last executing test programs: 34.851169103s ago: executing program 1 (id=2222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000002d40)={0x1, 0x1}, 0x8) close(0x3) 34.569780343s ago: executing program 1 (id=2225): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4034, 0xfc2}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fea4a118000e000600142603600e1208000f0000810401a80016040a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 34.149069786s ago: executing program 1 (id=2230): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 33.965248458s ago: executing program 1 (id=2232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) r1 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r1, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 33.694667657s ago: executing program 1 (id=2236): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[@ANYBLOB="0415"], 0x2, 0x1) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x2) 32.459925533s ago: executing program 1 (id=2246): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44) fchown(r2, 0x0, 0x0) 4.429661583s ago: executing program 3 (id=2409): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r0, 0x23d40000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x8b7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4107, 0x100b}, 0x7ffffffe}], 0x1, 0x40002020, 0x0) 4.1178544s ago: executing program 3 (id=2401): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x20200, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 3.378552246s ago: executing program 4 (id=2406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "4d19308fd4716602fc42c5775b3ff4b8e478957a9fd9906c6ba70a16c9e7ec5e", "c5790620ed1b0020002f7fa35fc287a470366ddc51d8159e9877f3d8ac2693fb8f0141d835bf05f1db39a966306a49f2", "b7f980c9c55898610dabc5ac55d75cb262ebde140eb5113eb922a759", {"76ae2f8d752bcefe6973ea968b32b310", "d379abea32e2772a33f5d6add3496fc6"}}}}}}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2.568901325s ago: executing program 4 (id=2412): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="816154c6e71d9c750363f342744911ca45e32f393e977df3b37b8f315e8271e2", 0x20}, {&(0x7f0000000300)="3f82daa87bfdc13ef48800867c14174260351f669cfbc7c20f531d3c8bff40db35c7a85dceef465ec4", 0x29}, {&(0x7f0000000500)="6ba700c768230113f3d5fa97dbecff7a9a69ef9d7b90bf0e00c78218b697ca2713d5b36ea0f7582469bcb5d315147a3b9c2834b4b418bd58e1fd2a3cd9890859bfaedeb26e7cedf22dfe11959be073e9e55cd4669fcd7f", 0x57}], 0x3, 0x0, 0x0, 0x40088d5}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000003c0)=""/195, 0xc3}], 0x2}, 0x8}], 0x2, 0x10000, 0x0) 2.215221242s ago: executing program 4 (id=2414): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000180)=""/34, 0x22}], 0x2}, 0x0) 2.129693537s ago: executing program 3 (id=2415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 1.981393034s ago: executing program 0 (id=2417): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.900334649s ago: executing program 4 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 1.688308923s ago: executing program 3 (id=2419): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x8, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) 1.635046463s ago: executing program 2 (id=2420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000088c0)=""/4101, 0x1005}], 0x1}, 0x6}], 0x1, 0x2001, 0x0) sendmmsg$alg(r1, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="cdc9c07f776e6f616a1676b09ac629c76546750766ed6d6ef698bad9a94929035239ad8f040bfa7c3e162fae13b310ef723a897987c09b9184f716d60c2b001ca453daa8f66e868749269ec4d2d4de3f256bd0befb7d7b5ecf52bb4a29cb453ce5803dd00c22d0f94aecf9a784608278795540e3107b2ad2ce92e8ed435d9896fc03784d9e04f037d0848a34634a471817cad0103ace85a9126260f83506c584b6ec38892c099c1502a16e38fd4b8ccd4ddf6b886ce7c7b6adb9a314486543d12c09fba5da3e49028ebc10886681afe3f50824f0e41f19ded0b5106f85d5b0c3c44c", 0xe2}, {&(0x7f0000001f80)="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", 0xf24}], 0x2, 0x0, 0x0, 0x44801}], 0x1, 0x801) 1.584836425s ago: executing program 4 (id=2421): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x213, 0x8, 0x0, 0x0) 1.469157196s ago: executing program 3 (id=2422): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r1 = epoll_create1(0x0) ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xbaf03d8f7cf92877}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xc0000008}) 1.362798138s ago: executing program 2 (id=2423): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1.254031972s ago: executing program 0 (id=2424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 918.014587ms ago: executing program 2 (id=2425): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540), 0x395}, 0x24048000) 791.24343ms ago: executing program 0 (id=2426): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x1, 0x8000) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 536.290592ms ago: executing program 0 (id=2427): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)="58104053af45d43ac86fac32e9896a21b244f2282a91327f763641d55a372a9ab104fd4c31abfb4148ce7826605fe632c6cc31e66f4706030aaa0320d92b0b8b41fd21ee32f2e3d86cda67dd197273e2e0381241a4220e", 0x57, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x32}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 526.67879ms ago: executing program 2 (id=2428): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x20040851) 379.274077ms ago: executing program 3 (id=2429): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x2c, 0x3, 0x0) close(r0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 236.953874ms ago: executing program 0 (id=2430): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 236.384362ms ago: executing program 2 (id=2431): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000003640), 0x2, 0x20042) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000000)) 78.859949ms ago: executing program 4 (id=2432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400a0}, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x2, 0x11, 0x0) 19.433759ms ago: executing program 2 (id=2433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffd, @mcast2, 0x2}, 0x1c) 0s ago: executing program 0 (id=2434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x4, {@ip4=@broadcast}}}]}, 0x38}}, 0x20044050) kernel console output (not intermixed with test programs): cdDevice= 0.40 [ 244.764585][ T5909] usb 2-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 244.764607][ T5909] usb 2-1: Product: syz [ 244.764622][ T5909] usb 2-1: Manufacturer: syz [ 244.764637][ T5909] usb 2-1: SerialNumber: syz [ 245.033259][ T8626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.643332][ T8626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.709012][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.846240][ T5909] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 245.846285][ T5909] cdc_ncm 2-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 245.846305][ T5909] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 245.879036][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 245.885473][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 245.885511][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 245.885540][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.933042][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 245.933075][ T10] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 245.933098][ T10] usb 4-1: Product: syz [ 245.933113][ T10] usb 4-1: Manufacturer: syz [ 245.933128][ T10] usb 4-1: SerialNumber: syz [ 245.994592][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input20 [ 246.147782][ T5909] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 246.171146][ T5909] usb 2-1: USB disconnect, device number 10 [ 246.173862][ T5909] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 246.374208][ T10] usb 4-1: USB disconnect, device number 13 [ 246.374300][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 246.467565][ T10] appletouch 4-1:1.0: input: appletouch disconnected [ 246.729212][ T44] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 246.731397][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 246.731919][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 246.891643][ T44] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 246.891677][ T44] usb 3-1: config 150 has no interface number 0 [ 246.891727][ T44] usb 3-1: config 150 interface 204 has no altsetting 0 [ 246.891748][ T44] usb 3-1: config 150 interface 1 has no altsetting 0 [ 246.894965][ T44] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 246.894996][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.895017][ T44] usb 3-1: Product: syz [ 246.895032][ T44] usb 3-1: Manufacturer: syz [ 246.895046][ T44] usb 3-1: SerialNumber: syz [ 247.220995][ T44] xr_serial 3-1:150.204: xr_serial converter detected [ 247.398936][ T5909] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 247.548981][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 247.558770][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.558931][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.558973][ T5909] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 247.558996][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.637092][ T5909] usb 5-1: config 0 descriptor?? [ 247.878781][ T8689] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.961885][ T8689] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 248.087205][ T44] usb 3-1: xr_serial converter now attached to ttyUSB0 [ 248.233319][ T5824] usb 3-1: USB disconnect, device number 12 [ 248.242842][ T5824] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 248.243779][ T5824] xr_serial 3-1:150.204: device disconnected [ 248.468087][ T5909] letsketch 0003:6161:4D15.000D: Device info: ఁ [ 248.684810][ T5909] letsketch 0003:6161:4D15.000D: Device info: 擃 [ 248.927677][ T5909] usb 5-1: Max retries (5) exceeded reading string descriptor 202 [ 248.927760][ T5909] letsketch 0003:6161:4D15.000D: probe with driver letsketch failed with error -71 [ 248.968921][ T5909] usb 5-1: USB disconnect, device number 7 [ 249.032709][ T8713] syz.3.1137 (8713) used greatest stack depth: 17800 bytes left [ 249.222961][ T8723] netlink: 'syz.0.1141': attribute type 12 has an invalid length. [ 249.600976][ T8733] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1146'. [ 250.029031][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.096319][ T8753] mkiss: ax0: crc mode is auto. [ 250.194953][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.194990][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.195030][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 250.195053][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.229307][ T10] usb 2-1: config 0 descriptor?? [ 250.299027][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 250.459007][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 250.488554][ T9] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 250.488588][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.488610][ T9] usb 4-1: Product: syz [ 250.488625][ T9] usb 4-1: Manufacturer: syz [ 250.490109][ T9] usb 4-1: SerialNumber: syz [ 250.548237][ T9] usb 4-1: config 0 descriptor?? [ 250.595998][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 250.668146][ T5961] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.707598][ T5961] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.964783][ T10] cm6533_jd 0003:0D8C:0022.000F: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 251.586434][ T5924] usb 2-1: USB disconnect, device number 11 [ 251.804020][ T9] gspca_topro: reg_w err -71 [ 251.829007][ T9] gspca_topro: Sensor soi763a [ 251.859952][ T9] usb 4-1: USB disconnect, device number 14 [ 252.835353][ T8796] Bluetooth: hci0: too big key_count value 39401 [ 253.263087][ T38] audit: type=1326 audit(1756235258.340:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.1177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f530341ebe9 code=0x0 [ 253.799872][ T5909] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 253.952036][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.952092][ T5909] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 253.952117][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.978064][ T5909] usb 2-1: config 0 descriptor?? [ 254.210447][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 254.210604][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 254.240078][ T5909] usb 2-1: USB disconnect, device number 12 [ 254.422122][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.441114][ T8844] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1190'. [ 254.709131][ T5824] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 254.750020][ T8855] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 254.750045][ T8855] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1196'. [ 254.750062][ T8855] netlink: 'syz.3.1196': attribute type 2 has an invalid length. [ 254.750076][ T8855] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 254.858984][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 254.862377][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.862428][ T5824] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 254.862453][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.867118][ T8857] gretap0: entered promiscuous mode [ 254.921604][ T5824] usb 2-1: config 0 descriptor?? [ 254.926368][ T5824] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 254.947420][ T5824] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 255.032110][ T4540] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.288699][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.357231][ T5909] usb 2-1: USB disconnect, device number 13 [ 255.375302][ T5909] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 256.118984][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 256.279413][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.279448][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.279489][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 256.279513][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.286546][ T10] usb 5-1: config 0 descriptor?? [ 256.722927][ T10] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 256.723055][ T10] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 256.750358][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0010/input/input21 [ 256.791138][ T10] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 256.829071][ T5924] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.965496][ T5961] usb 5-1: USB disconnect, device number 8 [ 256.979629][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 256.988418][ T5924] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 256.988481][ T5924] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.988505][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.988530][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.988555][ T5924] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.988599][ T5924] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.988622][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.102483][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 257.395013][ T5924] usb 2-1: GET_CAPABILITIES returned 0 [ 257.395064][ T5924] usbtmc 2-1:16.0: can't read capabilities [ 257.578540][ T8913] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 257.670761][ T5824] usb 2-1: USB disconnect, device number 14 [ 257.775001][ T8913] bond1: entered promiscuous mode [ 257.776472][ T8913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.874596][ T8917] bond1: (slave bridge1): making interface the new active one [ 257.874621][ T8917] bridge1: entered promiscuous mode [ 257.911865][ T8917] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 258.000399][ T5924] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 258.119154][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 258.139031][ T5824] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 258.148918][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 258.159657][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 258.159698][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.159718][ T5924] usb 5-1: Product: syz [ 258.159732][ T5924] usb 5-1: Manufacturer: syz [ 258.159747][ T5924] usb 5-1: SerialNumber: syz [ 258.207953][ T5924] usb 5-1: config 0 descriptor?? [ 258.289045][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 258.294844][ T5824] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 258.294874][ T5824] usb 4-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 258.294895][ T5824] usb 4-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 258.359924][ T5824] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 258.359958][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.359980][ T5824] usb 4-1: Product: syz [ 258.359995][ T5824] usb 4-1: Manufacturer: syz [ 258.360010][ T5824] usb 4-1: SerialNumber: syz [ 258.447059][ T5924] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 258.799005][ T5925] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 258.897668][ T5824] usb 4-1: USB disconnect, device number 15 [ 258.958981][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 258.964211][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.964240][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.964364][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 258.964395][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 258.964502][ T5925] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 258.964527][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.054654][ T5925] hub 2-1:1.0: bad descriptor, ignoring hub [ 259.054756][ T5925] hub 2-1:1.0: probe with driver hub failed with error -5 [ 259.056528][ T5925] cdc_wdm 2-1:1.0: skipping garbage [ 259.056545][ T5925] cdc_wdm 2-1:1.0: skipping garbage [ 259.122833][ T5925] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 259.122870][ T5925] cdc_wdm 2-1:1.0: Unknown control protocol [ 259.209561][ T8958] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.1236'. [ 259.292750][ T5924] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 259.297465][ T5924] usb 5-1: USB disconnect, device number 9 [ 259.359773][ T5925] usb 2-1: USB disconnect, device number 15 [ 259.699066][ T5925] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 259.848980][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 259.853770][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.853799][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.853855][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 259.853885][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 259.853930][ T5925] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 259.853954][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.939178][ T5925] hub 2-1:1.0: bad descriptor, ignoring hub [ 259.939221][ T5925] hub 2-1:1.0: probe with driver hub failed with error -5 [ 259.940358][ T5925] cdc_wdm 2-1:1.0: skipping garbage [ 259.940375][ T5925] cdc_wdm 2-1:1.0: skipping garbage [ 259.943207][ T5925] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 259.943228][ T5925] cdc_wdm 2-1:1.0: Unknown control protocol [ 260.249391][ T5924] usb 2-1: USB disconnect, device number 16 [ 260.357863][ T8984] netlink: 'syz.3.1247': attribute type 21 has an invalid length. [ 260.357885][ T8984] netlink: 'syz.3.1247': attribute type 22 has an invalid length. [ 260.357899][ T8984] netlink: 'syz.3.1247': attribute type 23 has an invalid length. [ 260.357914][ T8984] netlink: 'syz.3.1247': attribute type 25 has an invalid length. [ 260.357927][ T8984] netlink: 'syz.3.1247': attribute type 26 has an invalid length. [ 260.357942][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1247'. [ 260.448959][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 261.019893][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.019977][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.349004][ T5909] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 261.498940][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 261.501729][ T5909] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.501763][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 261.501799][ T5909] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 261.501824][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.507762][ T5909] usb 2-1: config 0 descriptor?? [ 261.609005][ T5961] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 261.758960][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 261.768590][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.769113][ T5961] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.773618][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.827690][ T5961] usb 1-1: config 0 descriptor?? [ 261.985852][ T5909] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 261.985894][ T5909] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 261.986162][ T5909] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 261.986195][ T5909] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 261.986222][ T5909] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 262.012915][ T5909] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 262.068281][ T38] audit: type=1326 audit(1756235267.150:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9029 comm="syz.2.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530341ebe9 code=0x7ffc0000 [ 262.091426][ T38] audit: type=1326 audit(1756235267.180:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9029 comm="syz.2.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530341ebe9 code=0x7ffc0000 [ 262.091487][ T38] audit: type=1326 audit(1756235267.180:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9029 comm="syz.2.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f530341ebe9 code=0x7ffc0000 [ 262.097201][ T38] audit: type=1326 audit(1756235267.180:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9029 comm="syz.2.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530341ebe9 code=0x7ffc0000 [ 262.099019][ T5824] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 262.101890][ T38] audit: type=1326 audit(1756235267.180:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9029 comm="syz.2.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530341ebe9 code=0x7ffc0000 [ 262.114660][ T5961] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 262.224006][ T5909] usb 2-1: USB disconnect, device number 17 [ 262.289044][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 262.296391][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 262.296429][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.296452][ T5824] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.296478][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 262.296502][ T5824] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 262.296543][ T5824] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 262.296568][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.377451][ T5824] usb 4-1: config 0 descriptor?? [ 262.436816][ T5837] Bluetooth: hci5: urb ffff88814e03ce00 submission failed (90) [ 262.468648][ T44] usb 1-1: USB disconnect, device number 8 [ 262.665693][ T5909] usb 4-1: USB disconnect, device number 16 [ 262.899381][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.642838][ T5909] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 263.749113][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 263.802198][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.802227][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 263.802295][ T5909] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 263.802320][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.808076][ T5909] usb 4-1: config 0 descriptor?? [ 263.818664][ T5909] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 263.832489][ T5909] dvb-usb: bulk message failed: -22 (3/0) [ 263.838291][ T5909] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 263.849755][ T5909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 263.849847][ T5909] usb 4-1: media controller created [ 263.853660][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.898876][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 263.930499][ T44] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 263.930532][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.930552][ T44] usb 1-1: Product: syz [ 263.930567][ T44] usb 1-1: Manufacturer: syz [ 263.930582][ T44] usb 1-1: SerialNumber: syz [ 263.956867][ T5909] dvb-usb: bulk message failed: -22 (6/0) [ 263.956980][ T5909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 263.963502][ T44] usb 1-1: config 0 descriptor?? [ 263.998095][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 264.039069][ T5909] dvb-usb: schedule remote query interval to 150 msecs. [ 264.039094][ T5909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 264.208459][ T5909] dvb-usb: bulk message failed: -22 (1/0) [ 264.208569][ T5909] dvb-usb: error while querying for an remote control event. [ 264.225254][ T44] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.392675][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 264.393806][ T5961] dvb-usb: error while querying for an remote control event. [ 264.548985][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 264.549022][ T5961] dvb-usb: error while querying for an remote control event. [ 264.708938][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 264.708969][ T5961] dvb-usb: error while querying for an remote control event. [ 264.867484][ T44] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 264.869215][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 264.869249][ T5961] dvb-usb: error while querying for an remote control event. [ 264.884224][ T44] usb 1-1: USB disconnect, device number 9 [ 264.946990][ T5961] usb 4-1: USB disconnect, device number 17 [ 265.066823][ T9080] trusted_key: syz.1.1289 sent an empty control message without MSG_MORE. [ 265.138151][ T5961] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 265.458549][ T5837] Bluetooth: hci3: unexpected subevent 0x01 length: 37 > 18 [ 265.464739][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 265.464771][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 265.464803][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.464819][ T5837] Workqueue: hci3 hci_rx_work [ 265.464850][ T5837] Call Trace: [ 265.464860][ T5837] [ 265.464871][ T5837] dump_stack_lvl+0x189/0x250 [ 265.464916][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.464955][ T5837] ? __pfx__printk+0x10/0x10 [ 265.464990][ T5837] ? kernfs_path_from_node+0x2c/0x280 [ 265.465016][ T5837] ? kernfs_path_from_node+0x243/0x280 [ 265.465039][ T5837] ? kernfs_path_from_node+0x2c/0x280 [ 265.465069][ T5837] sysfs_create_dir_ns+0x259/0x280 [ 265.465109][ T5837] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 265.465138][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 265.465188][ T5837] ? rt_spin_unlock+0x65/0x80 [ 265.465222][ T5837] kobject_add_internal+0x5a5/0xb50 [ 265.465271][ T5837] kobject_add+0x155/0x220 [ 265.465316][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 265.465363][ T5837] ? get_device_parent+0x370/0x3a0 [ 265.465406][ T5837] device_add+0x408/0xb50 [ 265.465447][ T5837] hci_conn_add_sysfs+0xd5/0x1e0 [ 265.465490][ T5837] le_conn_complete_evt+0xc3a/0x1220 [ 265.465539][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 265.465571][ T5837] ? __pfx_bt_warn+0x10/0x10 [ 265.465600][ T5837] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 265.465632][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.465670][ T5837] ? skb_pull_data+0xfb/0x200 [ 265.465708][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 265.465749][ T5837] hci_event_packet+0x78c/0x1200 [ 265.465797][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 265.465831][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 265.465872][ T5837] ? __pfx_migrate_enable+0x10/0x10 [ 265.465914][ T5837] ? hci_send_to_monitor+0xe2/0x570 [ 265.465956][ T5837] hci_rx_work+0x46a/0xe80 [ 265.465991][ T5837] ? process_scheduled_works+0x9ef/0x17b0 [ 265.466025][ T5837] process_scheduled_works+0xade/0x17b0 [ 265.466096][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 265.466155][ T5837] worker_thread+0x8a0/0xda0 [ 265.466192][ T5837] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 265.466238][ T5837] ? __kthread_parkme+0x7b/0x200 [ 265.466285][ T5837] kthread+0x711/0x8a0 [ 265.466328][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 265.466358][ T5837] ? __pfx_kthread+0x10/0x10 [ 265.466404][ T5837] ? __pfx_kthread+0x10/0x10 [ 265.466443][ T5837] ret_from_fork+0x3fc/0x770 [ 265.466480][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 265.466521][ T5837] ? __switch_to_asm+0x39/0x70 [ 265.466544][ T5837] ? __switch_to_asm+0x33/0x70 [ 265.466566][ T5837] ? __pfx_kthread+0x10/0x10 [ 265.466604][ T5837] ret_from_fork_asm+0x1a/0x30 [ 265.466650][ T5837] [ 265.466689][ T5837] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 265.466740][ T5837] Bluetooth: hci3: failed to register connection device [ 266.404750][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d16e400: rx timeout, send abort [ 266.679069][ T9109] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 266.757274][ T9109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.907373][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d16e400: abort rx timeout. Force session deactivation [ 267.051494][ T9113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.051888][ T9113] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.054307][ T9113] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 267.598850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 268.258828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 268.888846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 269.525988][ T9169] pim6reg: entered allmulticast mode [ 269.550085][ T9169] pim6reg: left allmulticast mode [ 269.564148][ T5824] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 269.602658][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.709001][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 269.713163][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.713207][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.713348][ T5824] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 269.713374][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.774915][ T5824] usb 4-1: config 0 descriptor?? [ 269.786629][ T5824] hub 4-1:0.0: USB hub found [ 270.001467][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 270.003488][ T5824] hub 4-1:0.0: 2 ports detected [ 270.159157][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 270.165777][ T44] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 270.165810][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.165832][ T44] usb 1-1: Product: syz [ 270.165848][ T44] usb 1-1: Manufacturer: syz [ 270.165863][ T44] usb 1-1: SerialNumber: syz [ 270.176206][ T44] usb 1-1: config 0 descriptor?? [ 270.278972][ T5961] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 270.407043][ T44] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 270.429831][ T5824] usb 4-1: USB disconnect, device number 18 [ 270.458974][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 270.485553][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.485684][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.485715][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.485738][ T5961] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.485828][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.524421][ T5961] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.524459][ T5961] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.524828][ T5961] usb 3-1: Manufacturer: syz [ 270.590281][ T5961] usb 3-1: config 0 descriptor?? [ 270.909173][ T5961] rc_core: IR keymap rc-hauppauge not found [ 270.909201][ T5961] Registered IR keymap rc-empty [ 270.909690][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.939231][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.966346][ T5961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 270.997281][ T5961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 271.083657][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.101653][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.119802][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.142260][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.159126][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.179128][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.199082][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.219225][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.239089][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.258962][ T5961] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.311491][ T5961] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 271.312845][ T5961] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 271.473935][ T5961] usb 3-1: USB disconnect, device number 13 [ 271.629437][ T44] usb write operation failed. (-71) [ 271.706718][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 271.713987][ T44] dvbdev: DVB: registering new adapter (Terratec H7) [ 271.714056][ T44] usb 1-1: media controller created [ 271.715508][ T44] usb read operation failed. (-71) [ 271.723271][ T44] usb write operation failed. (-71) [ 271.747486][ T44] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 271.775135][ T44] usb 1-1: USB disconnect, device number 10 [ 272.248970][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 272.399749][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 272.407499][ T10] usb 4-1: config 0 has no interfaces? [ 272.407541][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 272.407567][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.467840][ T10] usb 4-1: config 0 descriptor?? [ 272.494412][ T9227] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1347'. [ 272.540266][ T5837] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 272.560443][ T9227] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1347'. [ 272.560727][ T9227] 0{X: renamed from gretap0 [ 272.607064][ T9227] 0{X: entered allmulticast mode [ 272.613226][ T9227] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 272.712185][ T5824] usb 4-1: USB disconnect, device number 19 [ 273.532713][ T9259] input: syz1 as /devices/virtual/input/input24 [ 273.662776][ T9260] : entered promiscuous mode [ 273.868430][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.071346][ T9287] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1371'. [ 274.983877][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 275.634135][ T9321] team0: Port device team_slave_0 removed [ 275.694319][ T9327] syz_tun: entered allmulticast mode [ 275.732092][ T9331] syzkaller1: entered promiscuous mode [ 275.732132][ T9331] syzkaller1: entered allmulticast mode [ 276.073318][ T9323] syz_tun: left allmulticast mode [ 276.360681][ T38] audit: type=1326 audit(1756235281.430:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.360747][ T38] audit: type=1326 audit(1756235281.430:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.360864][ T38] audit: type=1326 audit(1756235281.440:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.361049][ T38] audit: type=1326 audit(1756235281.440:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.361099][ T38] audit: type=1326 audit(1756235281.440:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.361146][ T38] audit: type=1326 audit(1756235281.440:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.361194][ T38] audit: type=1326 audit(1756235281.440:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.361241][ T38] audit: type=1326 audit(1756235281.440:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.361290][ T38] audit: type=1326 audit(1756235281.440:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.361345][ T38] audit: type=1326 audit(1756235281.440:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eeab8ebe9 code=0x7ffc0000 [ 276.615030][ T5837] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 276.615780][ T5837] Bluetooth: hci2: Injecting HCI hardware error event [ 276.628884][ T5837] Bluetooth: hci2: hardware error 0x00 [ 276.685699][ T3561] Bluetooth: hci5: Frame reassembly failed (-84) [ 276.692571][ T5841] Bluetooth: hci5: unexpected event 0x09 length: 0 < 3 [ 276.902542][ T44] libceph: connect (1)[c::]:6789 error -101 [ 276.903277][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 276.935603][ T44] libceph: connect (1)[c::]:6789 error -101 [ 276.935855][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 276.963158][ T9361] ceph: No mds server is up or the cluster is laggy [ 277.039842][ T5824] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 277.107361][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.207945][ T5824] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.207983][ T5824] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 277.208012][ T5824] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 277.208054][ T5824] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.208077][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.227267][ T9359] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 277.265284][ T5824] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.291882][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 277.421490][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.509296][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.648219][ T5824] usb 5-1: USB disconnect, device number 10 [ 278.689275][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 278.689596][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 278.775157][ T5837] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 279.188325][ T9409] support for the xor transformation has been removed. [ 279.824455][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.205044][ T9423] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 280.935642][ T9440] netlink: 'syz.2.1432': attribute type 5 has an invalid length. [ 281.201422][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 281.379264][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.379299][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.379322][ T44] usb 1-1: Product: syz [ 281.379338][ T44] usb 1-1: Manufacturer: syz [ 281.379353][ T44] usb 1-1: SerialNumber: syz [ 281.846092][ T9461] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1442'. [ 282.434829][ T44] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 282.702912][ T44] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 282.762509][ T44] usb 1-1: USB disconnect, device number 11 [ 282.765024][ T44] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 282.817296][ T9480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.242976][ T44] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 284.408954][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 284.413335][ T44] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 284.413367][ T44] usb 4-1: config 0 has no interface number 0 [ 284.413421][ T44] usb 4-1: config 0 interface 184 has no altsetting 0 [ 284.447998][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 284.448032][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.448052][ T44] usb 4-1: Product: syz [ 284.448067][ T44] usb 4-1: Manufacturer: syz [ 284.448083][ T44] usb 4-1: SerialNumber: syz [ 284.471776][ T9520] kvm: emulating exchange as write [ 284.481697][ T44] usb 4-1: config 0 descriptor?? [ 284.495933][ T44] smsc75xx v1.0.0 [ 285.382011][ T5824] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 285.534924][ T5824] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 285.534959][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.534982][ T5824] usb 5-1: Product: syz [ 285.534998][ T5824] usb 5-1: Manufacturer: syz [ 285.535013][ T5824] usb 5-1: SerialNumber: syz [ 285.580170][ T5824] usb 5-1: config 0 descriptor?? [ 285.585976][ T5824] ch341 5-1:0.0: ch341-uart converter detected [ 285.789135][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 285.789170][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.793153][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 285.793186][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 285.793208][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 285.793233][ T44] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 285.793580][ T44] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 285.846648][ T44] usb 4-1: USB disconnect, device number 20 [ 286.860120][ T5824] ch341-uart ttyUSB0: failed to read break control: -71 [ 286.860177][ T5824] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 286.919939][ T5824] usb 5-1: USB disconnect, device number 11 [ 286.925796][ T5824] ch341 5-1:0.0: device disconnected [ 287.351377][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 287.499038][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 287.631760][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.633161][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 287.633200][ T5925] usb 3-1: can't read configurations, error -71 [ 287.813181][ T9576] input: syz0 as /devices/virtual/input/input25 [ 289.459334][ T9591] syz.0.1493 (9591) used greatest stack depth: 16760 bytes left [ 290.009031][ T5909] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 290.076208][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'. [ 290.117229][ T9654] veth1_macvtap: left promiscuous mode [ 290.168913][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 290.206298][ T5909] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 290.206346][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.206373][ T5909] usb 5-1: Product: syz [ 290.206393][ T5909] usb 5-1: Manufacturer: syz [ 290.206408][ T5909] usb 5-1: SerialNumber: syz [ 290.242977][ T5909] usb 5-1: config 0 descriptor?? [ 290.261532][ T5909] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 290.365498][ T9658] netlink: 208252 bytes leftover after parsing attributes in process `syz.3.1507'. [ 290.367893][ T9658] netlink: 'syz.3.1507': attribute type 1 has an invalid length. [ 290.367917][ T9658] netlink: 'syz.3.1507': attribute type 2 has an invalid length. [ 290.367931][ T9658] netlink: 'syz.3.1507': attribute type 3 has an invalid length. [ 290.367945][ T9658] netlink: 'syz.3.1507': attribute type 4 has an invalid length. [ 290.485015][ T5909] gp8psk: usb in 128 operation failed. [ 290.494713][ T5909] gp8psk: usb in 137 operation failed. [ 290.494736][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.495967][ T5909] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 290.496031][ T5909] usb 5-1: media controller created [ 290.564430][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.607946][ T5909] gp8psk_fe: Frontend revision 1 attached [ 290.618441][ T5909] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 290.630689][ T5909] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 290.727433][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 290.857099][ T5909] gp8psk: usb in 138 operation failed. [ 290.857119][ T5909] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 290.857134][ T5909] gp8psk: found Genpix USB device pID = 201 (hex) [ 291.015891][ T5925] usb 5-1: USB disconnect, device number 12 [ 291.307575][ T5925] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 292.244822][ T9668] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1511'. [ 292.402972][ T5909] IPVS: starting estimator thread 0... [ 292.498984][ T9692] IPVS: using max 7 ests per chain, 16800 per kthread [ 294.037703][ T9734] netlink: 'syz.3.1533': attribute type 2 has an invalid length. [ 295.147645][ T9750] block nbd2: shutting down sockets [ 295.402149][ T9757] netlink: 'syz.1.1542': attribute type 4 has an invalid length. [ 296.070972][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 296.148938][ T5824] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 296.158609][ T9778] Invalid ELF header magic: != ELF [ 296.308937][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 296.311423][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.311456][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.311480][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.311525][ T5824] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 296.311549][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.327297][ T5824] usb 2-1: config 0 descriptor?? [ 296.484054][ T9782] pim6reg1: entered promiscuous mode [ 296.484086][ T9782] pim6reg1: entered allmulticast mode [ 296.855269][ T5824] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 296.855307][ T5824] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 296.855336][ T5824] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 296.855363][ T5824] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 296.855398][ T5824] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 296.878042][ T5824] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 297.040337][ T9774] random: crng reseeded on system resumption [ 297.126715][ T5824] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 297.127094][ T5824] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 297.558503][ T5824] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 297.558987][ T5824] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 297.560245][ T10] usb 2-1: USB disconnect, device number 18 [ 297.561979][ T5824] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 297.759299][ T5925] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 297.909045][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 297.913635][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.913671][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.913712][ T5925] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 297.913738][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.920204][ T5925] usb 5-1: config 0 descriptor?? [ 298.006283][ T9824] loop2: detected capacity change from 0 to 7 [ 298.034379][ T9824] Dev loop2: unable to read RDB block 7 [ 298.034428][ T9824] loop2: AHDI p1 p2 p3 [ 298.034463][ T9824] loop2: partition table partially beyond EOD, truncated [ 298.034579][ T9824] loop2: p1 start 1601398130 is beyond EOD, truncated [ 298.034600][ T9824] loop2: p2 start 1702059890 is beyond EOD, truncated [ 299.106418][ T5925] letsketch 0003:6161:4D15.0013: Device info: ఁ [ 299.355724][ T5925] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 299.355817][ T5925] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -71 [ 299.385712][ T5925] usb 5-1: USB disconnect, device number 13 [ 300.146485][ T9872] overlayfs: failed lookup in lower (newroot/334, name='file1', err=-40): overlapping layers [ 300.603514][ T9877] openvswitch: netlink: Multiple metadata blocks provided [ 301.092632][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.162109][ T9891] bond0: (slave rose0): Enslaving as an active interface with an up link [ 301.329271][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 301.475381][ T9903] input: syz1 as /devices/virtual/input/input27 [ 301.499906][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.499942][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 301.499971][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.500001][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.500047][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.500070][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.540549][ T10] usb 3-1: config 0 descriptor?? [ 301.542613][ T9897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.998214][ T10] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 302.039409][ T10] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 302.155799][ T9916] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1608'. [ 302.295829][ T10] usb 3-1: USB disconnect, device number 16 [ 303.229134][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 303.403518][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.403553][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.403576][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.403620][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.403644][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.411769][ T10] usb 4-1: config 0 descriptor?? [ 303.881160][ T10] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 304.249645][ T5824] usb 4-1: USB disconnect, device number 21 [ 304.285792][ T5961] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 304.429003][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 304.431829][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 304.431864][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 304.431892][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 304.431916][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 304.431943][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 304.439410][ T5961] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 304.439440][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.439463][ T5961] usb 2-1: Product: syz [ 304.439478][ T5961] usb 2-1: Manufacturer: syz [ 304.439493][ T5961] usb 2-1: SerialNumber: syz [ 304.461231][ T5961] usb 2-1: config 0 descriptor?? [ 304.890053][ T5961] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 304.890128][ T5961] input input29: Device does not respond to id packet M [ 304.892818][ T5961] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 304.892872][ T5961] input input29: Device does not respond to id packet P [ 304.898067][ T5961] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 304.898129][ T5961] input input29: Device does not respond to id packet B [ 304.902786][ T5961] input input29: Device does not respond to id packet N [ 305.119003][ T5961] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 305.119581][ T5961] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 305.120082][ T5961] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 305.120583][ T5961] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 305.201496][ T5961] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 305.296983][ T5961] usb 2-1: USB disconnect, device number 19 [ 306.929760][ T5961] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 307.118053][ T5961] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 307.118086][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.118108][ T5961] usb 4-1: Product: syz [ 307.118123][ T5961] usb 4-1: Manufacturer: syz [ 307.118138][ T5961] usb 4-1: SerialNumber: syz [ 307.133677][ T5961] usb 4-1: config 0 descriptor?? [ 307.473195][T10026] Bluetooth: hci0: unsupported parameter 32780 [ 307.474493][T10026] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 307.720084][ T5961] usb 4-1: Firmware: major: 213, minor: 124, hardware type: UNKNOWN (48) [ 307.926440][ T5961] usb 4-1: Read permanent extended address 78:d9:cf:80:c4:56:f3:e4 from device [ 307.926468][ T5961] usb 4-1: atusb_probe: initialization failed, error = -524 [ 307.927331][ T5961] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 308.159726][ T5961] usb 4-1: USB disconnect, device number 22 [ 308.278973][ T5824] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 308.461923][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 308.465568][ T5824] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 308.465630][ T5824] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.465655][ T5824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.465681][ T5824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.465706][ T5824] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.465751][ T5824] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.465775][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.767497][ T5824] usb 1-1: usb_control_msg returned -32 [ 308.767549][ T5824] usbtmc 1-1:16.0: can't read capabilities [ 309.148998][ T5961] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 309.298873][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 309.301637][ T5961] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 309.301673][ T5961] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 309.301698][ T5961] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.301722][ T5961] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.301767][ T5961] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.301792][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.528960][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 309.540983][ T5961] usb 2-1: GET_CAPABILITIES returned 0 [ 309.541039][ T5961] usbtmc 2-1:16.0: can't read capabilities [ 309.681621][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.681656][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.681680][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.681725][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.681749][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.693883][ T44] usb 4-1: config 0 descriptor?? [ 309.756996][ T5961] usb 2-1: USB disconnect, device number 20 [ 310.141303][ T44] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 310.250436][T10074] ip6gretap0: entered promiscuous mode [ 310.250713][T10074] macsec1: entered allmulticast mode [ 310.250729][T10074] ip6gretap0: entered allmulticast mode [ 310.293072][T10074] ip6gretap0: left allmulticast mode [ 310.293151][T10074] ip6gretap0: left promiscuous mode [ 311.014998][ T5961] usb 1-1: USB disconnect, device number 12 [ 311.308240][T10095] netlink: 'syz.1.1670': attribute type 2 has an invalid length. [ 311.308264][T10095] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 311.308278][T10095] netlink: 'syz.1.1670': attribute type 8 has an invalid length. [ 311.308294][T10095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1670'. [ 311.499670][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 311.499984][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 312.364293][ T5824] usb 4-1: USB disconnect, device number 23 [ 312.938243][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 312.938267][ T38] audit: type=1326 audit(1756235318.020:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10126 comm="syz.0.1684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70cf1bebe9 code=0x0 [ 314.199270][T10147] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1692'. [ 314.276557][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 315.097738][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1700'. [ 315.098034][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1700'. [ 315.582234][T10179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.742005][T10183] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1707'. [ 315.828920][ T5824] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 315.998800][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 316.001511][ T5824] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 316.001542][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.045352][ T5824] usb 4-1: config 0 descriptor?? [ 316.250382][ T5824] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 316.269984][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 316.271048][ T5824] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 316.271113][ T5824] usb 4-1: media controller created [ 316.338929][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.464971][ T5824] az6027: usb out operation failed. (-71) [ 316.465426][ T5824] az6027: usb out operation failed. (-71) [ 316.465440][ T5824] stb0899_attach: Driver disabled by Kconfig [ 316.465451][ T5824] az6027: no front-end attached [ 316.465451][ T5824] [ 316.466419][ T5824] az6027: usb out operation failed. (-71) [ 316.466437][ T5824] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 316.507326][ T5824] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 316.521638][ T5824] dvb-usb: schedule remote query interval to 400 msecs. [ 316.521663][ T5824] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 316.525427][ T5824] usb 4-1: USB disconnect, device number 24 [ 316.844823][ T5824] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 317.163440][T10211] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 317.336978][T10211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.415647][T10213] bond4: (slave ip6gretap1): making interface the new active one [ 317.417845][T10213] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 318.386628][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 318.543535][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 318.543727][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 318.543776][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 318.543799][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.556964][ T10] usb 5-1: config 0 descriptor?? [ 318.558051][T10233] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 318.973035][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d16c400: rx timeout, send abort [ 319.126638][ T10] logitech 0003:046D:C298.0017: unknown main item tag 0x4 [ 319.126676][ T10] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 319.126704][ T10] logitech 0003:046D:C298.0017: unknown main item tag 0x0 [ 319.126731][ T10] logitech 0003:046D:C298.0017: unbalanced collection at end of report description [ 319.127605][ T10] logitech 0003:046D:C298.0017: parse failed [ 319.127724][ T10] logitech 0003:046D:C298.0017: probe with driver logitech failed with error -22 [ 319.382959][ T5824] usb 5-1: USB disconnect, device number 14 [ 319.473123][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d16c400: abort rx timeout. Force session deactivation [ 319.477061][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d16d000: rx timeout, send abort [ 319.650623][T10266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.977149][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d16d000: abort rx timeout. Force session deactivation [ 320.473735][T10277] vxcan1: entered allmulticast mode [ 322.079030][ T5824] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 322.137176][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 322.241471][ T5824] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 322.241503][ T5824] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 322.241527][ T5824] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.244769][ T5824] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 322.244802][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.244824][ T5824] usb 2-1: Product: syz [ 322.244839][ T5824] usb 2-1: Manufacturer: syz [ 322.244854][ T5824] usb 2-1: SerialNumber: syz [ 322.320718][ T5824] hub 2-1:1.0: bad descriptor, ignoring hub [ 322.320761][ T5824] hub 2-1:1.0: probe with driver hub failed with error -5 [ 322.470536][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.471797][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.556387][ T5824] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 322.859434][ T5961] usb 2-1: USB disconnect, device number 21 [ 322.875657][ T5961] usblp0: removed [ 322.908921][ T5909] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 323.106516][ T5909] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 323.106549][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.106570][ T5909] usb 5-1: Product: syz [ 323.106585][ T5909] usb 5-1: Manufacturer: syz [ 323.106601][ T5909] usb 5-1: SerialNumber: syz [ 323.138502][ T5909] usb 5-1: config 0 descriptor?? [ 323.156725][ T5909] rndis_host 5-1:0.0: More than one union descriptor, skipping ... [ 323.156758][ T5909] usb 5-1: bad CDC descriptors [ 323.164077][ T5909] cdc_acm 5-1:0.0: More than one union descriptor, skipping ... [ 323.239335][ T5961] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 323.382534][ T5909] usb 5-1: USB disconnect, device number 15 [ 323.394811][ T5961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.394847][ T5961] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 323.394876][ T5961] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.419389][ T5961] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 323.419426][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.419451][ T5961] usb 2-1: Product: syz [ 323.419468][ T5961] usb 2-1: Manufacturer: syz [ 323.419486][ T5961] usb 2-1: SerialNumber: syz [ 323.484892][ T5961] hub 2-1:1.0: bad descriptor, ignoring hub [ 323.484935][ T5961] hub 2-1:1.0: probe with driver hub failed with error -5 [ 323.705166][ T5961] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 323.744808][ T5961] usb 2-1: USB disconnect, device number 22 [ 323.767152][ T5961] usblp0: removed [ 324.255770][T10363] dummy0: entered promiscuous mode [ 324.255903][T10363] macsec0: entered promiscuous mode [ 324.256107][T10363] macsec0: entered allmulticast mode [ 324.256120][T10363] dummy0: entered allmulticast mode [ 324.287499][T10365] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 324.312042][T10363] dummy0: left allmulticast mode [ 324.323819][T10363] dummy0: left promiscuous mode [ 324.605983][T10365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.724132][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1784'. [ 324.768274][T10369] bond1: (slave gretap0): making interface the new active one [ 324.786143][T10369] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 324.823623][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 325.367541][T10400] overlayfs: failed to verify upper (363/file1, ino=1887, err=-116) [ 325.367586][T10400] overlayfs: failed to verify index dir 'upper' xattr [ 325.367595][T10400] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 326.627553][T10403] syz.2.1790 (10403): drop_caches: 2 [ 327.013964][ T5824] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 327.169157][ T5925] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 327.203963][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 327.206749][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.206783][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.206828][ T5824] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 327.206852][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.266205][ T5824] usb 1-1: config 0 descriptor?? [ 327.349037][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 327.355849][ T5925] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.355885][ T5925] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.355969][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.356006][ T5925] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 327.356032][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.451843][ T5925] usb 5-1: config 0 descriptor?? [ 327.747155][ T5824] ft260 0003:0403:6030.0018: unknown main item tag 0x7 [ 327.913164][ T5824] ft260 0003:0403:6030.0018: chip code: 6424 8183 [ 327.941797][ T5925] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 327.942069][ T5925] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 327.942099][ T5925] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 327.942124][ T5925] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 327.942151][ T5925] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 328.004657][ T5925] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 328.114399][ T5824] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 328.155056][ T5961] usb 5-1: USB disconnect, device number 16 [ 328.523441][ T5824] ft260 0003:0403:6030.0018: failed to retrieve status: -71 [ 328.523990][ T5824] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71 [ 328.669227][ T5824] usb 1-1: USB disconnect, device number 13 [ 330.308091][T10493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.439196][ T5824] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 330.609112][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 330.612072][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.612106][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.612129][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 330.612174][ T5824] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 330.612198][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.684191][ T5824] usb 3-1: config 0 descriptor?? [ 331.154598][ T5824] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 331.213437][ T5824] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 331.213826][ T5824] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 331.373336][ T6052] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 331.374857][ T6052] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 331.375901][ T6052] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 331.376336][ T6052] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 331.376647][ T5925] usb 3-1: USB disconnect, device number 17 [ 331.609216][T10522] mac80211_hwsim hwsim6 `: renamed from wlan1 (while UP) [ 331.755492][T10526] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1843'. [ 333.191466][T10558] netlink: 'syz.4.1855': attribute type 1 has an invalid length. [ 333.528665][T10561] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 333.528692][T10561] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 333.599025][ T5909] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 333.722442][T10561] bond2: (slave wireguard0): making interface the new active one [ 333.749043][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 333.757871][T10561] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 333.776745][ T5909] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 333.776778][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.776800][ T5909] usb 4-1: Product: syz [ 333.776815][ T5909] usb 4-1: Manufacturer: syz [ 333.776831][ T5909] usb 4-1: SerialNumber: syz [ 333.837593][ T5909] usb 4-1: config 0 descriptor?? [ 334.138905][ T5961] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 334.288976][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 334.294885][ T5961] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 334.294913][ T5961] usb 3-1: config 0 has no interface number 0 [ 334.321049][ T5961] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 334.321140][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.321163][ T5961] usb 3-1: Product: syz [ 334.321178][ T5961] usb 3-1: Manufacturer: syz [ 334.321193][ T5961] usb 3-1: SerialNumber: syz [ 334.376798][ T5961] usb 3-1: config 0 descriptor?? [ 334.399897][ T5961] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 334.564539][ T5909] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 334.659159][ T5961] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 334.750302][ T5961] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 334.844137][ T5909] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 334.870691][ T5909] usb 4-1: USB disconnect, device number 25 [ 335.050734][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 335.053402][ T5824] usb 3-1: USB disconnect, device number 18 [ 335.083245][ T5824] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 335.126332][ T5824] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 335.129374][ T5824] quatech2 3-1:0.51: device disconnected [ 335.799400][ T5824] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 335.805389][T10595] netlink: 'syz.2.1869': attribute type 4 has an invalid length. [ 335.805423][T10595] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1869'. [ 335.971984][ T5824] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 335.972022][ T5824] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.972050][ T5824] usb 4-1: config 0 interface 0 has no altsetting 0 [ 335.972086][ T5824] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 335.972112][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.014899][ T5824] usb 4-1: config 0 descriptor?? [ 336.016370][T10591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 336.589169][ T5824] kye 0003:0458:5015.001B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 336.659639][ T5824] kye 0003:0458:5015.001B: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 336.659677][ T5824] kye 0003:0458:5015.001B: tablet-enabling feature report not found [ 336.659693][ T5824] kye 0003:0458:5015.001B: tablet enabling failed [ 336.750021][ T5909] usb 4-1: USB disconnect, device number 26 [ 337.079159][ T5961] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 337.235165][ T5961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.235199][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.235219][ T5961] usb 3-1: Product: syz [ 337.235234][ T5961] usb 3-1: Manufacturer: syz [ 337.235257][ T5961] usb 3-1: SerialNumber: syz [ 337.704466][T10622] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 338.270724][ T5961] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 338.270751][ T5961] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 338.472479][ T5961] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 338.523424][ T5961] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 338.555797][ T5961] usb 3-1: USB disconnect, device number 19 [ 338.558300][ T5961] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 339.540883][T10648] ipvlan2: entered promiscuous mode [ 339.889727][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 340.750340][T10671] syz.3.1900 (10671) used greatest stack depth: 16696 bytes left [ 341.418037][T10692] loop6: detected capacity change from 0 to 7 [ 341.496153][T10692] Dev loop6: unable to read RDB block 7 [ 341.496203][T10692] loop6: AHDI p3 p4 [ 341.496235][T10692] loop6: partition table partially beyond EOD, truncated [ 341.496348][T10692] loop6: p3 start 1886353253 is beyond EOD, truncated [ 342.159920][T10710] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 342.518934][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 342.619562][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 342.708937][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 342.774469][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 342.774506][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 342.774533][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.774558][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.774604][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.774629][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.105335][ T31] usb 4-1: GET_CAPABILITIES returned 0 [ 343.105384][ T31] usbtmc 4-1:16.0: can't read capabilities [ 343.348707][ T31] usb 4-1: USB disconnect, device number 27 [ 343.779495][T10732] syzkaller1: entered promiscuous mode [ 343.779528][T10732] syzkaller1: entered allmulticast mode [ 344.999145][ T6052] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 345.175283][T10770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.198987][ T6052] usb 2-1: Using ep0 maxpacket: 32 [ 345.201625][ T6052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.201659][ T6052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.201699][ T6052] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 345.201723][ T6052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.264169][ T6052] usb 2-1: config 0 descriptor?? [ 345.438904][ T5961] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 345.589230][ T5961] usb 1-1: Using ep0 maxpacket: 32 [ 345.592418][ T5961] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 345.592447][ T5961] usb 1-1: config 0 has no interface number 0 [ 345.592499][ T5961] usb 1-1: config 0 interface 184 has no altsetting 0 [ 345.596699][ T5961] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 345.596729][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.596752][ T5961] usb 1-1: Product: syz [ 345.596767][ T5961] usb 1-1: Manufacturer: syz [ 345.596782][ T5961] usb 1-1: SerialNumber: syz [ 345.623980][ T5961] usb 1-1: config 0 descriptor?? [ 345.655419][ T5961] smsc75xx v1.0.0 [ 345.718713][ T6052] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 345.939099][ T5925] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 345.998658][ T5824] usb 2-1: USB disconnect, device number 23 [ 346.118886][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 346.121595][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.121631][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.121675][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 346.121701][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.177844][ T5925] usb 5-1: config 0 descriptor?? [ 346.187700][ T5925] hub 5-1:0.0: USB hub found [ 346.273667][ T5961] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 346.273702][ T5961] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 346.403721][ T5925] hub 5-1:0.0: 1 port detected [ 346.476834][ T5961] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 346.476878][ T5961] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 346.476900][ T5961] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 346.477222][ T5961] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 346.496510][ T5961] usb 1-1: USB disconnect, device number 14 [ 347.024359][ T5925] hub 5-1:0.0: activate --> -90 [ 347.225814][ T5925] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 347.249804][ T5909] usb 5-1: USB disconnect, device number 17 [ 347.251316][ T5925] usb 5-1: Failed to suspend device, error -71 [ 347.413928][T10812] netlink: 'syz.2.1959': attribute type 1 has an invalid length. [ 347.903697][T10830] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 348.289997][T10830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.434092][T10845] netlink: 'syz.2.1973': attribute type 3 has an invalid length. [ 348.529469][T10834] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 348.576200][T10834] bond1: (slave batadv1): making interface the new active one [ 348.601251][T10834] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 348.695948][T10851] loop2: detected capacity change from 0 to 7 [ 348.728703][T10851] Dev loop2: unable to read RDB block 7 [ 348.732255][T10851] loop2: unable to read partition table [ 348.732536][T10851] loop2: partition table beyond EOD, truncated [ 348.732560][T10851] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 349.277088][T10862] syzkaller1: entered promiscuous mode [ 349.277128][T10862] syzkaller1: entered allmulticast mode [ 350.092006][ T5925] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 350.249742][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 350.255818][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.255878][ T5925] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 350.255903][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.300264][ T5925] usb 4-1: config 0 descriptor?? [ 350.319343][ T5824] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 350.331494][ T5925] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 350.469145][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 350.473867][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.473896][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.479203][ T5824] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.479301][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.479327][ T5824] usb 3-1: Product: syz [ 350.479344][ T5824] usb 3-1: Manufacturer: syz [ 350.479362][ T5824] usb 3-1: SerialNumber: syz [ 350.790648][ T5824] usb 3-1: 0:2 : does not exist [ 350.808228][ T5824] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 351.020195][ T5191] bcm5974 4-1:0.0: could not read from device [ 351.059617][ T5824] usb 3-1: USB disconnect, device number 20 [ 351.199486][ T5925] usb 4-1: USB disconnect, device number 28 [ 352.102964][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 352.252062][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.252091][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.257216][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.257249][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.257270][ T10] usb 5-1: SerialNumber: syz [ 352.511608][ T10] usb 5-1: 0:2 : does not exist [ 352.609835][ T10] usb 5-1: USB disconnect, device number 18 [ 353.317887][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.078866][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 354.229032][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 354.236122][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.236151][ T10] usb 4-1: config 0 has no interface number 0 [ 354.242814][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 354.242851][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.242875][ T10] usb 4-1: Product: syz [ 354.242890][ T10] usb 4-1: Manufacturer: syz [ 354.242907][ T10] usb 4-1: SerialNumber: syz [ 354.257388][ T10] usb 4-1: config 0 descriptor?? [ 354.311847][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.341816][T10949] block nbd4: shutting down sockets [ 354.388101][ T10] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 354.513807][ T10] usb 4-1: USB disconnect, device number 29 [ 355.254560][T10971] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 355.395945][T10979] netlink: 'syz.2.2029': attribute type 4 has an invalid length. [ 355.440953][T10979] netlink: 'syz.2.2029': attribute type 4 has an invalid length. [ 356.129720][T10991] loop7: detected capacity change from 0 to 7 [ 356.132581][ C0] blk_print_req_error: 2 callbacks suppressed [ 356.132600][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.132631][ C0] buffer_io_error: 30 callbacks suppressed [ 356.132644][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.132919][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.132947][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.133297][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.133328][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.137238][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.137275][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.143392][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.143431][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.143821][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.143851][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.146364][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.146396][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.146500][T10991] ldm_validate_partition_table(): Disk read failed. [ 356.146678][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.146707][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.146953][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.146981][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.147214][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.147243][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.152598][T10991] Dev loop7: unable to read RDB block 0 [ 356.153666][T10991] loop7: unable to read partition table [ 356.153927][T10991] loop7: partition table beyond EOD, truncated [ 356.153946][T10991] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 356.935349][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.242957][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 357.419296][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 357.432294][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 357.432331][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.438309][ T10] usb 5-1: config 0 descriptor?? [ 357.692946][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 358.232640][T11017] netlink: 'syz.3.2046': attribute type 2 has an invalid length. [ 358.232665][T11017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2046'. [ 358.359062][T10966] syz.1.2024 (10966): drop_caches: 2 [ 358.703241][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 358.703339][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 358.703628][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 358.725320][ T10] usb 5-1: USB disconnect, device number 19 [ 360.768806][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 361.408491][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 362.166772][ T31] kernel write not supported for file [eventfd] (pid: 31 comm: kworker/1:0) [ 362.769131][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 362.918909][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 362.921718][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.921777][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.921808][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 362.921834][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.921858][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.923133][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 362.923163][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 362.923186][ T31] usb 4-1: Manufacturer: syz [ 363.012213][ T31] usb 4-1: config 0 descriptor?? [ 363.368886][ T31] rc_core: IR keymap rc-hauppauge not found [ 363.368910][ T31] Registered IR keymap rc-empty [ 363.369078][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.389001][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.463232][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 363.466592][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 363.502988][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.520380][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.539204][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.561990][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.578997][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.599081][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.625383][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.639127][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.659026][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.679003][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 363.709273][ T31] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 363.709299][ T31] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 363.816808][ T5925] usb 4-1: USB disconnect, device number 30 [ 364.820776][T11154] netlink: 'syz.3.2104': attribute type 2 has an invalid length. [ 364.820802][T11154] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 364.820818][T11154] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2104'. [ 366.554613][ T38] audit: type=1326 audit(1756235371.640:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cf1bebe9 code=0x7fc00000 [ 366.929108][ T5925] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 367.091619][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 367.091657][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.091686][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 367.091709][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.091768][ T5925] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.091793][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.102712][ T5925] usb 4-1: config 0 descriptor?? [ 367.149877][ T38] audit: type=1326 audit(1756235372.240:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70cf1bebe9 code=0x7fc00000 [ 367.166472][ T38] audit: type=1326 audit(1756235372.240:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.0.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cf1bebe9 code=0x7fc00000 [ 367.551725][ T5925] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 367.631629][ T5925] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 367.745257][T11223] netlink: 'syz.4.2132': attribute type 12 has an invalid length. [ 367.745282][T11223] netlink: 'syz.4.2132': attribute type 29 has an invalid length. [ 367.745297][T11223] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2132'. [ 367.745328][T11223] netlink: 'syz.4.2132': attribute type 3 has an invalid length. [ 367.745342][T11223] netlink: 'syz.4.2132': attribute type 2 has an invalid length. [ 367.745356][T11223] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2132'. [ 368.332629][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 368.437484][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 368.437598][ T3025] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.438342][ T3025] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.438390][ T3025] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.438431][ T3025] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.926684][T11246] rtc_cmos 00:00: Alarms can be up to one day in the future [ 369.549989][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 369.550380][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 369.550770][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 369.551328][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 369.551349][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 369.613563][T11257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.884582][T11266] tipc: Enabled bearer , priority 10 [ 369.992108][ T6052] usb 4-1: reset high-speed USB device number 31 using dummy_hcd [ 370.006036][ T6052] usb 4-1: device reset changed ep0 maxpacket size! [ 370.083828][ T5925] usb 4-1: USB disconnect, device number 31 [ 370.279504][ T5925] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 370.444532][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 370.450713][ T5925] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 370.450745][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.450768][ T5925] usb 4-1: Product: syz [ 370.450783][ T5925] usb 4-1: Manufacturer: syz [ 370.450798][ T5925] usb 4-1: SerialNumber: syz [ 370.508511][ T5925] usb 4-1: config 0 descriptor?? [ 370.526188][ T5925] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 370.584972][T11286] loop2: detected capacity change from 0 to 7 [ 370.588528][T11286] Dev loop2: unable to read RDB block 7 [ 370.588562][T11286] loop2: AHDI p1 p2 p3 [ 370.588593][T11286] loop2: partition table partially beyond EOD, truncated [ 370.611191][T11286] loop2: p3 start 335544320 is beyond EOD, truncated [ 371.826224][ T5925] gspca_sonixj: reg_w1 err -71 [ 371.919252][ T5925] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 371.929811][ T5925] usb 4-1: USB disconnect, device number 32 [ 372.150962][ T8952] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 372.339070][ T8952] usb 1-1: Using ep0 maxpacket: 8 [ 372.340795][ T8952] usb 1-1: too many configurations: 120, using maximum allowed: 8 [ 372.392671][ T8952] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 372.392702][ T8952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 372.392724][ T8952] usb 1-1: Product: syz [ 372.392739][ T8952] usb 1-1: Manufacturer: syz [ 372.392761][ T8952] usb 1-1: SerialNumber: syz [ 372.433607][ T8952] usb 1-1: config 0 descriptor?? [ 372.470140][ T8952] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 372.470324][ T8952] usb 1-1: setting power ON [ 372.471030][ T8952] dvb-usb: bulk message failed: -22 (2/0) [ 372.508522][ T8952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.517210][ T8952] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 372.517285][ T8952] usb 1-1: media controller created [ 372.647341][ T8952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.650582][T11310] dvb-usb: bulk message failed: -22 (3/0) [ 372.650612][T11310] dvb-usb: bulk message failed: -22 (3/0) [ 372.651088][T11310] dvb-usb: bulk message failed: -22 (4/0) [ 372.794970][ T8952] usb 1-1: selecting invalid altsetting 6 [ 372.794995][ T8952] usb 1-1: digital interface selection failed (-22) [ 372.795012][ T8952] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 372.800085][ T8952] usb 1-1: setting power OFF [ 372.800423][ T8952] dvb-usb: bulk message failed: -22 (2/0) [ 372.800444][ T8952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 372.800459][ T8952] (NULL device *): no alternate interface [ 372.900644][T11318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.044489][ T8952] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 373.089214][ T8952] usb 1-1: USB disconnect, device number 15 [ 374.330278][T11348] syzkaller1: entered promiscuous mode [ 374.330309][T11348] syzkaller1: entered allmulticast mode [ 374.405291][T11351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.765757][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'. [ 374.765788][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'. [ 376.010280][T11393] block device autoloading is deprecated and will be removed. [ 376.333044][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 377.241871][T11428] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 377.856628][T11442] netlink: 'syz.1.2225': attribute type 29 has an invalid length. [ 377.883186][T11442] netlink: 'syz.1.2225': attribute type 29 has an invalid length. [ 377.895987][T11442] netlink: 'syz.1.2225': attribute type 27 has an invalid length. [ 377.912429][ T6052] kernel write not supported for file bpf-prog (pid: 6052 comm: kworker/0:6) [ 378.174897][T11451] netlink: 'syz.0.2229': attribute type 39 has an invalid length. [ 378.333442][T11457] netlink: 'syz.2.2231': attribute type 10 has an invalid length. [ 378.389317][T11459] cgroup: fork rejected by pids controller in /syz1 [ 378.774219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.958037][T11457] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 378.973043][ T5909] IPVS: starting estimator thread 0... [ 379.090017][T11476] IPVS: using max 7 ests per chain, 16800 per kthread [ 379.114107][T11460] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.155650][T11474] tipc: Started in network mode [ 379.155694][T11474] tipc: Node identity ac1414aa, cluster identity 4711 [ 379.156762][T11474] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.156798][T11474] tipc: Enabled bearer , priority 10 [ 379.290389][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.429023][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.568896][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.708908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.848900][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.988886][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 380.129057][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 380.269042][ T31] tipc: Node number set to 2886997162 [ 380.725549][ T1005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.908883][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 381.059464][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 381.065337][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.065371][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.065416][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.065441][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.085439][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.119375][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.128355][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.132218][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.133228][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.138623][ T31] usb 4-1: config 0 descriptor?? [ 381.345922][ T1005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.549019][ T5909] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 381.601281][ T31] HID 045e:07da: Invalid code 65791 type 1 [ 381.608122][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input35 [ 381.648442][ T31] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 381.699101][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 381.702431][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 381.707870][ T5909] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.707898][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.707916][ T5909] usb 1-1: Product: syz [ 381.707929][ T5909] usb 1-1: Manufacturer: syz [ 381.707943][ T5909] usb 1-1: SerialNumber: syz [ 381.771237][ T5909] usb 1-1: config 0 descriptor?? [ 381.792377][ T5909] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.792415][ T5909] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 382.068175][ T1005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.436441][ T6052] usb 4-1: USB disconnect, device number 33 [ 382.453237][ T5909] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 382.511504][T11528] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2259'. [ 382.563829][ T1005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.882365][ T5909] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 382.882398][ T5909] em28xx 1-1:0.0: board has no eeprom [ 382.941338][ T8952] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 382.988999][ T5909] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 382.989027][ T5909] em28xx 1-1:0.0: dvb set to bulk mode. [ 382.991805][ T5961] em28xx 1-1:0.0: Binding DVB extension [ 383.058029][ T5909] usb 1-1: USB disconnect, device number 16 [ 383.061275][ T5909] em28xx 1-1:0.0: Disconnecting em28xx [ 383.099165][ T8952] usb 3-1: Using ep0 maxpacket: 8 [ 383.101572][ T8952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.101598][ T8952] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 383.106342][ T8952] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 383.106373][ T8952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.106405][ T8952] usb 3-1: Product: syz [ 383.106421][ T8952] usb 3-1: Manufacturer: syz [ 383.106435][ T8952] usb 3-1: SerialNumber: syz [ 383.183543][ T5837] Bluetooth: hci0: command tx timeout [ 383.186226][ T8952] usb 3-1: config 0 descriptor?? [ 383.356692][ T5961] em28xx 1-1:0.0: Registering input extension [ 383.371091][ T5909] em28xx 1-1:0.0: Closing input extension [ 383.651554][ T5909] em28xx 1-1:0.0: Freeing device [ 383.685204][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 383.846299][ T5961] usb 3-1: USB disconnect, device number 21 [ 383.918444][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.918526][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.041871][ T1005] bridge_slave_1: left allmulticast mode [ 384.042074][ T1005] bridge_slave_1: left promiscuous mode [ 384.047691][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.143342][ T1005] bridge_slave_0: left allmulticast mode [ 384.143463][ T1005] bridge_slave_0: left promiscuous mode [ 384.149292][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.243371][ T1005] tipc: Resetting bearer [ 384.368877][ C1] net_ratelimit: 5 callbacks suppressed [ 384.368899][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 384.394783][T11561] kvm: kvm [11558]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x40000006) = 0x0 [ 384.589110][ T6052] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 384.758801][ T6052] usb 5-1: Using ep0 maxpacket: 16 [ 384.762764][ T6052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.762799][ T6052] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.762822][ T6052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 384.762858][ T6052] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 384.762881][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.765476][T11571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.801503][ T6052] usb 5-1: config 0 descriptor?? [ 385.221254][ T6052] hid (null): report_id 0 is invalid [ 385.221431][ T6052] hid (null): unknown global tag 0xd [ 385.221457][ T6052] hid (null): invalid report_size 10717 [ 385.221514][ T6052] hid (null): invalid report_count 64132 [ 385.259078][ T5837] Bluetooth: hci0: command tx timeout [ 385.408867][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 385.427533][ T5961] usb 5-1: USB disconnect, device number 20 [ 385.836330][ T1005] tipc: Disabling bearer [ 386.449012][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 387.339583][ T5837] Bluetooth: hci0: command tx timeout [ 387.488847][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 387.568678][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.702426][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.730096][ T1005] bond0 (unregistering): Released all slaves [ 388.289008][ T5961] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 388.449784][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 388.453654][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.453687][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.453727][ T5961] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 388.453750][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.504961][ T5961] usb 5-1: config 0 descriptor?? [ 388.541381][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 388.777721][ T1005] bond1 (unregistering): (slave batadv1): Releasing active interface [ 388.814557][ T1005] bond1 (unregistering): Released all slaves [ 388.946204][ T5961] savu 0003:1E7D:2D5A.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 389.196988][ T1005] tipc: Disabling bearer [ 389.197302][ T1005] tipc: Left network mode [ 389.221683][ T31] usb 5-1: USB disconnect, device number 21 [ 389.409034][ T5837] Bluetooth: hci0: command tx timeout [ 389.509497][T11509] chnl_net:caif_netlink_parms(): no params data found [ 389.568931][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 390.241275][T11644] batadv_slave_1: entered promiscuous mode [ 390.349096][T11642] batadv_slave_1: left promiscuous mode [ 390.619223][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 390.681025][ T5909] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 390.828854][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 390.831468][ T5909] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 390.831497][ T5909] usb 1-1: config 0 has no interface number 0 [ 390.831548][ T5909] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.835760][ T5909] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 390.835791][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.835812][ T5909] usb 1-1: Product: syz [ 390.835827][ T5909] usb 1-1: Manufacturer: syz [ 390.835841][ T5909] usb 1-1: SerialNumber: syz [ 390.904802][ T5909] usb 1-1: config 0 descriptor?? [ 390.929879][ T5909] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 390.929913][ T5909] em28xx 1-1:0.132: Video interface 132 found: [ 391.344551][ T5909] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 391.399178][ T1005] hsr_slave_0: left promiscuous mode [ 391.460514][ T1005] hsr_slave_1: left promiscuous mode [ 391.461979][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.462096][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.511689][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.511724][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.648937][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 391.874469][ T1005] veth1_macvtap: left promiscuous mode [ 391.874783][ T1005] veth0_macvtap: left promiscuous mode [ 392.450074][ T5909] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 392.450135][ T5909] em28xx 1-1:0.132: board has no eeprom [ 392.508871][ T5909] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 392.508901][ T5909] em28xx 1-1:0.132: analog set to bulk mode. [ 392.509266][ T31] em28xx 1-1:0.132: Registering V4L2 extension [ 392.549041][ T5909] usb 1-1: USB disconnect, device number 17 [ 392.551527][ T5909] em28xx 1-1:0.132: Disconnecting em28xx [ 392.689127][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 392.763980][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.892384][ T38] audit: type=1326 audit(1756235653.975:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11696 comm="syz.2.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530341ebe9 code=0x7fc00000 [ 393.082718][ T31] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 393.082745][ T31] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 393.082760][ T31] em28xx 1-1:0.132: No AC97 audio processor [ 393.147281][ T31] usb 1-1: Decoder not found [ 393.147304][ T31] em28xx 1-1:0.132: failed to create media graph [ 393.181371][ T31] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 393.182695][T11717] netlink: 'syz.2.2330': attribute type 1 has an invalid length. [ 393.182716][T11717] netlink: 'syz.2.2330': attribute type 10 has an invalid length. [ 393.182732][T11717] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2330'. [ 393.186049][ T31] em28xx 1-1:0.132: Remote control support is not available for this card. [ 393.186111][ T5909] em28xx 1-1:0.132: Closing input extension [ 393.246904][ T5909] em28xx 1-1:0.132: Freeing device [ 393.495449][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.582390][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.728938][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 394.097408][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 394.252139][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.665320][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.733415][T11731] overlayfs: statfs failed on './file0' [ 394.778960][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 394.882124][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.130921][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.680542][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 395.818950][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 395.954914][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 396.452084][T11747] Bluetooth: MGMT ver 1.23 [ 396.452122][T11747] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 396.596988][T11751] input: syz0 as /devices/virtual/input/input37 [ 396.858960][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 397.888946][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 398.928971][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 399.628580][ T38] audit: type=1326 audit(1756235660.705:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11757 comm="syz.0.2345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70cf1bebe9 code=0x0 [ 399.658247][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.658407][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.658606][T11509] bridge_slave_0: entered allmulticast mode [ 399.686629][T11509] bridge_slave_0: entered promiscuous mode [ 399.880228][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.880450][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.880722][T11509] bridge_slave_1: entered allmulticast mode [ 399.910039][T11509] bridge_slave_1: entered promiscuous mode [ 399.969057][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 400.156636][T11509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.177504][T11509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.316632][T11773] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2349'. [ 400.420219][T11775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.630605][T11782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.633127][T11509] team0: Port device team_slave_0 added [ 400.637353][T11509] team0: Port device team_slave_1 added [ 400.805275][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.811714][ T44] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 400.969030][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 400.971855][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.971888][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.971932][ T44] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.971964][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.977853][ T44] usb 5-1: config 0 descriptor?? [ 401.009092][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 401.318564][T11787] netlink: 'syz.0.2359': attribute type 12 has an invalid length. [ 401.318588][T11787] netlink: 'syz.0.2359': attribute type 29 has an invalid length. [ 401.318604][T11787] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2359'. [ 401.318636][T11787] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2359'. [ 401.355227][T11509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.355246][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.355277][T11509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.357881][T11509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.357897][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.357926][T11509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.487643][ T44] HID 045e:07da: Invalid code 65791 type 1 [ 401.562968][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0021/input/input38 [ 401.604407][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.638299][ T44] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 402.058971][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 402.206694][T11509] hsr_slave_0: entered promiscuous mode [ 402.215894][T11509] hsr_slave_1: entered promiscuous mode [ 402.216942][T11509] debugfs: 'hsr0' already exists in 'hsr' [ 402.216969][T11509] Cannot create hsr debugfs directory [ 402.296495][ T44] usb 5-1: USB disconnect, device number 22 [ 402.668909][ T5961] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 402.826227][ T5961] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 402.826256][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.826276][ T5961] usb 4-1: config 0 has no interface number 0 [ 402.826305][ T5961] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 402.826343][ T5961] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 402.831865][ T5961] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 402.831901][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.831924][ T5961] usb 4-1: Product: syz [ 402.831942][ T5961] usb 4-1: Manufacturer: syz [ 402.831959][ T5961] usb 4-1: SerialNumber: syz [ 402.860067][ T5961] usb 4-1: config 0 descriptor?? [ 402.899341][ T5961] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 403.089068][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 403.098369][ T5961] usb 4-1: USB disconnect, device number 34 [ 403.358986][ T44] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 403.514253][ T44] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 403.514283][ T44] usb 3-1: config 0 has no interface number 0 [ 403.514317][ T44] usb 3-1: config 0 interface 255 has no altsetting 0 [ 403.514353][ T44] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 403.514378][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.609487][ T44] usb 3-1: config 0 descriptor?? [ 403.621649][ T44] cp210x 3-1:0.255: cp210x converter detected [ 404.034618][ T44] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 404.128970][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 404.238100][ T44] cp210x 3-1:0.255: GPIO initialisation failed: -19 [ 404.272911][ T44] usb 3-1: cp210x converter now attached to ttyUSB0 [ 404.457252][ T6052] usb 3-1: USB disconnect, device number 22 [ 404.484236][ T6052] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.484756][ T6052] cp210x 3-1:0.255: device disconnected [ 404.669052][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.706506][T11847] netlink: 'syz.4.2385': attribute type 22 has an invalid length. [ 404.706531][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'. [ 404.706819][T11847] netlink: 'syz.4.2385': attribute type 22 has an invalid length. [ 404.706834][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'. [ 405.027754][T11853] netlink: 'syz.4.2387': attribute type 4 has an invalid length. [ 405.088441][T11509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.099876][T11858] netlink: 'syz.4.2387': attribute type 4 has an invalid length. [ 405.170938][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 405.191670][T11509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.236828][T11509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.331107][T11509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.728779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 405.729667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 405.730804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 405.731945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 405.732866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 405.819029][ T44] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 405.896376][T11509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.104752][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 406.114681][ T44] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 406.114715][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.140464][ T44] usb 5-1: config 0 descriptor?? [ 406.198215][T11509] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.211807][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 406.237442][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.237733][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.311882][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.312041][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.344469][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 406.365837][T11880] input: syz0 as /devices/virtual/input/input39 [ 406.393188][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.409652][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 406.409716][ T44] usb 5-1: media controller created [ 406.464597][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.828986][ T44] az6027: usb out operation failed. (-71) [ 406.834172][ T44] az6027: usb out operation failed. (-71) [ 406.834193][ T44] stb0899_attach: Driver disabled by Kconfig [ 406.834203][ T44] az6027: no front-end attached [ 406.834203][ T44] [ 406.838978][ T44] az6027: usb out operation failed. (-71) [ 406.838998][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 406.842073][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 407.029070][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 407.029088][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 407.033341][ T44] usb 5-1: USB disconnect, device number 23 [ 407.248941][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 407.647007][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 407.757055][T11878] kexec: Could not allocate control_code_buffer [ 407.770846][T11891] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2398'. [ 408.288945][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 409.348921][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 409.658642][T11509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.781228][T11936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.944929][T11509] veth0_vlan: entered promiscuous mode [ 410.005566][T11509] veth1_vlan: entered promiscuous mode [ 410.050097][ T31] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 410.050124][ T31] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 410.053593][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 410.265416][T11509] veth0_macvtap: entered promiscuous mode [ 410.287075][T11509] veth1_macvtap: entered promiscuous mode [ 410.368953][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 410.813714][T11509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.872909][T11509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.935815][ T1005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.937603][ T1005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.937650][ T1005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.937772][ T1005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.416858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 412.288865][ T31] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 412.288892][ T31] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 412.288964][ C0] ------------[ cut here ]------------ [ 412.288973][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 412.289072][ C0] WARNING: CPU: 0 PID: 16 at kernel/workqueue.c:2256 __queue_work+0x2e5/0x1010 [ 412.289108][ C0] Modules linked in: [ 412.289131][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.289152][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.289170][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 412.289195][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a1 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 60 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 0d 6a 34 00 eb 2e e8 06 6a 34 00 e9 [ 412.289211][ C0] RSP: 0018:ffffc90000157828 EFLAGS: 00010046 [ 412.289226][ C0] RAX: a8c3c3a90594b600 RBX: 0000000000000000 RCX: ffff88801ae8d940 [ 412.289239][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 412.289250][ C0] RBP: ffff888026400998 R08: 0000000000000000 R09: 0000000000000100 [ 412.289262][ C0] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 412.289276][ C0] R13: dffffc0000000000 R14: ffff8880279cb168 R15: ffff88801ae8e44c [ 412.289290][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 412.289306][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.289318][ C0] CR2: 00007f6a0d48aa10 CR3: 000000005052a000 CR4: 00000000003526f0 [ 412.289335][ C0] Call Trace: [ 412.289341][ C0] [ 412.289364][ C0] call_timer_fn+0x17b/0x5f0 [ 412.289390][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 412.289416][ C0] ? call_timer_fn+0xbe/0x5f0 [ 412.289440][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 412.289478][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 412.289502][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 412.289532][ C0] __run_timer_base+0x709/0x970 [ 412.289572][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 412.289616][ C0] run_timer_softirq+0xb7/0x180 [ 412.289646][ C0] handle_softirqs+0x22c/0x710 [ 412.289687][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 412.289730][ C0] run_ktimerd+0xcf/0x190 [ 412.289755][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 412.289778][ C0] ? schedule+0x91/0x360 [ 412.289806][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.289827][ C0] smpboot_thread_fn+0x542/0xa60 [ 412.289851][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.289881][ C0] kthread+0x711/0x8a0 [ 412.289911][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 412.289933][ C0] ? __pfx_kthread+0x10/0x10 [ 412.289964][ C0] ? __pfx_kthread+0x10/0x10 [ 412.289991][ C0] ret_from_fork+0x3fc/0x770 [ 412.290017][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.290046][ C0] ? __switch_to_asm+0x39/0x70 [ 412.290062][ C0] ? __switch_to_asm+0x33/0x70 [ 412.290077][ C0] ? __pfx_kthread+0x10/0x10 [ 412.290104][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.290137][ C0] [ 412.290146][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 412.290160][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.290180][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.290190][ C0] Call Trace: [ 412.290197][ C0] [ 412.290204][ C0] dump_stack_lvl+0x99/0x250 [ 412.290230][ C0] ? __asan_memcpy+0x40/0x70 [ 412.290250][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.290276][ C0] ? __pfx__printk+0x10/0x10 [ 412.290308][ C0] vpanic+0x281/0x750 [ 412.290335][ C0] ? __pfx__printk+0x10/0x10 [ 412.290353][ C0] ? __pfx_vpanic+0x10/0x10 [ 412.290378][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 412.290413][ C0] panic+0xb9/0xc0 [ 412.290438][ C0] ? __pfx_panic+0x10/0x10 [ 412.290481][ C0] __warn+0x31b/0x4b0 [ 412.290505][ C0] ? __queue_work+0x2e5/0x1010 [ 412.290531][ C0] ? __queue_work+0x2e5/0x1010 [ 412.290554][ C0] report_bug+0x2be/0x4f0 [ 412.290575][ C0] ? __queue_work+0x2e5/0x1010 [ 412.290599][ C0] ? __queue_work+0x2e5/0x1010 [ 412.290621][ C0] ? __queue_work+0x2e7/0x1010 [ 412.290644][ C0] handle_bug+0x84/0x160 [ 412.290672][ C0] exc_invalid_op+0x1a/0x50 [ 412.290698][ C0] asm_exc_invalid_op+0x1a/0x20 [ 412.290724][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 412.290748][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a1 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 60 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 0d 6a 34 00 eb 2e e8 06 6a 34 00 e9 [ 412.290765][ C0] RSP: 0018:ffffc90000157828 EFLAGS: 00010046 [ 412.290781][ C0] RAX: a8c3c3a90594b600 RBX: 0000000000000000 RCX: ffff88801ae8d940 [ 412.290794][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 412.290806][ C0] RBP: ffff888026400998 R08: 0000000000000000 R09: 0000000000000100 [ 412.290819][ C0] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 412.290833][ C0] R13: dffffc0000000000 R14: ffff8880279cb168 R15: ffff88801ae8e44c [ 412.290863][ C0] ? __queue_work+0x2e4/0x1010 [ 412.290899][ C0] call_timer_fn+0x17b/0x5f0 [ 412.290922][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 412.290946][ C0] ? call_timer_fn+0xbe/0x5f0 [ 412.290969][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 412.291002][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 412.291022][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 412.291048][ C0] __run_timer_base+0x709/0x970 [ 412.291084][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 412.291122][ C0] run_timer_softirq+0xb7/0x180 [ 412.291144][ C0] handle_softirqs+0x22c/0x710 [ 412.291176][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 412.291208][ C0] run_ktimerd+0xcf/0x190 [ 412.291233][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 412.291256][ C0] ? schedule+0x91/0x360 [ 412.291285][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.291307][ C0] smpboot_thread_fn+0x542/0xa60 [ 412.291331][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.291365][ C0] kthread+0x711/0x8a0 [ 412.291398][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 412.291422][ C0] ? __pfx_kthread+0x10/0x10 [ 412.291455][ C0] ? __pfx_kthread+0x10/0x10 [ 412.291487][ C0] ret_from_fork+0x3fc/0x770 [ 412.291515][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.291546][ C0] ? __switch_to_asm+0x39/0x70 [ 412.291564][ C0] ? __switch_to_asm+0x33/0x70 [ 412.291581][ C0] ? __pfx_kthread+0x10/0x10 [ 412.291611][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.291649][ C0] [ 412.292380][ C0] Kernel Offset: disabled