last executing test programs: 8.255280476s ago: executing program 3 (id=1337): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000480)="fdefdf4c525a62c7cbc44424d0", 0xd}], 0x1, 0x0, 0x0, 0x40005}, 0x881) r1 = dup(r0) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) 8.112674122s ago: executing program 3 (id=1339): socket$packet(0x11, 0x2, 0x300) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x1c4e) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 7.979683299s ago: executing program 3 (id=1341): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.271901143s ago: executing program 1 (id=1345): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x5}}, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.206112264s ago: executing program 0 (id=1346): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=[{0x428, 0x1, 0x8, "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"}], 0x428}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.08270195s ago: executing program 1 (id=1347): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000901000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, 0x0, 0x20000084) 6.04057121s ago: executing program 3 (id=1348): r0 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001400)={0x2, @vbi={0xed07, 0x9, 0x200, 0x47425247, [0x4, 0x4], [0x8, 0x5], 0x108}}) 5.973972021s ago: executing program 0 (id=1349): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 5.795411953s ago: executing program 0 (id=1351): unshare(0x22020600) r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 5.532159845s ago: executing program 0 (id=1354): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008080) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.01517543s ago: executing program 1 (id=1356): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x204004, "fe79ca3351d66ed67f000039b24985c9c778008000000000000000004000", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000800)={""/32, 0x0, 0x0, 0x0, 0x41, 0x0}) 4.819095787s ago: executing program 1 (id=1357): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x5}}, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.630068784s ago: executing program 1 (id=1358): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.53171923s ago: executing program 3 (id=1360): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) openat$snapshot(0xffffffffffffff9c, 0x0, 0x8402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000030088ca76c5a603005310000d64c6301c5cc48c68955f58b7a2c93cb6e26bda92e35f6ee4c2fb6124ea37c60216d3eac7441a0e947258a224ed93cf8544ff572b3f5d5b4", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000002b000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef1"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) close(r3) 4.530089061s ago: executing program 0 (id=1362): landlock_create_ruleset(&(0x7f0000000040)={0x8020, 0x3, 0x6}, 0x18, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$igmp(0x2, 0x3, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 2.399550217s ago: executing program 0 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) 2.277723984s ago: executing program 4 (id=1369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 1.666966064s ago: executing program 1 (id=1370): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000400)=0x62fd, 0x4) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) socket$inet6(0x10, 0x3, 0x2) 1.602021753s ago: executing program 2 (id=1371): socket(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0x2020) 1.57787008s ago: executing program 4 (id=1372): r0 = syz_open_dev$loop(&(0x7f0000000540), 0x9, 0x281) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0x4c08, 0x0) 1.417444208s ago: executing program 2 (id=1373): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 1.340593365s ago: executing program 4 (id=1374): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=[{0x428, 0x1, 0x8, "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"}], 0x428}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.248065141s ago: executing program 3 (id=1375): pipe(0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="12aa85"], 0x0) 1.13199225s ago: executing program 2 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 1.092160477s ago: executing program 4 (id=1377): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4, 0x80000}) 1.002037485s ago: executing program 2 (id=1378): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) splice(r2, 0x0, r0, 0x0, 0x4, 0x0) 819.410543ms ago: executing program 2 (id=1379): syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e24, 0x10, 0x0, @gue={{0x1, 0x0, 0x2, 0x2e, 0x100, @void}, "e843a35c"}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x90) getpgrp(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 784.707103ms ago: executing program 4 (id=1380): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect$uac2(0x6, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd2(0x3, 0x800) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 403.296193ms ago: executing program 2 (id=1381): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 4 (id=1382): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) socket$packet(0x11, 0x3, 0x300) openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x5}}, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 3.802676][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.832667][ T5835] veth1_macvtap: entered promiscuous mode [ 93.844589][ T5834] veth1_vlan: entered promiscuous mode [ 93.878209][ T5831] veth0_vlan: entered promiscuous mode [ 93.886443][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.896501][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.917730][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.928092][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.971072][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.985662][ T5831] veth1_vlan: entered promiscuous mode [ 94.028927][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.107513][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.116989][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.147780][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.156751][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.198233][ T5834] veth0_macvtap: entered promiscuous mode [ 94.218478][ T5833] veth0_macvtap: entered promiscuous mode [ 94.230692][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.246978][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.248898][ T5834] veth1_macvtap: entered promiscuous mode [ 94.296604][ T5833] veth1_macvtap: entered promiscuous mode [ 94.337724][ T5831] veth0_macvtap: entered promiscuous mode [ 94.380812][ T5831] veth1_macvtap: entered promiscuous mode [ 94.398179][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.408335][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.420101][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.510068][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.524332][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.528934][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.548605][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.557251][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.619488][ T1339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.632889][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.694372][ T1339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.713358][ T1339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.744252][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.754063][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.754819][ T1339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.762994][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.776959][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.804536][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.814095][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.859594][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.874495][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.895888][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.947640][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.975185][ T803] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.981841][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.019660][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.042911][ T5840] Bluetooth: hci0: command tx timeout [ 95.047110][ T5959] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.124969][ T5840] Bluetooth: hci3: command tx timeout [ 95.125233][ T51] Bluetooth: hci2: command tx timeout [ 95.130465][ T5840] Bluetooth: hci4: command tx timeout [ 95.137637][ T5845] Bluetooth: hci1: command tx timeout [ 95.181906][ T803] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 95.204483][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.269448][ T803] usb 4-1: config 0 descriptor?? [ 95.277688][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.293154][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.318312][ T803] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 95.388565][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.403449][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.509620][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.536357][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.649722][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.713560][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.722955][ T803] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 95.750326][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.774132][ T803] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 95.780600][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.849860][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.881460][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.977551][ T5966] usb 4-1: USB disconnect, device number 2 [ 96.361856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.401632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.882403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.121860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.130749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.202219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.222556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.232566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.282479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.427701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.899205][ T5974] syz.1.2 (5974): drop_caches: 2 [ 98.452456][ T988] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.667809][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.718321][ T5978] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 98.738165][ T988] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.778949][ T988] usb 5-1: config 0 has no interfaces? [ 98.808612][ T988] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 98.864329][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.902073][ T988] usb 5-1: Product: syz [ 98.918956][ T988] usb 5-1: Manufacturer: syz [ 98.939261][ T988] usb 5-1: SerialNumber: syz [ 98.984209][ T988] usb 5-1: config 0 descriptor?? [ 99.822360][ T5899] usb 5-1: USB disconnect, device number 2 [ 100.066262][ T5991] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13'. [ 103.868286][ T6006] syz.0.19 (6006): drop_caches: 2 [ 104.446086][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.905342][ T6020] Zero length message leads to an empty skb [ 104.922146][ T6020] netlink: 104 bytes leftover after parsing attributes in process `syz.4.25'. [ 104.969818][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.403804][ T6034] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17'. [ 108.986241][ T6047] syz.2.32 (6047): drop_caches: 2 [ 109.734715][ T5980] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.844890][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 109.937812][ T5980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.980635][ T5980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.041038][ T5980] usb 4-1: config 0 has no interfaces? [ 110.063900][ T5980] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 110.068509][ T6062] netlink: 104 bytes leftover after parsing attributes in process `syz.4.38'. [ 110.101514][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.132425][ T5980] usb 4-1: Product: syz [ 110.146133][ T5980] usb 4-1: Manufacturer: syz [ 110.171623][ T5980] usb 4-1: SerialNumber: syz [ 110.204600][ T5980] usb 4-1: config 0 descriptor?? [ 111.577021][ T5927] usb 4-1: USB disconnect, device number 3 [ 112.552204][ T6086] trusted_key: syz.4.43 sent an empty control message without MSG_MORE. [ 113.040020][ T6101] netlink: 104 bytes leftover after parsing attributes in process `syz.0.51'. [ 113.992478][ T6110] loop0: detected capacity change from 0 to 131072 [ 114.016968][ T6110] F2FS-fs (loop0): invalid crc value [ 115.094007][ T6110] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 115.447383][ T6110] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 117.444102][ T5980] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.448349][ T6151] ntfs3(nullb0): Primary boot signature is not NTFS. [ 117.466637][ T6151] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 118.041323][ T5980] usb 4-1: Using ep0 maxpacket: 8 [ 118.102998][ T5980] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.147789][ T5980] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 118.210074][ T5980] usb 4-1: config 179 has no interface number 0 [ 118.230725][ T5980] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 119.101785][ T5980] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 119.113725][ T5980] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 119.128752][ T5980] usb 4-1: config 179 interface 65 has no altsetting 0 [ 119.138434][ T5980] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 119.166191][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.786618][ T6160] loop4: detected capacity change from 0 to 131072 [ 119.810494][ T6160] F2FS-fs (loop4): invalid crc value [ 119.885535][ T6160] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 119.899310][ T6160] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 122.290555][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 122.320387][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 124.142463][ T5980] usb 4-1: can't set config #179, error -71 [ 124.195686][ T5980] usb 4-1: USB disconnect, device number 4 [ 124.307905][ T6201] syz.1.82 uses obsolete (PF_INET,SOCK_PACKET) [ 127.868560][ T30] audit: type=1326 audit(1773571687.955:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 127.907435][ T6226] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 127.944992][ T30] audit: type=1326 audit(1773571687.955:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 127.969937][ T6226] macvlan2: entered promiscuous mode [ 128.040284][ T30] audit: type=1326 audit(1773571687.985:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 128.123479][ T30] audit: type=1326 audit(1773571687.995:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f423c95cfce code=0x7ffc0000 [ 128.204978][ T30] audit: type=1326 audit(1773571687.995:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 128.241724][ T30] audit: type=1326 audit(1773571687.995:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 128.279415][ T30] audit: type=1326 audit(1773571687.995:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 128.339642][ T30] audit: type=1326 audit(1773571687.995:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 128.410573][ T30] audit: type=1326 audit(1773571687.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 128.482625][ T30] audit: type=1326 audit(1773571687.995:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x7ffc0000 [ 131.775907][ T803] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.952081][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 131.982073][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 132.028677][ T803] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.055756][ T803] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.080788][ T803] usb 5-1: Product: syz [ 132.101718][ T803] usb 5-1: Manufacturer: syz [ 132.116530][ T803] usb 5-1: SerialNumber: syz [ 132.166988][ T803] usb 5-1: config 0 descriptor?? [ 132.270051][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 132.323456][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 132.535452][ T803] usb 5-1: USB disconnect, device number 3 [ 133.160991][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.173041][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.716806][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 134.731462][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 134.994104][ T6297] syz.3.118 (6297): drop_caches: 2 [ 136.513809][ T6306] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 139.673366][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.843275][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 139.875753][ T24] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 140.536557][ T6341] loop1: detected capacity change from 0 to 131072 [ 140.546671][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.555897][ T24] usb 1-1: Product: syz [ 140.561544][ T24] usb 1-1: Manufacturer: syz [ 140.566767][ T24] usb 1-1: SerialNumber: syz [ 140.578936][ T24] usb 1-1: config 0 descriptor?? [ 140.588172][ T24] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 140.613613][ T6341] F2FS-fs (loop1): invalid crc value [ 140.624400][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 140.717749][ T6341] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 140.730294][ T6341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 141.929071][ T24] usb 1-1: USB disconnect, device number 2 [ 143.603684][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 145.601593][ T6384] loop2: detected capacity change from 0 to 131072 [ 145.668896][ T6384] F2FS-fs (loop2): invalid crc value [ 145.683921][ T6387] capability: warning: `syz.3.142' uses deprecated v2 capabilities in a way that may be insecure [ 145.749502][ T6384] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 145.765153][ T6384] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 148.668150][ T1014] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.686133][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 150.554225][ T6430] loop0: detected capacity change from 0 to 131072 [ 150.583621][ T6430] F2FS-fs (loop0): invalid crc value [ 150.660029][ T6430] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 150.675491][ T6430] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 150.722486][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.724486][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 151.525002][ T6441] netlink: 80 bytes leftover after parsing attributes in process `syz.1.157'. [ 152.087143][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'. [ 152.987607][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.104903][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 154.759625][ T6477] loop1: detected capacity change from 0 to 131072 [ 155.334489][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 155.621820][ T6477] F2FS-fs (loop1): invalid crc value [ 155.732660][ T6477] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.747963][ T6477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 156.063528][ T5966] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 156.272464][ T5966] usb 3-1: Using ep0 maxpacket: 8 [ 156.955978][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.956372][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.194430][ T5966] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.223548][ T5966] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 157.250577][ T5966] usb 3-1: can't read configurations, error -71 [ 157.420872][ T3563] Bluetooth: hci5: Frame reassembly failed (-84) [ 157.530630][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 158.339723][ T6536] loop1: detected capacity change from 0 to 131072 [ 158.379820][ T6536] F2FS-fs (loop1): invalid crc value [ 158.447603][ T6541] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.449701][ T6536] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 158.492460][ T6536] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 159.195235][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 159.474549][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.482214][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 159.772113][ T24] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 159.807862][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.833335][ T24] usb 3-1: Product: syz [ 159.842291][ T24] usb 3-1: Manufacturer: syz [ 159.852699][ T24] usb 3-1: SerialNumber: syz [ 160.276744][ T24] usb 3-1: unit 8 not found! [ 160.303922][ T24] usb 3-1: unit 6 not found! [ 160.953537][ T24] usb 3-1: unit 0 not found! [ 161.200632][ T24] usb 3-1: USB disconnect, device number 4 [ 161.332255][ T5966] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.514497][ T5966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.561291][ T5966] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.609915][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.686540][ T5966] usb 1-1: config 0 descriptor?? [ 161.721267][ T5966] pwc: Askey VC010 type 2 USB webcam detected. [ 162.141318][ T5966] pwc: recv_control_msg error -32 req 02 val 2b00 [ 162.176564][ T5966] pwc: recv_control_msg error -32 req 02 val 2700 [ 162.218946][ T5966] pwc: recv_control_msg error -32 req 02 val 2c00 [ 162.244740][ T135] Bluetooth: hci5: Frame reassembly failed (-84) [ 162.262511][ T5966] pwc: recv_control_msg error -32 req 04 val 1000 [ 162.301755][ T5966] pwc: recv_control_msg error -32 req 04 val 1300 [ 162.330843][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 162.361973][ T5966] pwc: recv_control_msg error -32 req 04 val 1400 [ 162.393433][ T5966] pwc: recv_control_msg error -32 req 02 val 2000 [ 162.449336][ T5966] pwc: recv_control_msg error -32 req 02 val 2100 [ 162.566090][ T5966] pwc: recv_control_msg error -32 req 04 val 1500 [ 162.588165][ T5966] pwc: recv_control_msg error -32 req 02 val 2500 [ 162.638097][ T6575] loop4: detected capacity change from 0 to 131072 [ 162.650714][ T6575] F2FS-fs (loop4): invalid crc value [ 162.710642][ T6575] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 162.728958][ T6575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 162.751107][ T5966] pwc: recv_control_msg error -32 req 02 val 2400 [ 163.487067][ T5966] pwc: recv_control_msg error -71 req 02 val 2900 [ 163.524296][ T5966] pwc: recv_control_msg error -71 req 02 val 2800 [ 163.544653][ T5966] pwc: recv_control_msg error -71 req 04 val 1100 [ 163.579778][ T5966] pwc: recv_control_msg error -71 req 04 val 1200 [ 163.623681][ T5966] pwc: Registered as video103. [ 163.654540][ T5966] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 163.751322][ T5966] usb 1-1: USB disconnect, device number 3 [ 163.809989][ T6612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.956499][ T6617] : renamed from vlan0 (while UP) [ 164.457662][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 165.434658][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 165.549779][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 165.923020][ T135] Bluetooth: hci5: Frame reassembly failed (-84) [ 166.062361][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 166.717591][ T6668] random: crng reseeded on system resumption [ 167.091804][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.271743][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 167.290264][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.307514][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.318910][ T9] usb 2-1: Product: syz [ 167.331574][ T9] usb 2-1: Manufacturer: syz [ 167.336599][ T9] usb 2-1: SerialNumber: syz [ 167.355705][ T9] usb 2-1: config 0 descriptor?? [ 167.381262][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002 [ 167.483554][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.505279][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 167.533017][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.560348][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.624959][ T5899] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 167.657859][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.672257][ T5899] usb 1-1: Product: syz [ 167.680715][ T5899] usb 1-1: Manufacturer: syz [ 167.692947][ T5899] usb 1-1: SerialNumber: syz [ 167.923725][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 167.931600][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 168.376045][ T6698] bridge0: port 3(batadv1) entered blocking state [ 168.395366][ T6698] bridge0: port 3(batadv1) entered disabled state [ 168.411614][ T6698] batadv1: entered allmulticast mode [ 168.437695][ T6698] batadv1: entered promiscuous mode [ 168.471868][ T6701] syz_tun: entered allmulticast mode [ 168.537446][ T9] (null): failure reading functionality [ 168.563077][ T5899] usb 1-1: config 0 descriptor?? [ 168.570982][ T9] i2c i2c-1: failure reading functionality [ 168.581514][ T5899] adutux 1-1:0.0: interrupt endpoints not found [ 168.626675][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 168.649706][ T9] usb 2-1: USB disconnect, device number 2 [ 168.831451][ T6050] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 168.841453][ T6050] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 168.891566][ T988] usb 1-1: USB disconnect, device number 4 [ 169.131623][ T6712] 9pnet_virtio: no channels available for device 127.0.0.1 [ 171.129911][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 172.718346][ T6743] syz.1.262 (6743): drop_caches: 2 [ 173.343714][ T5980] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.076523][ T6753] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 174.161975][ T5980] usb 4-1: Using ep0 maxpacket: 8 [ 174.316655][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.370132][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.511851][ T5980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.558815][ T5980] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 174.580978][ T5980] usb 4-1: can't read configurations, error -71 [ 176.188251][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 177.243585][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.443841][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 177.529166][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 177.553488][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.577304][ T9] usb 2-1: Product: syz [ 177.622848][ T9] usb 2-1: Manufacturer: syz [ 177.643062][ T9] usb 2-1: SerialNumber: syz [ 177.685085][ T9] usb 2-1: config 0 descriptor?? [ 178.533558][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.704681][ T9] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 178.711318][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 178.726316][ T9] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 178.746749][ T9] usb 2-1: USB disconnect, device number 3 [ 178.922528][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.013492][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.109807][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 179.222037][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.268892][ T29] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 179.306218][ T29] usb 4-1: can't read configurations, error -71 [ 180.864884][ T5954] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.415877][ T6850] 9pnet_virtio: no channels available for device 127.0.0.1 [ 182.751971][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 182.857489][ T5954] usb 1-1: device descriptor read/all, error -71 [ 183.257594][ T6858] ALSA: mixer_oss: invalid OSS volume '' [ 184.484492][ T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 184.675563][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 184.714346][ T29] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 184.744033][ T29] usb 2-1: config 0 has no interface number 0 [ 184.776714][ T29] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.839925][ T29] usb 2-1: config 0 interface 85 has no altsetting 0 [ 184.889557][ T29] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 184.936700][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.987396][ T29] usb 2-1: Product: syz [ 185.015755][ T29] usb 2-1: Manufacturer: syz [ 185.052621][ T29] usb 2-1: SerialNumber: syz [ 185.101622][ T29] usb 2-1: config 0 descriptor?? [ 185.222173][ T5980] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.503392][ T5980] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 185.528805][ T5980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 186.338480][ T5980] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 186.391349][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.446343][ T5980] usb 5-1: Product: syz [ 186.464581][ T5980] usb 5-1: Manufacturer: syz [ 186.476401][ T29] appletouch 2-1:0.85: Geyser mode initialized. [ 186.493947][ T5980] usb 5-1: SerialNumber: syz [ 186.501889][ T6900] mmap: syz.2.320 (6900) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.366734][ T29] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input8 [ 187.379955][ T5980] usb 5-1: config 0 descriptor?? [ 187.389790][ T5980] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 187.434017][ T29] usb 2-1: USB disconnect, device number 4 [ 187.434162][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 187.617010][ T29] appletouch 2-1:0.85: input: appletouch disconnected [ 187.842047][ T5966] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.032779][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 188.086961][ T9] usb 5-1: USB disconnect, device number 4 [ 188.273856][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.274476][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.387112][ T5966] usb 1-1: unable to get BOS descriptor or descriptor too short [ 188.424169][ T5966] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 188.454995][ T5966] usb 1-1: can't read configurations, error -71 [ 188.796860][ T6940] libceph: resolve '0..' (ret=-3): failed [ 188.848267][ T6954] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 188.855279][ T6954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.868197][ T6954] vhci_hcd vhci_hcd.0: Device attached [ 188.896935][ T6954] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 188.904027][ T6954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.937392][ T6954] vhci_hcd vhci_hcd.0: Device attached [ 188.957666][ T6961] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 188.964357][ T6961] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.035123][ T6961] vhci_hcd vhci_hcd.0: Device attached [ 189.043090][ T6954] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(7) [ 189.049730][ T6954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.062167][ T5954] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.085141][ T6954] vhci_hcd vhci_hcd.0: Device attached [ 189.096631][ T6968] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(10) [ 189.103435][ T6968] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.111415][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 189.123141][ T6968] vhci_hcd vhci_hcd.0: Device attached [ 189.231451][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 189.286133][ T6961] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.296976][ T6954] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(12) [ 189.303886][ T6954] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.312484][ T5954] usb 5-1: config index 0 descriptor too short (expected 255, got 27) [ 189.351708][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.354123][ T6968] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.695296][ T5954] usb 5-1: config 0 has no interfaces? [ 189.706397][ T5954] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.719633][ T6954] vhci_hcd vhci_hcd.0: Device attached [ 189.729760][ T6961] vhci_hcd vhci_hcd.0: port 0 already used [ 189.742852][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.773733][ T6972] vhci_hcd: connection closed [ 189.775100][ T6965] vhci_hcd: connection closed [ 189.775701][ T6969] vhci_hcd: connection closed [ 189.780869][ T6962] vhci_hcd: connection closed [ 189.793593][ T13] vhci_hcd vhci_hcd.3: stop threads [ 189.819459][ T5954] usb 5-1: Product: syz [ 189.819472][ T6958] vhci_hcd: connection closed [ 189.824020][ T6955] vhci_hcd: connection reset by peer [ 189.824892][ T13] vhci_hcd vhci_hcd.3: release socket [ 189.871024][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 189.873071][ T5954] usb 5-1: Manufacturer: syz [ 189.903640][ T5954] usb 5-1: SerialNumber: syz [ 189.905468][ T13] vhci_hcd vhci_hcd.3: stop threads [ 189.945975][ T5954] usb 5-1: config 0 descriptor?? [ 189.957992][ T13] vhci_hcd vhci_hcd.3: release socket [ 189.992238][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 190.021321][ T13] vhci_hcd vhci_hcd.3: stop threads [ 190.048762][ T13] vhci_hcd vhci_hcd.3: release socket [ 190.067313][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 190.085211][ T13] vhci_hcd vhci_hcd.3: stop threads [ 190.101081][ T13] vhci_hcd vhci_hcd.3: release socket [ 190.117391][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 190.138109][ T13] vhci_hcd vhci_hcd.3: stop threads [ 190.163400][ T13] vhci_hcd vhci_hcd.3: release socket [ 190.181533][ T5954] usb 5-1: USB disconnect, device number 5 [ 190.195979][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 190.224325][ T13] vhci_hcd vhci_hcd.3: stop threads [ 190.237559][ T13] vhci_hcd vhci_hcd.3: release socket [ 190.261528][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 190.851395][ T5954] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 191.871262][ T5954] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 191.892461][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 191.914292][ T5954] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 191.924321][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.933924][ T5954] usb 1-1: Product: syz [ 191.938148][ T5954] usb 1-1: Manufacturer: syz [ 191.945113][ T5954] usb 1-1: SerialNumber: syz [ 191.954051][ T5954] usb 1-1: config 0 descriptor?? [ 191.968356][ T5954] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 192.463363][ T5954] gspca_sunplus: reg_r err -71 [ 192.476427][ T5954] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 192.511690][ T5954] usb 1-1: USB disconnect, device number 9 [ 194.243379][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 194.335135][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 194.574678][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.581505][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.135641][ T5899] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.248248][ T5899] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 197.257587][ T5899] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 197.364988][ T5899] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 197.376923][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.387647][ T5899] usb 2-1: Product: syz [ 197.398143][ T5899] usb 2-1: Manufacturer: syz [ 197.425437][ T5899] usb 2-1: SerialNumber: syz [ 197.442650][ T5899] usb 2-1: config 0 descriptor?? [ 197.475863][ T5899] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 197.889388][ T5899] gspca_sunplus: reg_r err -71 [ 197.913317][ T5899] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 197.974419][ T5899] usb 2-1: USB disconnect, device number 5 [ 198.218908][ T7104] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002 [ 198.670347][ T7124] bridge0: entered promiscuous mode [ 198.678922][ T7124] bridge0: port 3(macvtap1) entered blocking state [ 198.686188][ T7124] bridge0: port 3(macvtap1) entered disabled state [ 198.693326][ T7124] macvtap1: entered allmulticast mode [ 198.698736][ T7124] bridge0: entered allmulticast mode [ 198.708183][ T7124] macvtap1: left allmulticast mode [ 198.713478][ T7124] bridge0: left allmulticast mode [ 199.521732][ T7124] bridge0: left promiscuous mode [ 201.244110][ T7159] netlink: 208 bytes leftover after parsing attributes in process `syz.4.418'. [ 201.905692][ T7160] ceph: No mds server is up or the cluster is laggy [ 201.925047][ T7159] netlink: 208 bytes leftover after parsing attributes in process `syz.4.418'. [ 201.941365][ T5980] libceph: connect (1)[c::]:6789 error -101 [ 201.956678][ T5980] libceph: mon0 (1)[c::]:6789 connect error [ 203.754023][ T7206] ceph: No mds server is up or the cluster is laggy [ 203.766721][ T5980] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.788221][ T29] libceph: connect (1)[c::]:6789 error -101 [ 203.821771][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 204.032976][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 204.044294][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.071558][ T5980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.102813][ T5980] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 204.140884][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 204.165770][ T5980] usb 1-1: Product: syz [ 204.175829][ T5980] usb 1-1: Manufacturer: syz [ 204.185007][ T5980] usb 1-1: SerialNumber: syz [ 204.206021][ T5980] usb 1-1: config 0 descriptor?? [ 204.373810][ T7225] ======================================================= [ 204.373810][ T7225] WARNING: The mand mount option has been deprecated and [ 204.373810][ T7225] and is ignored by this kernel. Remove the mand [ 204.373810][ T7225] option from the mount to silence this warning. [ 204.373810][ T7225] ======================================================= [ 204.466270][ T9] usb 1-1: USB disconnect, device number 10 [ 204.647960][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 204.647980][ T30] audit: type=1326 audit(1773571764.735:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.3.447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97fa39c799 code=0x0 [ 204.680976][ T6851] Bluetooth: hci5: Frame reassembly failed (-84) [ 204.773015][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 204.939071][ T7250] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 204.946165][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.956820][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 204.967504][ T7250] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 204.974230][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.983819][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 204.994588][ T7250] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 205.001232][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 205.009588][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 205.026163][ T7250] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 205.033279][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.042881][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 205.061569][ T7250] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 205.068674][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.077045][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 205.094051][ T7250] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 205.100717][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 205.110355][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 205.119289][ T7250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.138562][ T7250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.170315][ T7250] vhci_hcd vhci_hcd.0: port 0 already used [ 205.182694][ T7259] vhci_hcd: connection closed [ 205.182794][ T7257] vhci_hcd: connection closed [ 205.183042][ T12] vhci_hcd vhci_hcd.4: stop threads [ 205.188330][ T7262] vhci_hcd: connection closed [ 205.193367][ T7255] vhci_hcd: connection closed [ 205.198812][ T7253] vhci_hcd: connection closed [ 205.209610][ T7251] vhci_hcd: connection closed [ 205.212538][ T12] vhci_hcd vhci_hcd.4: release socket [ 205.214713][ T9] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 205.222225][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 205.227774][ T7252] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 205.256094][ T12] vhci_hcd vhci_hcd.4: stop threads [ 205.264382][ T12] vhci_hcd vhci_hcd.4: release socket [ 205.273270][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 205.293354][ T12] vhci_hcd vhci_hcd.4: stop threads [ 205.312321][ T12] vhci_hcd vhci_hcd.4: release socket [ 205.326261][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 205.337836][ T12] vhci_hcd vhci_hcd.4: stop threads [ 205.343977][ T12] vhci_hcd vhci_hcd.4: release socket [ 205.352217][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 205.360706][ T12] vhci_hcd vhci_hcd.4: stop threads [ 205.371906][ T12] vhci_hcd vhci_hcd.4: release socket [ 205.378639][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 205.395494][ T12] vhci_hcd vhci_hcd.4: stop threads [ 205.403115][ T12] vhci_hcd vhci_hcd.4: release socket [ 205.408823][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 206.984250][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 206.995324][ T5845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 207.621930][ T29] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.811472][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 207.891670][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.965898][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.977462][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.090432][ T29] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 208.178871][ T29] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 208.289344][ T29] usb 2-1: Product: syz [ 208.343297][ T29] usb 2-1: Manufacturer: syz [ 208.400087][ T29] usb 2-1: SerialNumber: syz [ 208.630428][ T29] usb 2-1: config 0 descriptor?? [ 209.385463][ T7303] syz.0.468 (7303): drop_caches: 2 [ 209.421456][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 209.765816][ T29] usb 2-1: USB disconnect, device number 6 [ 210.401317][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 210.719766][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.745810][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.950484][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.975399][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 211.001389][ T10] usb 5-1: can't read configurations, error -71 [ 211.291560][ T988] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 211.492143][ T988] usb 2-1: Using ep0 maxpacket: 32 [ 211.509387][ T988] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.523732][ T988] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.539118][ T988] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 211.549160][ T988] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 211.559614][ T988] usb 2-1: Product: syz [ 211.576497][ T988] usb 2-1: Manufacturer: syz [ 211.608723][ T988] hub 2-1:4.0: USB hub found [ 211.662881][ T7325] netlink: 'syz.3.476': attribute type 24 has an invalid length. [ 211.844797][ T988] hub 2-1:4.0: 5 ports detected [ 211.866166][ T988] hub 2-1:4.0: insufficient power available to use all downstream ports [ 212.051653][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 212.059272][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 212.065507][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 212.071866][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 212.097382][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 212.865797][ T10] libceph: connect (1)[c::]:6789 error -101 [ 212.900114][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 213.277674][ T7344] ceph: No mds server is up or the cluster is laggy [ 213.294895][ T9] libceph: connect (1)[c::]:6789 error -101 [ 213.334026][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 213.557913][ T988] usb 2-1: USB disconnect, device number 7 [ 213.561258][ T5980] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 213.741262][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 213.766973][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.790542][ T5980] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.820774][ T5980] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 213.833183][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 213.847791][ T5980] usb 1-1: Product: syz [ 213.852690][ T5980] usb 1-1: Manufacturer: syz [ 213.858406][ T5980] usb 1-1: SerialNumber: syz [ 213.868872][ T5980] usb 1-1: config 0 descriptor?? [ 214.063437][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 214.181705][ T7365] syz.4.490 (7365): drop_caches: 2 [ 214.701709][ T5980] usb 1-1: USB disconnect, device number 11 [ 214.792525][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 214.969711][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.003099][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.301728][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 215.332190][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 215.397862][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.459392][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 215.510020][ T9] usb 4-1: can't read configurations, error -71 [ 215.634545][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 215.659627][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 215.854035][ T7379] ceph: No mds server is up or the cluster is laggy [ 217.503121][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.751440][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 217.791393][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.832394][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.987006][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 218.089097][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 218.121994][ T9] usb 5-1: Product: syz [ 218.136751][ T9] usb 5-1: Manufacturer: syz [ 218.154428][ T9] usb 5-1: SerialNumber: syz [ 218.215904][ T9] usb 5-1: config 0 descriptor?? [ 218.527226][ T9] usb 5-1: USB disconnect, device number 8 [ 219.142328][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 219.167156][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 220.072515][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 220.092142][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 220.196184][ T7434] syz.4.520 (7434): drop_caches: 2 [ 220.214688][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.280173][ T9] usb 2-1: config 9 has an invalid interface number: 103 but max is 0 [ 220.340771][ T9] usb 2-1: config 9 has no interface number 0 [ 220.355179][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea7b, bcdDevice=70.39 [ 220.355244][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.355267][ T9] usb 2-1: Product: syz [ 220.355282][ T9] usb 2-1: Manufacturer: syz [ 220.355297][ T9] usb 2-1: SerialNumber: syz [ 220.392238][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.392721][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.648956][ T9] cp210x 2-1:9.103: cp210x converter detected [ 220.655891][ T9] cp210x 2-1:9.103: failed to get vendor val 0x370b size 1: -71 [ 220.655924][ T9] cp210x 2-1:9.103: querying part number failed [ 220.774680][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.808249][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 220.825606][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 220.862046][ T10] usb 4-1: can't read configurations, error -71 [ 220.882964][ T9] usb 2-1: USB disconnect, device number 8 [ 220.990874][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 221.029267][ T9] cp210x 2-1:9.103: device disconnected [ 221.720643][ T5843] Bluetooth: Frame is too long (len 16, expected len 4) [ 221.912263][ T1339] Bluetooth: hci5: Frame reassembly failed (-84) [ 221.988601][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 223.014704][ T7464] syz.0.533 (7464): drop_caches: 2 [ 223.563309][ T7478] netlink: 'syz.3.536': attribute type 2 has an invalid length. [ 223.923961][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 223.941698][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 224.692214][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 224.903257][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 225.772673][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.809118][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.919476][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.957006][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 226.025885][ T9] usb 2-1: can't read configurations, error -71 [ 226.620411][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 227.503053][ T7537] overlayfs: failed to clone upperpath [ 227.601882][ T7542] netlink: 'syz.0.542': attribute type 25 has an invalid length. [ 228.007195][ T152] Bluetooth: hci5: Frame reassembly failed (-84) [ 228.767238][ T1014] Bluetooth: hci5: Frame reassembly failed (-84) [ 228.810767][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 228.881859][ T988] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.996122][ T7563] warning: `syz.2.565' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 229.014167][ T7545] syz.3.554 (7545): drop_caches: 2 [ 229.111256][ T988] usb 2-1: Using ep0 maxpacket: 8 [ 229.311355][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.314690][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.469623][ T988] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.506257][ T988] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 229.535302][ T988] usb 2-1: can't read configurations, error -71 [ 230.011712][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 230.021878][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 230.748367][ T7586] netlink: 'syz.0.574': attribute type 25 has an invalid length. [ 231.253756][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 231.279775][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 231.383979][ T135] Bluetooth: hci5: Frame reassembly failed (-84) [ 231.505749][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 231.552099][ T5966] libceph: connect (1)[c::]:6789 error -101 [ 231.570186][ T5966] libceph: mon0 (1)[c::]:6789 connect error [ 231.721253][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 231.872518][ T7596] ceph: No mds server is up or the cluster is laggy [ 231.967681][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 232.155505][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.179803][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.285187][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.310104][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 232.332150][ T9] usb 2-1: can't read configurations, error -71 [ 232.381252][ T5980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 232.551884][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 232.577283][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.633210][ T5980] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 232.668029][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 232.704658][ T5980] usb 5-1: Product: syz [ 232.718035][ T5980] usb 5-1: Manufacturer: syz [ 232.739335][ T5980] usb 5-1: SerialNumber: syz [ 232.770161][ T5980] usb 5-1: config 0 descriptor?? [ 232.899277][ T7618] syz.0.582 (7618): drop_caches: 2 [ 233.038981][ T5966] usb 5-1: USB disconnect, device number 9 [ 233.441508][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 233.441718][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 233.595343][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 234.235747][ T988] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 234.443605][ T988] usb 5-1: Using ep0 maxpacket: 8 [ 234.638331][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.686566][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.892322][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.938345][ T7659] loop2: detected capacity change from 0 to 7 [ 234.951752][ T988] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 234.982838][ T988] usb 5-1: can't read configurations, error -71 [ 235.006872][ T7659] Dev loop2: unable to read RDB block 7 [ 235.041588][ T7659] loop2: unable to read partition table [ 235.065236][ T7659] loop2: partition table beyond EOD, truncated [ 235.099422][ T7659] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 235.488075][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 235.619892][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 235.813430][ T7672] netlink: 'syz.4.604': attribute type 25 has an invalid length. [ 235.926528][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 236.291510][ T7683] loop5: detected capacity change from 0 to 7 [ 236.328006][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.337834][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.358402][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.368213][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.379879][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.389573][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.399203][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.408854][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.417386][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.427179][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.437230][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.446923][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.456120][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.466179][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.474335][ T7683] ldm_validate_partition_table(): Disk read failed. [ 236.483267][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.492922][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.501201][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.510908][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.519178][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.528929][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 236.542634][ T7683] Dev loop5: unable to read RDB block 0 [ 236.585674][ T7683] loop5: unable to read partition table [ 236.631881][ T7683] loop5: partition table beyond EOD, truncated [ 236.669584][ T7683] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 237.521690][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 237.521704][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 237.595611][ T5966] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 237.822867][ T5966] usb 4-1: Using ep0 maxpacket: 8 [ 238.051804][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.134348][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.323123][ T5966] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.389106][ T5966] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 238.462756][ T5966] usb 4-1: can't read configurations, error -71 [ 238.528489][ T7718] capability: warning: `syz.1.621' uses 32-bit capabilities (legacy support in use) [ 239.538764][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 239.755926][ T29] libceph: connect (1)[c::]:6789 error -101 [ 239.782192][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 240.112123][ T29] libceph: connect (1)[c::]:6789 error -101 [ 240.209785][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 240.224696][ T7737] ceph: No mds server is up or the cluster is laggy [ 240.668189][ T7748] netlink: 'syz.4.628': attribute type 25 has an invalid length. [ 241.211358][ T5839] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 241.451474][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 241.507158][ T5839] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 112, changing to 7 [ 241.522018][ T7724] syz.0.617 (7724): drop_caches: 2 [ 241.610317][ T5839] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 241.687560][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.732858][ T5839] usb 2-1: Product: syz [ 241.774894][ T5839] usb 2-1: Manufacturer: syz [ 241.807126][ T5839] usb 2-1: SerialNumber: syz [ 241.965410][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 241.971293][ T5980] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 242.049461][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 242.131718][ T5839] usb 2-1: selecting invalid altsetting 1 [ 242.165337][ T5839] usb 2-1: unit 1 not found! [ 242.191551][ T5980] usb 4-1: Using ep0 maxpacket: 8 [ 242.354839][ T5839] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 242.430861][ T5839] usb 2-1: selecting invalid altsetting 1 [ 242.452794][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.469792][ T5839] usb 2-1: unit 1 not found! [ 242.654544][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 242.671810][ T5839] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 242.699624][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.752248][ T5839] usb 2-1: selecting invalid altsetting 1 [ 242.788665][ T5839] usb 2-1: unit 1 not found! [ 242.975790][ T5980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.037004][ T5980] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 243.085167][ T5980] usb 4-1: can't read configurations, error -71 [ 243.173709][ T7788] macvlan3: entered promiscuous mode [ 243.419475][ T5839] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 243.475574][ T5839] usb 2-1: USB disconnect, device number 15 [ 243.550404][ T7794] netlink: 'syz.0.643': attribute type 25 has an invalid length. [ 243.633486][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.636725][ T1014] Bluetooth: hci5: Frame reassembly failed (-84) [ 244.772054][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 245.191449][ T5980] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 245.484045][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 245.496636][ T7815] syz.3.653 (7815): drop_caches: 2 [ 246.356689][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.397677][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.567625][ T5980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.599295][ T5980] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 246.630605][ T5980] usb 5-1: can't read configurations, error -71 [ 246.642805][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 246.649082][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 246.959605][ T7850] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 246.979547][ T7850] macvlan2: entered promiscuous mode [ 247.946017][ T7871] netlink: 'syz.0.674': attribute type 25 has an invalid length. [ 248.379982][ T7875] netlink: 80 bytes leftover after parsing attributes in process `syz.0.676'. [ 248.448247][ T7878] macvlan4: entered promiscuous mode [ 248.618768][ T7879] syz.3.671 (7879): drop_caches: 2 [ 248.651286][ T5980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 248.861859][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 249.101858][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.114133][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.366493][ T5980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 249.406027][ T5980] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 249.449541][ T5980] usb 5-1: can't read configurations, error -71 [ 249.883686][ T7903] netlink: 'syz.3.686': attribute type 25 has an invalid length. [ 250.252154][ T803] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 250.443682][ T803] usb 1-1: Using ep0 maxpacket: 16 [ 250.465150][ T803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.547853][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.657817][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.707138][ T803] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.795214][ T803] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.892501][ T803] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.980848][ T803] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 251.017071][ T803] usb 1-1: Manufacturer: syz [ 251.052258][ T803] usb 1-1: config 0 descriptor?? [ 251.211665][ T5966] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 251.429778][ T7933] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 251.520154][ T7933] macvlan2: entered promiscuous mode [ 252.331894][ T5966] usb 2-1: device descriptor read/64, error -71 [ 252.481397][ T803] rc_core: IR keymap rc-hauppauge not found [ 252.499408][ T7946] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.700'. [ 252.512704][ T5839] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 252.539419][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.700'. [ 252.631238][ T5966] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 252.675418][ T803] Registered IR keymap rc-empty [ 252.701539][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 252.791257][ T5966] usb 2-1: device descriptor read/64, error -71 [ 252.814183][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 252.922612][ T5966] usb usb2-port1: attempt power cycle [ 253.151748][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 253.261913][ T803] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 253.267456][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.286198][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.311428][ T803] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 253.329452][ T5966] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 253.602503][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 253.818985][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 253.913849][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 253.988238][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.046074][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.078696][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.088256][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.137106][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.164396][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.243355][ T24] usb 4-1: config 0 descriptor?? [ 254.271288][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.373129][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.451372][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.562525][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.636851][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.706445][ T803] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 254.834508][ T803] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 255.048498][ T803] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 255.065343][ T803] usb 1-1: USB disconnect, device number 12 [ 255.132237][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.118985][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.130756][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.206489][ T5966] usb 2-1: device descriptor read/8, error -71 [ 256.222512][ T5839] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 256.280284][ T5839] usb 5-1: can't read configurations, error -71 [ 256.372991][ T24] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 256.495360][ T24] usb 4-1: USB disconnect, device number 17 [ 256.659953][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 256.741022][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.750335][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.951380][ T5966] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 257.015527][ T5966] usb 2-1: unable to get BOS descriptor or descriptor too short [ 257.055204][ T5966] usb 2-1: not running at top speed; connect to a high speed hub [ 257.088862][ T5966] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.136255][ T5966] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 257.187936][ T5966] usb 2-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.221237][ T5966] usb 2-1: config 1 interface 0 has no altsetting 0 [ 257.256441][ T5966] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.287471][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.318629][ T5966] usb 2-1: Product: syz [ 257.333522][ T5966] usb 2-1: Manufacturer: syz [ 257.347351][ T5966] usb 2-1: SerialNumber: syz [ 257.388602][ T7975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.396469][ T5839] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 257.575871][ T7991] netlink: 'syz.0.719': attribute type 9 has an invalid length. [ 257.591222][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 257.618944][ T7991] netlink: 'syz.0.719': attribute type 11 has an invalid length. [ 257.641050][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 257.671073][ T5966] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 257.680538][ T7991] netlink: 'syz.0.719': attribute type 12 has an invalid length. [ 257.701418][ T5839] usb 5-1: config 9 has an invalid interface number: 103 but max is 0 [ 257.724635][ T7991] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.719'. [ 257.740510][ T5839] usb 5-1: config 9 has no interface number 0 [ 257.766034][ T5839] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea7b, bcdDevice=70.39 [ 257.777698][ T5966] usb 2-1: USB disconnect, device number 19 [ 257.788863][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 257.812684][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.846685][ T5839] usb 5-1: Product: syz [ 257.872917][ T5839] usb 5-1: Manufacturer: syz [ 257.898070][ T5839] usb 5-1: SerialNumber: syz [ 258.175478][ T5839] cp210x 5-1:9.103: cp210x converter detected [ 258.200312][ T5839] cp210x 5-1:9.103: failed to get vendor val 0x370b size 1: -71 [ 258.233045][ T5839] cp210x 5-1:9.103: querying part number failed [ 258.263139][ T5839] usb 5-1: cp210x converter now attached to ttyUSB0 [ 258.284266][ T5839] usb 5-1: USB disconnect, device number 17 [ 258.330058][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.359919][ T5839] cp210x 5-1:9.103: device disconnected [ 258.436884][ T8013] 9p: Bad value for 'rfdno' [ 258.648753][ T8018] futex_wake_op: syz.1.728 tries to shift op by -1; fix this program [ 259.731565][ T8030] loop5: detected capacity change from 0 to 7 [ 261.100724][ T8030] Dev loop5: unable to read RDB block 7 [ 261.108279][ T8030] loop5: unable to read partition table [ 261.114392][ T8030] loop5: partition table beyond EOD, truncated [ 261.120832][ T8030] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 262.053258][ T5966] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 262.221376][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 262.457053][ T8055] netlink: 'syz.4.741': attribute type 2 has an invalid length. [ 263.358361][ T5966] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.377658][ T5966] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 264.053123][ T5966] usb 1-1: can't read configurations, error -71 [ 264.398487][ T8073] 9p: Bad value for 'rfdno' [ 264.724804][ T8079] Cannot find add_set index 65532 as target [ 265.605542][ T8089] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 265.811596][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 265.844479][ T8089] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 265.872067][ T8089] bond1 (unregistering): Released all slaves [ 265.971259][ T24] usb 4-1: device descriptor read/64, error -71 [ 266.047242][ T1014] Bluetooth: hci5: Frame reassembly failed (-84) [ 266.163578][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 266.221651][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 266.381231][ T24] usb 4-1: device descriptor read/64, error -71 [ 266.487862][ T8112] 9p: Bad value for 'rfdno' [ 266.502007][ T24] usb usb4-port1: attempt power cycle [ 266.881556][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 267.115902][ T5966] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 267.346943][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 267.472938][ T24] usb 4-1: device descriptor read/8, error -71 [ 267.656154][ T5966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 267.666856][ T5966] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 267.675955][ T5966] usb 5-1: can't read configurations, error -71 [ 267.732083][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 267.772802][ T24] usb 4-1: device descriptor read/8, error -71 [ 267.867005][ T8132] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 267.891687][ T24] usb usb4-port1: unable to enumerate USB device [ 268.040476][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 268.081377][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 268.089952][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 268.202985][ T5843] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 269.705767][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.787'. [ 270.083711][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 270.210816][ T8186] process 'syz.0.796' launched './file0' with NULL argv: empty string added [ 270.251333][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 270.281778][ T5966] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 270.327608][ T8172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.342549][ T8172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.395552][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 270.424516][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 270.450491][ T9] usb 4-1: can't read configurations, error -71 [ 270.458225][ T5966] usb 5-1: no configurations [ 270.469988][ T5966] usb 5-1: can't read configurations, error -22 [ 270.621246][ T5966] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 270.792812][ T5966] usb 5-1: no configurations [ 270.800691][ T5966] usb 5-1: can't read configurations, error -22 [ 270.809990][ T5966] usb usb5-port1: attempt power cycle [ 271.171438][ T5966] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 271.243637][ T5966] usb 5-1: no configurations [ 271.270659][ T5966] usb 5-1: can't read configurations, error -22 [ 271.446080][ T5966] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 271.617805][ T5966] usb 5-1: no configurations [ 271.678727][ T5966] usb 5-1: can't read configurations, error -22 [ 271.788102][ T5966] usb usb5-port1: unable to enumerate USB device [ 272.491289][ T5966] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 272.661372][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 272.692395][ T5966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 272.716369][ T30] audit: type=1326 audit(1773571832.805:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 272.722968][ T5966] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 272.792573][ T30] audit: type=1326 audit(1773571832.805:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 272.865578][ T30] audit: type=1326 audit(1773571832.835:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 272.872090][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.993934][ T5966] usb 2-1: Product: syz [ 273.014532][ T5966] usb 2-1: Manufacturer: syz [ 273.029591][ T5966] usb 2-1: SerialNumber: syz [ 273.035527][ T30] audit: type=1326 audit(1773571832.845:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 273.075255][ T5966] usb 2-1: config 0 descriptor?? [ 273.149444][ T30] audit: type=1326 audit(1773571832.845:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 273.180663][ T5966] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 273.223692][ T30] audit: type=1326 audit(1773571832.845:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 273.246378][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 273.288493][ T30] audit: type=1326 audit(1773571832.845:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 273.348611][ T5966] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 273.373763][ T30] audit: type=1326 audit(1773571832.845:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 273.420205][ T5966] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 273.427657][ T30] audit: type=1326 audit(1773571832.845:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 273.430051][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 273.475056][ T30] audit: type=1326 audit(1773571832.845:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f97fa39c799 code=0x7ffc0000 [ 273.502317][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 273.518803][ T10] usb 4-1: config 9 has an invalid interface number: 103 but max is 0 [ 273.538105][ T10] usb 4-1: config 9 has no interface number 0 [ 273.547328][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea7b, bcdDevice=70.39 [ 273.560851][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.570644][ T10] usb 4-1: Product: syz [ 273.575874][ T10] usb 4-1: Manufacturer: syz [ 273.584226][ T10] usb 4-1: SerialNumber: syz [ 273.624713][ T9] usb 2-1: USB disconnect, device number 20 [ 273.879316][ T10] cp210x 4-1:9.103: cp210x converter detected [ 273.905213][ T10] cp210x 4-1:9.103: failed to get vendor val 0x370b size 1: -71 [ 273.947478][ T10] cp210x 4-1:9.103: querying part number failed [ 273.992848][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 274.018245][ T10] usb 4-1: USB disconnect, device number 24 [ 274.068205][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 274.087634][ T10] cp210x 4-1:9.103: device disconnected [ 274.299566][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 274.714512][ T8273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.841'. [ 275.504175][ T5843] Bluetooth: Frame is too long (len 18, expected len 7) [ 276.293382][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 276.348147][ T8300] netlink: 14 bytes leftover after parsing attributes in process `syz.2.844'. [ 276.415328][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'. [ 276.579746][ T8300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.518568][ T8300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.568885][ T5843] Bluetooth: Frame is too long (len 18, expected len 7) [ 277.583417][ T8300] bond0 (unregistering): Released all slaves [ 277.617845][ T6851] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.675930][ T6851] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.726968][ T6851] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.767972][ T6851] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.047377][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 278.136274][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'. [ 278.242675][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 278.365130][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.366840][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.462924][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.484647][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 278.507886][ T10] usb 1-1: can't read configurations, error -71 [ 278.629492][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 279.208813][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.429225][ T8373] bond0: (slave rose0): Enslaving as an active interface with an up link [ 279.467236][ T8376] bond0: (slave rose0): Releasing backup interface [ 279.944462][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 279.998525][ T6050] Bluetooth: hci5: Frame reassembly failed (-84) [ 281.311675][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 281.388256][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 281.419992][ T8434] openvswitch: netlink: Message has 8 unknown bytes. [ 281.427024][ T8434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.551288][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 281.841423][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 281.849633][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 282.071208][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 282.204642][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.223086][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.223113][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.225510][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 282.225541][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.225560][ T10] usb 1-1: Product: syz [ 282.225574][ T10] usb 1-1: Manufacturer: syz [ 282.225588][ T10] usb 1-1: SerialNumber: syz [ 282.248865][ T10] usb 1-1: 0:1 : does not exist [ 282.248970][ T10] usb 1-1: BAAD HEADPHONE p_chmask mismatch [ 282.280299][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.440011][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.619014][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 282.657564][ T10] usb 1-1: USB disconnect, device number 17 [ 282.681982][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.717998][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 282.724824][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.747695][ T24] usb 5-1: can't read configurations, error -71 [ 282.851721][ T803] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 283.001619][ T803] usb 4-1: Using ep0 maxpacket: 8 [ 283.044275][ T803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.076221][ T803] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 283.100491][ T803] usb 4-1: can't read configurations, error -71 [ 283.132130][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 283.195846][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 283.269949][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 283.299572][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 283.650942][ T6050] Bluetooth: hci5: Frame reassembly failed (-84) [ 283.779368][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 284.721243][ T5980] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 285.122109][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 285.303685][ T8506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.340026][ T8506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.442992][ T5980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.468887][ T5980] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 285.504730][ T5980] usb 5-1: can't read configurations, error -71 [ 285.571260][ T803] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 285.681620][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 285.689516][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 285.731290][ T803] usb 2-1: Using ep0 maxpacket: 8 [ 285.763314][ T803] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.783881][ T803] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 285.797830][ T803] usb 2-1: can't read configurations, error -71 [ 285.970300][ T8540] netlink: 'syz.3.925': attribute type 25 has an invalid length. [ 286.225754][ T8553] netlink: 'syz.0.928': attribute type 2 has an invalid length. [ 286.247828][ T8553] tipc: Started in network mode [ 286.270117][ T8553] tipc: Node identity 7000f, cluster identity 4711 [ 286.291266][ T8553] tipc: Node number set to 458767 [ 286.348460][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 286.706409][ T8572] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 286.802527][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 286.978358][ T8583] netlink: 'syz.4.941': attribute type 25 has an invalid length. [ 287.148719][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 287.148737][ T30] audit: type=1326 audit(1773571847.235:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.4.943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f423c99c799 code=0x0 [ 287.177814][ T5839] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 287.351232][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 287.374491][ T5980] libceph: connect (1)[c::]:6789 error -101 [ 287.384277][ T5980] libceph: mon0 (1)[c::]:6789 connect error [ 287.409457][ T5980] libceph: connect (1)[c::]:6789 error -101 [ 287.420380][ T8595] ceph: No mds server is up or the cluster is laggy [ 287.423039][ T5980] libceph: mon0 (1)[c::]:6789 connect error [ 287.477958][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.532890][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.657328][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.681609][ T5839] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 287.708170][ T5839] usb 4-1: can't read configurations, error -71 [ 287.924306][ T8617] netlink: 'syz.4.955': attribute type 25 has an invalid length. [ 287.951681][ T5980] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 287.973714][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 288.124097][ T5980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.155358][ T5980] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 288.155402][ T5980] usb 2-1: can't read configurations, error -71 [ 288.862643][ T5839] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 289.710339][ T9] libceph: connect (1)[c::]:6789 error -101 [ 289.717251][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 289.784610][ T8660] netlink: 'syz.4.971': attribute type 25 has an invalid length. [ 289.805559][ T135] Bluetooth: hci5: Frame reassembly failed (-84) [ 289.813898][ T8653] ceph: No mds server is up or the cluster is laggy [ 289.930262][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 289.961813][ T5839] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.981031][ T5839] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.006122][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.015922][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.038719][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.054832][ T5839] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.071310][ T803] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 290.081864][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.091932][ T5839] usb 4-1: Product: syz [ 290.106797][ T5839] usb 4-1: Manufacturer: syz [ 290.136618][ T5839] cdc_wdm 4-1:1.0: skipping garbage [ 290.147095][ T5839] cdc_wdm 4-1:1.0: skipping garbage [ 290.201601][ T5839] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 290.221287][ T5839] cdc_wdm 4-1:1.0: Unknown control protocol [ 290.271242][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 290.329770][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.351987][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.376988][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 290.383911][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 290.390348][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 290.397239][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 290.403747][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 290.410383][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 290.416843][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 290.423582][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 290.430225][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 290.434162][ T5980] usb 4-1: USB disconnect, device number 28 [ 290.436845][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 290.436875][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 290.551890][ T803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 290.569662][ T803] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 290.580723][ T803] usb 1-1: can't read configurations, error -71 [ 291.872630][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 291.961321][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 292.064059][ T9] libceph: connect (1)[c::]:6789 error -101 [ 292.091767][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 292.352132][ T9] libceph: connect (1)[c::]:6789 error -101 [ 292.369543][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 292.471899][ T8699] ceph: No mds server is up or the cluster is laggy [ 292.765079][ T8726] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 293.068813][ T8730] netlink: 'syz.2.993': attribute type 24 has an invalid length. [ 293.211198][ T5839] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 293.406114][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 294.076617][ T5839] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 294.124976][ T5839] usb 5-1: can't read configurations, error -71 [ 295.401335][ T5839] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 295.582136][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 295.688724][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.721590][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.826793][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 295.863533][ T5839] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 295.892166][ T5839] usb 5-1: can't read configurations, error -71 [ 295.914178][ T5839] usb usb5-port1: attempt power cycle [ 296.225209][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 296.429899][ T30] audit: type=1326 audit(1773571856.515:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.3.1006" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97fa39c799 code=0x0 [ 296.481070][ T8757] netlink: 'syz.1.1005': attribute type 25 has an invalid length. [ 297.049977][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 297.501247][ T803] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 297.651398][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 297.671178][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 297.678888][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 297.706709][ T803] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 297.717054][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.743264][ T803] usb 1-1: Product: syz [ 297.747593][ T803] usb 1-1: Manufacturer: syz [ 297.754269][ T803] usb 1-1: SerialNumber: syz [ 297.800229][ T803] usb 1-1: config 0 descriptor?? [ 297.817442][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.834525][ T5980] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 297.846896][ T803] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 297.866215][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.888188][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 297.910161][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.948850][ T24] usb 4-1: config 0 descriptor?? [ 298.022723][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 298.033490][ T803] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 298.051990][ T803] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 298.097570][ T8799] netlink: 'syz.2.1019': attribute type 24 has an invalid length. [ 298.156179][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.156753][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.505665][ T5966] usb 1-1: USB disconnect, device number 20 [ 299.013699][ T8803] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.348081][ T5980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 299.598456][ T5980] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 299.664751][ T5980] usb 5-1: can't read configurations, error -71 [ 299.783040][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 299.808042][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 299.859895][ T24] usb 4-1: USB disconnect, device number 29 [ 300.058183][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 300.373001][ T8837] netlink: 'syz.4.1030': attribute type 25 has an invalid length. [ 301.205877][ T8859] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 301.435976][ T8862] netlink: 'syz.0.1041': attribute type 25 has an invalid length. [ 301.922294][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 301.922354][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 302.261694][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 302.356348][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 302.438227][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.466787][ T24] usb 1-1: config 0 has no interfaces? [ 302.483426][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 302.494597][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.504417][ T24] usb 1-1: Product: syz [ 302.508967][ T24] usb 1-1: Manufacturer: syz [ 302.514646][ T24] usb 1-1: SerialNumber: syz [ 302.555999][ T24] usb 1-1: config 0 descriptor?? [ 302.765962][ T8903] 9p: Bad value for 'rfdno' [ 302.811203][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 303.027416][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 303.038923][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 303.130165][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 303.175324][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.181680][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.334595][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.366839][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 303.378075][ T9] usb 4-1: can't read configurations, error -71 [ 303.604063][ T8936] 9p: Bad value for 'wfdno' [ 304.453459][ T8959] bridge0: port 3(syz_tun) entered blocking state [ 304.464832][ T8959] bridge0: port 3(syz_tun) entered disabled state [ 304.472558][ T8959] syz_tun: entered allmulticast mode [ 304.488799][ T8959] syz_tun: entered promiscuous mode [ 304.499876][ T8959] bridge0: port 3(syz_tun) entered blocking state [ 304.508800][ T8959] bridge0: port 3(syz_tun) entered forwarding state [ 304.588560][ T8962] 9p: Bad value for 'rfdno' [ 305.041259][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 305.044745][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 305.126025][ T9] usb 1-1: USB disconnect, device number 21 [ 306.959973][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1095'. [ 307.339692][ T9005] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1099'. [ 307.461585][ T29] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 307.584012][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1100'. [ 307.663772][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.701277][ T29] usb 4-1: config 0 has no interfaces? [ 307.724597][ T29] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 307.734194][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 307.769078][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.794185][ T29] usb 4-1: Product: syz [ 307.802979][ T29] usb 4-1: Manufacturer: syz [ 307.813431][ T29] usb 4-1: SerialNumber: syz [ 307.842896][ T29] usb 4-1: config 0 descriptor?? [ 308.071257][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 308.083422][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.101650][ T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 308.145287][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.206048][ T24] usb 2-1: Product: syz [ 308.210524][ T24] usb 2-1: Manufacturer: syz [ 308.218320][ T24] usb 2-1: SerialNumber: syz [ 308.445378][ T803] libceph: connect (1)[c::]:6789 error -101 [ 308.597645][ T803] libceph: mon0 (1)[c::]:6789 connect error [ 308.742283][ T9025] ceph: No mds server is up or the cluster is laggy [ 308.755017][ T24] usb 2-1: config 0 descriptor?? [ 308.909506][ T24] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 309.127403][ T24] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 309.141843][ T24] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 309.156308][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1109'. [ 309.488309][ T152] Bluetooth: hci5: Frame reassembly failed (-84) [ 309.608488][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 310.991953][ T803] usb 2-1: USB disconnect, device number 25 [ 311.089510][ T24] usb 4-1: USB disconnect, device number 32 [ 311.335630][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1120'. [ 311.521955][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 311.702925][ T803] libceph: connect (1)[c::]:6789 error -101 [ 311.874178][ T803] libceph: mon0 (1)[c::]:6789 connect error [ 312.005322][ T9072] ceph: No mds server is up or the cluster is laggy [ 312.891406][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 313.282015][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 313.525271][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.569084][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.680331][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.729837][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 313.743749][ T9] usb 4-1: can't read configurations, error -71 [ 313.765330][ T5843] Bluetooth: Frame is too long (len 18, expected len 4) [ 314.861240][ T9117] syz.0.1135 (9117): drop_caches: 2 [ 315.869577][ T5843] Bluetooth: Frame is too long (len 18, expected len 7) [ 316.231285][ T988] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 316.891399][ T988] usb 5-1: Using ep0 maxpacket: 8 [ 318.089025][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.089891][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.124303][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.129791][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.266866][ T9159] syz.1.1152 (9159): drop_caches: 2 [ 318.506848][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 318.544327][ T988] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 318.582723][ T988] usb 5-1: can't read configurations, error -71 [ 320.110731][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 320.299575][ T9191] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002 [ 320.318787][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 320.517971][ T9187] ceph: No mds server is up or the cluster is laggy [ 322.415376][ T9207] syz.4.1167 (9207): drop_caches: 2 [ 322.723295][ T5843] Bluetooth: Frame is too long (len 18, expected len 7) [ 323.673754][ T5966] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 323.851208][ T5966] usb 4-1: Using ep0 maxpacket: 8 [ 324.169492][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.173119][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.306799][ T5966] usb 4-1: unable to get BOS descriptor or descriptor too short [ 324.320658][ T9233] netlink: 'syz.1.1176': attribute type 25 has an invalid length. [ 324.336787][ T5966] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 324.373780][ T5966] usb 4-1: can't read configurations, error -71 [ 325.408196][ T9241] ceph: No mds server is up or the cluster is laggy [ 325.436683][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 325.455158][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 325.755549][ T5843] Bluetooth: Frame is too long (len 18, expected len 7) [ 326.855994][ T9252] syz.3.1182 (9252): drop_caches: 2 [ 327.055085][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1185'. [ 328.369805][ T9266] netlink: 'syz.0.1189': attribute type 25 has an invalid length. [ 329.056558][ T5966] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 329.122392][ T49] wlan1: Trigger new scan to find an IBSS to join [ 329.229258][ T9279] netlink: set zone limit has 4 unknown bytes [ 329.276105][ T5966] usb 1-1: config 9 has an invalid interface number: 181 but max is 0 [ 329.296333][ T5966] usb 1-1: config 9 has no interface number 0 [ 329.314397][ T5966] usb 1-1: config 9 interface 181 altsetting 44 has an invalid endpoint descriptor of length 2, skipping [ 329.336732][ T5966] usb 1-1: config 9 interface 181 altsetting 44 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.351823][ T5966] usb 1-1: config 9 interface 181 has no altsetting 0 [ 329.365274][ T5966] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e310, bcdDevice=34.b6 [ 329.378152][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.388224][ T5966] usb 1-1: Product: syz [ 329.393036][ T5966] usb 1-1: Manufacturer: syz [ 329.398005][ T5966] usb 1-1: SerialNumber: syz [ 330.833103][ T9289] syz.4.1198 (9289): drop_caches: 2 [ 330.856611][ T5966] usb 1-1: USB disconnect, device number 22 [ 330.999818][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'. [ 331.475612][ T24] libceph: connect (1)[c::]:6789 error -101 [ 331.587209][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 331.943676][ T9298] ceph: No mds server is up or the cluster is laggy [ 331.955960][ T803] libceph: connect (1)[c::]:6789 error -101 [ 332.001332][ T803] libceph: mon0 (1)[c::]:6789 connect error [ 332.198616][ T9305] loop5: detected capacity change from 0 to 7 [ 332.253996][ T1692] blk_print_req_error: 10 callbacks suppressed [ 332.254016][ T1692] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.271939][ T1692] buffer_io_error: 10 callbacks suppressed [ 332.272069][ T1692] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.289534][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.310079][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.330379][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.342087][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.351532][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.362242][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.371628][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.381384][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.389888][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.399665][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.408708][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.418828][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.426933][ T9305] ldm_validate_partition_table(): Disk read failed. [ 332.440006][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.450215][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.458643][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.473846][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.482617][ T9305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.642510][ T9305] Buffer I/O error on dev loop5, logical block 0, async page read [ 332.703110][ T9305] Dev loop5: unable to read RDB block 0 [ 332.761769][ T9305] loop5: unable to read partition table [ 332.819180][ T9305] loop5: partition table beyond EOD, truncated [ 332.843438][ T9305] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 333.189952][ T9325] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 334.260447][ T9328] syz.0.1212 (9328): drop_caches: 2 [ 335.136886][ T24] libceph: connect (1)[c::]:6789 error -101 [ 335.213698][ T36] wlan1: Trigger new scan to find an IBSS to join [ 335.239557][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 335.513649][ T9345] ceph: No mds server is up or the cluster is laggy [ 336.011260][ T5966] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 336.080702][ T9356] netlink: 'syz.4.1202': attribute type 25 has an invalid length. [ 336.211367][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 336.226123][ T5966] usb 2-1: unable to get BOS descriptor or descriptor too short [ 336.256076][ T5966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.276131][ T5966] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.298898][ T5966] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 336.322612][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.344095][ T5966] usb 2-1: Product: syz [ 336.357517][ T5966] usb 2-1: Manufacturer: syz [ 336.369238][ T5966] usb 2-1: SerialNumber: syz [ 336.489928][ T6050] wlan1: Creating new IBSS network, BSSID 06:c3:e2:e4:e3:bb [ 336.630639][ T5966] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 336.653772][ T5966] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 336.704652][ T5966] usb 2-1: unit 37 not found! [ 336.721539][ T5966] usb 2-1: unit 0 not found! [ 336.947195][ T5966] usb 2-1: USB disconnect, device number 26 [ 337.001298][ T988] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 337.257446][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.434288][ T9376] syz.0.1228 (9376): drop_caches: 2 [ 337.995065][ T988] usb 5-1: Using ep0 maxpacket: 16 [ 338.063428][ T988] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 338.077233][ T988] usb 5-1: config 0 has no interface number 0 [ 338.111183][ T988] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 338.138564][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.159557][ T988] usb 5-1: Product: syz [ 338.180593][ T988] usb 5-1: Manufacturer: syz [ 338.203298][ T988] usb 5-1: SerialNumber: syz [ 338.243559][ T988] usb 5-1: config 0 descriptor?? [ 338.418789][ T988] hub 5-1:0.132: bad descriptor, ignoring hub [ 338.451379][ T988] hub 5-1:0.132: probe with driver hub failed with error -5 [ 339.156212][ T9391] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 339.277362][ T9389] netlink: 'syz.1.1233': attribute type 25 has an invalid length. [ 339.307871][ T988] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input11 [ 339.433111][ T988] usb 5-1: USB disconnect, device number 35 [ 339.649242][ T9404] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 339.806722][ T9404] team0 (unregistering): Port device team_slave_0 removed [ 339.893504][ T9404] team0 (unregistering): Port device team_slave_1 removed [ 341.436460][ T9430] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 341.674398][ T9434] netlink: 'syz.1.1249': attribute type 25 has an invalid length. [ 341.961668][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 342.026017][ T9445] 9p: Bad value for 'wfdno' [ 342.182572][ T24] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 342.221525][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 342.240632][ T24] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 342.256689][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.267292][ T24] usb 4-1: Product: syz [ 342.274265][ T24] usb 4-1: Manufacturer: syz [ 342.284209][ T24] usb 4-1: SerialNumber: syz [ 342.381488][ T24] usb 4-1: config 0 descriptor?? [ 342.405397][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 343.482898][ T24] gspca_sunplus: reg_r err -110 [ 343.584313][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 343.727386][ T9459] overlayfs: failed to clone upperpath [ 344.313903][ T24] libceph: connect (1)[c::]:6789 error -101 [ 344.334628][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 344.618093][ T24] libceph: connect (1)[c::]:6789 error -101 [ 344.829017][ T9467] ceph: No mds server is up or the cluster is laggy [ 344.883485][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 344.971871][ T803] usb 4-1: USB disconnect, device number 37 [ 345.298113][ T9474] netlink: 'syz.0.1263': attribute type 25 has an invalid length. [ 345.756772][ T9481] 9p: Bad value for 'wfdno' [ 347.200668][ T9490] syz.4.1270 (9490): drop_caches: 2 [ 347.510408][ T9496] loop9: detected capacity change from 0 to 524287936 [ 347.834848][ T9500] netlink: 'syz.1.1272': attribute type 2 has an invalid length. [ 348.914775][ T9506] netlink: 'syz.3.1276': attribute type 25 has an invalid length. [ 349.350836][ T9516] 9p: Bad value for 'wfdno' [ 350.173529][ T9531] futex_wake_op: syz.3.1286 tries to shift op by -1; fix this program [ 350.680680][ T6851] Bluetooth: hci5: Frame reassembly failed (-84) [ 350.690002][ T9537] netlink: 'syz.0.1289': attribute type 25 has an invalid length. [ 350.827141][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 351.252351][ T5899] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 351.343364][ T9559] 9p: Bad value for 'rfdno' [ 351.421164][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 351.443315][ T5899] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 351.464873][ T5899] usb 1-1: config 0 has no interface number 0 [ 351.496652][ T5899] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.527790][ T5899] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 351.555360][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 351.581710][ T5899] usb 1-1: Product: syz [ 351.599240][ T5899] usb 1-1: SerialNumber: syz [ 351.634312][ T5899] usb 1-1: config 0 descriptor?? [ 351.659420][ T5899] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 351.752775][ T9574] netlink: 'syz.3.1301': attribute type 25 has an invalid length. [ 351.764468][ T9577] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1300'. [ 351.775221][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1300'. [ 351.794600][ T9576] futex_wake_op: syz.2.1302 tries to shift op by -1; fix this program [ 352.241879][ T9590] 9p: Bad value for 'rfdno' [ 352.724345][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 353.855613][ T24] libceph: connect (1)[c::]:6789 error -101 [ 353.871265][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 354.207223][ T24] libceph: connect (1)[c::]:6789 error -101 [ 354.366613][ T9605] ceph: No mds server is up or the cluster is laggy [ 354.394425][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 354.415737][ T9608] futex_wake_op: syz.2.1313 tries to shift op by -1; fix this program [ 354.540014][ T988] usb 1-1: USB disconnect, device number 23 [ 354.617101][ T9613] netlink: 'syz.1.1314': attribute type 25 has an invalid length. [ 354.867546][ T9621] 9p: Bad value for 'rfdno' [ 355.096654][ T152] Bluetooth: hci5: Frame reassembly failed (-84) [ 355.206805][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'. [ 357.184169][ T803] libceph: connect (1)[c::]:6789 error -101 [ 357.190398][ T803] libceph: mon0 (1)[c::]:6789 connect error [ 357.196657][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 357.203500][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 357.247761][ T9658] ceph: No mds server is up or the cluster is laggy [ 357.463992][ T9664] netlink: 'syz.1.1328': attribute type 25 has an invalid length. [ 357.503275][ T9650] futex_wake_op: syz.2.1327 tries to shift op by -1; fix this program [ 357.684025][ T9672] 9p: Bad value for 'rfdno' [ 357.710732][ T5988] udevd[5988]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 358.641267][ T9692] overlayfs: failed to clone upperpath [ 359.639377][ T9690] syz.3.1341 (9690): drop_caches: 2 [ 359.795926][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 359.821320][ T9701] netlink: 'syz.1.1345': attribute type 25 has an invalid length. [ 360.288670][ T9713] 9p: Bad value for 'rfdno' [ 361.335647][ T9732] netlink: 'syz.1.1357': attribute type 25 has an invalid length. [ 362.499049][ T9736] syz.1.1358 (9736): drop_caches: 2 [ 362.853119][ T9753] syz.0.1362: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 362.868622][ T9753] CPU: 0 UID: 0 PID: 9753 Comm: syz.0.1362 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.868658][ T9753] Tainted: [L]=SOFTLOCKUP [ 362.868666][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.868678][ T9753] Call Trace: [ 362.868686][ T9753] [ 362.868696][ T9753] dump_stack_lvl+0xe8/0x150 [ 362.868737][ T9753] warn_alloc+0x249/0x340 [ 362.868767][ T9753] ? __pfx_warn_alloc+0x10/0x10 [ 362.868797][ T9753] ? kasan_save_track+0x4f/0x80 [ 362.868829][ T9753] ? kasan_save_track+0x3e/0x80 [ 362.868858][ T9753] ? __kasan_kmalloc+0x93/0xb0 [ 362.868877][ T9753] ? __kmalloc_cache_noprof+0x31c/0x660 [ 362.868897][ T9753] ? xskq_create+0x56/0x170 [ 362.868927][ T9753] ? xsk_setsockopt+0x54c/0x990 [ 362.868957][ T9753] ? do_sock_setsockopt+0x17c/0x1b0 [ 362.868980][ T9753] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 362.869002][ T9753] ? do_syscall_64+0x14d/0xf80 [ 362.869032][ T9753] __vmalloc_node_range_noprof+0x132/0x1750 [ 362.869100][ T9753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 362.869142][ T9753] ? __kasan_kmalloc+0x93/0xb0 [ 362.869167][ T9753] vmalloc_user_noprof+0xad/0xe0 [ 362.869200][ T9753] ? xskq_create+0xbf/0x170 [ 362.869233][ T9753] xskq_create+0xbf/0x170 [ 362.869258][ T9753] xsk_init_queue+0x8a/0xe0 [ 362.869282][ T9753] xsk_setsockopt+0x54c/0x990 [ 362.869318][ T9753] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.869350][ T9753] ? __pfx_aa_sk_perm+0x10/0x10 [ 362.869384][ T9753] ? aa_sock_opt_perm+0xff/0x1a0 [ 362.869420][ T9753] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 362.869452][ T9753] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.869487][ T9753] do_sock_setsockopt+0x17c/0x1b0 [ 362.869517][ T9753] __x64_sys_setsockopt+0x13d/0x1b0 [ 362.869548][ T9753] do_syscall_64+0x14d/0xf80 [ 362.869572][ T9753] ? trace_irq_disable+0x3b/0x150 [ 362.869597][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.869619][ T9753] ? clear_bhb_loop+0x40/0x90 [ 362.869646][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.869667][ T9753] RIP: 0033:0x7fd9dc79c799 [ 362.869689][ T9753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.869707][ T9753] RSP: 002b:00007fd9dd61d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 362.869731][ T9753] RAX: ffffffffffffffda RBX: 00007fd9dca16180 RCX: 00007fd9dc79c799 [ 362.869746][ T9753] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 362.869758][ T9753] RBP: 00007fd9dc832c99 R08: 0000000000000004 R09: 0000000000000000 [ 362.869771][ T9753] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.869784][ T9753] R13: 00007fd9dca16218 R14: 00007fd9dca16180 R15: 00007ffdc3aaff88 [ 362.869819][ T9753] [ 362.869853][ T9753] Mem-Info: [ 363.151356][ T9753] active_anon:47095 inactive_anon:0 isolated_anon:0 [ 363.151356][ T9753] active_file:20100 inactive_file:40036 isolated_file:0 [ 363.151356][ T9753] unevictable:768 dirty:78 writeback:0 [ 363.151356][ T9753] slab_reclaimable:6607 slab_unreclaimable:96801 [ 363.151356][ T9753] mapped:33079 shmem:42111 pagetables:1357 [ 363.151356][ T9753] sec_pagetables:0 bounce:0 [ 363.151356][ T9753] kernel_misc_reclaimable:0 [ 363.151356][ T9753] free:1271486 free_pcp:5146 free_cma:0 [ 363.168263][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 363.199518][ T9753] Node 0 active_anon:188380kB inactive_anon:0kB active_file:80400kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132316kB dirty:312kB writeback:0kB shmem:166908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12484kB pagetables:5384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 363.239371][ T9753] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 363.271116][ T9753] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.302584][ T9753] lowmem_reserve[]: 0 2485 2485 2485 2485 [ 363.308542][ T9753] Node 0 DMA32 free:1130888kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0KB free_highatomic:0KB active_anon:188480kB inactive_anon:0kB active_file:80400kB inactive_file:159940kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2544744kB mlocked:0kB bounce:0kB free_pcp:20260kB local_pcp:12840kB free_cma:0kB [ 363.342787][ T9753] lowmem_reserve[]: 0 0 0 0 0 [ 363.347730][ T9753] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.380283][ T9753] lowmem_reserve[]: 0 0 0 0 0 [ 363.385248][ T9753] Node 1 Normal free:3939696kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.417127][ T9753] lowmem_reserve[]: 0 0 0 0 0 [ 363.421948][ T9753] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 363.436441][ T9753] Node 0 DMA32: 1945*4kB (UM) 1733*8kB (UM) 1025*16kB (UE) 199*32kB (UE) 385*64kB (UME) 297*128kB (UME) 121*256kB (UME) 83*512kB (UME) 32*1024kB (UME) 10*2048kB (UM) 219*4096kB (UM) = 1130812kB [ 363.456263][ T9753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 363.469288][ T9753] Node 1 Normal: 8*4kB (UM) 6*8kB (UM) 10*16kB (UM) 10*32kB (UM) 9*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3939696kB [ 363.489813][ T9753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.499641][ T9753] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.509024][ T9753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.518625][ T9753] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.532159][ T9753] 102243 total pagecache pages [ 363.536949][ T9753] 0 pages in swap cache [ 363.542032][ T9753] Free swap = 124996kB [ 363.546248][ T9753] Total swap = 124996kB [ 363.550687][ T9753] 2097051 pages RAM [ 363.554645][ T9753] 0 pages HighMem/MovableOnly [ 363.559436][ T9753] 429250 pages reserved [ 363.564723][ T9753] 0 pages cma reserved [ 363.958024][ T9768] netlink: 'syz.2.1368': attribute type 24 has an invalid length. [ 364.421617][ T9770] futex_wake_op: syz.4.1369 tries to shift op by -1; fix this program [ 364.641818][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 364.649436][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 365.211188][ T5899] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 365.394253][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.429363][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 365.465341][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.504435][ T5899] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 365.529631][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.551335][ T5899] usb 4-1: Product: syz [ 365.561030][ T5899] usb 4-1: Manufacturer: syz [ 365.571640][ T5899] usb 4-1: SerialNumber: syz [ 365.592100][ T5899] usb 4-1: config 0 descriptor?? [ 365.618824][ T5899] uvcvideo 4-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 365.654808][ T5899] uvcvideo 4-1:0.0: No valid video chain found. [ 366.196713][ T803] usb 4-1: USB disconnect, device number 38 [ 366.203639][ T9803] node ffff88807ab7cdc0 offset 0 parent ffff88806b2182c0 shift 0 count 15 values 0 array ffff88805632df40 list ffff88807ab7cdd8 ffff88807ab7cdd8 marks 0 0 0 [ 366.228294][ T9803] ------------[ cut here ]------------ [ 366.234188][ T9803] kernel BUG at ./include/linux/xarray.h:1441! [ 366.240881][ T9803] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 366.247322][ T9803] CPU: 0 UID: 0 PID: 9803 Comm: syz.1.1370 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.258253][ T9803] Tainted: [L]=SOFTLOCKUP [ 366.262577][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.272968][ T9803] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 366.279483][ T9803] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 366.299379][ T9803] RSP: 0000:ffffc9000d46f120 EFLAGS: 00010246 [ 366.305549][ T9803] RAX: 0000000000000000 RBX: ffff88807ab7cdc0 RCX: 719ae9782ae3a500 [ 366.313791][ T9803] RDX: ffffc9000e2a4000 RSI: 0000000000006134 RDI: 0000000000006135 [ 366.321766][ T9803] RBP: ffffc9000d46f428 R08: 0000000000000003 R09: 0000000000000004 [ 366.329996][ T9803] R10: dffffc0000000000 R11: fffffbfff1cbd3cc R12: ffffea000121a670 [ 366.337980][ T9803] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000d46f310 [ 366.346049][ T9803] FS: 00007efe49bd56c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 366.355191][ T9803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.361949][ T9803] CR2: fffffffffffffe70 CR3: 00000000326f2000 CR4: 00000000003526f0 [ 366.370111][ T9803] Call Trace: [ 366.373399][ T9803] [ 366.376427][ T9803] ? hpage_collapse_scan_file+0x1c1/0x5230 [ 366.382672][ T9803] ? lockdep_hardirqs_on+0x7a/0x110 [ 366.388480][ T9803] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 366.394546][ T9803] ? wake_up_q+0x99/0xd0 [ 366.398936][ T9803] ? rwsem_wake+0xf2/0x140 [ 366.403377][ T9803] ? __up_read+0x291/0x6b0 [ 366.407818][ T9803] ? __pfx___up_read+0x10/0x10 [ 366.412602][ T9803] ? madvise_collapse+0x41e/0xb80 [ 366.417795][ T9803] madvise_collapse+0x451/0xb80 [ 366.422666][ T9803] madvise_vma_behavior+0x1094/0x4460 [ 366.428125][ T9803] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 366.433845][ T9803] ? __lock_acquire+0x6b5/0x2cf0 [ 366.438881][ T9803] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 366.445124][ T9803] ? rcu_is_watching+0x15/0xb0 [ 366.449886][ T9803] ? css_rstat_updated+0x23a/0x530 [ 366.455116][ T9803] ? __pfx_css_rstat_updated+0x10/0x10 [ 366.460775][ T9803] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 366.467188][ T9803] ? kvm_sched_clock_read+0x11/0x20 [ 366.472664][ T9803] ? sched_clock+0x3f/0x60 [ 366.477299][ T9803] ? sched_clock_cpu+0x74/0x440 [ 366.482255][ T9803] ? update_se+0x399/0x620 [ 366.486756][ T9803] ? __pfx_sched_clock_cpu+0x10/0x10 [ 366.492045][ T9803] ? mas_prev_slot+0xb7b/0xbf0 [ 366.497000][ T9803] ? find_vma_prev+0x123/0x1b0 [ 366.501891][ T9803] ? __pfx_find_vma_prev+0x10/0x10 [ 366.507174][ T9803] ? css_rstat_updated+0x23a/0x530 [ 366.512299][ T9803] ? __pfx_css_rstat_updated+0x10/0x10 [ 366.517755][ T9803] ? __lock_acquire+0x6b5/0x2cf0 [ 366.522697][ T9803] madvise_walk_vmas+0x573/0xae0 [ 366.527637][ T9803] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 366.533115][ T9803] ? blk_start_plug+0x6e/0x1b0 [ 366.537876][ T9803] madvise_do_behavior+0x386/0x540 [ 366.543354][ T9803] ? __pfx_madvise_do_behavior+0x10/0x10 [ 366.548988][ T9803] ? down_read+0x270/0x2e0 [ 366.553420][ T9803] ? madvise_lock+0x146/0x2e0 [ 366.558184][ T9803] do_madvise+0x1fa/0x2e0 [ 366.562714][ T9803] ? __pfx_do_madvise+0x10/0x10 [ 366.567761][ T9803] ? __pfx___schedule+0x10/0x10 [ 366.572618][ T9803] ? rcu_is_watching+0x15/0xb0 [ 366.577496][ T9803] __x64_sys_madvise+0xa6/0xc0 [ 366.582278][ T9803] do_syscall_64+0x14d/0xf80 [ 366.586883][ T9803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.593041][ T9803] ? clear_bhb_loop+0x40/0x90 [ 366.597721][ T9803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.603803][ T9803] RIP: 0033:0x7efe4b99c799 [ 366.608232][ T9803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.628387][ T9803] RSP: 002b:00007efe49bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 366.636825][ T9803] RAX: ffffffffffffffda RBX: 00007efe4bc16090 RCX: 00007efe4b99c799 [ 366.644884][ T9803] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 366.652953][ T9803] RBP: 00007efe4ba32c99 R08: 0000000000000000 R09: 0000000000000000 [ 366.661023][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.669109][ T9803] R13: 00007efe4bc16128 R14: 00007efe4bc16090 R15: 00007ffce4c2fa38 [ 366.677084][ T9803] [ 366.680136][ T9803] Modules linked in: [ 366.685420][ T9803] ---[ end trace 0000000000000000 ]--- [ 366.692418][ T9803] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 366.699498][ T9803] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 366.720006][ T9803] RSP: 0000:ffffc9000d46f120 EFLAGS: 00010246 [ 366.726867][ T9803] RAX: 0000000000000000 RBX: ffff88807ab7cdc0 RCX: 719ae9782ae3a500 [ 366.735177][ T9803] RDX: ffffc9000e2a4000 RSI: 0000000000006134 RDI: 0000000000006135 [ 366.746723][ T9803] RBP: ffffc9000d46f428 R08: 0000000000000003 R09: 0000000000000004 [ 366.754962][ T9803] R10: dffffc0000000000 R11: fffffbfff1cbd3cc R12: ffffea000121a670 [ 366.763186][ T9803] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000d46f310 [ 366.771538][ T9803] FS: 00007efe49bd56c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 366.780915][ T9803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.787692][ T9803] CR2: fffffffffffffe70 CR3: 00000000326f2000 CR4: 00000000003526f0 [ 366.796228][ T9803] Kernel panic - not syncing: Fatal exception [ 366.803078][ T9803] Kernel Offset: disabled [ 366.807420][ T9803] Rebooting in 86400 seconds..