last executing test programs: 7.500206754s ago: executing program 4 (id=2511): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 7.224248799s ago: executing program 4 (id=2518): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0xc8}, &(0x7f0000000240)=0x18) 7.017373085s ago: executing program 4 (id=2523): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x35, 0x19, 0x30, 0x40, 0x1645, 0x8, 0xcf36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf4, 0xfa, 0xdc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.003466012s ago: executing program 1 (id=2538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 5.378788886s ago: executing program 3 (id=2544): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x12, 0x29, 0x43}], 0x18}], 0x1, 0x0) 5.192419257s ago: executing program 3 (id=2546): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000004000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.119539594s ago: executing program 1 (id=2547): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000000007000000000000000100000000000000000000fffffdfd00000000000000000000000000000000000100000000000000"]) 5.105928606s ago: executing program 3 (id=2548): setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xb0, 0x62}, {}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bbc}, {{@in=@loopback, 0x4d2}, 0x0, @in6=@mcast1}}, 0xe8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000700)=0x1, 0x4) recvmmsg$unix(r0, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) 4.95644309s ago: executing program 3 (id=2550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)='#', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f00000001c0)) 4.875981139s ago: executing program 1 (id=2551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 4.676463031s ago: executing program 1 (id=2554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b1bd25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000005a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.537337486s ago: executing program 1 (id=2556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r2}, 0xc) 4.495856716s ago: executing program 4 (id=2557): recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4079, 0xfef}, {&(0x7f0000000000)=""/13, 0xd}], 0x2}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 4.359860452s ago: executing program 1 (id=2559): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 4.310107463s ago: executing program 4 (id=2560): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f0000000180)={0x0, 0x8000001fffffff, 0x10000000000000, 0x0, 0x9, 0x100, 0x0, 0x0, 0xdf}) 4.071532218s ago: executing program 4 (id=2562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x0, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000180)={0x2, 0x9, 0x4, 0xffffffba}) 4.020493301s ago: executing program 3 (id=2563): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a840008864185d683f86"], 0x0) 3.880073751s ago: executing program 3 (id=2566): unshare(0x8000000) r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.540514793s ago: executing program 0 (id=2569): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$EVIOCGRAB(r0, 0x40044591, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 3.403650922s ago: executing program 0 (id=2570): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000200)={0x0, 0x2710}, 0x10) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 3.208378367s ago: executing program 0 (id=2572): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, 0x0, 0xffffffffffffffff, {0x3, 0x0, 0x2}}, 0x18) 3.183420795s ago: executing program 2 (id=2573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0xa, 0x0, 0x0) 3.147550443s ago: executing program 0 (id=2574): timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.054154297s ago: executing program 2 (id=2575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, &(0x7f0000000280)) 2.981269663s ago: executing program 2 (id=2576): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10001, 0x0, "59c27c65a78308634e78299ef68057107ea354"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 2.384487353s ago: executing program 2 (id=2577): socket$inet_dccp(0x2, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 2.169475147s ago: executing program 2 (id=2578): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000001500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0x4, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @mptcp=@capable={0x1e, 0xc}, @md5sig={0x13, 0x12, "a4bcbcee95ac179191d2675102a6689b"}, @md5sig={0x13, 0x12, "5f2a69e3924dd096f3650a1ad90fbeef"}]}}}}}}}, 0x0) 1.914667929s ago: executing program 2 (id=2579): syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 79.087138ms ago: executing program 0 (id=2580): r0 = syz_io_uring_setup(0x7667, &(0x7f0000000100)={0x0, 0x0, 0x13580}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2581): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000340)='.\x00', 0x0, 0x0) lseek(r2, 0x40000000000000, 0x4) kernel console output (not intermixed with test programs): an_adv: batadv0: Interface activated: batadv_slave_0 [ 102.906449][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.950888][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.987339][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.059363][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.090475][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.122284][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.154824][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.177073][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.198680][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.220269][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.242595][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.260805][ T6404] netlink: 'syz.3.479': attribute type 2 has an invalid length. [ 103.314497][ T6144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.361104][ T6144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.399655][ T6144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.428206][ T6144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.627259][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.485'. [ 103.640859][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 103.809270][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.823040][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.950224][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.971280][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.449629][ T5218] Bluetooth: hci5: command 0x040f tx timeout [ 104.549023][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 105.343403][ T6457] ptrace attach of "./syz-executor exec"[5225] was attempted by "./syz-executor exec"[6457] [ 105.879334][ T6472] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 105.908408][ T6472] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.508'. [ 105.928540][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 105.934721][ T6472] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 106.448507][ T5288] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.529870][ T5218] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 106.539965][ T5218] Bluetooth: hci4: Injecting HCI hardware error event [ 106.549808][ T5218] Bluetooth: hci4: hardware error 0x00 [ 106.669436][ T5288] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 106.745084][ T5288] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 106.782175][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.794381][ T6503] Illegal XDP return value 4294967294 on prog (id 67) dev N/A, expect packet loss! [ 106.810055][ T5288] usb 4-1: config 0 descriptor?? [ 106.831953][ T6506] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 106.867524][ T5288] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 107.050666][ T29] audit: type=1400 audit(1723831984.157:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6512 comm="syz.4.527" dest=20002 netif=wpan0 [ 107.088932][ T5299] usb 4-1: USB disconnect, device number 5 [ 107.810012][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 108.473169][ T6563] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 108.848639][ T5218] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 109.194704][ T5299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.416389][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 109.435444][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.456158][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.467079][ T5299] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 109.494502][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.528331][ T5299] usb 1-1: config 0 descriptor?? [ 109.630048][ T5267] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.828407][ T5267] usb 3-1: Using ep0 maxpacket: 16 [ 109.851484][ T5267] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 109.886093][ T5267] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 109.905992][ T5267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.922271][ T5267] usb 3-1: Product: syz [ 109.931687][ T5267] usb 3-1: Manufacturer: syz [ 109.936344][ T5267] usb 3-1: SerialNumber: syz [ 109.962236][ T5267] usb 3-1: config 0 descriptor?? [ 110.009325][ T5299] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 110.009819][ T5267] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 110.054075][ T5299] corsair 0003:1B1C:1B02.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 110.056005][ T5267] usb 3-1: Detected FT232R [ 110.197638][ T5267] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 110.287365][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 110.459001][ T5267] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 110.466787][ T5299] usb 1-1: USB disconnect, device number 6 [ 110.641821][ T5267] usb 3-1: USB disconnect, device number 7 [ 110.691572][ T5267] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 110.715873][ T5267] ftdi_sio 3-1:0.0: device disconnected [ 111.148561][ T5288] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.368324][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 111.385027][ T5288] usb 2-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 111.425541][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 111.452326][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 111.469702][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 111.486445][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.508379][ T5288] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.531362][ T5288] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.586509][ T5288] usb 2-1: Manufacturer: syz [ 111.609364][ T5288] usb 2-1: config 0 descriptor?? [ 111.615262][ T6637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.638020][ T5288] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 111.777696][ T6661] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.947670][ T5320] usb 2-1: USB disconnect, device number 5 [ 112.001189][ T6666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.598'. [ 112.059344][ T5299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.059978][ T1170] kernel write not supported for file 267/task/268/clear_refs (pid: 1170 comm: kworker/0:2) [ 112.280486][ T5299] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 112.318583][ T5299] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 112.348636][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.382441][ T5299] usb 5-1: config 0 descriptor?? [ 112.426720][ T5299] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 112.654165][ T6690] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.723869][ T5299] usb 5-1: USB disconnect, device number 3 [ 112.803852][ T6690] syz.3.609 (6690) used greatest stack depth: 18736 bytes left [ 112.930930][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 113.340961][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 113.909944][ T1170] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.118011][ T6739] program syz.0.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.130059][ T1170] usb 5-1: Using ep0 maxpacket: 16 [ 114.184095][ T1170] usb 5-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 114.244837][ T1170] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 114.280955][ T1170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 114.334989][ T1170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 114.375076][ T1170] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.407084][ T1170] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.428354][ T1170] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.463638][ T1170] usb 5-1: Manufacturer: syz [ 114.477515][ T1170] usb 5-1: config 0 descriptor?? [ 114.506381][ T6720] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.550596][ T1170] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 114.877373][ T5267] usb 5-1: USB disconnect, device number 4 [ 115.565274][ T29] audit: type=1326 audit(1723831992.667:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.1.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 115.650193][ T29] audit: type=1326 audit(1723831992.667:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.1.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 115.746920][ T29] audit: type=1326 audit(1723831992.697:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.1.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 115.845014][ T29] audit: type=1326 audit(1723831992.697:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.1.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 115.910116][ T29] audit: type=1326 audit(1723831992.707:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.1.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 115.960436][ T29] audit: type=1326 audit(1723831992.707:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.1.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 116.747780][ T6819] netlink: 'syz.3.672': attribute type 2 has an invalid length. [ 117.153381][ T6829] ceph: Bad value for 'source' [ 117.194869][ T6832] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 117.733233][ T5288] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.835152][ T6860] netlink: 44 bytes leftover after parsing attributes in process `syz.4.688'. [ 117.966763][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 117.993246][ T5288] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 118.018334][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.038882][ T5288] usb 4-1: Product: syz [ 118.048193][ T5288] usb 4-1: Manufacturer: syz [ 118.061418][ T5288] usb 4-1: SerialNumber: syz [ 118.068163][ T6864] nvme_fabrics: missing parameter 'transport=%s' [ 118.079216][ T6864] nvme_fabrics: missing parameter 'nqn=%s' [ 118.116389][ T5288] usb 4-1: config 0 descriptor?? [ 118.140816][ T5288] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 118.293947][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.696'. [ 118.642536][ T29] audit: type=1400 audit(1723831995.737:12): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6884 comm="syz.2.700" dest=20002 netif=wpan0 [ 118.784183][ T5288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.834448][ T5288] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 118.860591][ T6891] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.704'. [ 118.874100][ T5288] usb 4-1: media controller created [ 118.875316][ T29] audit: type=1326 audit(1723831995.977:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.2.705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x0 [ 118.933704][ T5288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.035441][ T5288] gp8psk_fe: Frontend revision 1 attached [ 119.049093][ T5288] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 119.081818][ T5288] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 119.237891][ T5288] gp8psk: usb in 138 operation failed. [ 119.244410][ T5288] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 119.268387][ T5288] gp8psk: found Genpix USB device pID = 201 (hex) [ 119.308592][ T5288] usb 4-1: USB disconnect, device number 6 [ 119.311344][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.712'. [ 119.540456][ T5288] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 119.761040][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 120.019854][ T5288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.109572][ T5288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.169015][ T5320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.218725][ T5320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.290174][ T5320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.378930][ T5320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.469417][ T5320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.589341][ T5320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.639149][ T5320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.798917][ T5267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.323086][ T6970] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 121.376619][ T6970] netlink: 'syz.3.740': attribute type 2 has an invalid length. [ 121.410200][ T6973] netlink: 2 bytes leftover after parsing attributes in process `syz.1.742'. [ 121.599860][ T6981] netlink: 280 bytes leftover after parsing attributes in process `syz.2.746'. [ 122.478427][ T5288] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.498894][ T29] audit: type=1326 audit(1723831999.597:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6986 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7fc00000 [ 122.698551][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 122.721063][ T5288] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 122.755685][ T5288] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 122.796589][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.815148][ T5288] usb 3-1: Product: syz [ 122.820421][ T7022] ebtables: ebtables: counters copy to user failed while replacing table [ 122.830172][ T5288] usb 3-1: Manufacturer: syz [ 122.839394][ T7024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.861468][ T5288] usb 3-1: SerialNumber: syz [ 122.892446][ T5288] usb 3-1: config 0 descriptor?? [ 122.900143][ T7009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.971243][ T5288] hub 3-1:0.0: bad descriptor, ignoring hub [ 122.977223][ T5288] hub 3-1:0.0: probe with driver hub failed with error -5 [ 123.021638][ T5288] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 123.364723][ T5299] usb 3-1: USB disconnect, device number 8 [ 123.364788][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 123.593053][ T5266] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.828967][ T5266] usb 5-1: Using ep0 maxpacket: 32 [ 123.850805][ T5266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.888873][ T5266] usb 5-1: config 0 has no interfaces? [ 123.917111][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.968498][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.999932][ T5266] usb 5-1: config 0 descriptor?? [ 124.255968][ T5267] usb 5-1: USB disconnect, device number 5 [ 124.638889][ T5218] Bluetooth: hci1: unknown advertising packet type: 0x23 [ 124.638977][ T5218] Bluetooth: hci1: unknown advertising packet type: 0x56 [ 124.646329][ T5218] Bluetooth: hci1: unknown advertising packet type: 0x8e [ 124.653926][ T5218] Bluetooth: hci1: unknown advertising packet type: 0x1a [ 124.662316][ T5218] Bluetooth: hci1: unknown advertising packet type: 0x12 [ 124.669953][ T5218] Bluetooth: hci1: unknown advertising packet type: 0xfa [ 124.676999][ T5218] Bluetooth: hci1: unknown advertising packet type: 0x66 [ 124.790548][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 125.319178][ T5267] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.508998][ T5267] usb 3-1: Using ep0 maxpacket: 16 [ 125.534844][ T5267] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 125.572469][ T5267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.598537][ T5267] usb 3-1: Product: syz [ 125.618890][ T5267] usb 3-1: Manufacturer: syz [ 125.627297][ T5267] usb 3-1: SerialNumber: syz [ 125.641870][ T5267] usb 3-1: config 0 descriptor?? [ 125.672069][ T5267] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 125.913842][ T7110] netlink: 104 bytes leftover after parsing attributes in process `syz.1.804'. [ 125.998745][ T1170] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.203544][ T1170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.236746][ T1170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.271142][ T1170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.298508][ T5267] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.322804][ T1170] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 126.336144][ T5267] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 126.348377][ T1170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.363391][ T5267] usb 3-1: media controller created [ 126.393229][ T1170] usb 1-1: config 0 descriptor?? [ 126.397801][ T7124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.810'. [ 126.426642][ T5267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.481776][ T5267] gp8psk_fe: Frontend revision 1 attached [ 126.505359][ T5267] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 126.527504][ T5267] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 126.684192][ T5267] gp8psk: usb in 138 operation failed. [ 126.711965][ T5267] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 126.745337][ T5267] gp8psk: found Genpix USB device pID = 201 (hex) [ 126.778083][ T5267] usb 3-1: USB disconnect, device number 9 [ 126.807302][ T7041] udevd[7041]: setting mode of /dev/dvb/adapter1/frontend0 to 020660 failed: No such file or directory [ 126.859571][ T7041] udevd[7041]: setting owner of /dev/dvb/adapter1/frontend0 to uid=0, gid=28 failed: No such file or directory [ 126.886506][ T1170] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 126.918371][ T1170] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 126.943209][ T1170] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 126.972115][ T1170] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 126.989510][ T1170] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 127.026227][ T1170] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 127.035302][ T5267] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 127.056307][ T1170] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 127.079206][ T1170] wacom 0003:056A:0094.0004: Using device in hidraw-only mode [ 127.114021][ T1170] wacom 0003:056A:0094.0004: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 127.176486][ T1170] usb 1-1: USB disconnect, device number 7 [ 127.218895][ T7134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.938550][ T5265] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.133738][ T5265] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 128.148059][ T5265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.187215][ T5265] usb 4-1: Product: syz [ 128.198631][ T5265] usb 4-1: Manufacturer: syz [ 128.203590][ T5265] usb 4-1: SerialNumber: syz [ 128.234237][ T5265] usb 4-1: config 0 descriptor?? [ 128.408682][ T5299] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.486076][ T5265] usb 4-1: USB disconnect, device number 7 [ 128.619887][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 128.648995][ T5299] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 128.658069][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.669640][ T5299] usb 1-1: Product: syz [ 128.674997][ T5299] usb 1-1: Manufacturer: syz [ 128.681855][ T5299] usb 1-1: SerialNumber: syz [ 128.699484][ T5299] usb 1-1: config 0 descriptor?? [ 128.714408][ T5299] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 129.173834][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807fbb9800: rx timeout, send abort [ 129.185459][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807fbb9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.337940][ T5299] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.358077][ T5299] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 129.385354][ T5299] usb 1-1: media controller created [ 129.474714][ T5299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.535862][ T5299] gp8psk_fe: Frontend revision 1 attached [ 129.563283][ T5299] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 129.596382][ T5299] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 129.755416][ T5299] gp8psk: usb in 138 operation failed. [ 129.774994][ T5299] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 129.798000][ T7201] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 129.816650][ T5299] gp8psk: found Genpix USB device pID = 201 (hex) [ 129.847597][ T5299] usb 1-1: USB disconnect, device number 8 [ 130.075089][ T5299] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 130.292311][ T7212] netlink: 104 bytes leftover after parsing attributes in process `syz.3.853'. [ 130.498984][ T29] audit: type=1326 audit(1723832007.607:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 130.561233][ T29] audit: type=1326 audit(1723832007.627:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 130.629293][ T29] audit: type=1326 audit(1723832007.637:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 130.661406][ T29] audit: type=1326 audit(1723832007.637:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 130.758683][ T29] audit: type=1326 audit(1723832007.637:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 130.838758][ T29] audit: type=1326 audit(1723832007.637:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 130.853676][ T7230] VFS: could not find a valid V7 on nullb0. [ 130.889279][ T7235] /dev/nullb0: Can't open blockdev [ 130.932046][ T29] audit: type=1326 audit(1723832007.637:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 130.996236][ T29] audit: type=1326 audit(1723832007.637:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4a9b70e27 code=0x7ffc0000 [ 131.033253][ T7239] netlink: 40 bytes leftover after parsing attributes in process `syz.2.864'. [ 131.079423][ T29] audit: type=1326 audit(1723832007.637:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4a9b157e9 code=0x7ffc0000 [ 131.158100][ T29] audit: type=1326 audit(1723832007.637:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7220 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb4a9b79e79 code=0x7ffc0000 [ 131.568766][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 131.596648][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 132.267068][ T7278] netlink: 'syz.1.881': attribute type 2 has an invalid length. [ 133.094239][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.101002][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.488886][ T5218] Bluetooth: hci5: command 0x040f tx timeout [ 134.981678][ T7362] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.920'. [ 135.000395][ T7362] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 135.591848][ T7383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.769761][ T5299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.900111][ T7391] tap0: tun_chr_ioctl cmd 1074025681 [ 135.969139][ T5299] usb 2-1: Using ep0 maxpacket: 8 [ 136.006782][ T5299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.019776][ T5299] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 136.043693][ T5299] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.080507][ T5299] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.128879][ T5299] usb 2-1: config 1 has no interface number 1 [ 136.135033][ T5299] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 136.207550][ T5299] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.241540][ T5299] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.271277][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.296106][ T5299] usb 2-1: Product: syz [ 136.308745][ T5299] usb 2-1: Manufacturer: syz [ 136.318461][ T5299] usb 2-1: SerialNumber: syz [ 136.332902][ T7409] program syz.2.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.656032][ T5299] usb 2-1: USB disconnect, device number 6 [ 136.772722][ T5217] udevd[5217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.946919][ T5266] kernel write not supported for file /amidi2 (pid: 5266 comm: kworker/1:3) [ 138.078377][ T5266] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.281120][ T5266] usb 1-1: Using ep0 maxpacket: 32 [ 138.300194][ T5266] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.314167][ T5266] usb 1-1: config 0 has no interface number 0 [ 138.334964][ T5266] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.375471][ T5266] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.404799][ T5266] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 138.434186][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.467237][ T5266] usb 1-1: config 0 descriptor?? [ 138.624434][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'. [ 138.943763][ T5267] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.129351][ T5266] uclogic 0003:28BD:0094.0005: pen parameters not found [ 139.166986][ T5266] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 139.168405][ T5267] usb 5-1: Using ep0 maxpacket: 8 [ 139.203423][ T5266] usb 1-1: USB disconnect, device number 9 [ 139.244825][ T5267] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 139.277640][ T5267] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 139.304183][ T5267] usb 5-1: config 0 has no interface number 0 [ 139.319765][ T5267] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.372247][ T5267] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.434099][ T5267] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.492335][ T5267] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 139.521846][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 139.558422][ T5267] usb 5-1: Product: syz [ 139.568527][ T5265] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.589627][ T5267] usb 5-1: config 0 descriptor?? [ 139.742897][ T7485] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 139.758412][ T5265] usb 4-1: Using ep0 maxpacket: 8 [ 139.767545][ T5265] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.801855][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.854205][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.891990][ T5265] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 139.911822][ T5265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.936336][ T5265] usb 4-1: Product: syz [ 139.946412][ T5265] usb 4-1: Manufacturer: syz [ 139.966695][ T5265] usb 4-1: SerialNumber: syz [ 140.018644][ T5265] usb 4-1: config 0 descriptor?? [ 140.235924][ T5267] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input10 [ 140.258452][ T5265] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 140.275601][ T5265] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 140.328497][ T5267] input: failed to attach handler kbd to device input10, error: -5 [ 140.395066][ T7499] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.436275][ T5265] radio-si470x 4-1:0.0: software version 103, hardware version 199 [ 140.458347][ T5265] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 140.637669][ T5265] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 140.668691][ T5265] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 140.671651][ T5266] usb 5-1: USB disconnect, device number 6 [ 140.686289][ T5265] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 140.718759][ T5265] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 140.776565][ T5265] usb 4-1: USB disconnect, device number 8 [ 141.261493][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 141.471411][ T7525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.997'. [ 144.016190][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 144.016207][ T29] audit: type=1326 audit(1723832021.117:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.0.1048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32d6d79e79 code=0x0 [ 144.670915][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1054'. [ 145.039850][ T7653] capability: warning: `syz.0.1057' uses 32-bit capabilities (legacy support in use) [ 145.080802][ T5299] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 145.080821][ T5299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.206450][ T7659] program syz.3.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.308727][ T5267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.352910][ T5267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.390582][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 145.435535][ T5267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.518539][ T5267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.598592][ T5265] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.699088][ T5265] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.770040][ T5265] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.838729][ T5265] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.609691][ T5267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.913667][ T7719] netlink: 'syz.4.1085': attribute type 2 has an invalid length. [ 147.527008][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1093'. [ 148.290007][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 149.590788][ T7793] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1120'. [ 149.620659][ T7793] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 149.859711][ T7804] VFS: could not find a valid V7 on nullb0. [ 149.893939][ T7804] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 149.938509][ T7804] qnx6: wrong signature (magic) in superblock #1. [ 149.958301][ T7804] qnx6: unable to read the first superblock [ 151.530214][ T5266] IPVS: starting estimator thread 0... [ 151.619558][ T7842] IPVS: using max 20 ests per chain, 48000 per kthread [ 151.779057][ T5299] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 151.850635][ T7847] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1141'. [ 152.008335][ T5299] usb 1-1: Using ep0 maxpacket: 32 [ 152.023710][ T5299] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.058778][ T5299] usb 1-1: config 0 has no interfaces? [ 152.087196][ T5299] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.099238][ T7849] nvme_fabrics: missing parameter 'transport=%s' [ 152.110387][ T7849] nvme_fabrics: missing parameter 'nqn=%s' [ 152.117640][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.159430][ T5299] usb 1-1: config 0 descriptor?? [ 152.448121][ T5320] usb 1-1: USB disconnect, device number 10 [ 153.161288][ T7885] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 153.629230][ T7896] program syz.3.1161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.346162][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 154.357152][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 154.502915][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 154.672292][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 155.164638][ T7943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.358681][ T1170] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.393127][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 155.588405][ T5265] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.708550][ T7964] nbd: nbd4 already in use [ 155.758503][ T1170] usb 2-1: device not accepting address 7, error -71 [ 155.779959][ T5265] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 155.789674][ T5265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.799620][ T29] audit: type=1400 audit(1723832032.907:31): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7966 comm="syz.2.1193" dest=20002 netif=wpan0 [ 155.805707][ T5265] usb 1-1: config 0 descriptor?? [ 156.039238][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 156.255615][ T5265] [drm:udl_init] *ERROR* Selecting channel failed [ 156.293758][ T7989] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1205'. [ 156.305115][ T5265] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 156.313475][ T5265] [drm] Initialized udl on minor 2 [ 156.333851][ T5265] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.355592][ T5265] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 156.384850][ T5267] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.393734][ T5265] usb 1-1: USB disconnect, device number 11 [ 156.409034][ T5267] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 157.033169][ T8015] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 157.880006][ T8041] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.1228'. [ 157.906451][ T8041] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 159.498309][ T29] audit: type=1326 audit(1723832036.597:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 159.587732][ T29] audit: type=1326 audit(1723832036.597:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 159.674573][ T29] audit: type=1326 audit(1723832036.597:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 159.743845][ T29] audit: type=1326 audit(1723832036.597:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 159.818318][ T29] audit: type=1326 audit(1723832036.597:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 159.885694][ T29] audit: type=1326 audit(1723832036.597:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 159.971008][ T29] audit: type=1326 audit(1723832036.597:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 160.027626][ T29] audit: type=1326 audit(1723832036.597:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 160.118345][ T29] audit: type=1326 audit(1723832036.597:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x7fc00000 [ 160.229970][ T8114] binder: 8111:8114 ioctl c018620c 200005c0 returned -1 [ 160.543729][ T8129] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1269'. [ 160.568434][ T8129] openvswitch: netlink: Multiple metadata blocks provided [ 160.699239][ T8133] netlink: 856 bytes leftover after parsing attributes in process `syz.0.1271'. [ 160.741792][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807f65bc00: rx timeout, send abort [ 160.751418][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807f65bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.959207][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 161.009549][ T8141] 8021q: VLANs not supported on ipvlan0 [ 161.236889][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1279'. [ 162.379777][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 162.578721][ T8165] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.601913][ T8165] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 162.687679][ T8165] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.703856][ T8165] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 162.845831][ T8165] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.875850][ T8165] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 163.040547][ T8214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1300'. [ 163.430608][ T8231] netlink: 'syz.0.1314': attribute type 10 has an invalid length. [ 163.480674][ T8231] team0: Port device netdevsim0 added [ 163.538727][ T8239] netlink: 'syz.0.1314': attribute type 10 has an invalid length. [ 163.816705][ T8249] wg1: entered promiscuous mode [ 163.829223][ T8249] wg1: entered allmulticast mode [ 163.940527][ T8165] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 163.953246][ T8254] syz.2.1310[8254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.953542][ T8254] syz.2.1310[8254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.976032][ T8165] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 164.230727][ T8264] netlink: 'syz.0.1313': attribute type 11 has an invalid length. [ 164.459283][ T8272] netlink: 'syz.0.1316': attribute type 3 has an invalid length. [ 164.870444][ T8290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.618709][ T5267] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 165.840076][ T5267] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.850815][ T5267] usb 2-1: config 0 has no interface number 0 [ 165.878515][ T5267] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 165.912218][ T5267] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 40, setting to 8 [ 165.949758][ T5267] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.982186][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.011396][ T5267] usb 2-1: config 0 descriptor?? [ 166.030656][ T8314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.070430][ T5267] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 166.294749][ T5265] usb 2-1: USB disconnect, device number 9 [ 166.325872][ T5265] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 166.337728][ T8361] netlink: 'syz.4.1345': attribute type 1 has an invalid length. [ 166.407041][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1345'. [ 166.493837][ T8373] can0: slcan on ttyS3. [ 166.670072][ T8373] can0 (unregistered): slcan off ttyS3. [ 167.045507][ T8403] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 167.115003][ T8403] team0: Device netdevsim0 failed to register rx_handler [ 167.219942][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 167.219985][ T29] audit: type=1326 audit(1723832044.317:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8411 comm="syz.3.1363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b00179e79 code=0x0 [ 167.272620][ T8409] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 167.592609][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 167.844500][ T8438] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 167.864466][ T8438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1373'. [ 168.112028][ T8452] program syz.0.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.148125][ T8451] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1380'. [ 168.175326][ T8451] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 168.319215][ T8464] netlink: 'syz.2.1387': attribute type 21 has an invalid length. [ 168.337448][ T8464] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1387'. [ 168.354740][ T8464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1387'. [ 168.596243][ T8478] tun0: tun_chr_ioctl cmd 1074025677 [ 168.607775][ T8478] tun0: linktype set to 65534 [ 168.641759][ T8480] process 'syz.3.1396' launched './file0' with NULL argv: empty string added [ 169.199174][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.365349][ T8515] binder: 8514:8515 ioctl 4018620d 0 returned -22 [ 169.390638][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.421614][ T47] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 169.461575][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.492564][ T47] usb 5-1: config 0 descriptor?? [ 169.937564][ T47] ath6kl: Failed to read usb control message: -71 [ 169.963034][ T47] ath6kl: Unable to read the bmi data from the device: -71 [ 169.981779][ T47] ath6kl: Unable to recv target info: -71 [ 170.006784][ T47] ath6kl: Failed to init ath6kl core: -71 [ 170.023550][ T47] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 170.059921][ T47] usb 5-1: USB disconnect, device number 7 [ 170.328856][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 171.017366][ T29] audit: type=1400 audit(1723832048.117:73): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8568 comm="syz.2.1436" dest=20002 netif=wpan0 [ 171.076443][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'. [ 171.094684][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'. [ 171.227516][ T8579] netem: incorrect gi model size [ 171.253982][ T8579] netem: change failed [ 171.361176][ T8584] validate_nla: 2 callbacks suppressed [ 171.361197][ T8584] netlink: 'syz.2.1441': attribute type 6 has an invalid length. [ 171.418451][ T8584] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1441'. [ 172.628978][ T5266] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.838675][ T5266] usb 4-1: Using ep0 maxpacket: 32 [ 172.858468][ T5266] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 172.910127][ T29] audit: type=1326 audit(1723832050.017:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8639 comm="syz.0.1465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32d6d79e79 code=0x0 [ 172.910365][ T5266] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 172.970876][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.988726][ T5266] usb 4-1: Product: syz [ 172.998026][ T5266] usb 4-1: Manufacturer: syz [ 173.013225][ T5266] usb 4-1: SerialNumber: syz [ 173.024667][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 173.059250][ T5266] usb 4-1: config 0 descriptor?? [ 173.064939][ T8622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.074858][ T5266] hub 4-1:0.0: bad descriptor, ignoring hub [ 173.093082][ T5266] hub 4-1:0.0: probe with driver hub failed with error -5 [ 173.110919][ T5266] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 173.459446][ T5266] usb 4-1: USB disconnect, device number 9 [ 173.465315][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 174.072746][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 174.400667][ T8691] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 175.052473][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'. [ 175.228580][ T1170] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.403931][ T8728] tun0: tun_chr_ioctl cmd 1074025677 [ 175.426588][ T1170] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 175.434252][ T8728] tun0: linktype set to 778 [ 175.456154][ T1170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.488004][ T1170] usb 4-1: config 0 descriptor?? [ 175.521770][ T1170] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 175.756182][ T5267] kernel write not supported for file /uhid (pid: 5267 comm: kworker/0:7) [ 176.011667][ T8754] program syz.2.1518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.134071][ T1170] gspca_stv06xx: vv6410 sensor detected [ 176.429069][ T1170] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 176.457760][ T1170] usb 4-1: USB disconnect, device number 10 [ 176.771457][ T29] audit: type=1326 audit(1723832053.877:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8778 comm="syz.4.1528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651f579e79 code=0x0 [ 177.298523][ T1170] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 177.488475][ T1170] usb 1-1: Using ep0 maxpacket: 16 [ 177.497840][ T1170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.521920][ T1170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.546381][ T1170] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 177.563288][ T1170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.596847][ T1170] usb 1-1: config 0 descriptor?? [ 178.067223][ T1170] logitech 0003:046D:CA03.0006: item fetching failed at offset 0/5 [ 178.085768][ T1170] logitech 0003:046D:CA03.0006: parse failed [ 178.106857][ T1170] logitech 0003:046D:CA03.0006: probe with driver logitech failed with error -22 [ 178.326073][ T1170] usb 1-1: USB disconnect, device number 12 [ 178.738848][ T1185] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.967523][ T1185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.018328][ T1185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.028106][ T1185] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.068366][ T1185] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 179.077438][ T1185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.109271][ T8883] nbd: device at index 1 is going down [ 179.110780][ T1185] usb 5-1: config 0 descriptor?? [ 179.582328][ T1185] hid-alps 0003:044E:120B.0007: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 179.796192][ T8896] macvlan4: entered promiscuous mode [ 179.812203][ T5265] usb 5-1: USB disconnect, device number 8 [ 179.832730][ T8896] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 179.883211][ T8896] team0: Port device macvlan4 added [ 180.659610][ T5320] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 180.859738][ T5320] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 180.877960][ T5320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.896471][ T5320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.928650][ T5320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.945593][ T5320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.966104][ T5320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.019987][ T5320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.037458][ T5320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.055114][ T5320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.093501][ T5320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.128735][ T5320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.150927][ T8938] tap0: tun_chr_ioctl cmd 2147767521 [ 181.158914][ T5320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.183010][ T5320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.186956][ T8941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1604'. [ 181.203582][ T5320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.228804][ T5320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.260140][ T5320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.278525][ T5320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.308316][ T5320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.321412][ T5320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.354895][ T5320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.391867][ T5320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.417529][ T5320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.465277][ T5320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.484868][ T5320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.511074][ T5320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.548493][ T5320] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 181.557615][ T5320] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 181.593626][ T5320] usb 1-1: Product: syz [ 181.597852][ T5320] usb 1-1: Manufacturer: syz [ 181.636269][ T5320] usb 1-1: SerialNumber: syz [ 181.660566][ T5320] usb 1-1: config 0 descriptor?? [ 181.680387][ T5320] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 181.936546][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 181.978383][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 182.003891][ T5265] usb 1-1: USB disconnect, device number 13 [ 182.005668][ T8967] gtp0: entered promiscuous mode [ 182.020032][ T5265] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 182.035524][ T8967] gtp0: entered allmulticast mode [ 182.195833][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 183.391889][ T9022] netlink: 'syz.4.1638': attribute type 10 has an invalid length. [ 183.456941][ T9022] team0: Port device netdevsim0 added [ 183.497127][ T9023] netlink: 'syz.4.1638': attribute type 10 has an invalid length. [ 183.518460][ T5265] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 183.556688][ T9023] team0: Port device netdevsim0 removed [ 183.574146][ T9023] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 183.730498][ T5265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.761348][ T5265] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.787725][ T5265] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.797284][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.812348][ T5265] usb 2-1: SerialNumber: syz [ 184.067667][ T5265] usb 2-1: 0:2 : does not exist [ 184.101802][ T9042] syz.3.1649 (9042): /proc/9042/oom_adj is deprecated, please use /proc/9042/oom_score_adj instead. [ 184.112904][ T5265] usb 2-1: USB disconnect, device number 10 [ 185.066118][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 185.698572][ T5265] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.888501][ T5265] usb 3-1: Using ep0 maxpacket: 8 [ 185.901007][ T5265] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.918417][ T5265] usb 3-1: config 0 has no interface number 0 [ 185.925835][ T5265] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.949902][ T5265] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 185.977035][ T5265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.005898][ T5265] usb 3-1: config 0 descriptor?? [ 186.029045][ T5265] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 186.226501][ T9130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1689'. [ 186.232603][ T5265] usb 3-1: USB disconnect, device number 10 [ 186.260689][ T5265] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 186.798357][ T5265] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.838190][ T9153] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1699'. [ 186.866801][ T9153] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 187.018420][ T5265] usb 5-1: Using ep0 maxpacket: 8 [ 187.029696][ T5265] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.058478][ T5265] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 187.094683][ T5265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 187.127356][ T9166] netlink: 'syz.1.1705': attribute type 32 has an invalid length. [ 187.128381][ T5265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 187.154569][ T9166] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1705'. [ 187.173887][ T5265] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.192408][ T9166] unsupported nla_type 8192 [ 187.219938][ T5265] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 187.238329][ T5265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.257220][ T5265] usb 5-1: Product: syz [ 187.277177][ T5265] usb 5-1: Manufacturer: syz [ 187.287305][ T5265] usb 5-1: SerialNumber: syz [ 187.295029][ T5265] usb 5-1: config 0 descriptor?? [ 187.332783][ T5265] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 187.374252][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 187.458592][ T5267] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 187.576460][ T5320] usb 5-1: USB disconnect, device number 9 [ 187.646349][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.668306][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.688353][ T5267] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 187.689680][ T9186] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 187.697398][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.719948][ T5267] usb 3-1: config 0 descriptor?? [ 187.722164][ T9186] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.1715'. [ 187.725727][ T9184] program syz.3.1714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.735719][ T9186] netlink: 'syz.1.1715': attribute type 2 has an invalid length. [ 187.760668][ T9186] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 187.950221][ T9190] macsec1: entered promiscuous mode [ 187.974844][ T9190] vlan0: entered promiscuous mode [ 187.985810][ T9190] vlan0: left promiscuous mode [ 188.175098][ T5267] pantherlord 0003:0F30:0111.0008: item fetching failed at offset 6/7 [ 188.200882][ T5267] pantherlord 0003:0F30:0111.0008: parse failed [ 188.225537][ T5267] pantherlord 0003:0F30:0111.0008: probe with driver pantherlord failed with error -22 [ 188.384609][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1724'. [ 188.409822][ T5266] usb 3-1: USB disconnect, device number 11 [ 188.568472][ T5267] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.578633][ T5320] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.758432][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 188.765016][ T5320] usb 2-1: Using ep0 maxpacket: 8 [ 188.765300][ T5267] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 188.782210][ T5320] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.798292][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.809597][ T5267] usb 5-1: config 0 descriptor?? [ 188.826730][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.830206][ T5267] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 188.863506][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.896553][ T5320] usb 2-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 188.917549][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.947144][ T5320] usb 2-1: Product: syz [ 188.962733][ T5320] usb 2-1: Manufacturer: syz [ 188.978394][ T5320] usb 2-1: SerialNumber: syz [ 188.999435][ T5320] usb 2-1: config 0 descriptor?? [ 189.176457][ T9222] mmap: syz.3.1733 (9222) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.217637][ T5320] radio-si470x 2-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 189.429942][ T5320] radio-si470x 2-1:0.0: software version 98, hardware version 86 [ 189.443335][ T5267] gspca_sunplus: reg_w_riv err -71 [ 189.458456][ T5267] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 189.486625][ T5267] usb 5-1: USB disconnect, device number 10 [ 189.629883][ T5320] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 189.657756][ T5320] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 189.681279][ T5320] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 189.691691][ T5320] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 189.721415][ T5320] usb 2-1: USB disconnect, device number 11 [ 190.373745][ T9256] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1749'. [ 191.054238][ T9288] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1764'. [ 191.072737][ T9288] netlink: 'syz.1.1764': attribute type 6 has an invalid length. [ 191.136046][ T9291] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 191.433202][ T9299] [U] ƒ [ 191.712268][ T9307] tap0: tun_chr_ioctl cmd 1074025672 [ 191.727896][ T9307] tap0: ignored: set checksum disabled [ 191.738944][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1774'. [ 191.768197][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1774'. [ 193.722569][ T9393] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1809'. [ 194.112472][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 194.248765][ T5267] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.438342][ T5267] usb 4-1: Using ep0 maxpacket: 8 [ 194.450190][ T5267] usb 4-1: config index 0 descriptor too short (expected 7382, got 27) [ 194.470179][ T5267] usb 4-1: config 195 has 1 interface, different from the descriptor's value: 23 [ 194.483421][ T5267] usb 4-1: config 195 interface 0 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 194.501769][ T5267] usb 4-1: config 195 interface 0 has no altsetting 0 [ 194.510846][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 194.514368][ T5267] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 194.547091][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.555957][ T5267] usb 4-1: Product: syz [ 194.556534][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.566368][ T5267] usb 4-1: Manufacturer: syz [ 194.566389][ T5267] usb 4-1: SerialNumber: syz [ 194.577387][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.580319][ T5267] hub 4-1:195.0: bad descriptor, ignoring hub [ 194.620569][ T5267] hub 4-1:195.0: probe with driver hub failed with error -5 [ 194.642671][ T5267] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 194.837476][ T5267] gspca_zc3xx: reg_w_i err -71 [ 195.458374][ T5267] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 195.470416][ T5267] gspca_zc3xx 4-1:195.0: probe with driver gspca_zc3xx failed with error -71 [ 195.737446][ T5267] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 195.926557][ T9472] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1845'. [ 195.966320][ T9472] unsupported nlmsg_type 40 [ 196.104114][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.115109][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.128758][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.149407][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.159835][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 196.176972][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.208139][ T5218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.217639][ T5218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.227565][ T5218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.248719][ T5218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.260904][ T5218] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 196.270415][ T5218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.649361][ T5266] usb 4-1: USB disconnect, device number 11 [ 196.939166][ T9478] chnl_net:caif_netlink_parms(): no params data found [ 197.028787][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 197.053928][ T9506] ipvlan2: entered allmulticast mode [ 197.087873][ T9506] veth0_vlan: entered allmulticast mode [ 197.378968][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.417448][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.468764][ T9478] bridge_slave_0: entered allmulticast mode [ 197.476087][ T9478] bridge_slave_0: entered promiscuous mode [ 197.502106][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.516456][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.544138][ T9478] bridge_slave_1: entered allmulticast mode [ 197.562182][ T9478] bridge_slave_1: entered promiscuous mode [ 197.711069][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.749310][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.892369][ T9549] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1878'. [ 197.894074][ T1126] bond0: (slave bond_slave_0): interface is now down [ 197.928344][ T1126] bond0: (slave bond_slave_1): interface is now down [ 197.977417][ T3041] bond0: (slave bond_slave_0): interface is now down [ 198.008356][ T3041] bond0: (slave bond_slave_1): interface is now down [ 198.015446][ T9550] use of bytesused == 0 is deprecated and will be removed in the future, [ 198.022691][ T9478] team0: Port device team_slave_0 added [ 198.038731][ T9550] use the actual size instead. [ 198.048499][ T1126] bond0: (slave bond_slave_0): interface is now down [ 198.055366][ T1126] bond0: (slave bond_slave_1): interface is now down [ 198.070930][ T9478] team0: Port device team_slave_1 added [ 198.090221][ T9553] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1879'. [ 198.103132][ T9554] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1880'. [ 198.119596][ T1126] bond0: (slave bond_slave_0): interface is now down [ 198.136598][ T1126] bond0: (slave bond_slave_1): interface is now down [ 198.158381][ T35] bond0: (slave bond_slave_0): interface is now down [ 198.165586][ T35] bond0: (slave bond_slave_1): interface is now down [ 198.198380][ T35] bond0: (slave bond_slave_0): interface is now down [ 198.205870][ T35] bond0: (slave bond_slave_1): interface is now down [ 198.228361][ T35] bond0: (slave bond_slave_0): interface is now down [ 198.238349][ T35] bond0: (slave bond_slave_1): interface is now down [ 198.261107][ T9553] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 198.269172][ T35] bond0: (slave bond_slave_0): interface is now down [ 198.278567][ T35] bond0: (slave bond_slave_1): interface is now down [ 198.291346][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.301675][ T3041] bond0: (slave bond_slave_0): interface is now down [ 198.310748][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.321531][ T3041] bond0: (slave bond_slave_1): interface is now down [ 198.369591][ T55] Bluetooth: hci6: command tx timeout [ 198.384786][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.399074][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.406465][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.433171][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.435410][ T63] bond0: (slave bond_slave_0): interface is now down [ 198.488656][ T63] bond0: (slave bond_slave_1): interface is now down [ 198.529246][ T1126] bond0: (slave bond_slave_0): interface is now down [ 198.546168][ T1126] bond0: (slave bond_slave_1): interface is now down [ 198.598406][ T1126] bond0: (slave bond_slave_0): interface is now down [ 198.605127][ T1126] bond0: (slave bond_slave_1): interface is now down [ 198.652302][ T11] bond0: (slave bond_slave_0): interface is now down [ 198.671388][ T11] bond0: (slave bond_slave_1): interface is now down [ 198.693044][ T63] bond0: (slave bond_slave_0): interface is now down [ 198.702009][ T63] bond0: (slave bond_slave_1): interface is now down [ 198.738343][ T3041] bond0: (slave bond_slave_0): interface is now down [ 198.745109][ T3041] bond0: (slave bond_slave_1): interface is now down [ 198.779133][ T1126] bond0: (slave bond_slave_0): interface is now down [ 198.784907][ T9478] hsr_slave_0: entered promiscuous mode [ 198.785928][ T1126] bond0: (slave bond_slave_1): interface is now down [ 198.829616][ T9478] hsr_slave_1: entered promiscuous mode [ 198.839864][ T1126] bond0: (slave bond_slave_0): interface is now down [ 198.846645][ T1126] bond0: (slave bond_slave_1): interface is now down [ 198.858893][ T9478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.877594][ T9478] Cannot create hsr debugfs directory [ 198.883609][ T1126] bond0: (slave bond_slave_0): interface is now down [ 198.883631][ T1126] bond0: (slave bond_slave_1): interface is now down [ 198.898428][ T11] bond0: (slave bond_slave_0): interface is now down [ 198.905129][ T11] bond0: (slave bond_slave_1): interface is now down [ 198.938723][ T63] bond0: (slave bond_slave_0): interface is now down [ 198.955741][ T63] bond0: (slave bond_slave_1): interface is now down [ 198.983503][ T11] bond0: (slave bond_slave_0): interface is now down [ 198.999338][ T11] bond0: (slave bond_slave_1): interface is now down [ 199.039398][ T63] bond0: (slave bond_slave_0): interface is now down [ 199.046132][ T63] bond0: (slave bond_slave_1): interface is now down [ 199.082176][ T63] bond0: (slave bond_slave_0): interface is now down [ 199.107619][ T63] bond0: (slave bond_slave_1): interface is now down [ 199.142710][ T11] bond0: (slave bond_slave_0): interface is now down [ 199.158365][ T11] bond0: (slave bond_slave_1): interface is now down [ 199.190295][ T11] bond0: (slave bond_slave_0): interface is now down [ 199.208685][ T11] bond0: (slave bond_slave_1): interface is now down [ 199.218506][ T1170] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.237676][ T63] bond0: (slave bond_slave_0): interface is now down [ 199.268033][ T63] bond0: (slave bond_slave_1): interface is now down [ 199.288531][ T11] bond0: (slave bond_slave_0): interface is now down [ 199.303300][ T11] bond0: (slave bond_slave_1): interface is now down [ 199.339634][ T63] bond0: (slave bond_slave_0): interface is now down [ 199.346350][ T63] bond0: (slave bond_slave_1): interface is now down [ 199.398459][ T1126] bond0: (slave bond_slave_0): interface is now down [ 199.408485][ T1170] usb 5-1: Using ep0 maxpacket: 8 [ 199.413627][ T1126] bond0: (slave bond_slave_1): interface is now down [ 199.433013][ T1170] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.460490][ T1170] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.470386][ T63] bond0: (slave bond_slave_0): interface is now down [ 199.470408][ T63] bond0: (slave bond_slave_1): interface is now down [ 199.491311][ T1170] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.524389][ T1170] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 199.538586][ T63] bond0: (slave bond_slave_0): interface is now down [ 199.555504][ T63] bond0: (slave bond_slave_1): interface is now down [ 199.562400][ T1170] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.562429][ T1170] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 199.605935][ T1170] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.618569][ T1170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.634906][ T1170] usb 5-1: Product: syz [ 199.643940][ T1170] usb 5-1: Manufacturer: syz [ 199.655452][ T63] bond0: (slave bond_slave_0): interface is now down [ 199.682945][ T1170] usb 5-1: SerialNumber: syz [ 199.721033][ T63] bond0: (slave bond_slave_1): interface is now down [ 199.768359][ T35] bond0: (slave bond_slave_0): interface is now down [ 199.796512][ T35] bond0: (slave bond_slave_1): interface is now down [ 199.871875][ T11] bond0: (slave bond_slave_0): interface is now down [ 199.917184][ T11] bond0: (slave bond_slave_1): interface is now down [ 199.938647][ T1170] cdc_ncm 5-1:1.0: bind() failure [ 199.957828][ T1170] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 199.985129][ T1170] cdc_ncm 5-1:1.1: bind() failure [ 200.011060][ T63] bond0: (slave bond_slave_0): interface is now down [ 200.028869][ T63] bond0: (slave bond_slave_1): interface is now down [ 200.046933][ T1170] usb 5-1: USB disconnect, device number 11 [ 200.059426][ T11] bond0: (slave bond_slave_0): interface is now down [ 200.086516][ T11] bond0: (slave bond_slave_1): interface is now down [ 200.118401][ T11] bond0: (slave bond_slave_0): interface is now down [ 200.125173][ T11] bond0: (slave bond_slave_1): interface is now down [ 200.168605][ T3041] bond0: (slave bond_slave_0): interface is now down [ 200.175338][ T3041] bond0: (slave bond_slave_1): interface is now down [ 200.229419][ T11] bond0: (slave bond_slave_0): interface is now down [ 200.256687][ T11] bond0: (slave bond_slave_1): interface is now down [ 200.319649][ T11] bond0: (slave bond_slave_0): interface is now down [ 200.346716][ T11] bond0: (slave bond_slave_1): interface is now down [ 200.386428][ T3041] bond0: (slave bond_slave_0): interface is now down [ 200.408895][ T3041] bond0: (slave bond_slave_1): interface is now down [ 200.438667][ T11] bond0: (slave bond_slave_0): interface is now down [ 200.447284][ T9478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.458835][ T55] Bluetooth: hci6: command tx timeout [ 200.465023][ T11] bond0: (slave bond_slave_1): interface is now down [ 200.498772][ T3041] bond0: (slave bond_slave_0): interface is now down [ 200.546775][ T3041] bond0: (slave bond_slave_1): interface is now down [ 200.589699][ T35] bond0: (slave bond_slave_0): interface is now down [ 200.616786][ T35] bond0: (slave bond_slave_1): interface is now down [ 200.671489][ T35] bond0: now running without any active interface! [ 200.830508][ T9478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.838436][ T47] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 201.022742][ T9478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.050122][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.083573][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.125447][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.147364][ T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.157583][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.169930][ T47] usb 4-1: config 0 descriptor?? [ 201.210552][ T9478] team0: Port device netdevsim0 removed [ 201.222922][ T9478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.484465][ T9478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.532349][ T9478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.562632][ T9628] netlink: 'syz.4.1914': attribute type 4 has an invalid length. [ 201.607963][ T9478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.611270][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.646741][ T9478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.648301][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.688007][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.716055][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.747072][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.760617][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.782203][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.815351][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.828367][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.848387][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.856136][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.889825][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.897351][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.915469][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.934609][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.952163][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.952636][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 201.985018][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.014280][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.018355][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.042648][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.052634][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.058303][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.059817][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.081180][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.100759][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.131075][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.138284][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.139176][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.181605][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.208507][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.221197][ T9478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.232282][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.249819][ T9478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.270793][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.298676][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.327607][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.383134][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.430258][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.473138][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.514146][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.528709][ T55] Bluetooth: hci6: command tx timeout [ 202.558745][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.594387][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.628370][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.651671][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.661473][ T47] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 202.672837][ T47] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 202.702339][ T47] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 202.730978][ T47] usb 4-1: USB disconnect, device number 12 [ 202.826299][ T9478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.990152][ T9478] veth0_vlan: entered promiscuous mode [ 203.032063][ T9478] veth1_vlan: entered promiscuous mode [ 203.140047][ T9478] veth0_macvtap: entered promiscuous mode [ 203.165889][ T9478] veth1_macvtap: entered promiscuous mode [ 203.217732][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.248127][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.269977][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.288430][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.306116][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.330171][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.348858][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.367319][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.377330][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.397370][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.407528][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.431954][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.453271][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.510976][ T9681] syz.3.1937 uses obsolete (PF_INET,SOCK_PACKET) [ 203.514945][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.542799][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.560368][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.584235][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.594429][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.616307][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.658403][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.679516][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.689804][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.708760][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.727572][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.739347][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.751906][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.802494][ T9478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.831049][ T9478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.843881][ T9478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.859473][ T9478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.114198][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.131527][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.174389][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.208782][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.369394][ T47] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 204.559028][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 204.582800][ T47] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 204.608418][ T55] Bluetooth: hci6: command tx timeout [ 204.620123][ T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.631044][ T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.646465][ T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.657940][ T47] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.676389][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.685913][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.189623][ T5299] usb 4-1: USB disconnect, device number 13 [ 205.196665][ T29] audit: type=1326 audit(1723832082.297:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.257219][ T29] audit: type=1326 audit(1723832082.297:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.300858][ T29] audit: type=1326 audit(1723832082.307:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.385981][ T29] audit: type=1326 audit(1723832082.307:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.446435][ T29] audit: type=1326 audit(1723832082.317:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.535076][ T29] audit: type=1326 audit(1723832082.317:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.625774][ T29] audit: type=1326 audit(1723832082.317:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.675071][ T29] audit: type=1326 audit(1723832082.317:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.735267][ T29] audit: type=1326 audit(1723832082.317:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.787419][ T29] audit: type=1326 audit(1723832082.317:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9730 comm="syz.0.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 205.812829][ T9751] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1969'. [ 205.888659][ T5267] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 205.908995][ T9753] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1970'. [ 206.101383][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.121372][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.156998][ T5267] usb 1-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 206.178043][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.219256][ T5267] usb 1-1: config 0 descriptor?? [ 206.291048][ T9767] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1976'. [ 206.655413][ T5267] hid-generic 0003:05AC:4262.000A: unbalanced delimiter at end of report description [ 206.692604][ T5267] hid-generic 0003:05AC:4262.000A: probe with driver hid-generic failed with error -22 [ 206.791103][ T9782] netlink: 'syz.4.1982': attribute type 5 has an invalid length. [ 206.933394][ T5299] usb 1-1: USB disconnect, device number 14 [ 207.758401][ T1185] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 207.868369][ T1170] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.956214][ T1185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.977036][ T1185] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.997198][ T1185] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.026326][ T1185] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.036260][ T1185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.056612][ T1185] usb 3-1: Product: syz [ 208.062796][ T1185] usb 3-1: Manufacturer: syz [ 208.078196][ T1185] usb 3-1: SerialNumber: syz [ 208.085161][ T1170] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.098305][ T1170] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.114971][ T1185] cdc_ncm 3-1:1.0: skipping garbage [ 208.129092][ T1185] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 208.138450][ T1170] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.157892][ T1185] cdc_ncm 3-1:1.0: bind() failure [ 208.163985][ T1170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.183977][ T1170] usb 1-1: SerialNumber: syz [ 208.421229][ T1170] usb 1-1: 0:2 : does not exist [ 208.468681][ T1170] usb 1-1: USB disconnect, device number 15 [ 208.979794][ T9863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2020'. [ 209.862533][ T9888] netlink: 5300 bytes leftover after parsing attributes in process `syz.4.2031'. [ 209.918034][ T9888] openvswitch: netlink: IP tunnel dst address not specified [ 210.010503][ T9892] IPVS: length: 24 != 423960 [ 210.538963][ T5288] usb 3-1: USB disconnect, device number 12 [ 210.827289][ T9922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2049'. [ 211.442230][ T9954] sctp: [Deprecated]: syz.0.2060 (pid 9954) Use of int in maxseg socket option. [ 211.442230][ T9954] Use struct sctp_assoc_value instead [ 211.467947][ T9956] input: syz0 as /devices/virtual/input/input15 [ 212.132263][ T5288] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 212.219198][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 212.349309][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 212.362623][ T5288] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 212.407761][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.441333][ T5288] usb 4-1: config 0 descriptor?? [ 212.468733][ T5288] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 212.978422][ T5299] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 213.028384][ T1185] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 213.102027][T10006] netlink: 'syz.1.2083': attribute type 3 has an invalid length. [ 213.120135][T10006] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2083'. [ 213.177755][ T5299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.206332][ T5299] usb 1-1: config 1 has no interface number 0 [ 213.212836][ T5299] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.220259][ T1185] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.248892][ T5299] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 213.258385][ T1185] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.267959][ T5288] gspca_sunplus: reg_w_riv err -71 [ 213.277598][ T5299] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 213.287973][ T5288] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 213.309132][ T5299] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 23 [ 213.311806][ T1185] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.338673][ T5288] usb 4-1: USB disconnect, device number 14 [ 213.358379][ T1185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.360280][ T5299] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.366414][ T1185] usb 5-1: SerialNumber: syz [ 213.402597][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.430494][ T5299] usb 1-1: Product: syz [ 213.445424][ T5299] usb 1-1: Manufacturer: syz [ 213.460323][ T5299] usb 1-1: SerialNumber: syz [ 213.488718][T10015] cgroup: fork rejected by pids controller in /syz1 [ 213.658071][ T1185] usb 5-1: 0:2 : does not exist [ 213.688645][ T1185] usb 5-1: USB disconnect, device number 12 [ 213.694619][ T9994] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 214.117967][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.240774][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.345315][ T9994] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 214.360948][ T5299] cdc_ncm 1-1:1.1: bind() failure [ 214.416537][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.528014][T10038] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 214.607684][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.689811][ T5299] usb 1-1: USB disconnect, device number 16 [ 214.900049][ T35] bridge_slave_1: left allmulticast mode [ 214.917278][ T35] bridge_slave_1: left promiscuous mode [ 214.935079][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.948433][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.958563][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.967146][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.977591][ T5218] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.986849][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.999527][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.032489][ T35] bridge_slave_0: left allmulticast mode [ 215.048420][ T35] bridge_slave_0: left promiscuous mode [ 215.054631][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.167593][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.184629][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.201998][ T35] bond0 (unregistering): Released all slaves [ 216.297849][T10065] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 216.398044][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.407986][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.450473][T10065] bridge0: entered allmulticast mode [ 217.009053][ T5218] Bluetooth: hci1: command tx timeout [ 217.241217][T10099] loop0: detected capacity change from 0 to 127 [ 217.458745][ T35] hsr_slave_0: left promiscuous mode [ 217.536431][ T35] hsr_slave_1: left promiscuous mode [ 217.600358][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.621093][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.644600][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.663192][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.696709][ T35] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 217.712591][ T35] veth1_macvtap: left promiscuous mode [ 217.718858][ T35] veth0_macvtap: left promiscuous mode [ 217.724552][ T35] veth1_vlan: left promiscuous mode [ 217.734741][ T35] veth0_vlan: left promiscuous mode [ 217.828538][ T5299] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 218.005938][ T35] team0 (unregistering): Port device macvlan4 removed [ 218.040990][ T5299] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 218.071898][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.119306][ T5299] usb 4-1: config 0 descriptor?? [ 218.135918][ T5299] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 218.399240][ T5299] usb 4-1: USB disconnect, device number 15 [ 218.762015][ T35] team0 (unregistering): Port device team_slave_1 removed [ 218.829271][ T35] team0 (unregistering): Port device team_slave_0 removed [ 219.088861][ T5218] Bluetooth: hci1: command tx timeout [ 219.663004][T10044] chnl_net:caif_netlink_parms(): no params data found [ 219.742845][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 219.742864][ T29] audit: type=1326 audit(1723832096.847:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10135 comm="syz.2.2136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x0 [ 219.775645][T10140] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 219.811735][T10140] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 219.823376][T10140] overlayfs: conflicting lowerdir path [ 220.060886][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.078872][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.100646][T10044] bridge_slave_0: entered allmulticast mode [ 220.112124][T10044] bridge_slave_0: entered promiscuous mode [ 220.135664][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.166292][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.174066][T10044] bridge_slave_1: entered allmulticast mode [ 220.195061][T10044] bridge_slave_1: entered promiscuous mode [ 220.281093][T10044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.334020][T10044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.418378][ T29] audit: type=1326 audit(1723832097.517:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 220.461025][T10044] team0: Port device team_slave_0 added [ 220.489606][T10044] team0: Port device team_slave_1 added [ 220.498601][ T29] audit: type=1326 audit(1723832097.517:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 220.590001][ T29] audit: type=1326 audit(1723832097.547:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 220.623187][ T29] audit: type=1326 audit(1723832097.547:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 220.659817][ T29] audit: type=1326 audit(1723832097.547:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 220.728527][ T29] audit: type=1326 audit(1723832097.567:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 220.760804][T10044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.779024][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.819006][ T29] audit: type=1326 audit(1723832097.567:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 220.858293][T10044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.869875][ T29] audit: type=1326 audit(1723832097.567:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 220.939512][T10044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.946491][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.978319][ T29] audit: type=1326 audit(1723832097.577:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10163 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5431379e79 code=0x7ffc0000 [ 221.028570][T10044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.048400][T10175] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2152'. [ 221.168392][ T5218] Bluetooth: hci1: command tx timeout [ 221.186169][T10044] hsr_slave_0: entered promiscuous mode [ 221.201111][T10044] hsr_slave_1: entered promiscuous mode [ 221.207484][T10044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.215505][T10044] Cannot create hsr debugfs directory [ 222.153719][T10044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.180757][T10044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.229123][T10044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.260279][T10044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.285579][T10208] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2166'. [ 222.483025][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.561695][T10044] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.592104][ T3041] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.599608][ T3041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.645260][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.652510][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.815246][T10044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.999965][T10218] sg_write: data in/out 12335450/2 bytes for SCSI command 0x0-- guessing data in; [ 222.999965][T10218] program syz.3.2169 not setting count and/or reply_len properly [ 223.258816][ T5218] Bluetooth: hci1: command tx timeout [ 223.289513][T10044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.402229][T10044] veth0_vlan: entered promiscuous mode [ 223.447726][T10044] veth1_vlan: entered promiscuous mode [ 223.580559][T10044] veth0_macvtap: entered promiscuous mode [ 223.611617][T10044] veth1_macvtap: entered promiscuous mode [ 223.691926][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.728550][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.755107][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.771059][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.798370][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.819317][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.852781][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.890272][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.922024][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.969480][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.990040][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.009423][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.033268][T10044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.099084][T10235] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 224.136902][T10235] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 224.200713][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.242130][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.269489][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.303167][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.331646][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.361975][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.382769][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.406172][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.426382][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.440971][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.464332][T10044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.475817][T10044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.487734][T10044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.555590][T10044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.584853][T10044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.604273][T10044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.638412][T10044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.870417][ T3041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.903774][ T3041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.004978][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.028920][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.624961][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 225.624978][ T29] audit: type=1326 audit(1723832102.727:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10282 comm="syz.2.2194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a0f79e79 code=0x0 [ 226.649068][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 226.675042][T10334] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2212'. [ 227.098389][ T1185] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.318385][ T1185] usb 1-1: Using ep0 maxpacket: 8 [ 227.342654][ T1185] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.364652][ T1185] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 227.390578][T10351] bridge0: entered promiscuous mode [ 227.396906][ T1185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.409193][T10350] bridge0: left promiscuous mode [ 227.429300][ T1185] usb 1-1: config 0 descriptor?? [ 227.440914][ T1185] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 228.455400][ T1185] gspca_vc032x: reg_r err -71 [ 228.464119][ T1185] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 228.488147][ T1185] usb 1-1: USB disconnect, device number 17 [ 229.031467][T10389] hpfs: Bad magic ... probably not HPFS [ 229.174291][T10393] trusted_key: syz.0.2238 sent an empty control message without MSG_MORE. [ 229.367832][T10403] netlink: 'syz.2.2243': attribute type 11 has an invalid length. [ 229.428476][ T5299] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 229.558667][ T5266] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.621481][ T5299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.644083][ T5299] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 229.667778][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.699068][ T5299] usb 4-1: config 0 descriptor?? [ 229.751363][ T5266] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.768327][ T5266] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.790513][ T5266] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.818602][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.842771][ T5266] usb 2-1: SerialNumber: syz [ 229.931671][ T5299] usb 4-1: USB disconnect, device number 16 [ 230.083368][ T5266] usb 2-1: 0:2 : does not exist [ 230.103424][ T5266] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 230.125584][ T5266] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 230.143570][ T5266] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 230.163831][ T5266] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 230.203067][ T5266] usb 2-1: USB disconnect, device number 12 [ 232.029517][T10476] Bluetooth: MGMT ver 1.23 [ 232.064564][T10476] Bluetooth: hci3: unsupported parameter 64512 [ 232.098366][T10476] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 233.164941][T10515] binder: 10514:10515 unknown command 1969368878 [ 233.189522][T10515] binder: 10514:10515 ioctl c0306201 200001c0 returned -22 [ 233.322265][T10521] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2291'. [ 234.174266][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'. [ 234.216652][ T5299] kernel write not supported for file /input/event0 (pid: 5299 comm: kworker/1:4) [ 234.316077][T10567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.374458][T10569] lo: entered promiscuous mode [ 234.409645][T10568] lo: left promiscuous mode [ 234.815912][T10585] syzkaller1: entered promiscuous mode [ 234.845490][T10585] syzkaller1: entered allmulticast mode [ 236.037777][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 236.086791][T10626] syz_tun: entered promiscuous mode [ 236.127919][T10626] batadv_slave_0: entered promiscuous mode [ 236.874382][T10666] syzkaller1: entered promiscuous mode [ 236.888899][T10666] syzkaller1: entered allmulticast mode [ 237.088811][ T5299] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 237.192036][ T29] audit: type=1326 audit(1723832114.297:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3779e79 code=0x7ffc0000 [ 237.247990][ T29] audit: type=1326 audit(1723832114.297:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3779e79 code=0x7ffc0000 [ 237.279196][ T29] audit: type=1326 audit(1723832114.317:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fc7b3779e79 code=0x7ffc0000 [ 237.302885][ T29] audit: type=1326 audit(1723832114.317:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3779e79 code=0x7ffc0000 [ 237.326542][ T1170] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 237.348595][ T5299] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 237.355546][ T29] audit: type=1326 audit(1723832114.327:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10678 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b3779e79 code=0x7ffc0000 [ 237.357647][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.390765][ T5299] usb 1-1: config 0 descriptor?? [ 237.523412][ T1170] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 237.532762][ T1170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.552748][ T1170] usb 4-1: Product: syz [ 237.561006][ T1170] usb 4-1: Manufacturer: syz [ 237.575845][ T1170] usb 4-1: SerialNumber: syz [ 237.589804][ T1170] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 237.625189][ T5288] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 237.811356][ T5299] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 237.899131][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2371'. [ 237.915031][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2371'. [ 238.435276][ T5299] usb 1-1: USB disconnect, device number 18 [ 238.470220][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.509449][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.577369][T10707] syz.1.2372 (10707) used greatest stack depth: 17344 bytes left [ 238.691075][ T5288] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 238.706940][ T5288] ath9k_htc: Failed to initialize the device [ 238.770410][ T5288] usb 4-1: ath9k_htc: USB layer deinitialized [ 238.792239][ T1185] usb 4-1: USB disconnect, device number 17 [ 239.290811][T10747] netlink: 'syz.0.2390': attribute type 21 has an invalid length. [ 239.307522][T10747] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2390'. [ 239.329430][T10747] netlink: 'syz.0.2390': attribute type 5 has an invalid length. [ 239.337330][T10747] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2390'. [ 239.970257][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 239.987000][T10779] macsec2: entered allmulticast mode [ 239.994596][T10779] macvlan0: entered allmulticast mode [ 240.022205][T10783] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 240.045564][T10779] macvlan0: left allmulticast mode [ 240.725709][T10810] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 240.737639][T10810] macvlan2: entered allmulticast mode [ 240.747702][T10810] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 240.765924][T10810] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 240.774258][T10810] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 241.900209][ T5299] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 242.117258][ T5299] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 242.147832][ T5299] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.180814][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.217290][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.251163][ T5299] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.306204][ T5299] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.329356][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.362559][ T5299] usb 3-1: config 0 descriptor?? [ 242.368550][T10850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.522673][T10884] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2448'. [ 242.837060][ T5299] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 242.855354][ T5299] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 242.867863][ T5299] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 242.893881][ T5299] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 242.912561][ T5299] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 242.937201][ T5299] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 242.966745][ T5299] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 242.989034][ T5299] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 243.183051][T10913] syzkaller1: entered promiscuous mode [ 243.190724][T10913] syzkaller1: entered allmulticast mode [ 243.251790][ T1185] usb 3-1: USB disconnect, device number 13 [ 244.236404][T10958] syzkaller1: entered promiscuous mode [ 244.254207][T10958] syzkaller1: entered allmulticast mode [ 244.858321][ T5266] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 245.058639][ T5266] usb 4-1: Using ep0 maxpacket: 32 [ 245.067909][ T5266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.099533][ T5266] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72 [ 245.112101][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.128402][ T5266] usb 4-1: Product: syz [ 245.137610][ T5266] usb 4-1: Manufacturer: syz [ 245.155595][ T5266] usb 4-1: SerialNumber: syz [ 245.184747][ T5266] usb 4-1: config 0 descriptor?? [ 245.422834][ T5266] usb 4-1: unknown interface protocol 0xf, assuming v1 [ 245.520489][ T5266] usb 4-1: USB disconnect, device number 18 [ 247.190212][T11054] block device autoloading is deprecated and will be removed. [ 247.203597][ T5299] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 247.214018][T11054] syz.3.2526: attempt to access beyond end of device [ 247.214018][T11054] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 247.410082][ T5299] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 247.438532][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.471260][ T5299] usb 5-1: config 0 descriptor?? [ 247.797322][ T5299] kaweth 5-1:0.0: Firmware present in device. [ 247.962885][ T5299] kaweth 5-1:0.0: Statistics collection: 0 [ 247.973494][ T5299] kaweth 5-1:0.0: Multicast filter limit: 0 [ 247.989768][ T5299] kaweth 5-1:0.0: MTU: 0 [ 247.998276][ T5299] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 248.570970][ T5299] kaweth 5-1:0.0: Error setting receive filter [ 248.585478][ T5299] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 248.615532][ T5299] usb 5-1: USB disconnect, device number 13 [ 248.676321][T11100] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 248.716510][T11100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.457636][T11126] netlink: 'syz.2.2558': attribute type 11 has an invalid length. [ 249.828358][ T5288] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.024554][ T29] audit: type=1326 audit(1723832127.117:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11144 comm="syz.3.2566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b00179e79 code=0x0 [ 250.060244][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 250.075870][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.116545][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.128754][ T5288] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 250.138406][ T47] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 250.158465][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.197163][ T5288] usb 2-1: config 0 descriptor?? [ 250.340211][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.367093][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.390756][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.409030][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.433482][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.453682][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.493594][ T47] usb 5-1: config 0 descriptor?? [ 250.941154][ T47] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 250.966096][ T47] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 251.086779][ T47] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 251.244930][ T47] usb 5-1: USB disconnect, device number 14 [ 355.888247][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.895238][ C1] rcu: 0-...!: (1 GPs behind) idle=602c/1/0x4000000000000000 softirq=25259/25260 fqs=98 [ 355.906250][ C1] rcu: (detected by 1, t=10506 jiffies, g=37121, q=822 ncpus=2) [ 355.913985][ C1] Sending NMI from CPU 1 to CPUs 0: [ 355.919202][ C0] NMI backtrace for cpu 0 [ 355.919232][ C0] CPU: 0 UID: 0 PID: 5854 Comm: syz.4.253 Not tainted 6.11.0-rc3-syzkaller-00221-g670c12ce09a8 #0 [ 355.919252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 355.919265][ C0] RIP: 0010:kasan_check_range+0x4f/0x290 [ 355.919292][ C0] Code: 89 fd 48 c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 <4d> 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c [ 355.919309][ C0] RSP: 0018:ffffc900000078d8 EFLAGS: 00000086 [ 355.919324][ C0] RAX: 0000000000000001 RBX: 1ffffffff269e508 RCX: ffffffff8170410a [ 355.919336][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff934f2840 [ 355.919347][ C0] RBP: 000000000001ffff R08: ffffffff934f2847 R09: 1ffffffff269e509 [ 355.919359][ C0] R10: dffffc0000000000 R11: fffffbfff269e508 R12: ffff888021185a00 [ 355.919371][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888021186530 [ 355.919383][ C0] FS: 00007fbeae8d46c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 355.919398][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.919410][ C0] CR2: 00007fc1a1117a8c CR3: 000000007b1da000 CR4: 00000000003506f0 [ 355.919424][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.919435][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.919445][ C0] Call Trace: [ 355.919453][ C0] [ 355.919462][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 355.919484][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 355.919507][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 355.919534][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 355.919554][ C0] ? nmi_handle+0x14f/0x5a0 [ 355.919569][ C0] ? nmi_handle+0x2a/0x5a0 [ 355.919585][ C0] ? kasan_check_range+0x4f/0x290 [ 355.919604][ C0] ? default_do_nmi+0x63/0x160 [ 355.919624][ C0] ? exc_nmi+0x123/0x1f0 [ 355.919643][ C0] ? end_repeat_nmi+0xf/0x53 [ 355.919664][ C0] ? mark_lock+0x9a/0x350 [ 355.919687][ C0] ? kasan_check_range+0x4f/0x290 [ 355.919707][ C0] ? kasan_check_range+0x4f/0x290 [ 355.919727][ C0] ? kasan_check_range+0x4f/0x290 [ 355.919746][ C0] [ 355.919752][ C0] [ 355.919759][ C0] mark_lock+0x9a/0x350 [ 355.919783][ C0] __lock_acquire+0xbb7/0x2040 [ 355.919812][ C0] lock_acquire+0x1ed/0x550 [ 355.919831][ C0] ? debug_object_deactivate+0x158/0x390 [ 355.919854][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 355.919878][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 355.919899][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 355.919928][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 355.919949][ C0] ? debug_object_deactivate+0x158/0x390 [ 355.919966][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 355.919992][ C0] debug_object_deactivate+0x158/0x390 [ 355.920012][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 355.920031][ C0] ? timerqueue_add+0x260/0x290 [ 355.920049][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 355.920073][ C0] debug_deactivate+0x1b/0x220 [ 355.920091][ C0] __hrtimer_run_queues+0x305/0xd50 [ 355.920108][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 355.920137][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 355.920154][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 355.920178][ C0] hrtimer_interrupt+0x396/0x990 [ 355.920205][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 355.920230][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 355.920253][ C0] [ 355.920258][ C0] [ 355.920264][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.920283][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 355.920305][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ce 89 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 f3 e0 aa f5 65 8b 05 a4 b5 4b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 355.920319][ C0] RSP: 0018:ffffc90016ab7a60 EFLAGS: 00000206 [ 355.920332][ C0] RAX: c96a59b3261b8f00 RBX: 1ffff92002d56f50 RCX: ffffffff8170410a [ 355.920345][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: 0000000000000001 [ 355.920356][ C0] RBP: ffffc90016ab7af0 R08: ffffffff934f293f R09: 1ffffffff269e527 [ 355.920369][ C0] R10: dffffc0000000000 R11: fffffbfff269e528 R12: dffffc0000000000 [ 355.920381][ C0] R13: 1ffff92002d56f4c R14: ffffc90016ab7a80 R15: 0000000000000246 [ 355.920397][ C0] ? mark_lock+0x9a/0x350 [ 355.920422][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.920445][ C0] ? autoremove_wake_function+0x16/0x110 [ 355.920467][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 355.920492][ C0] __io_cqring_overflow_flush+0x504/0x690 [ 355.920516][ C0] ? __se_sys_io_uring_enter+0x1c2a/0x2670 [ 355.920540][ C0] ? __pfx___io_cqring_overflow_flush+0x10/0x10 [ 355.920564][ C0] ? prepare_to_wait_exclusive+0x81/0x220 [ 355.920587][ C0] __se_sys_io_uring_enter+0x1c36/0x2670 [ 355.920619][ C0] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 355.920639][ C0] ? __pfx_io_wake_function+0x10/0x10 [ 355.920667][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.920689][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.920711][ C0] ? do_syscall_64+0x100/0x230 [ 355.920728][ C0] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 355.920749][ C0] do_syscall_64+0xf3/0x230 [ 355.920765][ C0] ? clear_bhb_loop+0x35/0x90 [ 355.920784][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.920801][ C0] RIP: 0033:0x7fbeadb79e79 [ 355.920823][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.920836][ C0] RSP: 002b:00007fbeae8d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 355.920852][ C0] RAX: ffffffffffffffda RBX: 00007fbeadd15f80 RCX: 00007fbeadb79e79 [ 355.920864][ C0] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 355.920874][ C0] RBP: 00007fbeadbe7916 R08: 0000000000000000 R09: 0000000000000000 [ 355.920884][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 355.920898][ C0] R13: 0000000000000000 R14: 00007fbeadd15f80 R15: 00007ffe7b12efd8 [ 355.920920][ C0] [ 355.921192][ C1] rcu: rcu_preempt kthread starved for 10015 jiffies! g37121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 356.523725][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 356.533695][ C1] rcu: RCU grace-period kthread stack dump: [ 356.539579][ C1] task:rcu_preempt state:R running task stack:25168 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 356.551330][ C1] Call Trace: [ 356.554626][ C1] [ 356.557593][ C1] __schedule+0x17ae/0x4a10 [ 356.562136][ C1] ? __pfx___schedule+0x10/0x10 [ 356.567001][ C1] ? __pfx_lock_release+0x10/0x10 [ 356.572037][ C1] ? __asan_memset+0x23/0x50 [ 356.576658][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 356.582472][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.588811][ C1] ? schedule+0x90/0x320 [ 356.593155][ C1] schedule+0x14b/0x320 [ 356.597324][ C1] schedule_timeout+0x1be/0x310 [ 356.602182][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 356.607567][ C1] ? __pfx_process_timeout+0x10/0x10 [ 356.612875][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 356.618434][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 356.623291][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 356.628514][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 356.634594][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 356.639884][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 356.645789][ C1] ? finish_swait+0xd4/0x1e0 [ 356.650388][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 356.654993][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.660197][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 356.666103][ C1] ? __kthread_parkme+0x169/0x1d0 [ 356.671138][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.676345][ C1] kthread+0x2f0/0x390 [ 356.680428][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.685632][ C1] ? __pfx_kthread+0x10/0x10 [ 356.690235][ C1] ret_from_fork+0x4b/0x80 [ 356.694660][ C1] ? __pfx_kthread+0x10/0x10 [ 356.699260][ C1] ret_from_fork_asm+0x1a/0x30 [ 356.704046][ C1] [ 356.707065][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 356.713383][ C1] CPU: 1 UID: 0 PID: 5266 Comm: kworker/1:3 Not tainted 6.11.0-rc3-syzkaller-00221-g670c12ce09a8 #0 [ 356.724153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 356.734210][ C1] Workqueue: events jump_label_update_timeout [ 356.740288][ C1] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 356.747053][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 19 15 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 c4 10 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 a8 10 [ 356.767005][ C1] RSP: 0018:ffffc90004337740 EFLAGS: 00000293 [ 356.773076][ C1] RAX: ffffffff818779b8 RBX: 1ffff11017248c61 RCX: ffff88802a899e00 [ 356.781054][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 356.789025][ C1] RBP: ffffc90004337920 R08: ffffffff81877987 R09: 1ffffffff269e508 [ 356.796998][ C1] R10: dffffc0000000000 R11: fffffbfff269e509 R12: dffffc0000000000 [ 356.804970][ C1] R13: ffff8880b9246308 R14: ffff8880b933fb40 R15: 0000000000000000 [ 356.812941][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 356.821878][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.828460][ C1] CR2: 00007fc993012013 CR3: 000000000e534000 CR4: 00000000003506f0 [ 356.836453][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.844443][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.852425][ C1] Call Trace: [ 356.855711][ C1] [ 356.858558][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 356.864908][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 356.870563][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 356.876379][ C1] ? __pfx_lock_release+0x10/0x10 [ 356.881420][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 356.887672][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 356.893064][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 356.898714][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 356.903916][ C1] ? acct_account_cputime+0x207/0x210 [ 356.909299][ C1] ? update_process_times+0x1ce/0x230 [ 356.914681][ C1] ? tick_nohz_handler+0x37c/0x500 [ 356.919813][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 356.925280][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 356.930656][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 356.936660][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 356.942385][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 356.948466][ C1] ? hrtimer_interrupt+0x396/0x990 [ 356.953607][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 356.959802][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 356.965640][ C1] [ 356.968580][ C1] [ 356.971516][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.977692][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 356.983944][ C1] ? smp_call_function_many_cond+0x1878/0x29d0 [ 356.990113][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 356.996281][ C1] ? sctp_v6_get_dst+0x40a/0x1e20 [ 357.001323][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 357.006356][ C1] ? sctp_v6_get_dst+0x40a/0x1e20 [ 357.011406][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 357.017740][ C1] ? __pfx___might_resched+0x10/0x10 [ 357.023037][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 357.028594][ C1] ? __pfx___might_resched+0x10/0x10 [ 357.033890][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 357.038926][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 357.044048][ C1] text_poke_bp_batch+0x352/0xb30 [ 357.049091][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 357.054645][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 357.059683][ C1] ? text_poke_queue+0x12c/0x180 [ 357.064632][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 357.070884][ C1] ? __jump_label_update+0x379/0x3a0 [ 357.076187][ C1] text_poke_finish+0x30/0x50 [ 357.081305][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 357.087295][ C1] __static_key_slow_dec_cpuslocked+0x254/0x410 [ 357.093555][ C1] ? __pfx___static_key_slow_dec_cpuslocked+0x10/0x10 [ 357.100337][ C1] ? process_scheduled_works+0x945/0x1830 [ 357.106065][ C1] jump_label_update_timeout+0x1e/0x30 [ 357.111536][ C1] process_scheduled_works+0xa2c/0x1830 [ 357.117117][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.123114][ C1] ? assign_work+0x364/0x3d0 [ 357.127718][ C1] worker_thread+0x86d/0xd40 [ 357.132335][ C1] ? __kthread_parkme+0x169/0x1d0 [ 357.137374][ C1] ? __pfx_worker_thread+0x10/0x10 [ 357.142492][ C1] kthread+0x2f0/0x390 [ 357.146575][ C1] ? __pfx_worker_thread+0x10/0x10 [ 357.151695][ C1] ? __pfx_kthread+0x10/0x10 [ 357.156308][ C1] ret_from_fork+0x4b/0x80 [ 357.160733][ C1] ? __pfx_kthread+0x10/0x10 [ 357.165332][ C1] ret_from_fork_asm+0x1a/0x30 [ 357.170246][ C1]