last executing test programs: 11m37.953298156s ago: executing program 2 (id=269): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r1, 0x0, 0x4000) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r3 = io_uring_setup(0x6b7, &(0x7f0000000000)={0x0, 0xd7f1, 0x800, 0x2, 0x8b9}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x0, 0x700}, 0x1) prlimit64(0x0, 0x6, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x1000) 11m36.978853509s ago: executing program 2 (id=270): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r3, 0x402, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r2, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 11m34.979323521s ago: executing program 2 (id=275): creat(&(0x7f0000000040)='./bus\x00', 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 11m33.766423928s ago: executing program 2 (id=279): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x100000000000000, 0x0, 0x4044059}, 0x40090) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff", 0xca}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557", 0x97}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 11m33.400867976s ago: executing program 2 (id=281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x40c0) 11m31.222150704s ago: executing program 2 (id=285): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c000000090601020000000000000000030000000900020073797a31000000000500010007000000340007801800818014000240fe80000000007495936abd620ec800"], 0x5c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 11m16.010132434s ago: executing program 32 (id=285): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c000000090601020000000000000000030000000900020073797a31000000000500010007000000340007801800818014000240fe80000000007495936abd620ec800"], 0x5c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 16.19688788s ago: executing program 1 (id=1912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.731835973s ago: executing program 1 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf256700000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 13.522093583s ago: executing program 5 (id=1922): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 3.834102439s ago: executing program 1 (id=1923): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 3.772834847s ago: executing program 4 (id=1924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000540)=0xeeee0000) 3.769194341s ago: executing program 3 (id=1925): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, 0x0, 0xfffffffffffffffd}, 0x20) 3.656990448s ago: executing program 5 (id=1926): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3.62088775s ago: executing program 3 (id=1927): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x40002000}) epoll_pwait(r1, &(0x7f0000000240)=[{}], 0x1, 0x2, 0x0, 0x0) 3.488722422s ago: executing program 4 (id=1928): mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 3.488392122s ago: executing program 5 (id=1929): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000ac0)) 3.465771265s ago: executing program 3 (id=1930): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000300)=0x4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 3.442763655s ago: executing program 1 (id=1931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x33, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0xfffe, 0x0, 0x0, {[@nop, @nop, @fastopen={0x22, 0x7, "1ba4d0a5ef"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 3.320659975s ago: executing program 0 (id=1932): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdc03, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000018003f0a00000000000000000400000008000c"], 0x1c}}, 0x0) 3.242765451s ago: executing program 1 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'vlan0\x00', 0x13d2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 3.205956031s ago: executing program 4 (id=1934): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x4, r0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) mlockall(0x7) munlockall() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000400)=""/154}, 0x20) 3.040576569s ago: executing program 0 (id=1935): r0 = openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8936, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x105b) 2.197010576s ago: executing program 5 (id=1936): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = open(0x0, 0x4787e, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2900000001040101000000000000000005000002080003400000000a000004400000000608000440000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4044cc5}, 0x4008000) r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x820001) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000280)=""/239) 2.196677176s ago: executing program 3 (id=1937): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x80) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x100) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$snddsp(r6, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) 2.028259848s ago: executing program 1 (id=1938): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) 1.749266252s ago: executing program 5 (id=1939): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r2, 0x5000aea5, 0x0) 751.943329ms ago: executing program 0 (id=1940): r0 = socket(0x10, 0x3, 0x0) unshare(0x2a020400) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) 718.997005ms ago: executing program 4 (id=1941): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @remote, 0x2}, 0x55) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x50) 504.49876ms ago: executing program 3 (id=1942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf250f0000001800018014000200776c616e310000000000000000000000e10f444812b879048956c1d9fc44e4291b55869ba3fd6cb026348b8dad49cb57f0d5db81e08fab823d078f3db6fd3a3f3369ff8c269ae9790ea852f451820f4976ece04b220769d0d4a3ecbed4fb3ac12f8845e2d4b92057d36d4c6e"], 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x4894) 411.839807ms ago: executing program 4 (id=1943): unshare(0x22020600) r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x1, 0x4) 411.557154ms ago: executing program 0 (id=1944): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 346.54143ms ago: executing program 5 (id=1945): syz_emit_ethernet(0x36, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 269.226598ms ago: executing program 3 (id=1946): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x40010022) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(0x0, 0x0, 0x0) 220.78997ms ago: executing program 4 (id=1947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040)="7db1", 0x0}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 220.447922ms ago: executing program 0 (id=1948): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1a0000000900000005000000050090bdbdffcb5b", @ANYRES32, @ANYBLOB="ff0300"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004"], 0x50) 0s ago: executing program 0 (id=1949): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000ffdbdf253d00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) kernel console output (not intermixed with test programs): adget.4: ignoring, device is not running [ 333.771779][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 333.772127][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 333.772479][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 333.772819][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 333.773205][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 333.781977][ T993] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 333.922711][ T7963] syz_tun: entered promiscuous mode [ 334.121105][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.127619][ T7963] syz_tun: left promiscuous mode [ 334.209566][ T993] usb 5-1: USB disconnect, device number 10 [ 334.440965][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 334.887966][ T5920] usb 6-1: USB disconnect, device number 3 [ 335.055853][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.5.529'. [ 335.055877][ T7978] netlink: 60 bytes leftover after parsing attributes in process `syz.5.529'. [ 335.198899][ T993] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 335.380672][ T993] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 335.380718][ T993] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.380738][ T993] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 335.380761][ T993] usb 4-1: config 0 interface 0 has no altsetting 0 [ 335.380790][ T993] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 335.380810][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.413799][ T993] usb 4-1: config 0 descriptor?? [ 335.435642][ T993] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 335.866430][ T7986] delete_channel: no stack [ 335.979772][ T7988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.533'. [ 336.231443][ T7993] netlink: 244 bytes leftover after parsing attributes in process `syz.5.536'. [ 336.606804][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'. [ 336.606837][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'. [ 336.737171][ T31] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 336.740187][ T8000] syz_tun: entered promiscuous mode [ 336.777717][ T8000] syz_tun: left promiscuous mode [ 336.899545][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 336.899569][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.899586][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.906151][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.906178][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.906195][ T31] usb 6-1: Product: syz [ 336.906206][ T31] usb 6-1: Manufacturer: syz [ 336.906216][ T31] usb 6-1: SerialNumber: syz [ 337.438877][ T31] usb 6-1: 0:2 : does not exist [ 337.858596][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.933444][ T5920] usb 4-1: USB disconnect, device number 10 [ 338.291599][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 338.292097][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 338.292598][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 338.293079][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 338.293602][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 338.360980][ T31] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 338.393978][ T31] usb 6-1: USB disconnect, device number 4 [ 338.680651][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.262482][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.326685][ T8027] netlink: 60 bytes leftover after parsing attributes in process `syz.5.548'. [ 339.440690][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.094322][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.855276][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.882376][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.017134][ T31] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 342.172803][ T8050] syzkaller0: entered promiscuous mode [ 342.172830][ T8050] syzkaller0: entered allmulticast mode [ 342.200564][ T8050] tipc: Enabled bearer , priority 0 [ 342.211218][ T31] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 342.211263][ T31] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.211282][ T31] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 342.211304][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 342.211334][ T31] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 342.211354][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.287346][ T31] usb 6-1: config 0 descriptor?? [ 342.293654][ T31] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 342.336741][ T8050] tipc: Resetting bearer [ 342.384679][ T8049] tipc: Resetting bearer [ 342.570558][ T8049] tipc: Disabling bearer [ 342.798568][ T31] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 342.963275][ T31] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.963297][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.963314][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.966681][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.966704][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.966721][ T31] usb 2-1: Product: syz [ 342.966733][ T31] usb 2-1: Manufacturer: syz [ 342.966745][ T31] usb 2-1: SerialNumber: syz [ 343.448281][ T31] usb 2-1: 0:2 : does not exist [ 344.253599][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.253982][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.254317][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.254662][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.255036][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.255391][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.255728][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.256142][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.256495][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.256871][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.271811][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.347398][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.373140][ T31] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 344.434086][ T31] usb 2-1: USB disconnect, device number 7 [ 344.536333][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.624328][ T5989] usb 6-1: USB disconnect, device number 5 [ 345.438708][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.575'. [ 347.398065][ T8105] tipc: Enabling of bearer rejected, failed to enable media [ 348.231084][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.281166][ T8118] delete_channel: no stack [ 349.531177][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.957113][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 350.507150][ T5920] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 350.718693][ T5920] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 350.718746][ T5920] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.718757][ T5920] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 350.718770][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 350.718788][ T5920] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 350.718799][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.721977][ T5920] usb 6-1: config 0 descriptor?? [ 350.725477][ T5920] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 351.447169][ T5920] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 351.675140][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.701722][ T5920] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 351.701804][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.701821][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.739157][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.739181][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.739190][ T5920] usb 5-1: Product: syz [ 351.739197][ T5920] usb 5-1: Manufacturer: syz [ 351.739210][ T5920] usb 5-1: SerialNumber: syz [ 351.958692][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.638491][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.120257][ T5920] usb 5-1: 0:2 : does not exist [ 353.279679][ T990] usb 6-1: USB disconnect, device number 6 [ 353.985089][ T5920] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 354.065909][ T5920] usb 5-1: USB disconnect, device number 11 [ 354.356025][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.192459][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.237825][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.298837][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.464264][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.495025][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.607208][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.706516][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.759136][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.933219][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.853535][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.387176][ T5904] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 358.539857][ T5904] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 358.539906][ T5904] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.539926][ T5904] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 358.539947][ T5904] usb 2-1: config 0 interface 0 has no altsetting 0 [ 358.539977][ T5904] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 358.539997][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.556428][ T5904] usb 2-1: config 0 descriptor?? [ 358.602351][ T5904] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 358.747155][ T990] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 358.921681][ T990] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 358.921708][ T990] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.921725][ T990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.925250][ T990] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.925276][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.925294][ T990] usb 4-1: Product: syz [ 358.925307][ T990] usb 4-1: Manufacturer: syz [ 358.925319][ T990] usb 4-1: SerialNumber: syz [ 358.980906][ T8194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.606'. [ 359.488814][ T990] usb 4-1: 0:2 : does not exist [ 359.773723][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 361.307929][ T5989] usb 2-1: USB disconnect, device number 8 [ 361.453372][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.264936][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.573541][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.677581][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.756804][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.801572][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.037371][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.621568][ T990] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 364.038621][ T990] usb 4-1: USB disconnect, device number 11 [ 364.179975][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.567792][ T5989] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 366.314072][ T5989] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 366.314115][ T5989] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.314134][ T5989] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 366.314158][ T5989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 366.314193][ T5989] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 366.314211][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.365454][ T5989] usb 4-1: config 0 descriptor?? [ 366.455306][ T5989] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 366.727262][ T5990] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 366.881227][ T5990] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.881251][ T5990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.881267][ T5990] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.884084][ T5990] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.884108][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.884125][ T5990] usb 5-1: Product: syz [ 366.884138][ T5990] usb 5-1: Manufacturer: syz [ 366.884150][ T5990] usb 5-1: SerialNumber: syz [ 367.416715][ T5990] usb 5-1: 0:2 : does not exist [ 368.093927][ T5989] usb 4-1: USB disconnect, device number 12 [ 368.236354][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.236861][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.237422][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.237756][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.238086][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.238418][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.238748][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.239093][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.239423][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.239759][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.240080][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.240408][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.240724][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.241045][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.241380][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.241700][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.247252][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.277528][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.277887][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.287411][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.307375][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.327577][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.347365][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.376152][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.376498][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.376831][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.377236][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.377570][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.377891][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.377990][ T5990] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 368.378243][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.378564][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.378877][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.379193][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.379518][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.379830][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.380234][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.380604][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.380929][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.381324][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.381651][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.381970][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.382294][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.382608][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.382978][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.383319][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.383658][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.383984][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.384310][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.384631][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 368.774635][ T5990] usb 5-1: USB disconnect, device number 12 [ 369.036969][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.057610][ T8266] netlink: 'syz.3.630': attribute type 4 has an invalid length. [ 369.644980][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.742093][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.789738][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.839698][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.943280][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.036081][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.471186][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.790819][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.816338][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.980396][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.192409][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.608138][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.918188][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.150260][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.179917][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.272761][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.892205][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.983028][ T8293] delete_channel: no stack [ 373.001824][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.374348][ T8292] tty tty29: ldisc open failed (-12), clearing slot 28 [ 373.389692][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.487573][ T8297] syzkaller0: entered promiscuous mode [ 373.487619][ T8297] syzkaller0: entered allmulticast mode [ 373.493469][ T8297] tipc: Enabled bearer , priority 0 [ 373.519083][ T8297] tipc: Resetting bearer [ 373.620586][ T8296] tipc: Resetting bearer [ 373.894335][ T8296] tipc: Disabling bearer [ 374.087839][ T5990] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 374.242023][ T5990] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 374.242046][ T5990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.242062][ T5990] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.279927][ T5990] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.279944][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.279954][ T5990] usb 5-1: Product: syz [ 374.279960][ T5990] usb 5-1: Manufacturer: syz [ 374.279967][ T5990] usb 5-1: SerialNumber: syz [ 376.262648][ T5990] usb 5-1: 0:2 : does not exist [ 376.943447][ T8334] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 376.945687][ T8334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.982109][ T8334] vhci_hcd vhci_hcd.0: Device attached [ 377.065424][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.656'. [ 377.156872][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 377.441892][ T990] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 377.813145][ T8337] vhci_hcd: connection reset by peer [ 377.856359][ T1507] vhci_hcd: stop threads [ 377.856416][ T1507] vhci_hcd: release socket [ 377.857217][ T1507] vhci_hcd: disconnect device [ 378.266046][ T5990] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 378.417251][ T5990] usb 5-1: USB disconnect, device number 13 [ 378.605305][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.605389][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.640660][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.607336][ T990] vhci_hcd: vhci_device speed not set [ 384.367129][ T990] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 384.535551][ T990] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 384.535566][ T990] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.535575][ T990] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.538405][ T990] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.538421][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.538430][ T990] usb 1-1: Product: syz [ 384.538437][ T990] usb 1-1: Manufacturer: syz [ 384.538444][ T990] usb 1-1: SerialNumber: syz [ 385.912986][ T8406] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 385.913272][ T8406] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.913813][ T8406] vhci_hcd vhci_hcd.0: Device attached [ 386.348956][ T31] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 387.126021][ T8407] vhci_hcd: connection reset by peer [ 387.417280][ T1379] vhci_hcd: stop threads [ 387.417293][ T1379] vhci_hcd: release socket [ 387.417344][ T1379] vhci_hcd: disconnect device [ 387.624155][ T990] usb 1-1: 0:2 : does not exist [ 387.628152][ T990] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 387.726702][ T990] usb 1-1: USB disconnect, device number 4 [ 388.005154][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.142200][ T8419] netlink: 'syz.4.677': attribute type 1 has an invalid length. [ 388.844577][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.083818][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.128968][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.346593][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.858747][ T8439] netlink: 'syz.4.683': attribute type 4 has an invalid length. [ 391.328641][ T8445] netlink: 'syz.1.685': attribute type 4 has an invalid length. [ 391.647347][ T31] vhci_hcd: vhci_device speed not set [ 396.337200][ T31] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 396.489556][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 396.489572][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.489580][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.491454][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.491469][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.491478][ T31] usb 6-1: Product: syz [ 396.491485][ T31] usb 6-1: Manufacturer: syz [ 396.491491][ T31] usb 6-1: SerialNumber: syz [ 396.984465][ T31] usb 6-1: 0:2 : does not exist [ 398.034131][ T31] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 398.184733][ T8495] delete_channel: no stack [ 399.088634][ T31] usb 6-1: USB disconnect, device number 7 [ 399.390122][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.460183][ T8502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.698'. [ 400.828535][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 401.053179][ T8514] syzkaller0: entered promiscuous mode [ 401.053207][ T8514] syzkaller0: entered allmulticast mode [ 401.062841][ T8514] tipc: Enabled bearer , priority 0 [ 401.337431][ T8513] tipc: Resetting bearer [ 401.440032][ T8527] delete_channel: no stack [ 402.428404][ T8513] tipc: Disabling bearer [ 404.147275][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 404.823055][ T8558] delete_channel: no stack [ 404.993366][ T8561] netlink: 40 bytes leftover after parsing attributes in process `syz.5.721'. [ 408.157319][ T8577] syzkaller0: entered promiscuous mode [ 408.157349][ T8577] syzkaller0: entered allmulticast mode [ 408.178882][ T8577] tipc: Enabled bearer , priority 0 [ 408.218922][ T8574] tipc: Resetting bearer [ 408.876356][ T8594] delete_channel: no stack [ 409.620677][ T8574] tipc: Disabling bearer [ 410.684959][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.739'. [ 413.442016][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.839593][ T8639] delete_channel: no stack [ 414.603010][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.205289][ T8648] syzkaller0: entered promiscuous mode [ 415.205319][ T8648] syzkaller0: entered allmulticast mode [ 415.238773][ T8648] tipc: Enabled bearer , priority 0 [ 415.267437][ T8647] tipc: Resetting bearer [ 415.564307][ T8647] tipc: Disabling bearer [ 416.501456][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.662851][ T8669] netlink: 40 bytes leftover after parsing attributes in process `syz.5.759'. [ 416.731266][ T8670] delete_channel: no stack [ 418.161232][ T8688] syzkaller0: entered promiscuous mode [ 418.161270][ T8688] syzkaller0: entered allmulticast mode [ 418.164903][ T8688] tipc: Enabled bearer , priority 0 [ 418.207253][ T8687] tipc: Resetting bearer [ 418.444576][ T8687] tipc: Disabling bearer [ 419.100750][ T8702] delete_channel: no stack [ 421.527803][ T8727] syzkaller0: entered promiscuous mode [ 421.527830][ T8727] syzkaller0: entered allmulticast mode [ 421.531813][ T8727] tipc: Enabled bearer , priority 0 [ 421.591244][ T8726] tipc: Resetting bearer [ 421.782892][ T8726] tipc: Disabling bearer [ 424.580571][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.824799][ T8746] delete_channel: no stack [ 426.580441][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.741813][ T8784] delete_channel: no stack [ 427.285198][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.278946][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.363792][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.479038][ T8798] netlink: 'syz.0.806': attribute type 4 has an invalid length. [ 432.592287][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.820'. [ 432.592320][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.820'. [ 432.605818][ T8828] syz_tun: entered promiscuous mode [ 432.668402][ T8828] syz_tun: left promiscuous mode [ 433.092890][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.119960][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.186314][ T8842] netlink: 60 bytes leftover after parsing attributes in process `syz.5.824'. [ 435.816404][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.875800][ T8856] delete_channel: no stack [ 436.073282][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.430697][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.455163][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.486344][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.054543][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.224327][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.340006][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 438.259669][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.837'. [ 439.581234][ T8889] vlan2: entered promiscuous mode [ 439.581442][ T8889] vlan2: entered allmulticast mode [ 439.581455][ T8889] hsr_slave_1: entered allmulticast mode [ 439.613649][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 440.667263][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.667340][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.452653][ T8910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.850'. [ 442.267153][ T31] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 443.086153][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.086195][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 443.086237][ T31] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 443.086261][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 443.086292][ T31] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 443.086312][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.102695][ T31] usb 1-1: config 0 descriptor?? [ 443.122598][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 443.797490][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.859'. [ 444.846533][ T5913] usb 1-1: USB disconnect, device number 5 [ 451.508307][ T8963] netlink: 60 bytes leftover after parsing attributes in process `syz.3.864'. [ 451.867119][ T5989] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 452.149381][ T5989] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 452.149397][ T5989] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.149406][ T5989] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.151581][ T5989] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.151603][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.151613][ T5989] usb 1-1: Product: syz [ 452.151619][ T5989] usb 1-1: Manufacturer: syz [ 452.151626][ T5989] usb 1-1: SerialNumber: syz [ 453.474760][ T5989] usb 1-1: 0:2 : does not exist [ 453.637297][ T5904] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 453.830453][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'. [ 454.751917][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.751942][ T5904] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 454.751962][ T5904] usb 4-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 454.751975][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 454.751992][ T5904] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 454.752004][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.877296][ T5904] usb 4-1: config 0 descriptor?? [ 454.885846][ T5904] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 455.259289][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 455.281039][ T5989] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 455.324124][ T5989] usb 1-1: USB disconnect, device number 6 [ 455.362726][ T8701] udevd[8701]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.391905][ T8996] delete_channel: no stack [ 456.702182][ T5989] usb 4-1: USB disconnect, device number 13 [ 458.153012][ T9013] delete_channel: no stack [ 460.576242][ T5904] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 460.741500][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 460.900092][ T5904] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 460.900116][ T5904] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.900133][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.955153][ T5904] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.955181][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.955198][ T5904] usb 4-1: Product: syz [ 460.955211][ T5904] usb 4-1: Manufacturer: syz [ 460.955223][ T5904] usb 4-1: SerialNumber: syz [ 461.176547][ T9036] tipc: Enabled bearer , priority 0 [ 461.217964][ T9036] tipc: Resetting bearer [ 461.325500][ T9035] tipc: Disabling bearer [ 461.537377][ T5904] usb 4-1: 0:2 : does not exist [ 461.884957][ T9044] delete_channel: no stack [ 462.687112][ T5920] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 462.879726][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.879770][ T5920] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 462.879807][ T5920] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 462.879830][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 462.879859][ T5920] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 462.879877][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.880543][ T5904] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 462.895243][ T5920] usb 1-1: config 0 descriptor?? [ 462.909083][ T5920] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 463.017450][ T5904] usb 4-1: USB disconnect, device number 14 [ 463.272088][ T8701] udevd[8701]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.047319][ T9064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.424793][ T31] usb 1-1: USB disconnect, device number 7 [ 466.143711][ T9070] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 466.143780][ T9070] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 466.148585][ T9070] vhci_hcd vhci_hcd.0: Device attached [ 466.723413][ T9072] vhci_hcd: connection closed [ 466.767772][ T5904] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 466.796158][ T1314] vhci_hcd: stop threads [ 466.796214][ T1314] vhci_hcd: release socket [ 466.796793][ T1314] vhci_hcd: disconnect device [ 468.224694][ T9086] tipc: Enabled bearer , priority 0 [ 468.288268][ T9087] netlink: 24 bytes leftover after parsing attributes in process `syz.5.901'. [ 469.071946][ T9086] tipc: Resetting bearer [ 469.158163][ T9084] tipc: Disabling bearer [ 469.209945][ T9090] delete_channel: no stack [ 470.143349][ T9104] delete_channel: no stack [ 470.963346][ T31] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 472.127134][ T5904] vhci_hcd: vhci_device speed not set [ 472.304024][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 472.304047][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.304063][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.770252][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.770280][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.770297][ T31] usb 4-1: Product: syz [ 472.875485][ T9122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 472.875549][ T9122] IPv6: NLM_F_CREATE should be set when creating new route [ 472.877617][ T9122] IPv6: NLM_F_CREATE should be set when creating new route [ 472.877817][ T9122] IPv6: NLM_F_CREATE should be set when creating new route [ 473.557902][ T31] usb 4-1: can't set config #1, error -71 [ 473.611916][ T31] usb 4-1: USB disconnect, device number 15 [ 474.178123][ T9132] netlink: 'syz.1.917': attribute type 4 has an invalid length. [ 475.488325][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.920'. [ 476.866797][ T9149] delete_channel: no stack [ 478.467110][ T5904] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 478.681660][ T5904] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 478.681690][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.681707][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.762400][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.762417][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.762426][ T5904] usb 2-1: Product: syz [ 478.762432][ T5904] usb 2-1: Manufacturer: syz [ 478.762439][ T5904] usb 2-1: SerialNumber: syz [ 479.275129][ T5904] usb 2-1: 0:2 : does not exist [ 479.902022][ T9165] tipc: Enabled bearer , priority 0 [ 479.973336][ T9165] tipc: Resetting bearer [ 479.988637][ T5844] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 479.988672][ T5844] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 481.127452][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 481.127965][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 481.128472][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 481.128959][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 481.129435][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 481.129917][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 481.130567][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 481.202157][ T9164] tipc: Disabling bearer [ 481.218853][ T5904] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 481.306285][ T5904] usb 2-1: USB disconnect, device number 9 [ 481.392302][ T8701] udevd[8701]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.079172][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.935'. [ 483.534631][ T9214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.534647][ T9214] IPv6: NLM_F_CREATE should be set when creating new route [ 483.534702][ T9214] IPv6: NLM_F_CREATE should be set when creating new route [ 483.534733][ T9214] IPv6: NLM_F_CREATE should be set when creating new route [ 484.272614][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 486.767097][ T31] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 486.882140][ T9230] tipc: Enabled bearer , priority 0 [ 486.900493][ T9230] tipc: Resetting bearer [ 486.920088][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 486.920111][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.920128][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.923328][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.923360][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.923378][ T31] usb 5-1: Product: syz [ 486.923390][ T31] usb 5-1: Manufacturer: syz [ 486.923402][ T31] usb 5-1: SerialNumber: syz [ 487.208728][ T9229] tipc: Disabling bearer [ 487.579933][ T31] usb 5-1: 0:2 : does not exist [ 488.599616][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 488.614515][ T31] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 488.798089][ T31] usb 5-1: USB disconnect, device number 14 [ 489.038411][ T8701] udevd[8701]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.493867][ T9246] delete_channel: no stack [ 490.653371][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.955'. [ 492.893491][ T9266] tipc: Enabled bearer , priority 0 [ 492.980332][ T9266] tipc: Resetting bearer [ 493.118177][ T9265] tipc: Disabling bearer [ 493.644113][ T5844] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 493.644146][ T5844] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 495.405087][ T9300] tipc: Enabled bearer , priority 0 [ 495.421580][ T9300] tipc: Resetting bearer [ 495.669907][ T9298] tipc: Disabling bearer [ 495.751510][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.974'. [ 498.443143][ T9319] delete_channel: no stack [ 498.724889][ T9322] netlink: 268 bytes leftover after parsing attributes in process `syz.4.979'. [ 499.856685][ T9337] delete_channel: no stack [ 501.311844][ T9349] delete_channel: no stack [ 501.624675][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.629448][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.107496][ T9350] tipc: Enabled bearer , priority 0 [ 502.115909][ T9346] tipc: Resetting bearer [ 502.338014][ T9345] tipc: Disabling bearer [ 504.013282][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.203145][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.995'. [ 505.220731][ T9372] netlink: 244 bytes leftover after parsing attributes in process `syz.0.996'. [ 507.278991][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.033257][ T9404] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.387250][ T5904] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 513.558800][ T5904] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 513.558816][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.558825][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.560962][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 513.560979][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.560988][ T5904] usb 5-1: Product: syz [ 513.560995][ T5904] usb 5-1: Manufacturer: syz [ 513.561002][ T5904] usb 5-1: SerialNumber: syz [ 514.055166][ T5904] usb 5-1: 0:2 : does not exist [ 514.573257][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 515.099136][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1013'. [ 515.099404][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1013'. [ 515.134419][ T9421] syz_tun: entered promiscuous mode [ 515.326647][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.351294][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 515.351656][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 515.365522][ T5904] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 515.485358][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.997008][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.161940][ T9421] syz_tun: left promiscuous mode [ 516.163969][ T5904] usb 5-1: USB disconnect, device number 15 [ 516.367711][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.432871][ T9408] udevd[9408]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.227501][ T9441] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1019'. [ 517.907219][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 518.073985][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.233330][ T9469] delete_channel: no stack [ 518.964490][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 518.964526][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 519.031553][ T9477] syz_tun: entered promiscuous mode [ 519.073079][ T9477] syz_tun: left promiscuous mode [ 519.207085][ T5904] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 519.405629][ T5904] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 519.405663][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.405680][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.412703][ T5904] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.412730][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.412748][ T5904] usb 6-1: Product: syz [ 519.412761][ T5904] usb 6-1: Manufacturer: syz [ 519.412773][ T5904] usb 6-1: SerialNumber: syz [ 519.495926][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.347802][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.813804][ T5904] usb 6-1: 0:2 : does not exist [ 521.272799][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.387722][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1036'. [ 522.417208][ T5904] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 522.540245][ T5904] usb 6-1: USB disconnect, device number 8 [ 522.721266][ T9408] udevd[9408]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.582100][ T9520] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 523.582159][ T9520] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 523.586646][ T9520] vhci_hcd vhci_hcd.0: Device attached [ 523.815986][ T9524] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1039'. [ 523.816042][ T9524] openvswitch: netlink: Flow actions attr not present in new flow. [ 524.652151][ T9521] vhci_hcd: connection closed [ 524.866434][ T1441] vhci_hcd: stop threads [ 524.866491][ T1441] vhci_hcd: release socket [ 524.888431][ T1441] vhci_hcd: disconnect device [ 526.110502][ T9549] netlink: 'syz.5.1046': attribute type 6 has an invalid length. [ 526.848160][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.076848][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.106848][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.887039][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.997512][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.354872][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.098787][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.360343][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.884507][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.725309][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.920380][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.976011][ T9594] delete_channel: no stack [ 532.138718][ T9596] delete_channel: no stack [ 532.148489][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.173128][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.229262][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.850871][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.123248][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.419988][ T9616] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1064'. [ 535.420024][ T9616] openvswitch: netlink: Flow actions attr not present in new flow. [ 536.806270][ T9619] delete_channel: no stack [ 537.164828][ T9623] tipc: Enabling of bearer rejected, already enabled [ 539.613602][ T9642] ieee802154 phy0 wpan0: encryption failed: -22 [ 540.704043][ T9654] delete_channel: no stack [ 541.636767][ T5844] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 541.636803][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 548.232737][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.377456][ T9727] delete_channel: no stack [ 549.610372][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.483425][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.746896][ T5844] Bluetooth: hci0: unexpected cc 0x0402 length: 4 > 1 [ 550.749544][ T5844] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 550.974722][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.156427][ T9734] syzkaller0: entered promiscuous mode [ 551.156703][ T9734] syzkaller0: entered allmulticast mode [ 551.629973][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.986756][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.118906][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.628219][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.168126][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.508113][ T5928] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 555.006564][ T5928] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 555.037814][ T5928] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.037844][ T5928] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 555.037869][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 555.037902][ T5928] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 555.037923][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.127296][ T5928] usb 2-1: config 0 descriptor?? [ 555.136225][ T5928] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 556.019575][ T5844] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 556.019611][ T5844] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 558.095204][ T5928] usb 2-1: USB disconnect, device number 10 [ 558.348392][ T9781] syzkaller0: entered promiscuous mode [ 558.348419][ T9781] syzkaller0: entered allmulticast mode [ 558.798151][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 559.499894][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.560885][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.812608][ T9812] delete_channel: no stack [ 562.953484][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.953562][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.365630][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.987097][ T5904] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 564.145575][ T5904] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 564.145627][ T5904] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.145647][ T5904] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 564.145671][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 564.145702][ T5904] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 564.145722][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.231373][ T5904] usb 6-1: config 0 descriptor?? [ 564.259690][ T5904] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 567.911078][ T5990] usb 6-1: USB disconnect, device number 9 [ 569.414679][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.206264][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.282224][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.336580][ T9871] delete_channel: no stack [ 572.192538][ T9891] delete_channel: no stack [ 572.241344][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.627868][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.877831][ T9902] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 577.877905][ T9902] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 577.881422][ T9902] vhci_hcd vhci_hcd.0: Device attached [ 578.486545][ T6886] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 578.817237][ T9903] vhci_hcd: connection reset by peer [ 578.854056][ T4184] vhci_hcd: stop threads [ 578.854120][ T4184] vhci_hcd: release socket [ 578.857566][ T4184] vhci_hcd: disconnect device [ 582.369732][ T9934] delete_channel: no stack [ 583.648378][ T6886] vhci_hcd: vhci_device speed not set [ 587.683313][ T9986] delete_channel: no stack [ 590.590305][T10002] delete_channel: no stack [ 594.648429][T10014] delete_channel: no stack [ 595.604621][T10029] tipc: Enabled bearer , priority 0 [ 595.618983][T10029] tipc: Resetting bearer [ 595.682256][T10028] tipc: Disabling bearer [ 598.289472][T10059] delete_channel: no stack [ 598.659863][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.401301][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.527313][T10068] delete_channel: no stack [ 600.175087][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.308326][T10078] tipc: Enabled bearer , priority 0 [ 601.375062][T10078] tipc: Resetting bearer [ 601.510065][T10077] tipc: Disabling bearer [ 602.213385][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1214'. [ 602.213412][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1214'. [ 602.287323][T10087] syz_tun: entered promiscuous mode [ 602.450897][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.479576][T10087] syz_tun: left promiscuous mode [ 602.608066][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.167537][T10088] delete_channel: no stack [ 603.175218][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.580293][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.337529][T10099] delete_channel: no stack [ 606.413438][T10120] tipc: Enabled bearer , priority 0 [ 606.442178][T10120] tipc: Resetting bearer [ 606.712544][T10117] tipc: Disabling bearer [ 607.525255][T10132] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 607.525283][T10132] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 607.527838][T10132] vhci_hcd vhci_hcd.0: Device attached [ 607.706240][T10135] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1228'. [ 607.706304][T10135] openvswitch: netlink: Flow actions attr not present in new flow. [ 607.768775][ T5904] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 609.067118][T10133] vhci_hcd: connection reset by peer [ 609.078138][ T1431] vhci_hcd: stop threads [ 609.078153][ T1431] vhci_hcd: release socket [ 609.078196][ T1431] vhci_hcd: disconnect device [ 610.075778][T10136] delete_channel: no stack [ 611.309786][T10142] delete_channel: no stack [ 611.758301][T10156] netlink: 'syz.1.1236': attribute type 6 has an invalid length. [ 612.473395][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.909660][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.997119][ T5904] vhci_hcd: vhci_device speed not set [ 613.355512][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.620545][T10168] tipc: Enabled bearer , priority 0 [ 613.639330][T10165] tipc: Resetting bearer [ 613.699441][T10164] tipc: Disabling bearer [ 614.125933][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.409219][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.595058][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.034655][T10173] delete_channel: no stack [ 615.041105][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.507610][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.961395][T10195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.550189][T10202] netlink: 'syz.0.1249': attribute type 6 has an invalid length. [ 617.951166][T10209] tipc: Enabled bearer , priority 0 [ 617.955220][T10209] tipc: Resetting bearer [ 618.171237][T10208] tipc: Disabling bearer [ 618.595628][T10218] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 621.189841][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.088399][T10240] delete_channel: no stack [ 623.398196][T10247] tipc: Enabled bearer , priority 0 [ 623.405933][T10247] tipc: Resetting bearer [ 623.511845][T10246] tipc: Disabling bearer [ 624.386031][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.386105][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.351415][T10265] delete_channel: no stack [ 625.479968][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 626.244705][T10275] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 626.244891][T10275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 626.245437][T10275] vhci_hcd vhci_hcd.0: Device attached [ 626.648190][T10277] vhci_hcd: connection closed [ 626.678241][ T1422] vhci_hcd: stop threads [ 626.678303][ T1422] vhci_hcd: release socket [ 626.680248][ T1422] vhci_hcd: disconnect device [ 627.501812][ T5844] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 627.501844][ T5844] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 630.454215][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.663228][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.574634][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 635.107140][ T5928] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 635.361733][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 635.751004][ T5928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 635.752568][ T5928] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.752639][ T5928] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 635.752713][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 635.753023][ T5928] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 635.753068][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.137103][ T5928] usb 1-1: config 0 descriptor?? [ 636.143529][ T5928] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 636.603797][ T5844] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 636.603829][ T5844] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 637.408507][T10354] delete_channel: no stack [ 638.385283][T10364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1299'. [ 639.248149][ T5904] usb 1-1: USB disconnect, device number 8 [ 639.275709][T10366] syzkaller0: entered promiscuous mode [ 639.275738][T10366] syzkaller0: entered allmulticast mode [ 639.593153][T10372] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 639.593213][T10372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 639.594167][T10372] vhci_hcd vhci_hcd.0: Device attached [ 639.937602][ T993] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 640.368463][T10374] vhci_hcd: connection reset by peer [ 641.212753][ T1431] vhci_hcd: stop threads [ 641.212811][ T1431] vhci_hcd: release socket [ 641.212963][ T1431] vhci_hcd: disconnect device [ 644.033450][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.882829][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.104022][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.158608][ T993] vhci_hcd: vhci_device speed not set [ 646.084091][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.682066][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.684719][ T5928] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 646.797994][T10418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1314'. [ 647.488407][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.561895][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1315'. [ 647.585031][ T5928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 647.585081][ T5928] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.585108][ T5928] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 647.585134][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 647.585165][ T5928] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 647.585186][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.594741][ T5928] usb 1-1: config 0 descriptor?? [ 647.606463][ T5928] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 649.281875][ T5928] usb 1-1: USB disconnect, device number 9 [ 649.354701][T10429] syzkaller0: entered promiscuous mode [ 649.354729][T10429] syzkaller0: entered allmulticast mode [ 649.413231][T10432] netlink: 'syz.0.1318': attribute type 4 has an invalid length. [ 650.663340][T10448] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 651.137499][T10454] netem: change failed [ 652.994479][T10488] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 652.994574][T10488] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 652.994656][T10488] vhci_hcd vhci_hcd.0: Device attached [ 653.237012][ T6886] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 653.775229][T10489] vhci_hcd: connection reset by peer [ 653.808776][ T12] vhci_hcd: stop threads [ 653.808842][ T12] vhci_hcd: release socket [ 653.810890][ T12] vhci_hcd: disconnect device [ 654.680867][T10494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1330'. [ 657.194129][T10510] syzkaller0: entered promiscuous mode [ 657.194147][T10510] syzkaller0: entered allmulticast mode [ 658.447055][ T6886] vhci_hcd: vhci_device speed not set [ 658.677085][ T993] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 658.845416][ T993] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 658.845431][ T993] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.845441][ T993] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.037099][ T993] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 659.037118][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.037127][ T993] usb 1-1: Product: syz [ 659.037134][ T993] usb 1-1: Manufacturer: syz [ 659.037141][ T993] usb 1-1: SerialNumber: syz [ 659.476533][ T993] usb 1-1: 0:2 : does not exist [ 661.850155][ T993] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 663.453276][ T993] usb 1-1: USB disconnect, device number 10 [ 663.663318][ T9408] udevd[9408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.929463][T10558] delete_channel: no stack [ 666.889180][T10560] syzkaller0: entered promiscuous mode [ 666.889208][T10560] syzkaller0: entered allmulticast mode [ 668.468455][T10574] delete_channel: no stack [ 669.927008][ T5928] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 670.344967][ T5928] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 670.344992][ T5928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.345009][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.349322][ T5928] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.349357][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.349417][ T5928] usb 4-1: Product: syz [ 670.349431][ T5928] usb 4-1: Manufacturer: syz [ 670.349443][ T5928] usb 4-1: SerialNumber: syz [ 670.922235][ T5928] usb 4-1: 0:2 : does not exist [ 671.333019][T10600] delete_channel: no stack [ 672.987060][ T5928] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 673.018855][ T5928] usb 4-1: USB disconnect, device number 16 [ 673.091161][T10603] netlink: 'syz.0.1362': attribute type 4 has an invalid length. [ 673.267207][ T9408] udevd[9408]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.746530][T10609] delete_channel: no stack [ 674.454879][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.527840][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.803373][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.963807][T10614] delete_channel: no stack [ 675.696322][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.047634][T10617] syzkaller0: entered promiscuous mode [ 676.047661][T10617] syzkaller0: entered allmulticast mode [ 677.919477][ T5928] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 678.071024][ T5928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 678.071073][ T5928] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.071095][ T5928] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 678.071120][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 678.071148][ T5928] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 678.071168][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.142997][ T5928] usb 1-1: config 0 descriptor?? [ 678.173030][ T5928] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 678.347160][ T993] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 678.502467][ T993] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 678.502491][ T993] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.502507][ T993] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.505844][ T993] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.505870][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.505888][ T993] usb 6-1: Product: syz [ 678.505900][ T993] usb 6-1: Manufacturer: syz [ 678.505913][ T993] usb 6-1: SerialNumber: syz [ 678.993946][ T993] usb 6-1: 0:2 : does not exist [ 679.426621][T10660] delete_channel: no stack [ 680.630021][ T5844] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 680.630059][ T5844] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 681.673485][ T993] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 681.730836][ T5928] usb 1-1: USB disconnect, device number 11 [ 681.947307][ T993] usb 6-1: USB disconnect, device number 10 [ 683.132233][T10679] vhci_hcd vhci_hcd.0: failed to lookup sock [ 684.584795][ T9408] udevd[9408]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.726174][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'. [ 684.726199][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'. [ 685.813774][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.813845][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.305170][ T5844] Bluetooth: hci5: unexpected cc 0x0402 length: 4 > 1 [ 687.305203][ T5844] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 687.548208][ T6886] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 687.565503][ T5928] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 687.958484][ T5928] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 687.958570][ T5928] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.958614][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.194055][ T5928] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 688.194083][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.194103][ T5928] usb 5-1: Product: syz [ 688.194116][ T5928] usb 5-1: Manufacturer: syz [ 688.194130][ T5928] usb 5-1: SerialNumber: syz [ 688.231493][ T6886] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 688.231546][ T6886] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.231566][ T6886] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 688.231592][ T6886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 688.231624][ T6886] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 688.231644][ T6886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.301769][ T6886] usb 4-1: config 0 descriptor?? [ 688.375611][ T6886] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 688.750251][ T5928] usb 5-1: 0:2 : does not exist [ 689.228764][T10746] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 689.228849][T10746] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 689.229498][T10746] vhci_hcd vhci_hcd.0: Device attached [ 690.411006][T10747] vhci_hcd: connection closed [ 690.423404][ T1471] vhci_hcd: stop threads [ 690.423426][ T1471] vhci_hcd: release socket [ 690.423725][ T1471] vhci_hcd: disconnect device [ 690.487303][ T6886] vhci_hcd: vhci_device speed not set [ 690.554583][T10750] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 690.554850][T10750] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 690.555473][T10750] vhci_hcd vhci_hcd.0: Device attached [ 690.702790][T10753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.892854][ T993] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 690.960431][T10751] vhci_hcd: connection reset by peer [ 690.968860][ T4184] vhci_hcd: stop threads [ 690.968881][ T4184] vhci_hcd: release socket [ 690.969031][ T4184] vhci_hcd: disconnect device [ 691.537164][ T5928] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 691.542973][ T5990] usb 4-1: USB disconnect, device number 17 [ 691.917185][ T5928] usb 5-1: USB disconnect, device number 16 [ 692.888503][ T9408] udevd[9408]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.211704][T10782] Bluetooth: MGMT ver 1.23 [ 694.749973][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 695.134747][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 695.134771][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.134789][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.224262][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.224291][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.224309][ T9] usb 1-1: Product: syz [ 695.224321][ T9] usb 1-1: Manufacturer: syz [ 695.224334][ T9] usb 1-1: SerialNumber: syz [ 695.707093][ T9] usb 1-1: 0:2 : does not exist [ 696.027004][ T993] vhci_hcd: vhci_device speed not set [ 697.032085][ T9] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 697.282104][ T9] usb 1-1: USB disconnect, device number 12 [ 697.827986][ T9408] udevd[9408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.977023][ T6886] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 699.232655][ T6886] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 699.232705][ T6886] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.232735][ T6886] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 699.232759][ T6886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 699.232791][ T6886] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 699.232812][ T6886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.288682][ T6886] usb 6-1: config 0 descriptor?? [ 699.314678][ T6886] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 701.000828][ T5844] Bluetooth: hci0: unexpected cc 0x0402 length: 4 > 1 [ 701.000861][ T5844] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 701.205541][T10841] netlink: 'syz.4.1428': attribute type 4 has an invalid length. [ 701.261900][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.363867][T10843] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 701.363891][T10843] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 701.363953][T10843] vhci_hcd vhci_hcd.0: Device attached [ 701.657502][ T6886] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 701.860307][T10844] vhci_hcd: connection reset by peer [ 701.893802][ T7754] vhci_hcd: stop threads [ 701.893863][ T7754] vhci_hcd: release socket [ 701.894144][ T7754] vhci_hcd: disconnect device [ 702.227743][ T5928] usb 6-1: USB disconnect, device number 11 [ 702.634858][T10848] tipc: Enabling of bearer rejected, already enabled [ 702.699201][T10850] tipc: Enabled bearer , priority 0 [ 702.703853][T10850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 702.859326][T10853] tipc: Resetting bearer [ 703.199549][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.530586][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.733519][T10849] tipc: Disabling bearer [ 704.586158][T10883] delete_channel: no stack [ 704.681701][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.717065][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 704.919580][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 704.919643][ T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.919664][ T9] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 704.919688][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 704.919720][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 704.919739][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.986699][ T9] usb 1-1: config 0 descriptor?? [ 705.007984][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 705.310899][ T5844] Bluetooth: hci5: unexpected cc 0x0402 length: 4 > 1 [ 705.310932][ T5844] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 705.472547][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.635344][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1444'. [ 706.917324][ T6886] vhci_hcd: vhci_device speed not set [ 708.187073][ T990] usb 1-1: USB disconnect, device number 13 [ 709.355075][T10920] delete_channel: no stack [ 709.734757][T10923] delete_channel: no stack [ 709.793225][T10924] delete_channel: no stack [ 711.021321][ T5844] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 711.021354][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 712.386679][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.301767][T10958] tipc: Enabled bearer , priority 0 [ 713.302932][T10958] syzkaller0: entered promiscuous mode [ 713.302957][T10958] syzkaller0: entered allmulticast mode [ 713.372441][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.467304][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 713.780861][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 714.137151][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 714.137409][ T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.137456][ T9] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 714.137506][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.137707][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 714.137776][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.499998][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.548125][ T9] usb 4-1: config 0 descriptor?? [ 714.609187][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 714.665704][ T5844] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 714.665737][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 714.881099][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.947415][T10957] tipc: Resetting bearer [ 715.142503][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.153527][T10977] delete_channel: no stack [ 715.235433][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.370577][T10957] tipc: Disabling bearer [ 715.766811][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.136216][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.329762][T11006] overlayfs: failed to resolve './file1': -2 [ 716.330816][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.441892][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.217931][T10773] usb 4-1: USB disconnect, device number 18 [ 718.517088][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 718.665034][T11019] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 719.598479][T11026] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 719.598506][T11026] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 719.605213][T11026] vhci_hcd vhci_hcd.0: Device attached [ 719.829391][T11028] vhci_hcd: connection closed [ 719.837219][ T6886] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 719.849740][ T4184] vhci_hcd: stop threads [ 719.849758][ T4184] vhci_hcd: release socket [ 719.849838][ T4184] vhci_hcd: disconnect device [ 720.909925][T11041] delete_channel: no stack [ 721.339079][T11056] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 721.339105][T11056] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 721.341624][T11056] vhci_hcd vhci_hcd.0: Device attached [ 721.396038][T11052] tipc: Enabled bearer , priority 0 [ 721.418213][T11055] syzkaller0: entered promiscuous mode [ 721.418453][T11055] syzkaller0: entered allmulticast mode [ 721.516555][T11056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.477646][ T990] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 722.906952][T11057] vhci_hcd: connection reset by peer [ 722.937284][ T13] vhci_hcd: stop threads [ 722.937310][ T13] vhci_hcd: release socket [ 722.937400][ T13] vhci_hcd: disconnect device [ 723.477486][T11049] tipc: Resetting bearer [ 723.570345][T11075] netlink: 'syz.4.1486': attribute type 4 has an invalid length. [ 723.692438][T11049] tipc: Disabling bearer [ 723.793778][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 723.960018][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 723.960101][ T9] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.960122][ T9] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 723.960146][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 723.960176][ T9] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 723.960197][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.970137][ T9] usb 6-1: config 0 descriptor?? [ 723.993061][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 724.427290][T11092] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 724.427315][T11092] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 724.427405][T11092] vhci_hcd vhci_hcd.0: Device attached [ 724.801347][ T5928] usb 39-1: new high-speed USB device number 7 using vhci_hcd [ 725.367149][ T6886] vhci_hcd: vhci_device speed not set [ 725.440915][T11093] vhci_hcd: connection reset by peer [ 725.445181][ T1471] vhci_hcd: stop threads [ 725.445199][ T1471] vhci_hcd: release socket [ 725.446660][ T1471] vhci_hcd: disconnect device [ 726.467998][T11112] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 726.468024][T11112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 726.511320][T11112] vhci_hcd vhci_hcd.0: Device attached [ 726.605202][T11108] delete_channel: no stack [ 726.861408][T11116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.914554][ T9] usb 6-1: USB disconnect, device number 12 [ 727.439026][ T6886] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 727.627293][ T990] vhci_hcd: vhci_device speed not set [ 728.718169][T11114] vhci_hcd: connection reset by peer [ 728.737749][ T1422] vhci_hcd: stop threads [ 728.737768][ T1422] vhci_hcd: release socket [ 728.739546][ T1422] vhci_hcd: disconnect device [ 729.357158][T11136] Illegal XDP return value 4294967262 on prog (id 300) dev N/A, expect packet loss! [ 729.546373][ T5844] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 729.546409][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 730.726541][ T5928] vhci_hcd: vhci_device speed not set [ 731.730161][T11170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 731.730196][T11170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 732.063525][T11172] delete_channel: no stack [ 732.718514][ T6886] vhci_hcd: vhci_device speed not set [ 733.166226][T11183] netlink: 'syz.1.1510': attribute type 8 has an invalid length. [ 733.166246][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 733.770562][T11189] tipc: Enabled bearer , priority 0 [ 733.889398][T11189] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 733.916030][T11195] netlink: 'syz.1.1513': attribute type 4 has an invalid length. [ 733.970953][T11189] tipc: Resetting bearer [ 734.337798][T11187] tipc: Disabling bearer [ 734.362565][ T5844] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 734.362598][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 735.783485][T11225] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 735.834829][T11226] tipc: Enabled bearer , priority 0 [ 735.835830][T11226] syzkaller0: entered promiscuous mode [ 735.835855][T11226] syzkaller0: entered allmulticast mode [ 736.926988][T11226] tipc: Resetting bearer [ 737.960099][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1528'. [ 737.963319][T11246] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 738.333044][ T5928] IPVS: starting estimator thread 0... [ 738.417070][T11248] IPVS: using max 7 ests per chain, 16800 per kthread [ 738.827495][T11223] tipc: Resetting bearer [ 739.002791][T11223] tipc: Disabling bearer [ 739.228638][ T5844] Bluetooth: hci5: unexpected cc 0x0402 length: 4 > 1 [ 739.228672][ T5844] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 740.052015][T11293] delete_channel: no stack [ 740.747013][T11306] netlink: 'syz.4.1539': attribute type 4 has an invalid length. [ 741.864073][T11329] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 741.864098][T11329] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 741.864207][T11329] vhci_hcd vhci_hcd.0: Device attached [ 742.399320][ T6886] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 742.788517][T11330] vhci_hcd: connection reset by peer [ 742.789266][ T1422] vhci_hcd: stop threads [ 742.789282][ T1422] vhci_hcd: release socket [ 742.789357][ T1422] vhci_hcd: disconnect device [ 743.943127][T11340] delete_channel: no stack [ 744.075451][ T5844] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 744.075485][ T5844] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 746.190459][T11359] delete_channel: no stack [ 746.854331][T11361] delete_channel: no stack [ 747.639951][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.640021][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.718972][ T6886] vhci_hcd: vhci_device speed not set [ 749.513855][T11383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1561'. [ 749.513889][T11383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1561'. [ 749.657912][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1559'. [ 751.172068][T11391] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 751.172131][T11391] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 751.174724][T11393] delete_channel: no stack [ 751.177513][T11391] vhci_hcd vhci_hcd.0: Device attached [ 752.031446][T11392] vhci_hcd: connection closed [ 752.090525][ T4184] vhci_hcd: stop threads [ 752.090583][ T4184] vhci_hcd: release socket [ 752.090698][ T4184] vhci_hcd: disconnect device [ 752.892350][ T5844] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 752.892383][ T5844] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 758.203257][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 758.224102][T11448] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 759.161689][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'. [ 759.228004][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 761.828607][ T5844] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 764.269846][T11474] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 764.269968][T11474] Bluetooth: hci2: Injecting HCI hardware error event [ 764.272905][ T5850] Bluetooth: hci2: hardware error 0x00 [ 764.746183][T11474] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 764.746206][T11474] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 766.101193][T11474] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 766.101469][T11474] Bluetooth: hci3: Injecting HCI hardware error event [ 766.106134][T11474] Bluetooth: hci3: hardware error 0x00 [ 766.597077][ T5850] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 766.599791][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1589'. [ 766.599825][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1589'. [ 766.768419][T11506] delete_channel: no stack [ 768.064613][T11510] netlink: 'syz.1.1592': attribute type 4 has an invalid length. [ 768.153988][T11510] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1592'. [ 768.154225][T11510] block nbd0: not configured, cannot reconfigure [ 768.439587][T11474] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 769.359164][T11474] Bluetooth: hci5: unexpected cc 0x0402 length: 4 > 1 [ 769.359205][T11474] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 769.515647][T11531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1599'. [ 769.515681][T11531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1599'. [ 772.170258][T11554] vivid-000: kernel_thread() failed [ 773.757656][T11570] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 773.757718][T11570] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 773.759756][T11570] vhci_hcd vhci_hcd.0: Device attached [ 774.654286][T11571] vhci_hcd: connection closed [ 774.734331][ T1507] vhci_hcd: stop threads [ 774.734390][ T1507] vhci_hcd: release socket [ 774.734814][ T1507] vhci_hcd: disconnect device [ 774.787611][T10773] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 774.789549][T10773] usb 41-1: enqueue for inactive port 0 [ 774.858100][T10773] vhci_hcd: vhci_device speed not set [ 776.080207][T11578] delete_channel: no stack [ 778.296075][T11610] tipc: Enabling of bearer rejected, failed to enable media [ 780.184649][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.393295][T11644] delete_channel: no stack [ 780.403853][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.429388][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.065438][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.157086][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.714747][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.045998][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1628'. [ 782.046033][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1628'. [ 782.070891][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.198621][T11657] syz_tun: entered promiscuous mode [ 782.344369][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.320942][T11657] syz_tun: left promiscuous mode [ 784.509922][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.402790][T11691] syzkaller0: entered promiscuous mode [ 786.402808][T11691] syzkaller0: entered allmulticast mode [ 788.168693][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1639'. [ 795.248470][T11769] syzkaller0: entered promiscuous mode [ 795.248499][T11769] syzkaller0: entered allmulticast mode [ 796.591853][T11474] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 796.591886][T11474] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 797.183822][T11784] vivid-000: kernel_thread() failed [ 799.652534][T11814] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1663'. [ 800.702168][T11829] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 801.669698][T11839] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 801.669761][T11839] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 801.670166][T11839] vhci_hcd vhci_hcd.0: Device attached [ 803.567387][ T990] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 803.589794][T11841] vhci_hcd: connection reset by peer [ 804.215539][ T7754] vhci_hcd: stop threads [ 804.215560][ T7754] vhci_hcd: release socket [ 804.215640][ T7754] vhci_hcd: disconnect device [ 807.196913][ T5920] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 807.218312][T11881] tipc: Enabled bearer , priority 0 [ 807.219390][T11881] syzkaller0: entered promiscuous mode [ 807.219415][T11881] syzkaller0: entered allmulticast mode [ 807.346915][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 807.349976][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 807.351428][ T5920] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 807.351450][ T5920] usb 5-1: config 0 has no interface number 0 [ 807.351502][ T5920] usb 5-1: config 0 interface 63 has no altsetting 0 [ 807.356176][ T5920] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 807.356211][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.356229][ T5920] usb 5-1: Product: syz [ 807.356242][ T5920] usb 5-1: Manufacturer: syz [ 807.356254][ T5920] usb 5-1: SerialNumber: syz [ 807.437732][ T5920] usb 5-1: config 0 descriptor?? [ 807.644843][ T5920] kvaser_usb 5-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 807.663887][ T5920] usb 5-1: USB disconnect, device number 17 [ 807.681049][T11879] tipc: Resetting bearer [ 807.846203][T11886] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 807.846219][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 807.846277][T11886] vhci_hcd vhci_hcd.0: Device attached [ 808.112052][ T5928] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 809.071332][T11887] vhci_hcd: connection reset by peer [ 809.080378][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.081085][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.145674][ T7754] vhci_hcd: stop threads [ 809.145689][ T7754] vhci_hcd: release socket [ 809.145822][ T7754] vhci_hcd: disconnect device [ 809.222384][T11879] tipc: Disabling bearer [ 809.276984][ T990] vhci_hcd: vhci_device speed not set [ 809.743182][T10773] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 809.950970][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 810.057976][T10773] usb 5-1: Using ep0 maxpacket: 32 [ 810.061254][T10773] usb 5-1: unable to get BOS descriptor or descriptor too short [ 810.063739][T10773] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 810.063759][T10773] usb 5-1: config 0 has no interface number 0 [ 810.063910][T10773] usb 5-1: config 0 interface 63 has no altsetting 0 [ 810.073265][T10773] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 810.073300][T10773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.073318][T10773] usb 5-1: Product: syz [ 810.073329][T10773] usb 5-1: Manufacturer: syz [ 810.073342][T10773] usb 5-1: SerialNumber: syz [ 810.090107][T10773] usb 5-1: config 0 descriptor?? [ 810.359261][T10773] kvaser_usb 5-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 810.473609][T10773] usb 5-1: USB disconnect, device number 18 [ 811.020127][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.078270][T11919] delete_channel: no stack [ 811.872132][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.047119][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1693'. [ 812.620560][T11924] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 812.620618][T11924] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 812.621080][T11924] vhci_hcd vhci_hcd.0: Device attached [ 812.927977][T10773] usb 39-1: new high-speed USB device number 8 using vhci_hcd [ 813.317203][ T5928] vhci_hcd: vhci_device speed not set [ 813.562087][T11926] vhci_hcd: connection closed [ 813.580884][T11927] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 813.605075][ T57] vhci_hcd: stop threads [ 813.605092][ T57] vhci_hcd: release socket [ 813.605165][ T57] vhci_hcd: disconnect device [ 814.409920][ T37] audit: type=1326 audit(1756465239.848:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682dc7ebe9 code=0x7ffc0000 [ 814.409954][ T37] audit: type=1326 audit(1756465239.848:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682dc7ebe9 code=0x7ffc0000 [ 814.409977][ T37] audit: type=1326 audit(1756465239.848:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f682dc7ebe9 code=0x7ffc0000 [ 814.409998][ T37] audit: type=1326 audit(1756465239.848:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682dc7ebe9 code=0x7ffc0000 [ 814.410020][ T37] audit: type=1326 audit(1756465239.848:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11929 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682dc7ebe9 code=0x7ffc0000 [ 814.655472][T11946] delete_channel: no stack [ 815.329852][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.776661][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.891070][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.970208][T11953] delete_channel: no stack [ 816.728056][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.592764][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.797112][T11971] overlayfs: missing 'lowerdir' [ 818.534677][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.751528][T10773] vhci_hcd: vhci_device speed not set [ 820.326760][T11985] delete_channel: no stack [ 821.286441][T11984] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 821.286566][T11984] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 821.384168][T11984] vhci_hcd vhci_hcd.0: Device attached [ 821.409540][T11987] vhci_hcd: connection closed [ 821.409908][ T8951] vhci_hcd: stop threads [ 821.409920][ T8951] vhci_hcd: release socket [ 821.409962][ T8951] vhci_hcd: disconnect device [ 821.467795][ T9] vhci_hcd: vhci_device speed not set [ 822.222586][T11993] delete_channel: no stack [ 823.267092][ T5928] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 823.440756][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 823.443754][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 823.445361][ T5928] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 823.445384][ T5928] usb 6-1: config 0 has no interface number 0 [ 823.445555][ T5928] usb 6-1: config 0 interface 63 has no altsetting 0 [ 823.449838][ T5928] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 823.449862][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.449880][ T5928] usb 6-1: Product: syz [ 823.449893][ T5928] usb 6-1: Manufacturer: syz [ 823.449905][ T5928] usb 6-1: SerialNumber: syz [ 823.455414][ T5928] usb 6-1: config 0 descriptor?? [ 823.805127][ T5928] kvaser_usb 6-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 823.817225][ T5928] usb 6-1: USB disconnect, device number 13 [ 823.896419][ T37] audit: type=1326 audit(1756465249.308:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 823.896477][ T37] audit: type=1326 audit(1756465249.308:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 823.896518][ T37] audit: type=1326 audit(1756465249.308:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 823.896555][ T37] audit: type=1326 audit(1756465249.308:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 823.896592][ T37] audit: type=1326 audit(1756465249.308:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 823.896629][ T37] audit: type=1326 audit(1756465249.308:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 823.896666][ T37] audit: type=1326 audit(1756465249.308:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 823.896702][ T37] audit: type=1326 audit(1756465249.308:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 824.752286][T12036] netlink: 'syz.5.1722': attribute type 4 has an invalid length. [ 825.246402][ T37] audit: type=1326 audit(1756465250.678:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 825.247067][ T37] audit: type=1326 audit(1756465250.688:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12014 comm="syz.3.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 825.514474][T12022] mmap: syz.3.1720 (12022) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 825.547513][T10773] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 825.654470][T12045] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 825.654535][T12045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 825.655029][T12045] vhci_hcd vhci_hcd.0: Device attached [ 826.177122][T10773] usb 6-1: Using ep0 maxpacket: 32 [ 826.190252][T12046] vhci_hcd: connection closed [ 826.266439][T10773] usb 6-1: unable to get BOS descriptor or descriptor too short [ 826.637535][T10773] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 826.637553][T10773] usb 6-1: config 0 has no interface number 0 [ 826.637585][T10773] usb 6-1: config 0 interface 63 has no altsetting 0 [ 826.666126][ T1471] vhci_hcd: stop threads [ 826.666146][ T1471] vhci_hcd: release socket [ 826.699759][ T1471] vhci_hcd: disconnect device [ 826.705668][T10773] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 826.705696][T10773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.705716][T10773] usb 6-1: Product: syz [ 826.705729][T10773] usb 6-1: Manufacturer: syz [ 826.705756][T10773] usb 6-1: SerialNumber: syz [ 826.743432][T10773] usb 6-1: config 0 descriptor?? [ 827.008631][T10773] kvaser_usb 6-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 827.035875][T10773] usb 6-1: USB disconnect, device number 14 [ 827.509295][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.647854][T12059] delete_channel: no stack [ 828.178066][T10773] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 828.353979][T10773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 828.353997][T10773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 828.393901][T10773] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 828.393929][T10773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.393941][T10773] usb 5-1: Product: syz [ 828.393948][T10773] usb 5-1: Manufacturer: syz [ 828.393954][T10773] usb 5-1: SerialNumber: syz [ 828.461529][T10773] usb 5-1: config 0 descriptor?? [ 829.165954][T10773] usb 5-1: USB disconnect, device number 19 [ 829.379678][T12051] udevd[12051]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 829.454747][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'. [ 832.007166][T12105] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 832.007223][T12105] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 832.007600][T12105] vhci_hcd vhci_hcd.0: Device attached [ 832.062629][T12106] vhci_hcd: connection closed [ 832.128881][ T1422] vhci_hcd: stop threads [ 832.128900][ T1422] vhci_hcd: release socket [ 832.128934][ T1422] vhci_hcd: disconnect device [ 833.099927][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 833.099944][ T37] audit: type=1326 audit(1756465258.548:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12113 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 833.099984][ T37] audit: type=1326 audit(1756465258.548:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12113 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 833.100006][ T37] audit: type=1326 audit(1756465258.548:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12113 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 833.100027][ T37] audit: type=1326 audit(1756465258.548:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12113 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 834.056894][ T37] audit: type=1326 audit(1756465259.488:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 834.056945][ T37] audit: type=1326 audit(1756465259.488:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 834.056982][ T37] audit: type=1326 audit(1756465259.488:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 834.057021][ T37] audit: type=1326 audit(1756465259.488:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 834.057059][ T37] audit: type=1326 audit(1756465259.488:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 834.057099][ T37] audit: type=1326 audit(1756465259.498:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12121 comm="syz.0.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 834.086503][T12126] syzkaller0: entered promiscuous mode [ 834.086530][T12126] syzkaller0: entered allmulticast mode [ 834.443577][T12129] netlink: 'syz.1.1743': attribute type 4 has an invalid length. [ 834.769727][T12133] delete_channel: no stack [ 838.718259][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 838.718275][ T37] audit: type=1326 audit(1756465264.168:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12164 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 838.719102][ T37] audit: type=1326 audit(1756465264.168:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12164 comm="syz.0.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 839.321536][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1756'. [ 840.026488][T12185] vlan2: entered allmulticast mode [ 840.026509][T12185] bond1: entered allmulticast mode [ 840.676699][ T37] audit: type=1326 audit(1756465266.118:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fc42ebe9 code=0x7ffc0000 [ 840.676752][ T37] audit: type=1326 audit(1756465266.118:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fc42ebe9 code=0x7ffc0000 [ 840.676891][ T37] audit: type=1326 audit(1756465266.118:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f89fc42ebe9 code=0x7ffc0000 [ 840.676938][ T37] audit: type=1326 audit(1756465266.118:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fc42ebe9 code=0x7ffc0000 [ 840.676977][ T37] audit: type=1326 audit(1756465266.118:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fc42ebe9 code=0x7ffc0000 [ 840.677013][ T37] audit: type=1326 audit(1756465266.118:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89fc42ebe9 code=0x7ffc0000 [ 840.677051][ T37] audit: type=1326 audit(1756465266.118:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fc42ebe9 code=0x7ffc0000 [ 840.677087][ T37] audit: type=1326 audit(1756465266.118:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12189 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89fc42ebe9 code=0x7ffc0000 [ 841.327143][T12198] tipc: Enabling of bearer rejected, failed to enable media [ 841.329254][T12196] syzkaller0: entered promiscuous mode [ 841.329271][T12196] syzkaller0: entered allmulticast mode [ 841.929782][T12211] syzkaller0: entered promiscuous mode [ 841.929800][T12211] syzkaller0: entered allmulticast mode [ 842.070194][T12213] netlink: 'syz.4.1761': attribute type 4 has an invalid length. [ 842.417774][T12218] delete_channel: no stack [ 844.376952][T11474] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 844.376987][T11474] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 849.472637][T12279] tipc: Enabling of bearer rejected, failed to enable media [ 849.477404][T12277] syzkaller0: entered promiscuous mode [ 849.477423][T12277] syzkaller0: entered allmulticast mode [ 850.204555][T12291] delete_channel: no stack [ 851.958457][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 851.958476][ T37] audit: type=1326 audit(1756465277.398:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12299 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 851.958574][ T37] audit: type=1326 audit(1756465277.398:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12299 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 851.958613][ T37] audit: type=1326 audit(1756465277.398:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12299 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 851.958651][ T37] audit: type=1326 audit(1756465277.398:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12299 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 851.958684][ T37] audit: type=1326 audit(1756465277.398:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12299 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 852.120810][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1783'. [ 855.917140][T12359] tipc: Enabling of bearer rejected, failed to enable media [ 857.335129][T12383] netlink: 'syz.4.1799': attribute type 4 has an invalid length. [ 858.157083][ T37] audit: type=1326 audit(1756465283.588:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.157665][ T37] audit: type=1326 audit(1756465283.608:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.158161][ T37] audit: type=1326 audit(1756465283.608:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.158505][ T37] audit: type=1326 audit(1756465283.608:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.159716][ T37] audit: type=1326 audit(1756465283.608:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.160178][ T37] audit: type=1326 audit(1756465283.608:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.160645][ T37] audit: type=1326 audit(1756465283.608:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.673162][ T37] audit: type=1326 audit(1756465284.118:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.673400][ T37] audit: type=1326 audit(1756465284.118:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 858.710402][ T37] audit: type=1326 audit(1756465284.148:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12389 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e0977ebe9 code=0x7ffc0000 [ 860.087103][ T993] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 860.238651][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 860.238669][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 860.240667][ T993] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 860.240682][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.240693][ T993] usb 4-1: Product: syz [ 860.240700][ T993] usb 4-1: Manufacturer: syz [ 860.240706][ T993] usb 4-1: SerialNumber: syz [ 860.243918][ T993] usb 4-1: config 0 descriptor?? [ 860.738157][ T993] usb 4-1: USB disconnect, device number 19 [ 860.933353][T12074] udevd[12074]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.423457][T12424] netlink: 'syz.3.1812': attribute type 4 has an invalid length. [ 861.803614][T12429] syzkaller0: entered promiscuous mode [ 861.803642][T12429] syzkaller0: entered allmulticast mode [ 861.813260][T12432] tipc: Enabling of bearer rejected, failed to enable media [ 863.039499][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1820'. [ 864.195150][ T37] kauditd_printk_skb: 37 callbacks suppressed [ 864.195168][ T37] audit: type=1326 audit(1756465289.638:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 864.195212][ T37] audit: type=1326 audit(1756465289.638:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 864.195247][ T37] audit: type=1326 audit(1756465289.638:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 864.195295][ T37] audit: type=1326 audit(1756465289.638:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 864.195328][ T37] audit: type=1326 audit(1756465289.638:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 864.195351][ T37] audit: type=1326 audit(1756465289.638:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 864.195372][ T37] audit: type=1326 audit(1756465289.638:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 864.195393][ T37] audit: type=1326 audit(1756465289.638:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 864.195415][ T37] audit: type=1326 audit(1756465289.638:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 865.628894][ T37] audit: type=1326 audit(1756465291.078:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 866.987315][T12502] tipc: Enabling of bearer rejected, failed to enable media [ 867.092992][T12504] syzkaller0: entered promiscuous mode [ 867.093011][T12504] syzkaller0: entered allmulticast mode [ 868.518404][T12528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1836'. [ 868.518439][T12528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1836'. [ 868.578455][T12528] syz_tun: entered promiscuous mode [ 868.606914][T12528] syz_tun: left promiscuous mode [ 870.170289][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.170365][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.184549][T12570] tipc: Enabling of bearer rejected, failed to enable media [ 871.345366][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 871.346482][ T37] audit: type=1326 audit(1756465296.788:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.348776][ T37] audit: type=1326 audit(1756465296.788:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.348902][ T37] audit: type=1326 audit(1756465296.788:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.348938][ T37] audit: type=1326 audit(1756465296.788:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.348982][ T37] audit: type=1326 audit(1756465296.788:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.349019][ T37] audit: type=1326 audit(1756465296.788:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.349058][ T37] audit: type=1326 audit(1756465296.788:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.349096][ T37] audit: type=1326 audit(1756465296.788:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.349134][ T37] audit: type=1326 audit(1756465296.788:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 871.851532][ T37] audit: type=1326 audit(1756465297.298:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12555 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2080b8ebe9 code=0x7ffc0000 [ 872.707168][T11474] Bluetooth: hci5: unexpected cc 0x0402 length: 4 > 1 [ 872.707193][T11474] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 873.265854][T12597] syzkaller0: entered promiscuous mode [ 873.265872][T12597] syzkaller0: entered allmulticast mode [ 875.147749][ T990] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 875.299815][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 875.299832][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 875.301999][ T990] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 875.302022][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.302038][ T990] usb 4-1: Product: syz [ 875.302058][ T990] usb 4-1: Manufacturer: syz [ 875.302070][ T990] usb 4-1: SerialNumber: syz [ 875.305592][ T990] usb 4-1: config 0 descriptor?? [ 875.647298][ T990] usb 4-1: USB disconnect, device number 20 [ 875.862896][T12622] udevd[12622]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.826866][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 876.826884][ T37] audit: type=1326 audit(1756465302.258:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 876.826931][ T37] audit: type=1326 audit(1756465302.258:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 876.826970][ T37] audit: type=1326 audit(1756465302.258:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 876.827006][ T37] audit: type=1326 audit(1756465302.258:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 876.827053][ T37] audit: type=1326 audit(1756465302.258:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 876.827076][ T37] audit: type=1326 audit(1756465302.258:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 876.827097][ T37] audit: type=1326 audit(1756465302.258:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 876.827120][ T37] audit: type=1326 audit(1756465302.258:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 876.827141][ T37] audit: type=1326 audit(1756465302.258:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 877.113832][ T37] audit: type=1326 audit(1756465302.378:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf4eaebe9 code=0x7ffc0000 [ 883.889283][T12749] tmpfs: Bad value for 'nr_inodes' [ 884.388900][T12761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1915'. [ 884.766196][T12766] capability: warning: `syz.5.1918' uses deprecated v2 capabilities in a way that may be insecure [ 886.491343][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1922'. [ 900.133683][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 900.279819][ C0] ------------[ cut here ]------------ [ 900.279843][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 900.279917][ C0] Modules linked in: [ 900.279964][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 900.279990][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 900.280010][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 900.280034][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 900.280054][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 900.280074][ C0] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 900.280090][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 900.280105][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 900.280119][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000002 [ 900.280134][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888027ded068 [ 900.280150][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 900.280168][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.280184][ C0] CR2: 0000001b31d1fff8 CR3: 0000000064636000 CR4: 00000000003526f0 [ 900.280202][ C0] Call Trace: [ 900.280211][ C0] [ 900.280238][ C0] ? __pfx_est_timer+0x10/0x10 [ 900.280275][ C0] call_timer_fn+0x17b/0x5f0 [ 900.280304][ C0] ? __pfx_est_timer+0x10/0x10 [ 900.280324][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 900.280348][ C0] ? call_timer_fn+0xbe/0x5f0 [ 900.280375][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 900.280410][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 900.280440][ C0] ? __pfx_est_timer+0x10/0x10 [ 900.280471][ C0] __run_timer_base+0x648/0x970 [ 900.280516][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 900.280562][ C0] run_timer_softirq+0xb7/0x180 [ 900.280590][ C0] handle_softirqs+0x22c/0x710 [ 900.280629][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 900.280669][ C0] run_ktimerd+0xcf/0x190 [ 900.280696][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 900.280723][ C0] ? schedule+0x91/0x360 [ 900.280756][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 900.280782][ C0] smpboot_thread_fn+0x542/0xa60 [ 900.280809][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 900.280847][ C0] kthread+0x711/0x8a0 [ 900.280881][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 900.280907][ C0] ? __pfx_kthread+0x10/0x10 [ 900.280944][ C0] ? __pfx_kthread+0x10/0x10 [ 900.280976][ C0] ret_from_fork+0x3fc/0x770 [ 900.281007][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 900.281042][ C0] ? __switch_to_asm+0x39/0x70 [ 900.281061][ C0] ? __switch_to_asm+0x33/0x70 [ 900.281080][ C0] ? __pfx_kthread+0x10/0x10 [ 900.281112][ C0] ret_from_fork_asm+0x1a/0x30 [ 900.281153][ C0] [ 900.281164][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 900.281187][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 900.281216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 900.281228][ C0] Call Trace: [ 900.281235][ C0] [ 900.281241][ C0] dump_stack_lvl+0x99/0x250 [ 900.281263][ C0] ? __asan_memcpy+0x40/0x70 [ 900.281288][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 900.281324][ C0] ? __pfx__printk+0x10/0x10 [ 900.281367][ C0] vpanic+0x281/0x750 [ 900.281397][ C0] ? __pfx__printk+0x10/0x10 [ 900.281425][ C0] ? __pfx_vpanic+0x10/0x10 [ 900.281475][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 900.281535][ C0] panic+0xb9/0xc0 [ 900.281563][ C0] ? __pfx_panic+0x10/0x10 [ 900.281612][ C0] __warn+0x31b/0x4b0 [ 900.281640][ C0] ? est_timer+0x6dc/0x9f0 [ 900.281664][ C0] ? est_timer+0x6dc/0x9f0 [ 900.281686][ C0] report_bug+0x2be/0x4f0 [ 900.281711][ C0] ? est_timer+0x6dc/0x9f0 [ 900.281734][ C0] ? est_timer+0x6dc/0x9f0 [ 900.281756][ C0] ? est_timer+0x6de/0x9f0 [ 900.281778][ C0] handle_bug+0x84/0x160 [ 900.281809][ C0] exc_invalid_op+0x1a/0x50 [ 900.281838][ C0] asm_exc_invalid_op+0x1a/0x20 [ 900.281859][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 900.281881][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 900.281899][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 900.281918][ C0] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801ae85940 [ 900.281934][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 900.281948][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 900.281963][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000002 [ 900.281987][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888027ded068 [ 900.282012][ C0] ? est_timer+0x6db/0x9f0 [ 900.282061][ C0] ? __pfx_est_timer+0x10/0x10 [ 900.282097][ C0] call_timer_fn+0x17b/0x5f0 [ 900.282123][ C0] ? __pfx_est_timer+0x10/0x10 [ 900.282144][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 900.282167][ C0] ? call_timer_fn+0xbe/0x5f0 [ 900.282194][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 900.282228][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 900.282257][ C0] ? __pfx_est_timer+0x10/0x10 [ 900.282282][ C0] __run_timer_base+0x648/0x970 [ 900.282327][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 900.282374][ C0] run_timer_softirq+0xb7/0x180 [ 900.282401][ C0] handle_softirqs+0x22c/0x710 [ 900.282439][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 900.282484][ C0] run_ktimerd+0xcf/0x190 [ 900.282513][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 900.282539][ C0] ? schedule+0x91/0x360 [ 900.282573][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 900.282597][ C0] smpboot_thread_fn+0x542/0xa60 [ 900.282625][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 900.282662][ C0] kthread+0x711/0x8a0 [ 900.282697][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 900.282722][ C0] ? __pfx_kthread+0x10/0x10 [ 900.282760][ C0] ? __pfx_kthread+0x10/0x10 [ 900.282792][ C0] ret_from_fork+0x3fc/0x770 [ 900.282823][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 900.282858][ C0] ? __switch_to_asm+0x39/0x70 [ 900.282878][ C0] ? __switch_to_asm+0x33/0x70 [ 900.282896][ C0] ? __pfx_kthread+0x10/0x10 [ 900.282929][ C0] ret_from_fork_asm+0x1a/0x30 [ 900.282969][ C0] [ 900.283234][ C0] Kernel Offset: disabled