last executing test programs: 2m16.059070374s ago: executing program 0 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc001001b}]}) 2m15.89010336s ago: executing program 0 (id=264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x14, r1, 0x1, 0xffffffff, 0x25dfdbfb}, 0x14}}, 0x0) 2m15.747061847s ago: executing program 0 (id=266): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) 2m15.552651044s ago: executing program 0 (id=271): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000280)=@pppoe={0x2a, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x80, 0x0}, 0x0) 2m15.365419927s ago: executing program 0 (id=276): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m15.222392337s ago: executing program 0 (id=278): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)=@delchain={0xac, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_team\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0xac}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m0.045936884s ago: executing program 32 (id=278): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)=@delchain={0xac, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_team\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0xac}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m41.366787535s ago: executing program 1 (id=584): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) 1m41.255568445s ago: executing program 1 (id=585): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x1, 0x44, 0x0, 0x0, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) 1m41.042268783s ago: executing program 1 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000000200)='./file0\x00', 0x0) 1m40.790744907s ago: executing program 1 (id=592): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) 1m40.610759468s ago: executing program 1 (id=597): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1m40.197619485s ago: executing program 1 (id=607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000000, 0x7, 0x7, 0xfffffffd, 0x1, 0x8, 0x7}]}) 1m40.043261651s ago: executing program 33 (id=607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x80000000, 0x7, 0x7, 0xfffffffd, 0x1, 0x8, 0x7}]}) 44.384343279s ago: executing program 5 (id=1514): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0xffffffff, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x8, 0x40000274}, &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) 44.146324807s ago: executing program 5 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ftruncate(r1, 0xffff) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) 34.914655958s ago: executing program 5 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ftruncate(r1, 0xffff) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) 26.112839805s ago: executing program 5 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ftruncate(r1, 0xffff) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) 15.763751083s ago: executing program 5 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ftruncate(r1, 0xffff) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) 7.418723234s ago: executing program 5 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ftruncate(r1, 0xffff) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) 5.005686715s ago: executing program 2 (id=1905): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000004000000000008000700000000000800060000000000080005000000000008000100000000000800020000000000080003"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 4.914189662s ago: executing program 2 (id=1907): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) 4.700463598s ago: executing program 2 (id=1909): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_io_uring_setup(0x231b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed, 0x5}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.04747152s ago: executing program 2 (id=1916): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents64(r1, &(0x7f00000000c0)=""/32, 0x20) getdents(r1, &(0x7f0000001180)=""/120, 0x78) 3.951558126s ago: executing program 2 (id=1917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.738867833s ago: executing program 2 (id=1919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000120000000000000007"]) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) 2.647264734s ago: executing program 6 (id=1921): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 2.576427239s ago: executing program 4 (id=1922): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x33}, 0x0, @in=@broadcast}}, 0xe4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2.469129506s ago: executing program 4 (id=1924): r0 = open(&(0x7f0000000200)='./file0\x00', 0x4040041, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) fcntl$setlease(r1, 0x400, 0x2) 2.429745519s ago: executing program 4 (id=1925): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r0, 0x8000009) r1 = epoll_create(0x10c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) 2.357805787s ago: executing program 4 (id=1926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000c273000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r2, 0x7, 0x0, @void}, 0x10) 2.331653083s ago: executing program 3 (id=1927): r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 2.27879049s ago: executing program 4 (id=1928): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x3}, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100), 0x8) sendto$inet(r0, &(0x7f00000001c0)="ec37de30431f", 0x6, 0x1, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 2.24888609s ago: executing program 3 (id=1929): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x4014) 2.146197233s ago: executing program 4 (id=1930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 1.741483213s ago: executing program 6 (id=1931): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsync(0xffffffffffffffff) 1.680593327s ago: executing program 3 (id=1932): syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x2) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.111735095s ago: executing program 6 (id=1933): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c881) 763.500886ms ago: executing program 3 (id=1934): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 562.365527ms ago: executing program 3 (id=1935): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x80024, &(0x7f0000000280)='upperdir') 511.878701ms ago: executing program 6 (id=1936): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x80, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x73a6, &(0x7f0000000280)={0x0, 0x95b0, 0x400, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 494.643776ms ago: executing program 3 (id=1937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800002c1001c0"]) 382.612764ms ago: executing program 6 (id=1938): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 6 (id=1939): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): 93273][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.935880][ T5923] usb 6-1: USB disconnect, device number 3 [ 136.942617][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.976844][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.983892][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.062733][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.135287][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 137.135306][ T29] audit: type=1326 audit(1732423807.683:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 137.163814][ T29] audit: type=1326 audit(1732423807.683:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 137.185339][ T29] audit: type=1326 audit(1732423807.683:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 137.206786][ T29] audit: type=1326 audit(1732423807.683:26): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 137.228716][ T29] audit: type=1326 audit(1732423807.683:27): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 137.251134][ T29] audit: type=1326 audit(1732423807.683:28): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 137.273480][ T29] audit: type=1326 audit(1732423807.683:29): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 137.295567][ T29] audit: type=1326 audit(1732423807.683:30): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 137.325582][ T7345] hsr_slave_0: entered promiscuous mode [ 137.341722][ T7345] hsr_slave_1: entered promiscuous mode [ 137.357828][ T29] audit: type=1804 audit(1732423807.903:31): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.654" name="/" dev="pidfs" ino=7747 res=1 errno=0 [ 137.379129][ T7345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.392023][ T7345] Cannot create hsr debugfs directory [ 137.546637][ T55] Bluetooth: hci2: command tx timeout [ 137.602206][ T5886] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 137.614001][ T5886] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 137.657283][ T5886] hid-generic 0000:0003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.867062][ T5886] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.034653][ T7345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.048044][ T7345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.057987][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 138.076685][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.087859][ T7345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.095455][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 138.109759][ T5886] usb 5-1: can't read configurations, error -71 [ 138.143314][ T7345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.287194][ T5915] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.346014][ T7345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.405518][ T7345] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.435635][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.442797][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.451058][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 138.472123][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.506265][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.533181][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.536720][ T5915] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 138.540322][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.556601][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.619204][ T5915] usb 3-1: config 0 descriptor?? [ 138.683607][ T7475] netlink: 277 bytes leftover after parsing attributes in process `syz.3.667'. [ 138.957439][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.966013][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.043068][ T5915] playstation 0003:054C:05C4.0009: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 139.086204][ T7345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.112619][ T7494] ax25_connect(): syz.5.673 uses autobind, please contact jreuter@yaina.de [ 139.135873][ T7491] cifs: Unknown parameter 'mode' [ 139.231191][ T3450] wlan1: Trigger new scan to find an IBSS to join [ 139.256850][ T5915] playstation 0003:054C:05C4.0009: Invalid reportID received, expected 18 got 72 [ 139.266035][ T5915] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 pairing info: -22 [ 139.296562][ T5915] playstation 0003:054C:05C4.0009: Failed to get MAC address from DualShock4 [ 139.315835][ T5915] playstation 0003:054C:05C4.0009: Failed to create dualshock4. [ 139.338668][ T5915] playstation 0003:054C:05C4.0009: probe with driver playstation failed with error -22 [ 139.516892][ T7514] ntfs3(nullb0): Primary boot signature is not NTFS. [ 139.524594][ T7514] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 139.537846][ T7514] erofs (device nullb0): cannot find valid erofs superblock [ 139.568813][ T47] usb 3-1: USB disconnect, device number 7 [ 139.647735][ T55] Bluetooth: hci2: command tx timeout [ 139.659670][ T7345] veth0_vlan: entered promiscuous mode [ 139.670879][ T7345] veth1_vlan: entered promiscuous mode [ 139.700150][ T7345] veth0_macvtap: entered promiscuous mode [ 139.708964][ T7345] veth1_macvtap: entered promiscuous mode [ 139.743181][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.766560][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.786561][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.816554][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.830400][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.851832][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.861977][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.872512][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.883603][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.893690][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.904744][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.915090][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.925811][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.935757][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.946269][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.956317][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.967206][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.980629][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.018978][ T7345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.027947][ T7345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.041382][ T7345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.057300][ T7345] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.213647][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.254388][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.291094][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.308773][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.704524][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.697'. [ 140.742986][ T7549] macsec1: entered promiscuous mode [ 140.766381][ T7549] vlan0: entered promiscuous mode [ 140.801589][ T7549] vlan0: left promiscuous mode [ 140.912706][ T7551] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.935062][ T7551] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 141.707473][ T55] Bluetooth: hci2: command tx timeout [ 142.030241][ T7617] netlink: 'syz.4.728': attribute type 10 has an invalid length. [ 142.061946][ T7617] team0: Port device netdevsim0 added [ 142.074763][ T7617] netlink: 'syz.4.728': attribute type 10 has an invalid length. [ 142.107481][ T7619] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.159103][ T7617] team0: Port device netdevsim0 removed [ 142.199355][ T7617] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 142.224531][ T7617] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.294298][ T5923] IPVS: starting estimator thread 0... [ 142.417211][ T7626] IPVS: using max 20 ests per chain, 48000 per kthread [ 143.157097][ T7664] sctp: [Deprecated]: syz.2.745 (pid 7664) Use of int in maxseg socket option. [ 143.157097][ T7664] Use struct sctp_assoc_value instead [ 144.101659][ T7699] netlink: 'syz.4.762': attribute type 11 has an invalid length. [ 144.193460][ T64] wlan1: Trigger new scan to find an IBSS to join [ 144.398652][ T7710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.804605][ T7718] overlayfs: disabling nfs_export due to verity=on [ 144.825213][ T7718] overlayfs: missing 'lowerdir' [ 145.140572][ T3482] wlan1: Creating new IBSS network, BSSID 7e:48:72:7a:c9:37 [ 145.196610][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.318297][ T7739] syz.5.778 uses obsolete (PF_INET,SOCK_PACKET) [ 145.387249][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 145.410627][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.443295][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.476679][ T5923] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 145.506343][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.531520][ T5923] usb 3-1: config 0 descriptor?? [ 145.970773][ T5923] corsair-cpro 0003:1B1C:1D00.000A: item fetching failed at offset 1/5 [ 146.009499][ T5923] corsair-cpro 0003:1B1C:1D00.000A: probe with driver corsair-cpro failed with error -22 [ 146.126797][ T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 146.144368][ T29] audit: type=1326 audit(1732423816.693:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.194611][ T5923] usb 3-1: USB disconnect, device number 8 [ 146.205343][ T29] audit: type=1326 audit(1732423816.733:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.255913][ T7671] Set syz1 is full, maxelem 65536 reached [ 146.272420][ T29] audit: type=1326 audit(1732423816.733:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.344269][ T29] audit: type=1326 audit(1732423816.733:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.367156][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 146.388209][ T47] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 146.396650][ T29] audit: type=1326 audit(1732423816.733:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.396690][ T29] audit: type=1326 audit(1732423816.733:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.396721][ T29] audit: type=1326 audit(1732423816.733:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.396749][ T29] audit: type=1326 audit(1732423816.733:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.396778][ T29] audit: type=1326 audit(1732423816.733:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.396806][ T29] audit: type=1326 audit(1732423816.733:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7fc00000 [ 146.439754][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.490116][ T47] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 146.541362][ T47] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 146.549799][ T47] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 146.558435][ T47] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.567790][ T47] usb 6-1: config 0 has no interface number 0 [ 146.573962][ T47] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 146.586225][ T47] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 146.597168][ T47] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 146.607141][ T47] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.620264][ T47] usb 6-1: config 0 interface 125 has no altsetting 0 [ 146.627110][ T47] usb 6-1: config 0 interface 125 has no altsetting 2 [ 146.709278][ T47] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 146.718991][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.737091][ T47] usb 6-1: Product: syz [ 146.741318][ T47] usb 6-1: Manufacturer: syz [ 146.766569][ T47] usb 6-1: SerialNumber: syz [ 146.779525][ T47] usb 6-1: config 0 descriptor?? [ 146.799059][ T47] usb 6-1: selecting invalid altsetting 2 [ 147.029425][ C1] usb 6-1: async_complete: urb error -71 [ 147.035248][ C1] usb 6-1: async_complete: urb error -71 [ 147.040965][ C1] usb 6-1: async_complete: urb error -71 [ 147.046659][ C1] usb 6-1: async_complete: urb error -71 [ 147.086766][ T47] get_1284_register: usb error -71 [ 147.092009][ T47] uss720 6-1:0.125: probe with driver uss720 failed with error -71 [ 147.139044][ T47] usb 6-1: USB disconnect, device number 4 [ 147.928208][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'. [ 147.954286][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 148.063093][ T7833] netlink: 'syz.2.821': attribute type 9 has an invalid length. [ 148.205400][ T7841] kernel profiling enabled (shift: 9) [ 148.261498][ T7847] sctp: [Deprecated]: syz.4.826 (pid 7847) Use of int in max_burst socket option. [ 148.261498][ T7847] Use struct sctp_assoc_value instead [ 148.946181][ T7880] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 149.268840][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.852'. [ 149.278607][ T7902] netlink: 172 bytes leftover after parsing attributes in process `syz.5.852'. [ 149.288730][ T7902] netlink: 116 bytes leftover after parsing attributes in process `syz.5.852'. [ 149.594469][ T7914] misc userio: Can't change port type on an already running userio instance [ 149.788150][ T7930] netlink: 'syz.6.863': attribute type 10 has an invalid length. [ 149.862657][ T7930] team0: Port device wlan1 added [ 150.476837][ T5916] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.531319][ T7971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.539097][ T7971] IPv6: NLM_F_CREATE should be set when creating new route [ 150.546432][ T7971] IPv6: NLM_F_CREATE should be set when creating new route [ 150.649439][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.665731][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.690919][ T5916] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 150.701234][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.718985][ T5916] usb 6-1: config 0 descriptor?? [ 150.856707][ T47] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.029332][ T47] usb 5-1: config 0 has no interfaces? [ 151.035060][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 151.061198][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.094402][ T47] usb 5-1: config 0 descriptor?? [ 151.170265][ T5916] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 151.237199][ T5916] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 151.277884][ T5916] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 151.389983][ T47] usb 5-1: USB disconnect, device number 11 [ 151.419983][ T5916] usb 6-1: USB disconnect, device number 5 [ 151.434124][ T5916] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 152.996636][ T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 153.160814][ T47] usb 7-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 153.170032][ T47] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 153.186663][ T47] usb 7-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 153.195816][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.220868][ T47] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 153.337923][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.384631][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 153.434292][ T47] gspca_sn9c2028: read1 error -32 [ 153.440400][ T47] gspca_sn9c2028: read1 error -32 [ 153.462022][ T8088] input: syz0 as /devices/virtual/input/input15 [ 153.662919][ T47] usb 7-1: USB disconnect, device number 2 [ 154.367230][ T8135] binder: 8133:8135 ioctl c018620b 200000c0 returned -14 [ 154.410866][ T8139] vivid-001: disconnect [ 154.432992][ T8138] vivid-001: reconnect [ 155.187220][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 155.316647][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.396564][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 155.405866][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 155.415892][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.426518][ T8] usb 6-1: Product: syz [ 155.430801][ T8] usb 6-1: Manufacturer: syz [ 155.435424][ T8] usb 6-1: SerialNumber: syz [ 155.469478][ T8] usb 6-1: config 0 descriptor?? [ 155.489467][ T8] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 155.546553][ T5915] usb 4-1: config 0 has no interfaces? [ 155.552398][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 155.566832][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.592574][ T5915] usb 4-1: config 0 descriptor?? [ 155.595424][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.979'. [ 155.821499][ T5915] usb 4-1: USB disconnect, device number 6 [ 156.087037][ T8211] tipc: Started in network mode [ 156.092064][ T8211] tipc: Node identity fffffeff, cluster identity 7 [ 156.099432][ T8211] tipc: Node number set to 4294967039 [ 156.207014][ T5934] kernel write not supported for file /amidi2 (pid: 5934 comm: kworker/1:7) [ 156.322570][ T8] gspca_vc032x: reg_w err -71 [ 156.327490][ T8] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 156.516933][ T8] usb 6-1: USB disconnect, device number 6 [ 157.200842][ T8257] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.235645][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1014'. [ 157.338189][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1018'. [ 157.726767][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.886707][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 157.893744][ T5923] usb 4-1: config 157 interface 0 has no altsetting 0 [ 157.906260][ T5923] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 157.927254][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.946799][ T5923] usb 4-1: Product: syz [ 157.951015][ T5923] usb 4-1: Manufacturer: syz [ 157.955625][ T5923] usb 4-1: SerialNumber: syz [ 158.102915][ T8303] siw: device registration error -23 [ 158.276174][ T8308] pim6reg: entered allmulticast mode [ 158.290451][ T8308] pim6reg: left allmulticast mode [ 158.326675][ T5934] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.385676][ T5923] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 158.417290][ T5923] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.446955][ T5923] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 158.457310][ T5923] usb 4-1: media controller created [ 158.476662][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 158.486932][ T5934] usb 3-1: config 128 has an invalid interface number: 61 but max is 0 [ 158.495381][ T5934] usb 3-1: config 128 has no interface number 0 [ 158.509948][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.563960][ T5934] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=25.84 [ 158.573262][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.581749][ T5934] usb 3-1: Product: syz [ 158.586932][ T5934] usb 3-1: Manufacturer: syz [ 158.591565][ T5934] usb 3-1: SerialNumber: syz [ 158.603154][ T5923] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 158.614124][ T5923] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 158.764777][ T5923] DVB: Unable to find symbol qt1010_attach() [ 158.836392][ T5923] usb 4-1: USB disconnect, device number 7 [ 159.061068][ T5934] usb 3-1: ignoring: probably an ADSL modem [ 159.235928][ T8338] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 159.584382][ T5934] cxacru 3-1:128.61: usbatm_usb_probe: bind failed: -19! [ 159.617086][ T5934] usb 3-1: USB disconnect, device number 9 [ 159.628012][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 159.986588][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 159.995967][ T5923] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 160.012003][ T5923] usb 6-1: config 179 has no interface number 0 [ 160.020284][ T5923] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 160.033659][ T5923] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 160.052090][ T5923] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.064900][ T5923] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 160.084084][ T5923] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 160.125383][ T5923] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 160.150640][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.178617][ T8340] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 160.484276][ T5923] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input16 [ 160.673851][ T5923] usb 6-1: USB disconnect, device number 7 [ 160.679889][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.679938][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.718093][ T5923] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 160.772842][ T8371] serio: Serial port ptm0 [ 160.925811][ T8344] syz.4.1050 (8344): drop_caches: 2 [ 161.147149][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 161.147168][ T29] audit: type=1326 audit(1732423831.693:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 161.153290][ T8379] netlink: 'syz.2.1066': attribute type 11 has an invalid length. [ 161.212014][ T8379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1066'. [ 161.260622][ T29] audit: type=1326 audit(1732423831.693:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 161.356211][ T29] audit: type=1326 audit(1732423831.693:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 161.416969][ T29] audit: type=1326 audit(1732423831.693:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 161.472489][ T29] audit: type=1326 audit(1732423831.693:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8375 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d8f7e819 code=0x7ffc0000 [ 163.058505][ T8475] omfs: Invalid superblock (0) [ 163.259246][ T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 163.426577][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 163.442878][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.454805][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.496804][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.528849][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 163.553496][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.580953][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 163.592952][ T47] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.601660][ T47] usb 3-1: Manufacturer: syz [ 163.611677][ T47] usb 3-1: config 0 descriptor?? [ 163.817925][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.926569][ T47] rc_core: IR keymap rc-hauppauge not found [ 163.936773][ T47] Registered IR keymap rc-empty [ 163.949725][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 163.976776][ T5934] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 163.996009][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.017979][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 164.041127][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 164.051096][ T8] usb 4-1: config 0 has no interfaces? [ 164.065695][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 164.086706][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.086982][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.108541][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.118393][ T8] usb 4-1: config 0 descriptor?? [ 164.145909][ T5934] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 164.162175][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.175293][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.194056][ T5934] usb 6-1: Product: syz [ 164.198409][ T5934] usb 6-1: Manufacturer: syz [ 164.203068][ T5934] usb 6-1: SerialNumber: syz [ 164.209258][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.224873][ T5934] usb 6-1: config 0 descriptor?? [ 164.242948][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.267239][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.286679][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.306689][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.326694][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.348494][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.368132][ T47] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 164.416602][ T47] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 164.446704][ T47] usb 3-1: USB disconnect, device number 10 [ 164.454493][ T5934] hso 6-1:0.0: Can't find BULK IN endpoint [ 164.477127][ T5934] usb-storage 6-1:0.0: USB Mass Storage device detected [ 164.485597][ T5853] usb 4-1: USB disconnect, device number 8 [ 164.667342][ T5915] usb 6-1: USB disconnect, device number 8 [ 165.703795][ T8549] input: syz0 as /devices/virtual/input/input18 [ 166.036613][ T47] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.207306][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.219348][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.241756][ T47] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 166.271294][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.296022][ T47] usb 4-1: config 0 descriptor?? [ 166.725205][ T8576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.734433][ T47] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 166.746936][ T47] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x1 [ 166.756628][ T47] zeroplus 0003:0C12:0030.000D: item fetching failed at offset 3/7 [ 166.765158][ T47] zeroplus 0003:0C12:0030.000D: parse failed [ 166.784951][ T47] zeroplus 0003:0C12:0030.000D: probe with driver zeroplus failed with error -22 [ 166.962298][ T47] usb 4-1: USB disconnect, device number 9 [ 167.143198][ T29] audit: type=1326 audit(1732423837.683:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1d8f7e819 code=0x0 [ 167.643080][ T29] audit: type=1326 audit(1732423838.193:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.3.1163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x0 [ 168.617235][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 168.685107][ T8649] hsr0: entered promiscuous mode [ 168.879755][ T5853] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.036773][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 169.052263][ T5853] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 169.076741][ T5853] usb 4-1: config 0 has no interface number 0 [ 169.086674][ T5853] usb 4-1: config 0 interface 252 has no altsetting 0 [ 169.109388][ T5853] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8 [ 169.125654][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.147988][ T5853] usb 4-1: Product: syz [ 169.152210][ T5853] usb 4-1: Manufacturer: syz [ 169.163116][ T5853] usb 4-1: SerialNumber: syz [ 169.177801][ T8670] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 169.204345][ T5853] usb 4-1: config 0 descriptor?? [ 169.212295][ T5853] pcwd_usb: The device isn't a Human Interface Device [ 169.433074][ T5853] usb 4-1: USB disconnect, device number 10 [ 169.863419][ T8698] veth1_to_team: entered promiscuous mode [ 169.882584][ T8697] veth1_to_team: left promiscuous mode [ 170.487650][ T5853] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 170.662390][ T5853] usb 7-1: Using ep0 maxpacket: 16 [ 170.712328][ T5853] usb 7-1: config 1 has an invalid interface number: 65 but max is 1 [ 170.722052][ T5853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.741178][ T5853] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 170.754851][ T5853] usb 7-1: config 1 has no interface number 2 [ 170.765721][ T5853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.786741][ T5853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.804265][ T5853] usb 7-1: config 1 interface 65 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.827414][ T5853] usb 7-1: config 1 interface 65 has no altsetting 0 [ 170.874895][ T5853] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.894553][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.913189][ T5853] usb 7-1: Product: syz [ 170.929009][ T5853] usb 7-1: Manufacturer: syz [ 170.938870][ T5853] usb 7-1: SerialNumber: syz [ 170.960235][ T5853] usb 7-1: selecting invalid altsetting 1 [ 171.164271][ T5853] cdc_ncm 7-1:1.0: bind() failure [ 171.177472][ T5853] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 171.184317][ T5853] cdc_ncm 7-1:1.1: bind() failure [ 171.215677][ T5853] cdc_mbim 7-1:1.65: probe with driver cdc_mbim failed with error -71 [ 171.229353][ T5853] usb 7-1: USB disconnect, device number 3 [ 171.740397][ T8780] bridge0: port 3(vlan2) entered blocking state [ 171.757608][ T8780] bridge0: port 3(vlan2) entered disabled state [ 171.772660][ T8780] vlan2: entered allmulticast mode [ 171.779618][ T8780] dummy0: entered allmulticast mode [ 171.794475][ T8780] vlan2: entered promiscuous mode [ 171.800984][ T8780] dummy0: entered promiscuous mode [ 171.932400][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 171.947332][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.965089][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.981748][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.992873][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.027007][ T5890] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 172.188966][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.219640][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.245468][ T5890] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 172.265790][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.288829][ T5890] usb 6-1: config 0 descriptor?? [ 172.678543][ T8803] loop5: detected capacity change from 0 to 7 [ 172.711255][ T5890] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 172.716396][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.724649][ T5890] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 172.746787][ T5890] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000E/input/input19 [ 172.770364][ T8806] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.797752][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.811002][ T5890] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 172.826586][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.835583][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.846328][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.855044][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.876985][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.907732][ T8803] ldm_validate_partition_table(): Disk read failed. [ 172.932246][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.948569][ T47] usb 6-1: USB disconnect, device number 9 [ 172.952668][ T8803] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.982786][ T8803] Dev loop5: unable to read RDB block 0 [ 172.999930][ T8803] loop5: unable to read partition table [ 173.016661][ T8803] loop5: partition table beyond EOD, truncated [ 173.022861][ T8803] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 173.022861][ T8803] ) failed (rc=-5) [ 173.136696][ T5853] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.300043][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 173.319601][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.341073][ T5853] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 173.358153][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.378727][ T5853] usb 4-1: config 0 descriptor?? [ 173.398532][ T5853] hub 4-1:0.0: USB hub found [ 173.605681][ T5853] hub 4-1:0.0: 1 port detected [ 173.820638][ T29] audit: type=1326 audit(1732423844.373:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8832 comm="syz.2.1259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453417e819 code=0x0 [ 174.431502][ T5853] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 174.620171][ T29] audit: type=1400 audit(1732423845.173:107): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=8854 comm="syz.5.1268" name="145" dev="tmpfs" ino=754 [ 174.621093][ T8857] input: syz1 as /devices/virtual/input/input20 [ 175.017273][ T5934] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 175.201202][ T5934] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 175.216826][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.230375][ T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.246811][ T3073] usb 4-1: USB disconnect, device number 11 [ 175.266573][ T5934] usb 3-1: config 0 descriptor?? [ 175.683724][ T5934] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 175.891627][ T8913] sctp: [Deprecated]: syz.6.1292 (pid 8913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.891627][ T8913] Use struct sctp_sack_info instead [ 176.085458][ T5934] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 176.107874][ T5934] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 176.213662][ T8926] loop6: detected capacity change from 0 to 1 [ 176.226074][ T8926] Dev loop6: unable to read RDB block 1 [ 176.232482][ T8926] loop6: unable to read partition table [ 176.238646][ T8926] loop6: partition table beyond EOD, truncated [ 176.244983][ T8926] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 176.244983][ T8926] ) failed (rc=-5) [ 176.293742][ T5934] usb 3-1: USB disconnect, device number 11 [ 176.733869][ T8949] loop2: detected capacity change from 0 to 7 [ 176.742243][ T8949] Dev loop2: unable to read RDB block 7 [ 176.749268][ T8949] loop2: unable to read partition table [ 176.755156][ T8949] loop2: partition table beyond EOD, truncated [ 176.762943][ T8949] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 176.776969][ T5915] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.847154][ T8954] loop2: detected capacity change from 0 to 7 [ 176.855820][ T8954] Dev loop2: unable to read RDB block 7 [ 176.865660][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'. [ 176.866639][ T8954] loop2: unable to read partition table [ 176.886018][ T8954] loop2: partition table beyond EOD, truncated [ 176.892697][ T8954] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 176.958206][ T5915] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.980543][ T5915] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.005125][ T5915] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.027116][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.053502][ T8939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 177.087391][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.302554][ T5915] usb 4-1: USB disconnect, device number 12 [ 177.406759][ T5923] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 177.576714][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 177.588765][ T5923] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.613369][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.626343][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.635240][ T5923] usb 6-1: Product: syz [ 177.639780][ T5923] usb 6-1: Manufacturer: syz [ 177.645103][ T5923] usb 6-1: SerialNumber: syz [ 177.736582][ T3073] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 177.922381][ T3073] usb 7-1: Using ep0 maxpacket: 16 [ 177.968774][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.980223][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.996656][ T3073] usb 7-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 178.005819][ T3073] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.031995][ T8996] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 178.047480][ T3073] usb 7-1: config 0 descriptor?? [ 178.466046][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0 [ 178.473290][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0 [ 178.488750][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0 [ 178.516360][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0 [ 178.536798][ T3073] razer 0003:1532:011B.000F: unknown main item tag 0x0 [ 178.678921][ T3073] razer 0003:1532:011B.000F: failed to enable macro keys: -71 [ 178.707036][ T3073] razer 0003:1532:011B.000F: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.6-1/input0 [ 178.720535][ T5923] cdc_ncm 6-1:1.0: bind() failure [ 178.736601][ T5923] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 178.747006][ T3073] usb 7-1: USB disconnect, device number 4 [ 178.756639][ T5923] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 178.786242][ T5923] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 178.806611][ T5923] usb 6-1: USB disconnect, device number 10 [ 179.279457][ T9039] tipc: Enabled bearer , priority 10 [ 179.736938][ T5890] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 179.910906][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 179.926113][ T5890] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 179.950867][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.959298][ T5890] usb 7-1: Product: syz [ 179.963503][ T5890] usb 7-1: Manufacturer: syz [ 179.968397][ T5890] usb 7-1: SerialNumber: syz [ 180.026602][ T5890] usb 7-1: config 0 descriptor?? [ 180.038084][ T5890] gm12u320 7-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 180.047611][ T5890] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 180.058441][ T5890] usb-storage 7-1:0.0: USB Mass Storage device detected [ 180.072238][ T5890] usb-storage 7-1:0.0: device ignored [ 180.265322][ T5915] usb 7-1: USB disconnect, device number 5 [ 180.279520][ T3073] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 180.436829][ T3073] usb 6-1: Using ep0 maxpacket: 32 [ 180.450602][ T3073] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.462646][ T3073] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.473751][ T3073] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.488118][ T3073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.498510][ T3073] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.509510][ T3073] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.523651][ T3073] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 180.533452][ T3073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.544274][ T3073] usb 6-1: config 0 descriptor?? [ 180.769524][ T3073] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.024505][ T5916] usb 6-1: USB disconnect, device number 11 [ 181.036153][ T5916] usblp0: removed [ 181.139551][ T5890] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 181.296965][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 181.319176][ T5890] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 181.342654][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.358311][ T5890] usb 5-1: config 0 descriptor?? [ 181.456916][ T5915] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 181.569407][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 181.594346][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.614747][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 181.626657][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 181.634453][ T5890] usb 5-1: media controller created [ 181.649928][ T5915] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 181.674557][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.689315][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.698273][ T5915] usb 7-1: Product: syz [ 181.702485][ T5915] usb 7-1: Manufacturer: syz [ 181.707932][ T5915] usb 7-1: SerialNumber: syz [ 181.720487][ T5915] usb 7-1: config 0 descriptor?? [ 181.862476][ T9137] wireguard0: entered promiscuous mode [ 181.883581][ T9137] wireguard0: entered allmulticast mode [ 182.155912][ T5915] airspy 7-1:0.0: Board ID: 00 [ 182.166723][ T5915] airspy 7-1:0.0: Firmware version: [ 182.428203][ T5890] az6027: usb out operation failed. (-71) [ 182.434509][ T5890] stb0899_attach: Driver disabled by Kconfig [ 182.446884][ T5890] az6027: no front-end attached [ 182.446884][ T5890] [ 182.456676][ T5890] az6027: usb out operation failed. (-71) [ 182.462485][ T5890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 182.475749][ T9164] team0: entered promiscuous mode [ 182.481234][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 182.484434][ T9164] team_slave_0: entered promiscuous mode [ 182.504804][ T5890] dvb-usb: schedule remote query interval to 400 msecs. [ 182.504803][ T9164] team_slave_1: entered promiscuous mode [ 182.504832][ T5890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 182.548842][ T5890] usb 5-1: USB disconnect, device number 12 [ 182.573068][ T9165] vlan1: entered promiscuous mode [ 182.587841][ T9165] team0: Port device vlan1 added [ 182.606616][ T9163] team0: left promiscuous mode [ 182.611444][ T9163] team_slave_0: left promiscuous mode [ 182.622376][ T9163] team_slave_1: left promiscuous mode [ 182.634062][ T9163] vlan1: left promiscuous mode [ 182.652395][ T5890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 182.756652][ T5915] airspy 7-1:0.0: usb_control_msg() failed -71 request 12 [ 182.766435][ T5915] airspy 7-1:0.0: Registered as swradio24 [ 182.777325][ T5915] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 182.801654][ T5915] usb 7-1: USB disconnect, device number 6 [ 184.326319][ T9223] input: syz1 as /devices/virtual/input/input22 [ 184.336144][ T9223] input: failed to attach handler leds to device input22, error: -6 [ 184.481147][ T9226] sctp: [Deprecated]: syz.4.1426 (pid 9226) Use of int in max_burst socket option. [ 184.481147][ T9226] Use struct sctp_assoc_value instead [ 184.743456][ T5842] Bluetooth: hci5: sending frame failed (-49) [ 184.752056][ T9234] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.760716][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 185.201223][ T9249] sctp: [Deprecated]: syz.6.1436 (pid 9249) Use of int in max_burst socket option deprecated. [ 185.201223][ T9249] Use struct sctp_assoc_value instead [ 185.430199][ T9264] sctp: [Deprecated]: syz.4.1443 (pid 9264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.430199][ T9264] Use struct sctp_sack_info instead [ 185.657117][ T9268] delete_channel: no stack [ 185.958440][ T9288] syzkaller1: entered promiscuous mode [ 185.963978][ T9288] syzkaller1: entered allmulticast mode [ 186.086623][ T5890] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 186.171386][ T9292] sctp: [Deprecated]: syz.6.1456 (pid 9292) Use of int in max_burst socket option. [ 186.171386][ T9292] Use struct sctp_assoc_value instead [ 186.256706][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 186.268950][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 186.296948][ T5890] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 186.316581][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.324640][ T5890] usb 6-1: Product: syz [ 186.345534][ T5890] usb 6-1: Manufacturer: syz [ 186.355915][ T5890] usb 6-1: SerialNumber: syz [ 186.370527][ T5890] usb 6-1: config 0 descriptor?? [ 186.378231][ T5890] hub 6-1:0.0: bad descriptor, ignoring hub [ 186.384461][ T5890] hub 6-1:0.0: probe with driver hub failed with error -5 [ 186.400649][ T5890] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 186.416349][ T5890] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 186.467924][ T5890] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 186.638995][ T9321] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.726891][ T5923] usb 6-1: USB disconnect, device number 12 [ 187.381219][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 187.406929][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 187.415187][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 187.454146][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 187.482260][ T5923] rtc rtc0: __rtc_set_alarm: err=-22 [ 187.532890][ T9371] vlan2: entered promiscuous mode [ 187.544618][ T9371] vlan2: entered allmulticast mode [ 188.074401][ T9389] loop6: detected capacity change from 0 to 524287999 [ 188.100946][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.117317][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.135259][ T35] loop: Write error at byte offset 1, length 4096. [ 188.148181][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 188.157741][ C1] buffer_io_error: 5 callbacks suppressed [ 188.157757][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 188.450202][ T9408] tipc: Enabled bearer , priority 10 [ 188.764925][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 188.921100][ T64] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.080630][ T64] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.218452][ T64] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.313659][ T64] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.505913][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.516071][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.524548][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.534370][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.544804][ T64] bridge_slave_1: left allmulticast mode [ 189.557287][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.565496][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.579182][ T64] bridge_slave_1: left promiscuous mode [ 189.609747][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.671922][ T64] bridge_slave_0: left allmulticast mode [ 189.682883][ T64] bridge_slave_0: left promiscuous mode [ 189.704538][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.107310][ T5916] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 190.236766][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.249386][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.259273][ T64] bond0 (unregistering): Released all slaves [ 190.273102][ T5916] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.287914][ T9458] syzkaller1: entered promiscuous mode [ 190.298551][ T9458] syzkaller1: entered allmulticast mode [ 190.305149][ T5916] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.356153][ T5916] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.377985][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.386211][ T5916] usb 7-1: SerialNumber: syz [ 190.611158][ T5916] usb 7-1: 0:2 : does not exist [ 190.689397][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.699235][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.700203][ T5916] usb 7-1: USB disconnect, device number 7 [ 190.734171][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.754048][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.813771][ T64] veth1_macvtap: left promiscuous mode [ 190.834620][ T64] veth0_macvtap: left promiscuous mode [ 190.847074][ T64] veth1_vlan: left promiscuous mode [ 190.852418][ T64] veth0_vlan: left promiscuous mode [ 191.309637][ T5853] IPVS: starting estimator thread 0... [ 191.403277][ T9493] IPVS: using max 26 ests per chain, 62400 per kthread [ 191.480361][ T64] team0 (unregistering): Port device vlan1 removed [ 191.629369][ T5842] Bluetooth: hci0: command tx timeout [ 191.930204][ T9521] mmap: syz.6.1556 (9521): VmData 37453824 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 192.229492][ T64] team0 (unregistering): Port device team_slave_1 removed [ 192.287509][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 192.364678][ T64] team0 (unregistering): Port device team_slave_0 removed [ 193.254620][ T9561] nbd: device at index 3 is going down [ 193.436292][ T29] audit: type=1326 audit(1732423864.985:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000 [ 193.476454][ T29] audit: type=1326 audit(1732423864.985:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000 [ 193.566561][ T29] audit: type=1326 audit(1732423865.025:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f088477e819 code=0x7ffc0000 [ 193.569091][ T9568] loop2: detected capacity change from 0 to 7 [ 193.611269][ T9568] Dev loop2: unable to read RDB block 7 [ 193.622283][ T9568] loop2: unable to read partition table [ 193.628726][ T9568] loop2: partition table beyond EOD, truncated [ 193.633248][ T29] audit: type=1326 audit(1732423865.025:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000 [ 193.643682][ T9568] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 193.670023][ T9439] chnl_net:caif_netlink_parms(): no params data found [ 193.695160][ T9524] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 193.697590][ T29] audit: type=1326 audit(1732423865.025:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000 [ 193.729688][ T5842] Bluetooth: hci0: command tx timeout [ 193.799394][ T29] audit: type=1326 audit(1732423865.035:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f088477e819 code=0x7ffc0000 [ 193.856960][ T29] audit: type=1326 audit(1732423865.035:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000 [ 193.879174][ T29] audit: type=1326 audit(1732423865.035:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088477e819 code=0x7ffc0000 [ 193.922400][ T29] audit: type=1326 audit(1732423865.035:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f088477d1b0 code=0x7ffc0000 [ 194.046541][ T29] audit: type=1326 audit(1732423865.035:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9565 comm="syz.3.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f088477d1b0 code=0x7ffc0000 [ 194.176221][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.187236][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.204761][ T9439] bridge_slave_0: entered allmulticast mode [ 194.217631][ T9439] bridge_slave_0: entered promiscuous mode [ 194.235439][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.246053][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.253828][ T9439] bridge_slave_1: entered allmulticast mode [ 194.283478][ T9439] bridge_slave_1: entered promiscuous mode [ 194.368390][ T9439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.388966][ T9439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.452766][ T9439] team0: Port device team_slave_0 added [ 194.463572][ T9439] team0: Port device team_slave_1 added [ 194.472273][ T64] IPVS: stop unused estimator thread 0... [ 194.478417][ T5934] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 194.534389][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.551985][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.580892][ T5853] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 194.597084][ T9439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.608879][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.615177][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.631141][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.649044][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.658212][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 194.696118][ T9439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.708782][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.729925][ T5934] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.747323][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.761129][ T5934] usb 3-1: config 0 descriptor?? [ 194.779475][ T5853] usb 7-1: Using ep0 maxpacket: 8 [ 194.791652][ T5853] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 194.804914][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.816034][ T5853] usb 7-1: config 0 descriptor?? [ 194.830364][ T9439] hsr_slave_0: entered promiscuous mode [ 194.846957][ T9439] hsr_slave_1: entered promiscuous mode [ 194.855137][ T9439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.863114][ T9439] Cannot create hsr debugfs directory [ 194.903675][ T9613] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 195.015298][ T5934] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 195.326176][ T9439] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.341049][ T9439] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.350940][ T9439] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.363035][ T9439] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.424849][ T5916] usb 3-1: USB disconnect, device number 12 [ 195.437198][ T5916] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 195.472984][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.496996][ T9439] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.522172][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.529374][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.544531][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.551739][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.786862][ T5839] Bluetooth: hci0: command tx timeout [ 195.818123][ T9439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.850662][ T5853] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 195.881652][ T5853] asix 7-1:0.0: probe with driver asix failed with error -71 [ 195.922485][ T5853] usb 7-1: USB disconnect, device number 8 [ 196.135869][ T9439] veth0_vlan: entered promiscuous mode [ 196.164198][ T9439] veth1_vlan: entered promiscuous mode [ 196.219741][ T9439] veth0_macvtap: entered promiscuous mode [ 196.230731][ T9439] veth1_macvtap: entered promiscuous mode [ 196.250197][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.261352][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.277827][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.298414][ T9656] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1608'. [ 196.308574][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.319402][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.330099][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 196.340715][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.351655][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 196.361426][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.391626][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.422900][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.433284][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.451259][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.466543][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.481696][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.495858][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.518691][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.544033][ T9439] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.558429][ T9439] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.568205][ T9439] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.577404][ T9439] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.598014][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 196.608681][ T5916] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 196.628329][ T5916] usb 5-1: config 0 has no interface number 0 [ 196.652189][ T5916] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.682171][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 196.688670][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 196.724745][ T5916] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 196.739531][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.747440][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.755001][ T5916] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 196.772388][ T5916] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 196.783363][ T5916] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 196.793598][ T5916] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 196.815431][ T5916] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 196.824994][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.833491][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.841229][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.850272][ T5916] usb 5-1: Product: syz [ 196.856150][ T5916] usb 5-1: Manufacturer: syz [ 196.861041][ T5916] usb 5-1: SerialNumber: syz [ 196.868117][ T5916] usb 5-1: config 0 descriptor?? [ 196.874792][ T9653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 196.886168][ T9653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 197.017148][ T5915] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 197.085367][ T9676] capability: warning: `syz.2.1617' uses 32-bit capabilities (legacy support in use) [ 197.108595][ T5916] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 197.202957][ T5915] usb 7-1: config 0 has an invalid interface number: 62 but max is 0 [ 197.216613][ T5915] usb 7-1: config 0 has no interface number 0 [ 197.233706][ T5915] usb 7-1: config 0 interface 62 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 197.266139][ T5915] usb 7-1: New USB device found, idVendor=951f, idProduct=a083, bcdDevice=31.b8 [ 197.278119][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.286239][ T5915] usb 7-1: Product: syz [ 197.296411][ T5915] usb 7-1: Manufacturer: syz [ 197.301825][ T5915] usb 7-1: SerialNumber: syz [ 197.309873][ T5915] usb 7-1: config 0 descriptor?? [ 197.332210][ T5916] etas_es58x 5-1:0.219: could not retrieve the product info string [ 197.532957][ T5915] usb 7-1: USB disconnect, device number 9 [ 197.564196][ T5916] usb 5-1: USB disconnect, device number 13 [ 197.573642][ T5916] etas_es58x 5-1:0.219: Disconnecting syz syz [ 197.800792][ T9700] sctp: [Deprecated]: syz.3.1628 (pid 9700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.800792][ T9700] Use struct sctp_sack_info instead [ 197.930321][ T9706] netlink: 'syz.3.1631': attribute type 1 has an invalid length. [ 198.166088][ T3482] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.466344][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.504711][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.515438][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.526198][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.534342][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.542759][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.822048][ T9724] chnl_net:caif_netlink_parms(): no params data found [ 198.966081][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.987147][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.994489][ T9724] bridge_slave_0: entered allmulticast mode [ 199.006371][ T9724] bridge_slave_0: entered promiscuous mode [ 199.020523][ T9724] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.031279][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.057452][ T9724] bridge_slave_1: entered allmulticast mode [ 199.064678][ T9724] bridge_slave_1: entered promiscuous mode [ 199.095863][ T9724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.109451][ T9724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.157014][ T9724] team0: Port device team_slave_0 added [ 199.167090][ T5916] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 199.180623][ T3482] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.197188][ T9724] team0: Port device team_slave_1 added [ 199.206992][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 199.224952][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.232256][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.266647][ T9724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.285311][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.294588][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.320562][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.337188][ T9724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.358999][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.376342][ T5916] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 199.393581][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 199.400500][ T5916] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.413321][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.425654][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.436055][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.451018][ T5915] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 199.461292][ T5916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.464800][ T9724] hsr_slave_0: entered promiscuous mode [ 199.470517][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.470568][ T5916] usb 3-1: Product: syz [ 199.470583][ T5916] usb 3-1: Manufacturer: syz [ 199.470598][ T5916] usb 3-1: SerialNumber: syz [ 199.472353][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.509513][ T9724] hsr_slave_1: entered promiscuous mode [ 199.517410][ T5915] usb 4-1: config 0 descriptor?? [ 199.528447][ T9724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.536059][ T9724] Cannot create hsr debugfs directory [ 199.570245][ T3482] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.644559][ T3482] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.890435][ T3482] bridge_slave_1: left allmulticast mode [ 199.896156][ T3482] bridge_slave_1: left promiscuous mode [ 199.912431][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.938105][ T3482] bridge_slave_0: left allmulticast mode [ 199.943803][ T3482] bridge_slave_0: left promiscuous mode [ 199.963643][ T5915] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 199.973030][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.020797][ T5915] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 200.048370][ T5915] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 200.061085][ T5915] microsoft 0003:045E:07DA.0010: no inputs found [ 200.068089][ T5915] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 200.206877][ T5842] Bluetooth: hci1: command tx timeout [ 200.300981][ T5915] usb 4-1: USB disconnect, device number 13 [ 200.590539][ T5842] Bluetooth: hci0: command tx timeout [ 200.609619][ T5916] cdc_ncm 3-1:1.0: bind() failure [ 200.630055][ T5916] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 200.649630][ T5916] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 200.659174][ T5916] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 200.672507][ T5916] usb 3-1: USB disconnect, device number 13 [ 200.846670][ T47] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 200.890762][ T3482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.901909][ T3482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.930946][ T3482] bond0 (unregistering): Released all slaves [ 201.006255][ T47] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 384 [ 201.017340][ T47] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.042468][ T47] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.052180][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.060512][ T47] usb 7-1: SerialNumber: syz [ 201.075842][ T9780] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 201.287241][ T9780] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 201.470209][ T3482] hsr_slave_0: left promiscuous mode [ 201.478698][ T3482] hsr_slave_1: left promiscuous mode [ 201.491272][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.506986][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.525460][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.541158][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.592319][ T3482] veth1_macvtap: left promiscuous mode [ 201.602767][ T3482] veth0_macvtap: left promiscuous mode [ 201.615531][ T3482] veth1_vlan: left promiscuous mode [ 201.626783][ T3482] veth0_vlan: left promiscuous mode [ 201.701270][ T47] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 201.914861][ T47] usb 7-1: USB disconnect, device number 10 [ 201.966901][ T5916] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 202.149206][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.171028][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.176624][ T3073] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.196284][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.218131][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.245307][ T5916] usb 3-1: config 0 descriptor?? [ 202.259678][ T5916] hub 3-1:0.0: USB hub found [ 202.352688][ T3073] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.363442][ T3073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.384124][ T3073] usb 5-1: config 0 descriptor?? [ 202.401998][ T3073] cp210x 5-1:0.0: cp210x converter detected [ 202.423238][ T3482] team0 (unregistering): Port device team_slave_1 removed [ 202.460723][ T5916] hub 3-1:0.0: 1 port detected [ 202.496028][ T3482] team0 (unregistering): Port device team_slave_0 removed [ 202.565857][ T9809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.666814][ T55] Bluetooth: hci0: command tx timeout [ 202.746144][ T9813] [U]  [ 202.832242][ T3073] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 202.834467][ T9806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.859404][ T9806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.871456][ T5916] usb 3-1: USB disconnect, device number 14 [ 202.900520][ T3073] usb 5-1: cp210x converter now attached to ttyUSB0 [ 202.933553][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 203.123065][ T5923] usb 5-1: USB disconnect, device number 14 [ 203.132159][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.141146][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.167200][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.189602][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.209468][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.227513][ T5923] cp210x 5-1:0.0: device disconnected [ 203.245498][ T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.269677][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.289432][ T47] usb 4-1: config 0 descriptor?? [ 203.349831][ T9724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.364147][ T9724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.407925][ T9724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.427651][ T9724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.575270][ T9724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.594333][ T9724] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.606185][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.613389][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.681931][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.689131][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.711876][ T9830] veth0_to_bond: entered promiscuous mode [ 203.722347][ T47] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 203.732226][ T9830] macsec1: entered promiscuous mode [ 203.739790][ T47] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 203.753693][ T9830] macsec1: entered allmulticast mode [ 203.764620][ T9830] veth0_to_bond: entered allmulticast mode [ 203.781233][ T9830] veth0_to_bond: left allmulticast mode [ 203.810316][ T9830] veth0_to_bond: left promiscuous mode [ 204.020408][ T5916] usb 4-1: USB disconnect, device number 14 [ 204.285166][ T9724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.684813][ T9861] syzkaller1: entered promiscuous mode [ 204.718361][ T9861] syzkaller1: entered allmulticast mode [ 204.746667][ T5842] Bluetooth: hci0: command 0x040f tx timeout [ 204.897435][ T9724] veth0_vlan: entered promiscuous mode [ 204.932572][ T9724] veth1_vlan: entered promiscuous mode [ 204.963996][ T9724] veth0_macvtap: entered promiscuous mode [ 204.974102][ T9724] veth1_macvtap: entered promiscuous mode [ 205.008338][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.021759][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.031780][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.042322][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.052484][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.063016][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.074067][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.101978][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.113358][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.130687][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.144079][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.158196][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.169786][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.185940][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.241287][ T9724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.256568][ T9724] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.265330][ T9724] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.274412][ T9724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.428100][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.436176][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.555927][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.577893][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.787531][ T5890] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.979295][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.991108][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 206.010347][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.031172][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.051633][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.078050][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.089274][ T5890] usb 4-1: config 0 descriptor?? [ 206.095928][ T9887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.515056][ T5890] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 206.538734][ T5890] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 206.555314][ T5890] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 206.636652][ T5916] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 206.789400][ T5916] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 206.810167][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.872338][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.886876][ T5890] usb 4-1: USB disconnect, device number 15 [ 206.926629][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.967051][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.990347][ T5916] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.016774][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.036954][ T5916] usb 5-1: config 0 descriptor?? [ 207.045772][ T9914] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 207.047545][ T1002] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.482433][ T5916] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 207.514287][ T5916] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 207.545373][ T5916] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 207.698977][ T1002] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.739860][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.750452][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.759479][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.768648][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.779526][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.788418][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.808940][ T5916] usb 5-1: USB disconnect, device number 15 [ 208.009365][ T1002] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.129837][ T1002] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.166589][ T47] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 208.261452][ T9961] chnl_net:caif_netlink_parms(): no params data found [ 208.352632][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 208.361706][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 208.382341][ T47] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 208.406553][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.457067][ T47] usb 4-1: config 0 descriptor?? [ 208.490785][ T47] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 208.586683][ T9993] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1727'. [ 208.714546][T10003] loop6: detected capacity change from 0 to 1 [ 208.729421][T10003] Dev loop6: unable to read RDB block 1 [ 208.743483][T10003] loop6: unable to read partition table [ 208.755165][T10003] loop6: partition table beyond EOD, truncated [ 208.774151][T10003] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 208.774151][T10003] ) failed (rc=-5) [ 209.100138][T10020] Bluetooth: MGMT ver 1.23 [ 209.110447][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.130223][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.145109][ T9961] bridge_slave_0: entered allmulticast mode [ 209.153298][ T9961] bridge_slave_0: entered promiscuous mode [ 209.167176][ T1002] bridge_slave_1: left allmulticast mode [ 209.177500][ T1002] bridge_slave_1: left promiscuous mode [ 209.190072][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.220613][ T1002] bridge_slave_0: left allmulticast mode [ 209.245924][ T1002] bridge_slave_0: left promiscuous mode [ 209.254613][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.500703][ T47] gspca_vc032x: reg_w err -71 [ 209.515437][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.531668][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.544541][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.565863][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.573422][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.594801][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.635447][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.651709][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.659236][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.664562][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.676782][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.683268][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.693413][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.700112][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.705560][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.715668][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.721750][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.754688][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.776620][ T47] gspca_vc032x: Unknown sensor... [ 209.781749][ T47] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 209.831245][ T47] usb 4-1: USB disconnect, device number 16 [ 209.866667][ T5842] Bluetooth: hci0: command tx timeout [ 210.145641][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.200660][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.223467][ T1002] bond0 (unregistering): Released all slaves [ 210.241155][T10044] input: syz0 as /devices/virtual/input/input28 [ 210.248706][ T9998] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1727'. [ 210.270824][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.316800][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.324921][ T9961] bridge_slave_1: entered allmulticast mode [ 210.367318][ T9961] bridge_slave_1: entered promiscuous mode [ 210.529717][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.587251][ T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 210.609936][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.637007][ T5886] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.727880][ T9961] team0: Port device team_slave_0 added [ 210.786843][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 210.807810][ T5886] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 210.840172][ T5886] usb 3-1: config 0 has no interface number 0 [ 210.861614][ T5886] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 210.883697][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.912471][ T9961] team0: Port device team_slave_1 added [ 210.915488][ T5886] usb 3-1: Product: syz [ 210.926384][ T5886] usb 3-1: Manufacturer: syz [ 210.936784][ T5886] usb 3-1: SerialNumber: syz [ 210.947293][ T5886] usb 3-1: config 0 descriptor?? [ 210.955802][ T5886] smsc95xx v2.0.0 [ 211.003579][ T1002] hsr_slave_0: left promiscuous mode [ 211.039703][ T1002] hsr_slave_1: left promiscuous mode [ 211.073382][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.088578][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.107249][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.123810][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.184066][ T1002] veth1_macvtap: left promiscuous mode [ 211.193312][ T1002] veth0_macvtap: left promiscuous mode [ 211.209219][ T1002] veth1_vlan: left promiscuous mode [ 211.221992][ T1002] veth0_vlan: left promiscuous mode [ 211.382036][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 211.416922][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 211.859618][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 211.881427][ T5886] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 211.915569][ T5886] usb 3-1: USB disconnect, device number 15 [ 211.952829][ T5842] Bluetooth: hci0: command tx timeout [ 212.175543][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 212.240915][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 212.807070][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.816842][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.850174][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.863722][T10076] netlink: 'syz.4.1748': attribute type 12 has an invalid length. [ 212.885218][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.915433][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.963772][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.041331][ T3073] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 213.071752][ T9961] hsr_slave_0: entered promiscuous mode [ 213.085747][ T9961] hsr_slave_1: entered promiscuous mode [ 213.094219][ T9961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.117879][ T9961] Cannot create hsr debugfs directory [ 213.226705][ T3073] usb 3-1: Using ep0 maxpacket: 32 [ 213.254309][ T3073] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 213.276057][ T3073] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 213.290251][ T3073] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 213.303347][ T3073] usb 3-1: config 1 has no interface number 0 [ 213.316953][ T3073] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.339672][ T3073] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 213.361503][ T3073] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 213.371170][ T3073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.403075][ T3073] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 213.666120][ T9961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.685085][ T9961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.695361][ T9961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.712219][ T9961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.723681][T10135] netlink: 'syz.4.1764': attribute type 3 has an invalid length. [ 213.732025][T10135] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 213.756940][T10135] netlink: 'syz.4.1764': attribute type 2 has an invalid length. [ 213.764721][T10135] netlink: 198060 bytes leftover after parsing attributes in process `syz.4.1764'. [ 213.855004][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.887435][ T9961] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.929708][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.936877][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.958003][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.965137][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.985613][ T3073] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 214.005967][T10145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 214.012792][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 214.026970][ T5842] Bluetooth: hci0: command tx timeout [ 214.052262][T10148] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 214.064288][T10145] vhci_hcd vhci_hcd.0: Device attached [ 214.107398][T10151] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 214.113975][T10151] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 214.123606][T10151] vhci_hcd vhci_hcd.0: Device attached [ 214.155619][T10145] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 214.162184][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 214.206562][T10145] vhci_hcd vhci_hcd.0: Device attached [ 214.222542][T10151] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 214.229196][T10151] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 214.236962][ T5886] vhci_hcd: vhci_device speed not set [ 214.258212][T10151] vhci_hcd vhci_hcd.0: Device attached [ 214.300075][ T5886] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 214.311604][T10145] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(9) [ 214.318166][T10145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.356077][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.373259][T10145] vhci_hcd vhci_hcd.0: Device attached [ 214.405066][ T3073] usb 3-1: USB disconnect, device number 16 [ 214.406284][T10159] vhci_hcd: connection closed [ 214.411555][T10153] vhci_hcd: connection closed [ 214.416297][T10146] vhci_hcd: connection reset by peer [ 214.420626][ T3073] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 214.421304][T10156] vhci_hcd: connection closed [ 214.463985][ T35] vhci_hcd: stop threads [ 214.464995][T10162] vhci_hcd: connection closed [ 214.483729][ T35] vhci_hcd: release socket [ 214.514744][ T35] vhci_hcd: disconnect device [ 214.524816][ T35] vhci_hcd: stop threads [ 214.534065][ T35] vhci_hcd: release socket [ 214.544209][ T35] vhci_hcd: disconnect device [ 214.556919][ T35] vhci_hcd: stop threads [ 214.561206][ T35] vhci_hcd: release socket [ 214.567687][ T35] vhci_hcd: disconnect device [ 214.574857][ T35] vhci_hcd: stop threads [ 214.580660][ T35] vhci_hcd: release socket [ 214.585755][ T35] vhci_hcd: disconnect device [ 214.591484][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1772'. [ 214.605036][ T35] vhci_hcd: stop threads [ 214.614546][ T35] vhci_hcd: release socket [ 214.632847][ T35] vhci_hcd: disconnect device [ 214.825258][ T9961] veth0_vlan: entered promiscuous mode [ 214.851589][ T9961] veth1_vlan: entered promiscuous mode [ 214.916146][ T9961] veth0_macvtap: entered promiscuous mode [ 214.937601][ T9961] veth1_macvtap: entered promiscuous mode [ 214.995618][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.016590][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.026444][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.037126][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.052366][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.074416][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.095594][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.112451][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.119990][T10187] atomic_op ffff88803154c998 conn xmit_atomic 0000000000000000 [ 215.123807][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.173270][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.189369][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.200539][ T9961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.214370][ T9961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.242090][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.272568][ T9961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.302470][ T9961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.326650][ T9961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.337884][T10195] loop2: detected capacity change from 0 to 7 [ 215.348531][ T9961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.369039][T10195] Dev loop2: unable to read RDB block 7 [ 215.374664][T10195] loop2: unable to read partition table [ 215.391640][T10195] loop2: partition table beyond EOD, truncated [ 215.406759][T10195] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 215.478275][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.486134][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.530954][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.539735][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.759243][T10210] loop2: detected capacity change from 0 to 7 [ 215.772967][T10210] Dev loop2: unable to read RDB block 7 [ 215.778847][T10210] loop2: unable to read partition table [ 215.785325][T10210] loop2: partition table beyond EOD, truncated [ 215.799987][T10210] loop_reread_partitions: partition scan of loop2 (被) failed (rc=-5) [ 216.043226][T10221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.245766][ T5923] IPVS: starting estimator thread 0... [ 216.262950][T10232] tipc: Started in network mode [ 216.300062][T10232] tipc: Node identity ac1414aa, cluster identity 4711 [ 216.329714][T10232] tipc: Enabled bearer , priority 10 [ 216.346705][T10233] IPVS: using max 23 ests per chain, 55200 per kthread [ 216.920052][T10264] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 216.995927][T10266] loop8: detected capacity change from 0 to 7 [ 217.013996][T10266] Dev loop8: unable to read RDB block 7 [ 217.020501][T10266] loop8: unable to read partition table [ 217.030249][T10266] loop8: partition table beyond EOD, truncated [ 217.039211][T10266] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 217.039211][T10266] ) failed (rc=-5) [ 217.273950][ T3450] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.458782][ T3073] tipc: Node number set to 2886997162 [ 218.326847][ T3450] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.373598][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.384032][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.394531][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.404311][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.412119][ T5153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.434819][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.478109][ T3450] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.701658][ T3450] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.822225][T10287] chnl_net:caif_netlink_parms(): no params data found [ 218.866361][ T3450] bridge_slave_1: left allmulticast mode [ 218.872623][ T3450] bridge_slave_1: left promiscuous mode [ 218.880254][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.891640][ T3450] bridge_slave_0: left allmulticast mode [ 218.899826][ T3450] bridge_slave_0: left promiscuous mode [ 218.905576][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.424952][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.445067][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.455736][ T3450] bond0 (unregistering): Released all slaves [ 219.457042][ T5886] vhci_hcd: vhci_device speed not set [ 219.665900][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.673555][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.681842][T10287] bridge_slave_0: entered allmulticast mode [ 219.689273][T10287] bridge_slave_0: entered promiscuous mode [ 219.700727][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.711398][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.718669][T10287] bridge_slave_1: entered allmulticast mode [ 219.729841][T10287] bridge_slave_1: entered promiscuous mode [ 219.885620][T10287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.910235][T10287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.955739][ T3450] hsr_slave_0: left promiscuous mode [ 219.972462][ T3450] hsr_slave_1: left promiscuous mode [ 219.982985][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.996588][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.016528][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.026889][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 220.033373][ T5842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 220.074413][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.216494][ T3450] veth1_macvtap: left promiscuous mode [ 220.238672][ T3450] veth0_macvtap: left promiscuous mode [ 220.246837][ T3450] veth1_vlan: left promiscuous mode [ 220.252165][ T3450] veth0_vlan: left promiscuous mode [ 220.434489][T10352] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 220.523114][ T5842] Bluetooth: hci5: command tx timeout [ 221.004458][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 221.059070][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 221.700386][T10287] team0: Port device team_slave_0 added [ 221.730424][T10287] team0: Port device team_slave_1 added [ 221.797719][T10287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.804711][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.830626][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.839560][T10287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.874698][T10287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.900790][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.927294][T10287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.131562][T10287] hsr_slave_0: entered promiscuous mode [ 222.142778][T10287] hsr_slave_1: entered promiscuous mode [ 222.151663][T10287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.166176][T10287] Cannot create hsr debugfs directory [ 222.346959][ T3073] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 222.508776][ T3073] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 222.525976][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.537577][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.547606][ T3073] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 222.566119][ T3073] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 222.574049][T10287] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.576907][ T3073] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 222.594225][ T5842] Bluetooth: hci5: command tx timeout [ 222.597898][T10287] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.610431][ T3073] usb 7-1: Manufacturer: syz [ 222.612951][T10287] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.624583][ T3073] usb 7-1: config 0 descriptor?? [ 222.633712][T10287] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.735481][T10287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.762301][T10287] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.781503][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.788671][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.809944][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.817131][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.876090][T10287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.892534][T10287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.040729][ T3073] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 223.067594][ T3073] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 223.115897][ T3073] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 223.144225][T10423] usb 7-1: USB disconnect, device number 11 [ 223.158564][T10287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.318858][T10432] binder: 10431:10432 ioctl c0306201 200001c0 returned -14 [ 223.506327][T10287] veth0_vlan: entered promiscuous mode [ 223.538775][T10287] veth1_vlan: entered promiscuous mode [ 223.587995][T10287] veth0_macvtap: entered promiscuous mode [ 223.610169][T10287] veth1_macvtap: entered promiscuous mode [ 223.634794][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.659042][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.673492][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.684327][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.694337][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.705878][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.717488][T10287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.732395][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.743065][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.753251][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.764585][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.774474][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.785038][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.796379][T10287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.807830][T10287] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.816864][T10287] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.825592][T10287] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.834462][T10287] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.878886][ T3073] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 223.942493][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.984621][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.010997][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.020214][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.049791][ T3073] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 224.063476][ T3073] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 224.105335][ T3073] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 224.114622][ T3073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.123076][ T3073] usb 5-1: Product: syz [ 224.127510][ T3073] usb 5-1: Manufacturer: syz [ 224.132136][ T3073] usb 5-1: SerialNumber: syz [ 224.144509][ T3073] usb 5-1: config 0 descriptor?? [ 224.150806][T10442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.158166][T10442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.326839][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 224.375072][T10442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.382854][T10442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.476976][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 224.485873][ T8] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 224.495086][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.503456][ T8] usb 3-1: Product: syz [ 224.508208][ T8] usb 3-1: Manufacturer: syz [ 224.512831][ T8] usb 3-1: SerialNumber: syz [ 224.519508][ T8] usb 3-1: config 0 descriptor?? [ 224.934501][ T8] airspy 3-1:0.0: Board ID: 00 [ 224.939527][ T8] airspy 3-1:0.0: Firmware version: [ 225.195991][ T3073] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 225.207857][ T3073] usb 5-1: USB disconnect, device number 16 [ 225.335941][ T8] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 225.344225][ T8] airspy 3-1:0.0: Registered as swradio24 [ 225.350552][ T8] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 225.362141][ T8] usb 3-1: USB disconnect, device number 17 [ 225.585607][ T3450] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.477908][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.487984][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.495827][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.505542][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.513276][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.520786][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.571813][ T3450] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.739070][T10477] smc: net device caif0 applied user defined pnetid SYZ2 [ 226.889799][ T3450] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.935172][T10466] chnl_net:caif_netlink_parms(): no params data found [ 227.001047][ T3450] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.150548][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.167164][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.196850][T10466] bridge_slave_0: entered allmulticast mode [ 227.203911][T10466] bridge_slave_0: entered promiscuous mode [ 227.212243][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.219793][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.227417][T10466] bridge_slave_1: entered allmulticast mode [ 227.234406][T10466] bridge_slave_1: entered promiscuous mode [ 227.331278][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.343357][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.404466][ T3450] bridge_slave_1: left allmulticast mode [ 227.410463][ T3450] bridge_slave_1: left promiscuous mode [ 227.416213][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.425712][ T3450] bridge_slave_0: left allmulticast mode [ 227.437595][ T3450] bridge_slave_0: left promiscuous mode [ 227.443410][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.057288][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.078881][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.089990][ T3450] bond0 (unregistering): Released all slaves [ 228.115608][T10466] team0: Port device team_slave_0 added [ 228.199285][T10466] team0: Port device team_slave_1 added [ 228.348336][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.367199][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.426727][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.463791][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.476622][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.543002][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.593097][ T55] Bluetooth: hci0: command tx timeout [ 228.722726][T10466] hsr_slave_0: entered promiscuous mode [ 228.743426][T10466] hsr_slave_1: entered promiscuous mode [ 228.750226][T10466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.759257][T10466] Cannot create hsr debugfs directory [ 228.774900][ T3450] hsr_slave_0: left promiscuous mode [ 228.798413][ T3450] hsr_slave_1: left promiscuous mode [ 228.814911][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.824845][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.842523][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.863739][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.936262][ T3450] veth1_macvtap: left promiscuous mode [ 228.957793][ T3450] veth0_macvtap: left promiscuous mode [ 228.970063][ T3450] veth1_vlan: left promiscuous mode [ 228.980968][ T3450] veth0_vlan: left promiscuous mode [ 229.694114][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 229.734337][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 230.304142][T10546] Bluetooth: MGMT ver 1.23 [ 230.666676][ T5842] Bluetooth: hci0: command tx timeout [ 230.891215][T10466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.901253][T10466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.913259][T10466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.925522][T10466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.086320][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.117900][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.135211][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.142404][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.192269][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.199433][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.600675][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.873161][T10466] veth0_vlan: entered promiscuous mode [ 231.891862][T10466] veth1_vlan: entered promiscuous mode [ 231.922718][T10466] veth0_macvtap: entered promiscuous mode [ 231.932111][T10466] veth1_macvtap: entered promiscuous mode [ 231.948621][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.961672][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.971966][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.987945][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.998477][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.010601][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.021910][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.038852][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.049699][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.060822][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.078701][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.101359][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.121671][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.140491][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.161928][T10466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.170864][T10466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.180995][T10466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.206820][T10466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.253827][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.261975][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.275019][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.282433][T10597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.290539][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.297721][T10597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.312724][T10597] team0: Port device bridge0 added [ 232.347445][ T55] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 232.506723][T10541] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 232.513940][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 232.529008][T10541] Bluetooth: hci3: Opcode 0x0406 failed: -110 [ 232.746719][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 233.207958][T10541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.214409][T10541] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.223790][T10541] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.235802][T10541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.248480][T10541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.263501][T10541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.270622][T10541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 233.282436][T10541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.288743][T10541] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.321935][T10541] ------------[ cut here ]------------ [ 233.328471][T10541] refcount_t: underflow; use-after-free. [ 233.334684][T10541] WARNING: CPU: 0 PID: 10541 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 233.344317][T10541] Modules linked in: [ 233.348297][T10541] CPU: 0 UID: 0 PID: 10541 Comm: syz.2.1919 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 233.359128][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.369281][T10541] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 233.375471][T10541] Code: e0 64 5f 8c e8 17 33 a9 fc 90 0f 0b 90 90 eb 99 e8 8b 8d e8 fc c6 05 d6 15 59 0b 01 90 48 c7 c7 40 65 5f 8c e8 f7 32 a9 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 8d e8 fc c6 05 b0 15 59 0b 01 90 [ 233.395692][T10541] RSP: 0018:ffffc9000489ef38 EFLAGS: 00010246 [ 233.401851][T10541] RAX: dbe0113176482a00 RBX: ffff88801cbab078 RCX: 0000000000080000 [ 233.409906][T10541] RDX: ffffc9000bfea000 RSI: 000000000006023b RDI: 000000000006023c [ 233.418323][T10541] RBP: 0000000000000003 R08: ffffffff815687d2 R09: fffffbfff1cfa8a0 [ 233.426329][T10541] R10: dffffc0000000000 R11: fffffbfff1cfa8a0 R12: ffff88801cbab060 [ 233.434552][T10541] R13: ffffffff85ee3a30 R14: 1ffff1100397560c R15: ffff88801cbab060 [ 233.442618][T10541] FS: 00007f4534f846c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 233.451890][T10541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.458558][T10541] CR2: 00007fe194e1ef7e CR3: 000000006ccf4000 CR4: 00000000003526f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.466805][T10541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.474802][T10541] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.483120][T10541] Call Trace: [ 233.486429][T10541] [ 233.489444][T10541] ? __warn+0x168/0x4e0 [ 233.493634][T10541] ? refcount_warn_saturate+0x15a/0x1d0 [ 233.499246][T10541] ? report_bug+0x2b3/0x500 [ 233.503778][T10541] ? refcount_warn_saturate+0x15a/0x1d0 [ 233.509682][T10541] ? handle_bug+0x60/0x90 [ 233.515025][T10541] ? exc_invalid_op+0x1a/0x50 [ 233.519904][T10541] ? asm_exc_invalid_op+0x1a/0x20 [ 233.524959][T10541] ? __pfx_klist_children_put+0x10/0x10 [ 233.530581][T10541] ? __warn_printk+0x292/0x360 [ 233.535382][T10541] ? refcount_warn_saturate+0x15a/0x1d0 [ 233.541287][T10541] ? refcount_warn_saturate+0x159/0x1d0 [ 233.547084][T10541] klist_dec_and_del+0x3ec/0x3f0 [ 233.552054][T10541] ? __pfx_klist_children_put+0x10/0x10 [ 233.557704][T10541] ? __pfx_klist_children_put+0x10/0x10 [ 233.563292][T10541] ? __pfx_klist_children_put+0x10/0x10 [ 233.569694][T10541] klist_remove+0x25e/0x480 [ 233.574254][T10541] ? __pfx_klist_remove+0x10/0x10 [ 233.579393][T10541] ? __pfx_kobject_move+0x10/0x10 [ 233.584457][T10541] ? get_device_parent+0x25d/0x410 [ 233.589693][T10541] device_move+0x1b4/0x710 [ 233.594153][T10541] ? __pfx_sco_connect_cfm+0x10/0x10 [ 233.599778][T10541] hci_conn_del_sysfs+0xac/0x160 [ 233.604753][T10541] hci_conn_del+0x8c4/0xc40 [ 233.609348][T10541] hci_abort_conn_sync+0x583/0xe00 [ 233.614499][T10541] ? hci_abort_conn_sync+0x1f6/0xe00 [ 233.619963][T10541] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 233.625634][T10541] ? __pfx_lock_release+0x10/0x10 [ 233.631273][T10541] ? hci_disconnect_all_sync+0x8e/0x460 [ 233.636890][T10541] hci_disconnect_all_sync+0x264/0x460 [ 233.642382][T10541] ? __pfx_bt_err+0x10/0x10 [ 233.646961][T10541] ? hci_disconnect_all_sync+0x8e/0x460 [ 233.652542][T10541] ? __pfx_hci_disconnect_all_sync+0x10/0x10 [ 233.658838][T10541] ? __mutex_lock+0x37f/0xee0 [ 233.663553][T10541] hci_suspend_sync+0x41a/0xca0 [ 233.668518][T10541] ? __pfx_hci_suspend_sync+0x10/0x10 [ 233.673926][T10541] ? __pfx_mgmt_suspending+0x10/0x10 [ 233.679317][T10541] ? hci_cmd_sync_cancel_sync+0xcc/0x190 [ 233.684988][T10541] hci_suspend_dev+0x203/0x3e0 [ 233.690064][T10541] hci_suspend_notifier+0xf2/0x2b0 [ 233.695221][T10541] notifier_call_chain+0x19f/0x3e0 [ 233.700430][T10541] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 233.706985][T10541] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 233.714042][T10541] ? chrdev_open+0x36e/0x600 [ 233.719102][T10541] pm_notifier_call_chain_robust+0x2c/0x60 [ 233.724944][T10541] snapshot_open+0x19b/0x280 [ 233.729618][T10541] ? __pfx_snapshot_open+0x10/0x10 [ 233.734759][T10541] misc_open+0x2cc/0x340 [ 233.739124][T10541] chrdev_open+0x521/0x600 [ 233.743562][T10541] ? __pfx_chrdev_open+0x10/0x10 [ 233.748679][T10541] ? do_raw_spin_unlock+0x13c/0x8b0 [ 233.753884][T10541] ? __pfx_chrdev_open+0x10/0x10 [ 233.758869][T10541] do_dentry_open+0xbe1/0x1b70 [ 233.763681][T10541] vfs_open+0x3e/0x330 [ 233.767812][T10541] path_openat+0x2c84/0x3590 [ 233.772474][T10541] ? __pfx_path_openat+0x10/0x10 [ 233.777750][T10541] do_filp_open+0x27f/0x4e0 [ 233.782290][T10541] ? __pfx_do_filp_open+0x10/0x10 [ 233.787435][T10541] ? do_raw_spin_lock+0x14f/0x370 [ 233.792509][T10541] do_sys_openat2+0x13e/0x1d0 [ 233.797225][T10541] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.802431][T10541] ? smack_file_ioctl+0x353/0x3a0 [ 233.807782][T10541] __x64_sys_openat+0x247/0x2a0 [ 233.812683][T10541] ? __pfx___x64_sys_openat+0x10/0x10 [ 233.818091][T10541] ? do_syscall_64+0x100/0x230 [ 233.823035][T10541] ? do_syscall_64+0xb6/0x230 [ 233.827821][T10541] do_syscall_64+0xf3/0x230 [ 233.832337][T10541] ? clear_bhb_loop+0x35/0x90 [ 233.837332][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.843253][T10541] RIP: 0033:0x7f453417e819 [ 233.847759][T10541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.867763][T10541] RSP: 002b:00007f4534f84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.876203][T10541] RAX: ffffffffffffffda RBX: 00007f4534335fa0 RCX: 00007f453417e819 [ 233.884207][T10541] RDX: 0000000000004000 RSI: 00000000200002c0 RDI: ffffffffffffff9c [ 233.892211][T10541] RBP: 00007f45341f175e R08: 0000000000000000 R09: 0000000000000000 [ 233.900340][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.908381][T10541] R13: 0000000000000000 R14: 00007f4534335fa0 R15: 00007ffc9eec0e38 [ 233.916378][T10541] [ 233.919451][T10541] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 233.926731][T10541] CPU: 0 UID: 0 PID: 10541 Comm: syz.2.1919 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 233.937154][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.947208][T10541] Call Trace: [ 233.950484][T10541] [ 233.953410][T10541] dump_stack_lvl+0x241/0x360 [ 233.958094][T10541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.963287][T10541] ? __pfx__printk+0x10/0x10 [ 233.967878][T10541] ? _printk+0xd5/0x120 [ 233.972039][T10541] ? __init_begin+0x41000/0x41000 [ 233.977074][T10541] ? vscnprintf+0x5d/0x90 [ 233.981403][T10541] panic+0x349/0x880 [ 233.985299][T10541] ? __warn+0x177/0x4e0 [ 233.989453][T10541] ? __pfx_panic+0x10/0x10 [ 233.993868][T10541] ? show_trace_log_lvl+0x3b2/0x410 [ 233.999086][T10541] __warn+0x34b/0x4e0 [ 234.003071][T10541] ? refcount_warn_saturate+0x15a/0x1d0 [ 234.008621][T10541] report_bug+0x2b3/0x500 [ 234.012950][T10541] ? refcount_warn_saturate+0x15a/0x1d0 [ 234.018495][T10541] handle_bug+0x60/0x90 [ 234.022646][T10541] exc_invalid_op+0x1a/0x50 [ 234.027147][T10541] asm_exc_invalid_op+0x1a/0x20 [ 234.031993][T10541] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 234.038147][T10541] Code: e0 64 5f 8c e8 17 33 a9 fc 90 0f 0b 90 90 eb 99 e8 8b 8d e8 fc c6 05 d6 15 59 0b 01 90 48 c7 c7 40 65 5f 8c e8 f7 32 a9 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 8d e8 fc c6 05 b0 15 59 0b 01 90 [ 234.057749][T10541] RSP: 0018:ffffc9000489ef38 EFLAGS: 00010246 [ 234.063815][T10541] RAX: dbe0113176482a00 RBX: ffff88801cbab078 RCX: 0000000000080000 [ 234.071786][T10541] RDX: ffffc9000bfea000 RSI: 000000000006023b RDI: 000000000006023c [ 234.079753][T10541] RBP: 0000000000000003 R08: ffffffff815687d2 R09: fffffbfff1cfa8a0 [ 234.087723][T10541] R10: dffffc0000000000 R11: fffffbfff1cfa8a0 R12: ffff88801cbab060 [ 234.095688][T10541] R13: ffffffff85ee3a30 R14: 1ffff1100397560c R15: ffff88801cbab060 [ 234.103660][T10541] ? __pfx_klist_children_put+0x10/0x10 [ 234.109214][T10541] ? __warn_printk+0x292/0x360 [ 234.113983][T10541] ? refcount_warn_saturate+0x159/0x1d0 [ 234.119524][T10541] klist_dec_and_del+0x3ec/0x3f0 [ 234.124459][T10541] ? __pfx_klist_children_put+0x10/0x10 [ 234.130004][T10541] ? __pfx_klist_children_put+0x10/0x10 [ 234.135547][T10541] ? __pfx_klist_children_put+0x10/0x10 [ 234.141093][T10541] klist_remove+0x25e/0x480 [ 234.145601][T10541] ? __pfx_klist_remove+0x10/0x10 [ 234.150631][T10541] ? __pfx_kobject_move+0x10/0x10 [ 234.155652][T10541] ? get_device_parent+0x25d/0x410 [ 234.160762][T10541] device_move+0x1b4/0x710 [ 234.165175][T10541] ? __pfx_sco_connect_cfm+0x10/0x10 [ 234.170461][T10541] hci_conn_del_sysfs+0xac/0x160 [ 234.175402][T10541] hci_conn_del+0x8c4/0xc40 [ 234.179908][T10541] hci_abort_conn_sync+0x583/0xe00 [ 234.185021][T10541] ? hci_abort_conn_sync+0x1f6/0xe00 [ 234.190317][T10541] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 234.195948][T10541] ? __pfx_lock_release+0x10/0x10 [ 234.200978][T10541] ? hci_disconnect_all_sync+0x8e/0x460 [ 234.206523][T10541] hci_disconnect_all_sync+0x264/0x460 [ 234.212160][T10541] ? __pfx_bt_err+0x10/0x10 [ 234.216660][T10541] ? hci_disconnect_all_sync+0x8e/0x460 [ 234.222203][T10541] ? __pfx_hci_disconnect_all_sync+0x10/0x10 [ 234.228175][T10541] ? __mutex_lock+0x37f/0xee0 [ 234.232857][T10541] hci_suspend_sync+0x41a/0xca0 [ 234.237710][T10541] ? __pfx_hci_suspend_sync+0x10/0x10 [ 234.243080][T10541] ? __pfx_mgmt_suspending+0x10/0x10 [ 234.248376][T10541] ? hci_cmd_sync_cancel_sync+0xcc/0x190 [ 234.254010][T10541] hci_suspend_dev+0x203/0x3e0 [ 234.258779][T10541] hci_suspend_notifier+0xf2/0x2b0 [ 234.263888][T10541] notifier_call_chain+0x19f/0x3e0 [ 234.269012][T10541] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 234.275438][T10541] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 234.282460][T10541] ? chrdev_open+0x36e/0x600 [ 234.287060][T10541] pm_notifier_call_chain_robust+0x2c/0x60 [ 234.292865][T10541] snapshot_open+0x19b/0x280 [ 234.297450][T10541] ? __pfx_snapshot_open+0x10/0x10 [ 234.302568][T10541] misc_open+0x2cc/0x340 [ 234.306816][T10541] chrdev_open+0x521/0x600 [ 234.311238][T10541] ? __pfx_chrdev_open+0x10/0x10 [ 234.316175][T10541] ? do_raw_spin_unlock+0x13c/0x8b0 [ 234.321377][T10541] ? __pfx_chrdev_open+0x10/0x10 [ 234.326316][T10541] do_dentry_open+0xbe1/0x1b70 [ 234.331090][T10541] vfs_open+0x3e/0x330 [ 234.335158][T10541] path_openat+0x2c84/0x3590 [ 234.339778][T10541] ? __pfx_path_openat+0x10/0x10 [ 234.344736][T10541] do_filp_open+0x27f/0x4e0 [ 234.349241][T10541] ? __pfx_do_filp_open+0x10/0x10 [ 234.354262][T10541] ? do_raw_spin_lock+0x14f/0x370 [ 234.359321][T10541] do_sys_openat2+0x13e/0x1d0 [ 234.363998][T10541] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.369197][T10541] ? smack_file_ioctl+0x353/0x3a0 [ 234.374228][T10541] __x64_sys_openat+0x247/0x2a0 [ 234.379080][T10541] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.384456][T10541] ? do_syscall_64+0x100/0x230 [ 234.389220][T10541] ? do_syscall_64+0xb6/0x230 [ 234.393901][T10541] do_syscall_64+0xf3/0x230 [ 234.398403][T10541] ? clear_bhb_loop+0x35/0x90 [ 234.403079][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.408975][T10541] RIP: 0033:0x7f453417e819 [ 234.413398][T10541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.433003][T10541] RSP: 002b:00007f4534f84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.441423][T10541] RAX: ffffffffffffffda RBX: 00007f4534335fa0 RCX: 00007f453417e819 [ 234.449390][T10541] RDX: 0000000000004000 RSI: 00000000200002c0 RDI: ffffffffffffff9c [ 234.457367][T10541] RBP: 00007f45341f175e R08: 0000000000000000 R09: 0000000000000000 [ 234.465344][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.473314][T10541] R13: 0000000000000000 R14: 00007f4534335fa0 R15: 00007ffc9eec0e38 [ 234.481314][T10541] [ 234.484594][T10541] Kernel Offset: disabled [ 234.489121][T10541] Rebooting in 86400 seconds..