last executing test programs: 4m38.812733016s ago: executing program 0 (id=1004): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x3c}}, 0x0) 4m38.294357607s ago: executing program 0 (id=1010): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x4, {{0xa, 0x4e24, 0xffffffc0, @mcast2, 0x22}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1, 0xbdf}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) 4m37.997738598s ago: executing program 0 (id=1013): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) 4m37.495396149s ago: executing program 0 (id=1017): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 4m37.136316682s ago: executing program 0 (id=1021): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000500)="3327f98e", 0x4}, {&(0x7f0000001540)="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", 0x27b}], 0x2) pread64(r0, &(0x7f0000032180)=""/102382, 0x18fee, 0x200) 4m30.999403102s ago: executing program 0 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 4m30.270813485s ago: executing program 32 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 2m48.286028721s ago: executing program 3 (id=1972): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000002480)=ANY=[@ANYBLOB="1201000200000040110750050000010200010902", @ANYBLOB], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/92, 0x5c}, {0x0}], 0x2, 0x8, 0x5) 2m41.865718696s ago: executing program 3 (id=2025): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000001c0)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m41.421228989s ago: executing program 3 (id=2031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) clock_adjtime(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000500)) 2m40.816082638s ago: executing program 3 (id=2039): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 2m40.578174107s ago: executing program 3 (id=2043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "697d061785d2bb93", "55d40d6dc3ad720dec9926795dea7162", "989ed40b", "f80ae9c6d8daef8b"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) 2m39.327932669s ago: executing program 3 (id=2052): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 2m38.74087514s ago: executing program 33 (id=2052): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 1m20.853904656s ago: executing program 1 (id=2763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) 1m20.541055785s ago: executing program 1 (id=2769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004b80)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ff00a80b4acc528162ecc458a26a2cfa", 0x10}], 0x1, 0x0, 0x0, 0x4084}], 0x1, 0x40808c0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) 1m19.498552317s ago: executing program 1 (id=2783): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4200}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) io_submit(r1, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101381) 1m18.292205899s ago: executing program 1 (id=2798): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x34db00, 0x0) r1 = dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, 0x0, 0x4040) 1m18.110463653s ago: executing program 1 (id=2801): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, &(0x7f00000000c0)={r1, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r2, 0xc}, 0x8) 1m17.926467388s ago: executing program 1 (id=2804): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 1m2.840652201s ago: executing program 34 (id=2804): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 37.410043639s ago: executing program 5 (id=3306): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040a01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0x8001, 0xffffdfffffffffff, 0x20000000000000a, 0xff7ffffffffffffc, 0xff, 0x61, 0x2f, 0x1, 0x2}) 34.295911643s ago: executing program 5 (id=3345): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 32.877453131s ago: executing program 5 (id=3366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 32.63909921s ago: executing program 5 (id=3369): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 32.378416498s ago: executing program 5 (id=3373): syz_80211_inject_frame(0x0, 0x0, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x24004098) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0) 31.226016343s ago: executing program 5 (id=3386): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, 0x0) 30.8046356s ago: executing program 35 (id=3386): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, 0x0) 4.163745854s ago: executing program 7 (id=3634): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 4.032294123s ago: executing program 2 (id=3635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000000c0)=0x101, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x800, 0x0) read(r1, &(0x7f0000000200), 0x1000) 3.915277779s ago: executing program 7 (id=3639): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 3.701527034s ago: executing program 2 (id=3640): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x13, r0, 0x0) 3.700392275s ago: executing program 7 (id=3641): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 3.483555416s ago: executing program 2 (id=3644): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, &(0x7f00000032c0)={0x77359400}) 3.482178569s ago: executing program 7 (id=3645): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="c6831ed8838056e08cc5b459bfef3e6fed75d2901ee87b68bbb4a231d4871bc6e77e9245dcb9521274e052fde08c283e42b57cb57e73461c25ac7db970eac952908e2bad01079f62627fcd5eabb19db5738dde27fa95765d09a66d1110d93c0d9e75d48bf907e7c72867f0c90581894e8d01788913b71b98becde4fc5200378b7c6bc5af0e1d3aa69ea60f7264bdfd21af827e2d5ce29efbffa7715a5ca9d96985dbe6debb52c4f8b45ea0", 0xab}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}, {&(0x7f00000007c0)=""/137, 0x89}], 0x2}, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/44, 0x2c}], 0x1) 3.298016429s ago: executing program 2 (id=3647): r0 = syz_open_dev$ublk_chdev(0x0, 0x0, 0x2) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000340)={0x0, 0xd1fa, 0x80, 0x1, 0x343}, 0x0, 0x4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 3.289375138s ago: executing program 7 (id=3648): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.978532843s ago: executing program 7 (id=3652): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.48900367s ago: executing program 2 (id=3655): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000240)="580000001500add427323b472545b45602117fffffff81000e224e21e0000002925aa80020007b00090080007f000009e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.23873827s ago: executing program 2 (id=3658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.012817532s ago: executing program 4 (id=3660): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = open(&(0x7f0000000240)='.\x00', 0x12000, 0x95) flock(r2, 0x6) mknod$loop(&(0x7f00000000c0)='./file7\x00', 0x2000, 0x1) 1.712264922s ago: executing program 4 (id=3663): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x80, 0xfffffffe, 0x2f8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.005411767s ago: executing program 4 (id=3670): ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r0, 0x0, 0x0) read(r0, &(0x7f0000000100), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0xc138fd00, &(0x7f0000000200)="04") 852.925805ms ago: executing program 4 (id=3672): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f0000000880), 0x4) fcntl$addseals(r2, 0x409, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 574.292853ms ago: executing program 6 (id=3674): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004051}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 539.48425ms ago: executing program 6 (id=3675): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 497.288419ms ago: executing program 4 (id=3676): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0xffffffff, 0x11812410, 0x0, 0x200, 0x81, 0xfffffffd}}, 0x50) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 406.461767ms ago: executing program 6 (id=3677): r0 = io_uring_setup(0x6508, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0x3d9}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 377.158467ms ago: executing program 6 (id=3678): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)="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", 0x222}], 0x1}}], 0x2, 0x0) 234.598551ms ago: executing program 4 (id=3679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9df19c0df083c6e240d000000000000380100", "15f0ff80", "066580001e00"}, 0x38) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 155.516616ms ago: executing program 6 (id=3680): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x9, 0x1}, &(0x7f0000000040)=0x8) 0s ago: executing program 6 (id=3681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): b: will use the device's hardware PID filter (table count: 16). [ 289.397211][ T199] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 289.397252][ T199] usb 4-1: media controller created [ 289.436118][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.602221][ T199] dvb-usb: bulk message failed: -22 (6/0) [ 289.602308][ T199] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 289.608141][ T199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 289.689467][ T199] dvb-usb: schedule remote query interval to 150 msecs. [ 289.689493][ T199] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 289.758039][ T199] usb 4-1: USB disconnect, device number 16 [ 289.876507][ T199] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 289.957155][ T9445] CacheFiles: Failed to register: -2 [ 290.459413][ T199] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 290.632241][ T199] usb 3-1: config 0 has no interfaces? [ 290.632282][ T199] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 290.632307][ T199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.676632][ T199] usb 3-1: config 0 descriptor?? [ 291.210838][ T199] usb 3-1: USB disconnect, device number 20 [ 291.907362][ T9491] netlink: 'syz.2.1472': attribute type 16 has an invalid length. [ 291.907385][ T9491] netlink: 'syz.2.1472': attribute type 17 has an invalid length. [ 291.965205][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.992544][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.478905][ T9485] nvme nvme0: rdma_resolve_addr failed (-19). [ 294.463696][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'. [ 294.524098][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'. [ 295.604064][ T5728] logitech-hidpp-device 0005:046D:B012.0013: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 295.683544][ T199] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 295.777520][ T9590] fido_id[9590]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 295.919287][ T199] usb 3-1: Using ep0 maxpacket: 8 [ 295.921232][ T199] usb 3-1: config 0 has an invalid interface number: 62 but max is 0 [ 295.921353][ T199] usb 3-1: config 0 has no interface number 0 [ 295.921404][ T199] usb 3-1: config 0 interface 62 altsetting 13 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 295.921436][ T199] usb 3-1: config 0 interface 62 has no altsetting 0 [ 295.923840][ T199] usb 3-1: New USB device found, idVendor=1608, idProduct=0304, bcdDevice=d2.96 [ 295.923872][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.923895][ T199] usb 3-1: Product: syz [ 295.923912][ T199] usb 3-1: Manufacturer: syz [ 295.923929][ T199] usb 3-1: SerialNumber: syz [ 296.022504][ T199] usb 3-1: config 0 descriptor?? [ 296.319574][ T199] io_ti 3-1:0.62: required endpoints missing [ 296.378270][ T9605] netlink: 'syz.5.1521': attribute type 6 has an invalid length. [ 296.420953][ T199] usb 3-1: USB disconnect, device number 21 [ 296.566973][ T9613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1525'. [ 297.088286][ T9629] netlink: 'syz.4.1531': attribute type 16 has an invalid length. [ 297.088303][ T9629] netlink: 'syz.4.1531': attribute type 17 has an invalid length. [ 297.202724][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1532'. [ 298.027553][ T9651] loop8: detected capacity change from 0 to 8 [ 298.052255][ T9651] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 298.052287][ T9651] loop8: partition table partially beyond EOD, truncated [ 298.052558][ T9651] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 298.381176][ T9659] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 298.646120][ T5584] udevd[5584]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 298.749364][ T5900] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 298.809319][ T36] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 298.856012][ T9665] loop8: detected capacity change from 0 to 7 [ 298.859425][ T9665] Dev loop8: unable to read RDB block 7 [ 298.859488][ T9665] loop8: unable to read partition table [ 298.859727][ T9665] loop8: partition table beyond EOD, truncated [ 298.859748][ T9665] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 298.921913][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 298.921964][ T5900] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 298.921987][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.979219][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 298.979656][ T5900] usb 6-1: config 0 descriptor?? [ 298.981287][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.981308][ T36] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.981339][ T36] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.981359][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.988834][ T9656] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 299.054351][ T36] usb 5-1: config 0 descriptor?? [ 299.318377][ T9672] netlink: 'syz.3.1551': attribute type 16 has an invalid length. [ 299.318400][ T9672] netlink: 'syz.3.1551': attribute type 17 has an invalid length. [ 299.475856][ T199] usb 5-1: USB disconnect, device number 19 [ 299.491538][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.510214][ T5900] hid_parser_main: 852 callbacks suppressed [ 299.510238][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510272][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510300][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510329][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510357][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510386][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510415][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510444][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510474][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.510501][ T5900] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 299.723808][ T5900] usb 6-1: USB disconnect, device number 6 [ 300.337876][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 300.346526][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1557'. [ 300.491510][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 300.491534][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.559193][ T10] usbtest 4-1:1.0: Linux gadget zero [ 300.559217][ T10] usbtest 4-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 300.689616][ T9692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.319279][ T36] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 302.409558][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 302.471657][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.471695][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.471746][ T36] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 302.471773][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.501310][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'. [ 302.559059][ T36] usb 2-1: config 0 descriptor?? [ 302.609287][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 302.626913][ T31] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.627012][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.627052][ T31] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 302.627080][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.695031][ T31] usb 6-1: config 0 descriptor?? [ 303.122707][ T36] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 303.127444][ T31] belkin 0003:050D:3201.0016: global environment stack underflow [ 303.127467][ T31] belkin 0003:050D:3201.0016: item 0 4 1 11 parsing failed [ 303.156229][ T31] belkin 0003:050D:3201.0016: parse failed [ 303.157865][ T31] belkin 0003:050D:3201.0016: probe with driver belkin failed with error -22 [ 303.180739][ T36] playstation 0003:054C:0DF2.0015: Invalid byte count transferred, expected 20 got 0 [ 303.180777][ T36] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense pairing info: -22 [ 303.180830][ T36] playstation 0003:054C:0DF2.0015: Failed to get MAC address from DualSense [ 303.180847][ T36] playstation 0003:054C:0DF2.0015: Failed to create dualsense. [ 303.243529][ T36] playstation 0003:054C:0DF2.0015: probe with driver playstation failed with error -22 [ 303.365702][ T36] usb 6-1: USB disconnect, device number 7 [ 303.488190][ T5900] usb 4-1: USB disconnect, device number 17 [ 303.493715][ T5600] usb 2-1: USB disconnect, device number 20 [ 304.188560][ T9776] netlink: 'syz.1.1591': attribute type 16 has an invalid length. [ 304.188586][ T9776] netlink: 'syz.1.1591': attribute type 17 has an invalid length. [ 304.275637][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.288652][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.314522][ T5600] kernel read not supported for file /video7 (pid: 5600 comm: kworker/0:4) [ 304.478984][ T9781] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 305.381213][ T9811] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 305.484321][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 305.484350][ T9815] bond0: Unable to set down delay as MII monitoring is disabled [ 305.596697][ T9819] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1614'. [ 305.933731][ T9825] input: syz1 as /devices/virtual/input/input29 [ 306.189513][ T9834] CIFS: Attempting to mount //127.0.0.1/share [ 306.789267][ T5900] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 306.941732][ T5900] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 306.941763][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.941787][ T5900] usb 3-1: config 0 has no interface number 0 [ 306.941834][ T5900] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.946896][ T5900] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 306.946927][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.946950][ T5900] usb 3-1: Product: syz [ 306.946965][ T5900] usb 3-1: Manufacturer: syz [ 306.946981][ T5900] usb 3-1: SerialNumber: syz [ 307.037315][ T9834] CIFS: VFS: Error connecting to socket. Aborting operation. [ 307.037533][ T9834] CIFS: VFS: cifs_mount failed w/return code = -4 [ 307.074385][ T5900] usb 3-1: config 0 descriptor?? [ 307.138101][ T5900] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input30 [ 307.362978][ T9868] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.446934][ T5900] usb 3-1: USB disconnect, device number 22 [ 308.099235][ T36] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 308.293738][ T36] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 308.293771][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.349008][ T36] usb 2-1: config 0 descriptor?? [ 308.363033][ T36] pwc: Creative Labs Webcam 5 detected. [ 308.981183][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 309.203155][ T36] pwc: recv_control_msg error -71 req 04 val 1600 [ 309.203771][ T36] pwc: recv_control_msg error -71 req 02 val 2c00 [ 309.204250][ T36] pwc: recv_control_msg error -71 req 04 val 1000 [ 309.204724][ T36] pwc: recv_control_msg error -71 req 04 val 1300 [ 309.205812][ T36] pwc: recv_control_msg error -71 req 04 val 1400 [ 309.206300][ T36] pwc: recv_control_msg error -71 req 02 val 2000 [ 309.206783][ T36] pwc: recv_control_msg error -71 req 02 val 2100 [ 309.233359][ T36] pwc: recv_control_msg error -71 req 06 val 0600 [ 309.263855][ T36] pwc: recv_control_msg error -71 req 04 val 1500 [ 309.271660][ T36] pwc: recv_control_msg error -71 req 02 val 2500 [ 309.272164][ T36] pwc: recv_control_msg error -71 req 02 val 2400 [ 309.272658][ T36] pwc: recv_control_msg error -71 req 02 val 2600 [ 309.273147][ T36] pwc: recv_control_msg error -71 req 02 val 2900 [ 309.274482][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 309.275158][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 309.275634][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 309.276153][ T36] pwc: Failed to power off camera (-71) [ 309.370504][ T36] pwc: Registered as video103. [ 309.378097][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 309.416066][ T36] usb 2-1: USB disconnect, device number 21 [ 309.919247][ T5900] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 310.080767][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 310.085543][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.085573][ T5900] usb 3-1: config 0 has no interfaces? [ 310.118737][ T5900] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 310.118771][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.118795][ T5900] usb 3-1: Product: syz [ 310.118811][ T5900] usb 3-1: Manufacturer: syz [ 310.118828][ T5900] usb 3-1: SerialNumber: syz [ 310.181546][ T5900] usb 3-1: config 0 descriptor?? [ 310.276555][ T9910] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 310.469344][ T5905] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 310.620496][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 310.622664][ T5905] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 310.622684][ T5905] usb 6-1: config 0 has no interface number 0 [ 310.625454][ T5905] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 310.625475][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.625491][ T5905] usb 6-1: Product: syz [ 310.625502][ T5905] usb 6-1: Manufacturer: syz [ 310.625512][ T5905] usb 6-1: SerialNumber: syz [ 310.683896][ T5905] usb 6-1: config 0 descriptor?? [ 310.700597][ T5905] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 310.700640][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.701282][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.741830][ T5900] usb 3-1: USB disconnect, device number 23 [ 310.935560][ T5905] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 310.961174][ T5905] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 311.393817][ T5600] usb 6-1: USB disconnect, device number 8 [ 311.394180][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 311.467052][ T5600] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 311.543797][ T5600] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 311.544775][ T5600] quatech2 6-1:0.51: device disconnected [ 311.909588][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 312.063029][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 312.063070][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 312.063124][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.063150][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.195909][ T9943] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.244207][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.189509][ T10] usb 4-1: USB disconnect, device number 18 [ 313.869343][ T36] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 314.024758][ T36] usb 5-1: not running at top speed; connect to a high speed hub [ 314.037839][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.037898][ T36] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE [ 314.037998][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 4 [ 314.038030][ T36] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 314.090367][ T36] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 314.090404][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 314.090429][ T36] usb 5-1: Product: syz [ 314.090447][ T36] usb 5-1: Manufacturer: syz [ 314.155073][ T36] sisusb 5-1:1.0: Invalid USB2VGA device [ 314.155115][ T36] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 314.459801][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 314.654789][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.664641][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 314.664724][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.664781][ T10] usb 2-1: Product: syz [ 314.664823][ T10] usb 2-1: Manufacturer: syz [ 314.664908][ T10] usb 2-1: SerialNumber: syz [ 314.939331][ T10] hackrf 2-1:1.0: usb_control_msg() failed -32 request 0e [ 314.939362][ T10] hackrf 2-1:1.0: Could not detect board [ 314.939425][ T10] hackrf 2-1:1.0: probe with driver hackrf failed with error -32 [ 315.006197][ T36] usb 5-1: USB disconnect, device number 20 [ 315.236333][T10012] ip6erspan0: entered allmulticast mode [ 315.999470][ T36] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 316.159909][ T36] usb 4-1: Using ep0 maxpacket: 8 [ 316.176674][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.176702][ T36] usb 4-1: config 0 has no interfaces? [ 316.195373][ T36] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 316.195405][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.195428][ T36] usb 4-1: Product: syz [ 316.195444][ T36] usb 4-1: Manufacturer: syz [ 316.195460][ T36] usb 4-1: SerialNumber: syz [ 316.238924][ T36] usb 4-1: config 0 descriptor?? [ 316.699432][T10024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.702705][T10024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.713442][ T5900] usb 4-1: USB disconnect, device number 19 [ 316.926102][T10051] netlink: 'syz.2.1715': attribute type 3 has an invalid length. [ 317.129285][ T36] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 317.188203][ T5900] usb 2-1: USB disconnect, device number 22 [ 317.245366][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.245440][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.289481][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 317.310076][ T36] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 317.310106][ T36] usb 6-1: config 0 has no interface number 0 [ 317.318180][ T36] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 317.318212][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.318234][ T36] usb 6-1: Product: syz [ 317.318251][ T36] usb 6-1: Manufacturer: syz [ 317.318267][ T36] usb 6-1: SerialNumber: syz [ 317.374247][ T36] usb 6-1: config 0 descriptor?? [ 317.790386][ T36] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 317.790422][ T36] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 318.195478][ T36] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 318.195799][ T36] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 318.273448][ T36] usb 6-1: USB disconnect, device number 9 [ 318.341960][T10081] netlink: 3072 bytes leftover after parsing attributes in process `syz.1.1727'. [ 318.341990][T10081] netlink: 198664 bytes leftover after parsing attributes in process `syz.1.1727'. [ 319.110705][T10102] netlink: 'syz.5.1738': attribute type 1 has an invalid length. [ 321.477529][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 321.992063][T10182] input: syz1 as /devices/virtual/input/input32 [ 322.269196][ T5728] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 322.426984][ T5728] usb 5-1: unable to get BOS descriptor or descriptor too short [ 322.439688][ T5728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.460406][ T5728] usb 5-1: string descriptor 0 read error: -22 [ 322.460583][ T5728] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 322.460615][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.731734][ T5728] usb 5-1: USB disconnect, device number 21 [ 323.105517][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1788'. [ 323.548397][T10227] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 323.946550][T10240] loop8: detected capacity change from 0 to 8 [ 324.013829][T10240] Dev loop8: unable to read RDB block 8 [ 324.013875][T10240] loop8: unable to read partition table [ 324.014116][T10240] loop8: partition table beyond EOD, truncated [ 324.015657][T10240] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 324.366033][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1804'. [ 324.650853][T10265] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.727566][T10267] netlink: 'syz.4.1814': attribute type 20 has an invalid length. [ 324.727590][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 324.801071][T10272] netlink: 'syz.4.1814': attribute type 20 has an invalid length. [ 324.801095][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 324.934249][ T6144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.935310][ T6135] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.935358][ T6135] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.935400][ T6135] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.003641][T10276] binder: 10275:10276 ioctl c0306201 200000000480 returned -14 [ 325.073559][ T38] audit: type=1326 audit(1785901184.180:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.074258][ T38] audit: type=1326 audit(1785901184.180:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.074317][ T38] audit: type=1326 audit(1785901184.180:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.074366][ T38] audit: type=1326 audit(1785901184.180:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.074416][ T38] audit: type=1326 audit(1785901184.180:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.074513][ T38] audit: type=1326 audit(1785901184.180:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.074666][ T38] audit: type=1326 audit(1785901184.180:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.075094][ T38] audit: type=1326 audit(1785901184.180:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.075269][ T38] audit: type=1326 audit(1785901184.180:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.076920][ T38] audit: type=1326 audit(1785901184.180:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.1.1817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b6a76e019 code=0x7ffc0000 [ 325.699209][ T36] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 325.849205][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 325.851890][ T36] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 325.851920][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.889378][ T5728] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 325.919677][ T36] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 326.063162][ T5728] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.063191][ T5728] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.063309][ T5728] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.067650][ T5728] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.067681][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.067766][ T5728] usb 6-1: Product: syz [ 326.067785][ T5728] usb 6-1: Manufacturer: syz [ 326.067801][ T5728] usb 6-1: SerialNumber: syz [ 326.171464][ T5728] cdc_ncm 6-1:1.0: skipping garbage [ 326.171493][ T5728] cdc_ncm 6-1:1.0: invalid descriptor buffer length [ 326.171511][ T5728] usb 6-1: selecting invalid altsetting 1 [ 326.797705][ T5728] usb 6-1: selecting invalid altsetting 1 [ 326.797778][ T5728] cdc_ncm 6-1:1.0: bind() failure [ 326.843370][ T10] hid_parser_main: 475 callbacks suppressed [ 326.843391][ T10] hid-generic 0005:0C45:1010.0017: unknown main item tag 0x0 [ 326.968289][ T36] gspca_nw80x: reg_w err -71 [ 326.968376][ T36] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 327.053547][ T5900] usb 6-1: USB disconnect, device number 10 [ 327.118733][ T36] usb 4-1: USB disconnect, device number 20 [ 327.262600][ T10] hid-generic 0005:0C45:1010.0017: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 327.355963][T10321] fido_id[10321]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 328.080126][T10342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.302955][ T5900] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 328.473829][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.473867][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.473909][ T5900] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 328.473936][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.653778][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 328.653826][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 328.772288][ T5900] usb 4-1: config 0 descriptor?? [ 329.234317][ T5900] playstation 0003:054C:0BA0.0018: unknown main item tag 0x0 [ 329.245063][ T5900] playstation 0003:054C:0BA0.0018: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 329.316232][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1856'. [ 329.430658][ T5900] playstation 0003:054C:0BA0.0018: Invalid byte count transferred, expected 16 got 0 [ 329.430691][ T5900] playstation 0003:054C:0BA0.0018: Failed to retrieve DualShock4 pairing info: -22 [ 329.430745][ T5900] playstation 0003:054C:0BA0.0018: Failed to get MAC address from DualShock4 [ 329.430763][ T5900] playstation 0003:054C:0BA0.0018: Failed to create dualshock4. [ 329.478575][ T5900] playstation 0003:054C:0BA0.0018: probe with driver playstation failed with error -22 [ 329.512213][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 329.660062][ T36] usb 4-1: USB disconnect, device number 21 [ 329.999507][T10386] loop8: detected capacity change from 0 to 7 [ 330.018867][T10386] Dev loop8: unable to read RDB block 7 [ 330.018911][T10386] loop8: unable to read partition table [ 330.022237][T10386] loop8: partition table beyond EOD, truncated [ 330.025306][T10386] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 330.420696][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 330.569289][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 330.572298][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 330.572348][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.572380][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 330.572426][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 330.572452][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.653003][ T9] usb 3-1: config 0 descriptor?? [ 330.683329][ T9] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 331.150181][ T9] wacom 0003:056A:00FB.0019: unknown main item tag 0x0 [ 331.150218][ T9] wacom 0003:056A:00FB.0019: unknown main item tag 0x0 [ 331.150246][ T9] wacom 0003:056A:00FB.0019: unknown main item tag 0x0 [ 331.150273][ T9] wacom 0003:056A:00FB.0019: unknown main item tag 0x0 [ 331.150301][ T9] wacom 0003:056A:00FB.0019: unknown main item tag 0x0 [ 331.150329][ T9] wacom 0003:056A:00FB.0019: unknown main item tag 0x0 [ 331.150355][ T9] wacom 0003:056A:00FB.0019: unknown main item tag 0x0 [ 331.150383][ T9] wacom 0003:056A:00FB.0019: unknown main item tag 0x0 [ 331.150548][ T9] wacom 0003:056A:00FB.0019: item fetching failed at offset 36/40 [ 331.151281][ T9] wacom 0003:056A:00FB.0019: parse failed [ 331.151411][ T9] wacom 0003:056A:00FB.0019: probe with driver wacom failed with error -22 [ 331.311372][T10419] Invalid ELF header magic: != ELF [ 331.375729][ T5707] usb 3-1: USB disconnect, device number 24 [ 332.554691][ T5905] kernel read not supported for file /video9 (pid: 5905 comm: kworker/1:7) [ 332.952727][ T5905] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 333.153871][ T5905] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 333.153906][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.153929][ T5905] usb 3-1: Product: syz [ 333.153945][ T5905] usb 3-1: Manufacturer: syz [ 333.153963][ T5905] usb 3-1: SerialNumber: syz [ 334.234310][T10501] loop8: detected capacity change from 0 to 8 [ 334.264779][T10501] Dev loop8: unable to read RDB block 8 [ 334.264826][T10501] loop8: unable to read partition table [ 334.265149][T10501] loop8: partition table beyond EOD, truncated [ 334.265185][T10501] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 334.849328][ T5707] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 335.023742][ T5707] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 335.023853][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.061317][ T5707] usb 5-1: config 0 descriptor?? [ 335.090110][ T5905] usb 3-1: probing VID:PID(0424:012C) [ 335.097250][ T5707] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 335.112500][ T5905] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 335.112529][ T5905] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 335.113116][ T5905] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 335.113141][ T5905] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 335.113163][ T5905] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 335.272532][ T5905] vub300 3-1:1.0: probe with driver vub300 failed with error -71 [ 335.421858][ T5905] usb 3-1: USB disconnect, device number 25 [ 335.541350][ T5707] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 335.945156][ T5707] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 336.165892][ T5707] usb 5-1: USB disconnect, device number 22 [ 336.779264][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 336.825174][T10555] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 336.825213][T10555] CIFS: Attempting to mount //127.0.0.1/share [ 336.951594][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.951624][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 336.951663][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 336.951690][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.957513][ T10] usb 4-1: config 0 descriptor?? [ 336.964316][T10561] futex_wake_op: syz.2.1935 tries to shift op by 144; fix this program [ 337.131965][T10566] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 337.161256][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 337.189370][T10549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1930'. [ 337.329320][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 337.331313][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.331346][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.331367][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.331406][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.331429][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.399659][ T9] usb 5-1: config 0 descriptor?? [ 337.491880][ T5707] usb 4-1: USB disconnect, device number 22 [ 337.694647][T10555] CIFS: VFS: Error connecting to socket. Aborting operation. [ 337.694771][T10555] CIFS: VFS: cifs_mount failed w/return code = -4 [ 337.849425][ T9] hid_parser_main: 13 callbacks suppressed [ 337.849451][ T9] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 337.849485][ T9] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 337.849513][ T9] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 337.854998][ T9] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 337.855034][ T9] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 337.856771][ T9] microsoft 0003:045E:07DA.001A: unsupported Resolution Multiplier 0 [ 337.912066][ T9] microsoft 0003:045E:07DA.001A: implement() called with n (56) > 32! (kworker/0:0) [ 338.079191][ T9] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 338.079230][ T9] microsoft 0003:045E:07DA.001A: no inputs found [ 338.079245][ T9] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 338.159329][ T9] usb 5-1: USB disconnect, device number 23 [ 338.399406][ T5707] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 338.418643][T10587] fido_id[10587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 338.489347][ T36] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 338.555302][ T5707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.555341][ T5707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.555382][ T5707] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 338.555411][ T5707] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 338.612078][ T5707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.612101][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.612116][ T5707] usb 6-1: Product: syz [ 338.612127][ T5707] usb 6-1: Manufacturer: syz [ 338.612138][ T5707] usb 6-1: SerialNumber: syz [ 338.745624][ T36] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 338.745718][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.916404][T10584] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 338.916773][T10584] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.228236][ T36] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 339.259222][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 339.416418][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 339.416450][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.556784][T10584] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.557011][T10584] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.667688][ T36] wwan wwan0: port wwan0qmi0 attached [ 339.860554][ T5707] cdc_ncm 6-1:1.0: bind() failure [ 340.030650][ T5707] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 340.036118][ T5707] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 340.070776][ T5707] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 340.107032][ T5707] usb 6-1: USB disconnect, device number 11 [ 340.344075][ T5728] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 340.533201][ T5728] usb 4-1: Using ep0 maxpacket: 16 [ 340.539596][ T5728] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 340.539627][ T5728] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 340.539651][ T5728] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 340.539693][ T5728] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 340.539775][ T5728] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 340.539800][ T5728] usb 4-1: config 0 has no interface number 0 [ 340.539890][ T5728] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 340.539957][ T5728] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 340.539984][ T5728] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 340.540111][ T5728] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.540143][ T5728] usb 4-1: config 0 interface 125 has no altsetting 0 [ 340.540164][ T5728] usb 4-1: config 0 interface 125 has no altsetting 2 [ 340.593059][ T5728] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 340.593095][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.593178][ T5728] usb 4-1: Product: syz [ 340.593381][ T5728] usb 4-1: Manufacturer: syz [ 340.593401][ T5728] usb 4-1: SerialNumber: syz [ 340.801788][ T5905] usb 5-1: USB disconnect, device number 24 [ 340.844323][ T5728] usb 4-1: config 0 descriptor?? [ 340.886739][ T5728] usb 4-1: selecting invalid altsetting 2 [ 341.137715][ T36] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 7a:a2:35:8c:7e:8e [ 341.216853][ T36] usb 3-1: USB disconnect, device number 26 [ 341.248861][T10634] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 341.306122][ T36] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 341.335467][T10635] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 341.489925][ C1] usb 4-1: async_complete: urb error -71 [ 341.490011][ C1] usb 4-1: async_complete: urb error -71 [ 341.490079][ C1] usb 4-1: async_complete: urb error -71 [ 341.511119][ T5728] get_1284_register: usb error -71 [ 341.588608][T10635] 9p: Bad value for 'rfdno' [ 341.672653][ T5728] usb 4-1: USB disconnect, device number 23 [ 341.900935][T10632] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 341.900956][T10632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 342.120022][T10632] vhci_hcd vhci_hcd.0: Device attached [ 342.349248][ T5905] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 342.539235][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 342.656358][ T36] wwan wwan0: port wwan0qmi0 disconnected [ 342.692474][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 342.696295][ T10] usb 4-1: config 0 has no interfaces? [ 342.721412][ T10] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 342.721445][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 342.721468][ T10] usb 4-1: Product: syz [ 342.721484][ T10] usb 4-1: Manufacturer: syz [ 342.852071][ T10] usb 4-1: config 0 descriptor?? [ 343.669243][ T36] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 343.843969][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.844027][ T36] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.876562][ T36] usb 3-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 343.876595][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.876618][ T36] usb 3-1: Product: syz [ 343.876634][ T36] usb 3-1: Manufacturer: syz [ 343.876650][ T36] usb 3-1: SerialNumber: syz [ 343.953376][ T36] kaweth 3-1:1.0: couldn't find required endpoints [ 344.163147][ T10] usb 3-1: USB disconnect, device number 27 [ 344.187570][T10645] vhci_hcd: connection reset by peer [ 344.370535][ T2399] vhci_hcd vhci_hcd.2: stop threads [ 344.383156][ T2399] vhci_hcd vhci_hcd.2: release socket [ 344.484464][ T2399] vhci_hcd vhci_hcd.2: disconnect device [ 346.019518][T10735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1997'. [ 346.045205][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1995'. [ 346.045233][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1995'. [ 346.249398][ T36] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 346.399258][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 346.401755][ T36] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 346.401784][ T36] usb 3-1: config 0 has no interface number 0 [ 346.408610][ T36] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 346.408643][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.408666][ T36] usb 3-1: Product: syz [ 346.408682][ T36] usb 3-1: Manufacturer: syz [ 346.408699][ T36] usb 3-1: SerialNumber: syz [ 346.483399][ T36] usb 3-1: config 0 descriptor?? [ 346.607026][T10754] geneve2: entered promiscuous mode [ 346.820780][T10758] netlink: 'syz.5.2007': attribute type 12 has an invalid length. [ 346.820804][T10758] netlink: 'syz.5.2007': attribute type 29 has an invalid length. [ 346.820820][T10758] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2007'. [ 346.820855][T10758] netlink: 'syz.5.2007': attribute type 1 has an invalid length. [ 346.820870][T10758] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2007'. [ 346.969167][ T36] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 346.969201][ T36] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 347.383831][ T36] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 347.384132][ T36] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 347.445349][ T36] usb 3-1: USB disconnect, device number 28 [ 347.640774][ T5905] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 348.600452][ T36] usb 4-1: USB disconnect, device number 24 [ 349.829621][ T5905] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 349.979523][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 349.981964][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 349.986354][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 349.986390][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.986406][ T5905] usb 2-1: Product: syz [ 349.986417][ T5905] usb 2-1: Manufacturer: syz [ 349.986428][ T5905] usb 2-1: SerialNumber: syz [ 350.037374][ T5905] usb 2-1: config 0 descriptor?? [ 350.078658][ T5905] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 350.855582][ T5905] gspca_zc3xx: reg_w_i err -71 [ 350.888570][T10842] syz.5.2046 (10842) used greatest stack depth: 16976 bytes left [ 351.156170][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 351.439245][ T5905] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 351.439352][ T5905] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 351.451684][ T5905] usb 2-1: USB disconnect, device number 23 [ 352.272617][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.338546][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.349475][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.351174][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.377111][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.778112][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.829261][ T5900] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 352.988758][ T5900] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00 [ 352.988791][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.988819][ T5900] usb 2-1: Product: syz [ 352.988831][ T5900] usb 2-1: Manufacturer: syz [ 352.988849][ T5900] usb 2-1: SerialNumber: syz [ 353.174233][ T5900] ushc 2-1:1.0: probe with driver ushc failed with error -110 [ 353.609786][ T5707] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 353.766283][ T5707] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.766318][ T5707] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 353.766341][ T5707] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.766412][ T5707] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 353.768803][ T5707] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.768834][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.768858][ T5707] usb 3-1: Product: syz [ 353.768882][ T5707] usb 3-1: Manufacturer: syz [ 353.860998][ T5707] cdc_wdm 3-1:1.0: skipping garbage [ 353.861021][ T5707] cdc_wdm 3-1:1.0: skipping garbage [ 353.955176][ T5707] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 353.955201][ T5707] cdc_wdm 3-1:1.0: Unknown control protocol [ 354.257445][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.387670][ T5707] usb 3-1: USB disconnect, device number 29 [ 354.495950][T10902] cdc_wdm 3-1:1.0: Error submitting int urb - -19 [ 354.519722][ T59] Bluetooth: hci2: command tx timeout [ 354.983238][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.254744][T10930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.255962][T10930] bridge0: port 3(bond1) entered blocking state [ 355.256218][T10930] bridge0: port 3(bond1) entered disabled state [ 355.256450][T10930] bond1: entered allmulticast mode [ 355.286435][T10930] bond1: entered promiscuous mode [ 355.287249][T10930] bridge0: port 3(bond1) entered blocking state [ 355.287348][T10930] bridge0: port 3(bond1) entered forwarding state [ 355.361465][ T6144] bridge0: port 3(bond1) entered disabled state [ 355.443515][T10934] Mass Storage Function, version: 2009/09/11 [ 355.443545][T10934] LUN: removable file: (no medium) [ 355.665024][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.936563][ T5900] usb 2-1: USB disconnect, device number 24 [ 356.605739][ T59] Bluetooth: hci2: command tx timeout [ 356.629857][T10957] coredump: 1004(syz.2.2091): Core dump to core aborted: cannot preserve file permissions [ 356.931271][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2092'. [ 356.931298][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2092'. [ 356.931324][T10964] netlink: 'syz.5.2092': attribute type 6 has an invalid length. [ 357.174183][T10970] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 357.589341][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2092'. [ 357.589367][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2092'. [ 357.589393][T10964] netlink: 'syz.5.2092': attribute type 6 has an invalid length. [ 357.790844][ T1464] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.790896][ T1464] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.790936][ T1464] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.650714][ T37] bridge_slave_1: left allmulticast mode [ 358.650978][ T37] bridge_slave_1: left promiscuous mode [ 358.679295][ T59] Bluetooth: hci2: command tx timeout [ 358.684510][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.922817][ T37] bridge_slave_0: left allmulticast mode [ 358.922850][ T37] bridge_slave_0: left promiscuous mode [ 358.923065][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.763094][ T59] Bluetooth: hci2: command tx timeout [ 360.890101][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.960474][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.991944][ T37] bond0 (unregistering): Released all slaves [ 361.429039][T11058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.527242][T10872] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.557777][T10872] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.577400][T10872] bridge_slave_0: entered allmulticast mode [ 361.592570][T10872] bridge_slave_0: entered promiscuous mode [ 361.631567][T11064] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2134'. [ 361.639496][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 361.662129][T10872] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.662219][T10872] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.662406][T10872] bridge_slave_1: entered allmulticast mode [ 361.664617][T10872] bridge_slave_1: entered promiscuous mode [ 361.762441][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2135'. [ 361.762473][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2135'. [ 361.768138][ T37] IPVS: stopping backup sync thread 8627 ... [ 361.809226][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 361.816655][ T10] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 361.816687][ T10] usb 2-1: config 0 has no interface number 0 [ 361.816738][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 361.816768][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 361.826520][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 361.826552][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.826575][ T10] usb 2-1: Product: syz [ 361.826592][ T10] usb 2-1: Manufacturer: syz [ 361.826614][ T10] usb 2-1: SerialNumber: syz [ 361.902050][ T10] usb 2-1: config 0 descriptor?? [ 361.903060][T11060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.903190][T11060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.992492][T11064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.120178][T11064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.122829][T11060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 362.122966][T11060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 362.246985][T11064] bond0 (unregistering): Released all slaves [ 362.328946][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 362.411751][T11075] netlink: 'syz.5.2139': attribute type 4 has an invalid length. [ 363.056651][T11089] overlayfs: workdir and upperdir must reside under the same mount [ 363.203649][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 363.203936][ T10] asix 2-1:0.34: probe with driver asix failed with error -71 [ 363.233089][ T10] usb 2-1: USB disconnect, device number 25 [ 363.866286][T10872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.921295][T10872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.696743][T10872] team0: Port device team_slave_0 added [ 364.713569][T10872] team0: Port device team_slave_1 added [ 364.826625][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 365.062797][T10872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.062816][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.062847][T10872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.063924][T11130] syz_tun: entered allmulticast mode [ 365.065887][T11128] syz_tun: left allmulticast mode [ 365.071504][T10872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.071548][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.071658][T10872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.167479][ T5900] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 365.331172][ T5900] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 365.331207][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.331230][ T5900] usb 6-1: Product: syz [ 365.331246][ T5900] usb 6-1: Manufacturer: syz [ 365.331272][ T5900] usb 6-1: SerialNumber: syz [ 365.382855][ T5900] gspca_main: spca500-2.14.0 probing 046d:0900 [ 365.890456][ T5900] gspca_spca500: reg write: error -32 [ 365.899908][ T5900] gspca_spca500: reg write: error -32 [ 365.902386][ T5900] gspca_spca500: reg write: error -32 [ 365.923748][ T5900] gspca_spca500: reg write: error -32 [ 365.926047][ T5900] gspca_spca500: reg write: error -32 [ 365.926562][ T5900] gspca_spca500: reg write: error -32 [ 365.926977][ T5900] gspca_spca500: reg write: error -32 [ 365.927403][ T5900] gspca_spca500: reg write: error -32 [ 365.927816][ T5900] gspca_spca500: reg write: error -32 [ 365.928219][ T5900] gspca_spca500: reg write: error -32 [ 365.935152][ T5900] gspca_spca500: reg write: error -32 [ 365.936050][ T5900] gspca_spca500: reg write: error -32 [ 365.942985][ T5900] gspca_spca500: reg write: error -32 [ 365.948593][ T5900] gspca_spca500: reg write: error -32 [ 366.716577][ T5707] usb 6-1: USB disconnect, device number 12 [ 366.813313][T10872] hsr_slave_0: entered promiscuous mode [ 366.818961][T10872] hsr_slave_1: entered promiscuous mode [ 366.822732][T10872] debugfs: 'hsr0' already exists in 'hsr' [ 366.822839][T10872] Cannot create hsr debugfs directory [ 367.681100][T11191] Bluetooth: hci0: invalid len left 7, exp >= 67 [ 367.899491][T11194] input: syz0 as /devices/virtual/input/input33 [ 368.320759][ T37] hsr_slave_0: left promiscuous mode [ 368.399821][ T37] hsr_slave_1: left promiscuous mode [ 368.433725][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.433837][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.518898][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.518929][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.972200][ T37] veth1_vlan: left promiscuous mode [ 368.972796][ T37] veth0_vlan: left promiscuous mode [ 369.680725][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2190'. [ 370.406351][ T37] team0 (unregistering): Port device team_slave_1 removed [ 370.493543][ T37] team0 (unregistering): Port device team_slave_0 removed [ 370.859275][ T5600] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 371.033486][ T5600] usb 6-1: not running at top speed; connect to a high speed hub [ 371.034831][ T5600] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 371.034866][ T5600] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 371.037421][ T5600] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 371.037450][ T5600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.037472][ T5600] usb 6-1: Product: syz [ 371.037493][ T5600] usb 6-1: Manufacturer: syz [ 371.037504][ T5600] usb 6-1: SerialNumber: syz [ 371.118342][ T5600] oti6858 6-1:1.0: oti6858 converter detected [ 371.134636][ T5600] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 371.354011][ T5600] usb 6-1: USB disconnect, device number 13 [ 371.356766][T11249] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -19 [ 371.405382][ T5600] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 371.405688][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 371.407533][ T5600] oti6858 6-1:1.0: device disconnected [ 371.472789][T11241] ipvlan2: entered allmulticast mode [ 371.472806][T11241] syz_tun: entered allmulticast mode [ 371.929935][ T199] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 371.979973][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.085380][ T199] usb 2-1: Using ep0 maxpacket: 32 [ 372.095072][ T199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.095128][ T199] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 372.095156][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.141311][ T199] usb 2-1: config 0 descriptor?? [ 372.170942][ T199] hub 2-1:0.0: USB hub found [ 372.281599][ T5600] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 372.387353][ T199] hub 2-1:0.0: 1 port detected [ 372.433727][ T5600] usb 3-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00 [ 372.433761][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.892800][ T5600] mxuport 3-1:1.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 372.892910][ T5600] mxuport 3-1:1.0: probe with driver mxuport failed with error -5 [ 373.691665][ T5727] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 373.727527][ T5707] usb 2-1: USB disconnect, device number 26 [ 373.836402][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 374.049273][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 374.069217][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 374.069245][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 374.108806][T11301] netlink: 'syz.5.2207': attribute type 2 has an invalid length. [ 374.108822][T11301] netlink: 'syz.5.2207': attribute type 1 has an invalid length. [ 374.108832][T11301] netlink: 'syz.5.2207': attribute type 8 has an invalid length. [ 374.108842][T11301] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2207'. [ 375.177324][ T5707] usb 3-1: USB disconnect, device number 30 [ 375.789191][ T36] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 375.847504][T10872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.951704][ T36] usb 6-1: config 0 has an invalid interface number: 166 but max is 0 [ 375.951737][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.951760][ T36] usb 6-1: config 0 has no interface number 0 [ 375.951810][ T36] usb 6-1: config 0 interface 166 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 375.951840][ T36] usb 6-1: config 0 interface 166 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.954790][ T36] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 375.954818][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.954840][ T36] usb 6-1: Product: syz [ 375.954855][ T36] usb 6-1: Manufacturer: syz [ 375.954871][ T36] usb 6-1: SerialNumber: syz [ 376.047478][ T36] usb 6-1: config 0 descriptor?? [ 376.048964][T11331] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 376.102300][T10872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.128095][T10872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.281358][ T37] IPVS: stop unused estimator thread 0... [ 376.547851][T10872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.558617][T10872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.568635][ T36] net1080 6-1:0.166: probe with driver net1080 failed with error -22 [ 376.654104][ T36] usb 6-1: USB disconnect, device number 14 [ 376.744754][T10872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.791273][T10872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 376.877567][T11356] trusted_key: syz.4.2227 sent an empty control message without MSG_MORE. [ 376.992489][T10872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.069128][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 377.444974][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2231'. [ 377.488916][T11379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2231'. [ 377.555029][T11379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2231'. [ 377.639407][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 377.642258][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 377.642277][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 378.344653][T10872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.349508][ T199] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 378.519553][ T199] usb 5-1: Using ep0 maxpacket: 32 [ 378.568161][ T199] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 378.568197][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.619361][ T199] usb 5-1: config 0 descriptor?? [ 378.648488][T10872] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.708038][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.708112][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.867595][ T199] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 378.907848][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.929530][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.021733][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.021881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.116397][T11405] tipc: Started in network mode [ 379.116436][T11405] tipc: Node identity ac14140f, cluster identity 4711 [ 379.251772][T11405] tipc: New replicast peer: 255.255.255.255 [ 379.269931][ T199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 379.271470][ T199] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 379.271529][ T199] usb 5-1: media controller created [ 379.279580][T11410] netlink: 'syz.5.2243': attribute type 56 has an invalid length. [ 379.399343][T11405] tipc: Enabled bearer , priority 10 [ 379.613603][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.929190][ T5727] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 380.083087][ T5727] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 380.083123][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.239809][ T199] az6027: usb out operation failed. (-71) [ 380.239832][ T199] stb0899_attach: Driver disabled by Kconfig [ 380.239902][ T199] az6027: no front-end attached [ 380.239902][ T199] [ 380.240553][ T199] az6027: usb out operation failed. (-71) [ 380.240569][ T199] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 380.372697][ T10] tipc: Node number set to 2886997007 [ 380.383440][ T199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 380.403554][ T199] dvb-usb: schedule remote query interval to 400 msecs. [ 380.403579][ T199] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 380.472480][ T5727] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 380.480072][ T199] usb 5-1: USB disconnect, device number 25 [ 381.536651][ T199] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 381.654689][T11453] netlink: 'syz.5.2253': attribute type 8 has an invalid length. [ 381.654711][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2253'. [ 381.856769][T11453] bond0: entered promiscuous mode [ 381.856795][T11453] bond_slave_0: entered promiscuous mode [ 381.857030][T11453] bond_slave_1: entered promiscuous mode [ 381.878577][T11453] gretap0: entered promiscuous mode [ 381.894185][T11453] gretap0: left promiscuous mode [ 381.949300][T11453] bond0: left promiscuous mode [ 381.949327][T11453] bond_slave_0: left promiscuous mode [ 381.949606][T11453] bond_slave_1: left promiscuous mode [ 382.293812][T10872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.644971][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 382.645096][T11471] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2257'. [ 382.645134][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 382.717488][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 382.717523][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 382.896500][T11476] sg_write: data in/out 397468/136 bytes for SCSI command 0x0-- guessing data in; [ 382.896500][T11476] program syz.5.2259 not setting count and/or reply_len properly [ 383.134205][ T38] kauditd_printk_skb: 297 callbacks suppressed [ 383.134225][ T38] audit: type=1326 audit(1785901242.240:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.134278][ T38] audit: type=1326 audit(1785901242.240:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.134848][ T38] audit: type=1326 audit(1785901242.240:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.135282][ T38] audit: type=1326 audit(1785901242.240:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.135612][ T38] audit: type=1326 audit(1785901242.240:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.136002][ T38] audit: type=1326 audit(1785901242.240:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.136888][ T38] audit: type=1326 audit(1785901242.240:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.137591][ T38] audit: type=1326 audit(1785901242.240:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.137645][ T38] audit: type=1326 audit(1785901242.240:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 383.138150][ T38] audit: type=1326 audit(1785901242.240:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11480 comm="syz.5.2261" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9d5ee019 code=0x7ffc0000 [ 384.096298][T10872] veth0_vlan: entered promiscuous mode [ 384.594507][T10872] veth1_vlan: entered promiscuous mode [ 384.908619][T10872] veth0_macvtap: entered promiscuous mode [ 385.025981][T11515] MTRR 2 not used [ 385.037332][T10872] veth1_macvtap: entered promiscuous mode [ 385.210745][T10872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.287617][T10872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.309748][ T199] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 385.506077][ T199] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.507601][ T199] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 385.507628][ T199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.647740][ T199] usb 6-1: config 0 descriptor?? [ 385.834834][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.106491][ T36] usb 3-1: USB disconnect, device number 31 [ 386.396034][ T199] ath6kl: mismatched byte count 0 vs. expected 12 [ 386.476813][ T199] ath6kl: Failed to init ath6kl core: -22 [ 386.477398][ T199] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 387.177782][ T6135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.177805][ T6135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.397891][ T6135] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.425321][ T3291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.443411][ T6139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.537473][ T5900] usb 6-1: USB disconnect, device number 15 [ 387.793608][ T1464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.793631][ T1464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.191750][T11550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2289'. [ 388.346207][T11550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2289'. [ 388.485867][T11561] binder: 11560:11561 ioctl c0306201 2000000001c0 returned -14 [ 388.571405][ T5728] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 388.740542][ T5728] usb 7-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 388.740578][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.740602][ T5728] usb 7-1: Product: syz [ 388.740632][ T5728] usb 7-1: Manufacturer: syz [ 388.740650][ T5728] usb 7-1: SerialNumber: syz [ 389.315114][ T5728] ttusb_dec_send_command: command bulk message failed: error -71 [ 389.315456][ T5728] ttusb-dec 7-1:1.0: probe with driver ttusb-dec failed with error -71 [ 389.356231][ T5728] usb 7-1: USB disconnect, device number 2 [ 390.005727][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2300'. [ 391.199309][ T5728] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 391.360675][ T5728] usb 5-1: Using ep0 maxpacket: 16 [ 391.364661][ T5728] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 391.364688][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.364709][ T5728] usb 5-1: Product: syz [ 391.364724][ T5728] usb 5-1: Manufacturer: syz [ 391.364740][ T5728] usb 5-1: SerialNumber: syz [ 391.457992][ T5728] usb 5-1: config 0 descriptor?? [ 391.505363][ T5728] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 392.589285][T11655] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2320'. [ 392.650161][T11655] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.695514][T11655] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.783442][ T5728] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 392.833015][ T5728] usb 5-1: USB disconnect, device number 26 [ 393.022522][T11662] loop4: detected capacity change from 0 to 7 [ 393.026832][T11662] Dev loop4: unable to read RDB block 7 [ 393.026876][T11662] loop4: unable to read partition table [ 393.027113][T11662] loop4: partition table beyond EOD, truncated [ 393.053079][T11662] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 393.792004][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 393.792022][ T38] audit: type=1326 audit(1785901252.900:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11685 comm="syz.6.2328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f430be019 code=0x0 [ 393.835668][ T5728] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 394.005397][ T5707] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 394.008380][ T5707] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.088013][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.088047][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.088084][ T5728] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 394.088106][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.208027][ T5728] usb 6-1: config 0 descriptor?? [ 394.646280][T11702] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 394.664081][ T5728] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x2 [ 394.782489][ T5728] pyra 0003:1E7D:2CF6.001C: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 395.461116][ T5728] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 395.461176][ T5728] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 395.485572][ T5728] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -71 [ 395.563336][T11709] Mass Storage Function, version: 2009/09/11 [ 395.563831][T11709] LUN: removable file: (no medium) [ 395.574905][ T5728] usb 6-1: USB disconnect, device number 16 [ 400.549579][T11855] netlink: 'syz.1.2386': attribute type 1 has an invalid length. [ 400.969452][T11855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.439244][T11858] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 401.549257][ T199] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 401.708176][ T199] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 401.708212][ T199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.708235][ T199] usb 6-1: Product: syz [ 401.708250][ T199] usb 6-1: Manufacturer: syz [ 401.708267][ T199] usb 6-1: SerialNumber: syz [ 401.768904][ T199] gspca_main: spca500-2.14.0 probing 046d:0900 [ 401.919411][ T5900] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 402.105014][ T5900] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 402.105121][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.144671][ T5900] usb 2-1: config 0 descriptor?? [ 402.204746][ T5900] pwc: Creative Labs Webcam 5 detected. [ 402.285973][ T199] gspca_spca500: reg write: error -32 [ 402.286981][ T199] gspca_spca500: reg write: error -32 [ 402.287471][ T199] gspca_spca500: reg write: error -32 [ 402.287955][ T199] gspca_spca500: reg write: error -32 [ 402.288463][ T199] gspca_spca500: reg write: error -32 [ 402.316823][ T199] gspca_spca500: reg write: error -32 [ 402.317277][ T199] gspca_spca500: reg write: error -32 [ 402.317739][ T199] gspca_spca500: reg write: error -32 [ 402.318153][ T199] gspca_spca500: reg write: error -32 [ 402.318564][ T199] gspca_spca500: reg write: error -32 [ 402.318949][ T199] gspca_spca500: reg write: error -32 [ 402.353767][ T199] gspca_spca500: reg write: error -32 [ 402.354253][ T199] gspca_spca500: reg write: error -32 [ 402.354786][ T199] gspca_spca500: reg write: error -32 [ 402.808776][ T5900] pwc: recv_control_msg error -32 req 02 val 2b00 [ 402.816027][ T5900] pwc: recv_control_msg error -32 req 02 val 2700 [ 403.024422][ T5900] pwc: recv_control_msg error -71 req 02 val 2c00 [ 403.026499][ T5900] pwc: recv_control_msg error -71 req 04 val 1000 [ 403.026994][ T5900] pwc: recv_control_msg error -71 req 04 val 1300 [ 403.027465][ T5900] pwc: recv_control_msg error -71 req 04 val 1400 [ 403.027940][ T5900] pwc: recv_control_msg error -71 req 02 val 2000 [ 403.028401][ T5900] pwc: recv_control_msg error -71 req 02 val 2100 [ 403.028864][ T5900] pwc: recv_control_msg error -71 req 06 val 0600 [ 403.042287][ T5900] pwc: recv_control_msg error -71 req 04 val 1500 [ 403.066228][ T5900] pwc: recv_control_msg error -71 req 02 val 2500 [ 403.089335][ T5900] pwc: recv_control_msg error -71 req 02 val 2400 [ 403.089853][ T5900] pwc: recv_control_msg error -71 req 02 val 2600 [ 403.091655][ T5900] pwc: recv_control_msg error -71 req 02 val 2900 [ 403.093028][ T5900] pwc: recv_control_msg error -71 req 02 val 2800 [ 403.094982][ T5900] pwc: recv_control_msg error -71 req 04 val 1100 [ 403.095474][ T5900] pwc: recv_control_msg error -71 req 04 val 1200 [ 403.095949][ T5900] pwc: Failed to power off camera (-71) [ 403.095977][ T5900] videodev: could not get a free minor [ 403.095987][ T5900] pwc: Failed to register as video device (-23). [ 403.175703][ T5900] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -23 [ 403.191016][ T5900] usb 2-1: USB disconnect, device number 27 [ 403.363731][ T5905] usb 6-1: USB disconnect, device number 17 [ 403.952400][T11946] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 404.301860][T11946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.722311][T11952] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 406.085677][T12020] netlink: 'syz.5.2457': attribute type 16 has an invalid length. [ 406.085700][T12020] netlink: 'syz.5.2457': attribute type 17 has an invalid length. [ 407.169323][ T5707] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 407.319498][ T5707] usb 3-1: Using ep0 maxpacket: 32 [ 407.327727][ T5707] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 407.327758][ T5707] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 407.327784][ T5707] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 407.327809][ T5707] usb 3-1: config 1 has no interface number 0 [ 407.327858][ T5707] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.327888][ T5707] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 407.327934][ T5707] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 407.327960][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.443761][ T5707] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 407.658667][ T5707] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 408.127427][ T9] usb 3-1: USB disconnect, device number 32 [ 408.145475][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 408.950406][T12020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.009550][T12020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.179199][ T91] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.179237][ T91] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.179472][ T37] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.179504][ T37] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.192783][ T6135] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.192834][ T6135] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.192978][ T6135] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.193067][ T6135] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.059312][ T5728] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 415.242210][ T5728] usb 5-1: not running at top speed; connect to a high speed hub [ 415.259518][ T5728] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 415.259597][ T5728] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 415.259623][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.341359][ T5728] gspca_main: spca501-2.14.0 probing 0000:0000 [ 415.835961][ T5728] gspca_spca501: reg write: error -71 [ 415.835981][ T5728] spca501 5-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 415.836081][ T5728] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 415.837412][ T5728] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 415.846454][ T5728] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 415.849181][ T5728] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 415.849261][ T5728] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 415.954841][ T5728] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 415.962871][ T5600] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 416.035128][ T5728] usb 5-1: USB disconnect, device number 27 [ 416.137378][ T5600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 416.148280][ T5600] usb 3-1: config 1 interface 0 altsetting 49 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 416.148326][ T5600] usb 3-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.148357][ T5600] usb 3-1: config 1 interface 0 has no altsetting 0 [ 416.183314][ T5600] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 416.183346][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.183368][ T5600] usb 3-1: Product: syz [ 416.183383][ T5600] usb 3-1: Manufacturer: syz [ 416.183400][ T5600] usb 3-1: SerialNumber: syz [ 416.407524][T12310] input: syz1 as /devices/virtual/input/input35 [ 416.497705][ T5600] usbhid 3-1:1.0: can't add hid device: -71 [ 416.497831][ T5600] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 416.517918][ T5600] usb 3-1: USB disconnect, device number 33 [ 417.959362][ T5600] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 418.109184][ T5600] usb 2-1: Using ep0 maxpacket: 16 [ 418.146675][ T5600] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 418.146716][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.146742][ T5600] usb 2-1: Product: syz [ 418.146769][ T5600] usb 2-1: Manufacturer: syz [ 418.146789][ T5600] usb 2-1: SerialNumber: syz [ 419.040770][ T5728] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 419.192890][ T5728] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 419.192923][ T5728] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 419.192945][ T5728] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 419.192967][ T5728] usb 3-1: config 220 has no interface number 2 [ 419.193047][ T5728] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 419.193077][ T5728] usb 3-1: config 220 interface 0 has no altsetting 0 [ 419.193097][ T5728] usb 3-1: config 220 interface 76 has no altsetting 0 [ 419.193118][ T5728] usb 3-1: config 220 interface 1 has no altsetting 0 [ 419.197481][ T5728] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 419.197515][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.197538][ T5728] usb 3-1: Product: syz [ 419.197556][ T5728] usb 3-1: Manufacturer: syz [ 419.197573][ T5728] usb 3-1: SerialNumber: syz [ 419.508855][ T5600] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 419.541362][ T5600] usb 2-1: USB disconnect, device number 28 [ 419.630346][ T5728] usb 3-1: selecting invalid altsetting 0 [ 419.717807][ T5728] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 419.717846][ T5728] uvcvideo 3-1:220.0: No valid video chain found. [ 419.856006][ T5728] usb 3-1: selecting invalid altsetting 0 [ 419.856036][ T5728] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 419.876249][ T5728] usb 3-1: USB disconnect, device number 34 [ 421.922052][T12474] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 421.922078][T12474] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 421.926502][T12474] vhci_hcd vhci_hcd.0: Device attached [ 421.927476][T12475] vhci_hcd: xmit failed -107 [ 421.956388][ T12] vhci_hcd vhci_hcd.0: stop threads [ 421.956413][ T12] vhci_hcd vhci_hcd.0: release socket [ 422.028613][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 422.436858][T12488] binder: 12486:12488 ioctl c0306201 200000000640 returned -22 [ 422.456810][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'. [ 424.001360][ T38] audit: type=1326 audit(1785901283.100:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.2.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b1e019 code=0x7ffc0000 [ 424.002447][ T38] audit: type=1326 audit(1785901283.110:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.2.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b1e019 code=0x7ffc0000 [ 424.002971][ T38] audit: type=1326 audit(1785901283.110:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.2.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1b08b1e019 code=0x7ffc0000 [ 424.354989][ T38] audit: type=1326 audit(1785901283.460:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.2.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b1e019 code=0x7ffc0000 [ 424.355048][ T38] audit: type=1326 audit(1785901283.460:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.2.2677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b08b1e019 code=0x7ffc0000 [ 426.459323][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 426.549215][ T5707] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 426.616035][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 426.616073][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 426.616102][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 426.616129][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 426.616171][ T9] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 426.616197][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.698900][T12620] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 426.699463][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 426.707507][T12620] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 426.726482][T12620] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 426.726655][T12620] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 426.728621][ T5707] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 426.728655][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.770729][ T5707] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 426.770836][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.770917][ T5707] usb 3-1: Product: syz [ 426.770960][ T5707] usb 3-1: Manufacturer: syz [ 426.770989][ T5707] usb 3-1: SerialNumber: syz [ 426.835518][ T5707] usb 3-1: config 0 descriptor?? [ 426.909149][ T5707] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 426.909186][ T5707] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 426.952781][ T9] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 427.247365][T12639] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 427.247395][T12639] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 427.517753][ T5707] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 427.518353][ T5707] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 427.742755][ T5707] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 427.742782][ T5707] em28xx 3-1:0.0: No AC97 audio processor [ 427.790213][ T5707] usb 3-1: USB disconnect, device number 35 [ 427.807742][ T5707] em28xx 3-1:0.0: Disconnecting em28xx [ 427.942773][ T5707] em28xx 3-1:0.0: Freeing device [ 427.962342][ T5905] usb 6-1: USB disconnect, device number 18 [ 430.361349][ T5728] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 430.512044][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.512090][ T5728] usb 5-1: config 0 interface 0 has no altsetting 0 [ 430.552362][ T5728] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 430.552396][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.552418][ T5728] usb 5-1: Product: syz [ 430.552434][ T5728] usb 5-1: Manufacturer: syz [ 430.552450][ T5728] usb 5-1: SerialNumber: syz [ 430.625378][ T5728] usb 5-1: config 0 descriptor?? [ 430.637356][ T5728] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 430.655272][T12763] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2778'. [ 430.687350][ T5728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 430.697145][ T5728] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 430.697302][ T5728] usb 5-1: media controller created [ 430.913612][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.130097][ T5728] DVB: Unable to find symbol tda10046_attach() [ 431.130116][ T5728] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 431.130132][ T5728] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 432.000569][ T5728] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 432.029380][ T5728] usb 5-1: USB disconnect, device number 28 [ 432.051393][ T5584] udevd[5584]: setting owner of /dev/bus/usb/005/028 to uid=0, gid=0 failed: No such file or directory [ 432.619258][ T5728] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 432.772078][ T5728] usb 3-1: config index 0 descriptor too short (expected 53, got 35) [ 432.772111][ T5728] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 432.772166][ T5728] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 432.774463][ T5728] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 432.774493][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 432.774516][ T5728] usb 3-1: Product: syz [ 432.774532][ T5728] usb 3-1: Manufacturer: syz [ 433.050426][T12825] netlink: 'syz.4.2808': attribute type 1 has an invalid length. [ 434.030854][ T199] kernel read not supported for file /dsp (pid: 199 comm: kworker/0:2) [ 434.139106][ T5707] usb 3-1: USB disconnect, device number 36 [ 435.443118][T12938] loop5: detected capacity change from 0 to 7 [ 435.445796][T12938] Dev loop5: unable to read RDB block 7 [ 435.445864][T12938] loop5: unable to read partition table [ 435.446193][T12938] loop5: partition table beyond EOD, truncated [ 435.446236][T12938] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.381738][T13007] netlink: 'syz.5.2894': attribute type 1 has an invalid length. [ 437.589695][T13007] bond1: entered promiscuous mode [ 437.592679][T13007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.747475][T13010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.757168][T13010] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 437.757195][T13010] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 437.813623][T13010] bond1: (slave vti0): making interface the new active one [ 437.813650][T13010] vti0: entered promiscuous mode [ 437.874652][T13010] bond1: (slave vti0): Enslaving as an active interface with an up link [ 437.919206][ T5600] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 438.088369][ T5600] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 438.170658][ T5600] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 438.170700][ T5600] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 438.170725][ T5600] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 438.176156][ T5600] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.176188][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.176211][ T5600] usb 3-1: Product: syz [ 438.176228][ T5600] usb 3-1: Manufacturer: syz [ 438.176245][ T5600] usb 3-1: SerialNumber: syz [ 438.256137][T13018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 438.475803][T13018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.087305][T13018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.291345][ T5600] cdc_ncm 3-1:1.0: bind() failure [ 439.311509][ T5600] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 439.311559][ T5600] cdc_ncm 3-1:1.1: bind() failure [ 439.540613][ T5600] usb 3-1: USB disconnect, device number 37 [ 440.139765][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.139830][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.148011][ T5707] kernel read not supported for file /mdstat (pid: 5707 comm: kworker/1:4) [ 440.941802][ T36] kernel read not supported for file /audio (pid: 36 comm: kworker/1:1) [ 441.119434][ T5707] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 441.291630][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.291669][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.291720][ T5707] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 441.291747][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.358928][ T5707] usb 3-1: config 0 descriptor?? [ 442.601175][ T5707] hid-steam 0003:28DE:1142.001D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 442.660296][ T5707] hid-steam 0003:28DE:1142.001D: Steam wireless receiver connected [ 442.770798][ T5707] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 444.245470][T13170] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 445.183392][ T5600] usb 3-1: USB disconnect, device number 38 [ 445.478868][ T5600] hid-steam 0003:28DE:1142.001D: Steam wireless receiver disconnected [ 445.689242][ T5707] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 445.852471][ T5707] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.852514][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 445.852536][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 445.854927][ T5707] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 445.854957][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.854982][ T5707] usb 5-1: Product: syz [ 445.854993][ T5707] usb 5-1: Manufacturer: syz [ 445.855004][ T5707] usb 5-1: SerialNumber: syz [ 445.940699][ T5707] usb 5-1: config 0 descriptor?? [ 445.942056][T13215] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 446.069134][ T5707] rc_core: IR keymap rc-streamzap not found [ 446.069156][ T5707] Registered IR keymap rc-empty [ 446.076625][ T5707] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 446.107107][ T5707] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 448.128468][T13284] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3021'. [ 448.222023][T13264] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 448.256633][T13264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 448.275313][T13264] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 448.293309][T13264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 448.294274][T13264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 448.808138][ T5900] usb 5-1: USB disconnect, device number 29 [ 449.240817][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 450.759243][ T59] Bluetooth: hci6: command tx timeout [ 451.200696][T13281] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.200912][T13281] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.201155][T13281] bridge_slave_0: entered allmulticast mode [ 451.204403][T13281] bridge_slave_0: entered promiscuous mode [ 451.275020][T13281] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.276850][T13281] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.277095][T13281] bridge_slave_1: entered allmulticast mode [ 451.354354][T13281] bridge_slave_1: entered promiscuous mode [ 451.672066][T13281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.718110][T13281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.005213][T13281] team0: Port device team_slave_0 added [ 452.037567][T13281] team0: Port device team_slave_1 added [ 452.132793][T13281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.132810][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.132841][T13281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.137812][T13281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.137829][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.137861][T13281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.489635][T13281] hsr_slave_0: entered promiscuous mode [ 452.510028][T13281] hsr_slave_1: entered promiscuous mode [ 452.511104][T13281] debugfs: 'hsr0' already exists in 'hsr' [ 452.511130][T13281] Cannot create hsr debugfs directory [ 452.839277][ T59] Bluetooth: hci6: command tx timeout [ 454.493851][T13281] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 454.567371][T13281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.605184][T13281] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 454.654331][T13281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.677445][T13281] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 454.731400][T13281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.732708][T13281] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 454.802338][T13281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.919296][ T59] Bluetooth: hci6: command tx timeout [ 455.276632][T13281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.366695][T13281] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.422055][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.422187][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.483391][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.483548][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.846244][T13281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.999164][ T59] Bluetooth: hci6: command tx timeout [ 457.152820][ T38] audit: type=1800 audit(1785901316.210:449): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3133" name="UDC" dev="configfs" ino=39462 res=0 errno=0 [ 457.498579][T13576] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 457.620693][T13580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.669319][ T5600] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 457.760490][T13580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.859318][ T5600] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 457.859354][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.859379][ T5600] usb 3-1: Product: syz [ 457.859397][ T5600] usb 3-1: Manufacturer: syz [ 457.859414][ T5600] usb 3-1: SerialNumber: syz [ 457.951168][ T5600] gspca_main: spca500-2.14.0 probing 046d:0900 [ 457.990947][T13580] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 458.136234][T13580] bond0 (unregistering): Released all slaves [ 458.215318][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'. [ 458.469792][ T5600] gspca_spca500: reg write: error -32 [ 458.470609][ T5600] gspca_spca500: reg write: error -32 [ 458.471001][ T5600] gspca_spca500: reg write: error -32 [ 458.471474][ T5600] gspca_spca500: reg write: error -32 [ 458.484547][ T5600] gspca_spca500: reg write: error -32 [ 458.487500][ T5600] gspca_spca500: reg write: error -32 [ 458.491744][ T5600] gspca_spca500: reg write: error -32 [ 458.493452][ T5600] gspca_spca500: reg write: error -32 [ 458.495964][ T5600] gspca_spca500: reg write: error -32 [ 458.498401][ T5600] gspca_spca500: reg write: error -32 [ 458.501255][ T5600] gspca_spca500: reg write: error -32 [ 458.506468][ T5600] gspca_spca500: reg write: error -32 [ 458.625782][ T5600] gspca_spca500: reg write: error -32 [ 458.632913][ T5600] gspca_spca500: reg write: error -32 [ 458.746332][T13605] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 458.941452][T13281] veth0_vlan: entered promiscuous mode [ 458.965859][T13281] veth1_vlan: entered promiscuous mode [ 459.110674][T13281] veth0_macvtap: entered promiscuous mode [ 459.179468][T13281] veth1_macvtap: entered promiscuous mode [ 459.401334][T13281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.484901][ T199] usb 3-1: USB disconnect, device number 39 [ 459.602578][T13281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.813911][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.814548][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.814695][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.814826][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.034170][ T1464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.034193][ T1464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.465294][ T6144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.465316][ T6144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.596986][T13699] lo speed is unknown, defaulting to 1000 [ 463.777966][T13699] lo speed is unknown, defaulting to 1000 [ 463.907001][T13699] lo speed is unknown, defaulting to 1000 [ 464.734683][T13744] CIFS: Attempting to mount //127.0.0.1/share [ 464.736900][T13744] CIFS: VFS: Error connecting to socket. Aborting operation. [ 464.736950][T13744] CIFS: VFS: cifs_mount failed w/return code = -101 [ 465.435355][T11296] lo speed is unknown, defaulting to 1000 [ 465.449460][T13699] infiniband syz1: set down [ 465.449514][T13699] infiniband syz1: added lo [ 466.500649][T13699] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 466.500695][T13699] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 466.500742][T13699] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 467.631840][T13699] RDS/IB: syz1: added [ 467.667645][T13699] smc: adding ib device syz1 with port count 1 [ 467.668052][T13699] smc: ib device syz1 port 1 has no pnetid [ 467.703251][ T10] lo speed is unknown, defaulting to 1000 [ 467.719271][T11296] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 467.873058][T11296] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 467.873091][T11296] usb 8-1: config 0 has no interface number 0 [ 467.873150][T11296] usb 8-1: config 0 interface 41 has no altsetting 0 [ 467.876323][T11296] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 467.876349][T11296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.876366][T11296] usb 8-1: Product: syz [ 467.876378][T11296] usb 8-1: Manufacturer: syz [ 467.876390][T11296] usb 8-1: SerialNumber: syz [ 467.940100][T11296] usb 8-1: config 0 descriptor?? [ 468.115046][T13699] lo speed is unknown, defaulting to 1000 [ 468.773923][T11296] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 468.775091][T11296] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 468.804103][T11296] usb 8-1: USB disconnect, device number 2 [ 469.172671][T13699] lo speed is unknown, defaulting to 1000 [ 469.882512][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3267'. [ 470.402566][T13699] lo speed is unknown, defaulting to 1000 [ 471.445220][T13699] lo speed is unknown, defaulting to 1000 [ 471.769200][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 471.941947][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 471.941993][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.942016][ T9] usb 5-1: Product: syz [ 471.942032][ T9] usb 5-1: Manufacturer: syz [ 471.942047][ T9] usb 5-1: SerialNumber: syz [ 472.275198][T13938] VFS: file-max limit 0 reached [ 472.513400][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 472.513476][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 472.513500][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 472.578339][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 472.660311][ T9] usb 5-1: USB disconnect, device number 30 [ 472.927690][T13699] lo speed is unknown, defaulting to 1000 [ 473.829687][ T5707] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 473.991750][ T5707] usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 473.991785][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.028379][T13699] lo speed is unknown, defaulting to 1000 [ 474.060178][ T5707] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 474.811024][T13699] lo speed is unknown, defaulting to 1000 [ 476.736541][ T2385] pvrusb2: Failed to submit write-control URB status=-2 [ 476.736557][ T2385] pvrusb2: Device being rendered inoperable [ 476.778214][ T2385] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 476.778231][ T2385] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 476.828403][ T5707] usb 5-1: USB disconnect, device number 31 [ 478.201254][ T822] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 478.384319][ T822] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 478.384359][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.384382][ T822] usb 3-1: Product: syz [ 478.384399][ T822] usb 3-1: Manufacturer: syz [ 478.384416][ T822] usb 3-1: SerialNumber: syz [ 478.443493][ T822] usb 3-1: config 0 descriptor?? [ 478.759389][ T822] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 479.572350][ T822] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 479.592715][ T822] usb 3-1: USB disconnect, device number 40 [ 480.183053][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.263636][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.295799][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.297605][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.298460][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.633160][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3397'. [ 482.202611][T14223] VFS: file-max limit 0 reached [ 482.513711][T14236] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 482.890712][ T59] Bluetooth: hci4: command tx timeout [ 483.033928][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3420'. [ 483.179357][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3420'. [ 483.263941][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.264004][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.264045][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.264085][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.350328][ T822] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 483.529376][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 483.531792][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.531825][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.531867][ T822] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 483.531885][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.586398][ T822] usb 5-1: config 0 descriptor?? [ 483.601116][ T822] hub 5-1:0.0: USB hub found [ 483.795014][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3426'. [ 483.814543][ T822] hub 5-1:0.0: 1 port detected [ 483.852910][T14142] lo speed is unknown, defaulting to 1000 [ 484.392275][T14273] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 484.433133][ T822] hub 5-1:0.0: activate --> -90 [ 484.853365][ T822] usb 5-1-port1: cannot disable (err = -71) [ 484.882841][ T822] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 484.882872][ T822] usb 5-1-port1: connect-debounce failed [ 484.919715][ T59] Bluetooth: hci4: command tx timeout [ 484.920130][T14275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.073777][T11296] usb 5-1: USB disconnect, device number 32 [ 485.119994][T14275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.143809][T14193] usb 5-1: Failed to suspend device, error -71 [ 485.225506][T14275] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 485.331190][T14275] bond0 (unregistering): Released all slaves [ 486.313704][T14330] 9p: Bad value for 'wfdno' [ 486.547959][ T5599] Bluetooth: hci6: unexpected event for opcode 0x0c7a [ 487.009191][ T5599] Bluetooth: hci4: command tx timeout [ 488.357135][ T37] bridge_slave_1: left allmulticast mode [ 488.357172][ T37] bridge_slave_1: left promiscuous mode [ 488.357523][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.604837][ T37] bridge_slave_0: left allmulticast mode [ 488.604875][ T37] bridge_slave_0: left promiscuous mode [ 488.644572][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.080325][ T5599] Bluetooth: hci4: command tx timeout [ 489.559258][ T5599] Bluetooth: hci6: command 0x2016 tx timeout [ 489.839223][ T5727] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 489.991131][ T5727] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.992426][ T5727] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.994799][ T5727] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 489.994828][ T5727] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.994849][ T5727] usb 8-1: Product: syz [ 489.994868][ T5727] usb 8-1: Manufacturer: syz [ 489.994880][ T5727] usb 8-1: SerialNumber: syz [ 490.141917][ T5727] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 490.175719][ T5727] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 490.246896][ T5727] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 490.623872][ T37] bond1 (unregistering): (slave vti0): Releasing backup interface [ 490.623903][ T37] vti0 (unregistering): left promiscuous mode [ 491.365957][T12639] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 491.449679][ T37] bond1 (unregistering): Released all slaves [ 491.519240][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 491.905138][T14427] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 492.008486][ T9] usb 8-1: USB disconnect, device number 3 [ 492.116742][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 492.156741][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 492.213593][ T9] ti_usb_3410_5052 8-1:2.0: device disconnected [ 493.383718][T14488] kvm_intel: kvm [14477]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 494.689555][ T5905] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 494.839148][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 494.841605][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.841641][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.841684][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 494.841710][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.869457][T11296] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 494.967313][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 495.067474][T11296] usb 8-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 495.067509][T11296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.067535][T11296] usb 8-1: Product: syz [ 495.067552][T11296] usb 8-1: Manufacturer: syz [ 495.067568][T11296] usb 8-1: SerialNumber: syz [ 495.242149][ T5905] usb 3-1: config 0 descriptor?? [ 495.272271][T11296] usb 8-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 495.348506][ T5905] hub 3-1:0.0: USB hub found [ 495.493878][ T5905] hub 3-1:0.0: 1 port detected [ 496.235499][ T5728] hub 3-1:0.0: activate --> -90 [ 496.478753][ T5728] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 496.713117][ T165] usb 3-1: Failed to suspend device, error -71 [ 496.716883][ T5728] usb 3-1: USB disconnect, device number 41 [ 497.007313][T11296] usb 8-1: Scarlett Gen 2 USB request timed out, cmd 0 [ 497.007525][T11296] usb 8-1: Error initialising Scarlett Gen 2 Mixer Driver: -110 [ 497.173903][T14142] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.174083][T14142] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.174312][T14142] bridge_slave_0: entered allmulticast mode [ 497.392838][T14142] bridge_slave_0: entered promiscuous mode [ 497.475221][T14142] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.475363][T14142] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.475593][T14142] bridge_slave_1: entered allmulticast mode [ 497.644380][T14142] bridge_slave_1: entered promiscuous mode [ 498.549927][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3555'. [ 498.549955][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3555'. [ 498.853593][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3559'. [ 499.031447][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3555'. [ 499.031473][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3555'. [ 499.207334][T14142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.225363][T11296] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -110 [ 499.254958][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 499.274074][T14142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.300211][T11296] usb 8-1: USB disconnect, device number 4 [ 499.471006][ T37] hsr_slave_0: left promiscuous mode [ 499.504355][ T5584] udevd[5584]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.532586][ T37] hsr_slave_1: left promiscuous mode [ 499.535849][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.580267][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.690030][ T37] team0 (unregistering): Port device team_slave_1 removed [ 500.773359][ T37] team0 (unregistering): Port device team_slave_0 removed [ 501.575491][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.575569][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.749364][T14637] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 501.845169][T14142] team0: Port device team_slave_0 added [ 501.851705][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.851756][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.851799][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.851839][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.888279][T14142] team0: Port device team_slave_1 added [ 502.045465][ T822] kernel write not supported for file /dsp (pid: 822 comm: kworker/1:2) [ 502.388339][T14142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.388360][T14142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.388393][T14142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.394588][T14142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.394605][T14142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.394637][T14142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.985576][T14142] hsr_slave_0: entered promiscuous mode [ 502.997495][T14142] hsr_slave_1: entered promiscuous mode [ 503.009883][T14142] debugfs: 'hsr0' already exists in 'hsr' [ 503.009913][T14142] Cannot create hsr debugfs directory [ 505.215676][T14754] Bluetooth: ISO socket layer initialized [ 505.336836][T14757] netlink: 'syz.7.3617': attribute type 1 has an invalid length. [ 505.854703][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.107511][ T5256] 8021q: adding VLAN 0 to HW filter on device eth8 [ 506.216812][T14757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.616102][T14798] TCP: TCP_TX_DELAY enabled [ 507.904271][ T822] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 508.141498][ T822] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 508.141531][ T822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.225834][ T822] usb 8-1: probing VID:PID(0424:012C) [ 508.240999][ T822] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 508.241028][ T822] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 508.241048][ T822] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 508.241096][ T822] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 508.241124][ T822] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 508.553620][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.633211][ T822] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 508.837601][ T822] usb 8-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 509.604697][T14875] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.4294967295.0), cmd(0) [ 509.991352][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.538589][T14142] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 510.615814][ T5707] usb 8-1: USB disconnect, device number 5 [ 510.674374][T14142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.677474][T14142] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 510.747869][ T5707] USB vub300 remote SDIO host controller[0] now disconnected [ 510.760019][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 510.760041][ C1] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 29, name: ktimers/1 [ 510.760060][ C1] preempt_count: 0, expected: 0 [ 510.760071][ C1] RCU nest depth: 2, expected: 0 [ 510.760093][ C1] 5 locks held by ktimers/1/29: [ 510.760107][ C1] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 510.760409][ C1] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 510.760473][ C1] #2: ffff8880b8726260 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 [ 510.760594][ C1] #3: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 510.760737][ C1] #4: ffffc90000a3fa80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 510.760814][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.760847][ C1] Tainted: [L]=SOFTLOCKUP [ 510.760854][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.760873][ C1] Call Trace: [ 510.760882][ C1] [ 510.760892][ C1] dump_stack_lvl+0xe8/0x150 [ 510.760981][ C1] __might_resched+0x329/0x480 [ 510.761056][ C1] __cancel_work_sync+0x6d/0x110 [ 510.761144][ C1] mmc_free_host+0x19/0x30 [ 510.761242][ C1] call_timer_fn+0x192/0x5e0 [ 510.761271][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 510.761356][ C1] ? call_timer_fn+0xd4/0x5e0 [ 510.761385][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 510.761425][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.761459][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 510.761494][ C1] __run_timer_base+0x67b/0x9b0 [ 510.761538][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 510.761569][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 510.761601][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 510.761638][ C1] run_timer_softirq+0xb7/0x170 [ 510.761666][ C1] handle_softirqs+0x1d9/0x6c0 [ 510.761706][ C1] run_ktimerd+0x69/0x100 [ 510.761738][ C1] smpboot_thread_fn+0x57c/0xa80 [ 510.761802][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 510.761843][ C1] kthread+0x388/0x470 [ 510.761936][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 510.761985][ C1] ? __pfx_kthread+0x10/0x10 [ 510.762021][ C1] ret_from_fork+0x514/0xb70 [ 510.762097][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 510.762134][ C1] ? __switch_to+0xc89/0x1420 [ 510.762203][ C1] ? __pfx_kthread+0x10/0x10 [ 510.762241][ C1] ret_from_fork_asm+0x1a/0x30 [ 510.762285][ C1] [ 510.763763][ C1] [ 510.763773][ C1] ============================= [ 510.763782][ C1] WARNING: suspicious RCU usage [ 510.763793][ C1] syzkaller #0 Tainted: G W L [ 510.763805][ C1] ----------------------------- [ 510.763813][ C1] kernel/rcu/srcutree.c:1487 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 510.763832][ C1] [ 510.763832][ C1] other info that might help us debug this: [ 510.763832][ C1] [ 510.763840][ C1] [ 510.763840][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 510.763854][ C1] 5 locks held by ktimers/1/29: [ 510.763868][ C1] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 510.763933][ C1] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 510.763994][ C1] #2: ffff8880b8726260 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 [ 510.764053][ C1] #3: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 510.764110][ C1] #4: ffffc90000a3fa80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 510.764177][ C1] [ 510.764177][ C1] stack backtrace: [ 510.764193][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 510.764228][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 510.764237][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.764251][ C1] Call Trace: [ 510.764260][ C1] [ 510.764269][ C1] dump_stack_lvl+0xe8/0x150 [ 510.764307][ C1] lockdep_rcu_suspicious+0x13f/0x1d0 [ 510.764390][ C1] __synchronize_srcu+0x157/0x2f0 [ 510.764449][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 510.764484][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 510.764512][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 510.764538][ C1] ? synchronize_srcu+0x20a/0x260 [ 510.764565][ C1] wakeup_source_unregister+0x127/0x3d0 [ 510.764684][ C1] mmc_host_classdev_release+0x47/0x100 [ 510.764709][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 510.764731][ C1] device_release+0xc4/0x1f0 [ 510.764778][ C1] kobject_put+0x222/0x550 [ 510.764822][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 510.764856][ C1] call_timer_fn+0x192/0x5e0 [ 510.764880][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 510.764907][ C1] ? call_timer_fn+0xd4/0x5e0 [ 510.764930][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 510.764962][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.764988][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 510.765018][ C1] __run_timer_base+0x67b/0x9b0 [ 510.765054][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 510.765085][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 510.765108][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 510.765134][ C1] run_timer_softirq+0xb7/0x170 [ 510.765154][ C1] handle_softirqs+0x1d9/0x6c0 [ 510.765196][ C1] run_ktimerd+0x69/0x100 [ 510.765220][ C1] smpboot_thread_fn+0x57c/0xa80 [ 510.765247][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 510.765278][ C1] kthread+0x388/0x470 [ 510.765306][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 510.765330][ C1] ? __pfx_kthread+0x10/0x10 [ 510.765359][ C1] ret_from_fork+0x514/0xb70 [ 510.765393][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 510.765426][ C1] ? __switch_to+0xc89/0x1420 [ 510.765458][ C1] ? __pfx_kthread+0x10/0x10 [ 510.765486][ C1] ret_from_fork_asm+0x1a/0x30 [ 510.765516][ C1] [ 510.766174][ C1] ------------[ cut here ]------------ [ 510.766184][ C1] Voluntary context switch within RCU read-side critical section! [ 510.766201][ C1] WARNING: kernel/rcu/tree_plugin.h:332 at rcu_note_context_switch+0xc58/0xef0, CPU#1: ktimers/1/29 [ 510.766283][ C1] Modules linked in: [ 510.766303][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 510.766339][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 510.766348][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.766367][ C1] RIP: 0010:rcu_note_context_switch+0xc58/0xef0 [ 510.766393][ C1] Code: 00 41 c6 45 00 00 48 8b 3d 25 f3 03 0e 48 81 c4 a8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ff 5f ff ff 48 8d 3d 38 ee 07 0e <67> 48 0f b9 3a e9 6f f4 ff ff 90 0f 0b 90 45 84 e4 0f 84 3e f4 ff [ 510.766415][ C1] RSP: 0000:ffffc90000a3f2c0 EFLAGS: 00010002 [ 510.766434][ C1] RAX: 0000000000000000 RBX: ffff88801d2b3e00 RCX: 0000000080000002 [ 510.766450][ C1] RDX: 0000000000000000 RSI: ffffffff8bca7860 RDI: ffffffff8fb34a60 [ 510.766465][ C1] RBP: dffffc0000000000 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 510.766482][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: 0000000000000000 [ 510.766499][ C1] R13: dffffc0000000000 R14: ffff8880b873c940 R15: ffff88801d2b42c4 [ 510.766518][ C1] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 510.766537][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.766553][ C1] CR2: 0000555c00c5b000 CR3: 00000000373bc000 CR4: 00000000003526f0 [ 510.766573][ C1] Call Trace: [ 510.766581][ C1] [ 510.766597][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 510.766621][ C1] ? unwind_next_frame+0x8f/0x2550 [ 510.766765][ C1] ? rcu_is_watching+0x15/0xb0 [ 510.766801][ C1] __schedule+0x293/0x5500 [ 510.766868][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 510.766897][ C1] ? check_path+0x21/0x40 [ 510.766925][ C1] ? check_noncircular+0xda/0x150 [ 510.766962][ C1] ? __pfx___schedule+0x10/0x10 [ 510.767001][ C1] ? schedule+0x90/0x2b0 [ 510.767032][ C1] schedule+0x164/0x2b0 [ 510.767062][ C1] schedule_timeout+0xc0/0x2c0 [ 510.767089][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 510.767116][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 510.767170][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.767202][ C1] ? wait_for_completion+0x272/0x5e0 [ 510.767234][ C1] wait_for_completion+0x2ca/0x5e0 [ 510.767280][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 510.767328][ C1] __synchronize_srcu+0x23b/0x2f0 [ 510.767358][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 510.767383][ C1] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 510.767451][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 510.767479][ C1] ? synchronize_srcu+0x20a/0x260 [ 510.767508][ C1] wakeup_source_unregister+0x127/0x3d0 [ 510.767546][ C1] mmc_host_classdev_release+0x47/0x100 [ 510.767572][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 510.767595][ C1] device_release+0xc4/0x1f0 [ 510.767622][ C1] kobject_put+0x222/0x550 [ 510.767646][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 510.767677][ C1] call_timer_fn+0x192/0x5e0 [ 510.767706][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 510.767738][ C1] ? call_timer_fn+0xd4/0x5e0 [ 510.767767][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 510.767808][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.767840][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 510.767874][ C1] __run_timer_base+0x67b/0x9b0 [ 510.767918][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 510.767944][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 510.767967][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 510.767993][ C1] run_timer_softirq+0xb7/0x170 [ 510.768014][ C1] handle_softirqs+0x1d9/0x6c0 [ 510.768044][ C1] run_ktimerd+0x69/0x100 [ 510.768068][ C1] smpboot_thread_fn+0x57c/0xa80 [ 510.768094][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 510.768125][ C1] kthread+0x388/0x470 [ 510.768153][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 510.768186][ C1] ? __pfx_kthread+0x10/0x10 [ 510.768215][ C1] ret_from_fork+0x514/0xb70 [ 510.768249][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 510.768281][ C1] ? __switch_to+0xc89/0x1420 [ 510.768313][ C1] ? __pfx_kthread+0x10/0x10 [ 510.768343][ C1] ret_from_fork_asm+0x1a/0x30 [ 510.768375][ C1] [ 510.768391][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 510.768407][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 510.768432][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 510.768439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.768450][ C1] Call Trace: [ 510.768456][ C1] [ 510.768463][ C1] vpanic+0x56c/0xa60 [ 510.768492][ C1] ? __pfx__printk+0x10/0x10 [ 510.768514][ C1] ? __pfx_vpanic+0x10/0x10 [ 510.768531][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 510.768614][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 510.768642][ C1] panic+0xc5/0xd0 [ 510.768659][ C1] ? __pfx_panic+0x10/0x10 [ 510.768687][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 510.768709][ C1] __warn+0x315/0x4c0 [ 510.768725][ C1] ? rcu_note_context_switch+0xc58/0xef0 [ 510.768747][ C1] ? rcu_note_context_switch+0xc58/0xef0 [ 510.768765][ C1] __report_bug+0x276/0x570 [ 510.768854][ C1] ? __pfx_prb_first_seq+0x10/0x10 [ 510.768916][ C1] ? rcu_note_context_switch+0xc58/0xef0 [ 510.768936][ C1] ? __pfx___report_bug+0x10/0x10 [ 510.768980][ C1] report_bug_entry+0x19a/0x290 [ 510.769009][ C1] ? rcu_note_context_switch+0xc58/0xef0 [ 510.769025][ C1] ? rcu_note_context_switch+0xc5d/0xef0 [ 510.769045][ C1] handle_bug+0xce/0x200 [ 510.769121][ C1] exc_invalid_op+0x1a/0x50 [ 510.769148][ C1] asm_exc_invalid_op+0x1a/0x20 [ 510.769189][ C1] RIP: 0010:rcu_note_context_switch+0xc58/0xef0 [ 510.769207][ C1] Code: 00 41 c6 45 00 00 48 8b 3d 25 f3 03 0e 48 81 c4 a8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ff 5f ff ff 48 8d 3d 38 ee 07 0e <67> 48 0f b9 3a e9 6f f4 ff ff 90 0f 0b 90 45 84 e4 0f 84 3e f4 ff [ 510.769222][ C1] RSP: 0000:ffffc90000a3f2c0 EFLAGS: 00010002 [ 510.769237][ C1] RAX: 0000000000000000 RBX: ffff88801d2b3e00 RCX: 0000000080000002 [ 510.769250][ C1] RDX: 0000000000000000 RSI: ffffffff8bca7860 RDI: ffffffff8fb34a60 [ 510.769262][ C1] RBP: dffffc0000000000 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 510.769275][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: 0000000000000000 [ 510.769288][ C1] R13: dffffc0000000000 R14: ffff8880b873c940 R15: ffff88801d2b42c4 [ 510.769322][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 510.769340][ C1] ? unwind_next_frame+0x8f/0x2550 [ 510.769364][ C1] ? rcu_is_watching+0x15/0xb0 [ 510.769393][ C1] __schedule+0x293/0x5500 [ 510.769427][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 510.769454][ C1] ? check_path+0x21/0x40 [ 510.769479][ C1] ? check_noncircular+0xda/0x150 [ 510.769506][ C1] ? __pfx___schedule+0x10/0x10 [ 510.769536][ C1] ? schedule+0x90/0x2b0 [ 510.769560][ C1] schedule+0x164/0x2b0 [ 510.769583][ C1] schedule_timeout+0xc0/0x2c0 [ 510.769605][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 510.769628][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 510.769664][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.769692][ C1] ? wait_for_completion+0x272/0x5e0 [ 510.769715][ C1] wait_for_completion+0x2ca/0x5e0 [ 510.769750][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 510.769785][ C1] __synchronize_srcu+0x23b/0x2f0 [ 510.769808][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 510.769827][ C1] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 510.769861][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 510.769882][ C1] ? synchronize_srcu+0x20a/0x260 [ 510.769906][ C1] wakeup_source_unregister+0x127/0x3d0 [ 510.769938][ C1] mmc_host_classdev_release+0x47/0x100 [ 510.769960][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 510.769977][ C1] device_release+0xc4/0x1f0 [ 510.769996][ C1] kobject_put+0x222/0x550 [ 510.770014][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 510.770037][ C1] call_timer_fn+0x192/0x5e0 [ 510.770060][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 510.770085][ C1] ? call_timer_fn+0xd4/0x5e0 [ 510.770106][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 510.770145][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.770181][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 510.770206][ C1] __run_timer_base+0x67b/0x9b0 [ 510.770238][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 510.770262][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 510.770285][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 510.770312][ C1] run_timer_softirq+0xb7/0x170 [ 510.770333][ C1] handle_softirqs+0x1d9/0x6c0 [ 510.770364][ C1] run_ktimerd+0x69/0x100 [ 510.770389][ C1] smpboot_thread_fn+0x57c/0xa80 [ 510.770417][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 510.770450][ C1] kthread+0x388/0x470 [ 510.770481][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 510.770508][ C1] ? __pfx_kthread+0x10/0x10 [ 510.770542][ C1] ret_from_fork+0x514/0xb70 [ 510.770572][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 510.770599][ C1] ? __switch_to+0xc89/0x1420 [ 510.770624][ C1] ? __pfx_kthread+0x10/0x10 [ 510.770653][ C1] ret_from_fork_asm+0x1a/0x30 [ 510.770686][ C1] [ 510.771770][ C1] Kernel Offset: disabled