last executing test programs: 2m44.700081052s ago: executing program 2 (id=3147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6a7, 0x0, 0xa7e}]}) 2m44.208128854s ago: executing program 2 (id=3149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1", 0xe9}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 2m44.082071386s ago: executing program 2 (id=3151): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$chown(0xf, r1, 0x0, 0x0) 2m43.993951624s ago: executing program 2 (id=3152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2m43.924852326s ago: executing program 2 (id=3153): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m43.818217436s ago: executing program 2 (id=3156): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x26, 0xe, 0x16, 0x18, 0x8, 0x3, 0x2, 0x111}) 2m28.751118309s ago: executing program 32 (id=3156): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x189182, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x26, 0xe, 0x16, 0x18, 0x8, 0x3, 0x2, 0x111}) 2m23.925219404s ago: executing program 3 (id=3378): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{}, 0x2}}, 0x10) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) close(r0) 2m23.831777833s ago: executing program 3 (id=3380): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe7f, {0x4, 0x3, 0x2, 0x4, 0x3, 0x0, {0x2, 0xfffffffffffffffd, 0x7fffffffffc, 0x80000000004, 0x400000000000, 0x6, 0x5, 0x8, 0x1, 0x4000, 0x7, 0x0, 0x0, 0x0, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2m23.696990675s ago: executing program 3 (id=3382): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 2m23.551408007s ago: executing program 3 (id=3384): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) 2m23.422846082s ago: executing program 3 (id=3387): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0002001}) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 2m22.296675102s ago: executing program 3 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a7512dbd7000fcdbdf251900000008000300", @ANYRES32=r2, @ANYBLOB="05001c"], 0x3c}, 0x1, 0x0, 0x0, 0xe4e248f4f25c0d84}, 0x4000040) 2m21.91000643s ago: executing program 33 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a7512dbd7000fcdbdf251900000008000300", @ANYRES32=r2, @ANYBLOB="05001c"], 0x3c}, 0x1, 0x0, 0x0, 0xe4e248f4f25c0d84}, 0x4000040) 1m48.243418954s ago: executing program 4 (id=3582): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000280)={0xfffffffffffffff8, 0x0, 0x400}) 1m48.174391015s ago: executing program 4 (id=3583): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) 1m48.094587845s ago: executing program 4 (id=3584): mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x20, 0x50, 0x2}) 1m48.00508249s ago: executing program 4 (id=3585): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 1m47.95853594s ago: executing program 4 (id=3586): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000da, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1m46.465420947s ago: executing program 4 (id=3595): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1m45.884499116s ago: executing program 34 (id=3595): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 11.048908362s ago: executing program 5 (id=4741): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d64ed1040206402d14e0102"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 9.212844913s ago: executing program 5 (id=4770): setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x4}) 9.120513506s ago: executing program 5 (id=4771): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$UFFDIO_API(r1, 0x5460, 0x0) 8.975023055s ago: executing program 5 (id=4774): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 8.884303473s ago: executing program 5 (id=4776): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8001, 0xc5f7, @name="ac2ad54970138065d4b1c10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b000600000000", 0x11, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 8.329569427s ago: executing program 5 (id=4780): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc0, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040091}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 8.069036882s ago: executing program 35 (id=4780): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc0, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040091}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.853219558s ago: executing program 6 (id=4815): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330520000a00160006007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76f98691ffb71675553f", 0xff2a, 0x801, &(0x7f0000000000)={0x11, 0x16, r1, 0x1, 0x5f}, 0x14) 4.663642945s ago: executing program 6 (id=4818): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001500)=""/56, 0x38}, {&(0x7f0000001540)=""/46, 0x2e}, {&(0x7f0000001580)=""/189, 0xbd}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/62, 0x3e}, {&(0x7f0000002680)=""/135, 0x87}, {&(0x7f0000002740)=""/74, 0x4a}, {&(0x7f00000027c0)=""/124, 0x7c}, {&(0x7f0000002840)=""/87, 0x57}], 0x9}, 0x10140) 4.440875388s ago: executing program 6 (id=4821): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x2c, r0, 0x801, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x2c}}, 0x0) 4.165134803s ago: executing program 6 (id=4824): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 4.061305079s ago: executing program 6 (id=4826): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 2.97491273s ago: executing program 1 (id=4833): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 2.840661553s ago: executing program 1 (id=4835): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) 2.789702281s ago: executing program 1 (id=4836): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) 2.644729274s ago: executing program 6 (id=4837): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x40000095, 0x0, 0x7}]}) 2.418957232s ago: executing program 36 (id=4837): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x40000095, 0x0, 0x7}]}) 2.409633692s ago: executing program 1 (id=4840): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 1.947116047s ago: executing program 0 (id=4841): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x7fff, 0xfffffffe}}, 0xe8) 1.768569342s ago: executing program 0 (id=4842): add_key(0x0, 0x0, &(0x7f0000000180)="305c0605e182d1447a", 0x9, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) 1.760546164s ago: executing program 0 (id=4843): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffff200004"], 0x21c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 438.67163ms ago: executing program 1 (id=4844): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 256.034664ms ago: executing program 0 (id=4845): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x6, 0x1000, 0x6e, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0xb, 0x4, 0x7, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x409, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0xfffffffe, 0x9, 0x4, 0x9, 0x8, 0x0, 0xef61, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x4, 0x5, 0x7fff, 0x2, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xff, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xfffffffd, 0xd, 0x4, 0x6d01, 0xc9d1, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x800001, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x22, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xff7fffff, 0x95d, 0x5, 0x8, 0xc7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9603, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x3]}, 0x45c) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 255.840253ms ago: executing program 1 (id=4846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 81.360321ms ago: executing program 0 (id=4847): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) 0s ago: executing program 0 (id=4848): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x80480, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) kernel console output (not intermixed with test programs): mce write submit urb error = -90 [ 304.994111][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.024099][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.028788][ T819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.044063][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.077191][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.094679][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.126684][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.155131][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.174119][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 305.204555][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 305.204580][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 305.227589][ T819] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 305.243714][ T10] usb 3-1: USB disconnect, device number 13 [ 305.333602][T12406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2923'. [ 305.428619][ T819] usb 1-1: USB disconnect, device number 21 [ 306.379054][T12429] netlink: 'syz.1.2933': attribute type 10 has an invalid length. [ 306.379077][T12429] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2933'. [ 307.168547][T12453] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 307.911582][T12470] bpf: Bad value for 'uid' [ 308.333204][T12484] netlink: 'syz.2.2959': attribute type 83 has an invalid length. [ 309.887737][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 310.059238][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.059273][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.059315][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 310.059336][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.085671][ T10] usb 4-1: config 0 descriptor?? [ 310.504787][ T10] hid_parser_main: 28 callbacks suppressed [ 310.504812][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.504843][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.504868][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.504893][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.504917][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.504940][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.504963][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.504985][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.505009][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.505034][ T10] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 310.507470][ T10] kye 0003:0458:0138.0018: collection stack underflow [ 310.507490][ T10] kye 0003:0458:0138.0018: item 0 0 0 12 parsing failed [ 310.508557][ T10] kye 0003:0458:0138.0018: parse failed [ 310.508599][ T10] kye 0003:0458:0138.0018: probe with driver kye failed with error -22 [ 310.719852][ T5887] usb 4-1: USB disconnect, device number 11 [ 311.432195][T12566] tipc: Enabled bearer , priority 10 [ 312.034258][T12593] netlink: 'syz.1.3006': attribute type 27 has an invalid length. [ 312.034281][T12593] netlink: 'syz.1.3006': attribute type 1 has an invalid length. [ 312.585266][ T38] audit: type=1800 audit(1776393395.617:21): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3017" name="file1" dev="tmpfs" ino=3767 res=0 errno=0 [ 312.704044][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 312.857394][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 312.859667][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 312.859702][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 312.859733][ T9] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 312.859754][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.910553][ T9] usb 3-1: config 0 descriptor?? [ 313.343356][T12640] sctp: [Deprecated]: syz.1.3025 (pid 12640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.343356][T12640] Use struct sctp_sack_info instead [ 313.350996][ T9] greenasia 0003:0E8F:0012.0019: invalid report_size 12084 [ 313.351020][ T9] greenasia 0003:0E8F:0012.0019: item 0 2 1 7 parsing failed [ 313.354304][ T9] greenasia 0003:0E8F:0012.0019: parse failed [ 313.354376][ T9] greenasia 0003:0E8F:0012.0019: probe with driver greenasia failed with error -22 [ 313.553611][ T820] usb 3-1: USB disconnect, device number 14 [ 314.764060][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 314.915625][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 314.918110][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.918162][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.918186][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.918208][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 314.918235][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 314.918267][ T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 314.918289][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.970131][ T9] usb 2-1: config 0 descriptor?? [ 315.243507][T12681] netlink: 'syz.3.3044': attribute type 11 has an invalid length. [ 315.243528][T12681] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3044'. [ 315.422907][ T9] hid-thrustmaster 0003:044F:B65D.001A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 315.423182][ T9] hid-thrustmaster 0003:044F:B65D.001A: Wrong number of endpoints? [ 315.616477][ C0] hid-thrustmaster 0003:044F:B65D.001A: Unknown packet type 0x0, unable to proceed further with wheel init [ 315.794140][T12686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.813120][T12695] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 315.813142][T12695] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 315.821033][ T5887] usb 2-1: USB disconnect, device number 19 [ 315.905208][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 316.056465][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 316.056516][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 316.056539][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.096568][ T9] usb 3-1: config 0 descriptor?? [ 316.097695][T12691] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 316.526079][ T9] hid (null): global environment stack underflow [ 316.567730][ T9] hid_parser_main: 57 callbacks suppressed [ 316.567756][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567785][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567811][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567837][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567862][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567888][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567913][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567938][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567963][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.567988][ T9] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 316.571409][ T9] asus 0003:0B05:1ABE.001B: global environment stack underflow [ 316.571429][ T9] asus 0003:0B05:1ABE.001B: item 0 1 1 11 parsing failed [ 316.572259][ T9] asus 0003:0B05:1ABE.001B: Asus hid parse failed: -22 [ 316.572362][ T9] asus 0003:0B05:1ABE.001B: probe with driver asus failed with error -22 [ 316.786399][ T820] usb 3-1: USB disconnect, device number 15 [ 316.851745][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 317.165285][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 317.344456][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 317.347128][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.347158][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.347190][ T9] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 317.347209][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.403607][ T9] usb 1-1: config 0 descriptor?? [ 317.568909][T12733] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 317.726597][ T38] audit: type=1326 audit(1776393400.777:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.2.3069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a7cbc819 code=0x0 [ 317.903147][ T9] ntrig 0003:1B96:0008.001C: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0 [ 318.032889][ T9] ntrig 0003:1B96:0008.001C: Firmware version: 2.2.30.12.3 (4be5 8bc9) [ 318.253619][ T820] usb 1-1: USB disconnect, device number 22 [ 318.871258][T12756] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3077'. [ 319.699693][T12782] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.732350][T12784] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.3091'. [ 320.279195][T12811] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3104'. [ 320.340131][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.797319][ T38] audit: type=1400 audit(1776393403.817:23): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A50302D302D353A2050434D204361707475726520302D302D35203A20534C4156450A50302D302D363A2050434D20506C61796261636B20302D302D36203A20534C4156450A50302D302D373A2050434D204361707475726520302D302D37203A20534C4156450A50302D302D383A2050434D20506C61796261636B20302D302D38203A20534C4156450A50302D302D393A2050434D204361707475726520302D302D39203A20534C4156450A50302D302D31303A2050434D20506C61796261636B20302D302D3130203A20534C4156450A50302D302D31313A2050434D204361707475726520302D302D3131203A pid=12824 comm="syz.0.3110" [ 321.952821][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3130'. [ 321.965443][T12869] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3131'. [ 322.634115][ T820] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 322.800594][ T820] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 322.803159][ T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.803221][ T820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.803236][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.812150][ T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.812206][ T820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.812242][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.820094][ T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.820148][ T820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.820174][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.822919][ T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.822971][ T820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.822997][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.826832][ T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.826901][ T820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.826926][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.834857][ T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.834918][ T820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.834945][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.837101][ T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.837152][ T820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.837188][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.840251][ T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.840303][ T820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.840330][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.855556][ T820] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 322.855586][ T820] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 322.855606][ T820] usb 1-1: Product: syz [ 322.855619][ T820] usb 1-1: Manufacturer: syz [ 322.855632][ T820] usb 1-1: SerialNumber: syz [ 322.873514][ T38] audit: type=1326 audit(1776393405.917:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12906 comm="syz.3.3148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2727c819 code=0x0 [ 322.906109][ T820] usb 1-1: config 0 descriptor?? [ 323.233671][ T820] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 323.305995][ T820] usb 1-1: USB disconnect, device number 23 [ 323.327588][ T820] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 323.938587][T12944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3165'. [ 324.494263][ T5143] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 324.505889][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 324.606491][T12966] pim6reg: entered allmulticast mode [ 324.620364][T12966] pim6reg: left allmulticast mode [ 324.976494][T12980] netlink: 'syz.1.3183': attribute type 2 has an invalid length. [ 324.976509][T12980] netlink: 'syz.1.3183': attribute type 5 has an invalid length. [ 325.178104][T12988] netlink: 'syz.3.3187': attribute type 83 has an invalid length. [ 325.804753][T13012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.127271][ T820] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 327.194066][ T5911] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 327.276285][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.276309][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.276331][ T820] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 327.276343][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.279226][ T820] usb 1-1: config 0 descriptor?? [ 327.344004][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 327.365598][ T5911] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 327.365639][ T5911] usb 4-1: config 0 has no interface number 0 [ 327.365684][ T5911] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 327.365710][ T5911] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 327.369484][ T5911] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 327.369514][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.369533][ T5911] usb 4-1: Product: syz [ 327.369547][ T5911] usb 4-1: Manufacturer: syz [ 327.369561][ T5911] usb 4-1: SerialNumber: syz [ 327.376040][ T5911] usb 4-1: config 0 descriptor?? [ 327.399709][T13058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.399900][T13058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.460096][ T5887] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 327.604048][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 327.616620][T13058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.616885][T13058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.618400][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.618427][ T5887] usb 2-1: config 0 has no interface number 0 [ 327.618556][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.618579][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.618616][ T5887] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 327.618711][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.714365][ T5887] usb 2-1: config 0 descriptor?? [ 327.721399][ T820] hid_parser_main: 304 callbacks suppressed [ 327.721423][ T820] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 327.721460][ T820] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 327.721486][ T820] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 327.721512][ T820] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 327.721539][ T820] hid-led 0003:27B8:01ED.001D: unknown main item tag 0x0 [ 327.894315][ T820] hid-led 0003:27B8:01ED.001D: probe with driver hid-led failed with error -71 [ 327.964660][ T820] usb 1-1: USB disconnect, device number 24 [ 328.227125][ T5911] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 328.227153][ T5911] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 328.227417][ T5911] asix 4-1:0.251: probe with driver asix failed with error -71 [ 328.287329][ T5911] usb 4-1: USB disconnect, device number 12 [ 328.339195][ T5887] uclogic 0003:28BD:0071.001E: pen parameters not found [ 328.339235][ T5887] uclogic 0003:28BD:0071.001E: interface is invalid, ignoring [ 328.365128][ T5887] usb 2-1: USB disconnect, device number 20 [ 328.784324][ T5911] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 328.907340][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'. [ 328.944015][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 328.949035][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.949068][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.949091][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.949133][ T5911] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 328.949155][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.023512][ T5911] usb 1-1: config 0 descriptor?? [ 329.424324][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 329.448792][ T5911] dragonrise 0003:0079:0006.001F: unbalanced collection at end of report description [ 329.450173][ T5911] dragonrise 0003:0079:0006.001F: parse failed [ 329.450247][ T5911] dragonrise 0003:0079:0006.001F: probe with driver dragonrise failed with error -22 [ 329.506813][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3237'. [ 329.576586][ T9] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 329.576624][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 329.576658][ T9] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 329.576681][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.582689][ T9] usb 4-1: config 0 descriptor?? [ 329.629554][ T38] audit: type=1800 audit(1776393412.677:25): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3238" name=6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0 dev="tmpfs" ino=1056 res=0 errno=0 [ 329.672120][ T820] usb 1-1: USB disconnect, device number 25 [ 330.066287][ T9] asus 0003:048D:CE50.0020: unknown main item tag 0x0 [ 330.066324][ T9] asus 0003:048D:CE50.0020: unknown main item tag 0x0 [ 330.066350][ T9] asus 0003:048D:CE50.0020: unknown main item tag 0x0 [ 330.066374][ T9] asus 0003:048D:CE50.0020: unknown main item tag 0x0 [ 330.066398][ T9] asus 0003:048D:CE50.0020: unknown main item tag 0x0 [ 330.073102][ T9] asus 0003:048D:CE50.0020: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input0 [ 330.281985][ T820] usb 4-1: USB disconnect, device number 13 [ 330.409563][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3245'. [ 330.486176][T13116] loop4: detected capacity change from 0 to 65536 [ 330.534666][T13116] loop4: detected capacity change from 65536 to 523370496 [ 330.963630][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3253'. [ 331.084024][ T5887] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 331.238912][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 331.254727][ T5887] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 331.254758][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.254779][ T5887] usb 1-1: Product: syz [ 331.254793][ T5887] usb 1-1: Manufacturer: syz [ 331.254807][ T5887] usb 1-1: SerialNumber: syz [ 331.753975][ T5911] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 331.909524][ T5911] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 331.909554][ T5911] usb 4-1: config 150 has no interface number 0 [ 331.909620][ T5911] usb 4-1: config 150 interface 204 has no altsetting 0 [ 331.912466][ T5911] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 331.912499][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.912518][ T5911] usb 4-1: Product: syz [ 331.912540][ T5911] usb 4-1: Manufacturer: syz [ 331.912555][ T5911] usb 4-1: SerialNumber: syz [ 332.096123][ T5887] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 332.128489][ T5887] usb 1-1: USB disconnect, device number 26 [ 332.180201][ T5911] xr_serial 4-1:150.204: xr_serial converter detected [ 332.780147][ T5911] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 332.780203][ T5911] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 332.801656][ T5911] usb 4-1: USB disconnect, device number 14 [ 332.806575][ T5911] xr_serial 4-1:150.204: device disconnected [ 332.944153][ T5887] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 333.124081][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 333.128183][ T5887] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 333.128215][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.146222][ T5887] usb 1-1: config 0 descriptor?? [ 333.357990][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 333.376686][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 333.387725][ T5887] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 333.387780][ T5887] usb 1-1: media controller created [ 333.402963][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.566047][ T5887] az6027: usb out operation failed. (-71) [ 333.566400][ T5887] az6027: usb out operation failed. (-71) [ 333.566410][ T5887] stb0899_attach: Driver disabled by Kconfig [ 333.566432][ T5887] az6027: no front-end attached [ 333.566432][ T5887] [ 333.567165][ T5887] az6027: usb out operation failed. (-71) [ 333.567177][ T5887] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 333.574594][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 333.585461][ T5887] dvb-usb: schedule remote query interval to 400 msecs. [ 333.585481][ T5887] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 333.592530][ T5887] usb 1-1: USB disconnect, device number 27 [ 333.894427][ T5887] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 334.096696][T13175] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 334.096991][T13175] syzkaller1: linktype set to 786 [ 334.365596][T13187] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 334.744167][T13208] Bluetooth: MGMT ver 1.23 [ 334.745073][ T820] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 334.838707][T13210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3290'. [ 334.894015][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 334.899592][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.899626][ T820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 334.899666][ T820] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 334.899689][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.914826][ T820] usb 4-1: config 0 descriptor?? [ 335.162348][T13220] loop5: detected capacity change from 0 to 7 [ 335.209526][T13220] Dev loop5: unable to read RDB block 7 [ 335.209632][T13220] loop5: AHDI p1 [ 335.209662][T13220] loop5: partition table partially beyond EOD, truncated [ 335.342653][ T820] hid_parser_main: 33 callbacks suppressed [ 335.342676][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342708][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342734][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342760][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342785][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342809][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342834][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342857][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342883][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.342907][ T820] aquacomputer_d5next 0003:0C70:F003.0021: unknown main item tag 0x0 [ 335.453564][ T820] aquacomputer_d5next 0003:0C70:F003.0021: hidraw0: USB HID v0.0a Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 335.591109][ T820] usb 4-1: USB disconnect, device number 15 [ 335.687319][T13227] fido_id[13227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 335.772283][T13233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3301'. [ 335.874367][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'. [ 335.993930][T13241] hugetlbfs: syz.1.3305 (13241): Using mlock ulimits for SHM_HUGETLB is obsolete [ 336.031797][T13243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3306'. [ 336.501950][ T5143] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 336.501977][ T5143] Bluetooth: hci2: Dropping invalid advertising data [ 336.501989][ T5143] Bluetooth: hci2: Malformed LE Event: 0x02 [ 337.584441][T13300] loop4: detected capacity change from 0 to 7 [ 337.704258][T13304] support for the xor transformation has been removed. [ 337.704383][T13300] buffer_io_error: 11 callbacks suppressed [ 337.704408][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.704543][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.704631][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.704718][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.704843][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.704957][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.705145][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.705213][T13300] ldm_validate_partition_table(): Disk read failed. [ 337.705255][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.705349][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.705459][T13300] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.705606][T13300] Dev loop4: unable to read RDB block 0 [ 337.706408][T13300] loop4: unable to read partition table [ 337.706619][T13300] loop4: partition table beyond EOD, truncated [ 337.706651][T13300] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 338.047211][ T38] audit: type=1326 audit(1776393421.097:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.3.3341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2727c819 code=0x0 [ 338.704036][ T5887] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 338.787584][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.819073][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.864637][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 338.873354][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.873816][ T5887] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 338.874039][ T5887] usb 1-1: config 0 has no interface number 0 [ 338.875946][ T5913] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 338.943137][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.943328][ T5887] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 338.943354][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.943374][ T5887] usb 1-1: Product: syz [ 338.943387][ T5887] usb 1-1: Manufacturer: syz [ 338.943401][ T5887] usb 1-1: SerialNumber: syz [ 338.960833][ T38] audit: type=1326 audit(1776393422.007:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13343 comm="syz.3.3352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2727c819 code=0x0 [ 338.981171][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.179964][ T5887] usb 1-1: config 0 descriptor?? [ 339.190284][ T5887] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 339.343045][ T5913] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 339.343106][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.423744][ T5913] usb 2-1: config 0 descriptor?? [ 339.458464][ T5887] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 339.507257][ T5913] pwc: Creative Labs Webcam 5 detected. [ 339.676365][ T5887] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 339.811395][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 339.812304][ T5911] usb 1-1: USB disconnect, device number 28 [ 339.889765][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 339.920050][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 339.920972][ T5911] quatech2 1-1:0.51: device disconnected [ 340.070780][ T5913] pwc: recv_control_msg error -71 req 02 val 2b00 [ 340.071330][ T5913] pwc: recv_control_msg error -71 req 02 val 2700 [ 340.071789][ T5913] pwc: recv_control_msg error -71 req 04 val 1600 [ 340.072254][ T5913] pwc: recv_control_msg error -71 req 02 val 2c00 [ 340.072713][ T5913] pwc: recv_control_msg error -71 req 04 val 1000 [ 340.077916][ T5913] pwc: recv_control_msg error -71 req 04 val 1300 [ 340.078979][ T5913] pwc: recv_control_msg error -71 req 04 val 1400 [ 340.079432][ T5913] pwc: recv_control_msg error -71 req 02 val 2000 [ 340.079880][ T5913] pwc: recv_control_msg error -71 req 02 val 2100 [ 340.080844][ T5913] pwc: recv_control_msg error -71 req 06 val 0600 [ 340.081556][ T5913] pwc: recv_control_msg error -71 req 04 val 1500 [ 340.081993][ T5913] pwc: recv_control_msg error -71 req 02 val 2500 [ 340.082418][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 340.082972][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 340.088268][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 340.089633][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 340.092006][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 340.092460][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 340.092908][ T5913] pwc: Failed to power off camera (-71) [ 340.223086][ T5913] pwc: Registered as video103. [ 340.235959][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 340.309504][ T5913] usb 2-1: USB disconnect, device number 21 [ 341.038608][T13364] input: syz1 as /devices/virtual/input/input26 [ 341.095429][T13366] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3362'. [ 341.299304][ T5143] Bluetooth: hci4: command tx timeout [ 341.504161][ T5911] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 341.611685][ T38] audit: type=1400 audit(1776393424.657:28): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 341.667144][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.796265][ T5911] usb 2-1: config 0 descriptor?? [ 341.880172][T13341] chnl_net:caif_netlink_parms(): no params data found [ 342.014399][ T5911] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 342.400522][ T5911] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 342.400547][ T5911] [drm] Initialized udl on minor 2 [ 342.646104][ T5911] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 342.791898][ T5911] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 342.822107][T13341] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.822495][T13341] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.822772][T13341] bridge_slave_0: entered allmulticast mode [ 342.827644][T13341] bridge_slave_0: entered promiscuous mode [ 342.832801][T13341] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.833150][T13341] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.833514][T13341] bridge_slave_1: entered allmulticast mode [ 342.838609][T13341] bridge_slave_1: entered promiscuous mode [ 343.072155][ T5911] usb 2-1: USB disconnect, device number 22 [ 343.097051][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 343.320379][T13341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.327415][T13341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.385273][ T5143] Bluetooth: hci4: command tx timeout [ 343.647867][T13413] netlink: 'syz.3.3380': attribute type 83 has an invalid length. [ 343.680087][T13341] team0: Port device team_slave_0 added [ 343.707545][T13341] team0: Port device team_slave_1 added [ 344.093197][T13341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.093213][T13341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.093235][T13341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.098140][T13341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.098156][T13341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.098181][T13341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.207436][T13341] hsr_slave_0: entered promiscuous mode [ 344.209489][T13341] hsr_slave_1: entered promiscuous mode [ 344.210834][T13341] debugfs: 'hsr0' already exists in 'hsr' [ 344.210854][T13341] Cannot create hsr debugfs directory [ 344.303978][ T5911] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 344.470172][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 344.470203][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 344.470228][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 344.513254][ T5911] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 344.513284][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.513304][ T5911] usb 2-1: Product: syz [ 344.513318][ T5911] usb 2-1: Manufacturer: syz [ 344.513332][ T5911] usb 2-1: SerialNumber: syz [ 344.604196][ T5911] usb 2-1: config 0 descriptor?? [ 344.609140][T13425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.609337][T13425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.612305][ T5911] usb 2-1: ucan: probing device on interface #0 [ 344.940906][T13435] misc userio: Begin command sent, but we're already running [ 345.454021][ T5143] Bluetooth: hci4: command tx timeout [ 345.518617][ T5911] ucan 2-1:0.0 can0: registered device [ 345.519197][ T5911] ucan 2-1:0.0 can0: firmware string: unknown [ 345.538540][ T5911] usb 2-1: USB disconnect, device number 23 [ 345.647753][T13438] block nbd2: server does not support multiple connections per device. [ 345.704607][T13438] block nbd2: shutting down sockets [ 345.847336][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.892548][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.899758][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.902702][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.903446][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.321914][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 346.403807][ T1189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.755756][T13442] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3396'. [ 346.755782][T13442] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 347.091849][ T1189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.104079][ T5911] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 347.241346][T13463] ucma_write: process 1923 (syz.0.3406) changed security contexts after opening file descriptor, this is not allowed. [ 347.286911][ T5911] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 347.286943][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.304959][ T5911] usb 2-1: config 0 descriptor?? [ 347.440367][ T5911] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 347.535405][ T5143] Bluetooth: hci4: command tx timeout [ 347.780641][ T5911] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 347.791154][ T1189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.133798][T13465] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 348.138453][T13465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.161138][T13465] vhci_hcd vhci_hcd.0: Device attached [ 348.175511][ T5143] Bluetooth: hci3: command tx timeout [ 348.223280][ T5911] gspca_cpia1: usb_control_msg 02, error -71 [ 348.275769][ T5911] gspca_cpia1: usb_control_msg 05, error -71 [ 348.275800][ T5911] cpia1 2-1:0.0: unexpected systemstate: 00 [ 348.360316][ T5911] usb 2-1: USB disconnect, device number 24 [ 348.583214][ T1189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.654264][ T5887] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 348.684015][ T819] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 348.806026][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 348.835347][ T5887] usb 1-1: config 0 has no interfaces? [ 348.835386][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.835410][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.888839][ T5887] usb 1-1: config 0 descriptor?? [ 348.917961][T13341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.972430][T13341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.039125][T13341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.091137][T13341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.102319][T13341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.170449][T13466] vhci_hcd: connection closed [ 349.171157][ T1541] vhci_hcd vhci_hcd.0: stop threads [ 349.171182][ T1541] vhci_hcd vhci_hcd.0: release socket [ 349.199576][ T1541] vhci_hcd vhci_hcd.0: disconnect device [ 349.214083][ T5911] usb 1-1: USB disconnect, device number 29 [ 349.278307][ T819] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 349.333037][T13341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.355716][T13341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.401200][T13341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.608443][T13475] loop5: detected capacity change from 0 to 7 [ 350.193249][T13486] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 350.256752][ T5143] Bluetooth: hci3: command tx timeout [ 350.588539][ T820] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 350.588826][ T820] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 350.589093][ T820] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 350.589356][ T820] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 350.589373][ T820] rtc rtc0: __rtc_set_alarm: err=-22 [ 350.822322][T13475] Dev loop5: unable to read RDB block 7 [ 350.822363][T13475] loop5: unable to read partition table [ 350.822573][T13475] loop5: partition table beyond EOD, truncated [ 350.822603][T13475] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 351.100792][T13502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.177864][ T1189] bridge_slave_1: left allmulticast mode [ 351.178007][ T1189] bridge_slave_1: left promiscuous mode [ 351.201708][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.388410][ T1189] bridge_slave_0: left allmulticast mode [ 351.388440][ T1189] bridge_slave_0: left promiscuous mode [ 351.388699][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.334288][ T5143] Bluetooth: hci3: command tx timeout [ 352.824429][T13439] chnl_net:caif_netlink_parms(): no params data found [ 353.040772][ T1189] tipc: Disabling bearer [ 353.041255][ T1189] tipc: Disabling bearer [ 353.041434][ T1189] tipc: Left network mode [ 353.479631][T13439] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.480013][T13439] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.480345][T13439] bridge_slave_0: entered allmulticast mode [ 353.489605][T13439] bridge_slave_0: entered promiscuous mode [ 353.553555][T13439] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.554238][T13439] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.554568][T13439] bridge_slave_1: entered allmulticast mode [ 353.639309][T13439] bridge_slave_1: entered promiscuous mode [ 353.772445][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 353.780997][T13341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.955523][T13439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.978829][T13439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.338289][T13439] team0: Port device team_slave_0 added [ 354.344951][T13341] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.359484][T13439] team0: Port device team_slave_1 added [ 354.416766][ T5143] Bluetooth: hci3: command tx timeout [ 354.488019][T13439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.488030][T13439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.488045][T13439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.600368][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.621760][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.667400][T13439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.667417][T13439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.667443][T13439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.913285][ T1541] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.913432][ T1541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.104286][T13439] hsr_slave_0: entered promiscuous mode [ 355.106598][T13439] hsr_slave_1: entered promiscuous mode [ 355.108484][T13439] debugfs: 'hsr0' already exists in 'hsr' [ 355.108509][T13439] Cannot create hsr debugfs directory [ 355.853095][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 358.589864][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 358.744423][T13439] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.788732][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.798241][T13341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.034034][ T1189] hsr_slave_0: left promiscuous mode [ 359.084108][ T1189] hsr_slave_1: left promiscuous mode [ 359.090594][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.090737][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.137821][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.137843][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.318121][ T1189] veth1_macvtap: left promiscuous mode [ 359.318473][ T1189] veth0_macvtap: left promiscuous mode [ 359.319054][ T1189] veth1_vlan: left promiscuous mode [ 359.319294][ T1189] veth0_vlan: left promiscuous mode [ 360.184904][ T1189] team0 (unregistering): Port device team_slave_1 removed [ 360.244687][ T1189] team0 (unregistering): Port device team_slave_0 removed [ 360.475371][T13439] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.522544][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.541104][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4 [ 360.544827][T13439] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.584638][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.611787][T13439] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.688297][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.125959][T13341] veth0_vlan: entered promiscuous mode [ 361.252314][T13341] veth1_vlan: entered promiscuous mode [ 361.479900][T13439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.690064][T13341] veth0_macvtap: entered promiscuous mode [ 361.742510][T13439] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.747770][T13341] veth1_macvtap: entered promiscuous mode [ 361.772192][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.772520][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.870858][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.871041][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.898369][T13341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.972861][T13341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.016180][ T1189] IPVS: stop unused estimator thread 0... [ 362.063507][ T1541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.069533][ T1541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.069650][ T1541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.069731][ T1541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.275708][ T1541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.275729][ T1541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.477027][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.477049][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.566521][T13439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.133121][T13439] veth0_vlan: entered promiscuous mode [ 364.148267][T13439] veth1_vlan: entered promiscuous mode [ 364.233638][T13439] veth0_macvtap: entered promiscuous mode [ 364.242260][T13439] veth1_macvtap: entered promiscuous mode [ 364.321333][T13439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.369200][T13439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.390912][ T3551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.399659][ T3551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.399703][ T3551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.399735][ T3551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.423098][T13619] loop5: detected capacity change from 0 to 7 [ 365.832403][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.832424][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.377467][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.377487][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.800504][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'. [ 366.803689][T13619] Dev loop5: unable to read RDB block 7 [ 366.803731][T13619] loop5: unable to read partition table [ 366.804040][T13619] loop5: partition table beyond EOD, truncated [ 366.804076][T13619] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 367.184126][ T5911] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 367.394978][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 367.424376][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 367.424408][ T5911] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 367.424419][ T5911] usb 2-1: Product: syz [ 367.424427][ T5911] usb 2-1: Manufacturer: syz [ 367.424434][ T5911] usb 2-1: SerialNumber: syz [ 367.572928][ T5911] usb 2-1: config 0 descriptor?? [ 367.739941][ T5911] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 368.390505][ T5911] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 368.444617][T13663] Invalid logical block size (65536) [ 368.640055][ T10] usb 2-1: USB disconnect, device number 25 [ 369.459435][T13693] program syz.5.3456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.187807][T13747] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3482'. [ 371.224751][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 371.244120][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 371.409388][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 371.421173][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.421206][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.421242][ T10] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 371.421263][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.441448][ T10] usb 1-1: config 0 descriptor?? [ 371.976952][T13772] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 372.091934][ T10] usb 1-1: string descriptor 0 read error: -71 [ 372.124248][ T10] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 372.124335][ T10] letsketch 0003:6161:4D15.0022: probe with driver letsketch failed with error -32 [ 372.220880][ T10] usb 1-1: USB disconnect, device number 30 [ 372.254205][ T5143] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 373.347408][T13812] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 373.661436][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3507'. [ 375.869240][T13911] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3536'. [ 376.615793][T13945] netlink: 'syz.1.3549': attribute type 10 has an invalid length. [ 377.332212][T13945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.347756][T13945] team0: Port device netdevsim0 added [ 378.429663][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3570'. [ 378.783435][T14021] program syz.5.3576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.285734][ T819] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 379.435278][ T819] usb 6-1: Using ep0 maxpacket: 16 [ 379.438428][ T819] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 379.438473][ T819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 379.438508][ T819] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 379.438527][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.498046][ T819] usb 6-1: config 0 descriptor?? [ 379.926537][T14046] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 379.954426][ T819] hid_parser_main: 28 callbacks suppressed [ 379.954451][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954483][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954506][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954532][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954557][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954583][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954620][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954646][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954671][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 379.954697][ T819] lenovo 0003:17EF:6062.0023: unknown main item tag 0x0 [ 380.059630][ T819] lenovo 0003:17EF:6062.0023: hidraw0: USB HID v0.0a Device [HID 17ef:6062] on usb-dummy_hcd.5-1/input0 [ 380.159431][ T5887] usb 6-1: USB disconnect, device number 2 [ 380.247523][T14051] fido_id[14051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 380.445725][ T819] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 380.603996][ T819] usb 2-1: Using ep0 maxpacket: 16 [ 380.615364][ T819] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.615400][ T819] usb 2-1: config 0 interface 0 has no altsetting 0 [ 380.615433][ T819] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 380.615455][ T819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.677026][ T819] usb 2-1: config 0 descriptor?? [ 380.744126][ T5940] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 380.911205][ T5940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.911233][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.912513][ T5940] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.912542][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.912623][ T5940] usb 1-1: SerialNumber: syz [ 381.218320][ T5940] usb 1-1: 0:2 : does not exist [ 381.267480][ T819] mcp2221 0003:04D8:00DD.0024: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 381.789496][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.845610][ T5940] usb 1-1: USB disconnect, device number 31 [ 381.888993][ T819] usb 2-1: USB disconnect, device number 26 [ 382.100049][T13622] udevd[13622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.551400][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.658786][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.660894][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.669938][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.670783][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.726201][ T820] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 382.922948][ T820] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 382.922978][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.922989][ T820] usb 1-1: Product: syz [ 382.922997][ T820] usb 1-1: Manufacturer: syz [ 382.923004][ T820] usb 1-1: SerialNumber: syz [ 383.261902][ T3501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.303236][T14086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.350418][ T820] rtl8150 1-1:1.0: couldn't reset the device [ 383.350863][ T820] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 383.397871][ T820] usb 1-1: USB disconnect, device number 32 [ 384.115633][ T3501] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.431797][T14107] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3616'. [ 384.723454][ T3501] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.760164][T14116] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 384.829442][T14109] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.830031][T14109] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.895848][ T5143] Bluetooth: hci4: command tx timeout [ 385.361739][ T3501] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.003668][T14071] chnl_net:caif_netlink_parms(): no params data found [ 386.272710][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 386.985379][ T5143] Bluetooth: hci4: command tx timeout [ 387.102755][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.103142][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.103481][T14071] bridge_slave_0: entered allmulticast mode [ 387.109162][T14071] bridge_slave_0: entered promiscuous mode [ 387.164332][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.164742][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.165093][T14071] bridge_slave_1: entered allmulticast mode [ 387.189341][T14071] bridge_slave_1: entered promiscuous mode [ 387.462084][T14196] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.652758][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.958733][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.430076][ T3501] bridge_slave_1: left allmulticast mode [ 388.430184][ T3501] bridge_slave_1: left promiscuous mode [ 388.430470][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.525407][ T3501] bridge_slave_0: left allmulticast mode [ 388.525429][ T3501] bridge_slave_0: left promiscuous mode [ 388.527151][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.061387][ T5143] Bluetooth: hci4: command tx timeout [ 389.724682][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.855282][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.898556][ T3501] bond0 (unregistering): Released all slaves [ 390.225154][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 390.249625][T14071] team0: Port device team_slave_0 added [ 390.260397][T14071] team0: Port device team_slave_1 added [ 390.401310][ T5911] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 390.401341][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.401358][ T5911] usb 6-1: Product: syz [ 390.401371][ T5911] usb 6-1: Manufacturer: syz [ 390.401385][ T5911] usb 6-1: SerialNumber: syz [ 390.834668][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.834685][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.834711][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.019325][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.019344][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.019363][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.144078][ T5143] Bluetooth: hci4: command tx timeout [ 391.304887][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 391.304967][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 391.356713][ T5911] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 391.389547][ T5911] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 391.420025][ T5911] usb 6-1: USB disconnect, device number 3 [ 391.804990][T14071] hsr_slave_0: entered promiscuous mode [ 391.826047][T14071] hsr_slave_1: entered promiscuous mode [ 391.830975][T14071] debugfs: 'hsr0' already exists in 'hsr' [ 391.830994][T14071] Cannot create hsr debugfs directory [ 393.823978][ T3501] hsr_slave_0: left promiscuous mode [ 393.863980][ T3501] hsr_slave_1: left promiscuous mode [ 393.864978][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.864995][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.916358][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.916385][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.085265][ T3501] veth1_macvtap: left promiscuous mode [ 394.085404][ T3501] veth0_macvtap: left promiscuous mode [ 394.088255][ T3501] veth1_vlan: left promiscuous mode [ 394.088373][ T3501] veth0_vlan: left promiscuous mode [ 394.869309][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 394.964569][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 395.005809][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 395.023975][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 395.039963][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.055116][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 395.055146][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.055165][ T10] usb 2-1: Product: syz [ 395.055179][ T10] usb 2-1: Manufacturer: syz [ 395.055193][ T10] usb 2-1: SerialNumber: syz [ 395.328539][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 395.507028][ T5489] 8021q: adding VLAN 0 to HW filter on device eth5 [ 395.933649][ T10] gspca_vc032x: reg_r err -71 [ 395.933684][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933695][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933702][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933710][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933719][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933727][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933734][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933741][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933750][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933756][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933763][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933770][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933777][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933785][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.933792][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.939810][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.939824][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.939833][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.939842][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.939862][ T10] gspca_vc032x: Unknown sensor... [ 395.939948][ T10] vc032x 2-1:12.0: probe with driver vc032x failed with error -22 [ 396.066512][ T10] usb 2-1: USB disconnect, device number 27 [ 396.648211][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3728'. [ 397.332999][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3733'. [ 397.475021][T14394] program syz.0.3736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.039921][ T5489] 8021q: adding VLAN 0 to HW filter on device eth6 [ 398.239507][T14071] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 398.439663][T14071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.444296][T14071] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 398.715478][T14071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.718964][T14071] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 398.857936][T14071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.895389][T14071] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 399.176649][T14071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.140650][T14071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.479287][T14071] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.511598][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.511753][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.552943][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.553157][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.902596][ T5489] 8021q: adding VLAN 0 to HW filter on device eth7 [ 401.812994][T14485] kvm: kvm [14483]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xffffffffffffffff [ 402.206887][T14071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.403771][T14504] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3765'. [ 402.979384][ T5489] 8021q: adding VLAN 0 to HW filter on device eth8 [ 403.139038][T14531] netlink: 'syz.5.3774': attribute type 2 has an invalid length. [ 403.139064][T14531] netlink: 'syz.5.3774': attribute type 4 has an invalid length. [ 403.174019][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 403.342959][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.342996][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.343032][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 403.343066][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 403.343088][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.355076][ T10] usb 1-1: config 0 descriptor?? [ 403.854844][ T10] hid_parser_main: 31 callbacks suppressed [ 403.854869][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.854899][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.854925][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.854951][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.854977][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.855003][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.855027][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.855050][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.855075][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.855099][ T10] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 403.859714][ T10] uclogic 0003:5543:0522.0025: hidraw0: USB HID vff.fa Device [HID 5543:0522] on usb-dummy_hcd.0-1/input0 [ 404.127898][ T10] usb 1-1: USB disconnect, device number 33 [ 404.170367][T14071] veth0_vlan: entered promiscuous mode [ 404.203740][T14550] fido_id[14550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 404.229196][T14071] veth1_vlan: entered promiscuous mode [ 404.370589][T14071] veth0_macvtap: entered promiscuous mode [ 404.408050][T14071] veth1_macvtap: entered promiscuous mode [ 404.475786][T14071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.542639][T14071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.630333][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.633357][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.655952][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.675446][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.961498][T14565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3787'. [ 405.052341][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'. [ 406.866903][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.866924][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.055348][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.055369][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.243408][T14625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3812'. [ 408.243444][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3812'. [ 408.669001][T14645] overlayfs: workdir and upperdir must be separate subtrees [ 409.104226][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 409.131818][ T5876] IPVS: starting estimator thread 0... [ 409.276662][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 409.278815][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 409.278848][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 409.286535][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 409.286564][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.286582][ T10] usb 6-1: Product: syz [ 409.286595][ T10] usb 6-1: Manufacturer: syz [ 409.286608][ T10] usb 6-1: SerialNumber: syz [ 409.298787][ T10] usb 6-1: config 0 descriptor?? [ 409.340624][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 409.340658][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 409.348704][T14666] IPVS: using max 11 ests per chain, 26400 per kthread [ 409.941485][ T10] em28xx 6-1:0.0: chip ID is em28178 [ 410.168038][ T10] usb 6-1: USB disconnect, device number 4 [ 410.181159][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 410.373671][ T10] em28xx 6-1:0.0: Freeing device [ 411.519038][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 411.593983][ T5887] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 411.770391][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 411.772508][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.772539][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 411.772564][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 411.772604][ T5887] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 411.772626][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.853481][ T5887] usb 2-1: config 0 descriptor?? [ 411.856602][T14743] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 411.873413][ T5887] hub 2-1:0.0: USB hub found [ 412.093783][ T5887] hub 2-1:0.0: 2 ports detected [ 412.377939][T14765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3874'. [ 412.973111][ T5887] usb 2-1: USB disconnect, device number 28 [ 413.834039][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 413.988901][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 414.003129][ T10] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 414.003157][ T10] usb 2-1: config 2 has no interface number 0 [ 414.003200][ T10] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 414.003225][ T10] usb 2-1: config 2 interface 88 has no altsetting 0 [ 414.033973][ T10] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 414.034002][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.034021][ T10] usb 2-1: Product: syz [ 414.034032][ T10] usb 2-1: Manufacturer: syz [ 414.034045][ T10] usb 2-1: SerialNumber: syz [ 414.081800][T14794] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 414.308913][T14794] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 414.645548][ T5842] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 414.797009][ T5842] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 414.797041][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.824055][ T5842] usb 7-1: config 0 descriptor?? [ 414.850493][ T5842] cp210x 7-1:0.0: cp210x converter detected [ 414.920618][ T10] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 414.920903][ T10] asix 2-1:2.88: probe with driver asix failed with error -71 [ 415.019096][ T10] usb 2-1: USB disconnect, device number 29 [ 415.082473][ C1] sd 0:0:1:0: [sda] tag#3417 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 415.082506][ C1] sd 0:0:1:0: [sda] tag#3417 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 415.489093][ T5842] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 415.489148][ T5842] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 415.495570][ T5842] usb 7-1: cp210x converter now attached to ttyUSB0 [ 415.512127][ T5842] usb 7-1: USB disconnect, device number 2 [ 415.521432][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 415.536175][ T5842] cp210x 7-1:0.0: device disconnected [ 415.912697][T14847] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3902'. [ 416.252106][T14868] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3909'. [ 416.737016][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3914'. [ 416.737048][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3914'. [ 417.127330][T14896] Set syz0 is full, maxelem 0 reached [ 417.313431][T14907] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3920'. [ 417.524566][T14918] netlink: 'syz.6.3924': attribute type 2 has an invalid length. [ 417.524588][T14918] netlink: 'syz.6.3924': attribute type 4 has an invalid length. [ 417.793978][ T5842] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 417.952696][ T5842] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 417.952743][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 417.952768][ T5842] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.952789][ T5842] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 417.952814][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 417.952847][ T5842] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 417.952869][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.006736][ T5842] usb 6-1: config 0 descriptor?? [ 418.150267][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 418.460376][ T5842] hid_parser_main: 19 callbacks suppressed [ 418.460401][ T5842] ryos 0003:1E7D:3138.0026: unknown main item tag 0x0 [ 418.460432][ T5842] ryos 0003:1E7D:3138.0026: unknown main item tag 0x0 [ 418.460456][ T5842] ryos 0003:1E7D:3138.0026: unknown main item tag 0x0 [ 418.460481][ T5842] ryos 0003:1E7D:3138.0026: unknown main item tag 0x0 [ 418.460505][ T5842] ryos 0003:1E7D:3138.0026: unknown main item tag 0x0 [ 418.520910][ T5842] ryos 0003:1E7D:3138.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0 [ 418.671547][ T5842] usb 6-1: USB disconnect, device number 5 [ 418.918701][T14954] fido_id[14954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 419.017714][T14965] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3942'. [ 419.635910][ T5876] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 419.799053][ T5876] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 419.799085][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 419.799105][ T5876] usb 1-1: Product: syz [ 419.816378][ T5876] usb 1-1: config 0 descriptor?? [ 419.907976][ T5876] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 419.912449][ T5876] usb 1-1: Detected FT232H [ 420.067986][ T5876] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 420.221319][T15008] program syz.6.3958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.472894][ T5876] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 420.479159][ T5876] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 420.503776][ T5876] usb 1-1: USB disconnect, device number 34 [ 420.550166][ T5876] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 420.550900][ T5876] ftdi_sio 1-1:0.0: device disconnected [ 420.690683][T15022] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 420.690701][T15022] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 420.690939][T15022] overlayfs: failed to set uuid (1045/file0, err=-13); falling back to uuid=null. [ 420.931171][T15028] tipc: Started in network mode [ 420.931190][T15028] tipc: Node identity ac14140f, cluster identity 4711 [ 420.931455][T15028] tipc: New replicast peer: 255.255.255.255 [ 420.960774][T15028] tipc: Enabled bearer , priority 10 [ 421.338374][T15046] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3976'. [ 421.712494][T15064] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 421.712494][T15064] The task syz.5.3981 (15064) triggered the difference, watch for misbehavior. [ 421.755262][T15067] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3985'. [ 421.974799][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 422.054005][ T5876] tipc: Node number set to 2886997007 [ 422.149333][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 422.149417][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.149441][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.149462][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 422.154189][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 422.154219][ T10] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 422.154238][ T10] usb 7-1: Manufacturer: syz [ 422.176918][ T10] usb 7-1: config 0 descriptor?? [ 422.364128][ T5143] Bluetooth: hci4: command tx timeout [ 422.543010][T15087] input: syz1 as /devices/virtual/input/input31 [ 422.643153][ T10] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 422.782966][ T10] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 423.084624][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4000'. [ 423.207742][T15102] TCP: TCP_TX_DELAY enabled [ 423.371175][ T5913] usb 7-1: USB disconnect, device number 3 [ 423.506259][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4006'. [ 423.947779][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 424.104014][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 424.106658][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 424.111605][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 424.111633][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.111653][ T10] usb 1-1: Product: syz [ 424.111666][ T10] usb 1-1: Manufacturer: syz [ 424.111680][ T10] usb 1-1: SerialNumber: syz [ 424.171757][T15141] bridge0: port 3(veth1_macvtap) entered blocking state [ 424.172305][T15141] bridge0: port 3(veth1_macvtap) entered disabled state [ 424.177408][T15141] veth1_macvtap: entered allmulticast mode [ 424.279333][T15141] veth1_macvtap: left allmulticast mode [ 424.322368][T15145] netlink: 'syz.1.4020': attribute type 2 has an invalid length. [ 424.379175][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 424.974669][ T10] gspca_vc032x: reg_r err -71 [ 424.974689][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974698][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974706][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974714][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974722][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974731][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974739][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974747][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974755][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974764][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974772][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974779][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974787][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974794][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974802][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974810][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974818][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974826][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974835][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.974844][ T10] gspca_vc032x: Unknown sensor... [ 424.974925][ T10] vc032x 1-1:12.0: probe with driver vc032x failed with error -22 [ 424.993652][ T10] usb 1-1: USB disconnect, device number 35 [ 425.013388][T15168] bridge0: port 3(veth1_macvtap) entered blocking state [ 425.014426][T15168] bridge0: port 3(veth1_macvtap) entered disabled state [ 425.017972][T15168] veth1_macvtap: entered allmulticast mode [ 425.041884][T15168] veth1_macvtap: left allmulticast mode [ 425.349261][T15174] tap0: tun_chr_ioctl cmd 1074025675 [ 425.349283][T15174] tap0: persist enabled [ 425.961601][T15201] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4046'. [ 425.961627][T15201] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 426.172577][T15209] sit0: entered allmulticast mode [ 426.328256][T15212] sit0: entered promiscuous mode [ 426.755308][T15227] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4060'. [ 426.755332][T15227] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 427.481827][T15253] netlink: 'syz.1.4071': attribute type 83 has an invalid length. [ 428.218444][T15281] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4084'. [ 428.842701][T15298] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4092'. [ 429.227223][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 429.406311][ T10] usb 1-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 429.406341][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.407579][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 429.407603][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.407615][ T10] usb 1-1: SerialNumber: syz [ 429.583356][T15324] netlink: 'syz.6.4103': attribute type 83 has an invalid length. [ 429.693777][ T10] usb 1-1: 0:2 : does not exist [ 429.695942][ T10] usb 1-1: unit 108 not found! [ 429.695968][ T10] usb 1-1: unit 219 not found! [ 429.695984][ T10] usb 1-1: unit 169 not found! [ 429.931200][ T10] usb 1-1: USB disconnect, device number 36 [ 430.086332][T13622] udevd[13622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.824032][ T5842] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 430.993213][ T5842] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.993252][ T5842] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.993276][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.993310][ T5842] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 430.993334][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.063303][ T5842] usb 6-1: config 0 descriptor?? [ 431.550381][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550417][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550443][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550469][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550493][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550518][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550544][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550569][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550594][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.550618][ T5842] uclogic 0003:5543:0522.0028: unknown main item tag 0x0 [ 431.636775][ T5842] uclogic 0003:5543:0522.0028: hidraw0: USB HID vff.fa Device [HID 5543:0522] on usb-dummy_hcd.5-1/input0 [ 431.786931][T15368] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4122'. [ 431.810513][ T819] usb 6-1: USB disconnect, device number 6 [ 431.893673][T15364] fido_id[15364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 432.168969][T15378] vxcan0: tx address claim with dest, not broadcast [ 432.611274][T15396] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 433.388187][T15427] overlayfs: workdir and upperdir must be separate subtrees [ 433.465943][ T820] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 433.665585][ T820] usb 6-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 433.665615][ T820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.668386][ T820] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.668418][ T820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.668441][ T820] usb 6-1: SerialNumber: syz [ 433.737873][ T5143] Bluetooth: hci2: unexpected event for opcode 0x200f [ 433.973536][ T820] usb 6-1: 0:2 : does not exist [ 433.973634][ T820] usb 6-1: unit 108 not found! [ 433.973651][ T820] usb 6-1: unit 219 not found! [ 433.973666][ T820] usb 6-1: unit 169 not found! [ 434.278394][ T820] usb 6-1: USB disconnect, device number 7 [ 435.521313][T15501] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4185'. [ 436.157222][T15529] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4197'. [ 436.962504][T15560] program syz.1.4218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.323183][ T5143] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 437.491498][T15578] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4219'. [ 438.197128][T15598] netlink: 26332 bytes leftover after parsing attributes in process `syz.0.4228'. [ 438.616208][ T5911] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 438.782755][ T5911] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 438.782788][ T5911] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 438.782809][ T5911] usb 1-1: config 246 has no interface number 0 [ 438.782863][ T5911] usb 1-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 438.782892][ T5911] usb 1-1: config 246 interface 166 has no altsetting 0 [ 438.795266][ T5911] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 438.795298][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.795318][ T5911] usb 1-1: Product: syz [ 438.795332][ T5911] usb 1-1: Manufacturer: syz [ 438.795345][ T5911] usb 1-1: SerialNumber: syz [ 438.840547][T15624] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4240'. [ 439.490112][T15642] input: syz0 as /devices/virtual/input/input33 [ 439.542328][ T5911] usb 1-1: Limiting number of CPorts to U8_MAX [ 439.612353][ T5911] usb 1-1: Not enough endpoints found in device, aborting! [ 439.753163][ T5911] usb 1-1: USB disconnect, device number 37 [ 439.895216][T15652] netlink: 26332 bytes leftover after parsing attributes in process `syz.6.4252'. [ 440.620884][ T5143] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 440.890731][T15693] netlink: 'syz.6.4271': attribute type 4 has an invalid length. [ 440.890761][T15693] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4271'. [ 440.899759][T15693] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.4271'. [ 441.173756][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4275'. [ 441.282605][ T5143] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 441.380556][ T5143] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 441.380770][ T5143] Bluetooth: hci3: Injecting HCI hardware error event [ 441.386278][ T5143] Bluetooth: hci3: hardware error 0x00 [ 441.474288][ T5913] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 441.650189][ T5913] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.650211][ T5913] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.650237][ T5913] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.650251][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.928658][ T5913] usb 6-1: GET_CAPABILITIES returned 0 [ 441.928704][ T5913] usbtmc 6-1:16.0: can't read capabilities [ 441.948651][T15726] lo: entered promiscuous mode [ 441.949388][T15726] lo: left promiscuous mode [ 442.157498][ T5911] usb 6-1: USB disconnect, device number 8 [ 442.473022][T15749] lo: entered promiscuous mode [ 442.473449][T15749] lo: left promiscuous mode [ 442.894344][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4298'. [ 443.154182][ T5842] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 443.159779][T15760] pim6reg: entered allmulticast mode [ 443.179062][T15759] pim6reg: left allmulticast mode [ 443.239378][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.363290][ T5842] usb 7-1: config 246 has an invalid interface number: 166 but max is 0 [ 443.363321][ T5842] usb 7-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 443.363341][ T5842] usb 7-1: config 246 has no interface number 0 [ 443.363386][ T5842] usb 7-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.363414][ T5842] usb 7-1: config 246 interface 166 has no altsetting 0 [ 443.368904][ T5842] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 443.368935][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.368954][ T5842] usb 7-1: Product: syz [ 443.368968][ T5842] usb 7-1: Manufacturer: syz [ 443.368983][ T5842] usb 7-1: SerialNumber: syz [ 443.694747][ T5143] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 444.070555][ T5842] usb 7-1: Limiting number of CPorts to U8_MAX [ 444.087274][ T5842] usb 7-1: Not enough endpoints found in device, aborting! [ 444.306224][ T5842] usb 7-1: USB disconnect, device number 4 [ 444.654172][ T5143] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 444.682037][ T5143] Bluetooth: hci2: Injecting HCI hardware error event [ 444.695370][ T5143] Bluetooth: hci2: hardware error 0x00 [ 444.880875][T15795] team0: No ports can be present during mode change [ 445.625035][T15829] batadv_slave_1: entered promiscuous mode [ 445.625864][T15828] batadv_slave_1: left promiscuous mode [ 445.734139][ T5913] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 445.898375][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.898412][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.898435][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.898477][ T5913] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.898503][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.908215][ T5913] usb 1-1: config 0 descriptor?? [ 445.916859][ T5913] hub 1-1:0.0: USB hub found [ 446.118528][ T5913] hub 1-1:0.0: 9 ports detected [ 446.118920][ T5913] hub 1-1:0.0: insufficient power available to use all downstream ports [ 446.293923][ T5911] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 446.319889][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 446.320704][ T5913] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 446.325591][ T5913] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 446.355017][ T5913] usb 1-1: USB disconnect, device number 38 [ 446.453961][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 446.459425][ T5911] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 446.461533][ T5911] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 446.461560][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.461571][ T5911] usb 2-1: Product: syz [ 446.461579][ T5911] usb 2-1: Manufacturer: syz [ 446.461586][ T5911] usb 2-1: SerialNumber: syz [ 446.509273][ T5911] r8152-cfgselector 2-1: Unknown version 0x0000 [ 446.509290][ T5911] r8152-cfgselector 2-1: config 0 descriptor?? [ 446.729013][ T5911] r8152-cfgselector 2-1: Needed 2 retries to read version [ 446.744415][ T5143] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 446.974914][ T5913] r8152-cfgselector 2-1: USB disconnect, device number 30 [ 447.000093][ T38] audit: type=1326 audit(1776394042.050:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15849 comm="syz.6.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294c6bc819 code=0x7fc00000 [ 447.006176][T15863] loop4: detected capacity change from 0 to 7 [ 447.084085][T15866] program syz.6.4349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.090658][T15863] buffer_io_error: 14 callbacks suppressed [ 447.090679][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.090811][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.090906][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.090998][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.126321][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.126467][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.126575][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.126691][T15863] ldm_validate_partition_table(): Disk read failed. [ 447.126816][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.126907][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.127016][T15863] Buffer I/O error on dev loop4, logical block 0, async page read [ 447.127156][T15863] Dev loop4: unable to read RDB block 0 [ 447.127408][T15863] loop4: unable to read partition table [ 447.127616][T15863] loop4: partition table beyond EOD, truncated [ 447.127648][T15863] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 448.604095][ T820] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 448.695395][ T5911] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 448.754999][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 448.757243][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.757274][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.757297][ T820] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 448.757309][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.768904][ T820] usb 1-1: config 0 descriptor?? [ 448.863958][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 448.866720][ T5911] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 448.866805][ T5911] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.866829][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.866861][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.866885][ T5911] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.866927][ T5911] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.866950][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.085345][T15922] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 449.174062][ T5911] usb 6-1: GET_CAPABILITIES returned 0 [ 449.174122][ T5911] usbtmc 6-1:16.0: can't read capabilities [ 449.227013][ T820] hid_parser_main: 19 callbacks suppressed [ 449.227036][ T820] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 449.227066][ T820] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 449.397018][ T820] ft260 0003:0403:6030.0029: chip code: 0000 0000 [ 449.461034][ T5842] usb 6-1: USB disconnect, device number 9 [ 449.612126][ T820] ft260 0003:0403:6030.0029: failed to retrieve system status [ 449.612547][ T820] ft260 0003:0403:6030.0029: probe with driver ft260 failed with error -71 [ 449.712636][ T820] usb 1-1: USB disconnect, device number 39 [ 450.130411][T15946] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4382'. [ 450.384408][ T820] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 450.548347][ T820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.548381][ T820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.548403][ T820] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.548445][ T820] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.548467][ T820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.562826][ T820] usb 7-1: config 0 descriptor?? [ 450.582192][ T820] hub 7-1:0.0: USB hub found [ 450.708445][T15969] program syz.5.4392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.792318][ T820] hub 7-1:0.0: 9 ports detected [ 450.792810][ T820] hub 7-1:0.0: insufficient power available to use all downstream ports [ 451.012088][ T820] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 451.012116][ T820] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 451.155997][ T820] usb 7-1: USB disconnect, device number 5 [ 451.770412][T15986] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4399'. [ 451.770784][T15986] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4399'. [ 451.808761][ T5911] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 451.974321][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 451.978386][ T5911] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 451.981190][ T5911] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 451.981217][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.981235][ T5911] usb 6-1: Product: syz [ 451.981247][ T5911] usb 6-1: Manufacturer: syz [ 451.981261][ T5911] usb 6-1: SerialNumber: syz [ 452.057521][ T5911] r8152-cfgselector 6-1: Unknown version 0x0000 [ 452.057547][ T5911] r8152-cfgselector 6-1: config 0 descriptor?? [ 452.311757][T16000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4403'. [ 452.339030][ T5911] r8152-cfgselector 6-1: Needed 2 retries to read version [ 452.512630][T16006] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 452.544348][ T819] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 452.742650][ T5911] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 452.916556][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 452.918722][ T5911] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 452.918752][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.991239][ T5911] pvrusb2: Hardware description: Terratec Grabster AV400 [ 452.991266][ T5911] pvrusb2: ********** [ 452.991272][ T5911] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 452.991283][ T5911] pvrusb2: Important functionality might not be entirely working. [ 452.991291][ T5911] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 452.991302][ T5911] pvrusb2: ********** [ 453.292663][ T2365] pvrusb2: Invalid write control endpoint [ 453.430370][ T5842] usb 2-1: USB disconnect, device number 31 [ 453.529999][T16023] overlayfs: invalid origin (0000) [ 454.512591][T16043] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4426'. [ 454.513001][T16043] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4426'. [ 454.707084][ T2365] pvrusb2: Invalid write control endpoint [ 454.707102][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 454.707117][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 454.707124][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 454.707137][ T2365] pvrusb2: Device being rendered inoperable [ 454.804643][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 455.052033][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 455.328287][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4432'. [ 455.636541][ T2365] pvrusb2: Attached sub-driver cx25840 [ 455.636631][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 455.636646][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 455.855517][T16073] tipc: Started in network mode [ 455.855551][T16073] tipc: Node identity ac14140f, cluster identity 4711 [ 455.855866][T16073] tipc: New replicast peer: 255.255.255.255 [ 455.893136][T16073] tipc: Enabled bearer , priority 10 [ 456.232085][T16083] binder: 16082:16083 ioctl c018620c 200000000280 returned -1 [ 456.427365][T16086] serio: Serial port ttyS3 [ 456.976277][ T37] tipc: Node number set to 2886997007 [ 457.750477][T16133] netlink: 'syz.1.4467': attribute type 2 has an invalid length. [ 457.750501][T16133] netlink: 'syz.1.4467': attribute type 11 has an invalid length. [ 457.750513][T16133] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4467'. [ 457.960571][T16141] netlink: 'syz.1.4473': attribute type 6 has an invalid length. [ 457.960593][T16141] netlink: 'syz.1.4473': attribute type 7 has an invalid length. [ 458.053216][T16149] binder: 16148:16149 ioctl c018620c 200000000280 returned -1 [ 458.517198][T16175] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 458.594376][T16179] netlink: 'syz.0.4498': attribute type 2 has an invalid length. [ 458.594398][T16179] netlink: 'syz.0.4498': attribute type 11 has an invalid length. [ 458.594427][T16179] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4498'. [ 458.964521][T16194] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4494'. [ 459.290476][T16205] loop8: detected capacity change from 0 to 1 [ 459.492606][T16205] Dev loop8: unable to read RDB block 1 [ 459.492658][T16205] loop8: unable to read partition table [ 459.493125][T16205] loop8: partition table beyond EOD, truncated [ 459.493163][T16205] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 459.940896][T16214] netlink: 'syz.5.4504': attribute type 6 has an invalid length. [ 459.940920][T16214] netlink: 'syz.5.4504': attribute type 7 has an invalid length. [ 460.272230][T16224] tap1: tun_chr_ioctl cmd 1074025672 [ 460.272252][T16224] tap1: ignored: set checksum enabled [ 460.977092][T16245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4518'. [ 461.418643][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4525'. [ 461.601972][T16269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4529'. [ 461.952844][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'. [ 462.185655][ T5911] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 462.355603][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 462.371335][ T5911] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 462.371366][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.371388][ T5911] usb 7-1: Product: syz [ 462.371410][ T5911] usb 7-1: Manufacturer: syz [ 462.371425][ T5911] usb 7-1: SerialNumber: syz [ 462.872566][ T38] audit: type=1326 audit(1776394057.920:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16317 comm="syz.1.4551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ae8b0c819 code=0x0 [ 463.084059][ T37] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 463.233051][ T5911] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 463.234223][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 463.262398][ T37] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 463.262428][ T37] usb 6-1: config 0 has no interface number 0 [ 463.262499][ T37] usb 6-1: config 0 interface 12 has no altsetting 0 [ 463.262731][ T5911] usb 7-1: USB disconnect, device number 6 [ 463.311071][ T37] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 463.311103][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.311121][ T37] usb 6-1: Product: syz [ 463.311134][ T37] usb 6-1: Manufacturer: syz [ 463.311147][ T37] usb 6-1: SerialNumber: syz [ 463.360732][ T37] usb 6-1: config 0 descriptor?? [ 463.594034][ T5842] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 463.757639][ T5842] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 463.759981][ T5842] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 463.760041][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.760053][ T5842] usb 1-1: Product: syz [ 463.760061][ T5842] usb 1-1: Manufacturer: syz [ 463.760068][ T5842] usb 1-1: SerialNumber: syz [ 463.846881][ T5842] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 464.214438][ T37] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 464.214659][ T37] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 464.214750][ T37] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 464.214852][ T37] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 464.262904][ T37] usb 6-1: USB disconnect, device number 11 [ 464.323971][ T819] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 464.356557][ T5842] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 464.363039][ T5842] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 464.363093][ T5842] usb 1-1: media controller created [ 464.445418][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.476831][ T819] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 464.476863][ T819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.520446][ T819] usb 2-1: config 0 descriptor?? [ 464.530171][ T819] cp210x 2-1:0.0: cp210x converter detected [ 464.665002][ T5842] usb 1-1: USB disconnect, device number 40 [ 464.953413][ T819] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 465.000682][ T819] usb 2-1: cp210x converter now attached to ttyUSB0 [ 465.212846][ T819] usb 2-1: USB disconnect, device number 32 [ 465.247854][ T819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 465.384305][ T819] cp210x 2-1:0.0: device disconnected [ 465.672288][T16371] Bluetooth: hci1: too big key_count value 65025 [ 466.137387][T16383] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4583'. [ 466.160174][T16385] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4584'. [ 467.432642][T16444] IPVS: persistence engine module ip_vs_pe_ not found [ 467.557070][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4615'. [ 467.696691][T16456] overlay: ./file0 is not a directory [ 467.959606][T16466] overlayfs: workdir and upperdir must reside under the same mount [ 468.198611][T16477] netlink: 'syz.5.4628': attribute type 10 has an invalid length. [ 469.321467][T16505] netlink: 'syz.6.4639': attribute type 1 has an invalid length. [ 469.321527][T16505] netlink: 'syz.6.4639': attribute type 2 has an invalid length. [ 469.321542][T16505] netlink: 'syz.6.4639': attribute type 1 has an invalid length. [ 469.843095][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.871190][T16477] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 470.323976][ T37] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 470.474029][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 470.476737][ T37] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 470.476765][ T37] usb 1-1: config 0 has no interface number 0 [ 470.476810][ T37] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.476838][ T37] usb 1-1: config 0 interface 85 has no altsetting 0 [ 470.479184][ T37] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 470.479211][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.479231][ T37] usb 1-1: Product: syz [ 470.479245][ T37] usb 1-1: Manufacturer: syz [ 470.479258][ T37] usb 1-1: SerialNumber: syz [ 470.555919][ T37] usb 1-1: config 0 descriptor?? [ 471.044101][T16552] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4661'. [ 471.179766][ T37] appletouch 1-1:0.85: Geyser mode initialized. [ 471.180759][T16555] netlink: 'syz.1.4663': attribute type 19 has an invalid length. [ 471.180779][T16555] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4663'. [ 471.182921][ T37] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input35 [ 471.531443][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 471.559744][ T37] usb 1-1: USB disconnect, device number 41 [ 471.707450][ T37] appletouch 1-1:0.85: input: appletouch disconnected [ 471.821406][T16573] netlink: 'syz.1.4670': attribute type 4 has an invalid length. [ 472.062090][T16584] loop2: detected capacity change from 0 to 7 [ 472.088745][T16584] Dev loop2: unable to read RDB block 7 [ 472.088795][T16584] loop2: unable to read partition table [ 472.089002][T16584] loop2: partition table beyond EOD, truncated [ 472.089037][T16584] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 472.331385][ T37] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 472.509404][ T37] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 472.509439][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.531786][ T37] usb 6-1: config 0 descriptor?? [ 472.542714][ T37] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 472.957220][ T37] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 473.158119][ T37] gspca_cpia1: usb_control_msg 01, error -32 [ 473.158421][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 473.158553][ T37] gspca_cpia1: usb_control_msg 01, error -32 [ 473.193099][ T37] gspca_cpia1: usb_control_msg 01, error -71 [ 473.193118][ T37] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 473.219874][ T37] usb 6-1: USB disconnect, device number 12 [ 473.279918][ T38] audit: type=1326 audit(1776394068.330:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ae3fc819 code=0x7fc00000 [ 474.160591][ T38] audit: type=1326 audit(1776394069.210:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe307f0d609 code=0x7ffc0000 [ 474.160659][ T38] audit: type=1326 audit(1776394069.210:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe307ec957b code=0x7ffc0000 [ 474.160697][ T38] audit: type=1326 audit(1776394069.210:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe307f0c819 code=0x7ffc0000 [ 474.160734][ T38] audit: type=1326 audit(1776394069.210:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe307f0c819 code=0x7ffc0000 [ 474.162486][ T38] audit: type=1326 audit(1776394069.210:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe307ec8c6c code=0x7ffc0000 [ 474.162533][ T38] audit: type=1326 audit(1776394069.210:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe307ec8cce code=0x7ffc0000 [ 474.162577][ T38] audit: type=1326 audit(1776394069.210:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe307f0c4ab code=0x7ffc0000 [ 474.166132][ T38] audit: type=1326 audit(1776394069.220:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe307ecd04e code=0x7ffc0000 [ 474.167624][ T38] audit: type=1326 audit(1776394069.220:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.5.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe307f0c819 code=0x7ffc0000 [ 474.410591][ T820] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 474.492411][ T820] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 475.790915][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4725'. [ 476.217284][T16722] sctp: Trying to GSO but underlying device doesn't support it. [ 476.614344][ T820] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 476.763945][ T820] usb 6-1: Using ep0 maxpacket: 32 [ 476.766751][ T820] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 476.766779][ T820] usb 6-1: config 0 has no interface number 0 [ 476.781907][ T820] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 476.781939][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.781958][ T820] usb 6-1: Product: syz [ 476.781971][ T820] usb 6-1: Manufacturer: syz [ 476.781984][ T820] usb 6-1: SerialNumber: syz [ 476.836115][ T820] usb 6-1: config 0 descriptor?? [ 476.847382][ T820] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 477.061130][T16731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.080873][T16731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.110986][ T820] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 477.183514][ T820] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 477.325633][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 477.543080][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 477.567267][ T819] usb 6-1: USB disconnect, device number 13 [ 477.669795][ T819] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 477.707906][ T819] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 477.762691][ T819] quatech2 6-1:0.51: device disconnected [ 477.863212][T16777] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4763'. [ 477.863237][T16777] netlink: 'syz.1.4763': attribute type 1 has an invalid length. [ 477.913925][ T820] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 477.988936][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4766'. [ 478.074979][ T820] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 478.075010][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.108738][ T820] usb 1-1: config 0 descriptor?? [ 478.130601][ T820] cp210x 1-1:0.0: cp210x converter detected [ 478.162116][T16787] smc: net device hsr0 applied user defined pnetid SYZ2 [ 478.206552][T16789] program syz.5.4770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.293243][T16787] smc: net device hsr0 erased user defined pnetid SYZ2 [ 478.335455][ T820] usb 1-1: cp210x converter now attached to ttyUSB0 [ 479.630746][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.723088][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.735646][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.765199][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.766779][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.087087][ T1506] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.235624][T16829] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.4788'. [ 480.235741][T16829] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 480.670613][ T5913] usb 1-1: USB disconnect, device number 42 [ 480.709371][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 480.720918][ T5913] cp210x 1-1:0.0: device disconnected [ 480.940654][ T1506] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.994455][T16839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4792'. [ 480.994565][T16843] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4794'. [ 481.294128][ T819] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 481.473950][ T819] usb 1-1: Using ep0 maxpacket: 8 [ 481.478107][ T819] usb 1-1: config 0 has no interfaces? [ 481.480445][ T819] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 481.480470][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.480490][ T819] usb 1-1: Product: syz [ 481.480502][ T819] usb 1-1: Manufacturer: syz [ 481.480514][ T819] usb 1-1: SerialNumber: syz [ 481.488574][ T819] usb 1-1: config 0 descriptor?? [ 481.578818][ T1506] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.771027][ T5911] usb 1-1: USB disconnect, device number 43 [ 481.859206][ T5143] Bluetooth: hci3: command tx timeout [ 482.235936][ T1506] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.291652][T16871] netlink: 'syz.6.4807': attribute type 12 has an invalid length. [ 482.291675][T16871] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4807'. [ 482.419299][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4813'. [ 483.053417][T16822] chnl_net:caif_netlink_parms(): no params data found [ 483.941857][ T5143] Bluetooth: hci3: command tx timeout [ 484.689633][T16822] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.690128][T16822] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.690465][T16822] bridge_slave_0: entered allmulticast mode [ 484.735818][T16822] bridge_slave_0: entered promiscuous mode [ 484.901639][T16822] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.902013][T16822] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.902337][T16822] bridge_slave_1: entered allmulticast mode [ 484.947440][T16822] bridge_slave_1: entered promiscuous mode [ 485.189598][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.310145][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.312494][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.344947][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.347198][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 485.634376][ T1506] bridge_slave_1: left allmulticast mode [ 485.634406][ T1506] bridge_slave_1: left promiscuous mode [ 485.634699][ T1506] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.714804][ T1506] bridge_slave_0: left allmulticast mode [ 485.714827][ T1506] bridge_slave_0: left promiscuous mode [ 485.715004][ T1506] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.018239][ T5143] Bluetooth: hci3: command tx timeout [ 486.685999][ T1506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.744526][ T1506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.804559][ T1506] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 486.849870][ T1506] bond0 (unregistering): Released all slaves [ 487.010599][T16822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.051006][T16822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.069400][ T1506] tipc: Disabling bearer [ 487.069882][ T1506] tipc: Left network mode [ 487.285953][T16822] team0: Port device team_slave_0 added [ 487.408973][ T39] INFO: task syz-executor:5825 blocked for more than 143 seconds. [ 487.409099][ T39] Tainted: G L syzkaller #0 [ 487.409112][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.409121][ T39] task:syz-executor state:D stack:21160 pid:5825 tgid:5825 ppid:1 task_flags:0x400140 flags:0x00080002 [ 487.409169][ T39] Call Trace: [ 487.409210][ T39] [ 487.409277][ T39] __schedule+0x169e/0x54f0 [ 487.409434][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 487.409499][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 487.409528][ T39] ? rt_spin_lock+0x1e0/0x400 [ 487.409553][ T39] ? __pfx___schedule+0x10/0x10 [ 487.409610][ T39] ? schedule+0x90/0x360 [ 487.409636][ T39] schedule+0x164/0x360 [ 487.409667][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 487.409741][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 487.409761][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.409792][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 487.409811][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.409873][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 487.409923][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 487.409945][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 487.409972][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 487.409997][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 487.410030][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 487.410053][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 487.410077][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 487.410101][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 487.410126][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 487.410213][ T39] deactivate_locked_super+0xbc/0x130 [ 487.410245][ T39] cleanup_mnt+0x437/0x4d0 [ 487.410267][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.410293][ T39] task_work_run+0x1d9/0x270 [ 487.410322][ T39] ? __pfx_task_work_run+0x10/0x10 [ 487.410349][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.410368][ T39] exit_to_[ 487.410368][ T39] exit_to_user_mode_loop+0xed/0x480 [ 487.410390][ T39] ? rcu_is_watching+0x15/0xb0 [ 487.410468][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.410489][ T39] do_syscall_64+0x33e/0xf80 [ 487.410513][ T39] ? trace_irq_disable+0x3b/0x140 [ 487.410571][ T39] ? clear_bhb_loop+0x40/0x90 [ 487.410594][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.410613][ T39] RIP: 0033:0x7f70a7cbda57 [ 487.410660][ T39] RSP: 002b:00007ffc95082688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 487.410707][ T39] RAX: 0000000000000000 RBX: 00007f70a7d52048 RCX: 00007f70a7cbda57 [ 487.410720][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc95082740 [ 487.410731][ T39] RBP: 00007ffc95082740 R08: 00007ffc95083740 R09: 00000000ffffffff [ 487.410743][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc950837d0 [ 487.410753][ T39] R13: 00007f70a7d52048 R14: 000000000004ef1c R15: 00007ffc95083810 [ 487.410780][ T39] [ 487.410871][ T39] [ 487.410871][ T39] Showing all locks held in the system: [ 487.410909][ T39] 7 locks held by kworker/u8:0/12: [ 487.410954][ T39] #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 487.411070][ T39] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 487.411113][ T39] #2: ffff88806025e310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 487.411170][ T39] #3: ffff88803c1ad120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 487.411221][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 487.411265][ T39] #5: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 487.411332][ T39] #6: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 487.411380][ T39] 1 lock held by khungtaskd/39: [ 487.411391][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 487.411487][ T39] 7 locks held by kworker/u8:2/44: [ 487.411498][ T39] #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 487.411540][ T39] #1: ffffc90000b57c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 487.411583][ T39] #2: ffff888022af0310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 487.411632][ T39] #3: ffff88805114b520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 487.411681][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 487.411723][ T39] #5: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 487.411765][ T39] #6: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 487.411817][ T39] 1 lock held by kworker/u8:6/160: [ 487.411828][ T39] #0: ffff888063111138 ((wq_completion)krds_cp_wq#7/2){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 487.411879][ T39] 2 locks held by kworker/u8:10/1467: [ 487.411889][ T39] #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 487.411931][ T39] #1: ffffc900069afc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 487.411973][ T39] 3 locks held by kworker/u8:13/1506: [ 487.411984][ T39] #0: ffff88801be86138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 487.412038][ T39] #1: ffffc90006a6fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 487.412078][ T39] #2: ffffffff8f793080 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 487.412139][ T39] 2 locks held by dhcpcd/5489: [ 487.412150][ T39] #0: ffff88803db36928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 487.412190][ T39] #1: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 487.412235][ T39] 2 locks held by getty/5582: [ 487.412283][ T39] #0: ffff8880381a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 487.412341][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 487.412390][ T39] 1 lock held by syz-executor/5821: [ 487.412400][ T39] #0: ffffffff8eae6ef8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 487.412485][ T39] 1 lock held by syz-executor/5825: [ 487.412496][ T39] #0: ffff8880297040d0 (&type->s_umount_key#65){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 487.412561][ T39] 1 lock held by syz-executor/16822: [ 487.412571][ T39] #0: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 487.412619][ T39] 2 locks held by syz-executor/16942: [ 487.412629][ T39] #0: ffffffff8f793080 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 487.412677][ T39] #1: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 487.412724][ T39] 1 lock held by syz.1.4846/16954: [ 487.412734][ T39] #0: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 487.412784][ T39] [ 487.412796][ T39] ============================================= [ 487.412796][ T39] [ 487.412843][ T39] NMI backtrace for cpu 0 [ 487.412887][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 487.412912][ T39] Tainted: [L]=SOFTLOCKUP [ 487.412918][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.412929][ T39] Call Trace: [ 487.412944][ T39] [ 487.412952][ T39] dump_stack_lvl+0xe8/0x150 [ 487.412974][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 487.413022][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 487.413078][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 487.413102][ T39] sys_info+0x135/0x170 [ 487.413121][ T39] watchdog+0xfd3/0x1030 [ 487.413184][ T39] ? watchdog+0x1c9/0x1030 [ 487.413208][ T39] kthread+0x388/0x470 [ 487.413230][ T39] ? __pfx_watchdog+0x10/0x10 [ 487.413248][ T39] ? __pfx_kthread+0x10/0x10 [ 487.413270][ T39] ret_from_fork+0x514/0xb70 [ 487.413292][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 487.413311][ T39] ? __switch_to+0xc79/0x1410 [ 487.413338][ T39] ? __pfx_kthread+0x10/0x10 [ 487.413361][ T39] ret_from_fork_asm+0x1a/0x30 [ 487.413396][ T39] [ 487.413403][ T39] Sending NMI from CPU 0 to CPUs 1: [ 487.413447][ C1] NMI backtrace for cpu 1 [ 487.413462][ C1] CPU: 1 UID: 0 PID: 1467 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 487.413482][ C1] Tainted: [L]=SOFTLOCKUP [ 487.413488][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.413497][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 487.413521][ C1] RIP: 0010:__kernel_text_address+0x17/0x30 [ 487.413545][ C1] Code: 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 53 48 89 fb e8 33 00 00 00 48 81 fb 00 80 2d 91 0f 93 c1 <48> 81 fb 70 64 45 91 0f 92 c2 20 ca 08 c2 0f b6 c2 5b e9 c2 02 b5 [ 487.413597][ C1] RSP: 0018:ffffc900069af5b8 EFLAGS: 00000287 [ 487.413610][ C1] RAX: 0000000000000001 RBX: ffffffff816c2e14 RCX: 0000000000000000 [ 487.413621][ C1] RDX: 0000000000000005 RSI: ffffffff8dbfc8cd RDI: ffffffff816c2e14 [ 487.413631][ C1] RBP: ffffc900069af670 R08: ffffc900069afe70 R09: 0000000000000000 [ 487.413641][ C1] R10: ffffc900069af638 R11: fffff52000d35ec9 R12: ffff88802ac91ec0 [ 487.413652][ C1] R13: ffff8880608d2000 R14: dffffc0000000000 R15: 1ffff92000d35ec6 [ 487.413667][ C1] FS: 0000000000000000(0000) GS:ffff888125b64000(0000) knlGS:0000000000000000 [ 487.413679][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.413689][ C1] CR2: 0000555588a7aa28 CR3: 000000000e1b6000 CR4: 00000000003526f0 [ 487.413703][ C1] Call Trace: [ 487.413709][ C1] [ 487.413715][ C1] unwind_get_return_address+0x4d/0x90 [ 487.413762][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.413807][ C1] arch_stack_walk+0xfb/0x150 [ 487.413827][ C1] ? ret_from_fork+0x514/0xb70 [ 487.413844][ C1] stack_trace_save+0xa9/0x100 [ 487.413877][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 487.413892][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 487.413911][ C1] ? stack_depot_save_flags+0x33/0x810 [ 487.413975][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 487.413990][ C1] kasan_save_track+0x3e/0x80 [ 487.414008][ C1] ? kasan_save_track+0x3e/0x80 [ 487.414024][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 487.414041][ C1] ? __kmalloc_node_track_caller_noprof+0x372/0x7e0 [ 487.414129][ C1] ? __alloc_skb+0x2c1/0x7d0 [ 487.414142][ C1] ? nsim_dev_trap_report_work+0x29f/0xbc0 [ 487.414162][ C1] ? process_one_work+0x9a3/0x1710 [ 487.414174][ C1] ? worker_thread+0xba8/0x11e0 [ 487.414187][ C1] ? kthread+0x388/0x470 [ 487.414225][ C1] __kasan_kmalloc+0x93/0xb0 [ 487.414244][ C1] __kmalloc_node_track_caller_noprof+0x372/0x7e0 [ 487.414270][ C1] ? nsim_dev_trap_report_work+0x29f/0xbc0 [ 487.414292][ C1] __alloc_skb+0x2c1/0x7d0 [ 487.414307][ C1] nsim_dev_trap_report_work+0x29f/0xbc0 [ 487.414337][ C1] ? process_one_work+0x8b7/0x1710 [ 487.414350][ C1] process_one_work+0x9a3/0x1710 [ 487.414374][ C1] ? __pfx_process_one_work+0x10/0x10 [ 487.414386][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.414409][ C1] worker_thread+0xba8/0x11e0 [ 487.414435][ C1] kthread+0x388/0x470 [ 487.414451][ C1] ? __pfx_worker_thread+0x10/0x10 [ 487.414465][ C1] ? __pfx_kthread+0x10/0x10 [ 487.414483][ C1] ret_from_fork+0x514/0xb70 [ 487.414498][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 487.414513][ C1] ? __switch_to+0xc79/0x1410 [ 487.414533][ C1] ? __pfx_kthread+0x10/0x10 [ 487.414551][ C1] ret_from_fork_asm+0x1a/0x30 [ 487.414574][ C1] [ 487.558155][ T5143] Bluetooth: hci4: command tx timeout [ 487.624491][T16822] team0: Port device team_slave_1 added [ 487.633193][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 487.633216][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 487.633242][ T39] Tainted: [L]=SOFTLOCKUP [ 487.633248][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.633260][ T39] Call Trace: [ 487.633267][ T39] [ 487.633275][ T39] vpanic+0x56c/0xa60 [ 487.633307][ T39] ? __pfx___schedule+0x10/0x10 [ 487.633332][ T39] ? __pfx_vpanic+0x10/0x10 [ 487.633360][ T39] panic+0xc5/0xd0 [ 487.633378][ T39] ? __pfx_panic+0x10/0x10 [ 487.633400][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 487.633429][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 487.633453][ T39] watchdog+0x102c/0x1030 [ 487.633482][ T39] ? watchdog+0x1c9/0x1030 [ 487.633506][ T39] kthread+0x388/0x470 [ 487.633529][ T39] ? __pfx_watchdog+0x10/0x10 [ 487.633545][ T39] ? __pfx_kthread+0x10/0x10 [ 487.633567][ T39] ret_from_fork+0x514/0xb70 [ 487.633589][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 487.633607][ T39] ? __switch_to+0xc79/0x1410 [ 487.633694][ T39] ? __pfx_kthread+0x10/0x10 [ 487.633717][ T39] ret_from_fork_asm+0x1a/0x30 [ 487.633751][ T39] [ 487.634112][ T39] Kernel Offset: disabled