last executing test programs: 4m11.20476268s ago: executing program 1 (id=433): connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0xc000, @local}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0x13) 4m10.99772835s ago: executing program 1 (id=437): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002b40)=""/4139, 0x102b}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001500)=""/56, 0x38}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000001580)=""/189, 0xbd}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/62, 0x3e}, {&(0x7f0000002680)=""/135, 0x87}, {&(0x7f0000002740)=""/74, 0x4a}, {&(0x7f00000027c0)=""/124, 0x7c}, {&(0x7f0000002840)=""/87, 0x57}, {&(0x7f00000028c0)=""/254, 0xfe}], 0xa}, 0x10140) 4m10.812692346s ago: executing program 1 (id=440): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 4m10.670083515s ago: executing program 1 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 4m10.535164817s ago: executing program 1 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4m9.24353065s ago: executing program 1 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', 0x0, 0x0) 4m8.896046898s ago: executing program 32 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', 0x0, 0x0) 2m32.208287669s ago: executing program 4 (id=1318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100299c499891cf58712900000008000300", @ANYRES32=r2, @ANYBLOB="1c002f800c"], 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) 2m31.874740218s ago: executing program 4 (id=1321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001240)=""/155, 0x9b}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f00000028c0)=""/169, 0xa9}, {&(0x7f0000000840)=""/190, 0xbe}, {&(0x7f0000002f40)=""/4072, 0xfe8}, {&(0x7f00000000c0)=""/147, 0x93}, {&(0x7f00000011c0)=""/107, 0x6b}], 0x7}, 0x401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f80)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x10080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 2m30.699331217s ago: executing program 4 (id=1332): r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 2m30.349553806s ago: executing program 4 (id=1333): syz_open_dev$dri(0x0, 0xd21, 0xd0a01) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 2m30.047505096s ago: executing program 4 (id=1336): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m29.927245434s ago: executing program 4 (id=1338): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m14.723519258s ago: executing program 33 (id=1338): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m45.175655017s ago: executing program 2 (id=1842): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @hci_rp_read_local_name={{0x1}, {0xc, "f66de1c0f6e14a3d217b83f1bde91ecbfcdb69defc81eefd8afd951824e425ff2dbb4dc8e66761df662d38eb9ba0352b097ed1a9c76c8bc5914c333e9bb7de0c2641598beadd9c7ebc5ff50f07e72906664d08757be01d6af1880eff95ac8782f7d68377d8f274d4b593b843c49cfa0b3bae19dda148a736659daeec48ecec8a3905f5aa564459d63c060ccd273a2ccdc094287bbf444f8865bb9f15f5b209964279cb1bbe3d0f26b33db15749557954ed34ed4e13e294f09559732e99590892dc9046b4fea12082127a3315237079e3212f853d2b38e028dc905541d1bc3eeb08b759c6e64f0f69ae60db35cece40a677d22b3c713536f7"}}}}, 0x66) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x5, 0x20000000) socket$nl_rdma(0x10, 0x3, 0x14) 1m44.25126908s ago: executing program 2 (id=1853): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000440)={0x14, 0x0, 0x0}, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)={0x0, 0x8, 0x96, "013d94b0128bd026711bc1ad70b7974c454334564c119320e356ed6cc21252108b9605732d77d80088e678868813a2b17e5a8c5b878697e94c1b4023fe7df5d0f359f6bd886cb62d1a1ab6513aaf2b808573117dd11fea25264de8bee7fcca1b5b0141f4e160706cafb46b0d03ad2a5b300a503236c667b87babe6f964861d66f633d246bff5e422e31a6d59c6e130d9ef5777486a04"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) dup(0xffffffffffffffff) 1m41.167963602s ago: executing program 2 (id=1875): setresgid(0x0, 0x0, 0xee01) r0 = getpgrp(0x0) r1 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) 1m40.930419814s ago: executing program 2 (id=1878): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b15, 0x0) 1m39.388647794s ago: executing program 2 (id=1884): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 1m39.257975777s ago: executing program 2 (id=1887): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sync() 1m24.011522857s ago: executing program 34 (id=1887): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sync() 13.898341275s ago: executing program 6 (id=2943): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000040)="be9b5683", 0x4) 13.753013922s ago: executing program 6 (id=2936): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x138, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x100, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc}]}, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 13.650111871s ago: executing program 6 (id=2939): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x6}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 13.474981944s ago: executing program 6 (id=2945): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 13.352852874s ago: executing program 6 (id=2948): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x638, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0x7}], 0x1, 0x40000120, 0x0) 12.016958873s ago: executing program 6 (id=2963): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 11.337226292s ago: executing program 35 (id=2963): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 1.591913731s ago: executing program 5 (id=3049): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 1.486860641s ago: executing program 5 (id=3052): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) 1.289147918s ago: executing program 0 (id=3054): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x1f62, @empty, 0x401}}}, 0x90) 1.270529271s ago: executing program 3 (id=3055): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') 1.080590368s ago: executing program 0 (id=3056): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x140, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) creat(&(0x7f0000000240)='./file0\x00', 0x122) 1.075901203s ago: executing program 5 (id=3057): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003480)="c0", 0x1}], 0x1}, 0x4000) close(r0) sendmsg$inet(r1, &(0x7f0000004840)={0x0, 0x0, 0x0}, 0x0) 1.021519813s ago: executing program 3 (id=3058): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 931.141052ms ago: executing program 5 (id=3059): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) 825.690652ms ago: executing program 5 (id=3060): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x1, 0x3) 781.126816ms ago: executing program 0 (id=3061): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@hyper, 0x5}, {@host, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) 662.707654ms ago: executing program 5 (id=3062): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x130, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xfc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 468.988936ms ago: executing program 0 (id=3063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4000009c}]}) 468.850844ms ago: executing program 3 (id=3064): connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 399.440991ms ago: executing program 3 (id=3065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 307.240998ms ago: executing program 3 (id=3066): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000280)={0xc}) 148.778308ms ago: executing program 0 (id=3067): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) 148.632506ms ago: executing program 3 (id=3068): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0xdce5b3ee03f28899, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x8000) 0s ago: executing program 0 (id=3069): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x0, 0x4}, 'port1\x00', 0xf6, 0x11cfa, 0x100, 0x5, 0x3, 0x1008, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) kernel console output (not intermixed with test programs): interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.668675][ T37] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.668696][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.871572][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.052167][ T37] usb 1-1: GET_CAPABILITIES returned 0 [ 224.052210][ T37] usbtmc 1-1:16.0: can't read capabilities [ 224.269704][ T38] audit: type=1800 audit(1776366008.726:32): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1299" name=6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0 dev="tmpfs" ino=17 res=0 errno=0 [ 224.317589][ T37] usb 1-1: USB disconnect, device number 17 [ 224.565388][ T5161] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 224.611442][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.655646][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.689028][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.689229][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.723359][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.723520][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.888394][ T5161] usb 5-1: USB disconnect, device number 8 [ 225.720104][ T9213] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.086309][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.305670][ T9232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.305958][ T9232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.332971][ T9232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.333682][ T9232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.333762][ T9232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 226.410197][ T37] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.410448][ T37] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.410678][ T37] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.410915][ T37] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.410930][ T37] rtc rtc0: __rtc_set_alarm: err=-22 [ 226.665759][ T9232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 226.807968][ T8837] veth0_vlan: entered promiscuous mode [ 226.868720][ T5827] Bluetooth: hci1: connection err: -111 [ 226.884854][ T8837] veth1_vlan: entered promiscuous mode [ 227.218140][ T8837] veth0_macvtap: entered promiscuous mode [ 227.255705][ T8837] veth1_macvtap: entered promiscuous mode [ 227.375202][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 227.413836][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.445331][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.558606][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.561684][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.562462][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.562652][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.347168][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.347316][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.357696][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.358179][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.846145][ T9280] block nbd1: server does not support multiple connections per device. [ 228.847827][ T9280] block nbd1: shutting down sockets [ 229.124771][ T1240] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 229.167042][ T1515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.167060][ T1515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.301154][ T1515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.301172][ T1515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.347694][ T1240] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 229.347724][ T1240] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 229.347744][ T1240] usb 1-1: Product: syz [ 229.354161][ T1240] usb 1-1: config 0 descriptor?? [ 229.425412][ T1240] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 229.442436][ T1240] usb 1-1: Detected FT232H [ 229.608338][ T1240] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 230.084154][ T1240] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 230.095862][ T1240] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.111655][ T5898] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 230.136541][ T1240] usb 1-1: USB disconnect, device number 18 [ 230.146537][ T1240] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 230.147346][ T1240] ftdi_sio 1-1:0.0: device disconnected [ 230.286440][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.286473][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.286504][ T5898] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 230.286516][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.289437][ T5898] usb 4-1: config 0 descriptor?? [ 230.427023][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.525502][ T38] audit: type=1326 audit(1776366014.966:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce0a9c819 code=0x7fc00000 [ 230.724751][ T5898] kye 0003:0458:5016.0019: control desc unexpectedly large [ 230.780836][ T5898] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0019/input/input19 [ 231.062029][ T5898] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0019/input/input20 [ 231.369444][ T5898] kye 0003:0458:5016.0019: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 231.433148][ T9326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1352'. [ 231.443684][ T9326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1352'. [ 231.639712][ T5161] usb 4-1: USB disconnect, device number 13 [ 231.903438][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 232.211656][ T9351] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1364'. [ 232.336222][ T9357] mmap: syz.0.1365 (9357) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 232.521956][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.662103][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1371'. [ 232.662218][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1371'. [ 233.084741][ T5161] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 233.281914][ T5161] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 233.281941][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.281959][ T5161] usb 4-1: Product: syz [ 233.281971][ T5161] usb 4-1: Manufacturer: syz [ 233.281982][ T5161] usb 4-1: SerialNumber: syz [ 233.354267][ T5161] usb 4-1: config 0 descriptor?? [ 233.368099][ T5161] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 014 [ 233.585492][ T1240] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 233.749043][ T1240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 233.749085][ T1240] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 233.749105][ T1240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.760899][ T1240] usb 1-1: config 0 descriptor?? [ 233.789432][ T5161] (null): failure reading functionality [ 233.796185][ T9398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 233.881563][ T5161] i2c i2c-1: connected i2c-tiny-usb device [ 234.066720][ T5161] usb 4-1: USB disconnect, device number 14 [ 234.248637][ T1240] hid (null): global environment stack underflow [ 234.283392][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283427][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283448][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283472][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283495][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283519][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283542][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283565][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283588][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.283612][ T1240] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 234.300316][ T1240] asus 0003:0B05:1ABE.001A: global environment stack underflow [ 234.300345][ T1240] asus 0003:0B05:1ABE.001A: item 0 1 1 11 parsing failed [ 234.311423][ T1240] asus 0003:0B05:1ABE.001A: Asus hid parse failed: -22 [ 234.311530][ T1240] asus 0003:0B05:1ABE.001A: probe with driver asus failed with error -22 [ 234.484827][ T5836] usb 1-1: USB disconnect, device number 19 [ 236.020431][ T1240] hid-generic 0006:0004:0009.001B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 236.196142][ T9479] fido_id[9479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 237.038662][ T9510] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1423'. [ 237.465453][ T5161] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 237.614708][ T5161] usb 3-1: Using ep0 maxpacket: 16 [ 237.616959][ T5161] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 237.616991][ T5161] usb 3-1: config 0 interface 0 has no altsetting 0 [ 237.617022][ T5161] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 237.617043][ T5161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.667283][ T5161] usb 3-1: config 0 descriptor?? [ 238.122469][ T5161] greenasia 0003:0E8F:0012.001C: invalid report_size 12084 [ 238.122493][ T5161] greenasia 0003:0E8F:0012.001C: item 0 2 1 7 parsing failed [ 238.123333][ T5161] greenasia 0003:0E8F:0012.001C: parse failed [ 238.123403][ T5161] greenasia 0003:0E8F:0012.001C: probe with driver greenasia failed with error -22 [ 238.288063][ T61] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 238.334314][ T5836] usb 3-1: USB disconnect, device number 23 [ 238.943378][ T9551] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.1441'. [ 239.483886][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 239.510014][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 239.554761][ T1240] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 239.704709][ T1240] usb 4-1: Using ep0 maxpacket: 32 [ 239.707415][ T1240] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 239.707441][ T1240] usb 4-1: config 0 has no interface number 0 [ 239.707484][ T1240] usb 4-1: config 0 interface 12 has no altsetting 0 [ 239.713686][ T1240] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 239.713714][ T1240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.713733][ T1240] usb 4-1: Product: syz [ 239.713747][ T1240] usb 4-1: Manufacturer: syz [ 239.713760][ T1240] usb 4-1: SerialNumber: syz [ 239.781719][ T1240] usb 4-1: config 0 descriptor?? [ 239.815437][ T5161] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 240.004788][ T5161] usb 1-1: Using ep0 maxpacket: 8 [ 240.010641][ T5161] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 240.010670][ T5161] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 240.010689][ T5161] usb 1-1: Product: syz [ 240.010703][ T5161] usb 1-1: Manufacturer: syz [ 240.010716][ T5161] usb 1-1: SerialNumber: syz [ 240.017918][ T5161] usb 1-1: config 0 descriptor?? [ 240.069611][ T5161] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 240.653107][ T1240] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 240.653168][ T1240] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 240.653185][ T1240] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 240.653270][ T1240] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 240.694255][ T5161] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 240.724210][ T1240] usb 4-1: USB disconnect, device number 15 [ 240.961358][ T5161] usb 1-1: USB disconnect, device number 20 [ 241.381396][ T9584] C: renamed from team_slave_0 (while UP) [ 241.450656][ T9584] netlink: 'syz.3.1454': attribute type 1 has an invalid length. [ 241.450677][ T9584] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1454'. [ 243.163055][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.227174][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.494918][ T5836] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 243.674878][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 243.678172][ T5836] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.678206][ T5836] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 243.678232][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0 [ 243.678265][ T5836] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 243.678287][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.746513][ T5836] usb 1-1: config 0 descriptor?? [ 243.865556][ T9649] netlink: 'syz.2.1483': attribute type 1 has an invalid length. [ 243.865742][ T9649] netlink: 'syz.2.1483': attribute type 2 has an invalid length. [ 243.865758][ T9649] netlink: 'syz.2.1483': attribute type 1 has an invalid length. [ 243.865770][ T9649] netlink: 'syz.2.1483': attribute type 3 has an invalid length. [ 243.865782][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 244.164028][ T5836] hid_parser_main: 326 callbacks suppressed [ 244.164050][ T5836] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 244.164081][ T5836] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 244.164106][ T5836] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 244.164132][ T5836] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 244.164157][ T5836] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 244.272485][ T5836] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 244.272738][ T5836] hid-thrustmaster 0003:044F:B65D.001D: setup data couldn't be sent [ 244.398122][ C0] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -71 [ 244.400892][ T5964] usb 1-1: USB disconnect, device number 21 [ 244.603819][ T9653] fido_id[9653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 245.001995][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.034921][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.037921][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.040776][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.042499][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.413574][ T9693] overlay: filesystem on ./file0 is read-only [ 247.009464][ T9667] chnl_net:caif_netlink_parms(): no params data found [ 247.233435][ T61] Bluetooth: hci4: command tx timeout [ 247.554370][ T9667] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.558246][ T9667] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.558551][ T9667] bridge_slave_0: entered allmulticast mode [ 247.562271][ T9667] bridge_slave_0: entered promiscuous mode [ 247.609674][ T9667] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.610022][ T9667] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.610310][ T9667] bridge_slave_1: entered allmulticast mode [ 247.622393][ T9667] bridge_slave_1: entered promiscuous mode [ 247.734713][ T818] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 247.998826][ T9667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.003729][ T9667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.036906][ T818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.047136][ T818] usb 4-1: string descriptor 0 read error: -22 [ 248.047248][ T818] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 248.047269][ T818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.208642][ T818] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.208680][ T818] usb 4-1: MIDIStreaming interface descriptor not found [ 248.653674][ T9667] team0: Port device team_slave_0 added [ 248.730523][ T9667] team0: Port device team_slave_1 added [ 249.109151][ T818] usb 4-1: USB disconnect, device number 16 [ 249.203720][ T9754] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 249.212309][ T9667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.212324][ T9667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.212348][ T9667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.234242][ T9667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.234257][ T9667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.234279][ T9667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.316637][ T61] Bluetooth: hci4: command tx timeout [ 249.498903][ T9757] loop8: detected capacity change from 0 to 1 [ 249.532312][ T9760] tipc: Enabling of bearer rejected, already enabled [ 249.609845][ T9757] Dev loop8: unable to read RDB block 1 [ 249.609886][ T9757] loop8: unable to read partition table [ 249.610062][ T9757] loop8: partition table beyond EOD, truncated [ 249.610110][ T9757] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 249.876922][ T9667] hsr_slave_0: entered promiscuous mode [ 249.882807][ T9667] hsr_slave_1: entered promiscuous mode [ 249.897974][ T9667] debugfs: 'hsr0' already exists in 'hsr' [ 249.897997][ T9667] Cannot create hsr debugfs directory [ 250.818694][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1541'. [ 251.390800][ T61] Bluetooth: hci4: command tx timeout [ 251.433442][ T9813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1550'. [ 251.731158][ T9667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.820661][ T9667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.821602][ T9667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.860620][ T9667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.861357][ T9667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.981146][ T9667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.983364][ T9667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.118611][ T9667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.203974][ T9836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1561'. [ 252.664480][ T9667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.771262][ T9667] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.815943][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.816077][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.871714][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.871801][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.464915][ T61] Bluetooth: hci4: command tx timeout [ 253.734535][ T9667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.060423][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 254.752810][ T9667] veth0_vlan: entered promiscuous mode [ 254.849207][ T9667] veth1_vlan: entered promiscuous mode [ 254.866201][ T9924] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 254.866415][ T9924] syzkaller1: linktype set to 786 [ 255.246970][ T32] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 255.324940][ T9667] veth0_macvtap: entered promiscuous mode [ 255.380977][ T9667] veth1_macvtap: entered promiscuous mode [ 255.414424][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.414457][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.414496][ T32] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 255.414518][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.448722][ T9667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.477562][ T32] usb 1-1: config 0 descriptor?? [ 255.481742][ T9667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.509191][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 255.509216][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1605'. [ 255.632666][ T3515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.633834][ T3515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.640702][ T3515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.664338][ T3515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.834053][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.834201][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.968991][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969024][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969044][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969064][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969085][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969105][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969128][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969149][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969170][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969191][ T32] kye 0003:0458:0138.001E: unknown main item tag 0x0 [ 255.969614][ T32] kye 0003:0458:0138.001E: collection stack underflow [ 255.969634][ T32] kye 0003:0458:0138.001E: item 0 0 0 12 parsing failed [ 255.970265][ T32] kye 0003:0458:0138.001E: parse failed [ 255.970328][ T32] kye 0003:0458:0138.001E: probe with driver kye failed with error -22 [ 256.174718][ T1240] usb 1-1: USB disconnect, device number 22 [ 256.495051][ T5834] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 256.724798][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 256.743154][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.743186][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 256.748951][ T5834] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 256.748978][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.748997][ T5834] usb 4-1: Product: syz [ 256.749009][ T5834] usb 4-1: Manufacturer: syz [ 256.749021][ T5834] usb 4-1: SerialNumber: syz [ 256.846754][ T5834] usb 4-1: config 0 descriptor?? [ 257.180045][ T5834] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 257.367339][ T1364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.367357][ T1364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.566127][ T5834] rc_core: IR keymap rc-imon-pad not found [ 257.566146][ T5834] Registered IR keymap rc-empty [ 257.566280][ T5834] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 257.566297][ T5834] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 257.622238][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.622258][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.701969][ T9974] Zero length message leads to an empty skb [ 257.702655][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1617'. [ 257.783150][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 257.787286][ T5834] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 257.924067][ T5834] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 257.941195][ T5834] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:17> initialized [ 257.971617][ T5834] usb 4-1: USB disconnect, device number 17 [ 258.213269][ T9988] tap1: tun_chr_ioctl cmd 1074025678 [ 258.213291][ T9988] tap1: group set to 21 [ 259.323311][T10031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.139733][ T38] audit: type=1800 audit(1776366300.600:34): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1651" name="file0" dev="tmpfs" ino=2422 res=0 errno=0 [ 260.260828][T10056] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1654'. [ 260.467695][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1657'. [ 260.701834][T10071] sp0: Synchronizing with TNC [ 260.845133][ T5161] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 260.994706][ T5161] usb 3-1: Using ep0 maxpacket: 8 [ 260.996807][ T5161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.996837][ T5161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.996874][ T5161] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 260.996897][ T5161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.050037][ T5161] usb 3-1: config 0 descriptor?? [ 261.489273][ T5161] cherry 0003:046A:0027.001F: fixing up Cherry Cymotion report descriptor [ 261.496857][ T5161] hid_parser_main: 45 callbacks suppressed [ 261.496881][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x2 [ 261.496914][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.496940][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.496965][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.496991][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.497015][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.497040][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.497065][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.497090][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.497114][ T5161] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 261.628347][ T5161] cherry 0003:046A:0027.001F: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 261.705812][ T5161] usb 3-1: USB disconnect, device number 24 [ 261.755352][T10100] fido_id[10100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 262.510040][T10125] binder: 10124:10125 ioctl c018620c 200000000280 returned -1 [ 262.573976][T10127] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 262.574019][T10127] netlink: 'syz.0.1685': attribute type 2 has an invalid length. [ 262.574032][T10127] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 262.646030][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 262.689295][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 262.689335][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 262.752977][T10133] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1689'. [ 262.804738][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 262.820046][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 262.820076][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 262.820094][ T9] usb 4-1: Product: syz [ 262.820108][ T9] usb 4-1: Manufacturer: syz [ 262.820120][ T9] usb 4-1: SerialNumber: syz [ 262.984439][ T9] usb 4-1: config 0 descriptor?? [ 263.016075][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 263.211626][ T9] gspca_sn9c2028: read1 error -32 [ 263.212416][ T9] gspca_sn9c2028: read1 error -32 [ 263.426441][ T9] usb 4-1: USB disconnect, device number 18 [ 263.875444][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'. [ 264.364697][ T32] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 264.522124][ T32] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 264.522153][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.522173][ T32] usb 6-1: Product: syz [ 264.522187][ T32] usb 6-1: Manufacturer: syz [ 264.522200][ T32] usb 6-1: SerialNumber: syz [ 264.567427][ T5161] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 264.777654][ T5161] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.777683][ T5161] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.777721][ T5161] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.777742][ T5161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.967703][ T32] rtl8150 6-1:1.0: couldn't reset the device [ 264.968178][ T32] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 265.007665][ T32] usb 6-1: USB disconnect, device number 2 [ 265.015266][ T5161] usb 3-1: GET_CAPABILITIES returned 0 [ 265.015307][ T5161] usbtmc 3-1:16.0: can't read capabilities [ 265.237845][ T32] usb 3-1: USB disconnect, device number 25 [ 268.574721][ T32] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 268.727271][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 268.740241][ T32] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.740271][ T32] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.740294][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.740336][ T32] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 268.740357][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.763669][ T32] usb 4-1: config 0 descriptor?? [ 268.847529][ T38] audit: type=1400 audit(1776366565.294:35): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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ead loop on virtual device ip6_vti0 (net 92), fix it urgently! [ 269.436690][ T32] usb 4-1: language id specifier not provided by device, defaulting to English [ 269.656877][ T32] uclogic 0003:5543:3031.0020: failed retrieving Huion firmware version: -71 [ 269.656927][ T32] uclogic 0003:5543:3031.0020: failed probing parameters: -71 [ 269.657020][ T32] uclogic 0003:5543:3031.0020: probe with driver uclogic failed with error -71 [ 269.670695][ T32] usb 4-1: USB disconnect, device number 19 [ 270.136500][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 270.165153][T10362] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1794'. [ 270.279199][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 270.295328][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 270.297111][ T9] usb 1-1: config 0 has no interfaces? [ 270.299088][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 270.299114][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.299130][ T9] usb 1-1: Product: syz [ 270.299148][ T9] usb 1-1: Manufacturer: syz [ 270.299160][ T9] usb 1-1: SerialNumber: syz [ 270.353196][ T9] usb 1-1: config 0 descriptor?? [ 270.562290][ T32] usb 1-1: USB disconnect, device number 23 [ 270.750995][T10381] netlink: 'syz.5.1804': attribute type 83 has an invalid length. [ 271.054765][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 271.249910][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 271.249942][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.276760][ T9] usb 6-1: config 0 descriptor?? [ 271.290478][ T9] cp210x 6-1:0.0: cp210x converter detected [ 271.512178][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 271.899879][T10413] netlink: 'syz.0.1815': attribute type 83 has an invalid length. [ 272.204723][ T32] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 272.251678][ T61] Bluetooth: hci2: unexpected cc 0x0c14 length: 96 < 249 [ 272.251709][ T61] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 272.385519][ T32] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 272.385545][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.386086][ T32] usb 1-1: Product: syz [ 272.386101][ T32] usb 1-1: Manufacturer: syz [ 272.386113][ T32] usb 1-1: SerialNumber: syz [ 272.412167][ T32] usb 1-1: config 0 descriptor?? [ 272.441942][ T32] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 273.249846][ T9] usb 1-1: USB disconnect, device number 24 [ 273.854412][ T61] Bluetooth: hci1: unexpected cc 0x0c14 length: 96 < 249 [ 273.854443][ T61] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 273.900837][ T5161] usb 6-1: USB disconnect, device number 3 [ 273.928611][ T5161] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 273.933946][ T5161] cp210x 6-1:0.0: device disconnected [ 274.454896][ T5161] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 274.604689][ T5161] usb 1-1: Using ep0 maxpacket: 16 [ 274.607359][ T5161] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.607390][ T5161] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.607410][ T5161] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 274.607435][ T5161] usb 1-1: config 0 interface 0 has no altsetting 0 [ 274.607461][ T5161] usb 1-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 274.607472][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.610656][ T5161] usb 1-1: config 0 descriptor?? [ 275.020660][ T5161] hid (null): invalid report_count 1039603638 [ 275.020683][ T5161] hid (null): report_id 0 is invalid [ 275.040002][ T5834] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 275.043984][ T5161] hid_parser_main: 40 callbacks suppressed [ 275.044006][ T5161] nintendo 0003:057E:201E.0021: unknown main item tag 0x0 [ 275.044035][ T5161] nintendo 0003:057E:201E.0021: unknown main item tag 0x0 [ 275.044059][ T5161] nintendo 0003:057E:201E.0021: unknown main item tag 0x0 [ 275.044082][ T5161] nintendo 0003:057E:201E.0021: unknown main item tag 0x0 [ 275.044105][ T5161] nintendo 0003:057E:201E.0021: unknown main item tag 0x0 [ 275.044128][ T5161] nintendo 0003:057E:201E.0021: unknown main item tag 0x0 [ 275.044201][ T5161] nintendo 0003:057E:201E.0021: invalid report_count 1039603638 [ 275.044216][ T5161] nintendo 0003:057E:201E.0021: item 0 4 1 9 parsing failed [ 275.046273][ T5161] nintendo 0003:057E:201E.0021: HID parse failed [ 275.095127][ T5161] nintendo 0003:057E:201E.0021: probe - fail = -22 [ 275.095248][ T5161] nintendo 0003:057E:201E.0021: probe with driver nintendo failed with error -22 [ 275.209546][T10502] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1855'. [ 275.248640][ T5834] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.248671][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.257589][ T818] usb 1-1: USB disconnect, device number 25 [ 275.337131][ T5834] usb 3-1: config 0 descriptor?? [ 275.340475][ T5834] cp210x 3-1:0.0: cp210x converter detected [ 275.387587][T10504] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1856'. [ 275.558479][ T5834] usb 3-1: cp210x converter now attached to ttyUSB0 [ 276.114815][ T818] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 276.275785][ T818] usb 1-1: Using ep0 maxpacket: 8 [ 276.286470][ T818] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 276.286523][ T818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.286544][ T818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.286567][ T818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.286589][ T818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.286627][ T818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.286647][ T818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.519829][ T818] usb 1-1: GET_CAPABILITIES returned 0 [ 276.519857][ T818] usbtmc 1-1:16.0: can't read capabilities [ 276.714679][ T5834] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 276.737707][ T818] usb 1-1: USB disconnect, device number 26 [ 276.904471][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 276.914702][ T5834] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 276.914746][ T5834] usb 4-1: can't read configurations, error -71 [ 277.696110][T10541] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1872'. [ 277.707005][T10544] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1871'. [ 277.800234][ T5836] usb 3-1: USB disconnect, device number 26 [ 277.843478][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 277.844162][ T5836] cp210x 3-1:0.0: device disconnected [ 278.174777][ T818] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 278.325498][ T818] usb 6-1: Using ep0 maxpacket: 16 [ 278.327097][ T818] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.327128][ T818] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.327142][ T818] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 278.327155][ T818] usb 6-1: config 0 interface 0 has no altsetting 0 [ 278.327173][ T818] usb 6-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 278.327186][ T818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.333111][ T818] usb 6-1: config 0 descriptor?? [ 278.374715][ T5836] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 278.524743][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 278.527491][ T5836] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 278.527524][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.527548][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.527583][ T5836] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.527618][ T5836] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.527639][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.545155][ T32] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 278.699782][ T32] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.699807][ T32] usb 1-1: config 0 has no interface number 0 [ 278.716374][ T32] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 278.716403][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.716807][ T32] usb 1-1: Product: syz [ 278.716822][ T32] usb 1-1: Manufacturer: syz [ 278.716835][ T32] usb 1-1: SerialNumber: syz [ 278.736344][ T32] usb 1-1: config 0 descriptor?? [ 278.771142][ T5836] usb 3-1: GET_CAPABILITIES returned 0 [ 278.771185][ T5836] usbtmc 3-1:16.0: can't read capabilities [ 278.808639][ T818] hid (null): invalid report_count 1039603638 [ 278.808662][ T818] hid (null): report_id 0 is invalid [ 278.876476][ T818] nintendo 0003:057E:201E.0022: unknown main item tag 0x0 [ 278.876500][ T818] nintendo 0003:057E:201E.0022: unknown main item tag 0x0 [ 278.876518][ T818] nintendo 0003:057E:201E.0022: unknown main item tag 0x0 [ 278.876532][ T818] nintendo 0003:057E:201E.0022: unknown main item tag 0x0 [ 278.876628][ T818] nintendo 0003:057E:201E.0022: invalid report_count 1039603638 [ 278.876638][ T818] nintendo 0003:057E:201E.0022: item 0 4 1 9 parsing failed [ 278.877204][ T818] nintendo 0003:057E:201E.0022: HID parse failed [ 278.913944][ T818] nintendo 0003:057E:201E.0022: probe - fail = -22 [ 278.914115][ T818] nintendo 0003:057E:201E.0022: probe with driver nintendo failed with error -22 [ 279.001566][ T32] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 279.024299][ T5836] usb 3-1: USB disconnect, device number 27 [ 279.064475][ T5964] usb 6-1: USB disconnect, device number 4 [ 279.136492][ T32] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.136832][ T32] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 279.136908][ T32] usb 1-1: media controller created [ 279.168459][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.265956][ T32] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 279.303474][ T32] usb 1-1: USB disconnect, device number 27 [ 279.800590][T10577] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1888'. [ 280.237280][T10586] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.240708][T10586] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.279264][T10586] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 280.279426][T10586] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.279573][T10586] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.279660][T10586] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 280.357759][T10586] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 280.415061][ T61] Bluetooth: hci3: connection err: -111 [ 280.465230][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'. [ 280.724802][ T5836] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 280.857408][T10603] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 280.905162][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 280.923498][ T5836] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 280.923531][ T5836] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 280.923554][ T5836] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.923571][ T5836] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.923592][ T5836] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.923604][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.114999][ T5964] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 281.222555][ T5836] usb 4-1: GET_CAPABILITIES returned 0 [ 281.222584][ T5836] usbtmc 4-1:16.0: can't read capabilities [ 281.266364][ T5964] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.266390][ T5964] usb 6-1: config 0 has no interface number 0 [ 281.268579][ T5964] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 281.268607][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.268620][ T5964] usb 6-1: Product: syz [ 281.268627][ T5964] usb 6-1: Manufacturer: syz [ 281.268634][ T5964] usb 6-1: SerialNumber: syz [ 281.271945][ T5964] usb 6-1: config 0 descriptor?? [ 281.341049][ T5161] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 281.341288][ T5161] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 281.341484][ T5161] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 281.341670][ T5161] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 281.341680][ T5161] rtc rtc0: __rtc_set_alarm: err=-22 [ 281.432865][ T5836] usb 4-1: USB disconnect, device number 22 [ 281.481738][ T5964] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 281.507384][ T5964] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.507749][ T5964] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 281.507778][ T5964] usb 6-1: media controller created [ 281.522096][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.270774][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.276020][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.347672][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.347735][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.347764][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 282.515029][T10625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.515229][T10625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.515414][T10625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 282.515589][T10625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.515786][T10625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 282.520698][ T5842] Bluetooth: hci2: connection err: -111 [ 282.585520][ T5964] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 282.637787][T10628] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1920'. [ 282.746767][ T5964] usb 6-1: USB disconnect, device number 5 [ 283.400613][T10645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1927'. [ 283.904973][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'. [ 284.177616][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 284.504872][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.586368][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 284.586377][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.586412][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 284.586417][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.586441][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 284.669846][ T5897] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 284.669876][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 284.669896][ T5897] usb 4-1: Product: syz [ 284.673294][ T5897] usb 4-1: config 0 descriptor?? [ 284.706108][ T5897] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 284.707520][ T5897] usb 4-1: Detected FT232H [ 284.879872][ T5897] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 284.959577][ T38] audit: type=1326 audit(1776366581.414:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c92dcc819 code=0x7fc00000 [ 285.282383][ T5897] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 285.300206][ T5897] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 285.316687][ T5897] usb 4-1: USB disconnect, device number 23 [ 285.339011][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 285.339758][ T5897] ftdi_sio 4-1:0.0: device disconnected [ 285.890019][ T38] audit: type=1326 audit(1776366582.354:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10692 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cc5c819 code=0x7fc00000 [ 285.979049][T10711] loop5: detected capacity change from 0 to 7 [ 286.313620][T10711] Dev loop5: unable to read RDB block 7 [ 286.313647][T10711] loop5: unable to read partition table [ 286.313777][T10711] loop5: partition table beyond EOD, truncated [ 286.313802][T10711] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 286.664693][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 288.453037][T10773] virtiofs: Unknown parameter 'always 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 18 nlmon0 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 20 batadv0 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 21 vxcan0 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 22 vxcan1 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 23 veth0 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 24 veth1 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 25 wg0 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 26 wg1 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 27 wg2 : 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 28 veth0_to_bridge: 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 29 bridge_slave_0: 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 30 veth1_to_bridge: 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 31 bridge_slave_1: 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 32 veth0_to_bond: 1 V3 [ 288.453037][T10773] 010000E0 1 0:00000000 0 [ 288.453037][T10773] 33 bond_slave_0: 1 V3 [ 288.453037][T10773] 010000E0 1 0:0 [ 288.959131][T10787] input: syz0 as /devices/virtual/input/input24 [ 289.842959][T10816] netlink: 14478 bytes leftover after parsing attributes in process `syz.5.2000'. [ 289.972421][T10822] tipc: Enabling of bearer rejected, already enabled [ 290.148383][T10831] virtiofs: Unknown parameter 'always 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 18 nlmon0 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 20 batadv0 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 21 vxcan0 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 22 vxcan1 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 23 veth0 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 24 veth1 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 25 wg0 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 26 wg1 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 27 wg2 : 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 28 veth0_to_bridge: 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 29 bridge_slave_0: 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 30 veth1_to_bridge: 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 31 bridge_slave_1: 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 32 veth0_to_bond: 1 V3 [ 290.148383][T10831] 010000E0 1 0:00000000 0 [ 290.148383][T10831] 33 bond_slave_0: 1 V3 [ 290.148383][T10831] 010000E0 1 0:0 [ 290.474689][ T818] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 290.627995][ T818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.628026][ T818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.628062][ T818] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 290.628082][ T818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.633208][ T818] usb 1-1: config 0 descriptor?? [ 291.081045][ T818] kye 0003:0458:5016.0023: control desc unexpectedly large [ 291.093098][ T818] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0023/input/input25 [ 291.238769][ T818] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0023/input/input26 [ 291.366799][T10846] tipc: Started in network mode [ 291.366826][T10846] tipc: Node identity ac14140f, cluster identity 4711 [ 291.377999][T10846] tipc: New replicast peer: 255.255.255.255 [ 291.427373][ T818] kye 0003:0458:5016.0023: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 291.541774][T10846] tipc: Enabled bearer , priority 10 [ 291.662933][ T5897] usb 1-1: USB disconnect, device number 28 [ 292.055894][ T5161] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 292.204772][ T5161] usb 4-1: Using ep0 maxpacket: 8 [ 292.208864][ T5161] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 292.208892][ T5161] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 292.208910][ T5161] usb 4-1: Product: syz [ 292.208921][ T5161] usb 4-1: Manufacturer: syz [ 292.208930][ T5161] usb 4-1: SerialNumber: syz [ 292.212364][ T5161] usb 4-1: config 0 descriptor?? [ 292.219515][ T5161] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 292.265722][ T5834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 292.430117][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 292.430165][ T5834] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 292.430188][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.471147][ T5834] usb 6-1: config 0 descriptor?? [ 292.476335][T10858] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 292.480825][ T32] tipc: Node number set to 2886997007 [ 292.839648][ T5161] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 292.892525][ T5834] hid (null): global environment stack underflow [ 292.911870][ T5834] hid_parser_main: 2 callbacks suppressed [ 292.911891][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.911919][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.911941][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.913556][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.913592][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.913616][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.913642][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.913666][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.913689][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.913712][ T5834] asus 0003:0B05:1ABE.0024: unknown main item tag 0x0 [ 292.992170][ T5834] asus 0003:0B05:1ABE.0024: global environment stack underflow [ 292.992191][ T5834] asus 0003:0B05:1ABE.0024: item 0 1 1 11 parsing failed [ 292.992950][ T5834] asus 0003:0B05:1ABE.0024: Asus hid parse failed: -22 [ 292.993047][ T5834] asus 0003:0B05:1ABE.0024: probe with driver asus failed with error -22 [ 293.035680][ T5834] usb 4-1: USB disconnect, device number 24 [ 293.095067][ T5161] usb 6-1: USB disconnect, device number 6 [ 293.766844][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 294.125906][ T32] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 294.281196][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 294.286435][ T32] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 294.286467][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 294.286497][ T32] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 294.286517][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.317923][ T32] usb 4-1: config 0 descriptor?? [ 294.365326][ T5161] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 294.514754][ T5161] usb 1-1: Using ep0 maxpacket: 32 [ 294.519168][ T5161] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 294.519207][ T5161] usb 1-1: config 0 has no interface number 0 [ 294.519303][ T5161] usb 1-1: config 0 interface 12 has no altsetting 0 [ 294.530378][ T5161] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 294.530416][ T5161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.530950][ T5161] usb 1-1: Product: syz [ 294.530964][ T5161] usb 1-1: Manufacturer: syz [ 294.530976][ T5161] usb 1-1: SerialNumber: syz [ 294.581519][ T5161] usb 1-1: config 0 descriptor?? [ 294.782097][ T32] greenasia 0003:0E8F:0012.0025: invalid report_size 12084 [ 294.782121][ T32] greenasia 0003:0E8F:0012.0025: item 0 2 1 7 parsing failed [ 294.783214][ T32] greenasia 0003:0E8F:0012.0025: parse failed [ 294.783284][ T32] greenasia 0003:0E8F:0012.0025: probe with driver greenasia failed with error -22 [ 295.110945][ T32] usb 4-1: USB disconnect, device number 25 [ 295.275923][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.374207][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.388578][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.423605][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.451741][ T5161] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 295.451773][ T5161] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 295.451781][ T5161] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 295.451831][ T5161] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 295.460887][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.484460][ T5161] usb 1-1: USB disconnect, device number 29 [ 296.300157][T10921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2046'. [ 296.300264][T10921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2046'. [ 296.605128][ T5161] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 296.714883][ T5964] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 296.770016][ T5161] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.770047][ T5161] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.770083][ T5161] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 296.770106][ T5161] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.774625][ T5161] usb 6-1: config 0 descriptor?? [ 296.865318][T10907] chnl_net:caif_netlink_parms(): no params data found [ 296.886010][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.897800][ T5964] usb 1-1: string descriptor 0 read error: -22 [ 296.897982][ T5964] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 296.898004][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.161114][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.161147][ T5964] usb 1-1: MIDIStreaming interface descriptor not found [ 297.263726][ T5161] kye 0003:0458:5016.0026: control desc unexpectedly large [ 297.297954][ T5161] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0026/input/input28 [ 297.502354][ T5161] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0026/input/input29 [ 297.687385][ T5964] usb 1-1: USB disconnect, device number 30 [ 297.704830][ T61] Bluetooth: hci5: command tx timeout [ 297.763258][ T5161] kye 0003:0458:5016.0026: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 297.974469][T10907] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.974818][T10907] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.975090][T10907] bridge_slave_0: entered allmulticast mode [ 297.985672][T10907] bridge_slave_0: entered promiscuous mode [ 298.120821][T10907] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.121156][T10907] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.121465][T10907] bridge_slave_1: entered allmulticast mode [ 298.126130][ T5834] usb 6-1: USB disconnect, device number 7 [ 298.143821][T10907] bridge_slave_1: entered promiscuous mode [ 298.293722][T10907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.313088][T10907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.361279][T10907] team0: Port device team_slave_0 added [ 298.366764][T10907] team0: Port device team_slave_1 added [ 298.408457][T10907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.408467][T10907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.408481][T10907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.410351][T10907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.410360][T10907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.410373][T10907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.494185][T10907] hsr_slave_0: entered promiscuous mode [ 298.496731][T10907] hsr_slave_1: entered promiscuous mode [ 298.498527][T10907] debugfs: 'hsr0' already exists in 'hsr' [ 298.498550][T10907] Cannot create hsr debugfs directory [ 299.006029][ T5834] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 299.154686][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 299.172972][ T5834] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 299.173021][ T5834] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 299.173032][ T5834] usb 6-1: Product: syz [ 299.173039][ T5834] usb 6-1: Manufacturer: syz [ 299.173046][ T5834] usb 6-1: SerialNumber: syz [ 299.209981][ T5834] usb 6-1: config 0 descriptor?? [ 299.222369][ T5834] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 299.288165][T10949] C: renamed from team_slave_0 (while UP) [ 299.327377][T10949] netlink: 'syz.0.2051': attribute type 1 has an invalid length. [ 299.327397][T10949] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2051'. [ 299.774889][T10907] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 299.784937][ T61] Bluetooth: hci5: command tx timeout [ 299.852493][ T5834] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 299.893607][T10907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.896262][T10907] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 299.987239][T10907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.990302][T10907] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.066868][ T61] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 300.085824][T10907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.101138][ T5161] usb 6-1: USB disconnect, device number 8 [ 300.102509][T10907] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.295080][T10907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.555429][T10907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.576621][T10907] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.608708][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.608806][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.631523][ T818] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 300.667905][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.668132][ T1515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.805320][ T818] usb 1-1: Using ep0 maxpacket: 16 [ 300.815965][ T818] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 300.816000][ T818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.816031][ T818] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 300.816053][ T818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.822711][ T818] usb 1-1: config 0 descriptor?? [ 301.333220][ T818] hid_parser_main: 309 callbacks suppressed [ 301.333246][ T818] greenasia 0003:0E8F:0012.0027: unknown main item tag 0x0 [ 301.333274][ T818] greenasia 0003:0E8F:0012.0027: unknown main item tag 0x0 [ 301.333295][ T818] greenasia 0003:0E8F:0012.0027: unknown main item tag 0x0 [ 301.333317][ T818] greenasia 0003:0E8F:0012.0027: unknown main item tag 0x0 [ 301.333341][ T818] greenasia 0003:0E8F:0012.0027: unknown main item tag 0x0 [ 301.333367][ T818] greenasia 0003:0E8F:0012.0027: unknown main item tag 0x0 [ 301.333392][ T818] greenasia 0003:0E8F:0012.0027: unknown main item tag 0x7 [ 301.333417][ T818] greenasia 0003:0E8F:0012.0027: invalid report_size 12084 [ 301.333432][ T818] greenasia 0003:0E8F:0012.0027: item 0 2 1 7 parsing failed [ 301.334043][ T818] greenasia 0003:0E8F:0012.0027: parse failed [ 301.334104][ T818] greenasia 0003:0E8F:0012.0027: probe with driver greenasia failed with error -22 [ 301.523505][ T818] usb 1-1: USB disconnect, device number 31 [ 301.663478][T10907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.773418][T10994] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2069'. [ 301.874780][ T61] Bluetooth: hci5: command tx timeout [ 302.635612][T10907] veth0_vlan: entered promiscuous mode [ 302.664516][T10907] veth1_vlan: entered promiscuous mode [ 302.841259][T10907] veth0_macvtap: entered promiscuous mode [ 302.860044][T10907] veth1_macvtap: entered promiscuous mode [ 302.907379][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.916706][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.993509][T10907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.070985][T10907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.100677][ T1364] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.100917][ T1364] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.100951][ T1364] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.100982][ T1364] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.963531][ T61] Bluetooth: hci5: command tx timeout [ 304.364084][ T1364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.364103][ T1364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.876620][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.876639][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.229442][T11075] loop8: detected capacity change from 0 to 1 [ 305.320860][T11075] Dev loop8: unable to read RDB block 1 [ 305.320903][T11075] loop8: unable to read partition table [ 305.321087][T11075] loop8: partition table beyond EOD, truncated [ 305.321113][T11075] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 307.438832][T11129] tap0: tun_chr_ioctl cmd 1074025678 [ 307.438853][T11129] tap0: group set to 21 [ 307.938047][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2139'. [ 307.938092][T11157] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2139'. [ 308.614127][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2150'. [ 309.067640][T11191] sp0: Synchronizing with TNC [ 309.691767][T11219] loop5: detected capacity change from 0 to 7 [ 310.313275][T11219] Dev loop5: unable to read RDB block 7 [ 310.313384][T11219] loop5: unable to read partition table [ 310.313570][T11219] loop5: partition table beyond EOD, truncated [ 310.313598][T11219] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 310.461177][T11238] virtiofs: Unknown parameter 'always 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 18 nlmon0 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 20 batadv0 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 21 vxcan0 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 22 vxcan1 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 23 veth0 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 24 veth1 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 25 wg0 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 26 wg1 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 27 wg2 : 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 28 veth0_to_bridge: 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 29 bridge_slave_0: 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 30 veth1_to_bridge: 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 31 bridge_slave_1: 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 32 veth0_to_bond: 1 V3 [ 310.461177][T11238] 010000E0 1 0:00000000 0 [ 310.461177][T11238] 33 bond_slave_0: 1 V3 [ 310.461177][T11238] 010000E0 1 0:0 [ 310.625922][T11248] binder: 11247:11248 ioctl c018620c 200000000280 returned -1 [ 310.899054][T11257] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2183'. [ 311.109042][T11264] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 311.109081][T11264] netlink: 'syz.3.2187': attribute type 2 has an invalid length. [ 311.109092][T11264] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 311.337359][T11271] binder: 11269:11271 ioctl c018620c 200000000280 returned -1 [ 311.669823][T11285] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2197'. [ 312.728864][T11324] input: syz0 as /devices/virtual/input/input31 [ 313.086264][T11339] Bluetooth: MGMT ver 1.23 [ 313.665366][ T5834] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 313.847673][ T5834] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.847705][ T5834] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.847744][ T5834] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.847764][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.059247][ T5834] usb 4-1: GET_CAPABILITIES returned 0 [ 314.059276][ T5834] usbtmc 4-1:16.0: can't read capabilities [ 314.291995][ T5834] usb 4-1: USB disconnect, device number 26 [ 314.341040][T11365] input: syz0 as /devices/virtual/input/input32 [ 314.961516][T11387] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2245'. [ 315.815055][ T5161] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 315.884816][T11418] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.2259'. [ 315.978867][ T5161] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.978898][ T5161] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.978938][ T5161] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.978960][ T5161] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.337952][ T5161] usb 7-1: GET_CAPABILITIES returned 0 [ 316.337996][ T5161] usbtmc 7-1:16.0: can't read capabilities [ 316.560332][ T32] usb 7-1: USB disconnect, device number 2 [ 317.057388][T11459] batadv_slave_1: entered promiscuous mode [ 317.058419][T11456] batadv_slave_1: left promiscuous mode [ 317.248976][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.249069][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.611717][T11477] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.611741][T11477] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 317.917938][T11492] batadv_slave_1: entered promiscuous mode [ 317.919102][T11491] batadv_slave_1: left promiscuous mode [ 318.249844][T11507] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 318.249866][T11507] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.598777][T11523] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2309'. [ 318.912109][T11533] netlink: 'syz.0.2320': attribute type 19 has an invalid length. [ 318.912131][T11533] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2320'. [ 319.331483][T11549] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2319'. [ 319.932933][T11578] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2332'. [ 320.085979][T11584] netlink: 'syz.5.2335': attribute type 19 has an invalid length. [ 320.086000][T11584] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2335'. [ 320.819961][T11614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.108000][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.218463][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.218805][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.269456][T11628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2352'. [ 321.913475][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2364'. [ 322.333139][T11673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.522430][T11680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2378'. [ 322.676131][T11686] netlink: 'syz.3.2380': attribute type 10 has an invalid length. [ 322.676154][T11686] netlink: 'syz.3.2380': attribute type 29 has an invalid length. [ 323.308306][ T5836] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 323.427545][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2395'. [ 323.476768][ T5836] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 323.476794][ T5836] usb 4-1: config 0 has no interface number 0 [ 323.476876][ T5836] usb 4-1: config 0 interface 41 has no altsetting 0 [ 323.482651][ T5836] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 323.482679][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.482696][ T5836] usb 4-1: Product: syz [ 323.482709][ T5836] usb 4-1: Manufacturer: syz [ 323.482721][ T5836] usb 4-1: SerialNumber: syz [ 323.544951][ T5836] usb 4-1: config 0 descriptor?? [ 324.362582][ T5836] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 324.363307][ T5836] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 324.394070][ T5836] usb 4-1: USB disconnect, device number 27 [ 324.750797][T11738] netlink: 'syz.5.2402': attribute type 10 has an invalid length. [ 324.750817][T11738] netlink: 'syz.5.2402': attribute type 29 has an invalid length. [ 325.146433][T11755] program syz.5.2413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.201041][T11757] syz.3.2414 uses obsolete (PF_INET,SOCK_PACKET) [ 325.274730][ T5161] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 325.438488][ T5161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.438545][ T5161] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 325.438568][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.451931][ T5161] usb 1-1: config 0 descriptor?? [ 325.476374][ T5161] pwc: Askey VC010 type 2 USB webcam detected. [ 325.683801][ T5161] pwc: send_video_command error -71 [ 325.683830][ T5161] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 325.683935][ T5161] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 325.689455][ T5161] usb 1-1: USB disconnect, device number 32 [ 325.729913][T11774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 325.732154][T11774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 326.124760][ T5161] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 326.326600][ T5161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.326653][ T5161] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 326.326676][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.373166][ T5161] usb 1-1: config 0 descriptor?? [ 326.419816][ T5161] pwc: Askey VC010 type 2 USB webcam detected. [ 326.810848][ T5161] pwc: recv_control_msg error -71 req 02 val 2b00 [ 326.811759][ T5161] pwc: recv_control_msg error -71 req 02 val 2700 [ 326.812244][ T5161] pwc: recv_control_msg error -71 req 02 val 2c00 [ 326.812700][ T5161] pwc: recv_control_msg error -71 req 04 val 1000 [ 326.813620][ T5161] pwc: recv_control_msg error -71 req 04 val 1300 [ 326.821542][ T5161] pwc: recv_control_msg error -71 req 04 val 1400 [ 326.822021][ T5161] pwc: recv_control_msg error -71 req 02 val 2000 [ 326.822449][ T5161] pwc: recv_control_msg error -71 req 02 val 2100 [ 326.822868][ T5161] pwc: recv_control_msg error -71 req 04 val 1500 [ 326.823292][ T5161] pwc: recv_control_msg error -71 req 02 val 2500 [ 326.827339][ T5161] pwc: recv_control_msg error -71 req 02 val 2400 [ 326.828669][ T5161] pwc: recv_control_msg error -71 req 02 val 2600 [ 326.832863][ T5161] pwc: recv_control_msg error -71 req 02 val 2900 [ 326.835381][ T5161] pwc: recv_control_msg error -71 req 02 val 2800 [ 326.837685][ T5161] pwc: recv_control_msg error -71 req 04 val 1100 [ 326.840277][ T5161] pwc: recv_control_msg error -71 req 04 val 1200 [ 326.907157][T11807] netlink: 'syz.5.2438': attribute type 8 has an invalid length. [ 326.907177][T11807] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2438'. [ 326.936323][ T5161] pwc: Registered as video103. [ 327.000225][ T5161] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 327.024863][ T5161] usb 1-1: USB disconnect, device number 33 [ 327.810514][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2448'. [ 328.161762][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2454'. [ 328.409130][T11851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2458'. [ 328.716980][T11866] misc userio: Begin command sent, but we're already running [ 328.746120][ T5161] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 328.894683][ T5161] usb 7-1: Using ep0 maxpacket: 8 [ 328.898833][ T5161] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 328.898865][ T5161] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 328.898888][ T5161] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.898910][ T5161] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.898947][ T5161] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.898968][ T5161] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.152397][ T5161] usb 7-1: GET_CAPABILITIES returned 0 [ 329.152442][ T5161] usbtmc 7-1:16.0: can't read capabilities [ 329.383765][ T5161] usb 7-1: USB disconnect, device number 3 [ 330.314679][ T5834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 330.468129][ T5834] usb 6-1: unable to get BOS descriptor or descriptor too short [ 330.479308][ T5834] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 330.484006][ T5834] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 330.484033][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.484052][ T5834] usb 6-1: Product: syz [ 330.484065][ T5834] usb 6-1: Manufacturer: syz [ 330.484079][ T5834] usb 6-1: SerialNumber: syz [ 330.779563][ T5834] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 330.973231][ T5834] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 330.973259][ T5834] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 331.089056][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2491'. [ 331.378194][ T5834] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 331.531065][ T5834] usb 6-1: USB disconnect, device number 9 [ 331.666661][ T6838] udevd[6838]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.858031][T11945] netlink: 'syz.6.2502': attribute type 27 has an invalid length. [ 331.858046][T11945] netlink: 'syz.6.2502': attribute type 1 has an invalid length. [ 333.157483][ T818] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 333.297276][T12002] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2530'. [ 333.314696][ T818] usb 1-1: Using ep0 maxpacket: 16 [ 333.316565][ T818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.316613][ T818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.316639][ T818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 333.316658][ T818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 333.316679][ T818] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.318148][ T818] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 333.318171][ T818] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 333.318189][ T818] usb 1-1: Manufacturer: syz [ 333.323736][ T818] usb 1-1: config 0 descriptor?? [ 333.444882][ T5834] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 333.597733][ T5834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 333.597964][ T5834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 333.600790][ T5834] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 333.600821][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.600839][ T5834] usb 6-1: Product: syz [ 333.600852][ T5834] usb 6-1: Manufacturer: syz [ 333.600866][ T5834] usb 6-1: SerialNumber: syz [ 333.639057][ T818] rc_core: IR keymap rc-hauppauge not found [ 333.639077][ T818] Registered IR keymap rc-empty [ 333.639218][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.654750][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.685856][ T5834] usb 6-1: config 0 descriptor?? [ 333.686835][T11998] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 333.686987][T11998] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 333.713859][ T818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 333.741362][ T818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 333.764300][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.785867][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.810281][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.829305][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.844810][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.865389][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.891877][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.905010][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.930144][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.939802][T11998] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 333.939975][T11998] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 333.952615][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 333.964756][ T818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 334.058824][ T818] mceusb 1-1:0.0: Registered with mce emulator interface version 95 [ 334.058846][ T818] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 334.099062][ T818] usb 1-1: USB disconnect, device number 34 [ 334.344512][ T5834] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 334.546149][ T5834] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 334.568513][ T5834] usb 6-1: USB disconnect, device number 10 [ 335.104776][ T32] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 335.254691][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 335.261029][ T32] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 335.261055][ T32] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 335.261073][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 335.261091][ T32] usb 4-1: config 1 has no interface number 0 [ 335.261134][ T32] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.261159][ T32] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 335.261197][ T32] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 335.261217][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.340985][ T32] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 335.612998][ T32] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 335.851443][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2560'. [ 335.851475][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2560'. [ 335.851492][T12073] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2560'. [ 335.852268][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2560'. [ 335.852287][T12073] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2560'. [ 336.054433][ T5964] usb 4-1: USB disconnect, device number 28 [ 336.066105][ T5964] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 336.105978][T12075] pim6reg: entered allmulticast mode [ 336.114427][T12074] pim6reg: left allmulticast mode [ 337.095695][T12104] netlink: 'syz.5.2575': attribute type 6 has an invalid length. [ 337.563025][T12121] sctp: Trying to GSO but underlying device doesn't support it. [ 338.182460][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2594'. [ 338.511212][T12158] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2601'. [ 338.534938][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 338.697466][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 338.699213][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 338.699239][ T9] usb 6-1: config 0 has no interface number 0 [ 338.699282][ T9] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 338.699299][ T9] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 338.702435][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 338.702465][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.702485][ T9] usb 6-1: Product: syz [ 338.702499][ T9] usb 6-1: Manufacturer: syz [ 338.702513][ T9] usb 6-1: SerialNumber: syz [ 338.703681][T12162] vivid-000: ================= START STATUS ================= [ 338.703697][T12162] vivid-000: Enable Output Cropping: true grabbed [ 338.703731][T12162] vivid-000: Enable Output Composing: true grabbed [ 338.703753][T12162] vivid-000: Enable Output Scaler: true grabbed [ 338.703774][T12162] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 338.703795][T12162] vivid-000: Transmit Mode: HDMI grabbed [ 338.703816][T12162] vivid-000: Hotplug Present: 0x00000000 [ 338.703834][T12162] vivid-000: RxSense Present: 0x00000000 [ 338.703851][T12162] vivid-000: EDID Present: 0x00000000 [ 338.703868][T12162] vivid-000: ================== END STATUS ================== [ 338.857797][ T9] usb 6-1: config 0 descriptor?? [ 338.858628][T12147] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 338.858734][T12147] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.086771][T12147] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.086884][T12147] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.212460][T12183] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 339.346829][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 339.346861][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 339.346876][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2614'. [ 339.511068][T12191] input: syz0 as /devices/virtual/input/input38 [ 339.704659][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 339.711106][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 339.711134][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 339.711424][ T9] asix 6-1:0.251: probe with driver asix failed with error -71 [ 339.801805][ T9] usb 6-1: USB disconnect, device number 11 [ 340.026386][ T32] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 340.144674][ T5964] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 340.177870][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.178697][ T32] usb 1-1: not running at top speed; connect to a high speed hub [ 340.180996][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.181021][ T32] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 340.181068][ T32] usb 1-1: config 1 interface 1 has no altsetting 1 [ 340.186528][ T32] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 340.186557][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.186575][ T32] usb 1-1: Product: syz [ 340.186587][ T32] usb 1-1: Manufacturer: syz [ 340.186601][ T32] usb 1-1: SerialNumber: syz [ 340.298777][ T5964] usb 7-1: Using ep0 maxpacket: 8 [ 340.307870][ T5964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.307901][ T5964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.307975][ T5964] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.308017][ T5964] usb 7-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 340.308038][ T5964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.505129][ T5964] usb 7-1: config 0 descriptor?? [ 340.713528][T12206] netlink: 'syz.5.2622': attribute type 8 has an invalid length. [ 341.007295][ T5964] dragonrise 0003:0079:0006.0028: unbalanced collection at end of report description [ 341.011645][ T5964] dragonrise 0003:0079:0006.0028: parse failed [ 341.011721][ T5964] dragonrise 0003:0079:0006.0028: probe with driver dragonrise failed with error -22 [ 341.159125][ T5964] usb 7-1: USB disconnect, device number 4 [ 341.473674][ T32] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 341.498384][ T32] usb 1-1: USB disconnect, device number 35 [ 341.658127][ T6838] udevd[6838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.572753][T12245] blkio.reset_stats is deprecated [ 344.588235][T12281] netlink: 'syz.6.2654': attribute type 10 has an invalid length. [ 345.390721][ T61] Bluetooth: hci5: command tx timeout [ 345.474255][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.503637][T12281] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 346.234731][ T818] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 346.389010][ T818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.389044][ T818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.389081][ T818] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 346.389103][ T818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.420858][ T818] usb 6-1: config 0 descriptor?? [ 347.139319][T12348] overlayfs: failed lookup in lower (newroot/361, name='file0', err=-40): overlapping layers [ 347.153661][ T818] razer 0003:1532:010E.0029: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 347.328712][ T9] usb 6-1: USB disconnect, device number 12 [ 347.432470][T12349] fido_id[12349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 347.843759][T12370] tap0: tun_chr_ioctl cmd 1074025672 [ 347.843780][T12370] tap0: ignored: set checksum enabled [ 347.867883][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 348.490017][ T5836] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 348.658928][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.658962][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.658984][ T5836] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.659025][ T5836] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.659046][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.720697][T12407] Set syz0 is full, maxelem 0 reached [ 348.729838][ T5836] usb 7-1: config 0 descriptor?? [ 348.741240][ T5836] hub 7-1:0.0: USB hub found [ 348.962888][ T5836] hub 7-1:0.0: 9 ports detected [ 348.963438][ T5836] hub 7-1:0.0: insufficient power available to use all downstream ports [ 349.144807][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 349.196004][ T5836] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 349.196033][ T5836] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 349.270160][ T5836] usb 7-1: USB disconnect, device number 5 [ 349.317600][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 349.317658][ T9] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 349.317680][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.322955][ T9] usb 6-1: config 0 descriptor?? [ 349.323707][T12417] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 349.739209][ T9] hid (null): global environment stack underflow [ 349.739230][ T9] hid (null): unknown global tag 0xd [ 349.767937][ T38] audit: type=1326 audit(1776366902.232:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12444 comm="syz.0.2730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a1cc5c819 code=0x0 [ 349.844099][ T9] asus 0003:0B05:1ABE.002A: unknown main item tag 0x0 [ 349.844136][ T9] asus 0003:0B05:1ABE.002A: unknown main item tag 0x0 [ 349.844161][ T9] asus 0003:0B05:1ABE.002A: unknown main item tag 0x0 [ 349.844187][ T9] asus 0003:0B05:1ABE.002A: unknown main item tag 0x0 [ 349.844211][ T9] asus 0003:0B05:1ABE.002A: unknown main item tag 0x0 [ 349.844235][ T9] asus 0003:0B05:1ABE.002A: unknown main item tag 0x0 [ 349.844278][ T9] asus 0003:0B05:1ABE.002A: global environment stack underflow [ 349.844292][ T9] asus 0003:0B05:1ABE.002A: item 0 4 1 11 parsing failed [ 349.906078][ T9] asus 0003:0B05:1ABE.002A: Asus hid parse failed: -22 [ 349.907505][ T9] asus 0003:0B05:1ABE.002A: probe with driver asus failed with error -22 [ 349.946590][ T9] usb 6-1: USB disconnect, device number 13 [ 350.627365][ T61] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 350.627390][ T61] Bluetooth: hci3: Dropping invalid advertising data [ 350.627408][ T61] Bluetooth: hci3: Malformed LE Event: 0x02 [ 350.954818][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 351.129011][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.129052][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 351.132547][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.132575][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.132594][ T9] usb 4-1: Product: syz [ 351.132607][ T9] usb 4-1: Manufacturer: syz [ 351.132620][ T9] usb 4-1: SerialNumber: syz [ 351.428583][T12475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.429066][T12475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.455326][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 351.481301][ T9] usb 4-1: USB disconnect, device number 29 [ 351.956538][ T5836] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 352.108435][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 352.138115][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 352.200319][ T5836] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 352.200349][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.200368][ T5836] usb 7-1: Product: syz [ 352.200380][ T5836] usb 7-1: Manufacturer: syz [ 352.200393][ T5836] usb 7-1: SerialNumber: syz [ 352.237572][ T5836] usb 7-1: config 0 descriptor?? [ 352.251278][ T5836] gspca_main: spca508-2.14.0 probing 041e:4018 [ 352.274806][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 352.298764][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 352.298792][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 352.300074][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.300102][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.300125][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 352.300211][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.300255][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 352.300276][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.510510][ T5836] gspca_spca508: reg_read err -32 [ 352.511296][ T5836] gspca_spca508: reg_read err -32 [ 352.620814][ T9] usb 4-1: usb_control_msg returned -71 [ 352.620859][ T9] usbtmc 4-1:16.0: can't read capabilities [ 352.697919][ T9] usb 4-1: USB disconnect, device number 30 [ 352.714163][ T5836] gspca_spca508: reg_read err -71 [ 352.714895][ T5836] gspca_spca508: reg_read err -71 [ 352.715314][ T5836] gspca_spca508: reg write: error -71 [ 352.715398][ T5836] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 352.760748][ T5836] usb 7-1: USB disconnect, device number 6 [ 352.862213][T12516] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 352.862619][T12516] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 353.111179][T12523] binder: 12521:12523 ioctl c018620c 200000000580 returned -22 [ 353.993801][ T32] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 354.179067][ T32] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.249726][T12563] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2783'. [ 354.249748][T12563] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 354.696082][T12583] netlink: 'syz.3.2792': attribute type 8 has an invalid length. [ 354.696104][T12583] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2792'. [ 355.095065][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 355.252265][ T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 355.252293][ T9] usb 6-1: config 0 has no interface number 0 [ 355.252331][ T9] usb 6-1: config 0 interface 41 has no altsetting 0 [ 355.254701][ T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 355.254728][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.254746][ T9] usb 6-1: Product: syz [ 355.254757][ T9] usb 6-1: Manufacturer: syz [ 355.254770][ T9] usb 6-1: SerialNumber: syz [ 355.321561][ T9] usb 6-1: config 0 descriptor?? [ 355.705097][ T32] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 355.773998][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2802'. [ 355.856623][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 355.859753][ T32] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 355.859782][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.903027][ T32] usb 1-1: config 0 descriptor?? [ 356.128114][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 356.142623][ T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 356.143285][ T9] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 356.162531][ T9] usb 6-1: USB disconnect, device number 14 [ 356.206211][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.207078][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 356.207147][ T32] usb 1-1: media controller created [ 356.262517][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.402695][ T32] az6027: usb out operation failed. (-71) [ 356.412341][ T32] az6027: usb out operation failed. (-71) [ 356.412357][ T32] stb0899_attach: Driver disabled by Kconfig [ 356.412366][ T32] az6027: no front-end attached [ 356.412366][ T32] [ 356.412770][ T32] az6027: usb out operation failed. (-71) [ 356.412783][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 356.460026][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 356.494862][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 356.494885][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 356.513721][ T32] usb 1-1: USB disconnect, device number 36 [ 356.668158][ T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 357.019659][T12635] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 357.019673][T12635] overlayfs: workdir and upperdir must be separate subtrees [ 357.044720][ T818] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 357.130135][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2819'. [ 357.208939][ T818] usb 6-1: Using ep0 maxpacket: 8 [ 357.213166][ T818] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 357.213200][ T818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 357.213225][ T818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 357.213248][ T818] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.213287][ T818] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 357.213309][ T818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.528755][ T818] usb 6-1: GET_CAPABILITIES returned 0 [ 357.528799][ T818] usbtmc 6-1:16.0: can't read capabilities [ 357.741647][ T818] usb 6-1: USB disconnect, device number 15 [ 357.843284][ T5836] kernel read not supported for file /amidi2 (pid: 5836 comm: kworker/0:4) [ 360.261632][T12739] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2861'. [ 360.734727][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 360.844724][ T5836] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 360.884742][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 360.887117][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.887161][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.887176][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 360.887186][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 360.887198][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.888294][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 360.888321][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 360.888340][ T9] usb 6-1: Manufacturer: syz [ 360.892904][ T9] usb 6-1: config 0 descriptor?? [ 361.030146][ T5836] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 361.030174][ T5836] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 361.036402][ T5836] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 361.036429][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.036658][ T5836] usb 7-1: Product: syz [ 361.036671][ T5836] usb 7-1: Manufacturer: syz [ 361.036685][ T5836] usb 7-1: SerialNumber: syz [ 361.056887][ T5836] usb 7-1: config 0 descriptor?? [ 361.060048][T12757] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 361.060217][T12757] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 361.277527][T12757] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 361.277699][T12757] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 361.286000][ T9] rc_core: IR keymap rc-hauppauge not found [ 361.286017][ T9] Registered IR keymap rc-empty [ 361.286255][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.306009][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.367830][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 361.372878][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 361.418642][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.435332][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.454906][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.478916][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.494719][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.524830][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.546972][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.565227][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.595014][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.624827][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.644895][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 361.689880][ T5836] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 361.705005][ T9] mceusb 6-1:0.0: Registered with mce emulator interface version 95 [ 361.705029][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 361.727842][ T9] usb 6-1: USB disconnect, device number 16 [ 361.904137][ T5836] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 361.952301][ T5836] usb 7-1: USB disconnect, device number 7 [ 362.098304][T12781] kvm: kvm [12780]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x6 [ 362.262549][T12787] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2884'. [ 362.262574][T12787] netlink: 'syz.3.2884': attribute type 2 has an invalid length. [ 362.581457][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2893'. [ 362.581493][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2893'. [ 362.581508][T12804] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2893'. [ 362.582259][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2893'. [ 362.582278][T12804] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2893'. [ 363.035122][ T5836] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 363.189628][ T5836] usb 7-1: Using ep0 maxpacket: 8 [ 363.192097][ T5836] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.192132][ T5836] usb 7-1: config 0 has no interface number 0 [ 363.192172][ T5836] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.192212][ T5836] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 363.192233][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.249892][ T5836] usb 7-1: config 0 descriptor?? [ 363.263533][ T5836] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 363.385439][T12834] netlink: 'syz.0.2906': attribute type 6 has an invalid length. [ 363.543200][ T5836] usb 7-1: USB disconnect, device number 8 [ 363.724921][ T818] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 363.778973][T12851] sctp: [Deprecated]: syz.0.2915 (pid 12851) Use of int in max_burst socket option deprecated. [ 363.778973][T12851] Use struct sctp_assoc_value instead [ 363.877201][ T818] usb 4-1: config 246 has an invalid interface number: 166 but max is 0 [ 363.877228][ T818] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 363.877247][ T818] usb 4-1: config 246 has no interface number 0 [ 363.877288][ T818] usb 4-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 363.877314][ T818] usb 4-1: config 246 interface 166 has no altsetting 0 [ 363.883040][ T818] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 363.883070][ T818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.883090][ T818] usb 4-1: Product: syz [ 363.883103][ T818] usb 4-1: Manufacturer: syz [ 363.883117][ T818] usb 4-1: SerialNumber: syz [ 364.417089][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2923'. [ 364.575245][ T818] usb 4-1: Limiting number of CPorts to U8_MAX [ 364.699382][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 364.763694][ T818] usb 4-1: Not enough endpoints found in device, aborting! [ 364.967893][ T818] usb 4-1: USB disconnect, device number 31 [ 365.173132][T12904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2934'. [ 365.598669][T12925] tipc: Started in network mode [ 365.598708][T12925] tipc: Node identity ac14140f, cluster identity 4711 [ 365.598997][T12925] tipc: New replicast peer: 255.255.255.255 [ 365.601670][T12925] tipc: Enabled bearer , priority 10 [ 366.015904][ T818] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 366.166531][ T818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 366.166562][ T818] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 366.166584][ T818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 366.168874][ T818] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 366.168902][ T818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.168920][ T818] usb 4-1: Product: syz [ 366.168933][ T818] usb 4-1: Manufacturer: syz [ 366.168947][ T818] usb 4-1: SerialNumber: syz [ 366.181898][ T818] usb 4-1: config 0 descriptor?? [ 366.183568][T12931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.189746][T12931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.269516][ T818] usb 4-1: ucan: probing device on interface #0 [ 366.785299][ T5964] tipc: Node number set to 2886997007 [ 366.959595][ T818] ucan 4-1:0.0 can0: registered device [ 367.055511][ T818] ucan 4-1:0.0 can0: firmware string: unknown [ 367.104416][ T818] usb 4-1: USB disconnect, device number 32 [ 367.821723][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.010288][T12967] netlink: 'syz.0.2967': attribute type 8 has an invalid length. [ 368.197029][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.257618][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.260175][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.299170][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.299875][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.123991][T12990] program syz.3.2975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.168581][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.188022][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 369.271116][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 369.916634][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.068170][T13019] program syz.0.2990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.357108][ T61] Bluetooth: hci5: command tx timeout [ 370.594081][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.045575][T12971] chnl_net:caif_netlink_parms(): no params data found [ 372.215505][ T818] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 372.389816][ T818] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.389844][ T818] usb 1-1: config 0 has no interface number 0 [ 372.389885][ T818] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.389910][ T818] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.389932][ T818] usb 1-1: config 0 interface 1 has no altsetting 0 [ 372.389962][ T818] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 372.389984][ T818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.424691][ T61] Bluetooth: hci5: command tx timeout [ 372.479135][ T818] usb 1-1: config 0 descriptor?? [ 372.796597][T13094] Invalid ELF header len 16 [ 373.103438][ T818] uclogic 0003:2179:0053.002C: pen parameters not found [ 373.103478][ T818] uclogic 0003:2179:0053.002C: interface is invalid, ignoring [ 373.112296][ T818] usb 1-1: USB disconnect, device number 37 [ 373.141649][ T13] bridge_slave_1: left allmulticast mode [ 373.141677][ T13] bridge_slave_1: left promiscuous mode [ 373.141922][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.236371][ T13] bridge_slave_0: left promiscuous mode [ 373.236715][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.709612][T13113] netlink: 'syz.0.3029': attribute type 10 has an invalid length. [ 373.709627][T13113] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3029'. [ 374.108086][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.165296][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.255534][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 374.315118][ T13] bond0 (unregistering): Released all slaves [ 374.366140][T12971] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.366539][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.366806][T12971] bridge_slave_0: entered allmulticast mode [ 374.369997][T12971] bridge_slave_0: entered promiscuous mode [ 374.487199][T12971] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.487415][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.487720][T12971] bridge_slave_1: entered allmulticast mode [ 374.504643][ T61] Bluetooth: hci5: command tx timeout [ 374.525746][T12971] bridge_slave_1: entered promiscuous mode [ 374.614986][T12971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.641422][T12971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.641858][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3031'. [ 374.921207][T12971] team0: Port device team_slave_0 added [ 374.966801][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 374.971444][T12971] team0: Port device team_slave_1 added [ 375.108153][ T5836] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 375.134229][T13126] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 375.156582][T12971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.156595][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.156615][T12971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.164450][T12971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.164463][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.164484][T12971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.234679][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 375.237014][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 375.237041][ T9] usb 1-1: config 0 has no interface number 0 [ 375.237080][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 375.237106][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 375.240178][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 375.240205][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.240224][ T9] usb 1-1: Product: syz [ 375.240237][ T9] usb 1-1: Manufacturer: syz [ 375.240250][ T9] usb 1-1: SerialNumber: syz [ 375.347489][ T9] usb 1-1: config 0 descriptor?? [ 375.348478][T13115] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.348658][T13115] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.382157][ T5836] usb 6-1: unable to get BOS descriptor or descriptor too short [ 375.383260][ T5836] usb 6-1: not running at top speed; connect to a high speed hub [ 375.395009][ T5836] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.395036][ T5836] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 375.395145][ T5836] usb 6-1: config 1 interface 1 has no altsetting 1 [ 375.408759][ T5836] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 375.415885][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.415909][ T5836] usb 6-1: Product: syz [ 375.415921][ T5836] usb 6-1: Manufacturer: syz [ 375.415935][ T5836] usb 6-1: SerialNumber: syz [ 375.596190][T13115] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.596362][T13115] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 376.258378][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 376.258409][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 376.258693][ T9] asix 1-1:0.251: probe with driver asix failed with error -71 [ 376.276759][ T9] usb 1-1: USB disconnect, device number 38 [ 376.427172][ T5836] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 376.447776][ T5836] usb 6-1: USB disconnect, device number 17 [ 376.520366][ T6838] udevd[6838]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.532027][T13147] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 376.587780][ T61] Bluetooth: hci5: command tx timeout [ 376.778435][ T5494] 8021q: adding VLAN 0 to HW filter on device eth5 [ 376.857618][T13153] vxcan0: tx address claim with dlc 0 [ 377.052719][T13160] netlink: 'syz.3.3043': attribute type 10 has an invalid length. [ 377.438215][T12971] hsr_slave_0: entered promiscuous mode [ 377.443859][T12971] hsr_slave_1: entered promiscuous mode [ 377.447628][T12971] debugfs: 'hsr0' already exists in 'hsr' [ 377.447654][T12971] Cannot create hsr debugfs directory [ 377.476504][T13160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.509537][T13160] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 378.687221][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.687312][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.938407][T13228] overlayfs: failed lookup in lower (newroot/853, name='file0', err=-40): overlapping layers [ 378.964753][ T13] hsr_slave_0: left promiscuous mode [ 379.011010][ T13] hsr_slave_1: left promiscuous mode [ 379.021665][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.021692][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.051806][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.051830][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.206153][ T13] veth1_macvtap: left promiscuous mode [ 379.206216][ T13] veth0_macvtap: left promiscuous mode [ 379.206394][ T13] veth1_vlan: left promiscuous mode [ 379.206496][ T13] veth0_vlan: left promiscuous mode [ 379.304842][ T39] INFO: task syz-executor:7050 blocked for more than 143 seconds. [ 379.304931][ T39] Tainted: G L syzkaller #0 [ 379.304941][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.304950][ T39] task:syz-executor state:D stack:21096 pid:7050 tgid:7050 ppid:1 task_flags:0x400140 flags:0x00080002 [ 379.305000][ T39] Call Trace: [ 379.305007][ T39] [ 379.305017][ T39] __schedule+0x169e/0x54f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 379.305059][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.305085][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.305113][ T39] ? rt_spin_lock+0x1e0/0x400 [ 379.305137][ T39] ? __pfx___schedule+0x10/0x10 [ 379.305170][ T39] ? schedule+0x90/0x360 [ 379.305196][ T39] schedule+0x164/0x360 [ 379.305222][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 379.305244][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 379.305264][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 379.305286][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 379.305301][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 379.305322][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 379.305346][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 379.305367][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.305392][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.305417][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 379.305441][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 379.305462][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.305485][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.305508][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.305536][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 379.305570][ T39] deactivate_locked_super+0xbc/0x130 [ 379.305594][ T39] cleanup_mnt+0x437/0x4d0 [ 379.305616][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.305643][ T39] task_work_run+0x1d9/0x270 [ 379.305668][ T39] ? __pfx_task_work_run+0x10/0x10 [ 379.305697][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.305716][ T39] exit_to_user_mode_loop+0xed/0x480 [ 379.305736][ T39] ? rcu_is_watching+0x15/0xb0 [ 379.305760][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.305779][ T39] do_syscall_64+0x33e/0xf80 [ 379.305803][ T39] ? trace_irq_disable+0x3b/0x140 [ 379.305824][ T39] ? clear_bhb_loop+0x40/0x90 [ 379.305846][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.305870][ T39] RIP: 0033:0x7f46dfaada57 [ 379.305890][ T39] RSP: 002b:00007fff0b100038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 379.305910][ T39] RAX: 0000000000000000 RBX: 00007f46dfb42048 RCX: 00007f46dfaada57 [ 379.305924][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0b1000f0 [ 379.305935][ T39] RBP: 00007fff0b1000f0 R08: 00007fff0b1010f0 R09: 00000000ffffffff [ 379.305948][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0b101180 [ 379.305960][ T39] R13: 00007f46dfb42048 R14: 0000000000037ddc R15: 00007fff0b1011c0 [ 379.305989][ T39] [ 379.306038][ [ 379.306038][ T39] [ 379.306038][ T39] Showing all locks held in the system: [ 379.306048][ T39] 4 locks held by kworker/u8:1/13: [ 379.306058][ T39] #0: ffff88801be86138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 379.306104][ T39] #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 379.306159][ T39] #2: ffffffff8f793080 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 379.306277][ T39] #3: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 379.306319][ T39] 3 locks held by ksoftirqd/0/15: [ 379.306329][ T39] #0: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 379.306370][ T39] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 379.306409][ T39] #2: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: sched_balance_domains+0xf9/0x900 [ 379.306457][ T39] 1 lock held by khungtaskd/39: [ 379.306467][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 379.306523][ T39] 3 locks held by kworker/u8:7/1169: [ 379.306533][ T39] #0: ffff8880345e0938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 379.306582][ T39] #1: ffffc900059a7c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 379.306624][ T39] #2: ffff88802cf92110 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xef/0xf60 [ 379.306686][ T39] 3 locks held by kworker/u8:18/3576: [ 379.306696][ T39] #0: ffff888033650938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 379.306736][ T39] #1: ffffc9000ed1fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 379.306774][ T39] #2: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 379.306819][ T39] 1 lock held by dhcpcd/5494: [ 379.306829][ T39] #0: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 379.306875][ T39] 2 locks held by getty/5584: [ 379.306885][ T39] #0: ffff888025b140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 379.306929][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 379.306974][ T39] 1 lock held by syz-executor/7050: [ 379.306983][ T39] #0: ffff8880277140d0 (&type->s_umount_key#61){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 379.307036][ T39] 1 lock held by syz.2.1887/10578: [ 379.307046][ T39] #0: ffff8880277140d0 (&type->s_umount_key#61){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 379.307096][ T39] 2 locks held by syz-executor/12971: [ 379.307107][ T39] #0: ffffffff8fcf5e98 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 379.307153][ T39] #1: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 379.307201][ T39] 2 locks held by syz.5.3062/13207: [ 379.307211][ T39] #0: ffff8880397ca928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 379.307251][ T39] #1: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 379.349488][ T39] 3 locks held by syz.3.3068/13225: [ 379.349495][ T39] #0: ffffffff8f811cc0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 379.349521][ T39] #1: ffffffff8f811ad8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 379.349552][ T39] #2: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: ieee802154_add_iface_deprecated+0x2f/0x70 [ 379.349578][ T39] 1 lock held by syz.0.3069/13233: [ 379.349584][ T39] #0: ffffffff8f7a20f8 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410 [ 379.365759][ T39] [ 379.365771][ T39] ============================================= [ 379.365771][ T39] [ 379.365787][ T39] NMI backtrace for cpu 0 [ 379.365808][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.365827][ T39] Tainted: [L]=SOFTLOCKUP [ 379.365832][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 379.365840][ T39] Call Trace: [ 379.365848][ T39] [ 379.365855][ T39] dump_stack_lvl+0xe8/0x150 [ 379.365876][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 379.365893][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 379.365909][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 379.365932][ T39] sys_info+0x135/0x170 [ 379.365945][ T39] watchdog+0xfd3/0x1030 [ 379.365964][ T39] ? watchdog+0x1c9/0x1030 [ 379.365981][ T39] kthread+0x388/0x470 [ 379.365998][ T39] ? __pfx_watchdog+0x10/0x10 [ 379.366009][ T39] ? __pfx_kthread+0x10/0x10 [ 379.366025][ T39] ret_from_fork+0x514/0xb70 [ 379.366041][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 379.366054][ T39] ? __switch_to+0xc79/0x1410 [ 379.366074][ T39] ? __pfx_kthread+0x10/0x10 [ 379.366089][ T39] ret_from_fork_asm+0x1a/0x30 [ 379.366130][ T39] [ 379.366149][ T39] Sending NMI from CPU 0 to CPUs 1: [ 379.366176][ C1] NMI backtrace for cpu 1 [ 379.366191][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.366211][ C1] Tainted: [L]=SOFTLOCKUP [ 379.366216][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 379.366225][ C1] Workqueue: netns cleanup_net [ 379.366243][ C1] RIP: 0010:__lock_acquire+0x1878/0x2cf0 [ 379.366262][ C1] Code: 80 e2 fa 80 78 2b 00 0f b6 c2 0f 44 c1 84 c0 0f 84 3d ff ff ff a8 0c 41 0f 94 44 24 2b 4d 8b 6c 24 10 41 0f b6 85 c6 00 00 00 <85> c0 74 5f 83 f8 01 0f 85 1b ff ff ff 83 3d 84 50 26 18 00 0f 85 [ 379.366273][ C1] RSP: 0018:ffffc90000126c48 EFLAGS: 00000002 [ 379.366285][ C1] RAX: 0000000000000000 RBX: 00000000000003cd RCX: 0000000000000008 [ 379.366301][ C1] RDX: 0000000000000008 RSI: ffff88801daf69f0 RDI: 00000000000003cd [ 379.366311][ C1] RBP: d785479aa4c0157c R08: ffffc90000126c10 R09: 0000000000000020 [ 379.366321][ C1] R10: dffffc0000000000 R11: ffffffff81a12540 R12: ffffffff96623508 [ 379.366331][ C1] R13: ffffffff936d5880 R14: ffff88801daf5c40 R15: 0000000000000284 [ 379.366341][ C1] FS: 0000000000000000(0000) GS:ffff888125b64000(0000) knlGS:0000000000000000 [ 379.366353][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.366363][ C1] CR2: 00007fb7e6397e20 CR3: 000000003558e000 CR4: 00000000003526f0 [ 379.366376][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.366385][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 379.366394][ C1] Call Trace: [ 379.366399][ C1] [ 379.366414][ C1] ? ktime_get+0x45/0x220 [ 379.366429][ C1] lock_acquire+0x106/0x350 [ 379.366444][ C1] ? ktime_get+0x45/0x220 [ 379.366461][ C1] ? enqueue_task_fair+0x23cf/0x2960 [ 379.366477][ C1] ? ktime_get+0x45/0x220 [ 379.366491][ C1] seqcount_lockdep_reader_access+0x55/0x100 [ 379.366506][ C1] ? ktime_get+0x45/0x220 [ 379.366520][ C1] ktime_get+0x45/0x220 [ 379.366534][ C1] hrtick_start+0x99/0x250 [ 379.366550][ C1] enqueue_task+0x75/0x410 [ 379.366570][ C1] sched_change_end+0x22b/0x5f0 [ 379.366598][ C1] __schedule+0x1838/0x54f0 [ 379.366620][ C1] ? ktime_get+0x45/0x220 [ 379.366633][ C1] ? lock_acquire+0x106/0x350 [ 379.366652][ C1] ? ktime_get+0x45/0x220 [ 379.366666][ C1] ? ktime_get+0x45/0x220 [ 379.366680][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 379.366698][ C1] ? __pfx___schedule+0x10/0x10 [ 379.366721][ C1] preempt_schedule_irq+0x4d/0xa0 [ 379.366739][ C1] irqentry_exit+0x14f/0x730 [ 379.366759][ C1] ? trace_irq_disable+0x3b/0x140 [ 379.366775][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.366790][ C1] RIP: 0010:sctp_inet6addr_event+0x140/0x750 [ 379.366811][ C1] Code: 89 e9 48 c1 e9 03 48 89 4c 24 48 48 89 44 24 50 48 c1 e8 03 48 89 44 24 40 4c 89 7c 24 30 49 89 ee 49 c1 ee 03 43 80 3c 26 00 <74> 08 48 89 ef e8 36 fc ac f7 48 8b 45 00 48 89 44 24 10 48 8d 5d [ 379.366822][ C1] RSP: 0018:ffffc900001272b0 EFLAGS: 00000246 [ 379.366834][ C1] RAX: ffffffff8a815e10 RBX: 0000000000000000 RCX: ffff88801daf5c40 [ 379.366844][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.366852][ C1] RBP: ffff888030777500 R08: 0000000000000000 R09: 0000000000000000 [ 379.366861][ C1] R10: dffffc0000000000 R11: fffffbfff1f9e7bf R12: dffffc0000000000 [ 379.366871][ C1] R13: ffff8880391d8800 R14: 1ffff110060eeea0 R15: ffff88802cb33fc8 [ 379.366884][ C1] ? sctp_inet6addr_event+0x2e0/0x750 [ 379.366906][ C1] ? sctp_inet6addr_event+0xc3/0x750 [ 379.366926][ C1] notifier_call_chain+0x1ad/0x3d0 [ 379.366944][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 379.366961][ C1] atomic_notifier_call_chain+0xda/0x180 [ 379.366978][ C1] addrconf_ifdown+0xffe/0x1aa0 [ 379.366993][ C1] ? addrconf_ifdown+0x360/0x1aa0 [ 379.367010][ C1] ? tls_dev_event+0x790/0xf30 [ 379.367027][ C1] ? __pfx_addrconf_ifdown+0x10/0x10 [ 379.367047][ C1] addrconf_notify+0x1bc/0x1050 [ 379.367066][ C1] notifier_call_chain+0x1ad/0x3d0 [ 379.367084][ C1] netif_close_many+0x2ae/0x420 [ 379.367102][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.367123][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 379.367144][ C1] unregister_netdevice_many_notify+0xb50/0x22b0 [ 379.367166][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 379.367184][ C1] ? unregister_netdevice_queue+0x19b/0x360 [ 379.367201][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 379.367218][ C1] ? batadv_meshif_destroy_netlink+0x3a3/0x4a0 [ 379.367235][ C1] default_device_exit_batch+0x981/0xa00 [ 379.367252][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 379.367269][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 379.367282][ C1] ops_undo_list+0x52b/0x940 [ 379.367302][ C1] ? rt_spin_unlock+0x160/0x200 [ 379.367318][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 379.367330][ C1] ? rt_spin_unlock+0x14f/0x200 [ 379.367346][ C1] ? idr_destroy+0x21b/0x2a0 [ 379.367363][ C1] ? rt_spin_unlock+0x160/0x200 [ 379.367379][ C1] cleanup_net+0x56e/0x800 [ 379.367393][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 379.367410][ C1] ? process_one_work+0x8b7/0x1710 [ 379.367422][ C1] process_one_work+0x9a3/0x1710 [ 379.367442][ C1] ? __pfx_process_one_work+0x10/0x10 [ 379.367454][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 379.367480][ C1] worker_thread+0xba8/0x11e0 [ 379.367502][ C1] kthread+0x388/0x470 [ 379.367518][ C1] ? __pfx_worker_thread+0x10/0x10 [ 379.367531][ C1] ? __pfx_kthread+0x10/0x10 [ 379.367546][ C1] ret_from_fork+0x514/0xb70 [ 379.367561][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 379.367575][ C1] ? __switch_to+0xc79/0x1410 [ 379.367593][ C1] ? __pfx_kthread+0x10/0x10 [ 379.367609][ C1] ret_from_fork_asm+0x1a/0x30 [ 379.367629][ C1] [ 379.606170][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 379.606193][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.606218][ T39] Tainted: [L]=SOFTLOCKUP [ 379.606225][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 379.606236][ T39] Call Trace: [ 379.606244][ T39] [ 379.606251][ T39] vpanic+0x56c/0xa60 [ 379.606277][ T39] ? __pfx___schedule+0x10/0x10 [ 379.606302][ T39] ? __pfx_vpanic+0x10/0x10 [ 379.606337][ T39] panic+0xc5/0xd0 [ 379.606356][ T39] ? __pfx_panic+0x10/0x10 [ 379.606377][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 379.606410][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 379.606436][ T39] watchdog+0x102c/0x1030 [ 379.606461][ T39] ? watchdog+0x1c9/0x1030 [ 379.606485][ T39] kthread+0x388/0x470 [ 379.606507][ T39] ? __pfx_watchdog+0x10/0x10 [ 379.606523][ T39] ? __pfx_kthread+0x10/0x10 [ 379.606546][ T39] ret_from_fork+0x514/0xb70 [ 379.606568][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 379.606586][ T39] ? __switch_to+0xc79/0x1410 [ 379.606612][ T39] ? __pfx_kthread+0x10/0x10 [ 379.606634][ T39] ret_from_fork_asm+0x1a/0x30 [ 379.606664][ T39] [ 379.606996][ T39] Kernel Offset: disabled