last executing test programs: 6.609955405s ago: executing program 0 (id=5728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x3}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 6.205231011s ago: executing program 0 (id=5735): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x7f, 0x2, 0x9, 0xd, 0x4, 0x7, 0x8, 0x5, 0x2, 0xc, 0x6, 0x40, 0x13, 0x48}, 0xe) recvmmsg(r0, &(0x7f0000007400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)=""/18, 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 5.33480875s ago: executing program 2 (id=5750): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000005c0)={0x10}, 0x10) 5.287381442s ago: executing program 0 (id=5751): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) 5.254615599s ago: executing program 3 (id=5752): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000180)={0x7, 0x3, 0xaa2, 0x7}) 5.212638385s ago: executing program 2 (id=5753): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109025c0002010050060904000001020d0000052406000105240003000d240f0101000000ce0107000006241a00043009058103080003dd07090401"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) 5.175365865s ago: executing program 0 (id=5754): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 4.186376438s ago: executing program 0 (id=5756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700018a6558788ff9e2f08000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000000000005000800020000000a0006"], 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 3.830272535s ago: executing program 0 (id=5758): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ce) lseek(r0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getdents64(r0, &(0x7f0000000000)=""/95, 0x5f) 3.553366199s ago: executing program 32 (id=5758): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ce) lseek(r0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getdents64(r0, &(0x7f0000000000)=""/95, 0x5f) 3.256091226s ago: executing program 1 (id=5763): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x3, "25720f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="9ec81c"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.220842291s ago: executing program 3 (id=5764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="50000000000800000a01"]) 2.87549774s ago: executing program 4 (id=5767): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r0) close(r1) 2.738072642s ago: executing program 3 (id=5768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b5de1522d3"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}}, 0x40) 2.730069712s ago: executing program 4 (id=5769): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000005c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0xfffffffffffffe41, 0x1, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x4c0d5}) io_uring_enter(r0, 0x4f65, 0x0, 0x0, 0x0, 0x0) 2.55992214s ago: executing program 4 (id=5770): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x8}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 2.44443464s ago: executing program 4 (id=5771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.185957058s ago: executing program 4 (id=5772): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) 2.0681306s ago: executing program 2 (id=5773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x470bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0e7668d28bc7"}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) 1.918284125s ago: executing program 4 (id=5774): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) unshare(0x50060700) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x24000041) 1.487422793s ago: executing program 2 (id=5775): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(r0, &(0x7f0000000340)=""/224, 0xe0) 1.451150849s ago: executing program 3 (id=5776): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0xf, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffe, 0x100006d9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) 1.144730211s ago: executing program 3 (id=5777): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x60}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff00001400110064766d727031000000000000000000"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 1.063261537s ago: executing program 1 (id=5778): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1b3a, 0x4) sendmmsg$inet(r0, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)='\"', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002880)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002ec0)="8f", 0x1}], 0x1}}], 0x3, 0x4000805) 798.140846ms ago: executing program 1 (id=5779): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 645.155969ms ago: executing program 1 (id=5780): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 620.371283ms ago: executing program 3 (id=5781): syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x40, 0xf, 0xea, 0x8, 0x1397, 0xbd, 0xd254, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8c, 0x58, 0x73}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000600", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 385.031319ms ago: executing program 1 (id=5782): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983e, 0x800, 0x1003, 0x2db}, &(0x7f0000000240)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000340)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x179a, 0xcba2, 0x49, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 289.789862ms ago: executing program 2 (id=5783): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1, 0xfff1}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 27.729072ms ago: executing program 1 (id=5784): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f00000005c0)=@canfd={{}, 0xff, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9926ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x0) 0s ago: executing program 2 (id=5785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) kernel console output (not intermixed with test programs): write submit urb error = -90 [ 373.937422][ T5898] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 373.952973][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 373.987460][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.021682][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.049791][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.087645][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.108208][ T5898] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 374.115688][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 374.133298][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 374.142193][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.152516][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.157120][ T10] usb 4-1: USB disconnect, device number 37 [ 374.187076][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.206798][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.216967][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.228693][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.236600][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.246209][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.257875][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.265905][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.298453][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.314165][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.322659][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.331791][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.359304][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.372393][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.389881][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.421644][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.441423][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.457352][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.485662][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.503965][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.515635][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.547335][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.570050][ T5898] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 374.588268][ T5898] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 374.606862][ T5898] usb 5-1: Product: syz [ 374.612977][ T5898] usb 5-1: Manufacturer: syz [ 374.624481][ T5898] usb 5-1: SerialNumber: syz [ 374.652450][ T5898] usb 5-1: config 0 descriptor?? [ 374.669322][ T5898] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 374.897705][ T52] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 374.932483][ T5898] usb 5-1: USB disconnect, device number 42 [ 374.943222][ T5898] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 375.059014][ T52] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.068031][ T52] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 375.081687][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.090831][ T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 375.102427][ T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 375.115815][ T52] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.125699][ T52] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.134104][ T52] usb 2-1: Product: syz [ 375.138430][ T52] usb 2-1: Manufacturer: syz [ 375.151817][ T52] cdc_wdm 2-1:1.0: skipping garbage [ 375.157044][ T52] cdc_wdm 2-1:1.0: skipping garbage [ 375.164395][ T52] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 375.170582][ T52] cdc_wdm 2-1:1.0: Unknown control protocol [ 375.937613][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 376.117580][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 376.128523][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 376.146919][ T10] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 376.156378][ T10] usb 4-1: Product: syz [ 376.161535][ T10] usb 4-1: Manufacturer: syz [ 376.166367][ T10] usb 4-1: SerialNumber: syz [ 376.177000][ T10] usb 4-1: config 0 descriptor?? [ 376.393267][ T10] usb 4-1: USB disconnect, device number 38 [ 376.556258][T13993] dummy0: entered promiscuous mode [ 376.568399][T13993] dummy0: entered allmulticast mode [ 377.344554][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3629'. [ 377.354204][T14016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3629'. [ 377.381669][T14016] vlan2: entered allmulticast mode [ 377.394589][T14016] macvtap0: entered allmulticast mode [ 377.400796][T14016] veth0_macvtap: entered allmulticast mode [ 377.634320][ T5894] usb 2-1: USB disconnect, device number 34 [ 378.561868][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568535][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.668955][T14052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3643'. [ 381.623996][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'. [ 381.982570][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 382.137416][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 382.147281][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.160750][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.184634][ T10] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 382.201975][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.233806][ T10] usb 2-1: config 0 descriptor?? [ 382.688915][ T10] gt683r_led 0003:1770:FF00.001D: ignoring exceeding usage max [ 382.720670][ T10] gt683r_led 0003:1770:FF00.001D: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 382.901236][ T9] usb 2-1: USB disconnect, device number 35 [ 382.923481][ T5896] gt683r_led 0003:1770:FF00.001D: failed to send set report request: -19 [ 382.951106][ T5896] gt683r_led 0003:1770:FF00.001D: failed to send set report request: -19 [ 383.366375][T14163] netlink: 692 bytes leftover after parsing attributes in process `syz.0.3691'. [ 383.678026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.057020][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 384.057040][ T30] audit: type=1326 audit(1744492056.489:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14155 comm="syz.3.3688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 384.125995][ T30] audit: type=1326 audit(1744492056.489:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14155 comm="syz.3.3688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 386.061091][T14234] veth1_vlan: left promiscuous mode [ 387.007499][ T30] audit: type=1326 audit(1744492059.439:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.4.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 387.087336][ T30] audit: type=1326 audit(1744492059.439:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.4.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 387.179116][ T30] audit: type=1326 audit(1744492059.479:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.4.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 387.279232][ T30] audit: type=1326 audit(1744492059.479:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.4.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 387.363001][ T30] audit: type=1326 audit(1744492059.479:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.4.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 387.442937][ T30] audit: type=1326 audit(1744492059.509:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.4.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 387.548235][ T30] audit: type=1326 audit(1744492059.509:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.4.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 387.614508][ T30] audit: type=1326 audit(1744492059.509:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.4.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 388.490905][T14314] program syz.1.3758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.552013][T14318] program syz.1.3758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.289362][ T52] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 389.457559][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 389.548320][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 389.598428][ T52] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 389.627410][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.657867][ T52] usb 4-1: Product: syz [ 389.662094][ T52] usb 4-1: Manufacturer: syz [ 389.698438][ T52] usb 4-1: SerialNumber: syz [ 389.719075][ T52] usb 4-1: config 0 descriptor?? [ 390.161220][ T52] gs_usb 4-1:0.0: Configuring for 3 interfaces [ 390.600725][ T52] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 390.690879][ T52] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 390.948758][ T52] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 391.008333][ T52] usb 4-1: USB disconnect, device number 39 [ 392.131422][T14418] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3807'. [ 392.377321][ T9] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 392.458570][T14432] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3813'. [ 392.570819][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 392.592548][ T9] usb 5-1: config 0 has no interface number 0 [ 392.616485][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.655063][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 392.697341][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 392.738981][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 392.769860][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 392.790880][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 392.805614][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 392.817313][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.858032][ T9] usb 5-1: config 0 descriptor?? [ 392.887060][T14419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 392.917493][T14419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 392.941444][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 393.210292][ T9] usb 5-1: USB disconnect, device number 43 [ 393.216298][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 393.261541][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 393.741239][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 393.785945][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 393.785963][ T30] audit: type=1326 audit(1744492066.219:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14480 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 393.814914][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.857328][ T30] audit: type=1326 audit(1744492066.259:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14480 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 393.899004][ T30] audit: type=1326 audit(1744492066.269:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14480 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 393.941299][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.966581][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 393.980881][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.990280][ T30] audit: type=1326 audit(1744492066.269:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14480 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 394.019901][ T9] usb 2-1: Product: syz [ 394.024119][ T9] usb 2-1: Manufacturer: syz [ 394.041967][ T9] usb 2-1: SerialNumber: syz [ 394.086678][ T30] audit: type=1326 audit(1744492066.269:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14480 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 394.283725][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 394.468373][ T5898] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 394.496624][ T5896] usb 2-1: USB disconnect, device number 36 [ 394.508030][ T5896] usblp0: removed [ 394.652065][ T5898] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 394.685758][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.744633][ T5898] usb 5-1: Product: syz [ 394.765691][ T5898] usb 5-1: Manufacturer: syz [ 394.791044][ T5898] usb 5-1: SerialNumber: syz [ 394.814275][ T5898] usb 5-1: config 0 descriptor?? [ 394.851081][ T5898] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 044 [ 395.478545][ T5898] i2c i2c-1: failure reading functionality [ 395.500501][ T5898] i2c i2c-1: connected i2c-tiny-usb device [ 395.519359][ T5898] usb 5-1: USB disconnect, device number 44 [ 395.587747][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 395.787579][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 395.809178][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.847457][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.923924][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.973684][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 396.036606][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 396.043664][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 396.054364][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.098162][ T9] usb 2-1: config 0 descriptor?? [ 396.177804][T14523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3854'. [ 396.472844][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3859'. [ 396.524692][ T9] hid (null): invalid report_size 1048743551 [ 396.550607][ T9] hid (null): report_id 29447 is invalid [ 396.626252][T14537] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3861'. [ 396.651449][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.001E/input/input39 [ 396.678570][T14537] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3861'. [ 396.854626][ T9] kye 0003:0458:5010.001E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 396.897149][T14546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.940892][ T9] usb 2-1: USB disconnect, device number 37 [ 397.699091][T14574] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 397.737357][T14574] netlink: 'syz.3.3879': attribute type 2 has an invalid length. [ 397.748998][T14576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3880'. [ 397.778711][T14577] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 397.786506][T14577] netlink: 'syz.3.3879': attribute type 2 has an invalid length. [ 397.800286][T14576] netem: unknown loss type 13 [ 397.805743][T14576] netem: change failed [ 397.993964][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3881'. [ 398.757312][ T5894] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 398.927348][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 398.944956][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3889'. [ 398.945383][ T5894] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 398.974368][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.999112][ T5894] usb 4-1: Product: syz [ 399.003406][ T5894] usb 4-1: Manufacturer: syz [ 399.017299][ T5894] usb 4-1: SerialNumber: syz [ 399.039627][ T5894] usb 4-1: config 0 descriptor?? [ 399.287681][ T5894] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 399.759601][ T30] audit: type=1326 audit(1744492072.199:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.2.3898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18c858d169 code=0x0 [ 399.903210][ T5894] usb write operation failed. (-71) [ 399.924715][ T5894] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 399.936400][ T5894] dvbdev: DVB: registering new adapter (Terratec H7) [ 399.953056][ T5894] usb 4-1: media controller created [ 399.970796][ T5894] usb read operation failed. (-71) [ 399.995306][ T5894] usb write operation failed. (-71) [ 400.021628][ T5894] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 400.056249][ T5894] usb 4-1: USB disconnect, device number 40 [ 400.183850][T14631] loop2: detected capacity change from 0 to 7 [ 400.193547][ C0] blk_print_req_error: 7 callbacks suppressed [ 400.193566][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.208918][ C0] buffer_io_error: 7 callbacks suppressed [ 400.208935][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.233567][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.242805][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.253201][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.262430][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.271652][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.280893][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.298391][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.307652][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.316794][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.326013][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.346195][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.355416][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.363492][T14631] ldm_validate_partition_table(): Disk read failed. [ 400.372517][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.381740][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.389899][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.399208][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.408364][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.417589][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 400.425903][T14631] Dev loop2: unable to read RDB block 0 [ 400.436162][T14631] loop2: unable to read partition table [ 400.442697][T14631] loop2: partition table beyond EOD, truncated [ 400.449704][T14631] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 400.699533][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 401.178835][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'. [ 401.185740][T14664] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 403.227535][ T52] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 403.388804][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 403.396171][ T52] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.410745][ T52] usb 2-1: config 0 has no interface number 0 [ 403.423656][ T52] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.435545][ T52] usb 2-1: config 0 has no interface number 0 [ 403.449227][ T52] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.463883][ T52] usb 2-1: config 0 has no interface number 0 [ 403.480413][ T52] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 403.494678][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.513039][ T52] usb 2-1: Product: syz [ 403.521155][ T52] usb 2-1: Manufacturer: syz [ 403.536238][ T52] usb 2-1: SerialNumber: syz [ 403.546670][ T52] usb 2-1: config 0 descriptor?? [ 403.561261][ T52] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 403.652244][T14732] input: syz0 as /devices/virtual/input/input40 [ 403.817936][ T52] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 403.843984][ T52] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 403.937659][ T10] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 404.099694][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.117403][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.142572][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.167466][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.175517][ T10] usb 5-1: Product: syz [ 404.187349][ T10] usb 5-1: Manufacturer: syz [ 404.192005][ T10] usb 5-1: SerialNumber: syz [ 404.245459][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 404.257411][ T52] usb 2-1: USB disconnect, device number 38 [ 404.278394][ T52] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 404.315368][ T52] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 404.333695][ T52] quatech2 2-1:0.51: device disconnected [ 404.620600][ T10] usb 5-1: 0:2 : does not exist [ 405.063389][ T10] usb 5-1: USB disconnect, device number 45 [ 405.376247][T14763] syz.3.3961 (14763): drop_caches: 2 [ 406.287351][ T5894] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 406.457657][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 406.485275][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.537413][ T5894] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 406.546511][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.585065][ T5894] usb 5-1: config 0 descriptor?? [ 406.592667][ T30] audit: type=1800 audit(1744492079.039:472): pid=14802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3978" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 406.917359][ T52] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 407.043382][ T5894] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 407.087751][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 407.097826][T14805] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 407.107410][ T52] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.127195][ T52] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 407.134947][ T52] usb 4-1: can't read configurations, error -71 [ 407.435145][ T9] usb 5-1: USB disconnect, device number 46 [ 407.924955][T14835] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 408.322431][T14850] kvm: kvm [14849]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 408.538489][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4004'. [ 408.935359][T14873] usb usb8: usbfs: process 14873 (syz.1.4011) did not claim interface 0 before use [ 409.642847][T14890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.881621][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 410.905219][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4041'. [ 410.950046][T14940] block device autoloading is deprecated and will be removed. [ 412.276669][T14984] tap0: tun_chr_ioctl cmd 1074025677 [ 412.298130][T14984] tap0: linktype set to 6 [ 412.854323][T15008] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 413.557423][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 413.719715][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.742947][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 413.760651][ T10] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 413.790222][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.817748][ T10] usb 5-1: Product: syz [ 413.822315][ T10] usb 5-1: Manufacturer: syz [ 413.826946][ T10] usb 5-1: SerialNumber: syz [ 413.850113][ T10] usb 5-1: config 0 descriptor?? [ 413.869803][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 413.887418][ T30] audit: type=1326 audit(1744492086.319:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 413.965428][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 413.987371][ T30] audit: type=1326 audit(1744492086.319:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.024383][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 414.057387][ T10] usb 5-1: media controller created [ 414.147287][ T30] audit: type=1326 audit(1744492086.319:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.239229][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.257001][ T30] audit: type=1326 audit(1744492086.319:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.335786][ T30] audit: type=1326 audit(1744492086.319:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.426133][ T30] audit: type=1326 audit(1744492086.319:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.458019][ T30] audit: type=1326 audit(1744492086.319:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.462968][ T3408] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 414.487616][ T10] DVB: Unable to find symbol tda10046_attach() [ 414.504951][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 414.540554][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 414.560480][ T30] audit: type=1326 audit(1744492086.319:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.613853][ T30] audit: type=1326 audit(1744492086.319:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.681425][ T30] audit: type=1326 audit(1744492086.319:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15017 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7fc00000 [ 414.688790][ T3408] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.752425][ T3408] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.785527][ T3408] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 414.797408][ T3408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 414.805470][ T3408] usb 4-1: SerialNumber: syz [ 414.997612][ T10] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 415.010191][ T10] usb 5-1: USB disconnect, device number 47 [ 415.094487][ T3408] usb 4-1: 0:2 : does not exist [ 415.180492][ T3408] usb 4-1: USB disconnect, device number 43 [ 415.415421][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.573354][T15101] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4117'. [ 416.616792][T15104] veth1_to_bond: entered allmulticast mode [ 416.634059][T15104] veth1_to_bond: left allmulticast mode [ 417.297499][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 417.470015][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 417.481539][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.497428][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 417.506497][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.529976][ T9] usb 5-1: config 0 descriptor?? [ 417.814117][T15126] ip6gre1: entered allmulticast mode [ 417.968142][ T9] waltop 0003:172F:0037.0020: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.4-1/input0 [ 418.108569][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4130'. [ 418.171191][ T10] usb 5-1: USB disconnect, device number 48 [ 418.347124][T15135] netlink: 'syz.0.4133': attribute type 2 has an invalid length. [ 419.295707][T15033] Set syz1 is full, maxelem 65536 reached [ 420.123774][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 420.433739][T15208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4166'. [ 420.646191][T15217] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 420.646191][T15217] The task syz.2.4168 (15217) triggered the difference, watch for misbehavior. [ 421.408639][ T5898] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 421.569090][ T5898] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 421.591901][ T5898] usb 2-1: config 0 has no interface number 0 [ 421.605182][ T5898] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 421.625999][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.650810][ T5898] usb 2-1: config 0 descriptor?? [ 421.880249][ T52] usb 2-1: USB disconnect, device number 39 [ 422.558518][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 422.739488][ T9] usb 4-1: config 6 has an invalid interface number: 108 but max is 0 [ 422.747971][ T9] usb 4-1: config 6 has no interface number 0 [ 422.754162][ T9] usb 4-1: config 6 interface 108 has no altsetting 0 [ 422.766723][ T9] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 422.777346][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.786289][ T9] usb 4-1: Product: syz [ 422.791350][ T9] usb 4-1: Manufacturer: syz [ 422.796042][ T9] usb 4-1: SerialNumber: syz [ 423.096294][ T9] mos7840 4-1:6.108: required endpoints missing [ 423.130266][ T9] usb 4-1: USB disconnect, device number 44 [ 424.180634][T15312] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 424.186630][T15312] syzkaller0: linktype set to 825 [ 424.678966][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4221'. [ 425.738061][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 425.905409][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.923910][ T9] usb 2-1: config 0 has no interface number 0 [ 425.940694][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.957455][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.977857][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 425.986935][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.016443][ T9] usb 2-1: config 0 descriptor?? [ 426.093548][T15378] sctp: [Deprecated]: syz.0.4241 (pid 15378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.093548][T15378] Use struct sctp_sack_info instead [ 426.492001][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4249'. [ 426.496474][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0021/input/input42 [ 426.676584][ T9] holtek_kbd 0003:04D9:A055.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 426.718543][ T9] usb 2-1: USB disconnect, device number 40 [ 427.188953][T15418] vlan2: entered promiscuous mode [ 427.275495][T15420] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 427.372870][T15424] netlink: 'syz.4.4260': attribute type 4 has an invalid length. [ 427.655417][T15435] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 427.677639][T15435] syzkaller1: linktype set to 512 [ 427.906397][T15449] bond_slave_0: entered promiscuous mode [ 427.912209][T15449] bond_slave_1: entered promiscuous mode [ 427.934271][T15449] bond_slave_0: left promiscuous mode [ 427.939856][T15449] bond_slave_1: left promiscuous mode [ 428.219010][T15462] openvswitch: netlink: IP tunnel TTL not specified. [ 428.394587][T15469] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 428.403268][ T9] IPVS: starting estimator thread 0... [ 428.497449][T15473] IPVS: using max 26 ests per chain, 62400 per kthread [ 429.217457][ T52] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 429.377825][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 429.389327][ T52] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 429.417357][ T52] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 429.456134][ T52] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.494084][ T52] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.543920][ T52] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.557136][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.716670][T15523] netlink: 'syz.0.4307': attribute type 9 has an invalid length. [ 429.724781][T15523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4307'. [ 429.799595][ T52] usb 5-1: GET_CAPABILITIES returned 0 [ 429.805167][ T52] usbtmc 5-1:16.0: can't read capabilities [ 430.009054][ T5896] usb 5-1: USB disconnect, device number 49 [ 430.184452][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4316'. [ 430.194919][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4316'. [ 430.217412][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 430.400213][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.417874][ T9] usb 4-1: config 0 has no interfaces? [ 430.438958][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 430.457986][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.473039][ T9] usb 4-1: Product: syz [ 430.498693][ T9] usb 4-1: Manufacturer: syz [ 430.513781][ T9] usb 4-1: SerialNumber: syz [ 430.539231][ T9] usb 4-1: config 0 descriptor?? [ 430.597344][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4322'. [ 430.770030][ T3408] usb 4-1: USB disconnect, device number 45 [ 430.817018][T15563] ALSA: mixer_oss: invalid OSS volume '' [ 430.934899][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 430.934919][ T30] audit: type=1326 audit(1744492103.359:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c858d169 code=0x7ffc0000 [ 430.964209][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 430.973820][ T30] audit: type=1326 audit(1744492103.369:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c858d169 code=0x7ffc0000 [ 431.003197][ T30] audit: type=1326 audit(1744492103.369:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15566 comm="syz.4.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 431.025556][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.059571][ T30] audit: type=1326 audit(1744492103.369:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15566 comm="syz.4.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 431.103962][ T30] audit: type=1326 audit(1744492103.369:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c858d169 code=0x7ffc0000 [ 431.129517][ T9] usb 2-1: config index 0 descriptor too short (expected 20498, got 18) [ 431.140003][ T9] usb 2-1: config 190 has too many interfaces: 57, using maximum allowed: 32 [ 431.165425][ T9] usb 2-1: config 190 has an invalid descriptor of length 29, skipping remainder of the config [ 431.167013][ T30] audit: type=1326 audit(1744492103.369:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c858d169 code=0x7ffc0000 [ 431.196418][ T9] usb 2-1: config 190 has 0 interfaces, different from the descriptor's value: 57 [ 431.233432][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 431.244058][ T30] audit: type=1326 audit(1744492103.369:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c858d169 code=0x7ffc0000 [ 431.267130][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.306516][ T30] audit: type=1326 audit(1744492103.379:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c858d169 code=0x7ffc0000 [ 431.380333][ T30] audit: type=1326 audit(1744492103.379:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c858d169 code=0x7ffc0000 [ 431.388314][T15577] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 431.457521][ T30] audit: type=1326 audit(1744492103.379:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f18c858d169 code=0x7ffc0000 [ 431.503176][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 431.755377][ T9] usb 2-1: USB disconnect, device number 41 [ 433.478023][ T3408] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 433.669118][ T3408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.687268][ T3408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.718173][ T3408] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 433.744226][ T3408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.785684][ T3408] usb 4-1: config 0 descriptor?? [ 434.245634][ T3408] hid-generic 0003:05AC:4262.0022: unbalanced delimiter at end of report description [ 434.328097][ T3408] hid-generic 0003:05AC:4262.0022: probe with driver hid-generic failed with error -22 [ 434.457815][ T3408] usb 4-1: USB disconnect, device number 46 [ 435.015484][T15659] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 435.022424][T15659] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.075143][T15659] vhci_hcd vhci_hcd.0: Device attached [ 435.337674][ T9] usb 34-1: SetAddress Request (2) to port 0 [ 435.344702][ T9] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 435.647381][T15660] vhci_hcd: connection reset by peer [ 435.661289][ T3003] vhci_hcd: stop threads [ 435.666220][ T3003] vhci_hcd: release socket [ 435.692131][ T3003] vhci_hcd: disconnect device [ 436.027398][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 436.207822][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 436.238531][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.257280][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.273180][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4387'. [ 436.282418][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.305667][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 436.345266][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.389302][ T10] usb 2-1: config 0 descriptor?? [ 436.443190][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4390'. [ 436.820766][ T10] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 436.842522][ T10] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 436.870173][ T10] koneplus 0003:1E7D:2E22.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 437.266636][ T3408] usb 2-1: USB disconnect, device number 42 [ 439.696462][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 439.696482][ T30] audit: type=1326 audit(1744492112.129:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15810 comm="syz.3.4439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x0 [ 439.724976][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.978972][T15817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.003422][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.015341][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.400001][ T9] usb 34-1: device descriptor read/8, error -110 [ 440.800162][ T9] usb usb34-port1: attempt power cycle [ 441.077325][ T3408] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 441.247934][ T3408] usb 5-1: Using ep0 maxpacket: 32 [ 441.279247][ T3408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 441.298104][ T3408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 441.319775][ T3408] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.368881][ T3408] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 441.380139][ T3408] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 441.380583][ T9] usb usb34-port1: unable to enumerate USB device [ 441.395756][ T3408] usb 5-1: Product: syz [ 441.403258][ T3408] usb 5-1: Manufacturer: syz [ 441.423393][ T3408] usb 5-1: SerialNumber: syz [ 441.450574][ T3408] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input43 [ 441.463142][T15862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.480362][T15860] pimreg: entered allmulticast mode [ 441.508404][T15860] pimreg: left allmulticast mode [ 441.710146][ T9] usb 5-1: USB disconnect, device number 50 [ 441.750863][ T9] appletouch 5-1:1.0: input: appletouch disconnected [ 441.834790][T15871] netlink: 'syz.1.4467': attribute type 16 has an invalid length. [ 441.865931][T15871] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4467'. [ 441.875921][T15875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4468'. [ 442.747361][ T3408] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 442.911071][ T3408] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.922916][ T3408] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 442.934584][ T3408] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 442.944511][ T3408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.967659][T15900] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 442.980299][ T3408] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.265249][ T5896] usb 2-1: USB disconnect, device number 43 [ 443.802628][ T30] audit: type=1326 audit(1744492116.239:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 443.855693][ T30] audit: type=1326 audit(1744492116.239:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 443.885844][ T30] audit: type=1326 audit(1744492116.239:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 443.930617][ T30] audit: type=1326 audit(1744492116.239:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 443.955398][ T30] audit: type=1326 audit(1744492116.239:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 443.980003][ T30] audit: type=1326 audit(1744492116.239:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 444.009737][ T30] audit: type=1326 audit(1744492116.239:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 444.043717][ T30] audit: type=1326 audit(1744492116.239:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 444.072823][ T30] audit: type=1326 audit(1744492116.239:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15920 comm="syz.4.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 444.343941][T15936] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4494'. [ 444.644959][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4498'. [ 445.878070][T15971] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4510'. [ 445.957321][ T52] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 446.137358][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 446.144793][ T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.183833][ T52] usb 4-1: config 0 has no interfaces? [ 446.212207][ T52] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 446.249299][ T52] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 446.287560][ T52] usb 4-1: Product: syz [ 446.297318][ T52] usb 4-1: Manufacturer: syz [ 446.306937][ T52] usb 4-1: SerialNumber: syz [ 446.331786][ T52] usb 4-1: config 0 descriptor?? [ 446.345297][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'. [ 446.589788][ T3408] usb 4-1: USB disconnect, device number 47 [ 447.594254][T16021] netlink: 'syz.4.4533': attribute type 13 has an invalid length. [ 447.685471][T16025] netlink: 'syz.2.4535': attribute type 15 has an invalid length. [ 448.037677][ T52] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 448.114992][T16039] netlink: 'syz.0.4541': attribute type 3 has an invalid length. [ 448.269820][ T52] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.298048][ T52] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 448.315886][ T52] usb 4-1: can't read configurations, error -71 [ 448.494688][T16051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4546'. [ 448.813164][T16060] overlayfs: missing 'lowerdir' [ 449.758338][T16084] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 450.569460][T16098] tipc: Started in network mode [ 450.574596][T16098] tipc: Node identity ac14140f, cluster identity 4711 [ 450.593148][T16098] tipc: New replicast peer: 255.255.255.255 [ 450.604281][T16098] tipc: Enabled bearer , priority 10 [ 451.560483][T16128] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 451.604245][ T9] tipc: Node number set to 2886997007 [ 451.969283][ T3408] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 452.138105][ T3408] usb 5-1: Using ep0 maxpacket: 16 [ 452.148903][ T3408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 452.173405][ T3408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 452.208194][ T3408] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 452.217398][ T3408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.247813][ T3408] usb 5-1: config 0 descriptor?? [ 452.671123][ T3408] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0x0 [ 452.686498][ T3408] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0x0 [ 452.705272][ T3408] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0x0 [ 452.735942][ T3408] kovaplus 0003:1E7D:2D50.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 452.764716][T16159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4597'. [ 453.069656][ T3408] kovaplus 0003:1E7D:2D50.0024: couldn't init struct kovaplus_device [ 453.084493][ T3408] kovaplus 0003:1E7D:2D50.0024: couldn't install mouse [ 453.108655][ T3408] kovaplus 0003:1E7D:2D50.0024: probe with driver kovaplus failed with error -71 [ 453.137148][ T3408] usb 5-1: USB disconnect, device number 51 [ 454.366855][T16199] syz.4.4614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 454.556786][T16214] program syz.4.4622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.873529][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 455.873549][ T30] audit: type=1326 audit(1744492128.309:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.1.4637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39f698d169 code=0x0 [ 456.215734][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4638'. [ 456.580199][T16270] netlink: 'syz.2.4646': attribute type 1 has an invalid length. [ 456.589099][T16270] netlink: 'syz.2.4646': attribute type 2 has an invalid length. [ 456.638011][ T5896] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 456.757355][ T30] audit: type=1326 audit(1744492129.179:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 456.817369][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 456.837460][ T30] audit: type=1326 audit(1744492129.179:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 456.848398][ T5896] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 456.910729][ T5896] usb 5-1: config 0 has no interface number 0 [ 456.917614][ T30] audit: type=1326 audit(1744492129.189:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 456.937379][ T5896] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.972294][T16286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4652'. [ 456.987355][ T30] audit: type=1326 audit(1744492129.189:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 457.017685][ T5896] usb 5-1: config 0 interface 85 has no altsetting 0 [ 457.062787][ T5896] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 457.073861][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4654'. [ 457.077262][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.089892][ T30] audit: type=1326 audit(1744492129.189:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 457.133781][ T5896] usb 5-1: Product: syz [ 457.154686][ T5896] usb 5-1: Manufacturer: syz [ 457.177086][ T5896] usb 5-1: SerialNumber: syz [ 457.184853][ T30] audit: type=1326 audit(1744492129.189:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 457.223890][ T30] audit: type=1326 audit(1744492129.189:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 457.228484][ T5896] usb 5-1: config 0 descriptor?? [ 457.288164][ T30] audit: type=1326 audit(1744492129.189:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 457.331012][ T30] audit: type=1326 audit(1744492129.189:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2958d169 code=0x7ffc0000 [ 457.389733][T16300] netlink: 'syz.1.4660': attribute type 14 has an invalid length. [ 457.568451][T16302] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 457.937060][ T5896] appletouch 5-1:0.85: Geyser mode initialized. [ 457.957995][ T5896] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input44 [ 458.266600][ T5896] usb 5-1: USB disconnect, device number 52 [ 458.321385][ T5896] appletouch 5-1:0.85: input: appletouch disconnected [ 458.920931][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4681'. [ 458.932802][T16350] netlink: 'syz.0.4681': attribute type 18 has an invalid length. [ 458.941834][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4681'. [ 459.250254][T16363] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 459.394165][T16369] sctp: [Deprecated]: syz.0.4690 (pid 16369) Use of int in maxseg socket option. [ 459.394165][T16369] Use struct sctp_assoc_value instead [ 460.428143][T16402] macvlan0: entered promiscuous mode [ 460.433690][T16402] netlink: 'syz.4.4706': attribute type 1 has an invalid length. [ 460.450275][T16402] netlink: 'syz.4.4706': attribute type 2 has an invalid length. [ 461.597641][ T5896] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 461.784112][ T5896] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 461.799741][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.827060][ T5896] usb 2-1: Product: syz [ 461.846704][ T5896] usb 2-1: Manufacturer: syz [ 461.864364][ T5896] usb 2-1: SerialNumber: syz [ 461.885023][ T5896] usb 2-1: config 0 descriptor?? [ 461.916589][ T5896] ch341 2-1:0.0: ch341-uart converter detected [ 462.715890][ T5896] usb 2-1: failed to send control message: -71 [ 462.737497][ T5896] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 462.756760][ T5896] usb 2-1: USB disconnect, device number 44 [ 462.771488][ T5896] ch341 2-1:0.0: device disconnected [ 463.047317][ T5894] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 463.197455][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 463.206008][ T5894] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 463.216301][ T5894] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 463.235555][ T5894] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 463.263459][ T5894] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 463.288113][ T5894] usb 4-1: config 250 has no interface number 0 [ 463.309064][ T5894] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 463.331428][ T5894] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 463.342357][ T5894] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 463.356914][ T5894] usb 4-1: config 250 interface 228 has no altsetting 0 [ 463.367138][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 463.378077][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 463.387818][ T5894] usb 4-1: Product: syz [ 463.392094][ T5894] usb 4-1: SerialNumber: syz [ 463.415314][ T5894] hub 4-1:250.228: bad descriptor, ignoring hub [ 463.423647][ T5894] hub 4-1:250.228: probe with driver hub failed with error -5 [ 463.635912][ T5894] usblp 4-1:250.228: usblp0: USB Unidirectional printer dev 50 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 463.959607][ T9] usb 4-1: USB disconnect, device number 50 [ 463.974815][ T9] usblp0: removed [ 464.421238][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4751'. [ 464.551623][T16506] netlink: 'syz.3.4753': attribute type 17 has an invalid length. [ 464.597516][T16506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.605695][T16506] batadv_slave_0: entered promiscuous mode [ 464.708939][T16510] netlink: 'syz.4.4755': attribute type 11 has an invalid length. [ 464.966332][T16517] team_slave_0: entered promiscuous mode [ 464.972676][T16517] team_slave_1: entered promiscuous mode [ 465.036424][T16522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 465.305675][ T55] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 465.657816][ T5896] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 465.792518][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4776'. [ 465.830530][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.861574][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.883412][ T5896] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 465.900576][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.927887][ T5896] usb 5-1: config 0 descriptor?? [ 466.216377][T16567] random: crng reseeded on system resumption [ 466.364759][ T5896] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 466.391797][ T5896] cm6533_jd 0003:0D8C:0022.0025: item fetching failed at offset 4/5 [ 466.418422][ T5896] cm6533_jd 0003:0D8C:0022.0025: parse failed [ 466.445164][ T5896] cm6533_jd 0003:0D8C:0022.0025: probe with driver cm6533_jd failed with error -22 [ 466.588480][ T52] usb 5-1: USB disconnect, device number 53 [ 467.207695][ T52] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 467.372391][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 467.380998][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 467.383552][T16603] netlink: 'syz.4.4799': attribute type 3 has an invalid length. [ 467.409709][ T52] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 467.431014][ T52] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 467.440647][ T52] usb 2-1: Product: syz [ 467.444935][ T52] usb 2-1: Manufacturer: syz [ 467.451521][ T52] usb 2-1: SerialNumber: syz [ 467.463713][ T52] usb 2-1: config 0 descriptor?? [ 467.470344][T16589] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 467.487999][ T52] hub 2-1:0.0: bad descriptor, ignoring hub [ 467.494205][ T52] hub 2-1:0.0: probe with driver hub failed with error -5 [ 467.827659][ T5896] usb 2-1: USB disconnect, device number 45 [ 467.993920][T16627] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 468.004783][T16627] syzkaller0: linktype set to 768 [ 468.125204][T16631] GUP no longer grows the stack in syz.4.4813 (16631): 200000004000-20000000a000 (200000001000) [ 468.140442][T16631] CPU: 1 UID: 0 PID: 16631 Comm: syz.4.4813 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 468.140474][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.140492][T16631] Call Trace: [ 468.140501][T16631] [ 468.140510][T16631] dump_stack_lvl+0x241/0x360 [ 468.140553][T16631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.140585][T16631] ? __pfx__printk+0x10/0x10 [ 468.140610][T16631] ? find_vma+0xfa/0x170 [ 468.140657][T16631] __get_user_pages+0x3b46/0x4180 [ 468.140732][T16631] ? __pfx___get_user_pages+0x10/0x10 [ 468.140762][T16631] ? __gup_longterm_locked+0xd86/0x1850 [ 468.140795][T16631] ? __pfx_down_read_killable+0x10/0x10 [ 468.140827][T16631] ? __lock_acquire+0xad5/0xd80 [ 468.140868][T16631] __gup_longterm_locked+0xec1/0x1850 [ 468.140937][T16631] ? try_get_folio+0xfd/0x6a0 [ 468.140960][T16631] ? try_grab_folio_fast+0x1d6/0x500 [ 468.140980][T16631] ? __pfx___gup_longterm_locked+0x10/0x10 [ 468.141030][T16631] ? gup_fast_fallback+0x203f/0x2980 [ 468.141066][T16631] gup_fast_fallback+0x2227/0x2980 [ 468.141134][T16631] ? __pfx_gup_fast_fallback+0x10/0x10 [ 468.141167][T16631] ? finish_task_switch+0x1e5/0x870 [ 468.141186][T16631] ? lockdep_hardirqs_on+0x9d/0x150 [ 468.141216][T16631] ? rcu_is_watching+0x15/0xb0 [ 468.141243][T16631] ? trace_sched_exit_tp+0x3c/0x120 [ 468.141264][T16631] ? __schedule+0x1ba6/0x5240 [ 468.141302][T16631] ? __lock_acquire+0xad5/0xd80 [ 468.141327][T16631] ? is_valid_gup_args+0x124/0x200 [ 468.141362][T16631] get_user_pages_fast+0xd2/0x160 [ 468.141397][T16631] ? __pfx_get_user_pages_fast+0x10/0x10 [ 468.141430][T16631] ? rcu_is_watching+0x15/0xb0 [ 468.141457][T16631] ? trace_contention_end+0x3c/0x120 [ 468.141491][T16631] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 468.141533][T16631] ? __se_sys_vmsplice+0x4bc/0x1430 [ 468.141569][T16631] iov_iter_get_pages2+0xd1/0x130 [ 468.141602][T16631] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 468.141654][T16631] __se_sys_vmsplice+0x6c6/0x1430 [ 468.141711][T16631] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 468.141742][T16631] ? __pfx_futex_wait+0x10/0x10 [ 468.141839][T16631] ? do_syscall_64+0xb6/0x230 [ 468.141869][T16631] do_syscall_64+0xf3/0x230 [ 468.141896][T16631] ? clear_bhb_loop+0x45/0xa0 [ 468.141920][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.141946][T16631] RIP: 0033:0x7f005f38d169 [ 468.141970][T16631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.141989][T16631] RSP: 002b:00007f0060272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 468.142012][T16631] RAX: ffffffffffffffda RBX: 00007f005f5a5fa0 RCX: 00007f005f38d169 [ 468.142035][T16631] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 468.142049][T16631] RBP: 00007f005f40e990 R08: 0000000000000000 R09: 0000000000000000 [ 468.142062][T16631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.142075][T16631] R13: 0000000000000000 R14: 00007f005f5a5fa0 R15: 00007f005f6cfa28 [ 468.142108][T16631] [ 468.757430][ T5896] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 468.908927][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 468.917533][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 468.933386][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 468.945555][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.975169][ T5896] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.993633][ T5896] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 469.002841][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.253175][ T5896] usb 5-1: GET_CAPABILITIES returned 0 [ 469.274476][ T5896] usbtmc 5-1:16.0: can't read capabilities [ 469.362219][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 469.372429][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 469.381710][ T55] Bluetooth: hci1: hardware error 0x00 [ 469.435564][T16670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4832'. [ 469.489939][ T5894] usb 5-1: USB disconnect, device number 54 [ 470.177455][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 470.352551][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.382429][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.409579][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 470.416333][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 470.444007][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.465386][ T10] usb 2-1: config 0 descriptor?? [ 471.096635][ T10] usb 2-1: USB disconnect, device number 46 [ 471.401795][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 471.401814][ T30] audit: type=1326 audit(1744492143.839:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.431883][ T30] audit: type=1326 audit(1744492143.839:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.472777][ T30] audit: type=1326 audit(1744492143.839:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.495061][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.518255][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 471.542033][ T30] audit: type=1326 audit(1744492143.839:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.599867][ T30] audit: type=1326 audit(1744492143.849:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.657765][ T30] audit: type=1326 audit(1744492143.849:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.699185][ T30] audit: type=1326 audit(1744492143.849:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.721960][ T30] audit: type=1326 audit(1744492143.899:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.744321][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.750777][ T30] audit: type=1326 audit(1744492143.909:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f005f3bfa25 code=0x7ffc0000 [ 471.773412][ T30] audit: type=1326 audit(1744492143.899:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16728 comm="syz.4.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 471.795753][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.906472][T16781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.571849][T16809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.063205][T16829] netlink: 'syz.2.4901': attribute type 10 has an invalid length. [ 474.110208][T16829] syz_tun: entered promiscuous mode [ 475.117727][ T5896] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 475.310740][ T5896] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 475.326464][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.336128][ T5896] usb 2-1: Product: syz [ 475.345603][ T5896] usb 2-1: Manufacturer: syz [ 475.354985][ T5896] usb 2-1: SerialNumber: syz [ 475.385382][ T5896] usb 2-1: config 0 descriptor?? [ 475.403231][ T5896] gspca_main: touptek-2.14.0 probing 0547:6801 [ 475.652656][ T5898] usb 2-1: USB disconnect, device number 47 [ 475.951788][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4930'. [ 476.428030][ T5898] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 476.527329][ T5894] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 476.600321][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 476.612458][ T5898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 476.627371][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 476.654097][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.676380][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 476.690406][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 476.699014][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.713579][ T5894] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 476.724068][ T5898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 476.731839][ T5894] usb 2-1: config 0 has no interface number 0 [ 476.738962][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 476.757349][ T5894] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.768895][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.787636][ T5894] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 476.801029][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 476.812712][ T5894] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 476.824960][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.836586][ T5894] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.852091][ T5898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 476.867317][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 476.887476][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.901489][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 476.912900][ T5894] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 476.922803][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.931909][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.947308][ T5894] usb 2-1: Product: syz [ 476.951532][ T5894] usb 2-1: Manufacturer: syz [ 476.965016][ T5898] usb 4-1: string descriptor 0 read error: -22 [ 476.972995][ T5894] usb 2-1: SerialNumber: syz [ 476.982144][ T5898] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 476.998672][ T5894] usb 2-1: config 0 descriptor?? [ 477.007273][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.052415][ T5898] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 477.251334][ T5894] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 477.304662][ T10] usb 4-1: USB disconnect, device number 51 [ 477.462173][ T3408] usb 2-1: USB disconnect, device number 48 [ 477.825592][ C1] hrtimer: interrupt took 15511 ns [ 477.999596][T16969] netlink: 'syz.3.4964': attribute type 10 has an invalid length. [ 478.013612][T16969] syz_tun: entered promiscuous mode [ 478.071831][T16969] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 478.746131][T16996] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 478.909472][T17000] Invalid logical block size (-1) [ 479.052712][T17006] vivid-007: ================= START STATUS ================= [ 479.083555][T17006] vivid-007: Enable Output Cropping: true grabbed [ 479.123454][T17006] vivid-007: Enable Output Composing: true grabbed [ 479.148024][T17006] vivid-007: Enable Output Scaler: true grabbed [ 479.148081][T17009] syz_tun: entered allmulticast mode [ 479.175930][T17006] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 479.183740][T17008] syz_tun: left allmulticast mode [ 479.209462][T17006] vivid-007: Transmit Mode: HDMI grabbed [ 479.215348][T17006] vivid-007: Hotplug Present: 0x00000000 [ 479.247676][T17006] vivid-007: RxSense Present: 0x00000000 [ 479.263862][T17006] vivid-007: EDID Present: 0x00000000 [ 479.284007][T17006] vivid-007: ================== END STATUS ================== [ 479.552521][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4987'. [ 479.976273][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 479.976294][ T30] audit: type=1326 audit(1744492152.409:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 480.025891][ T30] audit: type=1326 audit(1744492152.409:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 480.067373][ T30] audit: type=1326 audit(1744492152.459:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 480.132485][ T30] audit: type=1326 audit(1744492152.459:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 480.193404][ T30] audit: type=1326 audit(1744492152.459:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 480.230480][ T30] audit: type=1326 audit(1744492152.459:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 480.256194][ T30] audit: type=1326 audit(1744492152.459:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 480.338708][ T30] audit: type=1326 audit(1744492152.459:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f005f38d169 code=0x7ffc0000 [ 480.377346][ T30] audit: type=1326 audit(1744492152.459:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f005f38d169 code=0x0 [ 480.438569][ T30] audit: type=1326 audit(1744492152.509:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.4.4992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f005f38d169 code=0x0 [ 481.457316][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 481.637312][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 481.676359][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.696635][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 481.712419][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 481.733357][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.760380][ T9] usb 2-1: config 0 descriptor?? [ 482.094544][T17076] vivid-001: ================= START STATUS ================= [ 482.103934][T17076] vivid-001: Radio HW Seek Mode: Bounded [ 482.111338][T17076] vivid-001: Radio Programmable HW Seek: false [ 482.118157][T17076] vivid-001: RDS Rx I/O Mode: Block I/O [ 482.124225][T17076] vivid-001: Generate RBDS Instead of RDS: false [ 482.131582][T17076] vivid-001: RDS Reception: true [ 482.136612][T17076] vivid-001: RDS Program Type: 0 inactive [ 482.144269][T17076] vivid-001: RDS PS Name: inactive [ 482.153479][T17076] vivid-001: RDS Radio Text: inactive [ 482.163865][T17076] vivid-001: RDS Traffic Announcement: false inactive [ 482.175258][T17076] vivid-001: RDS Traffic Program: false inactive [ 482.184835][ T9] hid (null): unknown global tag 0xd [ 482.196703][ T9] hid (null): global environment stack underflow [ 482.204173][ T9] hid (null): global environment stack underflow [ 482.210960][T17076] vivid-001: RDS Music: false inactive [ 482.217152][ T9] hid (null): unknown global tag 0xe [ 482.225063][ T9] hid (null): unknown global tag 0xc [ 482.231938][T17076] vivid-001: ================== END STATUS ================== [ 482.259676][ T9] hid (null): unknown global tag 0xd [ 482.385822][ T9] cougar 0003:060B:500A.0027: unexpected long global item [ 482.430988][ T9] cougar 0003:060B:500A.0027: parse failed [ 482.452525][ T9] cougar 0003:060B:500A.0027: probe with driver cougar failed with error -22 [ 482.504761][ T9] usb 2-1: USB disconnect, device number 49 [ 482.800610][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.828002][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.836563][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.852984][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.872023][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.879636][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.895818][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.913569][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.932664][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.950632][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.967440][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.980488][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 482.993906][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 483.012867][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 483.032426][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 483.052658][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 483.067384][ T5894] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 483.091579][ T5894] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz0 [ 483.348670][ T5898] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 483.531463][ T5898] usb 4-1: config 0 has no interfaces? [ 483.549633][ T5898] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 483.567275][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.590938][ T5898] usb 4-1: Product: syz [ 483.595251][ T5898] usb 4-1: Manufacturer: syz [ 483.637528][ T5898] usb 4-1: SerialNumber: syz [ 483.653429][ T5898] usb 4-1: config 0 descriptor?? [ 483.719713][T17109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5027'. [ 483.983960][ T3408] usb 4-1: USB disconnect, device number 52 [ 483.988172][T17121] netlink: 'syz.4.5032': attribute type 1 has an invalid length. [ 484.012215][T17121] netlink: 'syz.4.5032': attribute type 2 has an invalid length. [ 484.975736][T17153] batadv_slave_1: entered promiscuous mode [ 485.017607][T17151] batadv_slave_1: left promiscuous mode [ 485.277701][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'. [ 485.299464][T17164] tipc: Bearer : already 2 bearers with priority 10 [ 485.345888][T17164] tipc: Bearer : trying with adjusted priority [ 485.379881][T17164] tipc: Enabled bearer , priority 9 [ 486.772309][T17215] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 488.678620][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 488.850848][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 488.884706][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.909570][ T9] usb 5-1: config 0 descriptor?? [ 488.926567][ T9] cp210x 5-1:0.0: cp210x converter detected [ 489.213316][T17303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5113'. [ 489.232801][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5113'. [ 489.351990][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 489.376078][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 489.406689][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 489.429320][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 489.476392][ T9] usb 5-1: USB disconnect, device number 55 [ 489.488309][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 489.528074][ T9] cp210x 5-1:0.0: device disconnected [ 489.645404][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5118'. [ 490.140190][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5121'. [ 493.088460][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 493.243610][T17402] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5157'. [ 493.267382][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 493.279482][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.298618][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.319515][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 493.338627][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 493.363549][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.386583][ T9] usb 2-1: config 0 descriptor?? [ 493.727315][ T3408] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 493.822937][T17387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.837774][T17387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.898498][ T3408] usb 4-1: Using ep0 maxpacket: 16 [ 493.905708][ T3408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.927032][ T3408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.960167][ T3408] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 493.987297][ T3408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.016811][ T3408] usb 4-1: config 0 descriptor?? [ 494.118672][ T5898] usb 2-1: USB disconnect, device number 50 [ 494.255654][T17434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.460201][ T3408] hid-multitouch 0003:1FD2:6007.002A: unknown main item tag 0x0 [ 494.487532][ T3408] hid-multitouch 0003:1FD2:6007.002A: unknown main item tag 0x0 [ 494.497703][ T3408] hid-multitouch 0003:1FD2:6007.002A: unknown global tag 0xe [ 494.505137][ T3408] hid-multitouch 0003:1FD2:6007.002A: item 0 0 1 14 parsing failed [ 494.539457][ T3408] hid-multitouch 0003:1FD2:6007.002A: probe with driver hid-multitouch failed with error -22 [ 494.686709][ T9] usb 4-1: USB disconnect, device number 53 [ 496.686822][T17519] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5213'. [ 496.834445][T17523] syz.1.5214 (17523) used greatest stack depth: 17816 bytes left [ 496.955118][T17527] netlink: 'syz.4.5218': attribute type 10 has an invalid length. [ 496.971057][T17527] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5218'. [ 498.186636][T17574] lo: entered promiscuous mode [ 498.243319][T17574] lo: left promiscuous mode [ 498.549713][ T30] audit: type=1326 audit(1744492170.989:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.4.5249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f005f38d169 code=0x0 [ 498.597358][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 498.747616][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 498.759062][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 498.770395][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.780603][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.792094][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.803290][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.816809][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.826079][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.043688][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 499.050245][ T9] usbtmc 4-1:16.0: can't read capabilities [ 499.262930][ T9] usb 4-1: USB disconnect, device number 54 [ 499.707678][ T5898] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 499.797061][T17617] sctp: [Deprecated]: syz.1.5258 (pid 17617) Use of int in maxseg socket option. [ 499.797061][T17617] Use struct sctp_assoc_value instead [ 499.843357][T17610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 499.857935][T17610] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 499.869327][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 499.882223][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.883920][T17610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 499.908510][T17610] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 499.909673][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.926824][T17610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 499.937009][ T5898] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 499.947176][T17610] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 499.963305][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.967001][T17610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 499.978777][T17610] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 499.994832][ T5898] usb 5-1: config 0 descriptor?? [ 500.118045][T17626] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.5262'. [ 500.237475][ T5896] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 500.417409][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 500.441757][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.452798][ T5898] microsoft 0003:045E:009D.002B: unknown main item tag 0x0 [ 500.468978][ T5898] microsoft 0003:045E:009D.002B: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0 [ 500.472774][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.510206][ T5898] microsoft 0003:045E:009D.002B: no inputs found [ 500.527424][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 500.530068][ T5898] microsoft 0003:045E:009D.002B: could not initialize ff, continuing anyway [ 500.552708][ T5896] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 500.570220][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.618573][ T5896] usb 2-1: config 0 descriptor?? [ 500.724593][ T9] usb 5-1: USB disconnect, device number 56 [ 501.120066][ T5896] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.002C/input/input46 [ 501.215874][ T5896] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.002C/input/input47 [ 501.233464][ T30] audit: type=1800 audit(1744492173.659:580): pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5272" name="memory.events.local" dev="tmpfs" ino=5066 res=0 errno=0 [ 501.295335][ T5896] kye 0003:0458:5011.002C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 501.443533][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.450173][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.520915][T17665] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 501.692803][ T5894] usb 2-1: USB disconnect, device number 51 [ 501.758759][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 501.924485][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 501.997439][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 502.004715][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 502.296710][T17685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.789377][ T30] audit: type=1400 audit(1744492175.229:581): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A5B0A868099E9E4714992EA56D3D33D9F22BA3B8953050E6B92D3D79CE8CEB6266B185B6C6BE92FCF07FAF29141F525F2E0B7531E2063B7A6345C67A555F26BF2EF0FBC7006A89C01A5517E64A10B791358670701B411733C3A pid=17703 comm="syz.2.5300" [ 503.153785][T17716] kvm: kvm [17715]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000015) = 0x0 [ 503.399303][ T5893] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 503.579723][ T5893] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 503.612497][ T5893] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 503.628538][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.664189][ T5893] usb 2-1: Product: syz [ 503.668525][ T5893] usb 2-1: Manufacturer: syz [ 503.673167][ T5893] usb 2-1: SerialNumber: syz [ 503.708411][ T5893] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 503.837490][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 504.007585][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 504.086272][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 504.092547][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 504.281012][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5317'. [ 504.330916][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5317'. [ 504.404216][T17746] erspan0: entered promiscuous mode [ 504.434580][T17746] erspan0: left promiscuous mode [ 504.552344][ T5893] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 504.603848][ T5893] usb 2-1: USB disconnect, device number 52 [ 505.800485][T17789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 505.806644][T17789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.824775][T17789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 505.832987][T17789] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 505.943900][ T30] audit: type=1326 audit(1744492178.379:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 505.990208][ T30] audit: type=1326 audit(1744492178.379:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.037436][ T30] audit: type=1326 audit(1744492178.379:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.087667][ T30] audit: type=1326 audit(1744492178.379:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.123757][ T30] audit: type=1326 audit(1744492178.379:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.166979][ T30] audit: type=1326 audit(1744492178.379:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.189401][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.220337][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5349'. [ 506.231008][ T30] audit: type=1326 audit(1744492178.379:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.253352][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.266701][ T30] audit: type=1326 audit(1744492178.379:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.266947][T17814] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 506.289118][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.294757][ T30] audit: type=1326 audit(1744492178.379:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.333827][ T30] audit: type=1326 audit(1744492178.379:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17803 comm="syz.1.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f39f698d169 code=0x7ffc0000 [ 506.887981][T17835] loop2: detected capacity change from 0 to 7 [ 506.897931][T17835] Dev loop2: unable to read RDB block 7 [ 506.904053][T17835] loop2: unable to read partition table [ 506.917830][T17835] loop2: partition table beyond EOD, truncated [ 506.934831][T17835] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 507.157006][T17844] netlink: 'syz.4.5361': attribute type 5 has an invalid length. [ 507.533980][T17860] macsec4: entered allmulticast mode [ 507.545461][T17860] veth1_macvtap: entered allmulticast mode [ 507.757964][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 507.837527][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 507.843619][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 507.849797][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 508.514951][T17892] loop2: detected capacity change from 0 to 7 [ 508.523758][T17892] Dev loop2: unable to read RDB block 7 [ 508.543127][T17892] loop2: unable to read partition table [ 508.570661][T17892] loop2: partition table beyond EOD, truncated [ 508.587121][T17892] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 508.625454][ T5212] Dev loop2: unable to read RDB block 7 [ 508.635693][ T5212] loop2: unable to read partition table [ 508.654237][ T5212] loop2: partition table beyond EOD, truncated [ 508.977327][ T5894] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 509.130837][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 509.144681][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.160628][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.205897][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 509.240176][ T5894] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 509.257004][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.293172][ T5894] usb 4-1: config 0 descriptor?? [ 509.748206][ T5894] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.002D/input/input48 [ 509.857002][ T5894] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.002D/input/input49 [ 509.931476][ T5894] kye 0003:0458:5011.002D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 510.117944][ T5894] usb 4-1: USB disconnect, device number 55 [ 510.694264][T17960] vxcan1: entered allmulticast mode [ 510.714966][T17960] vxcan1: left allmulticast mode [ 510.865638][T17971] ptrace attach of "./syz-executor exec"[5857] was attempted by "./syz-executor exec"[17971] [ 511.856196][T18007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5435'. [ 511.967888][T18013] netem: change failed [ 512.127552][ T5896] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 512.290624][ T5896] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 512.300670][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.321431][ T5896] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 512.332135][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 512.340425][ T5896] usb 2-1: Product: syz [ 512.344634][ T5896] usb 2-1: Manufacturer: syz [ 512.349379][ T5896] usb 2-1: SerialNumber: syz [ 512.367046][ T5896] usb 2-1: config 0 descriptor?? [ 512.382228][ T5896] usb 2-1: selecting invalid altsetting 0 [ 512.544626][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5447'. [ 512.556770][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5447'. [ 512.633401][ T5894] usb 2-1: USB disconnect, device number 53 [ 512.734003][T18035] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 513.443917][T18059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.399906][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 514.445796][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5471'. [ 514.577446][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 514.593175][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.629373][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.657917][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 514.667015][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.715290][ T9] usb 4-1: config 0 descriptor?? [ 514.733799][ T9] usb 4-1: can't set config #0, error -71 [ 514.757115][ T9] usb 4-1: USB disconnect, device number 56 [ 516.087852][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 516.157633][ T5893] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 516.267433][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 516.283318][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 516.301810][ T9] usb 2-1: config 0 has no interface number 0 [ 516.327317][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 516.337590][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 516.353286][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 516.374041][ T5893] usb 4-1: config 0 has no interfaces? [ 516.382602][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.397469][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.415876][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 516.425147][ T5893] usb 4-1: Product: syz [ 516.435712][ T5893] usb 4-1: Manufacturer: syz [ 516.440563][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.457338][ T5893] usb 4-1: SerialNumber: syz [ 516.463983][ T9] usb 2-1: Product: syz [ 516.477978][ T5893] usb 4-1: config 0 descriptor?? [ 516.483168][ T9] usb 2-1: Manufacturer: syz [ 516.493237][ T9] usb 2-1: SerialNumber: syz [ 516.514557][ T9] usb 2-1: config 0 descriptor?? [ 516.523935][T18129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 516.531838][T18129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 516.736996][ T3408] usb 4-1: USB disconnect, device number 57 [ 516.774143][T18129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 516.795149][T18129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 517.221586][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 517.256156][ T9] asix 2-1:0.251: probe with driver asix failed with error -524 [ 517.485023][ T3408] usb 2-1: USB disconnect, device number 54 [ 517.877530][ T5898] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 518.029500][ T5898] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.074658][T18170] loop6: detected capacity change from 0 to 524287999 [ 518.077567][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 518.111304][ T5898] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 518.138798][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.173064][ T5898] usb 5-1: config 0 descriptor?? [ 518.294848][T18182] netlink: 452 bytes leftover after parsing attributes in process `syz.0.5511'. [ 518.440411][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5512'. [ 518.657949][ T5898] ntrig 0003:1B96:0009.002E: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.4-1/input0 [ 518.838922][ T5898] ntrig 0003:1B96:0009.002E: Firmware version: 0.0.0.0.0 (0000 0000) [ 519.063981][ T5893] usb 5-1: USB disconnect, device number 57 [ 519.431370][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5530'. [ 519.457340][ T52] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 519.618987][ T52] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.647263][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.673310][ T52] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 519.692525][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 519.700722][ T52] usb 2-1: SerialNumber: syz [ 519.950072][ T52] usb 2-1: 0:2 : does not exist [ 520.055929][ T52] usb 2-1: USB disconnect, device number 55 [ 520.258572][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.634952][T18270] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5550'. [ 520.674925][T18268] syzkaller1: entered promiscuous mode [ 520.695425][T18268] syzkaller1: entered allmulticast mode [ 521.040919][T18283] syzkaller1: entered promiscuous mode [ 521.046454][T18283] syzkaller1: entered allmulticast mode [ 521.238202][T18296] raw_sendmsg: syz.0.5561 forgot to set AF_INET. Fix it! [ 521.397384][ T5893] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 521.576843][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 521.597066][ T5893] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 521.616634][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.656597][ T5893] usb 2-1: Product: syz [ 521.670381][ T5893] usb 2-1: Manufacturer: syz [ 521.675043][ T5893] usb 2-1: SerialNumber: syz [ 521.704877][ T5893] usb 2-1: config 0 descriptor?? [ 521.942020][ T5893] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 522.291563][T18326] sctp: [Deprecated]: syz.4.5574 (pid 18326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.291563][T18326] Use struct sctp_sack_info instead [ 522.626413][T18334] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5578'. [ 522.637145][T18334] gretap0: entered promiscuous mode [ 522.652168][T18334] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5578'. [ 522.666144][T18334] 0ªX¹¦D: renamed from gretap0 [ 522.682000][T18334] 0ªX¹¦D: left promiscuous mode [ 522.687103][T18334] 0ªX¹¦D: entered allmulticast mode [ 522.707108][T18334] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 522.756433][ T5893] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 522.797270][ T5893] usb 2-1: USB disconnect, device number 56 [ 524.527433][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 524.708728][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 524.737625][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.761548][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 524.793643][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.828580][ T9] usb 5-1: config 0 descriptor?? [ 525.274599][ T9] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 525.683809][ T3408] usb 5-1: USB disconnect, device number 58 [ 526.385495][T18419] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.397428][ T3408] IPVS: starting estimator thread 0... [ 526.488169][T18421] IPVS: using max 24 ests per chain, 57600 per kthread [ 526.623756][T18429] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.818454][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 526.990677][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 527.022626][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.038747][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 527.066493][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 527.103822][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.136502][ T9] usb 2-1: config 0 descriptor?? [ 527.381603][T18457] loop2: detected capacity change from 0 to 7 [ 527.396057][T18457] Dev loop2: unable to read RDB block 7 [ 527.403146][T18457] loop2: unable to read partition table [ 527.416572][T18457] loop2: partition table beyond EOD, truncated [ 527.423441][T18457] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.570646][T18465] vlan3: entered promiscuous mode [ 527.583619][ T9] hid (null): report_id 0 is invalid [ 527.590280][ T9] hid (null): invalid report_count -737697329 [ 527.805586][ T52] usb 2-1: USB disconnect, device number 57 [ 528.587286][ T52] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 528.739576][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.760916][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.777501][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.796191][ T52] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.807668][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.817524][T18500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5649'. [ 528.830112][ T52] usb 5-1: config 0 descriptor?? [ 529.263915][ T52] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 529.283922][ T52] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 529.301507][T18523] netlink: 'syz.1.5660': attribute type 10 has an invalid length. [ 529.308594][ T52] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 529.312132][T18523] veth1_vlan: entered allmulticast mode [ 529.322797][ T52] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 529.333171][ T52] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 529.350997][T18523] team0: Device veth1_vlan failed to register rx_handler [ 529.355217][ T52] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 529.374123][ T52] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 529.390393][ T52] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 529.609109][ T10] usb 5-1: USB disconnect, device number 59 [ 530.215487][T18543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5670'. [ 530.357398][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 530.527334][ T5894] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 530.545820][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 530.555595][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.581128][ T9] usb 2-1: config 0 descriptor?? [ 530.590424][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 530.677543][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 530.684934][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.698359][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.709694][ T5894] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 530.719104][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.730617][ T5894] usb 5-1: config 0 descriptor?? [ 530.996237][ T9] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 531.177926][ T5894] savu 0003:1E7D:2D5A.0032: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 531.405634][ T9] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 531.469370][ T9] usb 5-1: USB disconnect, device number 60 [ 531.619742][ T10] usb 2-1: USB disconnect, device number 58 [ 532.527439][ T5894] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 532.692598][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 532.706494][ T5894] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 532.725680][ T5894] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.743593][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 532.755988][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.765011][ T5894] usb 2-1: Product: syz [ 532.770221][ T5894] usb 2-1: Manufacturer: syz [ 532.775379][ T5894] usb 2-1: SerialNumber: syz [ 533.018295][ T5894] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 533.136424][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5699'. [ 533.164040][T18614] 8021q: adding VLAN 0 to HW filter on device team1 [ 533.234104][ T10] usb 2-1: USB disconnect, device number 59 [ 533.246684][ T10] usblp0: removed [ 534.128456][T18640] IPVS: stopping backup sync thread 18643 ... [ 534.134682][T18643] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 534.217453][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 534.393309][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 534.411557][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 534.424233][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 534.436144][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 534.456902][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 534.487452][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 534.501381][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 534.515080][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 534.524201][ T10] usb 4-1: Product: syz [ 534.533491][ T10] usb 4-1: Manufacturer: syz [ 534.539233][ T10] usb 4-1: SerialNumber: syz [ 534.552025][ T10] usb 4-1: config 0 descriptor?? [ 534.570905][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 534.600115][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 534.610635][T18662] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 534.912033][ T10] usb 4-1: USB disconnect, device number 58 [ 534.918144][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 534.924500][T18634] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 534.938550][T18668] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 534.962409][ T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 535.339061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 535.437918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 535.687714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 535.707890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 535.716665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 535.725517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 535.917714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 536.032863][T18688] macvlan0: entered promiscuous mode [ 536.040693][T18688] batadv0: entered promiscuous mode [ 536.046789][T18688] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 536.059435][T18688] Cannot create hsr debugfs directory [ 536.075328][T18688] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 536.211776][T18699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5732'. [ 536.311538][T18704] input: syz1 as /devices/virtual/input/input50 [ 536.741800][T18720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5741'. [ 536.801848][T18722] syzkaller1: entered promiscuous mode [ 536.808453][T18722] syzkaller1: entered allmulticast mode [ 536.880075][T18724] netlink: 'syz.2.5743': attribute type 10 has an invalid length. [ 536.902039][T18724] veth1_vlan: entered allmulticast mode [ 536.942548][T18724] team0: Device veth1_vlan failed to register rx_handler [ 537.197620][ T52] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 537.365552][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 537.378170][ T52] usb 2-1: config 0 has no interfaces? [ 537.383914][ T52] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 537.410248][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.435130][ T52] usb 2-1: config 0 descriptor?? [ 537.637554][ T5894] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 537.714309][ T10] usb 2-1: USB disconnect, device number 60 [ 537.798866][ T5894] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 537.810068][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.821375][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.832255][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 537.846848][ T5894] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 537.856069][ T5894] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 537.864634][ T5894] usb 4-1: Manufacturer: syz [ 537.872301][ T5894] usb 4-1: config 0 descriptor?? [ 538.289330][ T5894] appleir 0003:05AC:8243.0033: unknown main item tag 0x0 [ 538.300856][ T5894] appleir 0003:05AC:8243.0033: No inputs registered, leaving [ 538.333508][ T5894] appleir 0003:05AC:8243.0033: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 538.606761][ T52] usb 4-1: USB disconnect, device number 59 [ 538.645837][T18751] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 538.833463][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.931764][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.064277][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.332941][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.499826][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.510839][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.524883][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.536928][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.547464][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.577353][ T5893] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 539.743667][ T5893] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 539.773439][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.786237][ T5893] usb 2-1: Product: syz [ 539.802924][ T5893] usb 2-1: Manufacturer: syz [ 539.836696][ T5893] usb 2-1: SerialNumber: syz [ 539.845451][ T5893] usb 2-1: config 0 descriptor?? [ 539.859039][ T5893] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 540.248571][ T13] gretap0 (unregistering): left promiscuous mode [ 540.478243][ T36] tipc: Subscription rejected, illegal request [ 540.735387][ T13] bond0 (unregistering): left allmulticast mode [ 540.743483][ T13] bond_slave_0: left allmulticast mode [ 540.757595][ T13] bond_slave_1: left allmulticast mode [ 540.768281][ T13] bond0 (unregistering): left promiscuous mode [ 540.776989][ T13] bond_slave_0: left promiscuous mode [ 540.786290][ T13] bond_slave_1: left promiscuous mode [ 540.830813][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.854474][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.875095][ T13] bond0 (unregistering): Released all slaves [ 540.903601][ T52] usb 2-1: USB disconnect, device number 61 [ 541.101250][ T13] tipc: Disabling bearer [ 541.115223][ T13] tipc: Left network mode [ 541.512111][T18812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5777'. [ 541.599644][ T5848] Bluetooth: hci0: command tx timeout [ 542.097849][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.159035][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.381390][ T5893] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 542.417546][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.503696][ T13] batadv_slave_1: left promiscuous mode [ 542.521330][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.540215][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 542.554765][ T5893] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 542.565059][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.579063][ T5893] usb 4-1: Product: syz [ 542.583284][ T5893] usb 4-1: Manufacturer: syz [ 542.602537][ T5893] usb 4-1: SerialNumber: syz [ 542.622508][ T5893] usb 4-1: config 0 descriptor?? [ 542.634213][ T13] hsr_slave_0: left promiscuous mode [ 542.643596][ T5893] usb 4-1: invalid MIDI EP [ 542.660399][ T5893] usb 4-1: snd-bcd2000: error during probing [ 542.660451][ T13] hsr_slave_1: left promiscuous mode [ 542.677754][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.688290][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.696819][ T5893] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 542.718878][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.762051][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.775310][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.799719][ T13] [ 542.802099][ T13] ====================================================== [ 542.809121][ T13] WARNING: possible circular locking dependency detected [ 542.816153][ T13] 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 Not tainted [ 542.823274][ T13] ------------------------------------------------------ [ 542.830315][ T13] kworker/u8:1/13 is trying to acquire lock: [ 542.836298][ T13] ffff88802796e768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 542.846976][ T13] [ 542.846976][ T13] but task is already holding lock: [ 542.854367][ T13] ffff88807e864d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 542.865966][ T13] [ 542.865966][ T13] which lock already depends on the new lock. [ 542.865966][ T13] [ 542.876369][ T13] [ 542.876369][ T13] the existing dependency chain (in reverse order) is: [ 542.885392][ T13] [ 542.885392][ T13] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 542.893860][ T13] lock_acquire+0x116/0x2f0 [ 542.898912][ T13] __mutex_lock+0x1a5/0x10c0 [ 542.904033][ T13] xsk_bind+0x2fd/0xfb0 [ 542.908721][ T13] __sys_bind+0x1de/0x290 [ 542.913580][ T13] __x64_sys_bind+0x7a/0x90 [ 542.918631][ T13] do_syscall_64+0xf3/0x230 [ 542.923663][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.930163][ T13] [ 542.930163][ T13] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 542.937392][ T13] lock_acquire+0x116/0x2f0 [ 542.942429][ T13] __mutex_lock+0x1a5/0x10c0 [ 542.947578][ T13] xsk_diag_dump+0x5be/0x19d0 [ 542.952792][ T13] netlink_dump+0x678/0xeb0 [ 542.957848][ T13] __netlink_dump_start+0x5a2/0x790 [ 542.963592][ T13] xsk_diag_handler_dump+0x1de/0x270 [ 542.969411][ T13] sock_diag_rcv_msg+0x3dc/0x5f0 [ 542.974887][ T13] netlink_rcv_skb+0x208/0x480 [ 542.980179][ T13] netlink_unicast+0x7f8/0x9a0 [ 542.985481][ T13] netlink_sendmsg+0x8c3/0xcd0 [ 542.990777][ T13] __sock_sendmsg+0x221/0x270 [ 542.995981][ T13] sock_write_iter+0x2d9/0x3f0 [ 543.001270][ T13] do_iter_readv_writev+0x71f/0x9d0 [ 543.006998][ T13] vfs_writev+0x38d/0xbc0 [ 543.011884][ T13] do_writev+0x1b8/0x360 [ 543.016693][ T13] do_syscall_64+0xf3/0x230 [ 543.021737][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.028168][ T13] [ 543.028168][ T13] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 543.035738][ T13] lock_acquire+0x116/0x2f0 [ 543.040769][ T13] __mutex_lock+0x1a5/0x10c0 [ 543.045935][ T13] xsk_notifier+0x8b/0x230 [ 543.050877][ T13] notifier_call_chain+0x1a5/0x3f0 [ 543.056521][ T13] unregister_netdevice_many_notify+0x1572/0x2510 [ 543.063465][ T13] unregister_netdevice_queue+0x383/0x400 [ 543.069711][ T13] _cfg80211_unregister_wdev+0x163/0x590 [ 543.075880][ T13] ieee80211_if_remove+0x25d/0x320 [ 543.081519][ T13] ieee80211_del_iface+0x19/0x30 [ 543.086982][ T13] cfg80211_remove_virtual_intf+0x23f/0x410 [ 543.093405][ T13] genl_rcv_msg+0xb38/0xf00 [ 543.098438][ T13] netlink_rcv_skb+0x208/0x480 [ 543.103733][ T13] genl_rcv+0x28/0x40 [ 543.108241][ T13] netlink_unicast+0x7f8/0x9a0 [ 543.113549][ T13] netlink_sendmsg+0x8c3/0xcd0 [ 543.118861][ T13] __sock_sendmsg+0x221/0x270 [ 543.124090][ T13] ____sys_sendmsg+0x523/0x860 [ 543.129417][ T13] __sys_sendmsg+0x271/0x360 [ 543.134550][ T13] do_syscall_64+0xf3/0x230 [ 543.139591][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.146016][ T13] [ 543.146016][ T13] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 543.153852][ T13] validate_chain+0xa69/0x24e0 [ 543.159148][ T13] __lock_acquire+0xad5/0xd80 [ 543.164347][ T13] lock_acquire+0x116/0x2f0 [ 543.169370][ T13] __mutex_lock+0x1a5/0x10c0 [ 543.174493][ T13] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 543.181084][ T13] notifier_call_chain+0x1a5/0x3f0 [ 543.186734][ T13] __dev_close_many+0x15d/0x760 [ 543.192118][ T13] dev_close_many+0x250/0x4c0 [ 543.197323][ T13] unregister_netdevice_many_notify+0x628/0x2510 [ 543.204180][ T13] default_device_exit_batch+0x7ff/0x880 [ 543.210431][ T13] cleanup_net+0x8af/0xd60 [ 543.215396][ T13] process_scheduled_works+0xac3/0x18e0 [ 543.221467][ T13] worker_thread+0x870/0xd50 [ 543.226587][ T13] kthread+0x7b7/0x940 [ 543.231183][ T13] ret_from_fork+0x4b/0x80 [ 543.236135][ T13] ret_from_fork_asm+0x1a/0x30 [ 543.241431][ T13] [ 543.241431][ T13] other info that might help us debug this: [ 543.241431][ T13] [ 543.251713][ T13] Chain exists of: [ 543.251713][ T13] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 543.251713][ T13] [ 543.265265][ T13] Possible unsafe locking scenario: [ 543.265265][ T13] [ 543.272722][ T13] CPU0 CPU1 [ 543.278093][ T13] ---- ---- [ 543.283460][ T13] lock(&dev_instance_lock_key#3); [ 543.288683][ T13] lock(&xs->mutex); [ 543.295202][ T13] lock(&dev_instance_lock_key#3); [ 543.302959][ T13] lock(&rdev->wiphy.mtx); [ 543.307481][ T13] [ 543.307481][ T13] *** DEADLOCK *** [ 543.307481][ T13] [ 543.315634][ T13] 5 locks held by kworker/u8:1/13: [ 543.320749][ T13] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 543.331655][ T13] #1: ffffc90000127c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 543.342200][ T13] #2: ffffffff900f0950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 543.351622][ T13] #3: ffffffff900fd488 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 543.361657][ T13] #4: ffff88807e864d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 543.373702][ T13] [ 543.373702][ T13] stack backtrace: [ 543.379590][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 543.379612][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 543.379625][ T13] Workqueue: netns cleanup_net [ 543.379652][ T13] Call Trace: [ 543.379659][ T13] [ 543.379667][ T13] dump_stack_lvl+0x241/0x360 [ 543.379693][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.379717][ T13] ? __pfx__printk+0x10/0x10 [ 543.379740][ T13] ? print_lock+0x171/0x1a0 [ 543.379767][ T13] print_circular_bug+0x2e1/0x300 [ 543.379790][ T13] check_noncircular+0x142/0x160 [ 543.379814][ T13] validate_chain+0xa69/0x24e0 [ 543.379836][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 543.379853][ T13] ? arch_stack_walk+0x11e/0x150 [ 543.379881][ T13] __lock_acquire+0xad5/0xd80 [ 543.379901][ T13] lock_acquire+0x116/0x2f0 [ 543.379917][ T13] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 543.379939][ T13] __mutex_lock+0x1a5/0x10c0 [ 543.379959][ T13] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 543.379977][ T13] ? validate_chain+0x8a7/0x24e0 [ 543.379996][ T13] ? put_dec_trunc8+0x1fb/0x340 [ 543.380016][ T13] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 543.380033][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 543.380061][ T13] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 543.380081][ T13] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 543.380100][ T13] ? __lock_acquire+0xad5/0xd80 [ 543.380117][ T13] ? do_raw_spin_lock+0x151/0x370 [ 543.380150][ T13] ? inetdev_event+0x4fb/0x1740 [ 543.380169][ T13] ? igmp_netdev_event+0x7c/0x770 [ 543.380187][ T13] notifier_call_chain+0x1a5/0x3f0 [ 543.380211][ T13] __dev_close_many+0x15d/0x760 [ 543.380234][ T13] ? __mutex_lock+0x380/0x10c0 [ 543.380253][ T13] ? ret_from_fork+0x4b/0x80 [ 543.380272][ T13] ? __pfx___dev_close_many+0x10/0x10 [ 543.380299][ T13] dev_close_many+0x250/0x4c0 [ 543.380323][ T13] ? __pfx_dev_close_many+0x10/0x10 [ 543.380345][ T13] ? __lock_acquire+0xad5/0xd80 [ 543.380365][ T13] unregister_netdevice_many_notify+0x628/0x2510 [ 543.380389][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 543.380409][ T13] ? __local_bh_enable_ip+0x168/0x200 [ 543.380426][ T13] ? batadv_tt_local_remove+0x119/0x230 [ 543.380444][ T13] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 543.380460][ T13] ? batadv_tt_local_remove+0x119/0x230 [ 543.380476][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 543.380502][ T13] ? unregister_netdevice_queue+0x2c4/0x400 [ 543.380524][ T13] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 543.380549][ T13] default_device_exit_batch+0x7ff/0x880 [ 543.380579][ T13] ? __pfx_default_device_exit_batch+0x10/0x10 [ 543.380604][ T13] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 543.380628][ T13] ? cfg802154_pernet_exit+0xc3/0xe0 [ 543.380644][ T13] ? __pfx_default_device_exit_batch+0x10/0x10 [ 543.380670][ T13] cleanup_net+0x8af/0xd60 [ 543.380697][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 543.380726][ T13] ? process_scheduled_works+0x9cb/0x18e0 [ 543.380745][ T13] process_scheduled_works+0xac3/0x18e0 [ 543.380780][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 543.380802][ T13] ? assign_work+0x367/0x3d0 [ 543.380821][ T13] worker_thread+0x870/0xd50 [ 543.380846][ T13] ? __kthread_parkme+0x1a8/0x200 [ 543.380867][ T13] ? __pfx_worker_thread+0x10/0x10 [ 543.380886][ T13] kthread+0x7b7/0x940 [ 543.380910][ T13] ? __pfx_worker_thread+0x10/0x10 [ 543.380929][ T13] ? __pfx_kthread+0x10/0x10 [ 543.380950][ T13] ? __pfx_kthread+0x10/0x10 [ 543.380972][ T13] ? __pfx_kthread+0x10/0x10 [ 543.380994][ T13] ? __pfx_kthread+0x10/0x10 [ 543.381017][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.381034][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 543.381052][ T13] ? __pfx_kthread+0x10/0x10 [ 543.381075][ T13] ret_from_fork+0x4b/0x80 [ 543.381091][ T13] ? __pfx_kthread+0x10/0x10 [ 543.381114][ T13] ret_from_fork_asm+0x1a/0x30 [ 543.381135][ T13] [ 543.774861][ T5848] Bluetooth: hci0: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 543.877647][ T52] usb 4-1: USB disconnect, device number 60 [ 544.008372][ T13] veth1_macvtap: left promiscuous mode [ 544.013957][ T13] veth0_macvtap: left promiscuous mode [ 544.037802][ T13] veth1_vlan: left promiscuous mode [ 544.043136][ T13] veth0_vlan: left promiscuous mode [ 544.588666][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.640368][T18833] bond0: (slave syz_tun): Releasing backup interface [ 544.747427][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 545.117828][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!