last executing test programs: 59.21446277s ago: executing program 2 (id=3065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 58.827945597s ago: executing program 2 (id=3068): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) 58.641992858s ago: executing program 2 (id=3071): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 58.469482567s ago: executing program 2 (id=3074): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x40, 0x6, 0x8, {0x8, 0xd, "3d91419da546"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 56.660917214s ago: executing program 2 (id=3088): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) 55.30039806s ago: executing program 3 (id=3101): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x200000) 55.102163786s ago: executing program 1 (id=3103): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)='\x00', 0x1}], 0x2, 0x8, 0x0) 55.085849057s ago: executing program 3 (id=3104): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) getsockopt$inet_mreqsrc(r0, 0x0, 0xe, 0x0, &(0x7f0000000280)) 54.912175699s ago: executing program 1 (id=3105): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 54.751654949s ago: executing program 2 (id=3106): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0xe9) 54.749578503s ago: executing program 1 (id=3108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}]}}}}}}}, 0x0) 54.749195635s ago: executing program 3 (id=3109): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000002440)={0xa, 0x4e24, 0x2000005, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc63}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000002480)='|', 0x1}], 0x1}}, {{&(0x7f0000002180)={0xa, 0x4e22, 0xfff, @private2, 0x3}, 0x1c, &(0x7f0000002400)=[{&(0x7f00000021c0)="b0", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0xb91c80e, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="ef", 0x1}], 0x1}}], 0x3, 0x40848d1) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 54.290823855s ago: executing program 1 (id=3111): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 54.077577142s ago: executing program 3 (id=3112): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 53.892411051s ago: executing program 1 (id=3115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) 53.562050133s ago: executing program 3 (id=3116): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f00000010c0)="e09c6ab4", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 53.46079918s ago: executing program 1 (id=3117): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 53.366288968s ago: executing program 3 (id=3118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffc}]}, 0x3c}}, 0x0) 39.160419623s ago: executing program 32 (id=3106): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0xe9) 37.990398252s ago: executing program 33 (id=3117): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 37.780407972s ago: executing program 34 (id=3118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffc}]}, 0x3c}}, 0x0) 36.291701211s ago: executing program 4 (id=3128): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 35.765644123s ago: executing program 4 (id=3130): setuid(0xee00) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 35.39014212s ago: executing program 4 (id=3131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 34.945903218s ago: executing program 4 (id=3134): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000180)={0x9a, 0x6, 0x5ae6fefe, 0xf}) 33.186162468s ago: executing program 0 (id=3137): r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 32.218617183s ago: executing program 4 (id=3138): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = io_uring_setup(0x3eae, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 31.542064193s ago: executing program 4 (id=3139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0x5}) 22.250504032s ago: executing program 0 (id=3140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) 22.094246532s ago: executing program 0 (id=3141): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_qrtr_TIOCINQ(r0, 0x8905, 0x0) 21.895098744s ago: executing program 0 (id=3142): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, 0x0, &(0x7f00000004c0)) 21.735956022s ago: executing program 0 (id=3143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 16.087898476s ago: executing program 35 (id=3139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0x5}) 15.39849625s ago: executing program 0 (id=3145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe36030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a8609100000000bf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 0s ago: executing program 36 (id=3145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe36030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a8609100000000bf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) kernel console output (not intermixed with test programs): †CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 149.894713][ T5911] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.894746][ T5911] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 149.894781][ T5911] usb 2-1: config 220 interface 0 has no altsetting 0 [ 149.905236][ T5837] net1080 1-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 4a:9a:0f:c4:e8:83 [ 149.942156][ T5911] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.942182][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.942199][ T5911] usb 2-1: Product: syz [ 149.942209][ T5911] usb 2-1: Manufacturer: syz [ 149.942220][ T5911] usb 2-1: SerialNumber: syz [ 150.022257][ T5837] usb 1-1: USB disconnect, device number 5 [ 150.048432][ T5837] net1080 1-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 150.302390][ T5911] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 150.302421][ T5911] usb 2-1: No valid video chain found. [ 150.338211][ T5911] usb 2-1: USB disconnect, device number 4 [ 150.644000][ T7793] netlink: 'syz.2.897': attribute type 3 has an invalid length. [ 150.811783][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 150.811801][ T37] audit: type=1326 audit(1756168484.286:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.812121][ T37] audit: type=1326 audit(1756168484.296:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.813617][ T37] audit: type=1326 audit(1756168484.296:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.815623][ T37] audit: type=1326 audit(1756168484.296:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.822330][ T37] audit: type=1326 audit(1756168484.296:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.822378][ T37] audit: type=1326 audit(1756168484.306:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.822416][ T37] audit: type=1326 audit(1756168484.306:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.822454][ T37] audit: type=1326 audit(1756168484.306:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.822491][ T37] audit: type=1326 audit(1756168484.306:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 150.823680][ T37] audit: type=1326 audit(1756168484.306:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ff00000 [ 151.030659][ T7805] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.902'. [ 151.030683][ T7805] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.902'. [ 151.191752][ T992] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.334768][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 151.342184][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 151.344743][ T992] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.344766][ T992] usb 5-1: config 1 has no interface number 1 [ 151.344829][ T992] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 151.344867][ T992] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 151.347564][ T992] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.347588][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.347604][ T992] usb 5-1: Product: syz [ 151.347616][ T992] usb 5-1: Manufacturer: syz [ 151.347629][ T992] usb 5-1: SerialNumber: syz [ 151.355387][ T7815] kAFS: No cell specified [ 151.671078][ T992] usb 5-1: found format II with max.bitrate = 2, frame size=30167 [ 151.671108][ T992] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 151.821692][ T992] usb 5-1: USB disconnect, device number 7 [ 151.928945][ T6622] udevd[6622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.991768][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.146748][ T5911] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.146780][ T5911] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.146816][ T5911] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.146835][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.172039][ T7827] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.199319][ T5911] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.665705][ T5911] usb 2-1: USB disconnect, device number 5 [ 152.991667][ T5837] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.071629][ T5925] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 153.153904][ T5837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.153928][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 153.153977][ T5837] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 153.153997][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.165952][ T5837] usb 5-1: config 0 descriptor?? [ 153.225328][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 153.264448][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 10829, setting to 1024 [ 153.264480][ T5925] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 153.272821][ T5925] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 153.272846][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.272863][ T5925] usb 4-1: Product: syz [ 153.272875][ T5925] usb 4-1: Manufacturer: syz [ 153.272888][ T5925] usb 4-1: SerialNumber: syz [ 153.310208][ T5925] usb 4-1: config 0 descriptor?? [ 153.313917][ T7854] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.343832][ T5925] hub 4-1:0.0: bad descriptor, ignoring hub [ 153.343871][ T5925] hub 4-1:0.0: probe with driver hub failed with error -5 [ 153.437237][ T5925] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 153.582464][ T7873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.937'. [ 153.594854][ T5837] Bluetooth: Can't get version to change to load ram patch err [ 153.594870][ T5837] Bluetooth: Loading patch file failed [ 153.594909][ T5837] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 153.646527][ T5837] usb 5-1: USB disconnect, device number 8 [ 153.670791][ T5925] usb 4-1: USB disconnect, device number 9 [ 153.816385][ T1084] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.977454][ T1084] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 153.977479][ T1084] usb 3-1: config 0 has no interface number 0 [ 153.977525][ T1084] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.008713][ T1084] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 154.008741][ T1084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.008758][ T1084] usb 3-1: Product: syz [ 154.008770][ T1084] usb 3-1: Manufacturer: syz [ 154.008782][ T1084] usb 3-1: SerialNumber: syz [ 154.035253][ T1084] usb 3-1: config 0 descriptor?? [ 154.104101][ T1084] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 154.284918][ C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 154.488420][ T5911] usb 3-1: USB disconnect, device number 4 [ 154.494904][ T5911] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 154.939541][ T7908] nft_compat: unsupported protocol 1 [ 155.342836][ T7930] openvswitch: netlink: Key type 30 is not supported [ 155.485292][ T7934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.492641][ T7932] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.493174][ T7932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.493187][ T7932] IPv6: NLM_F_CREATE should be set when creating new route [ 155.587593][ T7937] netlink: 'syz.4.968': attribute type 8 has an invalid length. [ 156.461710][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.614273][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 156.620301][ T5925] usb 4-1: config 0 has an invalid interface number: 50 but max is 1 [ 156.620325][ T5925] usb 4-1: config 0 has an invalid interface number: 175 but max is 1 [ 156.620341][ T5925] usb 4-1: config 0 has no interface number 0 [ 156.620354][ T5925] usb 4-1: config 0 has no interface number 1 [ 156.624741][ T5925] usb 4-1: New USB device found, idVendor=0421, idProduct=2f27, bcdDevice=1b.86 [ 156.624767][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.624784][ T5925] usb 4-1: Product: syz [ 156.624804][ T5925] usb 4-1: Manufacturer: syz [ 156.624816][ T5925] usb 4-1: SerialNumber: syz [ 156.709461][ T5925] usb 4-1: config 0 descriptor?? [ 156.714163][ T5925] cdc_phonet 4-1:0.50: probe with driver cdc_phonet failed with error -22 [ 156.941368][ T1084] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 156.974412][ T5837] usb 4-1: USB disconnect, device number 10 [ 157.096181][ T1084] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 157.100435][ T1084] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 157.100461][ T1084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.100479][ T1084] usb 5-1: Product: syz [ 157.100491][ T1084] usb 5-1: Manufacturer: syz [ 157.100504][ T1084] usb 5-1: SerialNumber: syz [ 157.126480][ T1084] usb 5-1: config 0 descriptor?? [ 157.389449][ T1084] powermate: unknown product id 0240 [ 157.465615][ T1084] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 157.551970][ C1] powermate: config urb returned -71 [ 157.553953][ C1] powermate: config urb returned -71 [ 157.554161][ C1] powermate: config urb returned -71 [ 157.554370][ C1] powermate: config urb returned -71 [ 157.673042][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 157.674232][ T1084] usb 5-1: USB disconnect, device number 9 [ 157.761332][ T8012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.792400][ T37] kauditd_printk_skb: 103 callbacks suppressed [ 158.792417][ T37] audit: type=1326 audit(1756168492.283:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 158.792460][ T37] audit: type=1326 audit(1756168492.283:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 158.876956][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 159.131633][ T992] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.281649][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 159.284289][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.284360][ T992] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.284417][ T992] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.288958][ T992] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.288981][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.288997][ T992] usb 4-1: Product: syz [ 159.289008][ T992] usb 4-1: Manufacturer: syz [ 159.289020][ T992] usb 4-1: SerialNumber: syz [ 159.384335][ T992] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 159.384399][ T992] cdc_ncm 4-1:1.0: bind() failure [ 159.603534][ T992] cdc_mbim 4-1:1.1: CDC Union missing and no IAD found [ 159.603583][ T992] cdc_mbim 4-1:1.1: bind() failure [ 159.770229][ T8078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1035'. [ 159.823763][ T1084] usb 4-1: USB disconnect, device number 11 [ 160.077898][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 160.077925][ T8092] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 160.517764][ T8110] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 160.736180][ T8120] binder: BC_ATTEMPT_ACQUIRE not supported [ 160.736201][ T8120] binder: 8117:8120 ioctl c0306201 2000000001c0 returned -22 [ 160.785276][ T8122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.952289][ T5911] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 161.118092][ T5911] usb 2-1: config 2 has an invalid interface number: 211 but max is 0 [ 161.118118][ T5911] usb 2-1: config 2 has no interface number 0 [ 161.118167][ T5911] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 161.118190][ T5911] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 161.161678][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 161.161703][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.161719][ T5911] usb 2-1: Product: syz [ 161.161730][ T5911] usb 2-1: Manufacturer: syz [ 161.161742][ T5911] usb 2-1: SerialNumber: syz [ 161.215248][ T8116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.232248][ T5911] em28xx 2-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 161.232283][ T5911] em28xx 2-1:2.211: Device initialization failed. [ 161.232294][ T5911] em28xx 2-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 161.290112][ T8139] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 161.290136][ T8139] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 161.362383][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'. [ 161.465041][ T31] usb 2-1: USB disconnect, device number 6 [ 161.525524][ T8144] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 161.658543][ T8151] netlink: 'syz.2.1070': attribute type 10 has an invalid length. [ 161.659811][ T8151] batman_adv: batadv0: Adding interface: wlan0 [ 161.659825][ T8151] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.659852][ T8151] batman_adv: batadv0: Interface activated: wlan0 [ 161.846379][ T8158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.070618][ T37] audit: type=1326 audit(1756168495.553:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 162.070890][ T37] audit: type=1326 audit(1756168495.553:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 162.214809][ T37] audit: type=1326 audit(1756168495.703:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 162.214923][ T37] audit: type=1326 audit(1756168495.703:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.4.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 162.855948][ T37] audit: type=1326 audit(1756168496.333:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8196 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 162.858221][ T37] audit: type=1326 audit(1756168496.343:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8196 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 162.873556][ T37] audit: type=1326 audit(1756168496.363:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8196 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 162.873684][ T37] audit: type=1326 audit(1756168496.363:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8196 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 162.891622][ T1084] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.041687][ T1084] usb 5-1: Using ep0 maxpacket: 16 [ 163.046101][ T1084] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 163.046123][ T1084] usb 5-1: config 0 has no interface number 0 [ 163.046169][ T1084] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.048847][ T1084] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 163.048872][ T1084] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 163.048889][ T1084] usb 5-1: Product: syz [ 163.048900][ T1084] usb 5-1: SerialNumber: syz [ 163.069389][ T1084] usb 5-1: config 0 descriptor?? [ 163.114459][ T1084] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 163.141903][ T1084] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input8 [ 163.209484][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'. [ 163.528333][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 163.528723][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 163.529109][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 163.529354][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 163.529660][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 163.529898][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 163.530216][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 163.530364][ T5925] usb 5-1: USB disconnect, device number 10 [ 163.530450][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 163.530473][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 163.709401][ T5925] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 163.774703][ T8223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1106'. [ 163.800710][ T8225] dlm: no locking on control device [ 163.841650][ T1084] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.955938][ T8230] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 163.955938][ T8230] SÃȘØÈžZ§6ŸÂ' [ 163.992664][ T1084] usb 1-1: Using ep0 maxpacket: 16 [ 163.998910][ T1084] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.998936][ T1084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.998953][ T1084] usb 1-1: Product: syz [ 163.998965][ T1084] usb 1-1: Manufacturer: syz [ 163.998976][ T1084] usb 1-1: SerialNumber: syz [ 164.032119][ T1084] r8152-cfgselector 1-1: Unknown version 0x0000 [ 164.032153][ T1084] r8152-cfgselector 1-1: config 0 descriptor?? [ 164.517396][ T1084] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 164.651930][ T8249] Illegal XDP return value 4294967274 on prog (id 65) dev N/A, expect packet loss! [ 164.851719][ T5911] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.003742][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 165.021969][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.039893][ T5911] usb 4-1: config 255 has an invalid interface number: 81 but max is 0 [ 165.039918][ T5911] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 165.039935][ T5911] usb 4-1: config 255 has no interface number 0 [ 165.041125][ T5911] usb 4-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 165.041149][ T5911] usb 4-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.041172][ T5911] usb 4-1: config 255 interface 81 has no altsetting 0 [ 165.087905][ T5911] usb 4-1: string descriptor 0 read error: -22 [ 165.088068][ T5911] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 165.088089][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.167010][ T5911] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:255.81/input/input9 [ 165.658166][ T1084] usb 4-1: USB disconnect, device number 12 [ 166.471667][ T31] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 166.625806][ T31] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 166.625838][ T31] usb 1-1: config 0 has no interface number 0 [ 166.634260][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=6b.bb [ 166.634287][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.634304][ T31] usb 1-1: Product: syz [ 166.634316][ T31] usb 1-1: Manufacturer: syz [ 166.634327][ T31] usb 1-1: SerialNumber: syz [ 166.643640][ T31] usb 1-1: config 0 descriptor?? [ 166.912456][ T31] usb 1-1: Found UVC 0.00 device syz (045e:0723) [ 166.912496][ T31] usb 1-1: No valid video chain found. [ 167.129705][ T31] usb 1-1: USB disconnect, device number 7 [ 167.268648][ T8340] cgroup: name respecified [ 167.338910][ T8342] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 168.385158][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 168.645584][ T8394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.915447][ T8412] openvswitch: netlink: Message has -3 unknown bytes. [ 168.915608][ T8412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.297493][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.302128][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.366988][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1208'. [ 170.403178][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.444343][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.447970][ T8464] IPv6: Can't replace route, no match found [ 171.216801][ T8480] syz.0.1233 uses obsolete (PF_INET,SOCK_PACKET) [ 171.592953][ T3051] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.612532][ T3051] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.612578][ T3051] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.612610][ T3051] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.763803][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1234'. [ 171.763874][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 172.247268][ T8503] netlink: 'syz.2.1245': attribute type 4 has an invalid length. [ 172.247291][ T8503] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1245'. [ 172.317349][ T8503] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 172.545651][ T8519] nfs: Deprecated parameter 'nointr' [ 172.713119][ T8526] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1255'. [ 173.022281][ T8535] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 173.264306][ T8542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1263'. [ 173.312987][ T8546] dlm: no locking on control device [ 173.513571][ T8552] batadv1: entered promiscuous mode [ 173.515778][ T8556] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 173.536874][ T8552] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 174.023744][ T8579] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.084247][ T6001] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.156360][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 175.156397][ T8628] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 175.156409][ T8628] netlink: 'syz.0.1306': attribute type 2 has an invalid length. [ 175.156420][ T8628] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 175.246845][ T6001] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 175.246871][ T6001] usb 3-1: config 0 has no interface number 0 [ 175.246915][ T6001] usb 3-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 175.246955][ T6001] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 175.246975][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.256320][ T6001] usb 3-1: config 0 descriptor?? [ 175.306850][ T6001] cxacru 3-1:0.109: cxacru_bind: interface has incorrect endpoints [ 175.306992][ T6001] cxacru 3-1:0.109: usbatm_usb_probe: bind failed: -19! [ 175.470892][ T992] usb 3-1: USB disconnect, device number 5 [ 175.732812][ T8654] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 175.732848][ T8654] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 176.125181][ T8670] openvswitch: netlink: IP tunnel dst address not specified [ 176.220024][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1329'. [ 176.220047][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1329'. [ 176.331064][ T8675] netlink: 'syz.2.1328': attribute type 3 has an invalid length. [ 176.331087][ T8675] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1328'. [ 176.971768][ T8705] openvswitch: netlink: IP tunnel dst address not specified [ 177.418040][ T8724] overlayfs: missing 'workdir' [ 177.633965][ T8728] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.091611][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 178.175863][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 178.259608][ T31] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 178.259636][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.259653][ T31] usb 4-1: Product: syz [ 178.259665][ T31] usb 4-1: Manufacturer: syz [ 178.259677][ T31] usb 4-1: SerialNumber: syz [ 178.306550][ T31] usb 4-1: config 0 descriptor?? [ 178.324962][ T31] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 178.734066][ T31] gspca_sunplus: reg_w_riv err -71 [ 178.734160][ T31] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 178.755601][ T31] usb 4-1: USB disconnect, device number 13 [ 178.791757][ T8761] wireguard0: entered promiscuous mode [ 178.791784][ T8761] wireguard0: entered allmulticast mode [ 178.891856][ T8769] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1373'. [ 178.897794][ T8769] unsupported nlmsg_type 40 [ 179.184258][ T8780] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1378'. [ 179.369129][ T8785] Zero length message leads to an empty skb [ 179.661444][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 179.669228][ T8803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1389'. [ 179.669250][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 180.911745][ T992] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 181.051717][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 181.084227][ T992] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 181.084255][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.084272][ T992] usb 4-1: Product: syz [ 181.084285][ T992] usb 4-1: Manufacturer: syz [ 181.084297][ T992] usb 4-1: SerialNumber: syz [ 181.115847][ T992] usb 4-1: config 0 descriptor?? [ 181.141792][ T992] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 181.213925][ T31] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 181.213952][ T31] usb 5-1: config 0 has no interface number 0 [ 181.213994][ T31] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 181.214033][ T31] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 181.214053][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.219522][ T31] usb 5-1: config 0 descriptor?? [ 181.294721][ T31] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input10 [ 181.566796][ T31] usb 5-1: USB disconnect, device number 11 [ 181.602691][ T5911] usb 4-1: USB disconnect, device number 14 [ 181.871201][ T8890] netlink: 'syz.0.1431': attribute type 10 has an invalid length. [ 181.917124][ T8890] team0: Cannot enslave team device to itself [ 182.259382][ T8903] dummy0: entered promiscuous mode [ 183.047769][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.155905][ T8941] __nla_validate_parse: 2 callbacks suppressed [ 183.155923][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1453'. [ 183.155941][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1453'. [ 183.155957][ T8941] netlink: 'syz.2.1453': attribute type 6 has an invalid length. [ 183.191553][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 183.194285][ T5925] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 183.194309][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.227453][ T5925] usb 1-1: config 0 descriptor?? [ 183.258674][ T5925] as10x_usb: device has been detected [ 183.259735][ T5925] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 183.318802][ T5925] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 183.385403][ T5925] as10x_usb: error during firmware upload part1 [ 183.386121][ T5925] Registered device nBox DVB-T Dongle [ 183.442167][ T5925] usb 1-1: USB disconnect, device number 8 [ 183.499036][ T5925] Unregistered device nBox DVB-T Dongle [ 183.556218][ T5925] as10x_usb: device has been disconnected [ 184.273634][ T8982] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 8982 comm: syz.4.1468) [ 184.275574][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 184.275588][ T37] audit: type=1800 audit(1756168517.763:2441): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1468" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=18137 res=0 errno=0 [ 184.442806][ T8989] netlink: 'syz.0.1471': attribute type 1 has an invalid length. [ 184.684831][ T8998] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1475'. [ 185.068520][ T37] audit: type=1326 audit(1756168518.553:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9011 comm="syz.0.1482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85cfdaebe9 code=0x0 [ 185.145890][ T9014] netlink: 'syz.4.1481': attribute type 20 has an invalid length. [ 185.147229][ T5925] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 185.309575][ T5925] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 185.309602][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.309619][ T5925] usb 2-1: Product: syz [ 185.309632][ T5925] usb 2-1: Manufacturer: syz [ 185.309644][ T5925] usb 2-1: SerialNumber: syz [ 185.335343][ T5925] usb 2-1: config 0 descriptor?? [ 185.371363][ T5925] usb 2-1: selecting invalid altsetting 1 [ 185.371381][ T5925] technisat-usb2: could not set alternate setting to 0 [ 185.450909][ T9025] wg1 speed is unknown, defaulting to 1000 [ 185.451129][ T9025] wg1 speed is unknown, defaulting to 1000 [ 185.551150][ T5925] technisat-usb2: firmware version: 0.0 [ 185.551194][ T5925] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 185.555047][ T9025] wg1 speed is unknown, defaulting to 1000 [ 185.659514][ T9025] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.714824][ T9025] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 185.739161][ T9032] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1489'. [ 185.739195][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'. [ 185.739210][ T9032] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1489'. [ 185.739223][ T9032] netlink: 'syz.3.1489': attribute type 2 has an invalid length. [ 185.739233][ T9032] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1489'. [ 185.809632][ T5925] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 185.844735][ T5925] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 185.876225][ T5925] usb 2-1: USB disconnect, device number 7 [ 186.001657][ T9037] netlink: 'syz.4.1490': attribute type 5 has an invalid length. [ 186.042876][ T9025] wg1 speed is unknown, defaulting to 1000 [ 186.063443][ T9025] wg1 speed is unknown, defaulting to 1000 [ 186.078200][ T9025] wg1 speed is unknown, defaulting to 1000 [ 186.104433][ T9025] wg1 speed is unknown, defaulting to 1000 [ 186.129733][ T9025] wg1 speed is unknown, defaulting to 1000 [ 186.274827][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 188.964913][ T9167] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 189.341766][ T992] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.494792][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 189.497321][ T992] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 189.497344][ T992] usb 2-1: config 0 has no interface number 0 [ 189.497420][ T992] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.499692][ T992] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 189.499716][ T992] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 189.499734][ T992] usb 2-1: Product: syz [ 189.499745][ T992] usb 2-1: SerialNumber: syz [ 189.640786][ T992] usb 2-1: config 0 descriptor?? [ 189.673189][ T992] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 189.916517][ T5924] usb 2-1: USB disconnect, device number 8 [ 191.503678][ T9267] netlink: 'syz.2.1586': attribute type 12 has an invalid length. [ 191.503701][ T9267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1586'. [ 191.981658][ T6001] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.151731][ T6001] usb 4-1: Using ep0 maxpacket: 32 [ 192.165682][ T6001] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 192.165708][ T6001] usb 4-1: config 0 has no interface number 0 [ 192.165769][ T6001] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.165787][ T6001] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 192.165810][ T6001] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 192.165832][ T6001] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 192.165852][ T6001] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 192.165874][ T6001] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.165893][ T6001] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.165914][ T6001] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 192.165936][ T6001] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 192.165956][ T6001] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.176899][ T6001] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 192.176927][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.176944][ T6001] usb 4-1: Product: syz [ 192.176956][ T6001] usb 4-1: Manufacturer: syz [ 192.176969][ T6001] usb 4-1: SerialNumber: syz [ 192.349055][ T6001] usb 4-1: config 0 descriptor?? [ 192.351957][ T9277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.352140][ T9277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.381053][ T6001] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 192.381071][ T6001] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 192.424597][ T6001] scsi host1: microtekX6 [ 192.621747][ T6001] usb 4-1: USB disconnect, device number 15 [ 193.018595][ T9320] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 193.018877][ T9320] overlayfs: overlapping lowerdir path [ 193.376164][ T9331] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1613'. [ 193.376189][ T9331] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1613'. [ 193.563718][ T9337] mmap: syz.1.1601 (9337) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 193.711748][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 193.811056][ T9348] netlink: 'syz.3.1622': attribute type 3 has an invalid length. [ 193.811076][ T9348] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1622'. [ 193.864114][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.864140][ T5911] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 193.864194][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 193.869025][ T5911] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 193.869050][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.869068][ T5911] usb 3-1: Product: syz [ 193.869079][ T5911] usb 3-1: Manufacturer: syz [ 193.869091][ T5911] usb 3-1: SerialNumber: syz [ 193.953943][ T5911] usb 3-1: config 0 descriptor?? [ 193.967388][ T5911] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 193.967419][ T5911] usb 3-1: No valid video chain found. [ 194.172324][ T992] usb 3-1: USB disconnect, device number 6 [ 194.393705][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393781][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.475439][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1632'. [ 194.883821][ T9387] sctp: [Deprecated]: syz.1.1640 (pid 9387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.883821][ T9387] Use struct sctp_sack_info instead [ 195.319673][ T9408] siw: device registration error -23 [ 195.364257][ T9412] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1659'. [ 195.364499][ T9412] unsupported nla_type 65024 [ 195.514213][ T9415] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 195.514236][ T9415] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1652'. [ 195.795630][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 196.082337][ T9440] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 197.939304][ T9517] kernel profiling enabled (shift: 62) [ 197.939326][ T9517] profiling shift: 62 too large [ 198.303208][ T9532] dvmrp0: entered allmulticast mode [ 198.651594][ T5924] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.811614][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 198.827299][ T5924] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.827321][ T5924] usb 4-1: config 0 has no interface number 0 [ 198.849032][ T5924] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 198.849060][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.849077][ T5924] usb 4-1: Product: syz [ 198.849089][ T5924] usb 4-1: Manufacturer: syz [ 198.849101][ T5924] usb 4-1: SerialNumber: syz [ 198.890595][ T9560] dlm: non-version read from control device 240 [ 198.924007][ T5924] usb 4-1: config 0 descriptor?? [ 198.929195][ T5924] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 198.929228][ T5924] usb 4-1: selecting invalid altsetting 1 [ 198.929242][ T5924] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 199.023208][ T9562] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1726'. [ 199.063395][ T5924] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 199.077284][ T5924] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 199.077341][ T5924] usb 4-1: media controller created [ 199.205361][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.378810][ T5924] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 199.379649][ T5924] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 199.549733][ T5924] DVB: Unable to find symbol mxl5005s_attach() [ 199.584523][ T5924] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 199.793402][ T5924] usb 4-1: USB disconnect, device number 16 [ 199.981701][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 199.981728][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 199.981741][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 199.981754][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 199.981767][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 199.981780][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 199.981793][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 199.981806][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 199.981829][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 200.655160][ T9626] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.134519][ T9649] overlayfs: overlapping lowerdir path [ 201.472003][ T9646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.546062][ T9664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.036048][ T37] audit: type=1326 audit(1756168535.523:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9688 comm="syz.4.1787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba666bebe9 code=0x0 [ 202.377861][ T9699] Smack: duplicate mount options [ 203.301640][ T992] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 203.398407][ T9743] netlink: 'syz.1.1815': attribute type 1 has an invalid length. [ 203.398431][ T9743] netlink: 'syz.1.1815': attribute type 1 has an invalid length. [ 203.447271][ T9745] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 203.447306][ T9745] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 203.471200][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 203.471231][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 203.508849][ T992] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 203.508875][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.508891][ T992] usb 5-1: Product: syz [ 203.508902][ T992] usb 5-1: Manufacturer: syz [ 203.508913][ T992] usb 5-1: SerialNumber: syz [ 203.555035][ T992] usb 5-1: config 0 descriptor?? [ 203.780458][ T992] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 203.987879][ T992] usb 5-1: USB disconnect, device number 12 [ 204.053176][ T6001] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 204.056323][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 204.201591][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 204.204449][ T6001] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 204.204472][ T6001] usb 1-1: config 179 has no interface number 0 [ 204.204518][ T6001] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 204.204541][ T6001] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 204.204564][ T6001] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 204.204587][ T6001] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 204.204610][ T6001] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 204.204633][ T6001] usb 1-1: config 179 interface 65 has no altsetting 0 [ 204.204663][ T6001] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 204.204682][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.427654][ T6001] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 204.497921][ T5187] input input12: unable to receive magic message: -110 [ 204.725334][ T5187] input input12: unable to receive magic message: -32 [ 204.758190][ T5837] usb 1-1: USB disconnect, device number 9 [ 204.758312][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 204.758643][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 205.516816][ T9805] __nla_validate_parse: 45 callbacks suppressed [ 205.516835][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1842'. [ 205.545984][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1840'. [ 205.546010][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1840'. [ 205.747716][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'. [ 205.843058][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 206.042423][ T5837] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 206.093680][ T9829] ubi: mtd0 is already attached to ubi0 [ 206.194017][ T5837] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 206.194044][ T5837] usb 3-1: config 0 has no interface number 0 [ 206.197101][ T5837] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 206.197127][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.197144][ T5837] usb 3-1: Product: syz [ 206.197157][ T5837] usb 3-1: Manufacturer: syz [ 206.197169][ T5837] usb 3-1: SerialNumber: syz [ 206.254445][ T5837] usb 3-1: config 0 descriptor?? [ 206.277032][ T5837] qmi_wwan 3-1:0.207: bogus CDC Union: master=0, slave=1 [ 206.482010][ T5837] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22 [ 206.699285][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 206.699401][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 206.699426][ T5842] Bluetooth: hci0: command 0x0c20 tx timeout [ 206.699447][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 206.699470][ T5842] Bluetooth: hci1: command 0x080f tx timeout [ 206.726523][ T5837] usb 3-1: USB disconnect, device number 7 [ 207.301926][ T9867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.578905][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1873'. [ 207.578932][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1873'. [ 207.578957][ T9877] netlink: 'syz.4.1873': attribute type 4 has an invalid length. [ 207.988792][ T9889] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1879'. [ 208.481834][ T9915] ±ÿ: renamed from batadv_slave_1 [ 208.586362][ T9919] vxcan1 speed is unknown, defaulting to 1000 [ 208.613213][ T992] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 208.645211][ T9921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1893'. [ 208.649402][ T9919] vxcan1 speed is unknown, defaulting to 1000 [ 208.650819][ T9919] vxcan1 speed is unknown, defaulting to 1000 [ 208.794326][ T992] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 208.794383][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.795980][ T992] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 208.796002][ T992] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 208.796018][ T992] usb 5-1: Manufacturer: syz [ 208.871889][ T992] usb 5-1: config 0 descriptor?? [ 209.006506][ T992] rc_core: IR keymap rc-hauppauge not found [ 209.006525][ T992] Registered IR keymap rc-empty [ 209.010910][ T992] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 209.044798][ T992] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 209.108781][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 209.147383][ T992] usb 5-1: USB disconnect, device number 13 [ 209.188485][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 209.188534][ T9935] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 209.911399][ T9919] infiniband syz2: set active [ 209.918809][ T992] vxcan1 speed is unknown, defaulting to 1000 [ 209.918973][ T9919] infiniband syz2: added vxcan1 [ 209.921073][ T9919] syz2: rxe_create_cq: returned err = -12 [ 209.921143][ T9919] infiniband syz2: Couldn't create ib_mad CQ [ 209.921329][ T9919] infiniband syz2: Couldn't open port 1 [ 210.034230][ T9919] RDS/IB: syz2: added [ 210.035200][ T9919] smc: adding ib device syz2 with port count 1 [ 210.035545][ T9919] smc: ib device syz2 port 1 has pnetid [ 210.040895][ T992] vxcan1 speed is unknown, defaulting to 1000 [ 210.070851][ T9919] vxcan1 speed is unknown, defaulting to 1000 [ 210.830289][ T9919] vxcan1 speed is unknown, defaulting to 1000 [ 211.516614][T10022] __nla_validate_parse: 2 callbacks suppressed [ 211.516631][T10022] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1943'. [ 211.671408][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 211.671438][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1946'. [ 211.750429][T10028] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.1945'. [ 211.750524][T10028] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.1945'. [ 211.750540][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1945'. [ 212.026153][ T9919] vxcan1 speed is unknown, defaulting to 1000 [ 212.524089][T10055] trusted_key: encrypted_key: insufficient parameters specified [ 213.002243][T10074] syz.3.1964: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 213.002640][T10074] CPU: 0 UID: 0 PID: 10074 Comm: syz.3.1964 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.002662][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.002676][T10074] Call Trace: [ 213.002684][T10074] [ 213.002692][T10074] dump_stack_lvl+0x189/0x250 [ 213.002732][T10074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.002757][T10074] ? __pfx__printk+0x10/0x10 [ 213.002777][T10074] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 213.002797][T10074] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 213.002819][T10074] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 213.002841][T10074] warn_alloc+0x22e/0x3b0 [ 213.002876][T10074] ? __pfx_warn_alloc+0x10/0x10 [ 213.002907][T10074] ? __kasan_kmalloc+0x93/0xb0 [ 213.002926][T10074] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 213.002948][T10074] ? xskq_create+0x56/0x170 [ 213.002967][T10074] ? xsk_init_queue+0xb0/0x110 [ 213.002984][T10074] ? xsk_setsockopt+0x4dc/0x8d0 [ 213.003000][T10074] ? do_sock_setsockopt+0x17c/0x1b0 [ 213.003021][T10074] ? __x64_sys_setsockopt+0x145/0x1b0 [ 213.003042][T10074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.003068][T10074] __vmalloc_node_range_noprof+0x125/0x12f0 [ 213.003124][T10074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.003156][T10074] ? __kasan_kmalloc+0x93/0xb0 [ 213.003179][T10074] vmalloc_user_noprof+0xad/0xf0 [ 213.003202][T10074] ? xskq_create+0xbf/0x170 [ 213.003223][T10074] xskq_create+0xbf/0x170 [ 213.003246][T10074] xsk_init_queue+0xb0/0x110 [ 213.003269][T10074] xsk_setsockopt+0x4dc/0x8d0 [ 213.003291][T10074] ? __pfx_xsk_setsockopt+0x10/0x10 [ 213.003331][T10074] ? __fget_files+0x2a/0x420 [ 213.003354][T10074] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 213.003373][T10074] ? __pfx_xsk_setsockopt+0x10/0x10 [ 213.003395][T10074] do_sock_setsockopt+0x17c/0x1b0 [ 213.003422][T10074] __x64_sys_setsockopt+0x145/0x1b0 [ 213.003452][T10074] do_syscall_64+0xfa/0x3b0 [ 213.003473][T10074] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.003494][T10074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.003512][T10074] ? clear_bhb_loop+0x60/0xb0 [ 213.003534][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.003550][T10074] RIP: 0033:0x7f270fadebe9 [ 213.003572][T10074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.003587][T10074] RSP: 002b:00007f270dd46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.003605][T10074] RAX: ffffffffffffffda RBX: 00007f270fd05fa0 RCX: 00007f270fadebe9 [ 213.003619][T10074] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 213.003631][T10074] RBP: 00007f270fb61e19 R08: 0000000000000052 R09: 0000000000000000 [ 213.003643][T10074] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.003655][T10074] R13: 00007f270fd06038 R14: 00007f270fd05fa0 R15: 00007fff67bfee98 [ 213.003688][T10074] [ 213.003698][T10074] Mem-Info: [ 213.003717][T10074] active_anon:265 inactive_anon:6090 isolated_anon:0 [ 213.003717][T10074] active_file:5310 inactive_file:37738 isolated_file:0 [ 213.003717][T10074] unevictable:768 dirty:280 writeback:0 [ 213.003717][T10074] slab_reclaimable:12028 slab_unreclaimable:104173 [ 213.003717][T10074] mapped:30219 shmem:1359 pagetables:1262 [ 213.003717][T10074] sec_pagetables:0 bounce:0 [ 213.003717][T10074] kernel_misc_reclaimable:0 [ 213.003717][T10074] free:1332478 free_pcp:2488 free_cma:0 [ 213.003769][T10074] Node 0 active_anon:1060kB inactive_anon:24360kB active_file:21040kB inactive_file:150952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120876kB dirty:1116kB writeback:0kB shmem:3900kB kernel_stack:12892kB pagetables:4940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.003814][T10074] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.003855][T10074] Node 0 DMA free:15296kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.003910][T10074] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 213.003944][T10074] Node 0 DMA32 free:1417656kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1056kB inactive_anon:24320kB active_file:20028kB inactive_file:150884kB unevictable:1536kB writepending:1116kB present:3129332kB managed:2572332kB mlocked:0kB bounce:0kB free_pcp:9944kB local_pcp:3076kB free_cma:0kB [ 213.003999][T10074] lowmem_reserve[]: 0 0 1 1 1 [ 213.004029][T10074] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1012kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 213.004080][T10074] lowmem_reserve[]: 0 0 0 0 0 [ 213.004110][T10074] Node 1 Normal free:3896960kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.004152][T10074] lowmem_reserve[]: 0 0 0 0 0 [ 213.004178][T10074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 213.004707][T10074] Node 0 DMA32: 225*4kB (UM) 392*8kB (UME) 266*16kB (UME) 518*32kB (UM) 130*64kB (UME) 15*128kB (ME) 10*256kB (UME) 3*512kB (UM) 2*1024kB (M) 4*2048kB (M) 334*4096kB (UM) = 1417508kB [ 213.004848][T10074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.004930][T10074] Node 1 Normal: 196*4kB (UME) 36*8kB (UME) 35*16kB (UME) 231*32kB (UME) 89*64kB (UME) 36*128kB (UME) 19*256kB (UME) 6*512kB (UME) 1*1024kB (M) 3*2048kB (ME) 943*4096kB (M) = 3896960kB [ 213.005074][T10074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.005090][T10074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.005105][T10074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.005120][T10074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.005135][T10074] 44405 total pagecache pages [ 213.005147][T10074] 0 pages in swap cache [ 213.005153][T10074] Free swap = 124996kB [ 213.005161][T10074] Total swap = 124996kB [ 213.005168][T10074] 2097051 pages RAM [ 213.005175][T10074] 0 pages HighMem/MovableOnly [ 213.005181][T10074] 422070 pages reserved [ 213.005187][T10074] 0 pages cma reserved [ 213.255728][ T9919] vxcan1 speed is unknown, defaulting to 1000 [ 213.453817][T10085] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1968'. [ 214.028867][T10103] netlink: 'syz.0.1976': attribute type 2 has an invalid length. [ 214.028889][T10103] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 214.071340][T10105] openvswitch: netlink: ct_state flags 7fffffff unsupported [ 214.198269][T10109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1978'. [ 214.198296][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 214.198310][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1978'. [ 214.252749][T10111] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 214.778295][ T6001] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 214.820804][ T9919] vxcan1 speed is unknown, defaulting to 1000 [ 214.936127][ T6001] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 214.936186][ T6001] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.936210][ T6001] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 214.936230][ T6001] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.936268][ T6001] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.936288][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.096040][ T6001] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.097162][ T6001] usb 1-1: invalid MIDI out EP 0 [ 215.435477][T10149] /dev/sg0: Can't lookup blockdev [ 215.595815][ T6001] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 215.670267][ T6001] usb 1-1: USB disconnect, device number 10 [ 216.243565][ T6001] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.421057][ T6001] usb 1-1: Using ep0 maxpacket: 16 [ 216.423559][ T6001] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 216.423584][ T6001] usb 1-1: config 254 has no interface number 0 [ 216.423634][ T6001] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 216.423658][ T6001] usb 1-1: config 254 interface 235 has no altsetting 0 [ 216.426522][ T6001] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 216.426547][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.426563][ T6001] usb 1-1: Product: syz [ 216.426575][ T6001] usb 1-1: Manufacturer: syz [ 216.426588][ T6001] usb 1-1: SerialNumber: syz [ 216.472123][T10167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.721340][T10167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.738323][ T6001] usbtest 1-1:254.235: Linux gadget zero [ 216.738342][ T6001] usbtest 1-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 216.933975][ T5924] usb 1-1: USB disconnect, device number 11 [ 217.491850][T10215] netlink: 'syz.4.2023': attribute type 10 has an invalid length. [ 217.715716][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 217.715743][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 219.170181][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 219.238186][T10296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2063'. [ 219.238212][T10296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2063'. [ 219.238226][T10296] netlink: 492 bytes leftover after parsing attributes in process `syz.2.2063'. [ 219.336359][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 219.339698][ T5911] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.339727][ T5911] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.339763][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 219.339783][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.381017][ T5911] hub 2-1:4.0: USB hub found [ 219.596296][ T5911] hub 2-1:4.0: config failed, can't read hub descriptor (err -90) [ 219.667697][ T6001] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.830826][ T6001] usb 5-1: Using ep0 maxpacket: 8 [ 219.837517][ T6001] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 219.837545][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.837563][ T6001] usb 5-1: Product: syz [ 219.837576][ T6001] usb 5-1: Manufacturer: syz [ 219.837589][ T6001] usb 5-1: SerialNumber: syz [ 219.869089][ T6001] usb 5-1: config 0 descriptor?? [ 219.874454][ T6001] gspca_main: se401-2.14.0 probing 047d:5003 [ 219.922846][ T5924] usb 2-1: USB disconnect, device number 9 [ 220.329220][ T6001] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 220.329323][ T6001] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 220.361855][ T6001] usb 5-1: USB disconnect, device number 14 [ 221.022615][ T31] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 221.115652][T10358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2094'. [ 221.176260][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'. [ 221.195079][ T31] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 221.195104][ T31] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 221.195122][ T31] usb 4-1: config 0 has no interface number 0 [ 221.195144][ T31] usb 4-1: config 0 has no interface number 1 [ 221.195229][ T31] usb 4-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 221.195266][ T31] usb 4-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 221.195290][ T31] usb 4-1: config 0 interface 3 has no altsetting 0 [ 221.195322][ T31] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 221.195343][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.219586][ T31] usb 4-1: config 0 descriptor?? [ 221.419118][T10367] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.2) [ 221.457107][ T31] usb 4-1: Could not set interface, error -71 [ 221.495598][T10370] netlink: 'syz.0.2099': attribute type 11 has an invalid length. [ 221.552785][ T31] usb 4-1: selecting invalid altsetting 0 [ 221.552808][ T31] usb 4-1: Could not set interface, error -22 [ 221.618286][ T31] usb 4-1: USB disconnect, device number 17 [ 221.788776][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2101'. [ 223.456341][T10455] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2139'. [ 223.456367][T10455] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2139'. [ 223.456381][T10455] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2139'. [ 223.566720][T10463] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.2143'. [ 223.566818][T10463] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.2143'. [ 224.186391][T10483] netlink: 'syz.2.2153': attribute type 11 has an invalid length. [ 224.186415][T10483] netlink: 'syz.2.2153': attribute type 4 has an invalid length. [ 224.186428][T10483] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2153'. [ 224.214778][T10487] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.214808][T10487] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 224.214818][T10487] overlayfs: missing 'lowerdir' [ 224.372269][T10489] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 225.145847][T10526] ip6erspan0: entered allmulticast mode [ 225.324584][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2178'. [ 225.599541][T10548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.927953][T10606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.133535][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'. [ 227.749849][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 227.821408][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.901651][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 227.906813][ T5925] usb 2-1: config 5 has an invalid interface number: 35 but max is 0 [ 227.906847][ T5925] usb 2-1: config 5 has no interface number 0 [ 227.906896][ T5925] usb 2-1: config 5 interface 35 altsetting 10 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 227.906920][ T5925] usb 2-1: config 5 interface 35 has no altsetting 0 [ 227.910114][ T5925] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 227.910142][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.910160][ T5925] usb 2-1: Product: syz [ 227.910173][ T5925] usb 2-1: Manufacturer: syz [ 227.910185][ T5925] usb 2-1: SerialNumber: syz [ 227.974949][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 227.974976][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.988280][ T31] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 227.988306][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.988323][ T31] usb 1-1: Product: syz [ 227.988335][ T31] usb 1-1: Manufacturer: syz [ 227.988347][ T31] usb 1-1: SerialNumber: syz [ 228.045098][ T31] usb 1-1: config 0 descriptor?? [ 228.064051][ T31] usb 1-1: ucan: probing device on interface #0 [ 228.064076][ T31] usb 1-1: ucan: invalid EP count (1) [ 228.064090][ T31] usb 1-1: ucan: probe failed; try to update the device firmware [ 228.263570][ T31] usb 1-1: USB disconnect, device number 12 [ 228.340095][ T5925] ttusbir 2-1:5.35: cannot find expected altsetting [ 228.375073][ T5925] usb 2-1: USB disconnect, device number 10 [ 228.626231][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2241'. [ 228.737457][T10658] ISOFS: Unable to identify CD-ROM format. [ 228.895348][T10672] netlink: 'syz.2.2243': attribute type 1 has an invalid length. [ 229.069272][ T992] hid-generic FFFA:0008:0008.0001: unknown main item tag 0x4 [ 229.198334][ T992] hid-generic FFFA:0008:0008.0001: hidraw0: HID v7fffff.ff Device [syz1] on syz0 [ 229.436309][ T37] audit: type=1326 audit(1756169075.565:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10691 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 229.436367][ T37] audit: type=1326 audit(1756169075.565:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10691 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 229.489806][ T37] audit: type=1326 audit(1756169075.624:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10691 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 229.489859][ T37] audit: type=1326 audit(1756169075.624:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10691 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 229.489907][ T37] audit: type=1326 audit(1756169075.624:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10691 comm="syz.3.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 229.586024][T10685] fido_id[10685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.986227][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2262'. [ 230.771768][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'. [ 231.101109][T10756] netlink: 'syz.4.2280': attribute type 10 has an invalid length. [ 231.173014][T10756] veth0_macvtap: left promiscuous mode [ 231.238015][T10756] batman_adv: batadv0: Adding interface: macvtap0 [ 231.238031][T10756] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.238057][T10756] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 231.568331][T10775] ./bus: Can't lookup blockdev [ 231.962501][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 232.027020][T10795] netlink: 'syz.4.2300': attribute type 2 has an invalid length. [ 232.027041][T10795] netlink: 'syz.4.2300': attribute type 1 has an invalid length. [ 232.027053][T10795] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2300'. [ 232.070978][T10799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 232.147081][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 232.147108][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 232.147128][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 232.147147][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 232.147182][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 232.147201][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.152594][ T31] usb 2-1: config 0 descriptor?? [ 232.425149][ T31] hdpvr 2-1:0.0: firmware version 0x0 dated [ 232.425168][ T31] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 232.584218][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2310'. [ 232.584254][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 232.631163][ T31] hdpvr 2-1:0.0: device init failed [ 232.631248][ T31] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 232.666123][ T31] usb 2-1: USB disconnect, device number 11 [ 232.758230][T10813] bridge1: entered promiscuous mode [ 232.758262][T10813] bridge1: entered allmulticast mode [ 232.779172][T10817] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2311'. [ 233.433345][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2325'. [ 233.433376][T10845] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.456279][T10923] pim6reg: entered allmulticast mode [ 235.975606][ T37] audit: type=1326 audit(1756169082.059:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.0.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cfdaebe9 code=0x7ffc0000 [ 235.986016][ T37] audit: type=1326 audit(1756169082.069:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.0.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f85cfdaebe9 code=0x7ffc0000 [ 235.986535][ T37] audit: type=1326 audit(1756169082.069:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.0.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cfdaebe9 code=0x7ffc0000 [ 235.986578][ T37] audit: type=1326 audit(1756169082.069:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.0.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cfdaebe9 code=0x7ffc0000 [ 236.415393][ T5151] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 236.427224][ T37] audit: type=1326 audit(1756169082.506:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10959 comm="syz.4.2381" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba666bebe9 code=0x0 [ 237.200559][T10985] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2394'. [ 237.933666][T11005] netlink: 'syz.1.2403': attribute type 4 has an invalid length. [ 238.258218][ T31] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 238.295618][T11018] netlink: 'syz.2.2409': attribute type 15 has an invalid length. [ 238.425454][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.425480][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.425532][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.431046][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.431073][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.431090][ T31] usb 1-1: Product: syz [ 238.431103][ T31] usb 1-1: Manufacturer: syz [ 238.431115][ T31] usb 1-1: SerialNumber: syz [ 238.492606][ T31] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 238.492628][ T31] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 238.492665][ T31] cdc_ncm 1-1:1.0: bind() failure [ 238.703533][ T5837] usb 1-1: USB disconnect, device number 13 [ 239.039078][T11040] QAT: failed to copy from user cfg_data. [ 240.284215][T11087] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 240.284235][T11087] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 240.390097][ T5925] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 240.540833][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 240.543150][ T5925] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 240.543176][ T5925] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 240.543193][ T5925] usb 1-1: config 0 has no interface number 0 [ 240.580131][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 240.580159][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.580176][ T5925] usb 1-1: Product: syz [ 240.580189][ T5925] usb 1-1: Manufacturer: syz [ 240.580202][ T5925] usb 1-1: SerialNumber: syz [ 240.602024][ T5925] usb 1-1: config 0 descriptor?? [ 240.663590][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'. [ 240.841033][ T5925] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 240.841067][ T5925] usb 1-1: No valid video chain found. [ 240.903105][ T5925] usb 1-1: USB disconnect, device number 14 [ 240.961193][T11104] netlink: 'syz.1.2444': attribute type 27 has an invalid length. [ 240.989205][ T37] audit: type=1326 audit(1756169087.040:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11102 comm="syz.2.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 240.991133][ T37] audit: type=1326 audit(1756169087.040:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11102 comm="syz.2.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 241.028018][ T37] audit: type=1326 audit(1756169087.080:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11102 comm="syz.2.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 241.038722][ T37] audit: type=1326 audit(1756169087.090:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11102 comm="syz.2.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 241.326974][T11116] cgroup: noprefix used incorrectly [ 241.693692][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 242.135458][T11147] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 242.135492][T11147] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 242.135701][T11147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 242.485856][T11162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2464'. [ 242.485886][T11162] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2464'. [ 243.112941][ T6001] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 243.118533][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2478'. [ 243.267240][ T6001] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 243.267351][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.307002][ T6001] usb 1-1: config 0 descriptor?? [ 243.321886][ T6001] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 243.741724][ T6001] gspca_stv06xx: I2C: Read error writing address: -71 [ 243.764891][ T6001] usb 1-1: USB disconnect, device number 15 [ 244.804944][ T37] audit: type=1326 audit(1756169090.843:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11243 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 244.804995][ T37] audit: type=1326 audit(1756169090.843:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11243 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 244.851573][ T37] audit: type=1326 audit(1756169090.893:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11243 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 244.851700][ T37] audit: type=1326 audit(1756169090.893:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11243 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 244.851847][ T37] audit: type=1326 audit(1756169090.893:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11243 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 245.451009][T11262] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2513'. [ 245.763446][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 245.918550][ T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 245.918579][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.943205][ T31] usb 5-1: config 0 descriptor?? [ 246.363036][ T31] ath6kl: Failed to submit usb control message: -71 [ 246.363089][ T31] ath6kl: unable to send the bmi data to the device: -71 [ 246.363103][ T31] ath6kl: Unable to send get target info: -71 [ 246.385542][ T31] ath6kl: Failed to init ath6kl core: -71 [ 246.387140][ T31] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 246.433819][ T31] usb 5-1: USB disconnect, device number 15 [ 246.768281][T11293] netlink: 'syz.1.2527': attribute type 6 has an invalid length. [ 246.768301][T11293] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2527'. [ 247.278729][T11313] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2537'. [ 247.278758][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 248.500757][T11348] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 249.063771][T11367] netlink: 'syz.0.2563': attribute type 33 has an invalid length. [ 249.063794][T11367] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2563'. [ 249.481535][ T5925] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 249.634097][ T5925] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 249.634123][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.634140][ T5925] usb 2-1: config 0 has no interface number 0 [ 249.634187][ T5925] usb 2-1: config 0 interface 231 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.634212][ T5925] usb 2-1: config 0 interface 231 has no altsetting 0 [ 249.638499][ T5925] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 249.638525][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.638543][ T5925] usb 2-1: Product: syz [ 249.638556][ T5925] usb 2-1: Manufacturer: syz [ 249.638568][ T5925] usb 2-1: SerialNumber: syz [ 249.657983][ T5925] usb 2-1: config 0 descriptor?? [ 249.821552][ T37] audit: type=1326 audit(1756169095.837:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11391 comm="syz.2.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 249.824412][ T37] audit: type=1326 audit(1756169095.837:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11391 comm="syz.2.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 249.824688][ T37] audit: type=1326 audit(1756169095.837:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11391 comm="syz.2.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 249.825108][ T37] audit: type=1326 audit(1756169095.837:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11391 comm="syz.2.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 249.825367][ T37] audit: type=1326 audit(1756169095.837:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11391 comm="syz.2.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4a97ebe9 code=0x7ffc0000 [ 249.894910][ T5925] asix 2-1:0.231 (unnamed net_device) (uninitialized): invalid hw address, using random [ 250.040881][T11398] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 250.040902][T11398] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2579'. [ 250.040928][T11398] NCSI netlink: No device for ifindex 0 [ 250.091658][ T5925] asix 2-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 250.091687][ T5925] asix 2-1:0.231 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 250.091952][ T5925] asix 2-1:0.231: probe with driver asix failed with error -71 [ 250.138346][ T5925] usb 2-1: USB disconnect, device number 12 [ 250.258392][ T37] audit: type=1326 audit(1756169096.275:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 250.263570][ T37] audit: type=1326 audit(1756169096.275:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 250.264418][ T37] audit: type=1326 audit(1756169096.275:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 250.264707][ T37] audit: type=1326 audit(1756169096.275:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 250.264945][ T37] audit: type=1326 audit(1756169096.275:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba666bebe9 code=0x7ffc0000 [ 250.378048][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 250.538328][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 250.542179][ T31] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 250.542206][ T31] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 250.542223][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 250.542275][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 250.542295][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 250.542316][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.568990][ T31] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 250.569016][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.569034][ T31] usb 1-1: Product: syz [ 250.569046][ T31] usb 1-1: Manufacturer: syz [ 250.569058][ T31] usb 1-1: SerialNumber: syz [ 250.595048][ T31] usb 1-1: config 0 descriptor?? [ 250.621173][ T31] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 250.621593][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 250.621664][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 250.706326][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 250.706847][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 250.707291][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 250.707396][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 250.707479][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 250.833321][ T31] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 250.944453][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 250.944590][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 250.944675][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 250.944756][ T31] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 250.964837][ T31] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 251.010897][ T31] usb 1-1: USB disconnect, device number 16 [ 251.098616][ T31] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 251.163148][ T31] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 251.164051][ T31] keyspan 1-1:0.0: device disconnected [ 251.571252][T11433] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 251.571290][T11433] syz_tun: entered promiscuous mode [ 251.604793][T11433] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 251.741590][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2595'. [ 252.637466][T11451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2601'. [ 252.637492][T11451] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2601'. [ 252.637506][T11451] netlink: 'syz.0.2601': attribute type 5 has an invalid length. [ 252.637517][T11451] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2601'. [ 253.836518][ T5910] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 253.991290][ T5910] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 253.991318][ T5910] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 253.991336][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 253.991371][ T5910] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 253.991409][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 253.991433][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 253.991456][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 253.995584][ T5910] usb 5-1: string descriptor 0 read error: -22 [ 253.995752][ T5910] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 253.995774][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.115959][ T5910] usb 5-1: config 0 descriptor?? [ 254.117225][T11497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.146617][ T5910] hub 5-1:0.0: bad descriptor, ignoring hub [ 254.146657][ T5910] hub 5-1:0.0: probe with driver hub failed with error -5 [ 254.166725][ T5910] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 254.301630][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 254.361739][T11518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2634'. [ 254.361773][T11518] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2634'. [ 254.362047][T11518] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2634'. [ 254.576634][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 254.652736][ T5837] usb 5-1: USB disconnect, device number 16 [ 254.652737][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 255.568282][T11556] bond2: entered allmulticast mode [ 255.590571][T11556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.679596][T11565] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 255.679620][T11565] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2651'. [ 256.201198][ T5911] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 256.296812][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.296886][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.368245][ T5911] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.368272][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.368290][ T5911] usb 1-1: Product: syz [ 256.368303][ T5911] usb 1-1: Manufacturer: syz [ 256.368315][ T5911] usb 1-1: SerialNumber: syz [ 256.423645][ T5911] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.530064][ T5911] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.785201][ C0] usb 1-1: ath: unknown panic pattern! [ 256.972164][T11615] syz.4.2672 (11615): drop_caches: 0 [ 256.988321][ T5837] usb 1-1: USB disconnect, device number 17 [ 257.191171][T11625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2679'. [ 257.664297][ T5911] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 257.664997][ T5911] ath9k_htc: Failed to initialize the device [ 257.673824][ T5837] usb 1-1: ath9k_htc: USB layer deinitialized [ 257.803721][T11651] netlink: 'syz.1.2690': attribute type 3 has an invalid length. [ 257.803741][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 258.516518][T11680] ======================================================= [ 258.516518][T11680] WARNING: The mand mount option has been deprecated and [ 258.516518][T11680] and is ignored by this kernel. Remove the mand [ 258.516518][T11680] option from the mount to silence this warning. [ 258.516518][T11680] ======================================================= [ 258.599755][T11684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2707'. [ 259.111682][T11704] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 259.297830][T11711] netlink: 'syz.1.2720': attribute type 3 has an invalid length. [ 259.297852][T11711] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2720'. [ 259.404063][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 259.859199][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'. [ 259.859222][T11731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2730'. [ 260.105646][T11740] netlink: 'syz.3.2732': attribute type 41 has an invalid length. [ 260.324092][T11748] tmpfs: Bad value for 'mpol' [ 260.594649][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 260.701464][T11765] netlink: zone id is out of range [ 261.010045][T11778] netlink: 'syz.1.2754': attribute type 287 has an invalid length. [ 261.089037][T11780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2753'. [ 261.704719][T11806] bond0: (slave bond_slave_1): Releasing backup interface [ 261.990266][T11820] netlink: 'syz.4.2775': attribute type 1 has an invalid length. [ 261.990287][T11820] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2775'. [ 262.234215][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.416820][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2783'. [ 264.161555][T11886] netlink: 'syz.3.2806': attribute type 1 has an invalid length. [ 264.161578][T11886] netlink: 'syz.3.2806': attribute type 1 has an invalid length. [ 264.589900][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2814'. [ 265.005708][T11913] cgroup: none used incorrectly [ 265.077645][T11916] netlink: 'syz.3.2821': attribute type 21 has an invalid length. [ 265.077748][T11916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2821'. [ 265.954714][T11954] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2841'. [ 266.671023][T11984] netlink: 'syz.4.2853': attribute type 1 has an invalid length. [ 268.058476][T12042] netlink: 'syz.1.2882': attribute type 13 has an invalid length. [ 268.356512][T12053] netlink: 'syz.3.2887': attribute type 1 has an invalid length. [ 268.557594][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 268.557616][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 268.557639][T12065] netlink: 'syz.3.2891': attribute type 7 has an invalid length. [ 269.991714][T12123] program syz.0.2919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.428584][T12107] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 270.428613][T12107] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 270.691801][T12107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.691825][T12107] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 270.874925][T12107] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.874950][T12107] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 270.952765][T12107] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.952787][T12107] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 270.964781][T12107] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 270.964804][T12107] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 271.090683][ T6001] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 271.239506][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 271.242549][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.242578][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.242600][ T6001] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 271.242638][ T6001] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 271.242657][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.299400][ T6001] usb 1-1: config 0 descriptor?? [ 271.548806][T12170] devtmpfs: Too few inodes for current use [ 271.762250][ T6001] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 271.762284][ T6001] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 271.762309][ T6001] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 271.762332][ T6001] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 271.830598][T12174] netlink: 'syz.1.2939': attribute type 1 has an invalid length. [ 271.848693][ T6001] logitech 0003:046D:C293.0002: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0 [ 271.848743][ T6001] logitech 0003:046D:C293.0002: no inputs found [ 271.977052][ T6001] usb 1-1: USB disconnect, device number 18 [ 272.187362][T12178] fido_id[12178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 272.389936][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2945'. [ 272.742666][T12107] batman_adv: batadv0: Interface deactivated: wlan0 [ 273.640624][ T6001] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 273.794903][ T6001] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.794935][ T6001] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.794955][ T6001] usb 1-1: config 0 interface 0 has no altsetting 0 [ 273.794986][ T6001] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 273.795006][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.855640][ T6001] usb 1-1: config 0 descriptor?? [ 274.399147][ T6001] lenovo 0003:17EF:60EE.0003: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 274.519856][ T6001] lenovo 0003:17EF:60EE.0003: Failed to switch middle button: -71 [ 274.530014][ T6001] lenovo 0003:17EF:60EE.0003: Fn-lock setting failed: -71 [ 274.532991][ T6001] lenovo 0003:17EF:60EE.0003: Sensitivity setting failed: -71 [ 274.601204][ T6001] usb 1-1: USB disconnect, device number 19 [ 274.759256][T12253] fido_id[12253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 275.923002][ T1084] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 276.077720][ T1084] usb 5-1: Using ep0 maxpacket: 32 [ 276.080094][ T1084] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.080124][ T1084] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 276.080148][ T1084] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.080180][ T1084] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 276.080200][ T1084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.150671][ T1084] usb 5-1: config 0 descriptor?? [ 276.193516][ T5837] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 276.252243][T12310] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2985'. [ 276.352227][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 276.358130][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.358161][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.358238][ T5837] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.363899][ T5837] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 276.363925][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 276.364004][ T5837] usb 1-1: Product: syz [ 276.364017][ T5837] usb 1-1: Manufacturer: syz [ 276.364029][ T5837] usb 1-1: SerialNumber: syz [ 276.493302][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 276.597608][ T5837] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input19 [ 276.612397][ T1084] wacom 0003:056A:0094.0004: Using device in hidraw-only mode [ 276.616225][ T1084] wacom 0003:056A:0094.0004: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 276.809829][ T6001] usb 5-1: USB disconnect, device number 17 [ 276.974679][ T1084] usb 1-1: USB disconnect, device number 20 [ 277.139509][T12339] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 277.149261][T12333] fido_id[12333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 277.167978][ T1084] appletouch 1-1:1.0: input: appletouch disconnected [ 277.814682][T12361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3003'. [ 277.814728][T12361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3003'. [ 278.656015][T12391] ntfs3: Bad value for 'gid' [ 278.656034][T12391] ntfs3: Bad value for 'gid' [ 280.424099][ T5837] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 280.513933][ T6001] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 280.574125][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 280.576840][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 280.594638][ T5837] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 280.594664][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.594682][ T5837] usb 3-1: Product: syz [ 280.594694][ T5837] usb 3-1: Manufacturer: syz [ 280.594707][ T5837] usb 3-1: SerialNumber: syz [ 280.633621][ T5837] usb 3-1: config 0 descriptor?? [ 280.706523][ T6001] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 280.706583][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 280.706607][ T6001] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.706639][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 280.706662][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 280.710800][ T6001] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 280.710855][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 280.710879][ T6001] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.710901][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 280.710925][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 280.712355][ T6001] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 280.712407][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 280.712449][ T6001] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.712471][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 280.712494][ T6001] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 280.725266][ T6001] usb 5-1: string descriptor 0 read error: -22 [ 280.725407][ T6001] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 280.725428][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.844586][ T6001] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 281.090739][ T5837] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 281.090781][ T5837] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 281.307946][ T992] usb 3-1: USB disconnect, device number 8 [ 282.355949][T12523] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 282.435798][T12526] tipc: Started in network mode [ 282.435828][T12526] tipc: Node identity 7, cluster identity 4711 [ 282.435840][T12526] tipc: Node number set to 7 [ 283.198544][ T6001] usb 5-1: USB disconnect, device number 18 [ 283.314936][ T992] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 283.478613][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.478663][ T992] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 283.478683][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.497964][ T992] usb 3-1: config 0 descriptor?? [ 283.987917][ T992] hid_mf 0003:0079:1846.0005: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 283.987949][ T992] hid_mf 0003:0079:1846.0005: Invalid report, this should never happen! [ 283.987962][ T992] hid_mf 0003:0079:1846.0005: Force feedback init failed. [ 284.173997][ T992] usb 3-1: USB disconnect, device number 9 [ 284.345710][T12577] fido_id[12577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 285.125385][ T5925] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 285.167139][ T37] audit: type=1326 audit(1756169131.205:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12608 comm="syz.3.3094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f270fadebe9 code=0x0 [ 285.278083][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.278114][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.278147][ T5925] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 285.278178][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.283776][ T5925] usb 3-1: config 0 descriptor?? [ 285.736150][ T5925] samsung 0003:0419:0001.0006: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 285.938661][ T5837] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 285.940763][ T5910] usb 3-1: USB disconnect, device number 10 [ 286.086109][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 286.095104][ T5837] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 286.095129][ T5837] usb 1-1: config 0 has no interface number 0 [ 286.138260][ T5837] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 286.138287][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.138302][ T5837] usb 1-1: Product: syz [ 286.138313][ T5837] usb 1-1: Manufacturer: syz [ 286.138326][ T5837] usb 1-1: SerialNumber: syz [ 286.176772][ T5837] usb 1-1: config 0 descriptor?? [ 286.205994][ T5837] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 286.437046][ T5837] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 286.490272][ T5837] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 286.857673][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 286.872900][ T5837] usb 1-1: USB disconnect, device number 21 [ 287.071278][T12654] sp0: Synchronizing with TNC [ 287.170528][T12659] sp0: Found TNC [ 287.539905][ T37] audit: type=1326 audit(1756169133.575:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.3.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 287.539958][ T37] audit: type=1326 audit(1756169133.575:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.3.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 287.597035][ T37] audit: type=1326 audit(1756169133.635:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.3.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 287.597085][ T37] audit: type=1326 audit(1756169133.635:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.3.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 287.597133][ T37] audit: type=1326 audit(1756169133.635:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12666 comm="syz.3.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270fadebe9 code=0x7ffc0000 [ 287.846261][ T5837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 287.852226][ T5837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 287.853192][ T5837] quatech2 1-1:0.51: device disconnected [ 291.935291][ C1] sched: DL replenish lagged too much [ 303.078505][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.095142][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.096808][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.098013][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.098852][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.207427][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.207888][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.208290][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.212243][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.213026][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.619784][ T5151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.641075][ T5151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.642405][ T5151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.643676][ T5151] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.644510][ T5151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.847051][ T5151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.875787][ T5151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.880207][ T5151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.881444][ T5151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.882288][ T5151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.357587][ T5151] Bluetooth: hci5: command tx timeout [ 305.585453][T12715] wg1 speed is unknown, defaulting to 1000 [ 305.738931][T12713] wg1 speed is unknown, defaulting to 1000 [ 305.758826][T12715] vxcan1 speed is unknown, defaulting to 1000 [ 305.782085][T12705] wg1 speed is unknown, defaulting to 1000 [ 306.594379][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 306.715702][ T5151] Bluetooth: hci6: command tx timeout [ 307.039782][ T5151] Bluetooth: hci7: command tx timeout [ 307.448393][ T5151] Bluetooth: hci5: command tx timeout [ 307.759747][T12705] vxcan1 speed is unknown, defaulting to 1000 [ 308.796521][ T5151] Bluetooth: hci6: command tx timeout [ 309.118022][ T5151] Bluetooth: hci7: command tx timeout [ 309.419643][T12715] chnl_net:caif_netlink_parms(): no params data found [ 309.515587][ T5151] Bluetooth: hci5: command tx timeout [ 310.875704][ T5151] Bluetooth: hci6: command tx timeout [ 311.195581][ T5151] Bluetooth: hci7: command tx timeout [ 311.595587][ T5151] Bluetooth: hci5: command tx timeout [ 312.955555][ T5151] Bluetooth: hci6: command tx timeout [ 313.275721][ T5151] Bluetooth: hci7: command tx timeout [ 317.777131][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.777216][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.323324][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.346299][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.348520][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.351391][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.355085][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.496918][T12713] vxcan1 speed is unknown, defaulting to 1000 [ 328.503319][ T59] Bluetooth: hci0: command tx timeout [ 330.565436][ T59] Bluetooth: hci0: command tx timeout [ 332.635393][ T59] Bluetooth: hci0: command tx timeout [ 334.715511][ T59] Bluetooth: hci0: command tx timeout [ 342.643325][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.668676][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.670005][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.671760][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.696647][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.795678][ T5151] Bluetooth: hci1: command tx timeout [ 346.875577][ T5151] Bluetooth: hci1: command tx timeout [ 348.955569][ T5151] Bluetooth: hci1: command tx timeout [ 351.035541][ T5151] Bluetooth: hci1: command tx timeout [ 363.327532][T12680] bond0: (slave syz_tun): Releasing backup interface [ 364.331869][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.367128][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.370722][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.371958][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.372783][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.563147][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.600791][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.604639][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.628496][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.629479][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.749679][ T5151] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 365.772581][ T5151] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 365.773842][ T5151] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 365.775051][ T5151] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 365.803332][ T5151] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 366.475513][ T5151] Bluetooth: hci2: command tx timeout [ 367.755592][ T5151] Bluetooth: hci4: command tx timeout [ 367.915944][ T5151] Bluetooth: hci8: command tx timeout [ 368.555662][ T5151] Bluetooth: hci2: command tx timeout [ 369.835717][ T5151] Bluetooth: hci4: command tx timeout [ 369.997118][ T5151] Bluetooth: hci8: command tx timeout [ 370.635543][ T5151] Bluetooth: hci2: command tx timeout [ 371.915488][ T5151] Bluetooth: hci4: command tx timeout [ 372.075913][ T5151] Bluetooth: hci8: command tx timeout [ 372.716095][ T5151] Bluetooth: hci2: command tx timeout [ 373.995839][ T5151] Bluetooth: hci4: command tx timeout [ 374.155706][ T5151] Bluetooth: hci8: command tx timeout [ 379.204326][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.204403][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.006869][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.035442][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.041177][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.042975][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.044356][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.115475][ T59] Bluetooth: hci3: command tx timeout [ 391.195531][ T59] Bluetooth: hci3: command tx timeout [ 393.275582][ T59] Bluetooth: hci3: command tx timeout [ 395.355948][ T5151] Bluetooth: hci3: command tx timeout [ 403.200405][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 403.236359][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 403.240196][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 403.241498][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 403.242340][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 405.365500][ T59] Bluetooth: hci9: command tx timeout [ 407.475438][ T59] Bluetooth: hci9: command tx timeout [ 409.515604][ T59] Bluetooth: hci9: command tx timeout [ 411.595486][ T59] Bluetooth: hci9: command tx timeout [ 425.617335][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 425.651293][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 425.661203][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 425.695413][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 425.703528][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 425.813623][ T5846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 425.842038][ T5846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 425.843437][ T5846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 425.844696][ T5846] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 425.855677][ T5846] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 425.993021][T12715] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 426.477084][ T5846] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 426.515517][ T5846] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 426.516855][ T5846] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 426.518120][ T5846] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 426.518939][ T5846] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 427.415570][ T5151] Bluetooth: hci5: command 0x0406 tx timeout [ 427.415604][ T5151] Bluetooth: hci6: command 0x0406 tx timeout [ 427.415624][ T5151] Bluetooth: hci7: command 0x0406 tx timeout [ 427.839191][ T5846] Bluetooth: hci10: command tx timeout [ 427.995521][ T5846] Bluetooth: hci11: command tx timeout [ 428.635984][ T5846] Bluetooth: hci12: command tx timeout [ 429.915585][ T5846] Bluetooth: hci10: command tx timeout [ 430.075469][ T5846] Bluetooth: hci11: command tx timeout [ 430.735413][ T5846] Bluetooth: hci12: command tx timeout [ 431.995447][ T5846] Bluetooth: hci10: command tx timeout [ 432.155475][ T5846] Bluetooth: hci11: command tx timeout [ 432.801901][ T5846] Bluetooth: hci12: command tx timeout [ 434.075498][ T5846] Bluetooth: hci10: command tx timeout [ 434.235696][ T5846] Bluetooth: hci11: command tx timeout [ 434.875538][ T5846] Bluetooth: hci12: command tx timeout [ 440.798459][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.798538][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.264683][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 447.280441][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 447.282088][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 447.286139][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 447.288289][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 463.917232][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 463.940115][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 463.941418][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 463.942622][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 463.943444][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 464.715463][ T5839] Bluetooth: hci13: command tx timeout [ 466.795399][ T5839] Bluetooth: hci13: command tx timeout [ 468.875511][ T5839] Bluetooth: hci13: command tx timeout [ 469.606781][ T5839] Bluetooth: hci7: command tx timeout [ 470.955980][ T5839] Bluetooth: hci13: command tx timeout [ 471.675502][ T5839] Bluetooth: hci7: command tx timeout [ 473.805478][ T5839] Bluetooth: hci7: command tx timeout [ 475.862601][ T5839] Bluetooth: hci7: command tx timeout [ 487.012081][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.054745][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.065340][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.066659][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.067474][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.237549][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.272243][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.273572][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.274749][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.297563][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.196953][ T5846] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 488.218943][ T5846] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 488.220293][ T5846] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 488.221504][ T5846] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 488.224851][ T5846] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 488.846591][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 488.846634][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 488.846659][ T5846] Bluetooth: hci8: command 0x0406 tx timeout [ 489.195484][ T5151] Bluetooth: hci0: command tx timeout [ 489.438010][ T5151] Bluetooth: hci1: command tx timeout [ 490.395547][ T5151] Bluetooth: hci14: command tx timeout [ 491.275413][ T5151] Bluetooth: hci0: command tx timeout [ 491.515766][ T5151] Bluetooth: hci1: command tx timeout [ 492.475658][ T5151] Bluetooth: hci14: command tx timeout [ 493.355379][ T5151] Bluetooth: hci0: command tx timeout [ 493.595623][ T5151] Bluetooth: hci1: command tx timeout [ 494.555474][ T5151] Bluetooth: hci14: command tx timeout [ 495.435368][ T5151] Bluetooth: hci0: command tx timeout [ 495.675663][ T5151] Bluetooth: hci1: command tx timeout [ 496.639252][ T5151] Bluetooth: hci14: command tx timeout [ 502.116159][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.116234][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.110818][ T5839] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 508.356807][ T5835] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 508.363518][ T5835] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 508.365995][ T5835] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 508.388358][ T5835] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 509.275359][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 517.519948][ T5151] Bluetooth: hci15: command tx timeout [ 519.595618][ T5151] Bluetooth: hci15: command tx timeout [ 521.675634][ T5151] Bluetooth: hci15: command tx timeout [ 523.797598][ T5151] Bluetooth: hci15: command tx timeout [ 525.628817][ T5840] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 525.658970][ T5840] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 525.661227][ T5840] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 525.663062][ T5840] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 525.687563][ T5840] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 529.765044][ T5846] Bluetooth: hci9: command 0x0406 tx timeout [ 532.155756][ T38] INFO: task syz-executor:12812 blocked for more than 143 seconds. [ 532.155781][ T38] Not tainted syzkaller #0 [ 532.155792][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.155800][ T38] task:syz-executor state:D stack:26952 pid:12812 tgid:12812 ppid:1 task_flags:0x400140 flags:0x00004004 [ 532.155880][ T38] Call Trace: [ 532.155887][ T38] [ 532.155900][ T38] __schedule+0x16f3/0x4c20 [ 532.155955][ T38] ? __pfx___schedule+0x10/0x10 [ 532.155995][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.156020][ T38] rt_mutex_schedule+0x77/0xf0 [ 532.156038][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 532.156057][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 532.156099][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 532.156120][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 532.156139][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 532.156154][ T38] ? __lock_acquire+0xab9/0xd20 [ 532.156188][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 532.156219][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 532.156246][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 532.156267][ T38] mutex_lock_nested+0x16a/0x1d0 [ 532.156290][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 532.156324][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 532.156367][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 532.156390][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 532.156411][ T38] ? __lock_acquire+0xab9/0xd20 [ 532.156433][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 532.156453][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 532.156491][ T38] netlink_rcv_skb+0x205/0x470 [ 532.156511][ T38] ? __lock_acquire+0xab9/0xd20 [ 532.156532][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 532.156554][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.156587][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.156614][ T38] netlink_unicast+0x843/0xa10 [ 532.156643][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 532.156663][ T38] ? netlink_sendmsg+0x642/0xb30 [ 532.156681][ T38] ? skb_put+0x11b/0x210 [ 532.156707][ T38] netlink_sendmsg+0x805/0xb30 [ 532.156738][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.156768][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.156785][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.156807][ T38] __sock_sendmsg+0x219/0x270 [ 532.156830][ T38] __sys_sendto+0x3c7/0x520 [ 532.156861][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 532.156911][ T38] ? exc_page_fault+0x76/0xf0 [ 532.156936][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 532.156962][ T38] __x64_sys_sendto+0xde/0x100 [ 532.156987][ T38] do_syscall_64+0xfa/0x3b0 [ 532.157008][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.157028][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.157046][ T38] ? clear_bhb_loop+0x60/0xb0 [ 532.157068][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.157090][ T38] RIP: 0033:0x7fd436150a7c [ 532.157106][ T38] RSP: 002b:00007ffeb68e1990 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 532.157125][ T38] RAX: ffffffffffffffda RBX: 00007fd436ea4620 RCX: 00007fd436150a7c [ 532.157139][ T38] RDX: 0000000000000028 RSI: 00007fd436ea4670 RDI: 0000000000000003 [ 532.157151][ T38] RBP: 0000000000000000 R08: 00007ffeb68e19e4 R09: 000000000000000c [ 532.157162][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 532.157173][ T38] R13: 0000000000000000 R14: 00007fd436ea4670 R15: 0000000000000000 [ 532.157203][ T38] [ 532.157224][ T38] [ 532.157224][ T38] Showing all locks held in the system: [ 532.157235][ T38] 4 locks held by kworker/u8:0/12: [ 532.157245][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 532.157293][ T38] #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 532.157332][ T38] #2: ffffffff8ecc5040 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 532.157373][ T38] #3: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 532.157415][ T38] 7 locks held by ktimers/1/29: [ 532.157426][ T38] 1 lock held by khungtaskd/38: [ 532.157435][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 532.157478][ T38] 3 locks held by kworker/u8:3/56: [ 532.157488][ T38] #0: ffff88803017f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 532.157532][ T38] #1: ffffc9000122fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 532.157577][ T38] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 532.157619][ T38] 3 locks held by kworker/u8:5/69: [ 532.157629][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 532.157673][ T38] #1: ffffc9000154fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 532.157716][ T38] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 532.157770][ T38] 2 locks held by kworker/u8:6/1443: [ 532.157793][ T38] 5 locks held by kworker/u9:1/5151: [ 532.157804][ T38] #0: ffff888030b72138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 532.157855][ T38] #1: ffffc9000fd7fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 532.157900][ T38] #2: ffff888051f30e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 532.157947][ T38] #3: ffff888051f300a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 532.157990][ T38] #4: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 532.158035][ T38] 2 locks held by dhcpcd/5497: [ 532.158045][ T38] #0: ffff888032f7c908 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 532.158087][ T38] #1: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 532.158128][ T38] 2 locks held by getty/5589: [ 532.158137][ T38] #0: ffff88823bf388a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 532.158182][ T38] #1: ffffc90003e7b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 532.158225][ T38] 4 locks held by kworker/u9:4/5840: [ 532.158235][ T38] #0: ffff88803161b138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 532.158282][ T38] #1: ffffc90004d1fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 532.158327][ T38] #2: ffff888088f940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 532.158368][ T38] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 532.158411][ T38] 3 locks held by kworker/0:3/5903: [ 532.158421][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 532.158465][ T38] #1: ffffc9000505fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 532.158508][ T38] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 532.158559][ T38] 2 locks held by syz-executor/12705: [ 532.158569][ T38] #0: ffffffff8ecc5040 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 532.158611][ T38] #1: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 532.158652][ T38] 2 locks held by syz-executor/12713: [ 532.158661][ T38] #0: ffffffff8ecc5040 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 532.158702][ T38] #1: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 532.158743][ T38] 1 lock held by syz-executor/12715: [ 532.158753][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 532.158798][ T38] 1 lock held by syz.4.3139/12764: [ 532.158808][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 532.158858][ T38] 1 lock held by syz.0.3145/12788: [ 532.158868][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 532.158910][ T38] 2 locks held by syz-executor/12803: [ 532.158920][ T38] #0: ffff88804e61ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 532.158961][ T38] #1: ffff88804e61c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 532.159003][ T38] 4 locks held by syz-executor/12807: [ 532.159013][ T38] #0: ffff88806e4bce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 532.159053][ T38] #1: ffff88806e4bc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 532.159095][ T38] #2: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 532.159140][ T38] #3: ffff88805cd0c358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 532.159195][ T38] 1 lock held by syz-executor/12812: [ 532.159203][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159248][ T38] 1 lock held by syz-executor/12818: [ 532.159259][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159304][ T38] 1 lock held by syz-executor/12825: [ 532.159314][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159360][ T38] 1 lock held by syz-executor/12828: [ 532.159370][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159416][ T38] 1 lock held by syz-executor/12834: [ 532.159425][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159471][ T38] 1 lock held by syz-executor/12839: [ 532.159481][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159527][ T38] 1 lock held by syz-executor/12849: [ 532.159537][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159584][ T38] 1 lock held by syz-executor/12857: [ 532.159594][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159640][ T38] 1 lock held by syz-executor/12860: [ 532.159650][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159696][ T38] 1 lock held by syz-executor/12863: [ 532.159705][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159751][ T38] 1 lock held by syz-executor/12866: [ 532.159761][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159807][ T38] 1 lock held by syz-executor/12874: [ 532.159817][ T38] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 532.159870][ T38] [ 532.159875][ T38] ============================================= [ 532.159875][ T38] [ 532.159890][ T38] NMI backtrace for cpu 0 [ 532.159916][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 532.159966][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.159990][ T38] Call Trace: [ 532.160005][ T38] [ 532.160021][ T38] dump_stack_lvl+0x189/0x250 [ 532.160090][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.160119][ T38] ? __pfx__printk+0x10/0x10 [ 532.160150][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 532.160172][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 532.160193][ T38] ? __pfx__printk+0x10/0x10 [ 532.160215][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 532.160238][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 532.160260][ T38] watchdog+0xf93/0xfe0 [ 532.160285][ T38] ? watchdog+0x1de/0xfe0 [ 532.160311][ T38] kthread+0x711/0x8a0 [ 532.160337][ T38] ? __pfx_watchdog+0x10/0x10 [ 532.160356][ T38] ? __pfx_kthread+0x10/0x10 [ 532.160383][ T38] ? __pfx_kthread+0x10/0x10 [ 532.160406][ T38] ret_from_fork+0x3fc/0x770 [ 532.160430][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 532.160457][ T38] ? __switch_to_asm+0x39/0x70 [ 532.160471][ T38] ? __switch_to_asm+0x33/0x70 [ 532.160486][ T38] ? __pfx_kthread+0x10/0x10 [ 532.160510][ T38] ret_from_fork_asm+0x1a/0x30 [ 532.160542][ T38] [ 532.160548][ T38] Sending NMI from CPU 0 to CPUs 1: [ 532.160574][ C1] NMI backtrace for cpu 1 [ 532.160592][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 532.160631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.160651][ C1] RIP: 0010:lockdep_hardirqs_off+0x47/0x110 [ 532.160680][ C1] Code: 04 00 0f 84 91 00 00 00 48 89 fb 65 8b 05 71 8c ff 06 a9 00 00 f0 00 74 69 83 3d 73 bf 0a 0e 00 75 15 48 c7 04 24 00 00 00 00 <9c> 8f 04 24 f7 04 24 00 02 00 00 75 7e 65 8b 05 0d c9 ff 06 85 c0 [ 532.160694][ C1] RSP: 0018:ffffc90000a3f668 EFLAGS: 00000046 [ 532.160708][ C1] RAX: 0000000000000000 RBX: ffffffff8af9bfc2 RCX: 66b0d11b2d86e100 [ 532.160721][ C1] RDX: ffff88801caf1dc0 RSI: ffffffff8d086db5 RDI: ffffffff8b620c80 [ 532.160733][ C1] RBP: ffffc90000a3f730 R08: 0000000000000000 R09: ffffffff88e2a26f [ 532.160745][ C1] R10: dffffc0000000000 R11: fffffbfff1e3a8a7 R12: dffffc0000000000 [ 532.160757][ C1] R13: ffffc90000a3f788 R14: 0000000000000a06 R15: 1ffff92000147ed4 [ 532.160769][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 532.160782][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.160794][ C1] CR2: 00007fc8bbbdd2fe CR3: 000000003323a000 CR4: 00000000003526f0 [ 532.160809][ C1] Call Trace: [ 532.160815][ C1] [ 532.160821][ C1] ? _raw_spin_lock_irqsave+0x82/0xf0 [ 532.160840][ C1] trace_hardirqs_off+0x12/0x40 [ 532.160860][ C1] _raw_spin_lock_irqsave+0x82/0xf0 [ 532.160879][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 532.160903][ C1] rt_spin_lock+0x144/0x2c0 [ 532.160919][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 532.160935][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 532.160952][ C1] ? rt_spin_unlock+0x65/0x80 [ 532.160969][ C1] process_backlog+0x58f/0x900 [ 532.160993][ C1] __napi_poll+0xb6/0x540 [ 532.161012][ C1] net_rx_action+0x707/0xe00 [ 532.161029][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.161056][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 532.161090][ C1] handle_softirqs+0x22c/0x710 [ 532.161120][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 532.161144][ C1] run_ktimerd+0xcf/0x190 [ 532.161163][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 532.161184][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 532.161203][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 532.161222][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 532.161240][ C1] smpboot_thread_fn+0x542/0xa60 [ 532.161259][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 532.161281][ C1] kthread+0x711/0x8a0 [ 532.161303][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 532.161322][ C1] ? __pfx_kthread+0x10/0x10 [ 532.161345][ C1] ? __pfx_kthread+0x10/0x10 [ 532.161367][ C1] ret_from_fork+0x3fc/0x770 [ 532.161387][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 532.161410][ C1] ? __switch_to_asm+0x39/0x70 [ 532.161424][ C1] ? __switch_to_asm+0x33/0x70 [ 532.161438][ C1] ? __pfx_kthread+0x10/0x10 [ 532.161460][ C1] ret_from_fork_asm+0x1a/0x30 [ 532.161482][ C1] [ 532.161575][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 532.161588][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 532.161608][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.161618][ T38] Call Trace: [ 532.161625][ T38] [ 532.161632][ T38] dump_stack_lvl+0x99/0x250 [ 532.161656][ T38] ? __asan_memcpy+0x40/0x70 [ 532.161675][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.161698][ T38] ? __pfx__printk+0x10/0x10 [ 532.161728][ T38] vpanic+0x281/0x750 [ 532.161753][ T38] ? __pfx_vpanic+0x10/0x10 [ 532.161773][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 532.161791][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.161821][ T38] panic+0xb9/0xc0 [ 532.161842][ T38] ? __pfx_panic+0x10/0x10 [ 532.161873][ T38] ? irq_work_queue+0xc3/0x140 [ 532.161897][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 532.161918][ T38] watchdog+0xfd2/0xfe0 [ 532.161943][ T38] ? watchdog+0x1de/0xfe0 [ 532.161969][ T38] kthread+0x711/0x8a0 [ 532.161994][ T38] ? __pfx_watchdog+0x10/0x10 [ 532.162013][ T38] ? __pfx_kthread+0x10/0x10 [ 532.162041][ T38] ? __pfx_kthread+0x10/0x10 [ 532.162065][ T38] ret_from_fork+0x3fc/0x770 [ 532.162088][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 532.162114][ T38] ? __switch_to_asm+0x39/0x70 [ 532.162129][ T38] ? __switch_to_asm+0x33/0x70 [ 532.162144][ T38] ? __pfx_kthread+0x10/0x10 [ 532.162167][ T38] ret_from_fork_asm+0x1a/0x30 [ 532.162199][ T38] [ 532.162508][ T38] Kernel Offset: disabled