last executing test programs: 4.427546151s ago: executing program 2 (id=5530): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 4.294468733s ago: executing program 2 (id=5532): r0 = io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0x254e, 0x3, 0xfffffffc, 0x15a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 4.165151071s ago: executing program 2 (id=5533): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0xab7, @private2, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002440)=']', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x81, 0x100, 0x8, 0xfff, 0xeb}, 0x14) 4.066944703s ago: executing program 2 (id=5535): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x84, 0x40000}, 0x20) 3.971107802s ago: executing program 2 (id=5536): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x8) 3.822996104s ago: executing program 2 (id=5538): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)) 2.045659028s ago: executing program 3 (id=5562): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_hsr\x00', &(0x7f0000000580)=@ethtool_per_queue_op={0x4b, 0x1, [0x3, 0x5, 0x8, 0x6, 0x4, 0x7, 0x7f, 0x7, 0x3, 0x800, 0x7, 0x2, 0x80000001, 0x9, 0x3, 0x3ff, 0x8, 0x4fe, 0xd0f, 0x0, 0x5, 0xbc14, 0x80000000, 0xffffa0ff, 0xfffffff7, 0x2, 0x7, 0x8, 0x8, 0xfffffff7, 0x100, 0x456cf931, 0x4, 0x4, 0x9, 0x6, 0x5, 0x8001, 0x10, 0x6, 0x1, 0x6, 0x7, 0xd, 0x80000000, 0x400, 0x2, 0x1, 0x9d, 0x7, 0x2, 0x9ae, 0x0, 0x5, 0x3, 0xee4, 0x5, 0x0, 0x1285, 0xa, 0xf, 0x8, 0xb, 0xf, 0x0, 0x1, 0x3ff, 0x8, 0x5, 0x0, 0x5, 0x8, 0x9, 0xe, 0x6, 0x7f, 0x8, 0x3, 0x2, 0x3, 0x4, 0x7f, 0x3, 0x1, 0x1000, 0x4, 0x8, 0x7, 0x9, 0xb5a, 0x7f, 0x2, 0xffff, 0x5, 0xa, 0x2, 0x5, 0x1, 0xffffff7f, 0x6, 0x8, 0x1, 0xffffffff, 0x9, 0xc, 0x8, 0x18e, 0x1, 0x1, 0x9, 0x5, 0x96, 0x3, 0x7, 0x5, 0x3, 0x21cfb5f9, 0x5, 0x6, 0xbb3, 0x6, 0x101, 0x9, 0x6, 0xcd68, 0x9, 0x81, 0x41]}}) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 1.947810322s ago: executing program 4 (id=5564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0) 1.852287013s ago: executing program 3 (id=5566): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x38}}}}, &(0x7f0000000040)=0x84) 1.599069417s ago: executing program 1 (id=5568): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x68, r0, 0x801, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "91377ad43f6984812d187edcc3"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0xffffffffffffffb5}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 1.576066572s ago: executing program 4 (id=5569): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.527609237s ago: executing program 3 (id=5570): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000100)=[{&(0x7f0000000240)="5db5bd", 0x3}, {&(0x7f0000000000)="0eee3dadc2b5bb3ab89230eb28d8741dfd4ff6e8e4e1ce1a7607ca8ef648ae3a", 0x20}, {&(0x7f0000001500)="0b34a6760a11b145ad98f34695257d651517048db0e1cf984855f2e4ed39626657e4151ff02ed84719db293d33fccf426e4ee155761295d64038cf4a0e3b3687acb8134c79c523c57a7f7f4a8d8ec8782e613fb03b6b26f18f50acd0a7c103ed961a42b7d3eecfdb81e007eea0dd8fbb82bffd8b236acf53", 0x78}], 0x3, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.357636289s ago: executing program 4 (id=5572): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e24, 0xfff, @loopback, 0x4}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) 1.341455593s ago: executing program 1 (id=5573): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@remote, 0x4e20, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20}}, {{@in6=@mcast1}, 0x0, @in=@dev, 0x0, 0x4}}, 0xe8) 1.153064423s ago: executing program 0 (id=5575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f000000b0c0)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000300)={0x174, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7}, [@CTA_EXPECT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x2, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x10000}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @local}}}]}]}, 0x174}}, 0x80) 1.113739469s ago: executing program 4 (id=5576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) 921.287563ms ago: executing program 0 (id=5577): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) 909.092745ms ago: executing program 3 (id=5578): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host, 0x1}) close(0x3) 707.07954ms ago: executing program 1 (id=5579): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={0x0, 0x2, 0x60}) 647.079778ms ago: executing program 4 (id=5580): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x5, 0x0, 0x4, 0x800}, 'syz0\x00', 0x38}) ioctl$UI_DEV_CREATE(r0, 0x5501) 589.883133ms ago: executing program 3 (id=5581): write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff81000000ff0200", 0x17) r0 = landlock_create_ruleset(&(0x7f0000000100)={0x3501}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42, 0x0) 543.413192ms ago: executing program 0 (id=5582): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe8050001000600000005000500020000000500040000000000090002"], 0x5c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 482.965653ms ago: executing program 1 (id=5583): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 392.595289ms ago: executing program 3 (id=5584): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 351.896162ms ago: executing program 0 (id=5585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b00000000ff"]) 287.141359ms ago: executing program 4 (id=5586): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0x1, 0x201, 0x0, 0x2, 0x7}) 227.29855ms ago: executing program 1 (id=5587): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x1, 0x4, 0x0, 0x7, 0x4, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 109.763878ms ago: executing program 0 (id=5588): syz_open_dev$vcsu(&(0x7f00000000c0), 0x8000000000000000, 0x298082) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 546.141µs ago: executing program 1 (id=5589): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) listen(r0, 0x2) 0s ago: executing program 0 (id=5590): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) kernel console output (not intermixed with test programs): syscall=117 compat=0 ip=0x7fb0af78d169 code=0x7ffc0000 [ 339.845741][ T30] audit: type=1326 audit(1744208068.403:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.2.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0af78d169 code=0x7ffc0000 [ 339.938005][ T30] audit: type=1326 audit(1744208068.403:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.2.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0af78d169 code=0x7ffc0000 [ 342.405418][ T979] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 342.631542][ T979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 342.640815][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.659419][ T979] usb 3-1: Product: syz [ 342.663643][ T979] usb 3-1: Manufacturer: syz [ 342.695313][ T979] usb 3-1: SerialNumber: syz [ 342.731632][ T979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.850059][ T5899] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 343.677855][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.692287][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.917913][ T5899] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 343.935656][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3543'. [ 343.949653][ T5899] ath9k_htc: Failed to initialize the device [ 344.017679][ T5899] usb 3-1: ath9k_htc: USB layer deinitialized [ 344.052802][ T979] usb 3-1: USB disconnect, device number 42 [ 344.228287][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 344.299309][T13714] sctp: [Deprecated]: syz.0.3549 (pid 13714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.299309][T13714] Use struct sctp_sack_info instead [ 344.395487][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 344.417727][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 344.437376][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.455461][ T9] usb 2-1: Product: syz [ 344.460139][ T9] usb 2-1: Manufacturer: syz [ 344.465688][ T9] usb 2-1: SerialNumber: syz [ 344.486414][ T9] usb 2-1: config 0 descriptor?? [ 344.507791][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 344.516970][ T9] usb 2-1: setting power ON [ 344.521543][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 344.539195][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.549244][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 344.563360][ T9] usb 2-1: media controller created [ 344.611052][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.705808][ T9] usb 2-1: selecting invalid altsetting 6 [ 344.715288][ T9] usb 2-1: digital interface selection failed (-22) [ 344.732129][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 344.763655][ T9] usb 2-1: setting power OFF [ 344.770694][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 344.782173][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 344.833354][ T9] (NULL device *): no alternate interface [ 344.905395][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 344.923090][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 344.956954][ T9] usb 2-1: USB disconnect, device number 35 [ 345.097772][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 345.109784][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.143457][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.170840][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 345.197555][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 345.210512][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 345.224215][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.240990][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.251598][ T24] usb 4-1: Product: syz [ 345.259599][ T24] usb 4-1: Manufacturer: syz [ 345.264407][ T24] usb 4-1: SerialNumber: syz [ 345.502837][ T24] cdc_ncm 4-1:1.0: bind() failure [ 345.520027][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 345.541289][ T24] cdc_ncm 4-1:1.1: bind() failure [ 345.559423][ T24] usb 4-1: USB disconnect, device number 34 [ 345.945605][ T52] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 346.463376][ T52] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 346.485480][ T52] usb 2-1: config 0 has no interface number 0 [ 346.509676][ T52] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 346.523931][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.555067][ T52] usb 2-1: Product: syz [ 346.560008][ T52] usb 2-1: Manufacturer: syz [ 346.564650][ T52] usb 2-1: SerialNumber: syz [ 346.593501][ T52] usb 2-1: config 0 descriptor?? [ 346.608817][ T5903] IPVS: starting estimator thread 0... [ 346.715654][T13777] IPVS: using max 26 ests per chain, 62400 per kthread [ 346.827040][ T52] usb 2-1: USB disconnect, device number 36 [ 347.303269][T13798] input: syz0 as /devices/virtual/input/input36 [ 347.511098][ T30] audit: type=1326 audit(1744208076.313:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13805 comm="syz.1.3590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x0 [ 347.933386][T13823] team0: Device macsec4 is already an upper device of the team interface [ 348.617676][T13853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3611'. [ 349.085886][ T5903] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 349.248228][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 349.260154][ T5903] usb 5-1: config 0 has no interfaces? [ 349.270516][ T5903] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 349.280110][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.289728][ T5903] usb 5-1: Product: syz [ 349.294005][ T5903] usb 5-1: Manufacturer: syz [ 349.315278][ T5903] usb 5-1: SerialNumber: syz [ 349.322338][ T5903] usb 5-1: config 0 descriptor?? [ 349.541560][T13892] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.542268][ T9] usb 5-1: USB disconnect, device number 28 [ 349.625663][ T5903] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 349.777490][ T5903] usb 3-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 349.787262][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.816002][ T5903] usb 3-1: config 0 descriptor?? [ 350.034230][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 350.050389][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 350.089936][ T5903] usb 3-1: USB disconnect, device number 43 [ 350.454857][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3642'. [ 350.464859][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3642'. [ 350.488921][T13917] bridge0: port 4(vlan2) entered blocking state [ 350.500038][T13917] bridge0: port 4(vlan2) entered disabled state [ 350.509331][T13917] vlan2: entered allmulticast mode [ 350.514562][T13917] bridge0: entered allmulticast mode [ 350.528596][T13917] vlan2: left allmulticast mode [ 350.533498][T13917] bridge0: left allmulticast mode [ 351.565262][ T5903] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 351.639796][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'. [ 351.765565][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.789813][ T5903] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 351.803931][ T5903] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 351.828996][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.873815][ T5903] usb 4-1: config 0 descriptor?? [ 351.889567][ T5903] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 351.909324][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 351.960450][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 351.986006][ T5903] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 352.000165][ T5903] usb 4-1: media controller created [ 352.016334][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.037974][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 352.043913][ T5903] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 352.063646][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 352.108751][ T30] audit: type=1326 audit(1744208080.913:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.141260][ T30] audit: type=1326 audit(1744208080.933:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.186658][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 352.210561][ T5903] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 352.241045][ T5903] usb 4-1: USB disconnect, device number 35 [ 352.261172][ T30] audit: type=1326 audit(1744208080.943:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.355318][ T30] audit: type=1326 audit(1744208080.943:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.401649][ T5903] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 352.435599][ T30] audit: type=1326 audit(1744208080.943:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.508619][ T30] audit: type=1326 audit(1744208080.943:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.556204][ T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 352.564175][ T30] audit: type=1326 audit(1744208080.943:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.635430][ T30] audit: type=1326 audit(1744208080.943:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.700303][T14001] kvm: user requested TSC rate below hardware speed [ 352.717512][ T30] audit: type=1326 audit(1744208080.943:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.783120][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.807341][ T30] audit: type=1326 audit(1744208080.943:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.831117][ T9] usb 5-1: config 0 has no interfaces? [ 352.846135][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 352.861136][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.884258][ T30] audit: type=1326 audit(1744208080.943:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13986 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7ffc0000 [ 352.916336][ T9] usb 5-1: config 0 descriptor?? [ 353.082761][T14013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.187146][T14053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3703'. [ 354.492734][ T979] usb 5-1: USB disconnect, device number 29 [ 355.696014][T14110] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3730'. [ 355.782537][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3734'. [ 356.464429][T14147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.905787][T14166] input: syz0 as /devices/virtual/input/input38 [ 357.179688][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3759'. [ 357.426842][T14189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.912297][T14206] IPVS: stopping master sync thread 14207 ... [ 357.912871][T14207] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 358.452958][T14232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.084908][T14262] tipc: Started in network mode [ 359.090218][T14262] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 359.098413][T14262] tipc: Enabled bearer , priority 10 [ 359.221569][T14270] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3803'. [ 359.475666][ T5902] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 359.665361][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 359.681492][ T5902] usb 4-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 359.692752][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.715531][ T5902] usb 4-1: Product: syz [ 359.722649][ T5902] usb 4-1: Manufacturer: syz [ 359.732757][ T5902] usb 4-1: SerialNumber: syz [ 359.754419][ T5902] usb 4-1: config 0 descriptor?? [ 359.768977][ T5902] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 359.825546][T14284] netlink: 'syz.0.3810': attribute type 1 has an invalid length. [ 359.896377][T14287] syz.4.3811 (14287) used greatest stack depth: 17720 bytes left [ 360.046964][T14292] netlink: 'syz.2.3813': attribute type 3 has an invalid length. [ 360.117467][ T52] tipc: Node number set to 8432298 [ 360.515051][T14315] tipc: Enabled bearer , priority 10 [ 360.578648][ T5902] gspca_sunplus: reg_w_riv err -71 [ 360.583974][ T5902] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 360.637890][ T5902] usb 4-1: USB disconnect, device number 36 [ 361.646561][T14355] vivid-001: disconnect [ 361.660425][T14354] vivid-001: reconnect [ 361.725429][ T979] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 361.895411][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 361.904316][ T979] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 361.926201][ T979] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 361.943688][ T979] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 361.975353][ T979] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 362.002561][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.019255][ T979] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 362.033553][ T979] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 362.045015][ T979] usb 3-1: Product: syz [ 362.045578][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'. [ 362.054188][ T979] usb 3-1: Manufacturer: syz [ 362.063862][ T979] usb 3-1: SerialNumber: syz [ 362.086151][ T979] usb 3-1: config 0 descriptor?? [ 362.110877][ T979] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 362.125744][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 362.133882][ T979] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 362.222780][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 362.285472][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 362.298385][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 362.307482][ T9] usb 4-1: config 0 has no interface number 0 [ 362.338998][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 362.353646][ T5903] usb 3-1: USB disconnect, device number 44 [ 362.354424][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.368053][ T5903] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 362.385443][ T9] usb 4-1: Product: syz [ 362.389681][ T9] usb 4-1: Manufacturer: syz [ 362.394310][ T9] usb 4-1: SerialNumber: syz [ 362.412338][ T9] usb 4-1: config 0 descriptor?? [ 362.419402][T14384] vivid-000: disconnect [ 362.428515][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 362.430487][T14380] vivid-000: reconnect [ 362.657189][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 362.704965][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 363.080094][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 363.088962][ T979] usb 4-1: USB disconnect, device number 37 [ 363.106146][ T979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 363.141068][ T979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 363.169574][ T979] quatech2 4-1:0.51: device disconnected [ 363.285359][ T9] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 363.474799][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.485562][ T9] usb 3-1: config 0 has no interface number 0 [ 363.491748][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 363.528391][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 363.539782][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 363.549354][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.570572][ T9] usb 3-1: config 0 descriptor?? [ 363.586300][T14406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.601039][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 363.846112][ T9] usb 3-1: USB disconnect, device number 45 [ 363.846154][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 364.084623][T14443] macvlan3: entered allmulticast mode [ 364.116692][T14443] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 364.153211][T14443] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 364.578310][T14469] netlink: 'syz.1.3897': attribute type 1 has an invalid length. [ 364.645831][T14472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3898'. [ 364.829794][T14482] loop8: detected capacity change from 0 to 1 [ 364.846379][T14482] Dev loop8: unable to read RDB block 1 [ 364.859612][T14482] loop8: unable to read partition table [ 364.875831][T14482] loop8: partition table beyond EOD, truncated [ 364.885346][T14482] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 365.175575][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 365.209230][T14496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3910'. [ 365.295323][ T52] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 365.335676][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 365.348430][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.371469][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.393808][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 365.404357][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.422712][ T9] usb 4-1: config 0 descriptor?? [ 365.430432][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3912'. [ 365.471693][ T52] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.494564][ T52] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 365.515322][ T52] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 365.538178][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.556327][ T52] usb 3-1: config 0 descriptor?? [ 365.575910][T14505] input: syz0 as /devices/virtual/input/input39 [ 365.719349][T14511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3917'. [ 365.861164][ T9] logitech 0003:046D:C20E.002E: rdesc size test failed for formula gp [ 365.877346][ T9] logitech 0003:046D:C20E.002E: nested delimiters [ 365.883839][ T9] logitech 0003:046D:C20E.002E: item 0 4 2 10 parsing failed [ 365.899615][ T9] logitech 0003:046D:C20E.002E: parse failed [ 365.908751][ T9] logitech 0003:046D:C20E.002E: probe with driver logitech failed with error -22 [ 366.055617][ T979] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 366.086950][ T5903] usb 4-1: USB disconnect, device number 38 [ 366.174268][ T52] Bluetooth: Can't get version to change to load ram patch err [ 366.184473][ T52] Bluetooth: Loading sysconfig file failed [ 366.195765][ T52] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 366.205383][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 366.212840][ T52] usb 3-1: USB disconnect, device number 46 [ 366.229228][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.245366][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.257111][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 366.268900][ T979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 366.285349][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.302976][ T979] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.314662][ T979] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.325090][ T979] usb 5-1: Manufacturer: syz [ 366.334609][ T979] usb 5-1: config 0 descriptor?? [ 366.625386][ T979] rc_core: IR keymap rc-hauppauge not found [ 366.651535][ T979] Registered IR keymap rc-empty [ 366.666675][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 366.704610][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 366.734151][ T979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 366.777635][ T979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40 [ 366.812483][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 366.836119][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 366.875869][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 366.904161][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 366.918121][T14540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.925415][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 366.975860][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 367.005691][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 367.025602][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 367.055471][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 367.083235][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 367.127496][ T979] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 367.145283][ T979] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 367.206676][ T979] usb 5-1: USB disconnect, device number 30 [ 368.802019][T14582] input: syz0 as /devices/virtual/input/input41 [ 369.242678][T14608] loop2: detected capacity change from 0 to 7 [ 369.252479][T14608] Dev loop2: unable to read RDB block 7 [ 369.263209][T14608] loop2: unable to read partition table [ 369.272873][T14608] loop2: partition table beyond EOD, truncated [ 369.283051][T14608] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 369.651889][T14625] netlink: 'syz.4.3966': attribute type 2 has an invalid length. [ 369.661326][T14625] netlink: 'syz.4.3966': attribute type 2 has an invalid length. [ 369.674354][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3966'. [ 370.033585][T14639] tap0: tun_chr_ioctl cmd 2147767520 [ 370.531261][T14655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.883707][T14708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4006'. [ 372.028862][T14712] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 372.035493][T14712] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 372.062154][T14712] vhci_hcd vhci_hcd.0: Device attached [ 372.070053][T14715] vhci_hcd: connection closed [ 372.070337][ T53] vhci_hcd: stop threads [ 372.085299][ T5903] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 372.087444][ T53] vhci_hcd: release socket [ 372.100426][ T53] vhci_hcd: disconnect device [ 372.286273][ T5903] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 372.295968][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.309136][ T5903] usb 5-1: config 0 descriptor?? [ 372.316765][ T5903] cp210x 5-1:0.0: cp210x converter detected [ 372.483519][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4015'. [ 372.722764][ T5903] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 372.792607][ T5903] usb 5-1: cp210x converter now attached to ttyUSB0 [ 372.959828][ T5902] usb 5-1: USB disconnect, device number 31 [ 372.986906][ T5902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 373.069479][ T5902] cp210x 5-1:0.0: device disconnected [ 373.904457][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4044'. [ 373.952677][T14800] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4044'. [ 373.987823][T14800] vlan0: entered allmulticast mode [ 373.993000][T14800] macvtap0: entered allmulticast mode [ 374.028224][T14800] veth0_macvtap: entered allmulticast mode [ 374.395876][ T5899] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 374.450442][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4053'. [ 374.577428][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 374.584984][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.606789][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4056'. [ 374.620596][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.642200][ T5899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.652511][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.661108][ T5899] usb 4-1: Product: syz [ 374.682439][ T5899] usb 4-1: Manufacturer: syz [ 374.687639][ T5899] usb 4-1: SerialNumber: syz [ 374.996120][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 375.140647][ T5899] usb 4-1: 0:2 : does not exist [ 375.559278][ T5899] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 375.617171][ T5899] usb 4-1: USB disconnect, device number 39 [ 375.680028][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'. [ 375.837551][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.043049][T14871] x_tables: ip_tables: udp match: only valid for protocol 17 [ 376.244829][T14879] netlink: 'syz.3.4080': attribute type 8 has an invalid length. [ 376.275401][T14879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4080'. [ 376.432680][T14886] netlink: 'syz.3.4083': attribute type 15 has an invalid length. [ 376.487402][ T30] audit: type=1326 audit(1744208105.293:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 376.541493][ T30] audit: type=1326 audit(1744208105.293:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 376.566930][ T30] audit: type=1326 audit(1744208105.293:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 376.590352][ T30] audit: type=1326 audit(1744208105.313:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f093bfa25 code=0x7ffc0000 [ 376.614815][ T30] audit: type=1326 audit(1744208105.313:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 376.684753][ T30] audit: type=1326 audit(1744208105.323:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f093bfa25 code=0x7ffc0000 [ 376.717415][ T30] audit: type=1326 audit(1744208105.333:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f093bfa25 code=0x7ffc0000 [ 376.766956][ T30] audit: type=1326 audit(1744208105.333:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f093bfa25 code=0x7ffc0000 [ 376.815944][ T30] audit: type=1326 audit(1744208105.333:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f093bfa25 code=0x7ffc0000 [ 376.869017][ T30] audit: type=1326 audit(1744208105.343:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.4.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f093bfa25 code=0x7ffc0000 [ 378.126219][ T5903] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 378.296225][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 378.313929][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.545281][ T5903] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.558342][ T5903] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.563494][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.569707][ T5903] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 378.577921][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.587851][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.635719][ T5903] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 378.644831][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.674367][ T5903] usb 5-1: config 0 descriptor?? [ 379.124667][ T5903] hid (null): unknown global tag 0xc [ 379.162061][T14966] trusted_key: syz.0.4117 sent an empty control message without MSG_MORE. [ 379.191675][ T5903] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.002F/input/input42 [ 379.309453][ T5903] kye 0003:0458:5010.002F: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 379.367546][ T5903] usb 5-1: USB disconnect, device number 32 [ 380.755838][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4141'. [ 380.784584][T15016] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4141'. [ 380.803289][T15014] kvm_intel: kvm [15012]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 380.812174][T15019] netlink: 1144 bytes leftover after parsing attributes in process `syz.4.4142'. [ 381.639735][T15043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.775510][ T5894] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 381.975378][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 381.989791][ T5894] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 382.008257][ T5894] usb 4-1: config 0 has no interface number 0 [ 382.021203][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.066840][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 382.083167][ T5894] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.112223][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 382.150776][ T5894] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 382.172671][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.205503][ T5894] usb 4-1: config 0 descriptor?? [ 382.237523][ T5894] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 382.524940][ T5894] usb 4-1: USB disconnect, device number 40 [ 382.544180][ T5894] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 382.674668][T15059] netlink: 'syz.0.4158': attribute type 10 has an invalid length. [ 382.683176][ T30] kauditd_printk_skb: 263 callbacks suppressed [ 382.683195][ T30] audit: type=1326 audit(1744208111.483:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 382.718362][T15059] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4158'. [ 382.752307][ T30] audit: type=1326 audit(1744208111.483:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 382.846118][ T30] audit: type=1326 audit(1744208111.483:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 382.909539][ T30] audit: type=1326 audit(1744208111.483:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 383.003432][ T30] audit: type=1326 audit(1744208111.483:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 383.100860][ T30] audit: type=1326 audit(1744208111.483:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 383.231883][ T30] audit: type=1326 audit(1744208111.483:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 383.300308][ T30] audit: type=1326 audit(1744208111.483:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 383.360945][ T30] audit: type=1326 audit(1744208111.483:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 383.455521][ T30] audit: type=1326 audit(1744208111.483:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7fc00000 [ 383.591062][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4170'. [ 384.974707][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4188'. [ 384.988639][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4188'. [ 386.363708][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4210'. [ 386.935115][T15191] input: syz0 as /devices/virtual/input/input43 [ 387.035573][ T5902] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 387.207035][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 387.218740][ T5902] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.280439][ T5902] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.315910][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 387.322668][ T5902] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 387.354664][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.382493][ T5902] usb 2-1: config 0 descriptor?? [ 387.810201][ T5902] hkems 0003:2006:0118.0030: bogus close delimiter [ 387.827214][ T5902] hkems 0003:2006:0118.0030: item 0 4 2 10 parsing failed [ 387.845991][ T5902] hkems 0003:2006:0118.0030: parse failed [ 387.851841][ T5902] hkems 0003:2006:0118.0030: probe with driver hkems failed with error -22 [ 387.945623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 388.051567][ T5894] usb 2-1: USB disconnect, device number 37 [ 388.395633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 388.585636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 388.625516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 389.125670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 390.433224][T15285] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 390.433224][T15285] The task syz.1.4260 (15285) triggered the difference, watch for misbehavior. [ 390.508360][T15287] loop9: detected capacity change from 0 to 8 [ 390.520646][T15287] Dev loop9: unable to read RDB block 8 [ 390.528100][T15287] loop9: unable to read partition table [ 390.534120][T15287] loop9: partition table beyond EOD, truncated [ 390.543619][T15287] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 391.722932][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4285'. [ 392.049137][T15348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4291'. [ 392.350115][T15360] vivid-000: disconnect [ 392.366219][T15360] vivid-000: reconnect [ 392.689592][T15375] vlan2: entered promiscuous mode [ 392.701715][T15375] bridge0: entered promiscuous mode [ 392.958647][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 393.073859][T15392] team0: Device gtp1 is of different type [ 393.118740][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 393.126210][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 393.134995][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 393.162408][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 393.172922][ T9] usb 2-1: config 1 has no interface number 0 [ 393.205358][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.220542][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 393.240957][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 393.252552][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.307884][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 393.522301][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 393.988289][ T5894] usb 2-1: USB disconnect, device number 38 [ 394.007734][ T5894] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 394.135551][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 394.297248][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 394.324664][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.342172][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.370494][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 394.380239][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 394.392820][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.430409][ T9] usb 3-1: config 0 descriptor?? [ 394.654907][T15420] netlink: 'syz.2.4325': attribute type 1 has an invalid length. [ 394.684317][T15420] netlink: 7718 bytes leftover after parsing attributes in process `syz.2.4325'. [ 394.735348][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 394.761876][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 394.792953][ T9] usb 3-1: USB disconnect, device number 47 [ 394.885243][ T5902] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 395.063497][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 395.075904][ T5902] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 395.096141][ T5902] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 395.115272][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.136570][ T5902] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.147280][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.164793][ T5902] usb 2-1: Product: syz [ 395.174065][ T5902] usb 2-1: Manufacturer: syz [ 395.191701][ T5902] usb 2-1: SerialNumber: syz [ 395.557072][T15459] netlink: 'syz.3.4343': attribute type 10 has an invalid length. [ 395.565077][T15459] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4343'. [ 395.591154][T15459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.612350][T15459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.624985][ T5902] usb 2-1: 0:2 : does not exist [ 395.655647][T15459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.687007][T15459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.693449][ T5902] usb 2-1: USB disconnect, device number 39 [ 395.767141][T15459] team0: Port device geneve0 added [ 395.896115][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.995347][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 397.163312][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 397.182715][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 397.232537][ T9] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 397.262015][ T9] usb 4-1: Product: syz [ 397.289231][ T9] usb 4-1: Manufacturer: syz [ 397.293984][ T9] usb 4-1: SerialNumber: syz [ 397.316361][ T9] usb 4-1: config 0 descriptor?? [ 397.325045][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 397.498705][ T5902] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 397.665891][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 397.677383][ T5902] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.693065][ T5902] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.705556][ T5902] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.725316][ T5902] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.751616][ T5902] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.761442][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.959263][ T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 397.992282][ T5902] usb 3-1: GET_CAPABILITIES returned 0 [ 397.998305][T15552] pimreg: entered allmulticast mode [ 398.002383][ T5902] usbtmc 3-1:16.0: can't read capabilities [ 398.015759][T15552] pimreg: left allmulticast mode [ 398.169889][ T9] usb 4-1: USB disconnect, device number 41 [ 398.249019][ T979] usb 3-1: USB disconnect, device number 48 [ 398.351526][T15557] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4387'. [ 398.846038][ T5894] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 398.915477][ T5902] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 398.985756][ T52] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 399.005275][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 399.017197][ T5894] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 399.034962][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.047024][ T5894] usb 5-1: Product: syz [ 399.051243][ T5894] usb 5-1: Manufacturer: syz [ 399.057040][ T5894] usb 5-1: SerialNumber: syz [ 399.066343][ T5894] usb 5-1: config 0 descriptor?? [ 399.077249][ T5902] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 399.085979][ T5894] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 399.092391][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.102913][ T5902] usb 2-1: config 0 has no interface number 0 [ 399.109202][ T5902] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 399.120714][ T5902] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 495, setting to 64 [ 399.132003][ T5902] usb 2-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 399.145470][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 399.153411][ T52] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 399.163860][ T52] usb 4-1: config 0 has no interface number 0 [ 399.170570][ T5902] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 399.180411][ T52] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 399.190716][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.202339][ T52] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 399.212430][ T5902] usb 2-1: Product: syz [ 399.217420][ T5902] usb 2-1: Manufacturer: syz [ 399.222107][ T5902] usb 2-1: SerialNumber: syz [ 399.227333][ T52] usb 4-1: config 0 interface 41 has no altsetting 0 [ 399.239462][ T52] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 399.249753][ T5902] usb 2-1: config 0 descriptor?? [ 399.255877][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.263992][ T52] usb 4-1: Product: syz [ 399.269267][ T52] usb 4-1: Manufacturer: syz [ 399.274474][T15574] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 399.282082][ T52] usb 4-1: SerialNumber: syz [ 399.287065][T15574] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 399.305710][ T52] usb 4-1: config 0 descriptor?? [ 399.312083][T15576] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 399.320601][T15576] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 399.522501][ T5902] ath6kl: Failed to submit usb control message: -71 [ 399.552306][ T5902] ath6kl: unable to send the bmi data to the device: -71 [ 399.559545][T15576] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 399.559669][T15576] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 399.615214][ T5902] ath6kl: Unable to send get target info: -71 [ 399.632704][ T5902] ath6kl: Failed to init ath6kl core: -71 [ 399.675286][ T5902] ath6kl_usb 2-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 399.714610][ T5902] usb 2-1: USB disconnect, device number 40 [ 399.910851][ T5894] gspca_stk1135: reg_w 0x5 err -71 [ 399.926837][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 399.947050][ T5894] gspca_stk1135: Sensor write failed [ 399.952458][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 399.967122][ T5894] gspca_stk1135: Sensor write failed [ 399.972692][ T52] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 399.982962][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 399.989919][ T5894] gspca_stk1135: Sensor read failed [ 399.995992][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 400.002415][ T5894] gspca_stk1135: Sensor read failed [ 400.008362][ T5894] gspca_stk1135: Detected sensor type unknown (0x0) [ 400.015066][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 400.023264][ T5894] gspca_stk1135: Sensor read failed [ 400.030710][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 400.042532][ T5894] gspca_stk1135: Sensor read failed [ 400.050140][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 400.061296][ T5894] gspca_stk1135: Sensor write failed [ 400.068958][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 400.081716][ T5894] gspca_stk1135: Sensor write failed [ 400.089565][ T5894] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 400.115788][ T5894] usb 5-1: USB disconnect, device number 33 [ 400.175889][ T52] dm9601 4-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 400.201122][ T52] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 400.225772][ T52] usb 4-1: USB disconnect, device number 42 [ 400.260900][T15591] sctp: [Deprecated]: syz.2.4403 (pid 15591) Use of int in max_burst socket option. [ 400.260900][T15591] Use struct sctp_assoc_value instead [ 400.442495][ T52] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 400.469155][ T52] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 400.948189][T15616] @: renamed from vlan0 [ 401.043834][T15618] netlink: 'syz.4.4413': attribute type 5 has an invalid length. [ 401.279107][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4417'. [ 401.462699][T15636] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 403.152153][T15713] input: syz0 as /devices/virtual/input/input45 [ 403.959046][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 403.959066][ T30] audit: type=1326 audit(1744208132.763:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7ffc0000 [ 403.998543][T15744] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4469'. [ 404.064822][ T30] audit: type=1326 audit(1744208132.763:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7ffc0000 [ 404.135329][ T30] audit: type=1326 audit(1744208132.763:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f89f9f8d169 code=0x7ffc0000 [ 404.182860][ T30] audit: type=1326 audit(1744208132.763:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7ffc0000 [ 404.269986][ T30] audit: type=1326 audit(1744208132.763:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15741 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7ffc0000 [ 404.270476][T15755] program syz.4.4475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.419509][T15758] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 404.679428][T15761] syz.2.4478 (15761): drop_caches: 2 [ 404.691286][T15761] syz.2.4478 (15761): drop_caches: 2 [ 404.860299][T15773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4483'. [ 405.331352][ T52] hid-generic 0000:0003:0000.0032: unknown main item tag 0x0 [ 405.344687][ T52] hid-generic 0000:0003:0000.0032: unknown main item tag 0x0 [ 405.357083][ T52] hid-generic 0000:0003:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 405.864469][T15803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.403277][ T30] audit: type=1804 audit(1744208135.203:488): pid=15825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4508" name="/newroot/898/file0" dev="tmpfs" ino=4556 res=1 errno=0 [ 406.424147][T15827] netlink: 452 bytes leftover after parsing attributes in process `syz.0.4509'. [ 406.475533][ T30] audit: type=1804 audit(1744208135.243:489): pid=15825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4508" name="/newroot/898/file0" dev="tmpfs" ino=4556 res=1 errno=0 [ 406.723631][ T30] audit: type=1326 audit(1744208135.523:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.2.4513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0af78d169 code=0x0 [ 407.326754][T15849] sctp: [Deprecated]: syz.4.4518 (pid 15849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.326754][T15849] Use struct sctp_sack_info instead [ 407.451442][ T30] audit: type=1326 audit(1744208136.253:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.1.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f9f8d169 code=0x7ffc0000 [ 407.527429][ T30] audit: type=1326 audit(1744208136.253:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.1.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89f9f29359 code=0x7ffc0000 [ 407.549725][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.745858][ T5894] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 407.930027][ T5894] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 407.954104][ T5894] usb 5-1: config 0 has no interface number 0 [ 407.980452][ T5894] usb 5-1: config 0 interface 160 has no altsetting 0 [ 408.000754][T15869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.014747][ T5894] usb 5-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 408.038163][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.055707][ T5894] usb 5-1: Product: syz [ 408.060402][ T5894] usb 5-1: Manufacturer: syz [ 408.073701][ T5894] usb 5-1: SerialNumber: syz [ 408.090967][ T5894] usb 5-1: config 0 descriptor?? [ 408.104151][ T5894] usb-storage 5-1:0.160: USB Mass Storage device detected [ 408.341689][ T5894] usb 5-1: USB disconnect, device number 34 [ 408.735613][ T52] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 408.905421][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 408.913159][ T52] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 408.927550][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.945917][ T52] usb 4-1: config 0 descriptor?? [ 409.076079][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 409.171040][ T52] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 409.183702][ T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.196911][ T52] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 409.204265][ T52] usb 4-1: media controller created [ 409.235911][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.248924][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 409.266364][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 409.297302][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 409.317553][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.332983][ T24] usb 3-1: Product: syz [ 409.337966][ T24] usb 3-1: Manufacturer: syz [ 409.342811][ T24] usb 3-1: SerialNumber: syz [ 409.352922][ T24] usb 3-1: config 0 descriptor?? [ 409.785232][ T24] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 409.795343][ T52] az6027: usb out operation failed. (-71) [ 409.801659][ T52] stb0899_attach: Driver disabled by Kconfig [ 409.816847][ T52] az6027: no front-end attached [ 409.816847][ T52] [ 409.826733][ T52] az6027: usb out operation failed. (-71) [ 409.832537][ T52] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 409.853815][ T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 409.880031][ T52] dvb-usb: schedule remote query interval to 400 msecs. [ 409.887700][ T52] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 409.900603][ T52] usb 4-1: USB disconnect, device number 43 [ 409.959528][ T52] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 410.186642][ T24] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 410.237233][ T24] usb 3-1: USB disconnect, device number 49 [ 410.596933][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'. [ 410.756045][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4561'. [ 411.125314][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 411.305745][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 411.313350][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.313568][T15975] netlink: 'syz.3.4575': attribute type 1 has an invalid length. [ 411.328273][ T9] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 411.340480][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.419479][ T9] usb 5-1: config 0 descriptor?? [ 411.436976][T15977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.844550][ T9] holtek 0003:1241:5015.0033: unknown main item tag 0x0 [ 411.855237][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 411.863027][ T9] holtek 0003:1241:5015.0033: unknown main item tag 0x0 [ 411.875306][ T9] holtek 0003:1241:5015.0033: item fetching failed at offset 2/5 [ 411.891944][ T9] holtek 0003:1241:5015.0033: parse failed [ 411.922139][ T9] holtek 0003:1241:5015.0033: probe with driver holtek failed with error -22 [ 412.023132][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 412.044284][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.053588][ T24] usb 4-1: Product: syz [ 412.053770][ T979] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 412.061659][ T24] usb 4-1: Manufacturer: syz [ 412.079596][ T9] usb 5-1: USB disconnect, device number 35 [ 412.086080][ T24] usb 4-1: SerialNumber: syz [ 412.108212][ T24] usb 4-1: config 0 descriptor?? [ 412.119706][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 412.154617][T16002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.270378][ T979] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 412.294645][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.320410][ T979] usb 2-1: Product: syz [ 412.324811][ T979] usb 2-1: Manufacturer: syz [ 412.333425][ T979] usb 2-1: SerialNumber: syz [ 412.343933][ T979] usb 2-1: config 0 descriptor?? [ 412.361615][ T979] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 412.605439][ T979] gspca_sunplus: reg_r err -71 [ 412.610434][ T979] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 412.675595][ T979] usb 2-1: USB disconnect, device number 41 [ 412.948373][ T5902] usb 4-1: USB disconnect, device number 44 [ 413.943392][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4620'. [ 413.986418][T16071] netlink: 'syz.3.4620': attribute type 1 has an invalid length. [ 414.012251][T16071] netlink: 'syz.3.4620': attribute type 2 has an invalid length. [ 414.045646][ T52] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 414.235827][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 414.249583][ T52] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 414.264798][ T52] usb 2-1: config 0 has no interface number 0 [ 414.286518][ T52] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 414.309720][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.324528][ T52] usb 2-1: Product: syz [ 414.329217][ T52] usb 2-1: Manufacturer: syz [ 414.333927][ T52] usb 2-1: SerialNumber: syz [ 414.346249][ T52] usb 2-1: config 0 descriptor?? [ 414.356700][ T52] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 414.579472][ T52] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 414.607347][ T52] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 414.993768][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 414.995265][ T979] usb 2-1: USB disconnect, device number 42 [ 415.056489][ T979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 415.110066][ T979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 415.159989][ T979] quatech2 2-1:0.51: device disconnected [ 415.163695][T16110] netlink: 'syz.4.4637': attribute type 3 has an invalid length. [ 415.173864][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4637'. [ 415.275332][T15998] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 415.395347][ T52] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 415.432377][T15998] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.442253][T15998] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 415.459794][T15998] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.462951][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4641'. [ 415.473583][T15998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 415.490854][T15998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 415.504152][T15998] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.528831][T15998] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.547508][T15998] usb 4-1: Product: syz [ 415.551743][T15998] usb 4-1: Manufacturer: syz [ 415.567878][T15998] cdc_wdm 4-1:1.0: skipping garbage [ 415.573329][T15998] cdc_wdm 4-1:1.0: skipping garbage [ 415.579844][ T52] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 415.583024][T15998] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 415.605388][ T52] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 415.605737][T15998] cdc_wdm 4-1:1.0: Unknown control protocol [ 415.622216][ T52] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 415.625568][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4642'. [ 415.654564][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.672818][T16111] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 415.712513][ T52] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 415.900199][T15998] usb 3-1: USB disconnect, device number 50 [ 416.850581][T16153] netlink: 'syz.4.4656': attribute type 9 has an invalid length. [ 416.875305][T16153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4656'. [ 418.018046][ T5902] usb 4-1: USB disconnect, device number 45 [ 418.393110][T16211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4680'. [ 418.657509][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.755440][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.876116][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.915489][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.955277][T15998] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 418.966391][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.025465][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.127138][T15998] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 419.145425][T15998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.177985][T15998] usb 2-1: config 0 descriptor?? [ 419.192566][T15998] cp210x 2-1:0.0: cp210x converter detected [ 419.205637][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.305526][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.406671][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.465668][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.606921][T15998] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 419.641706][T15998] usb 2-1: cp210x converter now attached to ttyUSB0 [ 419.710742][T16261] pimreg: entered allmulticast mode [ 419.739189][T16261] pimreg: left allmulticast mode [ 419.851652][T15998] usb 2-1: USB disconnect, device number 43 [ 419.887357][T15998] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 419.961077][T15998] cp210x 2-1:0.0: device disconnected [ 421.787717][T16329] sctp: [Deprecated]: syz.4.4736 (pid 16329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.787717][T16329] Use struct sctp_sack_info instead [ 422.067219][T16327] syz.3.4733 (16327): drop_caches: 2 [ 422.073242][T16327] syz.3.4733 (16327): drop_caches: 2 [ 422.093466][T16341] vlan0: entered promiscuous mode [ 422.115576][T16341] bridge0: entered promiscuous mode [ 422.125455][T16341] vlan0: entered allmulticast mode [ 422.134057][T16341] bridge0: entered allmulticast mode [ 422.435278][ T9] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 422.600992][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 422.620207][ T9] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 422.660699][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.669502][ T9] usb 2-1: Product: syz [ 422.673734][ T9] usb 2-1: Manufacturer: syz [ 422.700711][ T9] usb 2-1: SerialNumber: syz [ 422.712336][ T9] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 423.552441][ T9] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 423.623036][ T9] usb 2-1: USB disconnect, device number 44 [ 424.211922][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4772'. [ 424.495285][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 424.685927][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 424.710360][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 424.769208][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 424.788728][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 424.815242][ T24] usb 2-1: Product: syz [ 424.825660][ T24] usb 2-1: Manufacturer: syz [ 424.840643][ T24] usb 2-1: SerialNumber: syz [ 424.886330][ T24] usb 2-1: config 0 descriptor?? [ 424.897375][T16411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.142116][T15998] usb 2-1: USB disconnect, device number 45 [ 425.595728][T16438] kvm: kvm [16437]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 426.645298][T16476] support for the xor transformation has been removed. [ 427.795490][ T52] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 427.861076][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 427.886557][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4827'. [ 427.913167][T16531] erspan0: entered promiscuous mode [ 427.950302][T16531] erspan0: left promiscuous mode [ 427.966424][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 427.977042][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.006054][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.025540][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 428.026622][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 428.050237][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 428.075208][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.099543][ T52] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 428.111215][ T52] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 428.120199][ T52] usb 2-1: Manufacturer: syz [ 428.144730][ T52] usb 2-1: config 0 descriptor?? [ 428.171001][T16536] macvlan0: entered promiscuous mode [ 428.196846][T16536] netlink: 'syz.3.4829': attribute type 1 has an invalid length. [ 428.205017][T16536] netlink: 'syz.3.4829': attribute type 2 has an invalid length. [ 428.217816][ T9] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 428.230061][ T9] usb 3-1: config 0 has no interface number 0 [ 428.250337][ T9] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 428.276116][ T9] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 428.296894][ T9] usb 3-1: config 0 interface 255 has no altsetting 0 [ 428.303832][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 428.319674][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.339131][ T9] usb 3-1: config 0 descriptor?? [ 428.355532][ T9] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 428.515293][ T52] rc_core: IR keymap rc-hauppauge not found [ 428.521334][ T52] Registered IR keymap rc-empty [ 428.532565][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.555811][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.574699][T15998] usb 3-1: USB disconnect, device number 51 [ 428.586436][ T52] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 428.622550][ T52] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 428.667560][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.695651][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.715662][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.755585][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.780251][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.825951][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.842842][T16559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4838'. [ 428.867651][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.906594][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.937050][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.955528][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.996923][ T52] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 429.033331][ T52] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 429.042443][ T52] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 429.063602][ T52] usb 2-1: USB disconnect, device number 46 [ 429.443579][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 429.443599][ T30] audit: type=1326 audit(1744208158.243:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.4850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72b2f8d169 code=0x0 [ 429.552921][T16591] netlink: 'syz.4.4853': attribute type 14 has an invalid length. [ 429.691638][T16597] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4856'. [ 430.902896][T15998] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 431.056308][T15998] usb 3-1: Using ep0 maxpacket: 16 [ 431.070522][T15998] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 431.088291][T15998] usb 3-1: config 0 has no interface number 0 [ 431.094577][T15998] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 431.110101][T15998] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 431.138425][T15998] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 431.161367][T15998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.172212][T15998] usb 3-1: Product: syz [ 431.180708][T15998] usb 3-1: Manufacturer: syz [ 431.187336][T15998] usb 3-1: SerialNumber: syz [ 431.212284][T15998] usb 3-1: config 0 descriptor?? [ 431.224264][T16630] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 431.233456][T16630] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 431.375122][T16658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.492516][T16630] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 431.505443][T16630] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 431.815304][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 431.875282][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 431.916396][T15998] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 431.927135][T15998] asix 3-1:0.251: probe with driver asix failed with error -524 [ 431.965379][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 431.972560][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 431.981851][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 431.991430][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.999590][ T9] usb 4-1: Product: syz [ 432.003932][ T9] usb 4-1: Manufacturer: syz [ 432.008826][ T9] usb 4-1: SerialNumber: syz [ 432.020698][ T9] usb 4-1: config 0 descriptor?? [ 432.035451][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 432.043008][ T24] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 432.052659][ T24] usb 2-1: config 8 has no interface number 0 [ 432.059313][ T24] usb 2-1: config 8 interface 206 has no altsetting 0 [ 432.069169][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 432.079231][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.087581][ T24] usb 2-1: Product: syz [ 432.092134][ T24] usb 2-1: Manufacturer: syz [ 432.097120][ T24] usb 2-1: SerialNumber: syz [ 432.141285][T15998] usb 3-1: USB disconnect, device number 52 [ 432.315905][ T24] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 432.324644][ T24] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 432.340925][ T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 432.354979][ T24] usb 2-1: USB disconnect, device number 47 [ 432.363898][ T24] garmin_gps 2-1:8.206: device disconnected [ 432.438539][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 432.749229][T16678] team0: Device ipvlan4 failed to register rx_handler [ 432.841982][ T9] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 432.865667][ T9] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 432.885692][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 432.960131][ T9] usb 4-1: USB disconnect, device number 46 [ 433.565701][T16702] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 434.715600][T16742] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4922'. [ 435.665304][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 435.835424][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 435.845031][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.885308][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.934951][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.945486][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.953761][ T9] usb 5-1: Product: syz [ 435.973693][ T9] usb 5-1: Manufacturer: syz [ 435.978986][ T9] usb 5-1: SerialNumber: syz [ 436.221389][ T9] usb 5-1: 0:2 : does not exist [ 436.242536][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 436.335795][ T9] usb 5-1: USB disconnect, device number 36 [ 436.558382][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.894731][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4953'. [ 439.453805][T16892] random: crng reseeded on system resumption [ 439.512960][T16894] netlink: 'syz.1.4987': attribute type 49 has an invalid length. [ 439.975764][T16900] netlink: 'syz.1.4990': attribute type 10 has an invalid length. [ 440.010236][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.016793][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.024489][T16900] team0: Port device dummy0 added [ 440.141585][T16902] team0: Port device dummy0 removed [ 440.165902][T16902] bond0: (slave batadv0): Releasing backup interface [ 440.180741][T16902] batadv0: left promiscuous mode [ 440.212751][T16902] batadv0: left allmulticast mode [ 440.239894][T16902] bridge_slave_0: left allmulticast mode [ 440.266300][T16902] bridge_slave_0: left promiscuous mode [ 440.282535][T16902] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.346688][T16902] bridge_slave_1: left promiscuous mode [ 440.352523][T16902] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.394072][T16902] bond0: (slave bond_slave_0): Releasing backup interface [ 440.413810][T16902] bond_slave_0: left promiscuous mode [ 440.422509][T16902] bond_slave_0: left allmulticast mode [ 440.445896][T16902] bond0: (slave bond_slave_1): Releasing backup interface [ 440.471109][T16902] bond_slave_1: left promiscuous mode [ 440.476937][T16902] bond_slave_1: left allmulticast mode [ 440.521201][T16902] team0: Port device team_slave_0 removed [ 440.566695][T16902] team0: Port device team_slave_1 removed [ 440.573487][T16902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.620368][T16902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.656248][T16902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.670489][T16902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.890579][T16915] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4997'. [ 441.038681][T16918] ALSA: mixer_oss: invalid OSS volume '' [ 442.553139][T16965] tipc: New replicast peer: 255.255.255.255 [ 442.570303][T16965] tipc: Enabled bearer , priority 1 [ 442.927185][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5027'. [ 442.952946][T16983] loop8: detected capacity change from 0 to 1 [ 442.962385][T16983] Dev loop8: unable to read RDB block 1 [ 442.968344][T16983] loop8: unable to read partition table [ 442.974382][T16983] loop8: partition table beyond EOD, truncated [ 443.000336][T16983] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 443.585882][ T5902] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 443.685417][ T24] tipc: Node number set to 4278124816 [ 443.773260][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.793058][ T5902] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.833972][ T5902] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.852722][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.890765][T16999] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 443.907192][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.159822][ T5902] usb 4-1: USB disconnect, device number 47 [ 444.575376][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 444.589583][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 444.727729][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 444.738712][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 444.749507][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.751871][T17045] macsec1: entered allmulticast mode [ 444.764753][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 444.765106][T17045] macsec0: entered allmulticast mode [ 444.778439][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 444.785457][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.791137][ T24] usb 3-1: Product: syz [ 444.800173][ T24] usb 3-1: Manufacturer: syz [ 444.800781][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 444.804868][ T24] usb 3-1: SerialNumber: syz [ 444.830457][ T24] usb 3-1: config 0 descriptor?? [ 444.835479][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 444.835512][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 444.835535][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 444.838667][ T9] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 444.860821][ T24] usb 3-1: selecting invalid altsetting 0 [ 444.872811][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 444.939780][ T9] usb 5-1: Product: syz [ 444.954275][ T9] usb 5-1: Manufacturer: syz [ 444.959831][ T9] usb 5-1: SerialNumber: syz [ 444.994458][ T9] usb 5-1: config 0 descriptor?? [ 445.135881][ T24] usb 3-1: USB disconnect, device number 53 [ 445.245909][ T9] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 445.261373][ T9] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 445.324468][T17059] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 445.446734][ T9] radio-si470x 5-1:0.0: software version 253, hardware version 55 [ 445.465844][ T9] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 445.649154][ T9] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 445.658220][ T9] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 445.667983][ T9] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 445.683672][ T9] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 445.700499][ T9] usb 5-1: USB disconnect, device number 37 [ 445.815428][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 445.936989][T17075] netlink: 'syz.2.5072': attribute type 9 has an invalid length. [ 445.944776][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5072'. [ 445.965461][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 445.977604][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 445.996149][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.040833][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 446.055795][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.063921][ T24] usb 4-1: Product: syz [ 446.075911][ T24] usb 4-1: Manufacturer: syz [ 446.080563][ T24] usb 4-1: SerialNumber: syz [ 446.109643][ T24] usb 4-1: config 0 descriptor?? [ 446.133268][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 446.151997][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 446.733312][ T24] em28xx 4-1:0.0: chip ID is em2884 [ 446.949555][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 446.977420][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 446.986833][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 447.013870][ T24] usb 4-1: USB disconnect, device number 48 [ 447.040461][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 447.093866][ T24] em28xx 4-1:0.0: Freeing device [ 447.266706][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 447.428081][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 447.435082][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.465790][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.485241][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 447.492002][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 447.525217][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.554308][ T9] usb 3-1: config 0 descriptor?? [ 447.972605][ T9] hid (null): unknown global tag 0xc [ 447.994089][ T9] hid (null): unknown global tag 0xd [ 448.208455][ T5902] usb 3-1: USB disconnect, device number 54 [ 449.218740][ T30] audit: type=1326 audit(1744208178.013:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.268567][ T30] audit: type=1326 audit(1744208178.013:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.329126][ T30] audit: type=1326 audit(1744208178.023:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.368489][ T30] audit: type=1326 audit(1744208178.023:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.426259][ T30] audit: type=1326 audit(1744208178.023:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.448748][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.461994][ T30] audit: type=1326 audit(1744208178.073:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.492128][ T30] audit: type=1326 audit(1744208178.073:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.514495][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.534333][ T30] audit: type=1326 audit(1744208178.073:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.557620][ T30] audit: type=1326 audit(1744208178.073:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.580005][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.625329][ T30] audit: type=1326 audit(1744208178.073:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.3.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b2f8d169 code=0x7ffc0000 [ 449.647716][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.163881][T17192] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 450.238511][T17196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5127'. [ 450.316663][ T5902] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 450.500729][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 450.525004][ T5902] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 450.535177][ T5902] usb 4-1: config 0 has no interface number 0 [ 450.563165][ T5902] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 450.579720][ T5902] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 450.592560][ T5902] usb 4-1: config 0 interface 126 has no altsetting 0 [ 450.607392][ T5902] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 450.622021][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.649125][ T5902] usb 4-1: Product: syz [ 450.657875][ T5902] usb 4-1: Manufacturer: syz [ 450.670042][ T5902] usb 4-1: SerialNumber: syz [ 450.685023][ T5902] usb 4-1: config 0 descriptor?? [ 450.703556][T17186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.722075][T17186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.998074][T17221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5138'. [ 451.010034][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5138'. [ 451.152445][ T5902] ir_usb 4-1:0.126: IR Dongle converter detected [ 451.210684][T17227] block device autoloading is deprecated and will be removed. [ 451.364883][ T5902] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 451.365362][ T9] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 451.567110][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 451.573565][ T24] usb 4-1: USB disconnect, device number 49 [ 451.576496][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.607606][ T24] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 451.637014][ T9] usb 3-1: config 0 descriptor?? [ 451.646592][ T24] ir_usb 4-1:0.126: device disconnected [ 451.658645][ T9] cp210x 3-1:0.0: cp210x converter detected [ 451.924366][T17254] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5154'. [ 451.966129][T17257] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.5155'. [ 451.979296][T17254] netlink: 'syz.4.5154': attribute type 3 has an invalid length. [ 452.018225][T17259] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5156'. [ 452.260865][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 452.275269][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 452.286190][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 452.328091][ T9] usb 3-1: USB disconnect, device number 55 [ 452.357730][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 452.394959][ T9] cp210x 3-1:0.0: device disconnected [ 452.771807][T17292] tipc: Started in network mode [ 452.781681][T17292] tipc: Node identity ac14140f, cluster identity 4711 [ 452.826401][T17292] tipc: New replicast peer: 255.255.255.255 [ 452.832902][T17292] tipc: Enabled bearer , priority 1 [ 453.223303][T17311] netlink: 'syz.0.5181': attribute type 2 has an invalid length. [ 453.945785][ T979] tipc: Node number set to 2886997007 [ 454.027208][T17341] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 454.065444][T17341] syzkaller1: linktype set to 805 [ 455.430408][T17380] netlink: 'syz.3.5210': attribute type 10 has an invalid length. [ 455.476745][T17380] team0: Device dummy0 failed to register rx_handler [ 455.558824][T17385] bridge_slave_0: left allmulticast mode [ 455.585524][T17385] bridge_slave_0: left promiscuous mode [ 455.591352][T17385] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.687148][T17385] bridge_slave_1: left allmulticast mode [ 455.700844][T17385] bridge_slave_1: left promiscuous mode [ 455.746001][T17385] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.843948][T17385] bond0: (slave bond_slave_0): Releasing backup interface [ 455.933234][T17385] bond0: (slave bond_slave_1): Releasing backup interface [ 456.020048][T17385] team0: Port device team_slave_0 removed [ 456.071838][T17385] team0: Port device team_slave_1 removed [ 456.145736][T17385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.180474][T17385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.212256][T17385] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.232933][T17385] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.269515][T17385] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.292642][T17385] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.384338][T17385] team0: Port device geneve0 removed [ 456.413528][T17385] batadv1: left allmulticast mode [ 456.422813][T17385] batadv1: left promiscuous mode [ 456.438149][T17385] bridge0: port 3(batadv1) entered disabled state [ 457.825331][ T5894] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 457.863878][T17437] CUSE: unknown device info "H" [ 457.871560][T17437] CUSE: unknown device info "$" [ 457.877009][T17437] CUSE: unknown device info "Ae-½p" [ 457.882302][T17437] CUSE: unknown device info "ÿÛß%" [ 457.889091][T17437] CUSE: unknown device info "" [ 457.895639][T17437] CUSE: unknown device info "ÿÿÿÿ" [ 457.907763][T17437] CUSE: unknown device info "óÿ$" [ 457.915690][T17437] CUSE: unknown device info "€" [ 457.922565][T17437] CUSE: unknown device info "" [ 457.932709][T17437] CUSE: unknown device info "óÀšÑ€" [ 457.942846][T17437] CUSE: unknown device info "" [ 457.952965][T17437] CUSE: unknown device info "" [ 457.958239][T17437] CUSE: zero length info key specified [ 457.995322][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 458.007649][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.034258][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.048207][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 458.061869][ T5894] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 458.075414][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.092346][ T5894] usb 3-1: config 0 descriptor?? [ 458.467488][ T5846] Bluetooth: hci2: unexpected event for opcode 0x200a [ 458.521553][ T5894] hid (null): nested delimiters [ 458.532095][ T5894] hid (null): report_id 24797 is invalid [ 458.539056][ T5894] hid (null): bogus close delimiter [ 458.561911][ T5894] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0035/input/input49 [ 458.573703][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 458.661674][ T5894] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0035/input/input50 [ 458.691361][ T5894] kye 0003:0458:5011.0035: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 458.716975][ T5894] usb 3-1: USB disconnect, device number 56 [ 458.735289][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 458.745903][ T24] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 458.754282][ T24] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 458.785898][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 458.794917][ T24] usb 2-1: config 1 has no interface number 0 [ 458.803038][ T24] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.814490][ T24] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 458.828060][ T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 458.841442][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.860962][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 459.043564][T17471] loop9: detected capacity change from 0 to 7 [ 459.058136][T17471] Dev loop9: unable to read RDB block 7 [ 459.064523][T17471] loop9: unable to read partition table [ 459.073563][T17471] loop9: partition table beyond EOD, truncated [ 459.090848][T17471] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 459.102281][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 459.561940][ T9] usb 2-1: USB disconnect, device number 48 [ 459.586779][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 459.650959][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5262'. [ 459.964943][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'. [ 459.990717][T17512] bridge_slave_1: left promiscuous mode [ 460.011551][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.022047][T17512] bridge_slave_0: left allmulticast mode [ 460.035483][T17512] bridge_slave_0: left promiscuous mode [ 460.042591][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.094529][T17515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.115322][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 460.278152][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 460.294155][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.328086][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.357541][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 460.383512][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.414685][ T24] usb 4-1: config 0 descriptor?? [ 460.857995][ T979] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 460.859708][ T24] corsair 0003:1B1C:1B02.0036: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 460.975499][T17533] Invalid logical block size (4) [ 461.034892][ T979] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 461.044705][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.080444][ T979] usb 5-1: Product: syz [ 461.099622][ T979] usb 5-1: Manufacturer: syz [ 461.107834][ T24] corsair 0003:1B1C:1B02.0036: Failed to get K90 initial state (error -71). [ 461.109340][ T979] usb 5-1: SerialNumber: syz [ 461.164385][ T979] usb 5-1: config 0 descriptor?? [ 461.187731][ T24] usb 4-1: USB disconnect, device number 50 [ 461.188893][ T979] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 462.019024][ T24] usb 5-1: USB disconnect, device number 38 [ 462.405367][ T979] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 462.586138][ T979] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 462.600757][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.611437][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.645246][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.653328][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.669226][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.700924][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.723032][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.734101][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.765209][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.795241][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.814465][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.834563][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.847127][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.877969][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.901718][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.921061][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.935362][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.975418][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.997817][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 463.008245][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 463.035224][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 463.037145][T17609] loop8: detected capacity change from 0 to 1 [ 463.047090][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 463.062380][T17609] Dev loop8: unable to read RDB block 1 [ 463.072675][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 463.109720][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 463.123365][T17609] loop8: unable to read partition table [ 463.130499][T17609] loop8: partition table beyond EOD, truncated [ 463.138586][ T979] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 463.148423][ T979] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 463.159600][T17609] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 463.169000][ T979] usb 3-1: Product: syz [ 463.177486][ T979] usb 3-1: Manufacturer: syz [ 463.182120][ T979] usb 3-1: SerialNumber: syz [ 463.199327][ T979] usb 3-1: config 0 descriptor?? [ 463.214772][ T979] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 463.278028][T17614] tmpfs: Unknown parameter '0xffffffffffffffff' [ 463.972409][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5322'. [ 464.270400][T17635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5325'. [ 464.579643][T17643] kvm: apic: phys broadcast and lowest prio [ 464.869494][ T979] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 465.045447][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 465.061798][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.073987][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.090957][ T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.113904][ T979] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 465.130079][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.144902][ T979] usb 2-1: config 0 descriptor?? [ 465.150380][T15998] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 465.193548][ T5902] usb 3-1: USB disconnect, device number 57 [ 465.207083][ T5902] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 465.285438][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 465.313749][T15998] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.352444][T15998] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.372633][T15998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.387428][T15998] usb 4-1: Product: syz [ 465.391745][T15998] usb 4-1: Manufacturer: syz [ 465.397425][T15998] usb 4-1: SerialNumber: syz [ 465.452036][T17670] netem: incorrect ge model size [ 465.455450][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 465.458185][T17670] netem: change failed [ 465.464989][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.482621][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.492787][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 465.506432][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.533020][ T24] usb 5-1: config 0 descriptor?? [ 465.606978][ T979] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 465.627981][ T979] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 465.644625][ T979] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 465.653093][ T979] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 465.660751][ T979] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 465.674634][ T979] input: HID 0955:7214 Haptics as /devices/virtual/input/input51 [ 465.695622][ T5902] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 465.757332][ T979] shield 0003:0955:7214.0037: Registered Thunderstrike controller [ 465.769982][ T979] shield 0003:0955:7214.0037: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 465.802447][T17649] random: crng reseeded on system resumption [ 465.867759][ T5902] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.907642][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.929598][ T5902] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 465.946896][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 465.974669][ T5902] usb 3-1: SerialNumber: syz [ 465.981116][ T24] corsair 0003:1B1C:1B02.0038: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 466.213199][ T24] corsair 0003:1B1C:1B02.0038: Failed to get K90 initial state (error -71). [ 466.235756][ T5899] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 466.236736][ T5902] usb 3-1: 0:2 : does not exist [ 466.250013][T15998] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 466.258383][ T979] usb 2-1: USB disconnect, device number 49 [ 466.260138][ T24] usb 5-1: USB disconnect, device number 39 [ 466.287722][T15998] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 466.299885][ T5899] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 466.341782][T15998] cdc_ncm 4-1:1.0: bind() failure [ 466.349026][ T5899] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 466.359485][ T5902] usb 3-1: USB disconnect, device number 58 [ 466.372858][ T5899] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 466.385486][T15998] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 466.392326][T15998] cdc_ncm 4-1:1.1: bind() failure [ 466.422144][T15998] usb 4-1: USB disconnect, device number 51 [ 466.686407][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.025108][T17699] netlink: 'syz.2.5353': attribute type 10 has an invalid length. [ 467.063720][T17699] team0: Port device dummy0 added [ 467.101255][T17701] sctp: [Deprecated]: syz.4.5355 (pid 17701) Use of int in maxseg socket option. [ 467.101255][T17701] Use struct sctp_assoc_value instead [ 467.171044][T17699] team0: Port device dummy0 removed [ 467.204672][T17699] team0: Port device team_slave_0 removed [ 467.230002][T17699] team0: Port device team_slave_1 removed [ 467.241117][T17699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.254626][T17699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.273357][T17699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.284895][T17699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.459449][T17718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5363'. [ 467.940029][T17736] ipvlan2: entered promiscuous mode [ 467.950886][T17736] ipvlan2: entered allmulticast mode [ 467.956310][T17736] bridge0: entered allmulticast mode [ 467.962569][T17736] bridge0: port 1(ipvlan2) entered blocking state [ 467.973562][T17736] bridge0: port 1(ipvlan2) entered disabled state [ 468.514970][T17755] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 468.555647][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 468.555667][ T30] audit: type=1326 audit(1744208197.353:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 468.643491][ T30] audit: type=1326 audit(1744208197.353:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 468.665850][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.706441][ T30] audit: type=1326 audit(1744208197.363:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 468.728795][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.806008][ T30] audit: type=1326 audit(1744208197.363:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 468.828371][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.834976][ T30] audit: type=1326 audit(1744208197.363:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 468.895392][ T30] audit: type=1326 audit(1744208197.363:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 468.955249][ T30] audit: type=1326 audit(1744208197.363:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 468.977667][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.049407][ T30] audit: type=1326 audit(1744208197.363:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0938d169 code=0x7ffc0000 [ 469.971994][T17793] netlink: 'syz.1.5397': attribute type 4 has an invalid length. [ 469.975296][ T979] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 470.175225][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 470.210118][ T979] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 470.221778][ T979] usb 4-1: config 0 has no interface number 0 [ 470.248196][ T979] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.285254][ T979] usb 4-1: config 0 interface 85 has no altsetting 0 [ 470.294818][ T979] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 470.335952][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.344068][ T979] usb 4-1: Product: syz [ 470.385373][ T979] usb 4-1: Manufacturer: syz [ 470.390043][ T979] usb 4-1: SerialNumber: syz [ 470.453902][ T979] usb 4-1: config 0 descriptor?? [ 470.995274][ T5902] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 471.095875][ T979] appletouch 4-1:0.85: Geyser mode initialized. [ 471.114475][ T979] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input52 [ 471.156970][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 471.164882][ T5902] usb 3-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 471.179610][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.192198][T17818] netlink: 'syz.4.5409': attribute type 1 has an invalid length. [ 471.209159][ T5902] usb 3-1: config 0 descriptor?? [ 471.313428][ T5894] usb 4-1: USB disconnect, device number 52 [ 471.357138][ T5894] appletouch 4-1:0.85: input: appletouch disconnected [ 471.434048][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 471.454214][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 471.480201][ T5902] usb 3-1: USB disconnect, device number 59 [ 471.719947][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5417'. [ 473.075247][ T5894] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 473.158627][T17891] netlink: 748 bytes leftover after parsing attributes in process `syz.1.5443'. [ 473.189138][T17891] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 473.255740][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 473.285723][ T5894] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 473.297155][ T5894] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 473.323023][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.343055][ T5894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 473.371878][ T5894] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 473.389706][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.425334][ T5894] usb 4-1: Product: syz [ 473.434380][ T5894] usb 4-1: Manufacturer: syz [ 473.445058][ T5894] usb 4-1: SerialNumber: syz [ 473.490727][ T5894] usb 4-1: config 0 descriptor?? [ 473.514659][ T5894] hub 4-1:0.0: bad descriptor, ignoring hub [ 473.532918][ T5894] hub 4-1:0.0: probe with driver hub failed with error -5 [ 474.015501][ T5894] usb 4-1: reset high-speed USB device number 53 using dummy_hcd [ 474.028393][ T5894] usb 4-1: device reset changed ep0 maxpacket size! [ 474.057743][ T5894] usb 4-1: USB disconnect, device number 53 [ 474.405450][ T5894] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 474.565443][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 474.579977][ T5894] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 474.630315][ T5894] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 474.672013][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.720842][ T5894] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.744733][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.765325][ T5894] usb 4-1: Product: syz [ 474.769563][ T5894] usb 4-1: Manufacturer: syz [ 474.774190][ T5894] usb 4-1: SerialNumber: syz [ 474.813870][T17946] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 475.022459][ T5894] usb 4-1: 0:2 : does not exist [ 475.052184][ T5894] usb 4-1: USB disconnect, device number 54 [ 475.259061][ T5902] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 475.288972][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.319929][T17957] warning: `syz.2.5475' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 475.436256][ T5902] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 475.446440][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 475.462797][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 475.485629][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.503697][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 475.516440][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 475.530936][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.539614][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 475.554273][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 475.568743][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.577835][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 475.594130][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 475.603819][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5480'. [ 475.617319][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.636967][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 475.652242][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 475.678118][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.696632][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 475.715764][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 475.739347][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.770781][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 475.791494][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 475.811340][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.822010][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 475.833767][ T5902] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 475.862876][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.872679][ T5902] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 475.882970][ T5902] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 475.891980][ T5902] usb 2-1: Product: syz [ 475.896810][ T5902] usb 2-1: Manufacturer: syz [ 475.901471][ T5902] usb 2-1: SerialNumber: syz [ 475.909992][ T5902] usb 2-1: config 0 descriptor?? [ 475.924191][ T5902] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 476.232575][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 476.244746][ T5902] usb 2-1: USB disconnect, device number 50 [ 476.253733][ T5902] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 476.505367][ T979] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 476.623758][T17985] sctp: [Deprecated]: syz.2.5487 (pid 17985) Use of int in max_burst socket option. [ 476.623758][T17985] Use struct sctp_assoc_value instead [ 476.678249][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 476.706996][ T979] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.724651][ T979] usb 5-1: config 0 has no interface number 0 [ 476.738580][ T979] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.765254][ T979] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.782138][ T979] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 476.815375][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.836356][ T979] usb 5-1: config 0 descriptor?? [ 476.867000][T17993] delete_channel: no stack [ 476.885726][T17991] delete_channel: no stack [ 477.465383][ T979] uclogic 0003:28BD:0094.0039: pen parameters not found [ 477.490992][ T979] uclogic 0003:28BD:0094.0039: interface is invalid, ignoring [ 477.511059][ T979] usb 5-1: USB disconnect, device number 40 [ 478.597360][ T30] audit: type=1326 audit(1744208207.403:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18010 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788658d169 code=0x7fc00000 [ 478.853311][T18054] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 479.004768][T18059] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5521'. [ 479.025246][ T979] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 479.120879][T18062] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 479.185769][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 479.210987][ T979] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 479.229850][ T979] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 479.254076][ T979] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 479.271475][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 479.282454][ T979] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 479.292607][ T979] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 479.313619][ T979] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 479.347393][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.375868][ T979] usb 4-1: config 0 descriptor?? [ 479.624153][ T979] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 479.851193][ T979] usb 4-1: USB disconnect, device number 55 [ 479.861096][ T979] usblp0: removed [ 480.337056][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.338611][T18096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.520630][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.621470][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.752375][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.221406][T18120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5550'. [ 481.302168][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5551'. [ 481.470340][T18128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.479576][T18128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.493874][T18128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.508543][T18128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.519692][T18128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.810198][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5553'. [ 481.940247][ T53] k›*·]‘: left promiscuous mode [ 482.153640][ T53] tipc: Disabling bearer [ 482.188415][ T53] tipc: Left network mode [ 482.647520][T18168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5568'. [ 483.097995][T18194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5576'. [ 483.145499][T18194] netem: unknown loss type 13 [ 483.151098][T18194] netem: change failed [ 483.261655][T18131] chnl_net:caif_netlink_parms(): no params data found [ 483.545500][T18205] input: syz0 as /devices/virtual/input/input53 [ 483.598327][ T53] hsr_slave_0: left promiscuous mode [ 483.606787][T18128] Bluetooth: hci4: command tx timeout [ 483.655771][ T53] hsr_slave_1: left promiscuous mode [ 483.724681][ T53] veth1_macvtap: left promiscuous mode [ 483.755087][ T53] veth0_macvtap: left promiscuous mode [ 483.768892][ T53] veth1_vlan: left promiscuous mode [ 483.774429][ T53] veth0_vlan: left promiscuous mode [ 484.147905][ T53] [ 484.150306][ T53] ====================================================== [ 484.157344][ T53] WARNING: possible circular locking dependency detected [ 484.164379][ T53] 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 Not tainted [ 484.171508][ T53] ------------------------------------------------------ [ 484.178561][ T53] kworker/u8:3/53 is trying to acquire lock: [ 484.184551][ T53] ffff88807ec44e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 484.194703][ T53] [ 484.194703][ T53] but task is already holding lock: [ 484.202103][ T53] ffff8880617c4d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 484.213735][ T53] [ 484.213735][ T53] which lock already depends on the new lock. [ 484.213735][ T53] [ 484.224148][ T53] [ 484.224148][ T53] the existing dependency chain (in reverse order) is: [ 484.233159][ T53] [ 484.233159][ T53] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 484.241607][ T53] lock_acquire+0x116/0x2f0 [ 484.246635][ T53] __mutex_lock+0x1a5/0x10c0 [ 484.251748][ T53] dev_set_mtu+0x11c/0x270 [ 484.256721][ T53] team_add_slave+0x83b/0x28b0 [ 484.262008][ T53] do_set_master+0x579/0x730 [ 484.267129][ T53] do_setlink+0x111d/0x43a0 [ 484.272161][ T53] rtnl_newlink+0x17e2/0x1fe0 [ 484.277364][ T53] rtnetlink_rcv_msg+0x80f/0xd70 [ 484.282917][ T53] netlink_rcv_skb+0x208/0x480 [ 484.288209][ T53] netlink_unicast+0x7f8/0x9a0 [ 484.293496][ T53] netlink_sendmsg+0x8c3/0xcd0 [ 484.298787][ T53] __sock_sendmsg+0x221/0x270 [ 484.303989][ T53] ____sys_sendmsg+0x523/0x860 [ 484.309275][ T53] __sys_sendmsg+0x271/0x360 [ 484.314388][ T53] do_syscall_64+0xf3/0x230 [ 484.319415][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.325830][ T53] [ 484.325830][ T53] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 484.334015][ T53] validate_chain+0xa69/0x24e0 [ 484.339304][ T53] __lock_acquire+0xad5/0xd80 [ 484.344503][ T53] lock_acquire+0x116/0x2f0 [ 484.349525][ T53] __mutex_lock+0x1a5/0x10c0 [ 484.354640][ T53] team_vlan_rx_kill_vid+0x36/0xe0 [ 484.360271][ T53] vlan_vid_del+0x483/0x770 [ 484.365302][ T53] vlan_device_event+0x23c/0x1e00 [ 484.370844][ T53] notifier_call_chain+0x1a5/0x3f0 [ 484.376477][ T53] dev_close_many+0x33e/0x4c0 [ 484.381694][ T53] unregister_netdevice_many_notify+0x628/0x2510 [ 484.388542][ T53] default_device_exit_batch+0x7ff/0x880 [ 484.394717][ T53] cleanup_net+0x8af/0xd60 [ 484.399660][ T53] process_scheduled_works+0xac3/0x18e0 [ 484.405727][ T53] worker_thread+0x870/0xd50 [ 484.410843][ T53] kthread+0x7b7/0x940 [ 484.415438][ T53] ret_from_fork+0x4b/0x80 [ 484.420376][ T53] ret_from_fork_asm+0x1a/0x30 [ 484.425669][ T53] [ 484.425669][ T53] other info that might help us debug this: [ 484.425669][ T53] [ 484.435899][ T53] Possible unsafe locking scenario: [ 484.435899][ T53] [ 484.443346][ T53] CPU0 CPU1 [ 484.448705][ T53] ---- ---- [ 484.454091][ T53] lock(&dev_instance_lock_key#3); [ 484.459322][ T53] lock(team->team_lock_key#5); [ 484.466799][ T53] lock(&dev_instance_lock_key#3); [ 484.474555][ T53] lock(team->team_lock_key#5); [ 484.479504][ T53] [ 484.479504][ T53] *** DEADLOCK *** [ 484.479504][ T53] [ 484.487644][ T53] 5 locks held by kworker/u8:3/53: [ 484.492752][ T53] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 484.503647][ T53] #1: ffffc90000be7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 484.514188][ T53] #2: ffffffff900f0890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 484.523606][ T53] #3: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 484.533631][ T53] #4: ffff8880617c4d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 484.545658][ T53] [ 484.545658][ T53] stack backtrace: [ 484.551543][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 484.551563][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 484.551576][ T53] Workqueue: netns cleanup_net [ 484.551601][ T53] Call Trace: [ 484.551608][ T53] [ 484.551616][ T53] dump_stack_lvl+0x241/0x360 [ 484.551641][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.551664][ T53] ? __pfx__printk+0x10/0x10 [ 484.551687][ T53] ? print_lock+0x171/0x1a0 [ 484.551707][ T53] print_circular_bug+0x2e1/0x300 [ 484.551730][ T53] check_noncircular+0x142/0x160 [ 484.551754][ T53] validate_chain+0xa69/0x24e0 [ 484.551783][ T53] __lock_acquire+0xad5/0xd80 [ 484.551803][ T53] lock_acquire+0x116/0x2f0 [ 484.551819][ T53] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 484.551840][ T53] __mutex_lock+0x1a5/0x10c0 [ 484.551878][ T53] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 484.551897][ T53] ? __cancel_work+0x24c/0x390 [ 484.551920][ T53] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 484.551935][ T53] ? __cancel_work+0x2f0/0x390 [ 484.551956][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 484.551976][ T53] ? __pfx___cancel_work+0x10/0x10 [ 484.551998][ T53] ? do_raw_spin_unlock+0x13c/0x8b0 [ 484.552026][ T53] team_vlan_rx_kill_vid+0x36/0xe0 [ 484.552044][ T53] vlan_vid_del+0x483/0x770 [ 484.552072][ T53] vlan_device_event+0x23c/0x1e00 [ 484.552097][ T53] ? br_device_event+0x28f/0xae0 [ 484.552119][ T53] ? __pfx_phonet_device_notify+0x10/0x10 [ 484.552136][ T53] ? __pfx_vlan_device_event+0x10/0x10 [ 484.552150][ T53] ? __pfx_br_device_event+0x10/0x10 [ 484.552171][ T53] ? raw_notifier+0x9d/0x740 [ 484.552193][ T53] ? isotp_notifier+0xa4/0x6b0 [ 484.552208][ T53] ? cgw_notifier+0xd8/0x3b0 [ 484.552221][ T53] ? packet_notifier+0x76/0xa30 [ 484.552244][ T53] notifier_call_chain+0x1a5/0x3f0 [ 484.552267][ T53] dev_close_many+0x33e/0x4c0 [ 484.552293][ T53] ? __pfx_dev_close_many+0x10/0x10 [ 484.552319][ T53] unregister_netdevice_many_notify+0x628/0x2510 [ 484.552343][ T53] ? lockdep_hardirqs_on+0x9d/0x150 [ 484.552362][ T53] ? __local_bh_enable_ip+0x168/0x200 [ 484.552379][ T53] ? batadv_tt_local_remove+0x119/0x230 [ 484.552396][ T53] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 484.552412][ T53] ? batadv_tt_local_remove+0x119/0x230 [ 484.552428][ T53] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 484.552454][ T53] ? unregister_netdevice_queue+0x2c4/0x400 [ 484.552475][ T53] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 484.552500][ T53] default_device_exit_batch+0x7ff/0x880 [ 484.552529][ T53] ? __pfx_default_device_exit_batch+0x10/0x10 [ 484.552555][ T53] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 484.552578][ T53] ? cfg802154_pernet_exit+0xc3/0xe0 [ 484.552593][ T53] ? __pfx_default_device_exit_batch+0x10/0x10 [ 484.552619][ T53] cleanup_net+0x8af/0xd60 [ 484.552645][ T53] ? __pfx_cleanup_net+0x10/0x10 [ 484.552674][ T53] ? process_scheduled_works+0x9cb/0x18e0 [ 484.552692][ T53] process_scheduled_works+0xac3/0x18e0 [ 484.552721][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.552744][ T53] ? assign_work+0x367/0x3d0 [ 484.552763][ T53] worker_thread+0x870/0xd50 [ 484.552788][ T53] ? __kthread_parkme+0x1a8/0x200 [ 484.552809][ T53] ? __pfx_worker_thread+0x10/0x10 [ 484.552829][ T53] kthread+0x7b7/0x940 [ 484.552854][ T53] ? __pfx_worker_thread+0x10/0x10 [ 484.552873][ T53] ? __pfx_kthread+0x10/0x10 [ 484.552895][ T53] ? __pfx_kthread+0x10/0x10 [ 484.552917][ T53] ? __pfx_kthread+0x10/0x10 [ 484.552939][ T53] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 484.552961][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.552976][ T53] ? lockdep_hardirqs_on+0x9d/0x150 [ 484.552994][ T53] ? __pfx_kthread+0x10/0x10 [ 484.553017][ T53] ret_from_fork+0x4b/0x80 [ 484.553034][ T53] ? __pfx_kthread+0x10/0x10 [ 484.553056][ T53] ret_from_fork_asm+0x1a/0x30 [ 484.553083][ T53] [ 484.930359][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.685266][T18128] Bluetooth: hci4: command tx timeout