last executing test programs: 2m40.09106715s ago: executing program 2 (id=2614): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x19, 0x8001, 0x0}) 2m39.983237008s ago: executing program 2 (id=2616): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="ca0e808b935b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) 2m39.863755664s ago: executing program 2 (id=2619): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x14, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48d4}, 0x4044010) 2m39.694884436s ago: executing program 2 (id=2621): r0 = syz_io_uring_setup(0x744e, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001c40), 0x10f000, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c8d000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000005c0)={0xffffffffffffffff, 0x8, 0x2, "8b75aaf1824024c670e8ea307bf0bd55dfba1c57c33427677ef9306cb5e425e6460d607aca18992bfa9001aa51d1be717b8a1f87dd99afc639c19d77669518d835a522a122ff8cb42ea86a268ff84ffedd1e0d0b01b2ed38c342ab3c017078f765bb3d37d864def1bff3f7cf89086bcb8c21eb233d75e6e40369cc6f186724122963b62c3e622fd4b91cd912ba7423b43052de3a127c8e0b45a4e37a10f1ac51b7882b99ff4b9dba3e21e24346246ab2a8f9a13d758c41f9cf277b478c"}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x40050) 2m38.495874555s ago: executing program 2 (id=2635): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 2m38.334971396s ago: executing program 2 (id=2636): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) sync() 2m23.170690278s ago: executing program 32 (id=2636): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) sync() 17.713928003s ago: executing program 4 (id=3337): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x41, 0x800000000004, @tid=r0}, 0x0) 17.348708611s ago: executing program 4 (id=3339): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) 15.896871318s ago: executing program 4 (id=3348): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x44, 0x7f, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) 14.226945794s ago: executing program 4 (id=3351): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x1c1040) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(0x0, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}}, 0x24}}, 0x24040084) sendmmsg$inet(r0, 0x0, 0x0, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 13.732306015s ago: executing program 4 (id=3353): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 12.629098203s ago: executing program 4 (id=3359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 10.594964636s ago: executing program 1 (id=3364): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="10ee49000000cf91e18255edf71af12fecff7270826cef9273d7295f7b07e59fa77f52d73500655d5a83dcd3f47935729589bbeb7af74fb62f48f7cf00c8132dcdd9362981713307781abb68c6de62cc81276df217bae641f2467b9b109316464c6b277797c8cf92b58e205495c91954d146074d525cf5ed"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.822547851s ago: executing program 3 (id=3367): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) 9.249172159s ago: executing program 3 (id=3369): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) 8.331057148s ago: executing program 3 (id=3374): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup3(r1, r0, 0x80000) write$sndseq(r2, 0x0, 0x0) 6.85193646s ago: executing program 1 (id=3375): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.728697887s ago: executing program 0 (id=3376): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000480)=""/238, 0xee, 0x10120, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0xc0800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, 0x0) 6.058208975s ago: executing program 3 (id=3378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6c}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.801989272s ago: executing program 5 (id=3380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4.560293169s ago: executing program 5 (id=3381): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_gettime(r0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x44, 0x7f, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) 4.53637526s ago: executing program 1 (id=3382): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 4.346592128s ago: executing program 5 (id=3383): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) 4.289974163s ago: executing program 0 (id=3384): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 4.173488606s ago: executing program 3 (id=3385): syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000106307012040000102030109026f0003010300050904000000010100000a240100000a0002010209040100000102000009040101010102000009050109081a02fc0a072501000e060009040200000102000009040201010102000008240201f9033c7f0724010704021009058209400025010805"], 0x0) 3.915058589s ago: executing program 1 (id=3386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0000000030801010000000000000000030000020600024088be00000c000480080001400000009105000300060000000900010073797a3100000000340004800800084000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) 3.911624495s ago: executing program 0 (id=3387): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x40601) r4 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) read$char_usb(0xffffffffffffffff, &(0x7f0000000480)=""/244, 0xf4) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r6, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x2}, {r6, 0x1}], 0x2, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.799026032s ago: executing program 1 (id=3388): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x800, 0x4) read$char_usb(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.133809935s ago: executing program 0 (id=3389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)='~', 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/8, &(0x7f00000000c0)=0x31) 984.55947ms ago: executing program 5 (id=3390): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000140)={0x4427, [0x6, 0x200, 0x3], [{0x6, 0x48000, 0x1, 0x1, 0x1, 0x1}, {0xdf, 0x2, 0x0, 0x0, 0x1}, {0xffff, 0x7ff, 0x0, 0x0, 0x1, 0x1}, {0x2, 0xffff4db1, 0x0, 0x1}, {0x10, 0x1, 0x1, 0x1, 0x1, 0x1}, {0xfffffffb, 0x6, 0x0, 0x1}, {0x3, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x3, 0xfffff801, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x1, 0x1}, {0x7, 0x5, 0x1, 0x0, 0x1}], 0x8}) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r0, 0x0, 0xb0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r1, r0, 0x0) 753.274581ms ago: executing program 0 (id=3391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 711.098191ms ago: executing program 1 (id=3392): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x44, 0x7f, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) 585.867428ms ago: executing program 3 (id=3393): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f0000001b40)) 528.324465ms ago: executing program 5 (id=3394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 466.965995ms ago: executing program 0 (id=3395): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 0s ago: executing program 5 (id=3396): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 588.528714][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.528736][ T9] usb 1-1: Product: syz [ 588.528754][ T9] usb 1-1: Manufacturer: syz [ 588.528770][ T9] usb 1-1: SerialNumber: syz [ 588.629150][ T9] usb 1-1: config 0 descriptor?? [ 588.874465][ T9] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 588.877571][ T9] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 588.878167][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.878641][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.879117][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.879579][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.900581][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.909150][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.937538][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.944347][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.944881][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.945374][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.946005][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.946499][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.946995][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.947613][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.948100][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.948572][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.949047][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.949557][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 588.949605][ T9] input input49: Timeout waiting for response from device. [ 589.053248][ T9] usb 1-1: USB disconnect, device number 76 [ 589.911962][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 590.041209][ T9] usb 1-1: device descriptor read/64, error -71 [ 590.341068][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 590.481061][ T9] usb 1-1: device descriptor read/64, error -71 [ 590.591661][ T9] usb usb1-port1: attempt power cycle [ 590.790936][ T5800] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 590.971011][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 590.995584][ T9] usb 1-1: device descriptor read/8, error -71 [ 591.021748][ T5800] usb 2-1: no configurations [ 591.021770][ T5800] usb 2-1: can't read configurations, error -22 [ 591.152404][ T5800] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 591.241096][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 591.263043][ T9] usb 1-1: device descriptor read/8, error -71 [ 591.312037][ T5800] usb 2-1: no configurations [ 591.312058][ T5800] usb 2-1: can't read configurations, error -22 [ 591.312442][ T5800] usb usb2-port1: attempt power cycle [ 591.391361][ T9] usb usb1-port1: unable to enumerate USB device [ 591.472990][ T822] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 591.620982][ T822] usb 5-1: Using ep0 maxpacket: 8 [ 591.624979][ T822] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 591.625009][ T822] usb 5-1: config 179 has no interface number 0 [ 591.625069][ T822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 591.625100][ T822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 591.625132][ T822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 591.625170][ T822] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 591.625201][ T822] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 591.625247][ T822] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 591.625272][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.686501][ T5800] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 591.707277][T12775] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 591.740686][ T5800] usb 2-1: no configurations [ 591.740707][ T5800] usb 2-1: can't read configurations, error -22 [ 591.921751][ T5800] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 591.943534][ T5800] usb 2-1: no configurations [ 591.943556][ T5800] usb 2-1: can't read configurations, error -22 [ 591.944528][ T5800] usb usb2-port1: unable to enumerate USB device [ 592.062340][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.066300][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.147034][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 592.275081][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 592.275155][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 592.275249][ T5800] usb 5-1: USB disconnect, device number 71 [ 593.210982][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 593.378743][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.401058][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 593.401093][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 593.401116][ T9] usb 5-1: Product: syz [ 593.401131][ T9] usb 5-1: Manufacturer: syz [ 593.401146][ T9] usb 5-1: SerialNumber: syz [ 593.464941][T12815] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2374'. [ 593.616186][ T37] audit: type=1326 audit(1785287151.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12816 comm="syz.1.2375" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe95bc9de99 code=0x0 [ 593.739362][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 593.931214][ T822] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 594.081165][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 594.084350][ T822] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 594.084383][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.127039][ T822] usb 2-1: config 0 descriptor?? [ 594.240997][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 594.381278][ T9] usb 1-1: device descriptor read/64, error -71 [ 594.641001][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 594.772209][ T9] usb 1-1: device descriptor read/64, error -71 [ 594.881904][ T9] usb usb1-port1: attempt power cycle [ 595.203696][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2383'. [ 595.231092][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 595.253415][ T9] usb 1-1: device descriptor read/8, error -71 [ 595.421095][ T822] usb 2-1: string descriptor 0 read error: -71 [ 595.421158][ T822] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 595.421238][ T822] uvcvideo 2-1:0.0: Found UVC 0.00 device (2833:0201) [ 595.421400][ T822] uvcvideo 2-1:0.0: No valid video chain found. [ 595.461120][ T822] usb 2-1: USB disconnect, device number 74 [ 595.526435][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 595.552085][ T9] usb 1-1: device descriptor read/8, error -71 [ 595.678400][ T9] usb usb1-port1: unable to enumerate USB device [ 595.930929][ T822] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 596.082802][ T822] usb 2-1: no configurations [ 596.082826][ T822] usb 2-1: can't read configurations, error -22 [ 596.210919][ T822] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 596.368457][ T822] usb 2-1: no configurations [ 596.368480][ T822] usb 2-1: can't read configurations, error -22 [ 596.368914][ T822] usb usb2-port1: attempt power cycle [ 596.710990][ T822] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 596.732874][ T822] usb 2-1: no configurations [ 596.732894][ T822] usb 2-1: can't read configurations, error -22 [ 596.865349][ T822] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 596.897555][ T822] usb 2-1: no configurations [ 596.897579][ T822] usb 2-1: can't read configurations, error -22 [ 596.898001][ T822] usb usb2-port1: unable to enumerate USB device [ 597.196701][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2394'. [ 598.802832][ T822] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 598.934677][ T822] usb 3-1: device descriptor read/64, error -71 [ 598.990999][ T5735] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 599.089113][ T9] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 599.120985][ T5735] usb 4-1: device descriptor read/64, error -71 [ 599.171036][ T822] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 599.238371][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2406'. [ 599.251657][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 599.258074][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 599.258106][ T9] usb 2-1: config 179 has no interface number 0 [ 599.258549][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 599.258583][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 599.258614][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 599.258874][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 599.258905][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 599.258952][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 599.259208][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.327094][ T822] usb 3-1: device descriptor read/64, error -71 [ 599.382338][T12901] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 599.431796][ T822] usb usb3-port1: attempt power cycle [ 599.471162][ T5735] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 599.649692][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.661411][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.689637][ T31] usb 2-1: USB disconnect, device number 79 [ 599.689689][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 599.689755][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 599.781013][ T5735] usb 4-1: device descriptor read/64, error -71 [ 599.801015][ T822] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 599.821786][ T822] usb 3-1: device descriptor read/8, error -71 [ 599.891525][ T5735] usb usb4-port1: attempt power cycle [ 600.060975][ T822] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 600.082619][ T822] usb 3-1: device descriptor read/8, error -71 [ 600.193748][ T822] usb usb3-port1: unable to enumerate USB device [ 600.232118][ T5735] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 600.251839][ T5735] usb 4-1: device descriptor read/8, error -71 [ 600.511393][ T5735] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 600.542766][ T5735] usb 4-1: device descriptor read/8, error -71 [ 600.633200][T12920] o2cb: This node has not been configured. [ 600.633218][T12920] o2cb: Cluster check failed. Fix errors before retrying. [ 600.633251][T12920] (syz.0.2413,12920,1):user_dlm_register:674 ERROR: status = -22 [ 600.633321][T12920] (syz.0.2413,12920,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 600.691392][ T5735] usb usb4-port1: unable to enumerate USB device [ 600.779363][T12437] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 600.783955][T12437] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 600.871055][ T822] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 600.896677][ T31] usb 5-1: USB disconnect, device number 72 [ 600.942048][ T31] usblp0: removed [ 601.029730][ T822] usb 2-1: no configurations [ 601.029754][ T822] usb 2-1: can't read configurations, error -22 [ 601.150979][ T822] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 601.301886][ T822] usb 2-1: no configurations [ 601.301908][ T822] usb 2-1: can't read configurations, error -22 [ 601.302385][ T822] usb usb2-port1: attempt power cycle [ 601.420993][ T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 601.571341][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 601.573534][ T31] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 601.573564][ T31] usb 5-1: config 0 has no interface number 0 [ 601.573598][ T31] usb 5-1: config 0 interface 154 has no altsetting 0 [ 601.578619][ T31] usb 5-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c8.70 [ 601.578641][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.578657][ T31] usb 5-1: Product: syz [ 601.578668][ T31] usb 5-1: Manufacturer: syz [ 601.578679][ T31] usb 5-1: SerialNumber: syz [ 601.646957][ T31] usb 5-1: config 0 descriptor?? [ 601.690956][ T822] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 601.712778][ T822] usb 2-1: no configurations [ 601.712801][ T822] usb 2-1: can't read configurations, error -22 [ 601.841025][ T822] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 601.878653][ T822] usb 2-1: no configurations [ 601.878675][ T822] usb 2-1: can't read configurations, error -22 [ 601.879283][ T822] usb usb2-port1: unable to enumerate USB device [ 601.931008][ T5800] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 601.955470][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.959774][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.080972][ T5800] usb 3-1: Using ep0 maxpacket: 32 [ 602.085152][ T5800] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 602.085253][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 602.085284][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 602.085310][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 602.085339][ T5800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 602.097459][ T5800] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 602.097495][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.097518][ T5800] usb 3-1: Product: syz [ 602.097535][ T5800] usb 3-1: Manufacturer: syz [ 602.114131][ T5800] usb 3-1: SerialNumber: syz [ 602.284850][ T5800] usb 3-1: config 0 descriptor?? [ 603.287058][ T31] ldusb 5-1:0.154: Interrupt in endpoint not found [ 603.303922][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.304436][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.304897][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.305354][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.305810][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.306281][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.307338][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.308034][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.308646][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.309318][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.317172][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.335686][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.380648][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.392659][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.393159][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.394245][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.394923][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.395458][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.395906][ T5800] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 603.395951][ T5800] input input50: Timeout waiting for response from device. [ 603.397595][ T31] usb 5-1: USB disconnect, device number 73 [ 603.464105][ T5800] usb 3-1: USB disconnect, device number 87 [ 604.041174][ T5735] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 604.081769][ T5800] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 604.211372][ T5800] usb 1-1: device descriptor read/64, error -71 [ 604.450990][ T5800] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 604.580976][ T5800] usb 1-1: device descriptor read/64, error -71 [ 604.693982][ T5800] usb usb1-port1: attempt power cycle [ 604.694636][ T5735] usb 2-1: unable to get BOS descriptor or descriptor too short [ 604.702185][ T5735] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 604.732984][ T5735] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 604.733020][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.733044][ T5735] usb 2-1: Product: syz [ 604.733060][ T5735] usb 2-1: Manufacturer: syz [ 604.733077][ T5735] usb 2-1: SerialNumber: syz [ 604.849812][T12437] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 604.885205][T12437] Bluetooth: hci2: Injecting HCI hardware error event [ 604.894609][ T4916] Bluetooth: hci2: hardware error 0x00 [ 605.026013][ T5735] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 605.040992][ T5800] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 605.062022][ T5800] usb 1-1: device descriptor read/8, error -71 [ 605.184119][ T5735] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 605.184150][ T5735] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 605.300953][ T5800] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 605.322306][ T5800] usb 1-1: device descriptor read/8, error -71 [ 605.431890][ T5800] usb usb1-port1: unable to enumerate USB device [ 605.531097][ T31] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 605.587642][ T5735] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 605.587665][ T5735] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 605.685795][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.685970][ T31] usb 5-1: config 0 has no interfaces? [ 605.686006][ T31] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 605.686033][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.726914][ T31] usb 5-1: config 0 descriptor?? [ 605.788112][ T5735] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 606.013629][ T5735] usb 2-1: USB disconnect, device number 84 [ 606.144115][T12998] zram: Can't change algorithm for initialized device [ 606.199047][ T6393] udevd[6393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 606.621134][T13006] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.621301][T13006] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 606.621433][T13006] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 606.761744][ T5735] usb 5-1: USB disconnect, device number 74 [ 607.001203][ T4916] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 607.681114][ T57] block nbd0: Possible stuck request ffff888026f1c940: control (read@0,1024B). Runtime 240 seconds [ 607.681191][ T57] block nbd0: Possible stuck request ffff888026f1cb00: control (read@1024,1024B). Runtime 240 seconds [ 607.681225][ T57] block nbd0: Possible stuck request ffff888026f1ccc0: control (read@2048,1024B). Runtime 240 seconds [ 607.681258][ T57] block nbd0: Possible stuck request ffff888026f1ce80: control (read@3072,1024B). Runtime 240 seconds [ 608.223906][ T5735] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 608.374324][ T5735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.374355][ T5735] usb 4-1: config 0 has no interfaces? [ 608.374389][ T5735] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 608.374416][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.421753][ T5735] usb 4-1: config 0 descriptor?? [ 608.530962][ T5800] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 608.681156][T13010] Bluetooth: hci1: command 0x0406 tx timeout [ 608.681207][T13010] Bluetooth: hci5: command 0x0406 tx timeout [ 608.688711][ T4916] Bluetooth: hci4: command 0x0406 tx timeout [ 608.689241][ T5800] usb 3-1: no configurations [ 608.689258][ T5800] usb 3-1: can't read configurations, error -22 [ 608.892226][ T5800] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 609.042435][ T5800] usb 3-1: no configurations [ 609.042459][ T5800] usb 3-1: can't read configurations, error -22 [ 609.043272][ T5800] usb usb3-port1: attempt power cycle [ 609.381043][ T5800] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 609.403103][ T5800] usb 3-1: no configurations [ 609.403129][ T5800] usb 3-1: can't read configurations, error -22 [ 609.533233][ T5800] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 609.552394][ T5800] usb 3-1: no configurations [ 609.552408][ T5800] usb 3-1: can't read configurations, error -22 [ 609.553174][ T5800] usb usb3-port1: unable to enumerate USB device [ 610.712633][ T31] usb 4-1: USB disconnect, device number 50 [ 610.732880][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'. [ 612.181048][ T5735] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 612.320749][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 612.351363][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 612.353868][ T5735] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 612.353899][ T5735] usb 2-1: config 0 has no interface number 0 [ 612.353948][ T5735] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 612.353976][ T5735] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 612.356912][ T5735] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 612.356943][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.356965][ T5735] usb 2-1: Product: syz [ 612.356982][ T5735] usb 2-1: Manufacturer: syz [ 612.356999][ T5735] usb 2-1: SerialNumber: syz [ 612.408060][ T5735] usb 2-1: config 0 descriptor?? [ 612.422483][T13102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.425855][T13102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.663224][T13102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.663777][T13102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.868819][ T5735] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 612.869122][ T5735] asix 2-1:0.34: probe with driver asix failed with error -61 [ 613.028314][T13125] macvlan0: left allmulticast mode [ 613.028359][T13125] macvlan0: left promiscuous mode [ 613.028956][T13125] bridge0: port 4(macvlan0) entered disabled state [ 613.523035][T13125] team0: left allmulticast mode [ 613.523060][T13125] team_slave_0: left allmulticast mode [ 613.523085][T13125] team_slave_1: left allmulticast mode [ 613.523105][T13125] bridge1: left allmulticast mode [ 613.523150][T13125] team0: left promiscuous mode [ 613.523164][T13125] team_slave_0: left promiscuous mode [ 613.523383][T13125] team_slave_1: left promiscuous mode [ 613.523603][T13125] bridge1: left promiscuous mode [ 613.524652][T13125] bridge0: port 3(team0) entered disabled state [ 613.715430][T13125] bridge_slave_1: left allmulticast mode [ 613.715472][T13125] bridge_slave_1: left promiscuous mode [ 613.718034][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.825943][T13125] bridge_slave_0: left allmulticast mode [ 613.826002][T13125] bridge_slave_0: left promiscuous mode [ 613.826307][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.145802][ T5735] usb 2-1: USB disconnect, device number 85 [ 616.009128][ T5735] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 616.157774][T13177] ALSA: mixer_oss: invalid OSS volume '' [ 616.165080][ T5735] usb 1-1: Using ep0 maxpacket: 8 [ 616.187646][ T5735] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 616.187679][ T5735] usb 1-1: config 179 has no interface number 0 [ 616.187732][ T5735] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 616.187764][ T5735] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 616.187796][ T5735] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.187826][ T5735] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 616.187856][ T5735] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 616.187907][ T5735] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 616.187933][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.285058][T13164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 616.504600][T13164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.505189][T13164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.603118][T13177] ALSA: mixer_oss: invalid OSS volume '' [ 616.895150][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 616.895234][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 616.901885][ T5735] usb 1-1: USB disconnect, device number 89 [ 617.830967][ T5735] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 617.983870][ T5735] usb 2-1: Using ep0 maxpacket: 32 [ 617.986387][ T5735] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 617.986414][ T5735] usb 2-1: config 0 has no interface number 0 [ 617.990753][ T5735] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 617.992983][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.993048][ T5735] usb 2-1: Product: syz [ 617.993091][ T5735] usb 2-1: Manufacturer: syz [ 617.993182][ T5735] usb 2-1: SerialNumber: syz [ 618.062838][ T5735] usb 2-1: config 0 descriptor?? [ 618.084336][ T5735] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 618.084378][ T5735] usb 2-1: selecting invalid altsetting 1 [ 618.084398][ T5735] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 618.108237][ T5735] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 618.119221][ T5735] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 618.119399][ T5735] usb 2-1: media controller created [ 618.272597][ T5735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.690552][T13214] netlink: 'syz.3.2526': attribute type 4 has an invalid length. [ 618.880473][ T5735] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 618.880533][ T5735] zl10353_read_register: readreg error (reg=127, ret==-71) [ 618.881174][ T5735] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 619.681102][ T5735] usb 2-1: USB disconnect, device number 86 [ 623.007609][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'. [ 623.023778][ T5800] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 623.138491][T13297] bridge3: port 1(veth0_to_bond) entered blocking state [ 623.138628][T13297] bridge3: port 1(veth0_to_bond) entered disabled state [ 623.138832][T13297] veth0_to_bond: entered allmulticast mode [ 623.170926][ T5800] usb 5-1: Using ep0 maxpacket: 8 [ 623.184857][T13297] veth0_to_bond: entered promiscuous mode [ 623.206705][ T5800] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 623.206738][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.206760][ T5800] usb 5-1: Product: syz [ 623.206776][ T5800] usb 5-1: Manufacturer: syz [ 623.206801][ T5800] usb 5-1: SerialNumber: syz [ 623.266088][ T5800] usb 5-1: config 0 descriptor?? [ 623.287675][ T5800] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 623.471135][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 623.791496][ T5800] gspca_sonixj: reg_w1 err -110 [ 623.791599][ T5800] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 624.003888][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 624.003925][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.551729][ T5800] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 624.710984][ T5800] usb 1-1: device descriptor read/64, error -71 [ 624.951009][ T5800] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 625.084483][ T5800] usb 1-1: device descriptor read/64, error -71 [ 625.112660][ T31] usb 5-1: USB disconnect, device number 75 [ 625.191624][ T5800] usb usb1-port1: attempt power cycle [ 625.220743][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 625.417221][T13331] binder: 13330:13331 unknown command 0 [ 625.417254][T13331] binder: 13330:13331 ioctl c0306201 2000000001c0 returned -22 [ 625.537821][ T5800] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 625.551738][ T5800] usb 1-1: device descriptor read/8, error -71 [ 625.731198][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2570'. [ 625.792018][ T5800] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 625.812700][ T5800] usb 1-1: device descriptor read/8, error -71 [ 625.922581][ T5800] usb usb1-port1: unable to enumerate USB device [ 626.258317][ T31] usb 4-1: USB disconnect, device number 51 [ 626.411908][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'. [ 626.995112][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2584'. [ 628.721468][T13378] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2587'. [ 629.757477][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 629.864671][ T5735] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 630.030956][ T5800] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 630.031001][ T5735] usb 3-1: device descriptor read/64, error -71 [ 630.139950][T13390] netlink: 'syz.3.2594': attribute type 21 has an invalid length. [ 630.139981][T13390] IPv6: NLM_F_CREATE should be specified when creating new route [ 630.185881][ T5800] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 630.185916][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.281019][ T5735] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 630.359717][T13396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.430618][ T5735] usb 3-1: device descriptor read/64, error -71 [ 630.531532][ T5735] usb usb3-port1: attempt power cycle [ 630.886529][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886572][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886602][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886639][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886669][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886698][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886726][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886755][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886793][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 630.886821][ T5800] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 631.021579][ T5800] hid-generic 00A0:0006:0003.0013: hidraw0: HID v0.05 Device [syz0] on syz0 [ 631.262863][ T5735] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 631.309133][ T10] usb 5-1: USB disconnect, device number 76 [ 631.485415][ T5735] usb 3-1: device not accepting address 94, error -71 [ 631.520371][T13412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2599'. [ 631.859552][T13405] fido_id[13405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 632.190937][ T31] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 632.340879][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 632.343448][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.343477][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.347481][ T31] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 632.347510][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.347531][ T31] usb 5-1: Product: syz [ 632.347545][ T31] usb 5-1: Manufacturer: syz [ 632.347560][ T31] usb 5-1: SerialNumber: syz [ 632.455980][ T31] usb 5-1: config 0 descriptor?? [ 632.607964][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.608042][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.702517][T13438] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 633.000089][T13447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2612'. [ 633.123780][T13452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2613'. [ 633.192311][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 633.322492][ T31] usb 4-1: device descriptor read/64, error -71 [ 633.458024][ T5800] usb 5-1: USB disconnect, device number 77 [ 633.560953][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 633.687929][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2624'. [ 633.691203][ T31] usb 4-1: device descriptor read/64, error -71 [ 633.802309][ T31] usb usb4-port1: attempt power cycle [ 633.897613][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2625'. [ 633.994824][T13481] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2627'. [ 634.155339][ T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 634.206837][ T31] usb 4-1: device descriptor read/8, error -71 [ 634.288321][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'. [ 634.466774][ T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 634.485402][ T31] usb 4-1: device descriptor read/8, error -71 [ 634.591448][ T31] usb usb4-port1: unable to enumerate USB device [ 634.660927][ T5735] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 634.690935][ T5800] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 634.818871][ T5735] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.829919][ T5735] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 634.841245][ T5800] usb 5-1: Using ep0 maxpacket: 16 [ 634.845724][ T5800] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.845787][ T5800] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 634.858493][ T5800] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 634.858545][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.858576][ T5800] usb 5-1: Product: syz [ 634.858619][ T5800] usb 5-1: Manufacturer: syz [ 634.858661][ T5800] usb 5-1: SerialNumber: syz [ 634.892264][ T5800] usb 5-1: config 0 descriptor?? [ 634.903265][ T5735] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 634.903297][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.903328][ T5735] usb 2-1: Product: syz [ 634.903346][ T5735] usb 2-1: Manufacturer: syz [ 634.903362][ T5735] usb 2-1: SerialNumber: syz [ 635.162422][ T5735] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 635.386229][ T5735] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 635.386264][ T5735] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 635.386280][ T5735] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 635.386379][ T5735] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 635.386393][ T5735] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 635.386408][ T5735] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 635.865532][ T5800] usb 5-1: USB disconnect, device number 78 [ 636.163223][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2639'. [ 636.193931][T13513] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2640'. [ 636.386331][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2643'. [ 636.408242][ T5735] usb 2-1: USB disconnect, device number 87 [ 636.792195][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 636.990981][ T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 637.150951][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 637.153059][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.153086][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 637.156503][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 637.156536][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.156559][ T10] usb 1-1: Product: syz [ 637.156576][ T10] usb 1-1: Manufacturer: syz [ 637.156593][ T10] usb 1-1: SerialNumber: syz [ 637.185255][ T10] usb 1-1: config 0 descriptor?? [ 637.221148][ T5800] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 637.381030][ T5800] usb 4-1: Using ep0 maxpacket: 8 [ 637.385124][ T5800] usb 4-1: unable to get BOS descriptor or descriptor too short [ 637.387305][ T5800] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 205, changing to 7 [ 637.387355][ T5800] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 160, changing to 7 [ 637.387385][ T5800] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 637.397489][ T5800] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 637.397524][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.397547][ T5800] usb 4-1: Product: syz [ 637.397564][ T5800] usb 4-1: Manufacturer: syz [ 637.397581][ T5800] usb 4-1: SerialNumber: syz [ 637.716914][ T5800] usb 4-1: selecting invalid altsetting 1 [ 637.765463][ T5800] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 637.781297][ T5800] usb 4-1: selecting invalid altsetting 1 [ 637.786126][ T5800] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 637.807654][ T5800] usb 4-1: selecting invalid altsetting 1 [ 637.882958][ T5800] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 637.890328][ T5800] usb 4-1: USB disconnect, device number 56 [ 637.971028][T11483] block nbd0: Possible stuck request ffff888026f1c940: control (read@0,1024B). Runtime 270 seconds [ 637.971097][T11483] block nbd0: Possible stuck request ffff888026f1cb00: control (read@1024,1024B). Runtime 270 seconds [ 637.971131][T11483] block nbd0: Possible stuck request ffff888026f1ccc0: control (read@2048,1024B). Runtime 270 seconds [ 637.971165][T11483] block nbd0: Possible stuck request ffff888026f1ce80: control (read@3072,1024B). Runtime 270 seconds [ 638.114280][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 638.308106][ T10] usb 1-1: USB disconnect, device number 94 [ 638.371978][T13545] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2652'. [ 638.661957][T13551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2653'. [ 639.010969][ T5800] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 639.161552][ T5800] usb 4-1: Using ep0 maxpacket: 32 [ 639.164546][ T5800] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 639.164576][ T5800] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.167925][ T5800] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 639.167956][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.167978][ T5800] usb 4-1: Product: syz [ 639.167996][ T5800] usb 4-1: Manufacturer: syz [ 639.168012][ T5800] usb 4-1: SerialNumber: syz [ 639.219433][ T5800] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 639.219507][ T5800] usb 4-1: no configuration chosen from 1 choice [ 639.341358][T13568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2663'. [ 639.710987][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 639.860951][ T5800] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 639.883520][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.887423][ T10] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 639.887455][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.887477][ T10] usb 5-1: Product: syz [ 639.887497][ T10] usb 5-1: Manufacturer: syz [ 639.887509][ T10] usb 5-1: SerialNumber: syz [ 639.935066][ T10] usb 5-1: config 0 descriptor?? [ 639.949550][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 640.018435][ T5800] usb 1-1: Using ep0 maxpacket: 16 [ 640.031324][ T5800] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 640.031353][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.031372][ T5800] usb 1-1: config 0 has no interface number 0 [ 640.031421][ T5800] usb 1-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 640.031445][ T5800] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.044156][ T5800] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 640.044239][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.044300][ T5800] usb 1-1: Product: syz [ 640.044353][ T5800] usb 1-1: Manufacturer: syz [ 640.044390][ T5800] usb 1-1: SerialNumber: syz [ 640.127040][ T10] usb 5-1: Direct firmware load for dvb-usb-digivox-02.fw failed with error -2 [ 640.127073][ T10] usb 5-1: Falling back to sysfs fallback for: dvb-usb-digivox-02.fw [ 640.169767][ T5800] usb 1-1: config 0 descriptor?? [ 640.197665][ T5800] asix 1-1:0.34: probe with driver asix failed with error -22 [ 640.383572][T13581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2669'. [ 640.834812][T13010] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 640.837562][T13010] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 641.121658][ T5735] usb 1-1: USB disconnect, device number 95 [ 641.215325][T13599] loop2: detected capacity change from 0 to 8 [ 641.619963][ T5735] usb 4-1: USB disconnect, device number 57 [ 641.701471][T13599] Dev loop2: unable to read RDB block 8 [ 641.701521][T13599] loop2: unable to read partition table [ 641.701723][T13599] loop2: partition table beyond EOD, truncated [ 641.701761][T13599] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 641.819034][T13611] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2681'. [ 642.213348][ T5735] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 642.221011][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 642.374641][ T5735] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 642.374678][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.403513][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.424659][ T9] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 642.424692][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.424714][ T9] usb 1-1: Product: syz [ 642.424730][ T9] usb 1-1: Manufacturer: syz [ 642.424746][ T9] usb 1-1: SerialNumber: syz [ 642.477152][ T9] usb 1-1: config 0 descriptor?? [ 642.503789][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 642.850204][ T5735] usb 4-1: Firmware version (0.0) predates our first public release. [ 642.850236][ T5735] usb 4-1: Please update to version 0.2 or newer [ 643.072101][T13010] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 643.072133][T13010] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 643.222146][ T5735] usb 4-1: USB disconnect, device number 58 [ 644.495665][T13660] binder_alloc: 13659: binder_alloc_buf, no vma [ 644.627596][T13662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 644.841029][T13010] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 644.851296][T13010] Bluetooth: hci1: Injecting HCI hardware error event [ 644.871113][T11887] Bluetooth: hci1: hardware error 0x00 [ 645.121001][ T5800] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 645.273790][ T5800] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 645.273824][ T5800] usb 4-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 645.273870][ T5800] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.275097][ T5800] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 645.275129][ T5800] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 645.275144][ T5800] usb 4-1: Manufacturer: syz [ 645.280034][ T5800] usb 4-1: config 0 descriptor?? [ 645.320418][ T5800] igorplugusb 4-1:0.0: incorrect number of endpoints [ 645.401252][ T5735] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 645.516814][ T5800] usb 4-1: USB disconnect, device number 59 [ 645.560922][ T5735] usb 2-1: Using ep0 maxpacket: 32 [ 645.583431][ T5735] usb 2-1: config 9 has an invalid interface number: 245 but max is 0 [ 645.583465][ T5735] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 645.583488][ T5735] usb 2-1: config 9 has no interface number 0 [ 645.587149][ T5735] usb 2-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 645.587184][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.587222][ T5735] usb 2-1: Product: syz [ 645.587239][ T5735] usb 2-1: Manufacturer: syz [ 645.587257][ T5735] usb 2-1: SerialNumber: syz [ 645.941278][ T5735] uvcvideo 2-1:9.245: probe with driver uvcvideo failed with error -22 [ 645.959876][ T5735] usb 2-1: USB disconnect, device number 88 [ 646.561745][ T5800] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 646.861209][ T9] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 646.879109][ T9] usb 1-1: USB disconnect, device number 96 [ 647.038735][ T10] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 647.064709][ T10] usb 5-1: USB disconnect, device number 79 [ 647.234669][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2717'. [ 647.267056][T11887] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 647.382492][ T5800] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 647.382536][ T5800] usb 4-1: config 179 has no interface number 0 [ 647.382604][ T5800] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 647.382637][ T5800] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 647.382664][ T5800] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 647.382693][ T5800] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 647.382718][ T5800] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 647.382765][ T5800] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 647.382795][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.496501][ T5800] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 647.686499][ T5800] usb 4-1: USB disconnect, device number 60 [ 647.818875][T13714] netlink: 'syz.4.2722': attribute type 3 has an invalid length. [ 648.200401][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'. [ 648.991085][ T5800] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 649.071029][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 649.101071][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 649.141075][ T5800] usb 2-1: Using ep0 maxpacket: 16 [ 649.144955][ T5800] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.146185][ T5800] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.146276][ T5800] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 649.149914][ T5800] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 649.149951][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.149967][ T5800] usb 2-1: Product: syz [ 649.149978][ T5800] usb 2-1: Manufacturer: syz [ 649.149989][ T5800] usb 2-1: SerialNumber: syz [ 649.235238][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 649.235271][ T10] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 649.235322][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.237418][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 649.237448][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 649.237468][ T10] usb 5-1: Manufacturer: syz [ 649.306190][ T10] usb 5-1: config 0 descriptor?? [ 649.312236][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 649.326767][ T9] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 649.326823][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 649.346394][ T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 649.346428][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.346450][ T9] usb 4-1: Product: syz [ 649.346467][ T9] usb 4-1: Manufacturer: syz [ 649.346485][ T9] usb 4-1: SerialNumber: syz [ 649.391257][ T10] igorplugusb 5-1:0.0: incorrect number of endpoints [ 649.409790][ T9] usb 4-1: config 0 descriptor?? [ 649.466047][ T5800] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 649.468216][ T5800] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 649.527852][ T9] usb 5-1: USB disconnect, device number 80 [ 649.861668][ T9] usb 2-1: USB disconnect, device number 89 [ 650.116576][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 650.317702][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 650.589540][T13010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.637580][T13010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.640564][T13010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.662592][T13010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.664303][T13010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 650.949946][T13779] Bluetooth: MGMT ver 1.23 [ 650.949996][T13779] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 651.080963][ T31] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 651.235240][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.235288][ T31] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 651.235333][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.235365][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 651.236923][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.236955][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 651.236978][ T31] usb 5-1: SerialNumber: syz [ 651.348170][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 651.391008][ T5800] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 651.546830][ T5800] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 251, using maximum allowed: 30 [ 651.546894][ T5800] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.546930][ T5800] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 651.546963][ T5800] usb 2-1: config 0 interface 0 has no altsetting 0 [ 651.546988][ T5800] usb 2-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 651.547006][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.549087][T13774] loop4: detected capacity change from 0 to 7 [ 651.653307][ T5800] usb 2-1: config 0 descriptor?? [ 651.780536][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 651.806826][T13774] Dev loop4: unable to read RDB block 7 [ 651.806885][T13774] loop4: unable to read partition table [ 651.807109][T13774] loop4: partition table beyond EOD, truncated [ 651.807148][T13774] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 651.847870][ T9] usb 5-1: USB disconnect, device number 81 [ 651.957935][ T10] usb 4-1: USB disconnect, device number 61 [ 652.156878][ T5800] sony 0003:12BA:074B.0014: collection stack underflow [ 652.156915][ T5800] sony 0003:12BA:074B.0014: item 0 1 0 12 parsing failed [ 652.262747][ T5800] sony 0003:12BA:074B.0014: parse failed [ 652.262869][ T5800] sony 0003:12BA:074B.0014: probe with driver sony failed with error -22 [ 652.361011][ T5800] usb 2-1: USB disconnect, device number 90 [ 652.553788][T13812] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 652.680376][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 652.841028][T11887] Bluetooth: hci0: command tx timeout [ 653.503275][T13764] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.503534][T13764] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.503750][T13764] bridge_slave_0: entered allmulticast mode [ 653.506700][T13764] bridge_slave_0: entered promiscuous mode [ 653.510322][T13764] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.510633][T13764] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.553106][T13764] bridge_slave_1: entered allmulticast mode [ 653.556228][T13764] bridge_slave_1: entered promiscuous mode [ 653.634688][T13764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.655925][T13764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.691075][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 653.744679][T13764] team0: Port device team_slave_0 added [ 653.757627][T13764] team0: Port device team_slave_1 added [ 653.853906][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 653.853985][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.855489][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 653.855520][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 653.855543][ T9] usb 2-1: Manufacturer: syz [ 653.908325][ T9] usb 2-1: config 0 descriptor?? [ 653.938940][ T9] igorplugusb 2-1:0.0: incorrect number of endpoints [ 654.093961][T13764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.093981][T13764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.094012][T13764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.096407][T13764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.096425][T13764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.096456][T13764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.204584][ T9] usb 2-1: USB disconnect, device number 91 [ 654.285906][ T5800] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 654.319345][T13841] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 654.344331][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 654.451211][ T5800] usb 5-1: unable to get BOS descriptor or descriptor too short [ 654.454061][ T5800] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 654.493248][ T5800] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 654.493273][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.493288][ T5800] usb 5-1: Product: syz [ 654.493301][ T5800] usb 5-1: Manufacturer: syz [ 654.493312][ T5800] usb 5-1: SerialNumber: syz [ 654.630264][T13764] hsr_slave_0: entered promiscuous mode [ 654.637799][T13764] hsr_slave_1: entered promiscuous mode [ 654.800022][ T5800] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 654.800578][ T5800] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 654.800605][ T5800] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 654.805485][ T5800] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 654.924857][T11887] Bluetooth: hci0: command tx timeout [ 655.101259][ T5800] usb 5-1: USB disconnect, device number 82 [ 655.531063][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 655.533553][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 655.567518][T13861] veth9: entered promiscuous mode [ 655.609309][T13861] veth9: entered allmulticast mode [ 655.683508][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.683582][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 655.685113][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.685145][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 655.685166][ T9] usb 1-1: SerialNumber: syz [ 655.762394][ T9] usb 1-1: No union descriptors [ 655.856781][T13872] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 655.940967][ T10] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 655.972267][ T9] usb 1-1: USB disconnect, device number 97 [ 656.094876][ T10] usb 2-1: config 0 has too many interfaces: 127, using maximum allowed: 32 [ 656.094907][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 127 [ 656.094945][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 656.094986][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 656.095014][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 656.095041][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 656.095087][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0037, bcdDevice= 0.00 [ 656.095112][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.196757][ T10] usb 2-1: config 0 descriptor?? [ 656.198841][T13870] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 656.687231][ T10] hid_parser_main: 5 callbacks suppressed [ 656.687259][ T10] wacom 0003:056A:0037.0015: unknown main item tag 0x1 [ 656.846174][ T9] usb 2-1: USB disconnect, device number 92 [ 656.917739][T13764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 657.013801][T11887] Bluetooth: hci0: command tx timeout [ 657.014259][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 657.217696][T13764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.225969][T13764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 657.285626][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.372755][T13894] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2790'. [ 657.918079][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 657.933126][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 657.933160][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.933184][ T10] usb 1-1: Product: syz [ 657.933201][ T10] usb 1-1: Manufacturer: syz [ 657.933218][ T10] usb 1-1: SerialNumber: syz [ 658.117776][T13764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.173947][T13764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 658.247591][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 658.281392][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 658.281899][ T10] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 658.281924][ T10] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 658.283839][ T10] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 658.418834][T13902] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 658.444995][ T10] usb 1-1: USB disconnect, device number 98 [ 658.530639][T13764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.539840][T13764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 658.668309][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 658.706501][T13764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.081022][T11887] Bluetooth: hci0: command tx timeout [ 659.795357][T13764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.205194][T13764] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.336556][T13937] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 660.371040][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.378433][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.391426][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 660.513032][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.513170][T12099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.550893][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 660.552984][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 660.553030][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 660.553056][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 660.553081][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 660.553103][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.556956][ T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 660.556986][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.557009][ T10] usb 4-1: Product: syz [ 660.557023][ T10] usb 4-1: Manufacturer: syz [ 660.557037][ T10] usb 4-1: SerialNumber: syz [ 660.662521][ T10] usb 4-1: config 0 descriptor?? [ 662.107361][T13965] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2812'. [ 662.107529][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2812'. [ 662.155118][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2812'. [ 662.155168][T13965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2812'. [ 662.587420][T13764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.358150][ T31] usb 4-1: USB disconnect, device number 62 [ 663.471360][ T10] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 663.646114][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 663.646147][ T10] usb 1-1: config 1 has no interface number 0 [ 663.646195][ T10] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 663.646245][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 4 [ 663.691780][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 663.691814][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.691837][ T10] usb 1-1: Product: syz [ 663.691853][ T10] usb 1-1: Manufacturer: syz [ 663.691869][ T10] usb 1-1: SerialNumber: syz [ 663.884202][T13764] veth0_vlan: entered promiscuous mode [ 663.952715][T13764] veth1_vlan: entered promiscuous mode [ 663.984896][ T10] usb 1-1: 1:0 : does not exist [ 663.984983][ T10] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 664.183058][T13764] veth0_macvtap: entered promiscuous mode [ 664.206855][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 664.230426][ T10] usb 1-1: USB disconnect, device number 99 [ 664.252460][T13764] veth1_macvtap: entered promiscuous mode [ 664.328604][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 664.368853][T13764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.571615][T13764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.804423][ T1028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.804896][ T1028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.805462][ T1028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.809706][ T1028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.929855][T14008] input: syz0 as /devices/virtual/input/input51 [ 666.247049][T14019] Bluetooth: hci0: unsupported parameter 255 [ 666.247070][T14019] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 668.501121][T11483] block nbd0: Possible stuck request ffff888026f1c940: control (read@0,1024B). Runtime 300 seconds [ 668.501173][T11483] block nbd0: Possible stuck request ffff888026f1cb00: control (read@1024,1024B). Runtime 300 seconds [ 668.501209][T11483] block nbd0: Possible stuck request ffff888026f1ccc0: control (read@2048,1024B). Runtime 300 seconds [ 668.501242][T11483] block nbd0: Possible stuck request ffff888026f1ce80: control (read@3072,1024B). Runtime 300 seconds [ 668.674531][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.674553][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.975299][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.975323][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.516327][T14096] Bluetooth: hci0: unsupported parameter 255 [ 672.516358][T14096] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 674.352336][ T5846] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 675.258018][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 676.098861][ T5846] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 676.098909][ T5846] usb 2-1: can't read configurations, error -71 [ 676.676032][T14131] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 677.600317][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2872'. [ 677.721077][ T5800] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 678.033680][T14151] bridge0: entered promiscuous mode [ 678.121027][ T5800] usb 4-1: Using ep0 maxpacket: 8 [ 678.123520][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 678.123560][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 678.123583][ T5800] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 678.123608][ T5800] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 678.123651][ T5800] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 678.123675][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.197661][ T5800] usb 4-1: config 0 descriptor?? [ 678.199240][T14141] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 678.771277][ T10] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 678.936654][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 678.953639][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 678.953689][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 679.009780][ T10] usb 5-1: string descriptor 0 read error: -22 [ 679.010055][ T10] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 679.010083][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.269931][ T10] usb 5-1: low speed audio streaming not supported [ 679.269957][ T10] usb 5-1: low speed audio streaming not supported [ 679.373549][ T5334] usb 4-1: USB disconnect, device number 63 [ 679.430961][T11887] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 679.757189][ T10] usb 5-1: USB disconnect, device number 83 [ 681.261052][T14182] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2886'. [ 682.097049][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 682.992564][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 682.999108][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 682.999150][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 682.999183][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 682.999213][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 682.999244][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 682.999276][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 683.083256][ T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 683.083293][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.083331][ T10] usb 4-1: Product: syz [ 683.083349][ T10] usb 4-1: Manufacturer: syz [ 683.083368][ T10] usb 4-1: SerialNumber: syz [ 683.160469][ T10] usb 4-1: config 0 descriptor?? [ 683.316598][T14202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.543169][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543209][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543238][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543266][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543300][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543328][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543356][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543383][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543411][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.543439][ T5334] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 683.739393][ T5334] hid-generic 00A0:0006:0003.0016: hidraw0: HID v0.05 Device [syz0] on syz0 [ 683.939328][T14218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2898'. [ 684.332551][T14219] fido_id[14219]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 684.669654][ T10] usb 4-1: USB disconnect, device number 64 [ 684.970942][ T5334] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 685.161419][ T5334] usb 5-1: Using ep0 maxpacket: 32 [ 685.163955][ T5334] usb 5-1: config 9 has an invalid interface number: 245 but max is 0 [ 685.163989][ T5334] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 685.164012][ T5334] usb 5-1: config 9 has no interface number 0 [ 685.168700][ T5334] usb 5-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 685.168732][ T5334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.168754][ T5334] usb 5-1: Product: syz [ 685.168771][ T5334] usb 5-1: Manufacturer: syz [ 685.168786][ T5334] usb 5-1: SerialNumber: syz [ 685.477874][ T5334] uvcvideo 5-1:9.245: Found UVC 0.06 device syz (8086:1155) [ 685.479130][ T5334] uvcvideo 5-1:9.245: No valid video chain found. [ 685.498750][ T5334] usb 5-1: USB disconnect, device number 84 [ 685.628585][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 685.987658][T14238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 687.251161][T11887] Bluetooth: hci0: command 0x0c1a tx timeout [ 688.011063][ T5846] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 688.168459][ T5846] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 688.168497][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.168520][ T5846] usb 2-1: Product: syz [ 688.168537][ T5846] usb 2-1: Manufacturer: syz [ 688.168554][ T5846] usb 2-1: SerialNumber: syz [ 688.264703][T14271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2919' sets config #1 [ 688.453233][ T5846] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 688.453320][ T5846] usb 2-1: MIDIStreaming interface descriptor not found [ 688.600712][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 688.809218][ T5846] usb 2-1: USB disconnect, device number 95 [ 688.960978][ T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 689.116097][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 689.139043][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 689.139094][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 689.873735][ T9] usb 6-1: string descriptor 0 read error: -22 [ 689.873903][ T9] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 689.873931][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.037923][ T9] usb 6-1: low speed audio streaming not supported [ 691.037949][ T9] usb 6-1: low speed audio streaming not supported [ 691.233604][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 691.476606][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 691.668071][ T9] usb 6-1: USB disconnect, device number 2 [ 691.938050][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 693.060986][ T5609] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 693.092210][T14341] netlink: 'syz.4.2947': attribute type 29 has an invalid length. [ 693.211940][ T5609] usb 2-1: Using ep0 maxpacket: 16 [ 693.214327][ T5609] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 693.214355][ T5609] usb 2-1: config 0 has no interface number 0 [ 693.214404][ T5609] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 693.214431][ T5609] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 693.217935][ T5609] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 693.217966][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.217988][ T5609] usb 2-1: Product: syz [ 693.218005][ T5609] usb 2-1: Manufacturer: syz [ 693.218022][ T5609] usb 2-1: SerialNumber: syz [ 693.301593][ T5609] usb 2-1: config 0 descriptor?? [ 693.302668][T14329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 693.303124][T14329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 693.311727][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2948'. [ 693.317246][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2948'. [ 693.522446][T14329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 693.522599][T14329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 693.727880][ T5609] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 693.728109][ T5609] asix 2-1:0.34: probe with driver asix failed with error -61 [ 693.810994][ T5846] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 693.911123][ T31] hid_parser_main: 5 callbacks suppressed [ 693.911192][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911225][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911253][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911280][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911307][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911334][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911360][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911387][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911414][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.911440][ T31] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 693.919750][ T31] hid-generic 00A0:0006:0003.0017: hidraw0: HID v0.05 Device [syz0] on syz0 [ 693.994648][ T5846] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.994724][ T5846] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 693.994838][ T5846] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 693.994901][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.061115][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.061201][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.131539][ T5846] usb 6-1: config 0 descriptor?? [ 694.350116][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2958'. [ 694.350169][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 694.550645][T14375] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2961'. [ 694.560214][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 694.876728][ T31] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 694.947218][ T5846] usb 2-1: USB disconnect, device number 96 [ 695.782387][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 695.788781][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 695.790947][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 205, changing to 7 [ 695.790998][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 160, changing to 7 [ 695.791075][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 695.857597][ T31] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 695.857633][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.857674][ T31] usb 5-1: Product: syz [ 695.857691][ T31] usb 5-1: Manufacturer: syz [ 695.857707][ T31] usb 5-1: SerialNumber: syz [ 696.313672][ T5609] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 696.530564][ T5609] usb 4-1: unable to get BOS descriptor or descriptor too short [ 696.610340][ T5609] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 696.820313][ T5609] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 696.820388][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.820453][ T5609] usb 4-1: Product: syz [ 696.820529][ T5609] usb 4-1: Manufacturer: syz [ 696.820547][ T5609] usb 4-1: SerialNumber: syz [ 696.963589][ T31] usb 5-1: selecting invalid altsetting 1 [ 696.966652][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 696.986646][ T31] usb 5-1: selecting invalid altsetting 1 [ 696.988088][ T31] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 696.999894][ T31] usb 5-1: selecting invalid altsetting 1 [ 697.063596][ T9] usb 6-1: USB disconnect, device number 3 [ 697.730564][T14407] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2973'. [ 697.744077][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2973'. [ 698.191902][ T31] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 698.194641][ T5609] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 698.200418][ T5609] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 698.200447][ T5609] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 698.203807][ T31] usb 5-1: USB disconnect, device number 85 [ 698.243085][ T5609] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 698.485189][ T6393] udevd[6393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 698.570950][T11483] block nbd0: Possible stuck request ffff888026f1c940: control (read@0,1024B). Runtime 330 seconds [ 698.571005][T11483] block nbd0: Possible stuck request ffff888026f1cb00: control (read@1024,1024B). Runtime 330 seconds [ 698.571038][T11483] block nbd0: Possible stuck request ffff888026f1ccc0: control (read@2048,1024B). Runtime 330 seconds [ 698.571070][T11483] block nbd0: Possible stuck request ffff888026f1ce80: control (read@3072,1024B). Runtime 330 seconds [ 698.639678][ T5609] usb 4-1: USB disconnect, device number 65 [ 700.096086][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 700.593222][T14445] ALSA: mixer_oss: invalid OSS volume '' [ 700.593692][T14445] ALSA: mixer_oss: invalid OSS volume '' [ 700.631015][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 700.786175][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 700.799152][ T31] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 700.827132][ T31] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 700.827169][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.827192][ T31] usb 6-1: Product: syz [ 700.827209][ T31] usb 6-1: Manufacturer: syz [ 700.827226][ T31] usb 6-1: SerialNumber: syz [ 701.313013][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 701.313370][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 701.372272][ T31] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 701.374904][ T31] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 701.374931][ T31] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 701.378319][ T31] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 702.169245][ T31] usb 6-1: USB disconnect, device number 4 [ 702.496808][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 705.542993][T14568] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 705.931026][ T5735] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 706.093389][ T5735] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 706.093425][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.100029][ T5735] usb 5-1: config 0 descriptor?? [ 706.142661][ T5735] cp210x 5-1:0.0: cp210x converter detected [ 706.542786][ T5735] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 706.849090][ T5735] usb 5-1: cp210x converter now attached to ttyUSB0 [ 706.979541][ T5735] usb 5-1: USB disconnect, device number 86 [ 707.032570][ T5735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 707.262038][ T5735] cp210x 5-1:0.0: device disconnected [ 707.545914][T14604] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 709.095148][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3063'. [ 709.671300][ T5609] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 709.830984][ T5609] usb 2-1: Using ep0 maxpacket: 8 [ 709.834168][ T5609] usb 2-1: config 5 has an invalid interface number: 253 but max is 0 [ 709.834199][ T5609] usb 2-1: config 5 has no interface number 0 [ 709.834233][ T5609] usb 2-1: config 5 interface 253 has no altsetting 0 [ 709.876254][ T5609] usb 2-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 709.876287][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.876309][ T5609] usb 2-1: Product: syz [ 709.876325][ T5609] usb 2-1: Manufacturer: syz [ 709.876343][ T5609] usb 2-1: SerialNumber: syz [ 709.878578][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 709.981249][T14659] batadv_slave_0: entered promiscuous mode [ 710.050592][T14659] netlink: 'syz.3.3071': attribute type 1 has an invalid length. [ 710.050621][T14659] netlink: 'syz.3.3071': attribute type 2 has an invalid length. [ 710.174520][ T5609] rndis_host 2-1:5.253: More than one union descriptor, skipping ... [ 710.174548][ T5609] rndis_host 2-1:5.253: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 710.177586][ T5609] cdc_acm 2-1:5.253: More than one union descriptor, skipping ... [ 710.217186][ T5609] usb 2-1: USB disconnect, device number 97 [ 710.244508][T14661] batadv_slave_0: left promiscuous mode [ 710.407132][T14671] fuse: Bad value for 'fd' [ 710.674666][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'. [ 712.355383][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 712.470952][ T5735] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 712.637600][ T5735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.637661][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 712.637687][ T5735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.641056][ T5735] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 712.641092][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.641115][ T5735] usb 4-1: Product: syz [ 712.641132][ T5735] usb 4-1: Manufacturer: syz [ 712.641149][ T5735] usb 4-1: SerialNumber: syz [ 712.729076][ T5735] usb 4-1: config 0 descriptor?? [ 712.755420][T14702] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 713.152584][T14706] 9p: Bad value for 'rfdno' [ 713.286816][ T5735] usb 4-1: USB disconnect, device number 66 [ 715.647492][T14730] netlink: 'syz.0.3094': attribute type 10 has an invalid length. [ 715.647516][T14730] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3094'. [ 715.728392][ T6394] udevd[6394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 715.820656][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3096'. [ 715.978197][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 718.371073][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3109'. [ 719.310859][ T31] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 719.474443][ T31] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 719.474467][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.505624][ T31] usb 5-1: config 0 descriptor?? [ 719.525404][ T31] cp210x 5-1:0.0: cp210x converter detected [ 719.629869][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3112'. [ 719.744687][ T31] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 719.744710][ T31] cp210x 5-1:0.0: querying part number failed [ 719.827577][ T31] usb 5-1: cp210x converter now attached to ttyUSB0 [ 720.753061][T14768] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3107'. [ 721.551850][ T31] usb 5-1: USB disconnect, device number 87 [ 721.662945][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 721.685109][ T31] cp210x 5-1:0.0: device disconnected [ 722.079168][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 723.302233][ T5609] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 723.428426][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3124'. [ 723.483366][ T5609] usb 2-1: Using ep0 maxpacket: 8 [ 723.485747][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 723.485785][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.485810][ T5609] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 723.485838][ T5609] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 723.485880][ T5609] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 723.485906][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.565924][ T5609] usb 2-1: config 0 descriptor?? [ 723.570641][T14815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 724.075362][ T31] usb 2-1: USB disconnect, device number 98 [ 724.119018][T11887] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 725.626682][T14834] kvm: kvm [14833]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 725.633606][T14834] kvm: kvm [14833]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff800000000000 [ 726.241321][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3131'. [ 727.073095][T14848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3132'. [ 727.815322][ T5609] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 727.979698][ T5609] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 727.979734][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.026725][ T5609] usb 4-1: config 0 descriptor?? [ 728.039978][T14853] warning: `syz.4.3134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 728.072263][ T5609] cp210x 4-1:0.0: cp210x converter detected [ 728.256444][ T5609] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 728.256478][ T5609] cp210x 4-1:0.0: querying part number failed [ 728.310194][ T5609] usb 4-1: cp210x converter now attached to ttyUSB0 [ 728.650947][T11483] block nbd0: Possible stuck request ffff888026f1c940: control (read@0,1024B). Runtime 360 seconds [ 728.651000][T11483] block nbd0: Possible stuck request ffff888026f1cb00: control (read@1024,1024B). Runtime 360 seconds [ 728.651034][T11483] block nbd0: Possible stuck request ffff888026f1ccc0: control (read@2048,1024B). Runtime 360 seconds [ 728.651067][T11483] block nbd0: Possible stuck request ffff888026f1ce80: control (read@3072,1024B). Runtime 360 seconds [ 729.923115][ T5609] usb 4-1: USB disconnect, device number 67 [ 730.407052][ T5609] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 730.407884][ T5609] cp210x 4-1:0.0: device disconnected [ 731.150810][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3142'. [ 731.551605][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3145'. [ 732.044365][T14896] veth0_to_bond: left allmulticast mode [ 732.044402][T14896] veth0_to_bond: left promiscuous mode [ 732.046402][T14896] bridge2: port 2(veth0_to_bond) entered disabled state [ 732.651306][T14918] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3156'. [ 734.682979][T14947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3169'. [ 735.441246][T14955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3171'. [ 738.085722][T15004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3189'. [ 741.453106][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 741.623742][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 741.623779][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.652659][T15048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3207'. [ 741.657207][ T9] usb 5-1: config 0 descriptor?? [ 741.683442][ T9] cp210x 5-1:0.0: cp210x converter detected [ 741.870248][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 741.870281][ T9] cp210x 5-1:0.0: querying part number failed [ 741.890810][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 744.316128][ T5846] usb 5-1: USB disconnect, device number 88 [ 744.475278][ T5846] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 744.496477][ T5846] cp210x 5-1:0.0: device disconnected [ 744.505718][ T5334] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 744.652887][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3215'. [ 744.672587][ T5334] usb 2-1: Using ep0 maxpacket: 16 [ 744.694945][ T5334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.694984][ T5334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 744.695034][ T5334] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 744.695060][ T5334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.777316][ T5334] usb 2-1: config 0 descriptor?? [ 744.944717][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 744.965558][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.013411][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.114923][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.184286][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.285651][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.307696][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.384930][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.406236][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.475021][T15073] kvm: kvm [15068]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff7fff00000080 [ 745.592883][ T5334] usbhid 2-1:0.0: can't add hid device: -71 [ 745.592998][ T5334] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 745.640942][ T5334] usb 2-1: USB disconnect, device number 99 [ 747.114429][T15102] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15103] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[15102] [ 747.512861][T15106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3221'. [ 747.694886][T15112] capability: warning: `syz.0.3226' uses deprecated v2 capabilities in a way that may be insecure [ 753.615717][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 753.630551][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 753.634685][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 753.634773][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 753.639068][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 753.639158][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 753.716435][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 753.716503][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 753.720082][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 753.720180][T15190] kvm: kvm [15189]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 753.826065][ T37] audit: type=1800 audit(1785287311.527:11): pid=15198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.3262" name="nullb0" dev="tmpfs" ino=3099 res=0 errno=0 [ 753.940968][ T5334] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 754.109808][ T5334] usb 6-1: unable to get BOS descriptor or descriptor too short [ 754.124244][ T5334] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 754.126936][ T5334] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 754.126993][ T5334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.127017][ T5334] usb 6-1: Product: syz [ 754.127033][ T5334] usb 6-1: Manufacturer: syz [ 754.127049][ T5334] usb 6-1: SerialNumber: syz [ 754.419167][ T5334] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 754.611065][ T5334] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 754.611098][ T5334] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 754.887614][ T5334] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 755.453360][ T5609] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 755.622176][ T5609] usb 2-1: Using ep0 maxpacket: 16 [ 755.623659][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.623733][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.696880][ T5609] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 755.696912][ T5609] usb 2-1: config 0 has no interface number 0 [ 755.696961][ T5609] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 755.696990][ T5609] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 755.756448][ T5609] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 755.756484][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.756506][ T5609] usb 2-1: Product: syz [ 755.756523][ T5609] usb 2-1: Manufacturer: syz [ 755.756540][ T5609] usb 2-1: SerialNumber: syz [ 755.851248][ T5334] usb 6-1: USB disconnect, device number 5 [ 755.958908][ T5609] usb 2-1: config 0 descriptor?? [ 755.975229][T15217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 755.975372][T15217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.209388][T15217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.209752][T15217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.356353][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 756.445748][T13010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 756.470702][ T5609] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 756.531863][T13010] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 756.551922][T13010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 756.582078][T13010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 756.583226][T13010] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 756.652795][ T5609] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 756.652828][ T5609] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 756.653091][ T5609] asix 2-1:0.34: probe with driver asix failed with error -32 [ 757.414804][ T9] usb 2-1: USB disconnect, device number 100 [ 758.733182][T11483] block nbd0: Possible stuck request ffff888026f1c940: control (read@0,1024B). Runtime 390 seconds [ 758.733252][T11483] block nbd0: Possible stuck request ffff888026f1cb00: control (read@1024,1024B). Runtime 390 seconds [ 758.733287][T11483] block nbd0: Possible stuck request ffff888026f1ccc0: control (read@2048,1024B). Runtime 390 seconds [ 758.733321][T11483] block nbd0: Possible stuck request ffff888026f1ce80: control (read@3072,1024B). Runtime 390 seconds [ 758.806057][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 758.920895][T11887] Bluetooth: hci6: command tx timeout [ 758.965498][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 758.967178][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 758.995118][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 758.995153][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.995178][ T9] usb 2-1: Product: syz [ 758.995195][ T9] usb 2-1: Manufacturer: syz [ 758.995212][ T9] usb 2-1: SerialNumber: syz [ 759.558194][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 759.753428][ T9] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 759.753460][ T9] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 760.099949][ T9] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 760.888965][ T9] usb 2-1: USB disconnect, device number 101 [ 761.050274][T11887] Bluetooth: hci6: command tx timeout [ 761.205697][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 761.312439][T15221] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.314143][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.314355][T15221] bridge_slave_0: entered allmulticast mode [ 761.317971][T15221] bridge_slave_0: entered promiscuous mode [ 761.347018][T15221] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.352282][T15221] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.353135][T15221] bridge_slave_1: entered allmulticast mode [ 761.374224][T15221] bridge_slave_1: entered promiscuous mode [ 761.510935][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 761.564073][T15221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.587482][T15221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.670948][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 761.675490][ T9] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 761.675519][ T9] usb 5-1: config 0 has no interface number 0 [ 761.675567][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 761.675597][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 761.678905][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 761.678936][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.678957][ T9] usb 5-1: Product: syz [ 761.678973][ T9] usb 5-1: Manufacturer: syz [ 761.678989][ T9] usb 5-1: SerialNumber: syz [ 761.756671][ T9] usb 5-1: config 0 descriptor?? [ 761.757971][T15289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 761.758105][T15289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 761.970091][T15289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 761.970374][T15289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 762.018694][T15221] team0: Port device team_slave_0 added [ 762.038938][T15221] team0: Port device team_slave_1 added [ 762.170362][T15221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.170401][T15221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.170432][T15221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.218305][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 762.350914][ T5334] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 762.430380][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 762.430414][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 762.430667][ T9] asix 5-1:0.34: probe with driver asix failed with error -32 [ 762.480436][T15221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.480453][T15221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.480477][T15221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.534470][ T5334] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 762.534514][ T5334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.534532][ T5334] usb 2-1: Product: syz [ 762.534544][ T5334] usb 2-1: Manufacturer: syz [ 762.534557][ T5334] usb 2-1: SerialNumber: syz [ 762.586751][ T5334] usb 2-1: config 0 descriptor?? [ 762.621845][ T5334] ch341 2-1:0.0: ch341-uart converter detected [ 763.002794][ T5334] usb 2-1: failed to send control message: -71 [ 763.002859][ T5334] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 763.017952][ T5334] usb 2-1: USB disconnect, device number 102 [ 763.049864][ T5334] ch341 2-1:0.0: device disconnected [ 763.068370][T15221] hsr_slave_0: entered promiscuous mode [ 763.086974][T11887] Bluetooth: hci6: command tx timeout [ 763.087679][T15221] hsr_slave_1: entered promiscuous mode [ 763.132741][T15221] debugfs: 'hsr0' already exists in 'hsr' [ 763.132792][T15221] Cannot create hsr debugfs directory [ 763.191731][ T9] usb 5-1: USB disconnect, device number 89 [ 764.931050][ T5735] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 765.109952][ T5735] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 765.109987][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.143484][ T5735] usb 5-1: config 0 descriptor?? [ 765.160901][T11887] Bluetooth: hci6: command tx timeout [ 765.165149][ T5735] cp210x 5-1:0.0: cp210x converter detected [ 765.452747][ T822] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 765.551251][ T5735] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 765.581821][ T5735] usb 5-1: cp210x converter now attached to ttyUSB0 [ 765.608903][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 765.616520][ T822] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 765.616551][ T822] usb 2-1: config 0 has no interface number 0 [ 765.616598][ T822] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 765.616618][ T822] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 765.660714][ T822] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 765.660876][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.660901][ T822] usb 2-1: Product: syz [ 765.660917][ T822] usb 2-1: Manufacturer: syz [ 765.660933][ T822] usb 2-1: SerialNumber: syz [ 765.684507][ T822] usb 2-1: config 0 descriptor?? [ 765.713111][T15338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 765.713226][T15338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 765.758707][ T5735] usb 5-1: USB disconnect, device number 90 [ 765.779990][ T5735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 765.938387][T15338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 765.938535][T15338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 766.065131][ T5735] cp210x 5-1:0.0: device disconnected [ 766.143421][ T822] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 766.345913][ T822] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 766.345951][ T822] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 766.346246][ T822] asix 2-1:0.34: probe with driver asix failed with error -61 [ 766.717983][T15221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 766.821008][ T5735] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 766.893086][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.915073][T15221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 767.044045][ T5735] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 767.044087][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.050352][ T5735] usb 4-1: config 0 descriptor?? [ 767.079235][ T5735] cp210x 4-1:0.0: cp210x converter detected [ 767.858283][ T9] usb 2-1: USB disconnect, device number 103 [ 768.179022][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.188732][T15221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 768.219031][ T5735] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 768.219090][ T5735] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 768.288974][ T5735] usb 4-1: cp210x converter now attached to ttyUSB0 [ 768.307742][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.310649][ T5735] usb 4-1: USB disconnect, device number 68 [ 768.338659][T15221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 768.352713][ T5735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 768.356514][ T5735] cp210x 4-1:0.0: device disconnected [ 768.580689][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.924579][T15221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.978682][T15221] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.024028][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.024250][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.083948][ T5846] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 770.108823][T12104] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.109678][T12104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.269859][ T5846] usb 4-1: unable to get BOS descriptor or descriptor too short [ 770.274573][ T5846] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 770.285558][ T5846] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 770.285592][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.285630][ T5846] usb 4-1: Product: syz [ 770.285646][ T5846] usb 4-1: Manufacturer: syz [ 770.285670][ T5846] usb 4-1: SerialNumber: syz [ 770.670594][ T5846] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 770.859913][ T5846] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 770.859944][ T5846] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 771.274074][ T5846] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 771.499613][ T5846] usb 4-1: USB disconnect, device number 69 [ 771.680161][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 772.350901][ T31] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 772.501022][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 772.505733][ T31] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 772.505764][ T31] usb 5-1: config 0 has no interface number 0 [ 772.505814][ T31] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 772.505841][ T31] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 772.509858][ T31] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 772.509899][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.509919][ T31] usb 5-1: Product: syz [ 772.509934][ T31] usb 5-1: Manufacturer: syz [ 772.509950][ T31] usb 5-1: SerialNumber: syz [ 772.596694][ T31] usb 5-1: config 0 descriptor?? [ 772.597714][T15408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 772.597847][T15408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 772.925048][T15408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 772.928746][T15408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 772.981292][T11887] Bluetooth: hci0: command 0x0c1a tx timeout [ 773.930577][ T31] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 774.502579][ T31] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 774.502617][ T31] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 774.502917][ T31] asix 5-1:0.34: probe with driver asix failed with error -61 [ 775.278673][ T5735] usb 5-1: USB disconnect, device number 91 [ 776.259427][T15461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3341'. [ 776.640940][ T31] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 776.796842][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 776.796879][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.838767][ T31] usb 2-1: config 0 descriptor?? [ 776.860961][ T31] cp210x 2-1:0.0: cp210x converter detected [ 777.096860][T15221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.147042][ T31] usb 2-1: cp210x converter now attached to ttyUSB0 [ 777.264512][T15221] veth0_vlan: entered promiscuous mode [ 777.311898][T15221] veth1_vlan: entered promiscuous mode [ 777.407025][T15221] veth0_macvtap: entered promiscuous mode [ 777.429415][T15221] veth1_macvtap: entered promiscuous mode [ 777.499036][T15221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.612731][T15221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.649918][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.675051][ T1415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.685560][ T1415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.714203][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.086129][ T31] hid_parser_main: 5 callbacks suppressed [ 778.086156][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.086188][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.086231][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.095949][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.095998][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.096025][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.096061][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.096088][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.096115][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.096165][ T31] hid-generic 0006:0004:0009.0018: unknown main item tag 0x0 [ 778.602406][ T31] hid-generic 0006:0004:0009.0018: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 779.076555][T15502] fido_id[15502]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 779.155874][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.155898][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.437343][ T5609] usb 2-1: USB disconnect, device number 104 [ 779.532172][ T5609] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 779.533082][ T5609] cp210x 2-1:0.0: device disconnected [ 779.592494][T15513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3353'. [ 779.829180][T15518] kvm_pr_unimpl_wrmsr: 50 callbacks suppressed [ 779.829203][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 779.865176][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 779.888780][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 779.888867][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 779.940064][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 779.940228][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 779.994943][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 779.995034][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 780.029476][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 780.029573][T15518] kvm: kvm [15516]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 780.355808][T12104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.355833][T12104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.899774][T15538] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3271'. [ 782.891811][ T31] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 782.996142][T11887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 783.078599][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 783.078635][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.108681][T11887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 783.125399][T11887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 783.128425][T11887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 783.156959][ T31] usb 2-1: config 0 descriptor?? [ 783.189458][T11887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 783.366352][ T31] cp210x 2-1:0.0: cp210x converter detected [ 783.627983][ T31] usb 2-1: cp210x converter now attached to ttyUSB0 [ 783.757123][T15557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3368'. [ 785.850353][T15578] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3372'. [ 785.863181][T13010] Bluetooth: hci2: command tx timeout [ 786.034538][ T5735] hid_parser_main: 7 callbacks suppressed [ 786.034565][ T5735] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 786.186334][ T5735] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.212040][ T31] usb 2-1: USB disconnect, device number 105 [ 786.450535][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 786.545146][ T31] cp210x 2-1:0.0: device disconnected [ 786.577366][T15583] fido_id[15583]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 786.854179][T15582] kvm_pr_unimpl_wrmsr: 48 callbacks suppressed [ 786.854208][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 786.875380][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 786.879823][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 786.879986][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 786.923162][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 786.923257][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 786.959331][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 786.959425][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 786.988296][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 786.988392][T15582] kvm: kvm [15581]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 788.057366][T15601] bridge1: entered promiscuous mode [ 788.201378][T13010] Bluetooth: hci2: command tx timeout [ 788.723884][T15608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3382'. [ 788.851202][T11483] block nbd0: Possible stuck request ffff888026f1c940: control (read@0,1024B). Runtime 420 seconds [ 788.851256][T11483] block nbd0: Possible stuck request ffff888026f1cb00: control (read@1024,1024B). Runtime 420 seconds [ 788.851290][T11483] block nbd0: Possible stuck request ffff888026f1ccc0: control (read@2048,1024B). Runtime 420 seconds [ 788.851322][T11483] block nbd0: Possible stuck request ffff888026f1ce80: control (read@3072,1024B). Runtime 420 seconds [ 789.237742][T15620] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3386'. [ 789.237792][T15620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3386'. [ 789.260837][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 789.440883][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 789.495321][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.495426][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 37, changing to 7 [ 789.498862][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 789.498896][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.498918][ T10] usb 4-1: Product: syz [ 789.498935][ T10] usb 4-1: Manufacturer: syz [ 789.498952][ T10] usb 4-1: SerialNumber: syz [ 790.309942][T13010] Bluetooth: hci2: command tx timeout [ 792.067234][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 792.078203][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 792.078304][ T10] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 792.078329][ T10] usb 4-1: 2:1 : sample bitwidth 60 in over sample bytes 3 [ 792.078353][ T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 792.462674][T15634] ALSA: mixer_oss: invalid OSS volume '' [ 792.681045][T13010] Bluetooth: hci2: command tx timeout [ 792.732624][ T10] usb 4-1: USB disconnect, device number 70 [ 792.827981][T15643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3395'. [ 792.904436][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 793.241227][ T38] INFO: task syz.2.2636:13502 blocked for more than 143 seconds. [ 793.241277][ T38] Tainted: G L syzkaller #0 [ 793.241291][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 793.241302][ T38] task:syz.2.2636 state:D stack:27192 pid:13502 tgid:13500 ppid:5604 task_flags:0x400040 flags:0x00080002 [ 793.241395][ T38] Call Trace: [ 793.241410][ T38] [ 793.241434][ T38] __schedule+0x16dc/0x5500 [ 793.241655][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 793.241727][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 793.241771][ T38] ? __pfx___schedule+0x10/0x10 [ 793.241794][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 793.241847][ T38] rt_mutex_schedule+0x76/0xf0 [ 793.241874][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 793.241918][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 793.241960][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 793.241999][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 793.242036][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 793.242085][ T38] ? sync_bdevs+0x276/0x470 [ 793.242135][ T38] ? sync_bdevs+0x276/0x470 [ 793.242164][ T38] mutex_lock_nested+0x168/0x1d0 [ 793.242202][ T38] sync_bdevs+0x276/0x470 [ 793.242235][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.242262][ T38] __ia32_sys_sync+0xc5/0x120 [ 793.242297][ T38] ? __pfx___ia32_sys_sync+0x10/0x10 [ 793.242333][ T38] ? do_syscall_64+0x9d/0x580 [ 793.242365][ T38] do_syscall_64+0x174/0x580 [ 793.242393][ T38] ? trace_irq_disable+0x3b/0x140 [ 793.242420][ T38] ? clear_bhb_loop+0x40/0x90 [ 793.242466][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.242528][ T38] RIP: 0033:0x7f67001cde99 [ 793.242574][ T38] RSP: 002b:00007f66fe405028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 793.242605][ T38] RAX: ffffffffffffffda RBX: 00007f6700456090 RCX: 00007f67001cde99 [ 793.242622][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.242636][ T38] RBP: 00007f6700456090 R08: 0000000000000000 R09: 0000000000000000 [ 793.242651][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.242698][ T38] R13: 00007f6700456128 R14: 00007f6700456090 R15: 00007ffc46740978 [ 793.242736][ T38] [ 793.242799][ T38] [ 793.242799][ T38] Showing all locks held in the system: [ 793.242819][ T38] 3 locks held by rcuc/0/20: [ 793.242835][ T38] 1 lock held by khungtaskd/38: [ 793.242848][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 793.242950][ T38] 6 locks held by kworker/u8:10/1309: [ 793.242964][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 793.243028][ T38] #1: ffffc90005327c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 793.243086][ T38] #2: ffffffff8f5a3240 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 793.243141][ T38] #3: ffff8880346e5160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 793.243206][ T38] #4: ffff88801b70c310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 793.243264][ T38] #5: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x87/0x2f0 [ 793.243336][ T38] 10 locks held by kworker/u8:19/3382: [ 793.243353][ T38] 2 locks held by getty/5358: [ 793.243366][ T38] #0: ffff8880360dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 793.243426][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 793.243500][ T38] 1 lock held by udevd/7794: [ 793.243512][ T38] #0: ffff888026e8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 793.243584][ T38] 3 locks held by kworker/u8:0/12099: [ 793.243597][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 793.243655][ T38] #1: ffffc9000422fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 793.243713][ T38] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 793.243775][ T38] 1 lock held by syz.2.2636/13502: [ 793.243788][ T38] #0: ffff888026e8f4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 793.243854][ T38] 2 locks held by syz-executor/15548: [ 793.243867][ T38] #0: ffffffff8fafb938 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 793.243929][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 793.243984][ T38] 2 locks held by syz.0.3395/15645: [ 793.243996][ T38] #0: ffffffff8ed168a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 793.244058][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 793.244113][ T38] 1 lock held by syz.0.3395/15646: [ 793.244125][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 793.244179][ T38] [ 793.244186][ T38] ============================================= [ 793.244186][ T38] [ 793.244199][ T38] NMI backtrace for cpu 1 [ 793.244282][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 793.244314][ T38] Tainted: [L]=SOFTLOCKUP [ 793.244322][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 793.244337][ T38] Call Trace: [ 793.244348][ T38] [ 793.244358][ T38] dump_stack_lvl+0xe8/0x150 [ 793.244396][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 793.244420][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 793.244460][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 793.244500][ T38] sys_info+0x135/0x170 [ 793.244537][ T38] watchdog+0xfd7/0x1030 [ 793.244567][ T38] ? watchdog+0x1c7/0x1030 [ 793.244594][ T38] kthread+0x388/0x470 [ 793.244630][ T38] ? __pfx_watchdog+0x10/0x10 [ 793.244648][ T38] ? __pfx_kthread+0x10/0x10 [ 793.244683][ T38] ret_from_fork+0x514/0xb70 [ 793.244721][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 793.244755][ T38] ? __switch_to+0xc89/0x1420 [ 793.244788][ T38] ? __pfx_kthread+0x10/0x10 [ 793.244825][ T38] ret_from_fork_asm+0x1a/0x30 [ 793.244861][ T38] [ 793.244878][ T38] Sending NMI from CPU 1 to CPUs 0: [ 793.244950][ C0] NMI backtrace for cpu 0 [ 793.244969][ C0] CPU: 0 UID: 0 PID: 3382 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 793.244996][ C0] Tainted: [L]=SOFTLOCKUP [ 793.245003][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 793.245024][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 793.245053][ C0] RIP: 0010:__lock_acquire+0x6b5/0x2ce0 [ 793.245079][ C0] Code: 00 00 83 3d 2c d4 07 18 00 75 13 48 63 44 24 20 48 0f a3 05 fd 43 04 12 0f 83 5d 1e 00 00 49 8b 9e f8 0b 00 00 48 83 3c 24 00 <75> 1e 48 83 fb ff 0f 94 c0 83 3d fb d3 07 18 00 b1 01 0f 84 41 20 [ 793.245097][ C0] RSP: 0000:ffffc9000e477328 EFLAGS: 00000002 [ 793.245112][ C0] RAX: 00000000000000a2 RBX: 6ac0b53d9499b4c2 RCX: ffffffff93472360 [ 793.245126][ C0] RDX: 0000000000000008 RSI: ffff888032dc8d20 RDI: ffff888032dc8000 [ 793.245140][ C0] RBP: 0000000000000000 R08: ffffffff81b25079 R09: 0000000000080000 [ 793.245153][ C0] R10: 0000000000000000 R11: ffff8880b8628458 R12: 0000000000000003 [ 793.245165][ C0] R13: ffff888032dc8d20 R14: ffff888032dc8000 R15: 0000000000000007 [ 793.245179][ C0] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 793.245195][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.245208][ C0] CR2: 00007f90d56e5d58 CR3: 0000000042300000 CR4: 00000000003526f0 [ 793.245226][ C0] Call Trace: [ 793.245233][ C0] [ 793.245243][ C0] ? __page_table_check_zero+0x6c/0x430 [ 793.245266][ C0] ? __page_table_check_zero+0x3c3/0x430 [ 793.245285][ C0] ? __page_table_check_zero+0x6c/0x430 [ 793.245307][ C0] ? prep_compound_page+0x2eb/0x4b0 [ 793.245330][ C0] ? __hrtimer_rearm_deferred+0x99/0x430 [ 793.245357][ C0] lock_acquire+0x106/0x350 [ 793.245376][ C0] ? __hrtimer_rearm_deferred+0x99/0x430 [ 793.245406][ C0] ? __lock_acquire+0x683/0x2ce0 [ 793.245427][ C0] _raw_spin_lock+0x2e/0x40 [ 793.245448][ C0] ? __hrtimer_rearm_deferred+0x99/0x430 [ 793.245473][ C0] __hrtimer_rearm_deferred+0x99/0x430 [ 793.245502][ C0] irqentry_exit+0x8b7/0x8f0 [ 793.245526][ C0] ? trace_irq_disable+0x3b/0x140 [ 793.245547][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 793.245568][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 793.245592][ C0] Code: f7 e8 8d d0 5a f6 f7 c3 00 02 00 00 74 05 e8 00 c5 86 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 ef 4c f6 65 8b 05 2d ac 56 07 85 c0 74 18 5b 41 5e e9 51 3c [ 793.245608][ C0] RSP: 0000:ffffc9000e477668 EFLAGS: 00000206 [ 793.245623][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 793.245636][ C0] RDX: 0000000000000003 RSI: ffffffff8d88567f RDI: 0000000000000001 [ 793.245649][ C0] RBP: ffffc9000e477778 R08: ffffffff8faf9737 R09: 1ffffffff1f5f2e6 [ 793.245664][ C0] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: dffffc0000000000 [ 793.245678][ C0] R13: 1ffff92001c8eed8 R14: ffff8880b8638ea0 R15: 0000000000000246 [ 793.245702][ C0] rt_mutex_slowunlock+0x4ee/0xa20 [ 793.245736][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 793.245769][ C0] ? __netdev_alloc_skb+0x3b3/0x4b0 [ 793.245793][ C0] rt_spin_unlock+0x10d/0x200 [ 793.245824][ C0] __netdev_alloc_skb+0x3b3/0x4b0 [ 793.245844][ C0] ? __netdev_alloc_skb+0x27e/0x4b0 [ 793.245866][ C0] batadv_iv_ogm_queue_add+0x86f/0xd80 [ 793.245888][ C0] ? batadv_iv_ogm_queue_add+0x71/0xd80 [ 793.245913][ C0] batadv_iv_ogm_schedule+0xaf7/0xfa0 [ 793.245938][ C0] ? batadv_iv_ogm_schedule+0x86c/0xfa0 [ 793.245960][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 793.245981][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 793.246011][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 793.246048][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x67a/0x790 [ 793.246071][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 793.246098][ C0] ? rcu_is_watching+0x15/0xb0 [ 793.246124][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 793.246146][ C0] process_scheduled_works+0xa8e/0x14e0 [ 793.246182][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.246208][ C0] ? assign_work+0x3cf/0x5d0 [ 793.246232][ C0] worker_thread+0xa47/0xfb0 [ 793.246269][ C0] kthread+0x388/0x470 [ 793.246296][ C0] ? __pfx_worker_thread+0x10/0x10 [ 793.246319][ C0] ? __pfx_kthread+0x10/0x10 [ 793.246348][ C0] ret_from_fork+0x514/0xb70 [ 793.246378][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 793.246408][ C0] ? __switch_to+0xc89/0x1420 [ 793.246433][ C0] ? __pfx_kthread+0x10/0x10 [ 793.246462][ C0] ret_from_fork_asm+0x1a/0x30 [ 793.246487][ C0] [ 793.246949][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 793.246972][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 793.247003][ T38] Tainted: [L]=SOFTLOCKUP [ 793.247016][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 793.247030][ T38] Call Trace: [ 793.247041][ T38] [ 793.247051][ T38] vpanic+0x56c/0xa60 [ 793.247080][ T38] ? __pfx_vpanic+0x10/0x10 [ 793.247112][ T38] panic+0xc5/0xd0 [ 793.247134][ T38] ? __pfx_panic+0x10/0x10 [ 793.247159][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 793.247187][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 793.247229][ T38] watchdog+0x1030/0x1030 [ 793.247258][ T38] ? watchdog+0x1c7/0x1030 [ 793.247287][ T38] kthread+0x388/0x470 [ 793.247327][ T38] ? __pfx_watchdog+0x10/0x10 [ 793.247346][ T38] ? __pfx_kthread+0x10/0x10 [ 793.247382][ T38] ret_from_fork+0x514/0xb70 [ 793.247421][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 793.247456][ T38] ? __switch_to+0xc89/0x1420 [ 793.247491][ T38] ? __pfx_kthread+0x10/0x10 [ 793.247534][ T38] ret_from_fork_asm+0x1a/0x30 [ 793.247574][ T38] [ 793.248292][ T38] Kernel Offset: disabled