451.253923][ T5246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.907381][ T5082] Bluetooth: hci5: command 0x0406 tx timeout [ 452.208245][ T5246] usb 4-1: config 0 descriptor?? [ 452.306910][ T5129] usb 3-1: USB disconnect, device number 69 [ 452.347403][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 452.513122][T10356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.557885][T10356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.745885][T10380] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 452.756344][T10380] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 452.817593][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 453.447750][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 453.484193][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 453.562329][ T9] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 453.594698][ T5246] usb 4-1: string descriptor 0 read error: -71 [ 453.597375][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.612684][ T5246] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 453.627091][ T5246] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 453.658076][ T9] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 453.684222][T10382] syzkaller0: entered promiscuous mode [ 453.702983][ T5246] usb 4-1: USB disconnect, device number 70 [ 453.703323][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.727486][T10382] syzkaller0: entered allmulticast mode [ 453.768449][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 453.797578][ T9] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 453.827113][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 453.841237][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.857462][ T9] usb 5-1: Product: В [ 453.865462][ T9] usb 5-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 453.885992][ T9] usb 5-1: SerialNumber: syz [ 453.896273][ T9] usb 5-1: config 0 descriptor?? [ 453.922394][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 453.937437][ T9] pvrusb2: ********** [ 453.947532][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 453.973108][ T9] pvrusb2: Important functionality might not be entirely working. [ 453.997679][ T5082] Bluetooth: hci5: command 0x0406 tx timeout [ 454.003998][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 454.017441][ T9] pvrusb2: ********** [ 454.166653][ T1965] pvrusb2: Invalid write control endpoint [ 454.267137][ T1965] pvrusb2: Invalid write control endpoint [ 454.278293][ T1965] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 454.292836][ T1965] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 454.337392][ T1965] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 454.377511][ T5390] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 454.383518][ T1965] pvrusb2: Device being rendered inoperable [ 454.406639][ T1965] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 454.467456][ T1965] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 454.506633][ T1965] pvrusb2: Attached sub-driver cx25840 [ 454.586151][ T1965] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 454.631808][ T5390] usb 2-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 454.651522][ T1965] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 454.672129][ T5390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.726277][ T5390] usb 2-1: config 0 descriptor?? [ 454.734381][ T5390] usb-storage 2-1:0.0: USB Mass Storage device detected [ 454.767044][ T5390] usb-storage 2-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 455.780767][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.789761][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.830950][ T5078] usb 5-1: USB disconnect, device number 67 [ 458.379535][ T5246] usb 2-1: USB disconnect, device number 74 [ 459.029431][ T5082] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 459.514518][ T56] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 459.577416][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 459.773105][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 459.789498][ T56] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 459.796602][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.807390][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.824147][ T56] usb 2-1: config 0 descriptor?? [ 459.836851][ T56] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 459.861890][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 459.907492][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 459.917417][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.927718][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 459.938908][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 459.946864][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.976822][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.057846][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.107533][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.130379][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.149650][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.158772][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.180024][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.215364][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.249218][ T56] gspca_sonixj: reg_r err -32 [ 460.261566][ T56] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 460.289887][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.305991][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.353055][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.381757][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.399185][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.419900][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.438398][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.447447][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 460.460431][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.477174][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 460.487865][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 460.496232][ T9] usb 4-1: Product: syz [ 460.500765][ T9] usb 4-1: Manufacturer: syz [ 460.505381][ T9] usb 4-1: SerialNumber: syz [ 460.512454][ T9] usb 4-1: config 0 descriptor?? [ 460.522040][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 460.736611][ T9] usb 4-1: USB disconnect, device number 71 [ 460.769687][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 461.317978][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.352368][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.703124][ T9] usb 2-1: USB disconnect, device number 75 [ 462.846513][ T29] audit: type=1326 audit(1719546798.031:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 462.900982][ T29] audit: type=1326 audit(1719546798.071:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f787a56cba7 code=0x7ffc0000 [ 462.957678][ T5129] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 462.978046][ T29] audit: type=1326 audit(1719546798.071:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f787a511559 code=0x7ffc0000 [ 463.035145][ T29] audit: type=1326 audit(1719546798.071:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 463.114079][ T29] audit: type=1326 audit(1719546798.071:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 463.143261][ T29] audit: type=1326 audit(1719546798.071:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 463.164847][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.172912][ T29] audit: type=1326 audit(1719546798.071:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 463.194459][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.202674][ T29] audit: type=1326 audit(1719546798.071:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 463.397723][ T5129] usb 3-1: Using ep0 maxpacket: 16 [ 463.599777][ T29] audit: type=1326 audit(1719546798.071:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 463.635289][T10501] block nbd3: shutting down sockets [ 463.704169][ T5129] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 463.890946][ T5129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.900235][ T29] audit: type=1326 audit(1719546798.071:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.3.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 463.926908][ T5129] usb 3-1: language id specifier not provided by device, defaulting to English [ 464.061881][ T5129] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.077494][ T5129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.099463][ T5129] usb 3-1: Product:   [ 464.103664][ T5129] usb 3-1: Manufacturer: 㪅渦ᾙ䉔鯕␎뷷텝휢꿍瞧➽賕愀戧杈ꋥꖭ≜ꕳ錌㮘ꂖ究騩܆㡠뾬坅隫䟿ᑉ㛊轘哖迨躢ꯒ틅 [ 464.177840][ T5129] usb 3-1: SerialNumber: 、 [ 464.296806][T10537] sctp: [Deprecated]: syz.0.1550 (pid 10537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.296806][T10537] Use struct sctp_sack_info instead [ 464.401388][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.417653][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.777520][ T5246] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 464.808906][T10556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.818063][T10556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.067884][ T56] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 465.203037][ T5246] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 465.354453][ T5246] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 465.403447][ T56] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 465.523363][ T5246] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 465.541324][ T56] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 465.583003][ T5246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.607504][ T56] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 465.664419][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.204539][ T56] usb 5-1: string descriptor 0 read error: -22 [ 466.413128][ T5078] usb 5-1: USB disconnect, device number 68 [ 466.510392][ T5246] usb 2-1: string descriptor 0 read error: -22 [ 467.298252][ T5390] usb 2-1: USB disconnect, device number 76 [ 467.458381][ T5129] usb 3-1: 0:2 : does not exist [ 467.477755][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1561'. [ 467.507972][ T5129] usb 3-1: USB disconnect, device number 70 [ 467.551161][T10576] vxcan1: tx address claim with different name [ 467.657046][T10582] pim6reg: entered allmulticast mode [ 467.697249][T10582] pim6reg: left allmulticast mode [ 467.987839][ T5082] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 467.995629][ T5082] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 468.971116][T10630] netlink: 'syz.3.1579': attribute type 4 has an invalid length. [ 469.508497][ T5129] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 469.742660][ T5129] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 469.769419][ T5129] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 469.798911][ T5129] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 469.816398][ T5129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.067701][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 470.279488][ T5129] usb 4-1: string descriptor 0 read error: -22 [ 470.490068][ T5390] usb 4-1: USB disconnect, device number 72 [ 470.601728][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 470.601747][ T29] audit: type=1326 audit(1719546805.791:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10672 comm="syz.4.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed16375b29 code=0x0 [ 472.597594][ T5390] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 472.599530][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 472.789482][ T5390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.828208][ T9] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 472.857420][ T9] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 472.886577][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 472.916492][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.917385][ T5390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.939876][ T5390] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 472.951752][ T5390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.962127][ T5390] usb 3-1: config 0 descriptor?? [ 473.127481][ T5078] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 473.217423][ T5246] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 473.317454][ T5078] usb 4-1: Using ep0 maxpacket: 8 [ 473.344133][ T5078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 473.357331][ T5078] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 473.377778][ T9] usb 5-1: string descriptor 0 read error: -22 [ 473.378401][ T5390] asus 0003:0B05:17E0.0009: unknown main item tag 0x0 [ 473.388793][ T5078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 473.404306][ T5390] asus 0003:0B05:17E0.0009: unknown main item tag 0x0 [ 473.409833][ T5078] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 473.411427][ T5246] usb 1-1: Using ep0 maxpacket: 16 [ 473.436365][ T5390] asus 0003:0B05:17E0.0009: unknown main item tag 0x0 [ 473.437747][ T5078] usb 4-1: New USB device found, idVendor=04ca, idProduct=a149, bcdDevice=e4.16 [ 473.446568][ T5390] asus 0003:0B05:17E0.0009: unknown main item tag 0x0 [ 473.460608][ T5078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.476544][ T5078] usb 4-1: Product: syz [ 473.477529][ T5390] asus 0003:0B05:17E0.0009: unknown main item tag 0x0 [ 473.487990][ T5078] usb 4-1: Manufacturer: syz [ 473.488010][ T5078] usb 4-1: SerialNumber: syz [ 473.493901][ T5078] usb 4-1: config 0 descriptor?? [ 473.497217][ T5246] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 473.535841][ T5246] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.545179][ T5390] asus 0003:0B05:17E0.0009: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.2-1/input0 [ 473.566449][ T5390] asus 0003:0B05:17E0.0009: Asus input not registered [ 473.578147][ T5246] usb 1-1: language id specifier not provided by device, defaulting to English [ 473.589926][ T5246] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.600690][ T5390] asus 0003:0B05:17E0.0009: probe with driver asus failed with error -12 [ 473.609342][ T5246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.610696][ T5078] usb 5-1: USB disconnect, device number 69 [ 473.621900][ T5390] usb 3-1: USB disconnect, device number 71 [ 473.636945][ T5246] usb 1-1: Product:   [ 473.641336][ T5246] usb 1-1: Manufacturer: 㪅渦ᾙ䉔鯕␎뷷텝휢꿍瞧➽賕愀戧杈ꋥꖭ≜ꕳ錌㮘ꂖ究騩܆㡠뾬坅隫䟿ᑉ㛊轘哖迨躢ꯒ틅 [ 473.671038][ T5246] usb 1-1: SerialNumber: 、 [ 473.728741][ T9] usb 4-1: USB disconnect, device number 73 [ 473.899517][T10732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.917630][T10732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.293449][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.303143][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.815820][T10748] syz.4.1620: attempt to access beyond end of device [ 475.815820][T10748] nbd4: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 475.844886][T10748] XFS (nbd4): SB validate failed with error -5. [ 476.102176][ T5246] usb 1-1: 0:2 : does not exist [ 476.176683][ T5246] usb 1-1: USB disconnect, device number 75 [ 476.343636][T10765] block nbd4: shutting down sockets [ 476.692111][T10774] ip6gretap0 speed is unknown, defaulting to 1000 [ 476.698750][T10778] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 0, id = 0 [ 476.752622][ T5128] kernel read not supported for file root/syzkaller.EpmAkj/87/file0 (pid: 5128 comm: kworker/0:4) [ 477.067712][T10786] netlink: 'syz.1.1621': attribute type 9 has an invalid length. [ 477.123394][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 477.247520][ T5128] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 477.450663][ T5128] usb 4-1: device descriptor read/64, error -71 [ 477.767585][ T5128] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 477.806334][T10804] 9pnet_virtio: no channels available for device 127.0.0.1 [ 478.637534][ T5128] usb 4-1: device descriptor read/64, error -71 [ 478.767822][ T5128] usb usb4-port1: attempt power cycle [ 479.208062][ T5128] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 479.252098][ T5128] usb 4-1: device descriptor read/8, error -71 [ 479.548238][ T5128] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 479.629124][ T5128] usb 4-1: device descriptor read/8, error -71 [ 479.842495][ T5128] usb usb4-port1: unable to enumerate USB device [ 481.137977][T10837] block nbd3: shutting down sockets [ 481.206299][ T29] audit: type=1326 audit(1719546816.391:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 481.286750][ T29] audit: type=1326 audit(1719546816.421:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f787a56cba7 code=0x7ffc0000 [ 481.333500][ T29] audit: type=1326 audit(1719546816.421:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f787a511559 code=0x7ffc0000 [ 481.360621][ T29] audit: type=1326 audit(1719546816.421:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 481.404805][ T29] audit: type=1326 audit(1719546816.421:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 481.468138][ T29] audit: type=1326 audit(1719546816.421:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 481.530506][ T29] audit: type=1326 audit(1719546816.421:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 481.557704][ T5129] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 481.575153][ T29] audit: type=1326 audit(1719546816.431:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 481.647991][ T29] audit: type=1326 audit(1719546816.431:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 481.696844][ T29] audit: type=1326 audit(1719546816.431:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10835 comm="syz.3.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f787a575b29 code=0x7ffc0000 [ 481.797422][ T5129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 481.837940][ T5129] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 481.897374][ T5129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.929237][ T5129] usb 3-1: config 0 descriptor?? [ 481.958737][ T5129] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 482.461222][T10866] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1656'. [ 482.680718][ T5172] usb 3-1: USB disconnect, device number 72 [ 483.477462][ T5129] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 483.697395][ T5129] usb 5-1: Using ep0 maxpacket: 16 [ 483.707226][ T5129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 483.740764][ T5129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 483.798978][ T5129] usb 5-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6 [ 483.817369][ T5129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.825401][ T5129] usb 5-1: Product: syz [ 483.857400][ T5129] usb 5-1: Manufacturer: syz [ 483.862055][ T5129] usb 5-1: SerialNumber: syz [ 483.891008][ T5129] usb 5-1: config 0 descriptor?? [ 484.100156][ T5129] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 484.130153][ T5129] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 484.150728][ T5129] input: failed to attach handler kbd to device input7, error: -5 [ 484.197656][ T5129] usb 5-1: USB disconnect, device number 70 [ 485.880819][T10897] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1670'. [ 485.988391][T10900] cgroup: fork rejected by pids controller in /syz3 [ 486.556733][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.712920][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 486.712940][ T29] audit: type=1326 audit(1719546821.901:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10913 comm="syz.2.1671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feec6975b29 code=0x0 [ 486.742836][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.910007][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.113553][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.451241][ T50] bridge_slave_1: left allmulticast mode [ 487.487536][ T50] bridge_slave_1: left promiscuous mode [ 487.493339][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.533868][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 487.543758][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 487.553666][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 487.577659][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 487.585386][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 487.592823][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 487.638438][ T50] bridge_slave_0: left allmulticast mode [ 487.670090][ T50] bridge_slave_0: left promiscuous mode [ 487.702559][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.998112][ T29] audit: type=1804 audit(1719546823.171:543): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1684" name="/root/syzkaller.2sdVzZ/216/file1" dev="sda1" ino=1985 res=1 errno=0 [ 488.057628][ T29] audit: type=1804 audit(1719546823.171:544): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1684" name="/root/syzkaller.2sdVzZ/216/file1" dev="sda1" ino=1985 res=1 errno=0 [ 488.164724][ T29] audit: type=1804 audit(1719546823.351:545): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1684" name="/root/syzkaller.2sdVzZ/216/file1" dev="sda1" ino=1985 res=1 errno=0 [ 488.524446][ T29] audit: type=1326 audit(1719546823.711:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10948 comm="syz.1.1688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec6ab75b29 code=0x0 [ 489.246875][T10957] 9pnet_fd: Insufficient options for proto=fd [ 489.677426][ T5089] Bluetooth: hci3: command tx timeout [ 490.489460][T10972] input: syz0 as /devices/virtual/input/input8 [ 490.563368][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 490.746846][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.791333][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.811179][ T50] bond0 (unregistering): Released all slaves [ 490.926571][T10934] ip6gretap0 speed is unknown, defaulting to 1000 [ 491.028812][ T50] IPVS: stopping master sync thread 10778 ... [ 491.304241][ T29] audit: type=1326 audit(1719546826.491:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10996 comm="syz.4.1704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed16375b29 code=0x0 [ 491.575179][ T50] hsr_slave_0: left promiscuous mode [ 491.589549][ T50] hsr_slave_1: left promiscuous mode [ 491.595756][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.604893][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.620880][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.637504][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.683751][ T50] veth1_macvtap: left promiscuous mode [ 491.700349][ T50] veth0_macvtap: left promiscuous mode [ 491.714008][ T50] veth1_vlan: left promiscuous mode [ 491.726094][ T50] veth0_vlan: left promiscuous mode [ 491.747566][ T5089] Bluetooth: hci3: command tx timeout [ 492.302595][ T5390] kernel read not supported for file root/syzkaller.2sdVzZ/222/file0 (pid: 5390 comm: kworker/1:7) [ 492.577538][ T56] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 492.777534][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 492.798549][ T56] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 492.835893][ T56] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 492.866658][ T56] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=f0.c9 [ 492.885400][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.913900][ T56] usb 5-1: Product: syz [ 492.926816][ T56] usb 5-1: Manufacturer: syz [ 492.939229][ T56] usb 5-1: SerialNumber: syz [ 493.167603][ T56] snd-usb-6fire 5-1:2.0: unable to receive device firmware state. [ 493.195173][ T56] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -71 [ 493.219108][ T56] usb 5-1: USB disconnect, device number 71 [ 493.592780][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 493.745609][ T50] team0 (unregistering): Port device team_slave_1 removed [ 493.802579][ T29] audit: type=1326 audit(1719546828.991:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11041 comm="syz.4.1719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed16375b29 code=0x0 [ 493.845657][ T5082] Bluetooth: hci3: command tx timeout [ 493.904181][ T50] team0 (unregistering): Port device team_slave_0 removed [ 494.775914][ T29] audit: type=1800 audit(1719546829.941:549): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1728" name="file1" dev="sda1" ino=1984 res=0 errno=0 [ 495.326365][T10934] chnl_net:caif_netlink_parms(): no params data found [ 495.618602][T11099] kernel profiling enabled (shift: 3) [ 495.657315][ C1] ================================================================== [ 495.665413][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xd2/0x170 [ 495.672630][ C1] Read of size 8 at addr ffffc90009f87540 by task syz.4.1734/11093 [ 495.680527][ C1] [ 495.682861][ C1] CPU: 1 PID: 11093 Comm: syz.4.1734 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 495.693014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 495.703082][ C1] Call Trace: [ 495.706370][ C1] [ 495.709222][ C1] dump_stack_lvl+0x241/0x360 [ 495.713933][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.719141][ C1] ? __pfx__printk+0x10/0x10 [ 495.723728][ C1] ? _printk+0xd5/0x120 [ 495.727876][ C1] print_report+0x169/0x550 [ 495.732362][ C1] ? __virt_addr_valid+0xbd/0x520 [ 495.737374][ C1] ? profile_pc+0xd2/0x170 [ 495.741773][ C1] kasan_report+0x143/0x180 [ 495.746259][ C1] ? profile_pc+0xd2/0x170 [ 495.750660][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 495.756539][ C1] profile_pc+0xd2/0x170 [ 495.760771][ C1] profile_tick+0xd7/0x150 [ 495.765179][ C1] tick_nohz_handler+0x386/0x500 [ 495.770104][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 495.775551][ C1] __hrtimer_run_queues+0x551/0xd50 [ 495.780733][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 495.786697][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 495.792402][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 495.798453][ C1] hrtimer_interrupt+0x396/0x990 [ 495.803380][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 495.809433][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 495.815051][ C1] [ 495.817964][ C1] [ 495.820879][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.826855][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 495.833342][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 be 78 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 a3 7f dd f5 65 8b 05 e4 b7 7b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 495.852931][ C1] RSP: 0018:ffffc90009f87540 EFLAGS: 00000206 [ 495.858983][ C1] RAX: 833bfda0812f1e00 RBX: 1ffff920013f0eac RCX: ffffffff8172d8fa [ 495.866937][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 495.874887][ C1] RBP: ffffc90009f875d0 R08: ffffffff92f7162f R09: 1ffffffff25ee2c5 [ 495.882844][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2c6 R12: dffffc0000000000 [ 495.890796][ C1] R13: 1ffff920013f0ea8 R14: ffffc90009f87560 R15: 0000000000000246 [ 495.898755][ C1] ? mark_lock+0x9a/0x350 [ 495.903071][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 495.909386][ C1] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 495.915180][ C1] __skb_try_recv_datagram+0x1cb/0x6a0 [ 495.920626][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 495.925979][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 495.931945][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 495.936953][ C1] __unix_dgram_recvmsg+0x3ba/0x12f0 [ 495.942231][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 495.947939][ C1] ? __pfx___might_resched+0x10/0x10 [ 495.953220][ C1] ? iovec_from_user+0x61/0x240 [ 495.958070][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 495.963094][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 495.968639][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 495.973656][ C1] ____sys_recvmsg+0x3c0/0x470 [ 495.978411][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 495.983689][ C1] ? __might_fault+0xaa/0x120 [ 495.988360][ C1] do_recvmmsg+0x474/0xae0 [ 495.992773][ C1] ? __pfx___futex_wait+0x10/0x10 [ 495.997787][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 496.002713][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 496.007987][ C1] ? futex_wait+0x285/0x360 [ 496.012473][ C1] ? __pfx_futex_wait+0x10/0x10 [ 496.017314][ C1] ? tiocsti+0x29c/0x300 [ 496.021556][ C1] ? __pfx_lock_release+0x10/0x10 [ 496.026566][ C1] ? __pfx_do_futex+0x10/0x10 [ 496.031232][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 496.036244][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 496.041772][ C1] ? do_syscall_64+0x100/0x230 [ 496.046521][ C1] ? do_syscall_64+0xb6/0x230 [ 496.051183][ C1] do_syscall_64+0xf3/0x230 [ 496.055670][ C1] ? clear_bhb_loop+0x35/0x90 [ 496.060333][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.066213][ C1] RIP: 0033:0x7fed16375b29 [ 496.070624][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.090213][ C1] RSP: 002b:00007fed17174048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 496.098609][ C1] RAX: ffffffffffffffda RBX: 00007fed16504070 RCX: 00007fed16375b29 [ 496.106559][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000008 [ 496.114511][ C1] RBP: 00007fed163f6756 R08: 0000000000000000 R09: 0000000000000000 [ 496.122463][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 496.130413][ C1] R13: 000000000000006e R14: 00007fed16504070 R15: 00007ffefaf88c78 [ 496.138371][ C1] [ 496.141373][ C1] [ 496.143675][ C1] The buggy address belongs to stack of task syz.4.1734/11093 [ 496.151293][ C1] and is located at offset 0 in frame: [ 496.156818][ C1] _raw_spin_unlock_irqrestore+0x0/0x140 [ 496.162448][ C1] [ 496.164759][ C1] This frame has 1 object: [ 496.169158][ C1] [32, 40) 'flags.i.i.i.i' [ 496.169171][ C1] [ 496.175947][ C1] The buggy address belongs to the virtual mapping at [ 496.175947][ C1] [ffffc90009f80000, ffffc90009f89000) created by: [ 496.175947][ C1] copy_process+0x5d1/0x3dc0 [ 496.193554][ C1] [ 496.195861][ C1] The buggy address belongs to the physical page: [ 496.202258][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x6071b [ 496.210996][ C1] memcg:ffff8880737e3302 [ 496.215221][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 496.222320][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 496.230883][ C1] raw: 0000000000000002 0000000000000000 00000001ffffffff ffff8880737e3302 [ 496.239442][ C1] page dumped because: kasan: bad access detected [ 496.245835][ C1] page_owner tracks the page as allocated [ 496.251527][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 11082, tgid 11080 (syz.4.1731), ts 494850018050, free_ts 490903081513 [ 496.270008][ C1] post_alloc_hook+0x1f3/0x230 [ 496.274756][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 496.280282][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 496.285460][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 496.290906][ C1] __vmalloc_node_range_noprof+0x971/0x1460 [ 496.296782][ C1] dup_task_struct+0x444/0x8c0 [ 496.301530][ C1] copy_process+0x5d1/0x3dc0 [ 496.306100][ C1] kernel_clone+0x223/0x870 [ 496.310582][ C1] __x64_sys_clone+0x258/0x2a0 [ 496.315325][ C1] do_syscall_64+0xf3/0x230 [ 496.319812][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.325688][ C1] page last free pid 50 tgid 50 stack trace: [ 496.331642][ C1] free_unref_page+0xd19/0xea0 [ 496.336390][ C1] __slab_free+0x31b/0x3d0 [ 496.340785][ C1] qlist_free_all+0x9e/0x140 [ 496.345357][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 496.350797][ C1] __kasan_slab_alloc+0x23/0x80 [ 496.355632][ C1] kmalloc_trace_noprof+0x132/0x2c0 [ 496.360810][ C1] gro_cells_destroy+0x300/0x3d0 [ 496.365729][ C1] ip_tunnel_dev_free+0x19/0x60 [ 496.370650][ C1] netdev_run_todo+0xe1a/0x1000 [ 496.375482][ C1] cleanup_net+0x762/0xcc0 [ 496.379878][ C1] process_scheduled_works+0xa2c/0x1830 [ 496.385406][ C1] worker_thread+0x86d/0xd50 [ 496.389977][ C1] kthread+0x2f0/0x390 [ 496.394028][ C1] ret_from_fork+0x4b/0x80 [ 496.398432][ C1] ret_from_fork_asm+0x1a/0x30 [ 496.403180][ C1] [ 496.405483][ C1] Memory state around the buggy address: [ 496.411091][ C1] ffffc90009f87400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.419129][ C1] ffffc90009f87480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.427167][ C1] >ffffc90009f87500: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 496.435201][ C1] ^ [ 496.441327][ C1] ffffc90009f87580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 496.449369][ C1] ffffc90009f87600: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 496.457404][ C1] ================================================================== [ 496.465447][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 496.472622][ C1] CPU: 1 PID: 11093 Comm: syz.4.1734 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 496.482755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 496.492795][ C1] Call Trace: [ 496.496057][ C1] [ 496.498891][ C1] dump_stack_lvl+0x241/0x360 [ 496.503566][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.508747][ C1] ? __pfx__printk+0x10/0x10 [ 496.513318][ C1] ? rcu_is_watching+0x15/0xb0 [ 496.518070][ C1] ? vscnprintf+0x5d/0x90 [ 496.522383][ C1] panic+0x349/0x860 [ 496.526261][ C1] ? __pfx_lock_release+0x10/0x10 [ 496.531267][ C1] ? check_panic_on_warn+0x21/0xb0 [ 496.536363][ C1] ? __pfx_panic+0x10/0x10 [ 496.540761][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 496.545944][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 496.551822][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 496.558136][ C1] check_panic_on_warn+0x86/0xb0 [ 496.563056][ C1] ? profile_pc+0xd2/0x170 [ 496.567458][ C1] end_report+0x77/0x160 [ 496.571679][ C1] kasan_report+0x154/0x180 [ 496.576165][ C1] ? profile_pc+0xd2/0x170 [ 496.580570][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 496.586448][ C1] profile_pc+0xd2/0x170 [ 496.590676][ C1] profile_tick+0xd7/0x150 [ 496.595077][ C1] tick_nohz_handler+0x386/0x500 [ 496.600003][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 496.605444][ C1] __hrtimer_run_queues+0x551/0xd50 [ 496.610630][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 496.616596][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 496.622300][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 496.628360][ C1] hrtimer_interrupt+0x396/0x990 [ 496.633304][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 496.639277][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 496.644896][ C1] [ 496.647809][ C1] [ 496.650724][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 496.656698][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 496.663184][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 be 78 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 a3 7f dd f5 65 8b 05 e4 b7 7b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 496.682774][ C1] RSP: 0018:ffffc90009f87540 EFLAGS: 00000206 [ 496.688834][ C1] RAX: 833bfda0812f1e00 RBX: 1ffff920013f0eac RCX: ffffffff8172d8fa [ 496.696964][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 496.704920][ C1] RBP: ffffc90009f875d0 R08: ffffffff92f7162f R09: 1ffffffff25ee2c5 [ 496.712885][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2c6 R12: dffffc0000000000 [ 496.720842][ C1] R13: 1ffff920013f0ea8 R14: ffffc90009f87560 R15: 0000000000000246 [ 496.728808][ C1] ? mark_lock+0x9a/0x350 [ 496.733129][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 496.739445][ C1] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 496.745239][ C1] __skb_try_recv_datagram+0x1cb/0x6a0 [ 496.750684][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 496.756042][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 496.762009][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 496.767017][ C1] __unix_dgram_recvmsg+0x3ba/0x12f0 [ 496.772294][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 496.778001][ C1] ? __pfx___might_resched+0x10/0x10 [ 496.783270][ C1] ? iovec_from_user+0x61/0x240 [ 496.788112][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 496.793123][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 496.798653][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 496.803664][ C1] ____sys_recvmsg+0x3c0/0x470 [ 496.808415][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 496.813688][ C1] ? __might_fault+0xaa/0x120 [ 496.818350][ C1] do_recvmmsg+0x474/0xae0 [ 496.822755][ C1] ? __pfx___futex_wait+0x10/0x10 [ 496.827765][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 496.832771][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 496.838044][ C1] ? futex_wait+0x285/0x360 [ 496.842527][ C1] ? __pfx_futex_wait+0x10/0x10 [ 496.847363][ C1] ? tiocsti+0x29c/0x300 [ 496.851589][ C1] ? __pfx_lock_release+0x10/0x10 [ 496.856598][ C1] ? __pfx_do_futex+0x10/0x10 [ 496.861262][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 496.866273][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 496.871806][ C1] ? do_syscall_64+0x100/0x230 [ 496.876558][ C1] ? do_syscall_64+0xb6/0x230 [ 496.881221][ C1] do_syscall_64+0xf3/0x230 [ 496.885712][ C1] ? clear_bhb_loop+0x35/0x90 [ 496.890380][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.896262][ C1] RIP: 0033:0x7fed16375b29 [ 496.900661][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.920249][ C1] RSP: 002b:00007fed17174048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 496.928644][ C1] RAX: ffffffffffffffda RBX: 00007fed16504070 RCX: 00007fed16375b29 [ 496.936597][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000008 [ 496.944552][ C1] RBP: 00007fed163f6756 R08: 0000000000000000 R09: 0000000000000000 [ 496.952503][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 496.960458][ C1] R13: 000000000000006e R14: 00007fed16504070 R15: 00007ffefaf88c78 [ 496.968419][ C1] [ 496.971542][ C1] Kernel Offset: disabled [ 496.975853][ C1] Rebooting in 86400 seconds..