last executing test programs: 4m23.429644123s ago: executing program 1 (id=894): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@local, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000000, 0xfffffffffffffffb, 0x0, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 4m23.31507901s ago: executing program 1 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000002780)={0x8000000000000000, 0x5000, 0x8101, 0x0, 0x10}) 4m23.205002897s ago: executing program 1 (id=896): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4m23.103871641s ago: executing program 1 (id=897): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 4m22.935862677s ago: executing program 1 (id=898): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x3}, 0x8) 4m22.635977641s ago: executing program 1 (id=899): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m22.399499414s ago: executing program 32 (id=899): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m55.314606656s ago: executing program 2 (id=1247): socket(0x11, 0x3, 0x0) semget(0x0, 0x1, 0x281) setuid(0xee01) semget(0x0, 0x1, 0x81) 3m55.257617695s ago: executing program 2 (id=1248): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000001}) 3m55.175032092s ago: executing program 2 (id=1249): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 3m55.11195453s ago: executing program 2 (id=1251): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 3m54.980543547s ago: executing program 2 (id=1260): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, [0xffffffff80000000, 0x7, 0x7c, 0x8, 0x1, 0x3, 0x7, 0x7fffffff, 0xffffffffffffffff, 0x3, 0x2, 0xfffffffffffffffc, 0x2, 0x5, 0x7]}, &(0x7f0000000440)=0x100) 3m54.511084497s ago: executing program 2 (id=1254): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) close(r1) 3m54.103247124s ago: executing program 33 (id=1254): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) close(r1) 2m37.672416384s ago: executing program 0 (id=2295): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:46'], 0xa) 2m37.607184374s ago: executing program 0 (id=2297): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x7}, 0x8) 2m37.512180314s ago: executing program 0 (id=2300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="40005a803c000180060005"], 0x5c}}, 0x4000004) 2m37.439156001s ago: executing program 0 (id=2303): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x80000045}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 2m37.281873495s ago: executing program 0 (id=2306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffa, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x40, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x79e7, @local, 0x2}, 0x18, 0x0}}], 0x1, 0x4000000) 2m37.124593543s ago: executing program 0 (id=2309): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 2m21.920029018s ago: executing program 34 (id=2309): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 1m49.361304447s ago: executing program 3 (id=3016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000a001"]) 1m49.25169263s ago: executing program 3 (id=3017): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1a73, 0x8001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000006c0)={0x0, 0x0, r1, r2, 0xfd7, 0x2, 0x9, 0x1, {0x3, 0x28, 0x100, 0x803, 0x8001, 0x7fff, 0x0, 0x5, 0x9346, 0xa, 0x5010, 0x0, 0xa, 0x3d, "c346fce24e7fc94f3e850547be612572bc371a85f4d99b595ebc88b07f0f2a06"}}) 1m49.188650131s ago: executing program 3 (id=3018): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001b80)=0x7ff, 0x8) 1m49.153354338s ago: executing program 3 (id=3019): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 1m49.104991536s ago: executing program 3 (id=3020): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x7}, 0x2) 1m49.099359292s ago: executing program 5 (id=3021): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000001f0001c000000000047d5c"]) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00001fa000/0x2000)=nil, &(0x7f000063e000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000274000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000543000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) 1m48.966993072s ago: executing program 5 (id=3023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m48.841445114s ago: executing program 5 (id=3024): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f00000003c0), 0x1, 0x145602) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) 1m48.783681024s ago: executing program 3 (id=3025): socket(0x18, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) close(0x3) 1m48.427133881s ago: executing program 35 (id=3025): socket(0x18, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) close(0x3) 1m48.423001339s ago: executing program 5 (id=3028): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 1m48.259608563s ago: executing program 5 (id=3030): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4000) 1m47.099714784s ago: executing program 5 (id=3034): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000480)=""/254, 0xfe}], 0x1, 0x0, 0x4) 1m46.735471546s ago: executing program 36 (id=3034): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000480)=""/254, 0xfe}], 0x1, 0x0, 0x4) 3.721691295s ago: executing program 8 (id=4327): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) 3.635090243s ago: executing program 8 (id=4328): memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f00000000c0)) 3.634380979s ago: executing program 8 (id=4330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0xffffffffffffffff, 0x0, 0x2}}, "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", "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"}) 3.466958751s ago: executing program 8 (id=4331): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 3.466364172s ago: executing program 8 (id=4333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x1}) 3.099140232s ago: executing program 8 (id=4336): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000340)={r1, 0x18}, &(0x7f0000000380)=0xf) 2.69075985s ago: executing program 6 (id=4339): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = inotify_init1(0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.558692743s ago: executing program 6 (id=4342): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x3}, 0x8) 2.386187564s ago: executing program 6 (id=4343): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat2(r1, &(0x7f0000000180)='./bus\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x5) 2.30778233s ago: executing program 6 (id=4344): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) write$binfmt_aout(r1, 0x0, 0x124) 2.239517235s ago: executing program 6 (id=4346): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000940)={0xa, 0x4e20, 0xa6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) 2.103046799s ago: executing program 6 (id=4348): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xb48) recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x12100) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) 837.299877ms ago: executing program 7 (id=4371): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) 826.109691ms ago: executing program 4 (id=4372): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600b409000008002700010000000800a1"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 714.181098ms ago: executing program 7 (id=4373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/92, 0x5c}], 0x1, 0x2, 0x9) 646.952782ms ago: executing program 4 (id=4374): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x2, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x1080}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000240)='7', 0x1, 0xfffffffffffff801}) 635.108689ms ago: executing program 7 (id=4375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac08, 0xfac0a, 0xfac0f]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x0) 603.916012ms ago: executing program 4 (id=4376): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000a80)={{@any, 0x4}, {@local, 0x3}, 0x400, "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"}, 0x418, 0x7}) 527.959638ms ago: executing program 4 (id=4377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) 431.047907ms ago: executing program 7 (id=4378): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) sendmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x10) 424.822917ms ago: executing program 4 (id=4379): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000001c40)=""/73, 0x49}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xb}, 0x40016002) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10140, 0x0) 369.642898ms ago: executing program 7 (id=4380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r1, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac05, 0xfac01]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) 172.951µs ago: executing program 7 (id=4381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf257300000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x2400c0a0}, 0x40450) 0s ago: executing program 4 (id=4382): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000000140)=""/196, 0xc4}, {&(0x7f0000000600)=""/185, 0xb9}, {&(0x7f0000000a40)=""/288, 0x120}, {&(0x7f0000003540)=""/4162, 0x1042}], 0x6}, 0x10000) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000009c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): 276.790053][T12290] tipc: Enabled bearer , priority 10 [ 276.843010][T12295] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2766'. [ 276.846257][ T5923] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 277.003066][T12301] netlink: 'syz.5.2769': attribute type 1 has an invalid length. [ 277.011008][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 277.011097][T12301] netlink: 624 bytes leftover after parsing attributes in process `syz.5.2769'. [ 277.034142][ T5923] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 277.042366][ T5923] usb 4-1: config 0 has no interface number 0 [ 277.048877][ T5923] usb 4-1: config 0 interface 12 has no altsetting 0 [ 277.059067][ T5923] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 277.068550][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.076704][ T5923] usb 4-1: Product: syz [ 277.081274][ T5923] usb 4-1: Manufacturer: syz [ 277.086445][ T5923] usb 4-1: SerialNumber: syz [ 277.094672][ T5923] usb 4-1: config 0 descriptor?? [ 277.312822][ T10] usb 5-1: USB disconnect, device number 19 [ 277.329797][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 277.798214][ T10] tipc: Node number set to 2886997162 [ 277.847054][ T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 277.903010][T12330] program syz.6.2783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.921618][ T5923] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 277.955400][ T5923] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 277.966523][ T5923] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 277.974382][ T5923] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 277.996692][ T5923] usb 4-1: USB disconnect, device number 39 [ 278.006497][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 278.021261][ T43] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 278.034288][ T43] usb 5-1: config 0 has no interface number 0 [ 278.052969][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 278.063810][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.076043][ T43] usb 5-1: Product: syz [ 278.081068][ T43] usb 5-1: Manufacturer: syz [ 278.103810][ T43] usb 5-1: SerialNumber: syz [ 278.119113][ T43] usb 5-1: config 0 descriptor?? [ 278.131487][ T43] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 278.351565][ T43] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 278.380867][ T43] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 278.598383][T12352] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2792'. [ 278.609226][T12352] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2792'. [ 278.621031][T12352] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2792'. [ 278.763191][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 278.763714][ T5923] usb 5-1: USB disconnect, device number 20 [ 278.789736][ T5923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 278.812154][ T5923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 278.825507][ T5923] quatech2 5-1:0.51: device disconnected [ 278.976349][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 279.146304][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 279.156253][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.167362][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 279.178732][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.190167][ T10] usb 4-1: config 0 descriptor?? [ 279.462770][T12372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2801'. [ 279.483123][T12372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2801'. [ 279.535562][ T30] audit: type=1326 audit(1752657654.275:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.6.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 279.557921][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.633989][ T10] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 279.762717][T12382] @: renamed from vlan0 (while UP) [ 280.014220][ T43] usb 4-1: USB disconnect, device number 40 [ 280.126300][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 280.291970][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 280.334343][ T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 280.346351][ T10] usb 7-1: config 0 has no interface number 0 [ 280.358142][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 280.376225][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.384688][ T10] usb 7-1: Product: syz [ 280.389226][ T10] usb 7-1: Manufacturer: syz [ 280.393860][ T10] usb 7-1: SerialNumber: syz [ 280.420530][ T10] usb 7-1: config 0 descriptor?? [ 280.425857][T12406] program syz.5.2818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.434299][ T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 280.642613][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 280.664290][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 281.055188][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 281.067685][ T5923] usb 7-1: USB disconnect, device number 6 [ 281.082066][ T5923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 281.104590][ T5923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 281.106295][ T43] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 281.118126][ T5923] quatech2 7-1:0.51: device disconnected [ 281.298388][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.312655][ T43] usb 4-1: config 0 has no interfaces? [ 281.318327][ T43] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.331316][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.342089][ T43] usb 4-1: config 0 descriptor?? [ 281.413261][T12430] __nla_validate_parse: 2 callbacks suppressed [ 281.413274][T12430] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2826'. [ 281.431930][T12430] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2826'. [ 281.443669][T12430] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2826'. [ 281.562588][ T5923] usb 4-1: USB disconnect, device number 41 [ 281.994772][T12456] program syz.5.2838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.213156][T12469] netlink: 'syz.6.2842': attribute type 1 has an invalid length. [ 282.221051][T12469] netlink: 624 bytes leftover after parsing attributes in process `syz.6.2842'. [ 282.322583][T12473] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2844'. [ 283.042828][T12510] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2862'. [ 283.440707][T12528] bridge0: entered allmulticast mode [ 283.836538][ T5923] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 283.980716][ T30] audit: type=1326 audit(1752657658.725:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.012668][ T30] audit: type=1326 audit(1752657658.755:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.046544][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 284.055871][ T30] audit: type=1326 audit(1752657658.785:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.078112][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.099633][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.112093][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.133403][ T30] audit: type=1326 audit(1752657658.785:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.160741][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.175371][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 284.189237][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.202574][ T30] audit: type=1326 audit(1752657658.785:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.224818][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.239293][ T30] audit: type=1326 audit(1752657658.785:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.261546][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.273610][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 284.283415][ T5923] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 284.294271][ T5923] usb 4-1: Manufacturer: syz [ 284.301479][ T30] audit: type=1326 audit(1752657658.785:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.323717][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.335281][ T5923] usb 4-1: config 0 descriptor?? [ 284.356859][ T30] audit: type=1326 audit(1752657658.785:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.380337][ T30] audit: type=1326 audit(1752657658.785:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 284.696612][ T5923] rc_core: IR keymap rc-hauppauge not found [ 284.702564][ T5923] Registered IR keymap rc-empty [ 284.716296][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.738325][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.777339][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 284.808564][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 284.831017][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.867350][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.886255][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.906275][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.937360][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.976833][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.012065][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.056271][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.078810][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.116336][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.146319][ T5923] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 285.155658][ T5923] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 285.186441][ T5923] usb 4-1: USB disconnect, device number 42 [ 285.380691][T12578] tipc: Started in network mode [ 285.386920][T12579] Bluetooth: hci5: Frame reassembly failed (-84) [ 285.403887][T12578] tipc: Node identity ac1414aa, cluster identity 4711 [ 285.412016][T12578] tipc: Enabled bearer , priority 10 [ 285.412769][ T3008] Bluetooth: hci5: Frame reassembly failed (-84) [ 285.920963][T12605] bridge0: entered allmulticast mode [ 286.526290][ T43] tipc: Node number set to 2886997162 [ 286.999581][T12667] tun0: tun_chr_ioctl cmd 1074025675 [ 287.005019][T12667] tun0: persist disabled [ 287.056350][ T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 287.226959][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 287.255768][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.274422][ T43] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 287.283638][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.297329][ T43] usb 5-1: config 0 descriptor?? [ 287.416344][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 287.416430][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 287.443368][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 287.443407][ T30] audit: type=1326 audit(1752657662.185:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16cb8e929 code=0x7fc00000 [ 287.484070][ T30] audit: type=1326 audit(1752657662.185:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd16cb8e929 code=0x7fc00000 [ 287.509880][ T30] audit: type=1326 audit(1752657662.185:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16cb8e929 code=0x7fc00000 [ 287.533334][ T30] audit: type=1326 audit(1752657662.185:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16cb8e929 code=0x7fc00000 [ 287.765579][ T43] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 288.058358][ T5942] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 288.169945][ T9] usb 5-1: USB disconnect, device number 21 [ 288.237931][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.248267][ T5942] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 288.257878][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.272942][ T5942] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 288.282261][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.290308][ T5942] usb 6-1: Product: syz [ 288.294497][ T5942] usb 6-1: Manufacturer: syz [ 288.301136][ T5942] usb 6-1: SerialNumber: syz [ 288.301148][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 288.309257][ T5942] usb 6-1: config 0 descriptor?? [ 288.327723][ T5942] usb 6-1: Found UVC 34.00 device syz (8086:0b5b) [ 288.334184][ T5942] usb 6-1: No valid video chain found. [ 288.522148][ T5900] usb 6-1: USB disconnect, device number 16 [ 288.984015][T12714] tun0: tun_chr_ioctl cmd 1074025675 [ 288.991992][T12714] tun0: persist disabled [ 289.338132][ T5854] Bluetooth: hci6: command 0x1003 tx timeout [ 289.345097][ T5860] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 289.430132][T12732] tipc: New replicast peer: 255.255.255.255 [ 289.439882][T12732] tipc: Enabled bearer , priority 10 [ 289.447528][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2965'. [ 289.456733][T12732] tipc: Disabling bearer [ 290.008009][T12751] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2974'. [ 290.553803][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 290.577297][T12774] Bluetooth: hci5: Frame reassembly failed (-84) [ 290.697280][ T1170] block nbd0: Possible stuck request ffff888025490000: control (read@0,1024B). Runtime 180 seconds [ 290.708305][ T1170] block nbd0: Possible stuck request ffff8880254901c0: control (read@1024,1024B). Runtime 180 seconds [ 290.720070][ T1170] block nbd0: Possible stuck request ffff888025490380: control (read@2048,1024B). Runtime 180 seconds [ 290.731572][ T1170] block nbd0: Possible stuck request ffff888025490540: control (read@3072,1024B). Runtime 180 seconds [ 290.785040][T12787] input: syz0 as /devices/virtual/input/input39 [ 291.206274][ T5942] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 291.377055][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 291.396218][ T5942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.418031][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.435822][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.451413][ T5942] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 291.464011][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.488342][ T5942] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 291.506221][ T5942] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 291.514269][ T5942] usb 7-1: Manufacturer: syz [ 291.521847][ T5942] usb 7-1: config 0 descriptor?? [ 291.816334][ T5942] rc_core: IR keymap rc-hauppauge not found [ 291.822293][ T5942] Registered IR keymap rc-empty [ 291.830803][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 291.866258][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 291.887213][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 291.901390][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input40 [ 291.915635][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 291.946357][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 291.956351][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 291.980005][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 292.016238][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 292.046290][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 292.066350][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 292.091165][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 292.107775][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.118668][ T43] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 292.126326][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 292.128078][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.146613][ T43] usb 6-1: config 0 descriptor?? [ 292.147478][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 292.176490][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 292.208289][ T5942] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 292.217962][ T5942] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 292.232493][ T5942] usb 7-1: USB disconnect, device number 7 [ 292.563162][ T43] razer 0003:1532:010E.0021: unknown main item tag 0x0 [ 292.570208][ T43] razer 0003:1532:010E.0021: unknown main item tag 0x0 [ 292.577471][ T43] razer 0003:1532:010E.0021: unknown main item tag 0x0 [ 292.584567][ T43] razer 0003:1532:010E.0021: unknown main item tag 0x0 [ 292.591545][ T43] razer 0003:1532:010E.0021: unknown main item tag 0x0 [ 292.616783][ T5854] Bluetooth: hci5: command 0x1003 tx timeout [ 292.617149][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 292.770975][ T43] razer 0003:1532:010E.0021: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 293.001453][ T43] usb 6-1: USB disconnect, device number 17 [ 293.601154][ T30] audit: type=1326 audit(1752657668.335:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.4.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 293.825433][T12859] loop1: detected capacity change from 0 to 524255232 [ 293.943441][ T992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.050324][ T992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.124218][ T992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.193720][ T992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.446814][ T992] bridge_slave_1: left allmulticast mode [ 294.452508][ T992] bridge_slave_1: left promiscuous mode [ 294.481339][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.641552][ T992] bridge_slave_0: left allmulticast mode [ 294.656236][ T992] bridge_slave_0: left promiscuous mode [ 294.663485][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.913591][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.931190][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.942439][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.953723][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.962190][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.102410][ T992] bridge0 (unregistering): left allmulticast mode [ 295.188081][ T72] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.273646][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.292352][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.305908][ T992] bond0 (unregistering): Released all slaves [ 295.332752][T12870] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.361135][T12873] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.368404][T12873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.500635][T12890] misc userio: Begin command sent, but we're already running [ 295.913860][ T992] hsr_slave_0: left promiscuous mode [ 295.952474][ T992] hsr_slave_1: left promiscuous mode [ 295.996358][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.003804][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.095289][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.127266][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.239350][ T992] veth1_macvtap: left promiscuous mode [ 296.245415][ T992] veth0_macvtap: left promiscuous mode [ 296.281903][ T992] veth1_vlan: left promiscuous mode [ 296.288623][ T992] veth0_vlan: left promiscuous mode [ 296.561943][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.579414][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.590029][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.604818][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.623257][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.917010][ T992] team0 (unregistering): Port device team_slave_1 removed [ 296.947577][ T992] team0 (unregistering): Port device C removed [ 297.019959][ T5856] Bluetooth: hci0: command tx timeout [ 297.629763][T12880] chnl_net:caif_netlink_parms(): no params data found [ 297.761245][T12929] netlink: 'syz.6.3042': attribute type 5 has an invalid length. [ 297.774780][T12929] netlink: 'syz.6.3042': attribute type 25 has an invalid length. [ 297.993960][ T992] IPVS: stop unused estimator thread 0... [ 298.067145][T12880] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.074739][T12880] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.086793][T12880] bridge_slave_0: entered allmulticast mode [ 298.094736][T12880] bridge_slave_0: entered promiscuous mode [ 298.134176][T12880] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.152762][T12880] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.166282][ T43] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 298.179591][T12880] bridge_slave_1: entered allmulticast mode [ 298.191223][T12880] bridge_slave_1: entered promiscuous mode [ 298.287532][T12916] chnl_net:caif_netlink_parms(): no params data found [ 298.296254][ T5860] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 298.344071][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.368673][ T43] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 298.411326][ T43] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 298.434373][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.452402][ T43] usb 7-1: Product: syz [ 298.457586][ T992] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.474609][ T43] usb 7-1: Manufacturer: syz [ 298.492334][ T43] usb 7-1: SerialNumber: syz [ 298.527807][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.531642][ T43] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 298.674279][ T992] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.697025][ T5856] Bluetooth: hci5: command tx timeout [ 298.740997][T12880] team0: Port device team_slave_0 added [ 298.785827][ T992] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.809891][T12880] team0: Port device team_slave_1 added [ 298.921225][T12916] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.930278][T12916] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.947438][T12916] bridge_slave_0: entered allmulticast mode [ 298.955931][T12916] bridge_slave_0: entered promiscuous mode [ 298.985294][ T992] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.007757][T12880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.014775][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.040765][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.049319][T12880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.063649][T12880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.070730][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.096635][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.096833][ T5856] Bluetooth: hci0: command tx timeout [ 299.120977][T12880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.138165][T12916] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.145696][T12916] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.161497][T12916] bridge_slave_1: entered allmulticast mode [ 299.172348][T12916] bridge_slave_1: entered promiscuous mode [ 299.271737][T12916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.286053][T12916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.372334][T12880] hsr_slave_0: entered promiscuous mode [ 299.386902][ T43] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 299.402816][T12880] hsr_slave_1: entered promiscuous mode [ 299.413552][T12880] debugfs: 'hsr0' already exists in 'hsr' [ 299.421467][T12880] Cannot create hsr debugfs directory [ 299.427958][ T43] usb 7-1: USB disconnect, device number 9 [ 299.442162][T12916] team0: Port device team_slave_0 added [ 299.464712][T12916] team0: Port device team_slave_1 added [ 299.535158][T12972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.731738][T12916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.753987][T12916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.780086][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.791585][T12916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.881108][T12916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.893785][T12916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.931646][T12916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.042763][ T992] bridge0: port 3(batadv0) entered disabled state [ 300.105250][ T992] bridge_slave_1: left allmulticast mode [ 300.119122][ T992] bridge_slave_1: left promiscuous mode [ 300.125050][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.215706][ T992] bridge_slave_0: left promiscuous mode [ 300.228636][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.785154][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.786442][ T5856] Bluetooth: hci5: command tx timeout [ 300.805410][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.815643][ T992] bond0 (unregistering): Released all slaves [ 300.991237][T12916] hsr_slave_0: entered promiscuous mode [ 301.007201][T12916] hsr_slave_1: entered promiscuous mode [ 301.014564][T12916] debugfs: 'hsr0' already exists in 'hsr' [ 301.027264][T12916] Cannot create hsr debugfs directory [ 301.094790][ T992] tipc: Disabling bearer [ 301.102579][ T992] tipc: Left network mode [ 301.176774][ T5856] Bluetooth: hci0: command tx timeout [ 301.512990][ T992] hsr_slave_0: left promiscuous mode [ 301.524967][ T992] hsr_slave_1: left promiscuous mode [ 301.532701][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.544426][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.553444][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.563258][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.606088][ T992] veth1_macvtap: left promiscuous mode [ 301.612250][ T992] veth0_macvtap: left promiscuous mode [ 301.626525][ T992] veth1_vlan: left promiscuous mode [ 301.632062][ T992] veth0_vlan: left promiscuous mode [ 301.879666][T13032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.320799][ T992] team0 (unregistering): Port device team_slave_1 removed [ 302.370533][ T992] team0 (unregistering): Port device team_slave_0 removed [ 302.867058][ T5856] Bluetooth: hci5: command tx timeout [ 303.079987][T12880] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.140633][T12880] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.198274][T12880] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.256913][ T5856] Bluetooth: hci0: command tx timeout [ 303.266597][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3086'. [ 303.294208][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3086'. [ 303.306313][T12880] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.650834][T12916] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 303.689832][T12916] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 303.731476][T12916] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 303.767707][T12916] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 304.105426][T12880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.164022][T12880] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.212261][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.219575][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.291012][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.298277][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.401475][T12916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.500506][T12916] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.543809][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.550994][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.623280][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.630583][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.936857][ T5856] Bluetooth: hci5: command tx timeout [ 305.295435][T12916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.322600][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.653718][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3107'. [ 306.145519][T12916] veth0_vlan: entered promiscuous mode [ 306.239221][T12916] veth1_vlan: entered promiscuous mode [ 306.268873][T13171] C: renamed from team_slave_0 (while UP) [ 306.303008][T13171] netlink: 'syz.4.3111': attribute type 1 has an invalid length. [ 306.312590][T13171] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3111'. [ 306.415280][T12916] veth0_macvtap: entered promiscuous mode [ 306.453701][T12916] veth1_macvtap: entered promiscuous mode [ 306.489105][T12880] veth0_vlan: entered promiscuous mode [ 306.523539][T12880] veth1_vlan: entered promiscuous mode [ 306.569098][T12916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.608719][T12916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.661918][ T3509] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.680735][ T3509] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.708093][ T3509] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.725114][T12880] veth0_macvtap: entered promiscuous mode [ 306.735549][ T3509] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.749001][T12880] veth1_macvtap: entered promiscuous mode [ 306.829033][T12880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.892218][T12880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.944756][ T3008] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.966773][ T2982] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.982921][ T2982] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.992441][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.013497][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.056037][ T2982] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.160463][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.209565][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.297175][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.305496][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.441638][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.468978][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.793705][T13216] o2cb: This node has not been configured. [ 307.858193][T13216] o2cb: Cluster check failed. Fix errors before retrying. [ 307.873192][T13216] (syz.4.3123,13216,0):user_dlm_register:674 ERROR: status = -22 [ 307.885469][T13216] (syz.4.3123,13216,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 308.296932][ T5900] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 308.470439][ T5900] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 308.489956][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.530900][ T5900] usb 8-1: config 0 descriptor?? [ 308.559549][ T5900] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 308.676237][ T9] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 308.830270][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 308.846260][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.876459][ T9] usb 7-1: config 0 descriptor?? [ 308.989405][ T5900] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 309.064643][T13266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3140'. [ 309.077772][T13266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3140'. [ 309.101252][T13266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3140'. [ 309.202480][ T5900] gspca_cpia1: usb_control_msg 01, error -32 [ 309.210083][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 309.219583][ T5900] gspca_cpia1: usb_control_msg 01, error -32 [ 309.226493][ T5900] gspca_cpia1: usb_control_msg 01, error -71 [ 309.250246][ T5900] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 309.297286][ T5900] usb 8-1: USB disconnect, device number 2 [ 309.697407][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 309.735899][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 309.796621][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 309.820346][ T9] usb 7-1: USB disconnect, device number 10 [ 310.126286][ T5942] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 310.290838][ T5942] usb 9-1: Using ep0 maxpacket: 16 [ 310.314026][ T5942] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.337361][ T5942] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.356081][ T5942] usb 9-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 310.370185][ T5942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.395644][ T5942] usb 9-1: config 0 descriptor?? [ 310.829668][ T5942] itetech 0003:048D:8595.0022: item fetching failed at offset 5/7 [ 310.860153][ T5942] itetech 0003:048D:8595.0022: probe with driver itetech failed with error -22 [ 311.002524][T13324] Failed to get privilege flags for destination (handle=0x2:0x0) [ 311.319853][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3160'. [ 311.343459][T13340] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 311.353192][ T3509] Bluetooth: hci2: Frame reassembly failed (-84) [ 311.515502][T13345] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3163'. [ 311.527789][T13345] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3163'. [ 311.691713][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3165'. [ 311.703994][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3165'. [ 311.714880][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3165'. [ 312.404887][ T9] IPVS: starting estimator thread 0... [ 312.518193][T13380] IPVS: using max 26 ests per chain, 62400 per kthread [ 312.675765][T13390] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3177'. [ 312.890780][ T43] usb 9-1: USB disconnect, device number 2 [ 313.416529][ T5856] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 313.416589][ T5860] Bluetooth: hci2: command 0x1003 tx timeout [ 313.603924][T13424] loop9: detected capacity change from 0 to 7 [ 313.620614][ T5863] Dev loop9: unable to read RDB block 7 [ 313.631621][ T5863] loop9: AHDI p1 p2 [ 313.635573][ T5863] loop9: partition table partially beyond EOD, truncated [ 313.657446][ T5863] loop9: p1 start 1835360114 is beyond EOD, truncated [ 313.680876][T13424] Dev loop9: unable to read RDB block 7 [ 313.701002][T13424] loop9: AHDI p1 p2 [ 313.711139][T13424] loop9: partition table partially beyond EOD, truncated [ 313.746691][T13424] loop9: p1 start 1835360114 is beyond EOD, truncated [ 314.266653][ T5900] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 314.458522][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 314.485150][ T5900] usb 8-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 314.507885][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.538459][ T5900] usb 8-1: config 0 descriptor?? [ 315.008639][ T5900] ntrig 0003:1B96:0013.0023: unknown main item tag 0x0 [ 315.028765][ T5900] ntrig 0003:1B96:0013.0023: unknown main item tag 0x0 [ 315.035696][ T5900] ntrig 0003:1B96:0013.0023: unknown main item tag 0x0 [ 315.058081][ T5900] ntrig 0003:1B96:0013.0023: hidraw0: USB HID v0.00 Device [HID 1b96:0013] on usb-dummy_hcd.7-1/input0 [ 315.195295][ T5900] ntrig 0003:1B96:0013.0023: Firmware version: 1.12.19.27.7 (f2d3 677b) [ 315.309540][T13490] __nla_validate_parse: 3 callbacks suppressed [ 315.309559][T13490] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3211'. [ 315.431439][ T3099] usb 8-1: USB disconnect, device number 3 [ 315.528353][T13499] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3214'. [ 315.563040][T13499] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3214'. [ 315.627383][T13503] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3214'. [ 316.958228][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.964672][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.599609][T13578] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 318.607064][T13578] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 318.870718][ T30] audit: type=1326 audit(1752657693.615:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13579 comm="syz.7.3238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d7bf8e929 code=0x0 [ 319.555401][ T30] audit: type=1326 audit(1752657694.295:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.4.3243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x0 [ 319.836706][T13611] team0: No ports can be present during mode change [ 320.288219][T13623] batadv_slave_0: entered promiscuous mode [ 320.337630][T13622] batadv_slave_0: left promiscuous mode [ 320.783046][ T1170] block nbd0: Possible stuck request ffff888025490000: control (read@0,1024B). Runtime 210 seconds [ 320.794858][ T1170] block nbd0: Possible stuck request ffff8880254901c0: control (read@1024,1024B). Runtime 210 seconds [ 320.806306][ T1170] block nbd0: Possible stuck request ffff888025490380: control (read@2048,1024B). Runtime 210 seconds [ 320.817866][ T1170] block nbd0: Possible stuck request ffff888025490540: control (read@3072,1024B). Runtime 210 seconds [ 321.055220][T13650] blkio.reset_stats is deprecated [ 321.063596][T13652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.706461][ T43] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 321.956288][ T43] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 321.976191][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.996442][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.038941][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 322.187621][ T43] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 322.197719][ T43] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 322.206432][ T43] usb 9-1: Manufacturer: syz [ 322.258396][ T43] usb 9-1: config 0 descriptor?? [ 322.334826][T13687] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3273'. [ 322.683901][ T43] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 322.703410][ T43] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 322.806204][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 322.976183][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 322.984311][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 322.991262][ T9] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 323.002683][ T3099] usb 9-1: USB disconnect, device number 3 [ 323.039993][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.069728][ T9] usb 8-1: config 0 descriptor?? [ 323.341591][T13715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3281'. [ 323.381843][T13715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3281'. [ 323.399324][T13715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3281'. [ 323.495292][T13718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3282'. [ 323.798343][T13511] Set syz1 is full, maxelem 65536 reached [ 323.839992][ T9] corsair-cpro 0003:1B1C:0C10.0025: unknown main item tag 0x0 [ 323.870031][ T9] corsair-cpro 0003:1B1C:0C10.0025: unknown main item tag 0x0 [ 323.881671][ T9] corsair-cpro 0003:1B1C:0C10.0025: unknown main item tag 0x0 [ 323.926704][ T9] corsair-cpro 0003:1B1C:0C10.0025: unknown main item tag 0x0 [ 323.942474][ T9] corsair-cpro 0003:1B1C:0C10.0025: unknown main item tag 0x0 [ 323.973432][ T9] corsair-cpro 0003:1B1C:0C10.0025: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0 [ 324.408764][ T9] corsair-cpro 0003:1B1C:0C10.0025: probe with driver corsair-cpro failed with error -110 [ 324.466764][ T9] usb 8-1: USB disconnect, device number 4 [ 324.968230][T13769] sp0: Synchronizing with TNC [ 325.237179][T13781] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3305'. [ 325.326357][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 325.496330][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 325.513259][ T9] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 325.526208][ T9] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 325.544860][ T9] usb 5-1: config 0 has no interface number 0 [ 325.565412][ T9] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.590486][ T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 325.606797][ T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 325.623737][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 325.647065][ T9] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 325.655221][ T9] usb 5-1: Product: syz [ 325.682560][ T9] usb 5-1: Manufacturer: syz [ 325.721115][ T9] usb 5-1: config 0 descriptor?? [ 325.740489][T13774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 325.925238][T13797] netlink: 'syz.8.3311': attribute type 37 has an invalid length. [ 326.260023][T13805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.388674][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input42 [ 326.613728][T13813] wireguard: wg1: Could not create IPv4 socket [ 326.656973][ T9] usb 5-1: USB disconnect, device number 22 [ 326.663037][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 326.773709][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3321'. [ 327.008201][ T5923] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 327.166977][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 327.186969][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.218864][ T5923] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.232700][ T5923] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 327.248514][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.296837][ T5923] usb 9-1: config 0 descriptor?? [ 327.312793][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3332'. [ 327.739725][ T5942] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 327.751099][ T5923] hid-multitouch 0003:0EEF:72C4.0026: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.8-1/input0 [ 327.926327][ T5942] usb 8-1: Using ep0 maxpacket: 32 [ 327.940192][ T5942] usb 8-1: config 0 interface 0 has no altsetting 0 [ 327.954080][ T5942] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 327.957652][ T5851] usb 9-1: USB disconnect, device number 4 [ 327.974814][ T5942] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.992052][ T5942] usb 8-1: Product: syz [ 328.006459][ T5942] usb 8-1: Manufacturer: syz [ 328.011151][ T5942] usb 8-1: SerialNumber: syz [ 328.030044][ T5942] usb 8-1: config 0 descriptor?? [ 328.451436][ T5942] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 328.652824][ T5942] gs_usb 8-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 328.743422][ T5942] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -22 [ 328.861837][ T5942] usb 8-1: USB disconnect, device number 5 [ 329.236386][T13915] program syz.6.3356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.440513][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3359'. [ 329.472404][ T5851] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 329.656559][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 329.667873][ T5851] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 329.676084][ T5851] usb 5-1: config 0 has no interface number 0 [ 329.712874][ T5851] usb 5-1: config 0 interface 247 has no altsetting 0 [ 329.727548][ T5851] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=f2.60 [ 329.749014][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.764494][ T5851] usb 5-1: Product: syz [ 329.781486][ T5851] usb 5-1: Manufacturer: syz [ 329.810532][ T5851] usb 5-1: SerialNumber: syz [ 329.827028][ T5851] usb 5-1: config 0 descriptor?? [ 329.843746][ T5851] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 329.886223][ T3099] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 329.897093][ T5851] dvb-usb: bulk message failed: -22 (2/0) [ 329.915917][ T5851] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 329.945850][ T5851] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 329.961733][ T5851] usb 5-1: media controller created [ 329.969976][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 329.985473][ T5851] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 329.995089][ T5851] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 330.036355][ T3099] usb 7-1: Using ep0 maxpacket: 16 [ 330.048133][ T3099] usb 7-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.060331][ T3099] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 330.070571][ T3099] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 330.079857][ T5851] rc_core: IR keymap rc-dtt200u not found [ 330.084879][ T3099] usb 7-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 330.092099][ T5851] Registered IR keymap rc-empty [ 330.099784][ T3099] usb 7-1: config 1 interface 0 has no altsetting 0 [ 330.113558][ T5851] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 330.131461][ T3099] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.144890][ T3099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 330.152071][ T5851] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input43 [ 330.159271][ T3099] usb 7-1: SerialNumber: syz [ 330.175101][T13932] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 330.181329][ T5851] dvb-usb: schedule remote query interval to 300 msecs. [ 330.190879][T13932] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 330.197203][ T5851] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 330.217240][ T5851] usb 5-1: USB disconnect, device number 23 [ 330.313561][ T5851] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 330.811497][T13932] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 330.847540][T13932] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 331.073679][ T3099] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 331.102010][ T3099] usb 7-1: USB disconnect, device number 11 [ 332.446418][ T5942] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 332.593439][T14006] kernel read not supported for file /!se÷ih,i¬PælNnuxselinux (pid: 14006 comm: syz.8.3393) [ 332.613430][ T30] audit: type=1800 audit(1752657707.355:69): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3393" name=217365F769682C1769AC50E66C4E6E757873656C696E7578 dev="mqueue" ino=57847 res=0 errno=0 [ 332.614855][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0) [ 332.637039][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.666428][ T5942] usb 7-1: Using ep0 maxpacket: 8 [ 332.685967][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.704462][ T5942] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 332.715024][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.734538][ T5942] usb 7-1: config 0 descriptor?? [ 332.997262][ T5942] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 333.210853][ T5851] usb 7-1: USB disconnect, device number 12 [ 333.849282][T14042] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 333.926309][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 333.961416][T14048] block nbd7: not configured, cannot reconfigure [ 334.093508][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 334.128283][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 334.173228][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.205511][ T24] usb 5-1: Product: syz [ 334.213733][ T24] usb 5-1: Manufacturer: syz [ 334.234165][ T24] usb 5-1: SerialNumber: syz [ 334.271276][ T24] usb 5-1: config 0 descriptor?? [ 334.417899][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 334.524063][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.544539][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 334.574004][ T24] usb 5-1: USB disconnect, device number 24 [ 334.586619][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 334.606204][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 334.631884][ T10] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 334.652208][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.676166][ T10] usb 8-1: Product: syz [ 334.680388][ T10] usb 8-1: Manufacturer: syz [ 334.705312][ T10] usb 8-1: SerialNumber: syz [ 334.725796][ T10] usb 8-1: config 0 descriptor?? [ 335.086453][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 335.154274][ T10] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 335.266907][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 335.288488][ T24] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 335.307212][ T24] usb 9-1: config 0 has no interface number 0 [ 335.323590][ T24] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 335.345710][ T24] usb 9-1: config 0 interface 196 has no altsetting 0 [ 335.369710][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 335.385528][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.393933][ T24] usb 9-1: Product: syz [ 335.404048][ T24] usb 9-1: Manufacturer: syz [ 335.414157][ T24] usb 9-1: SerialNumber: syz [ 335.430471][ T24] usb 9-1: config 0 descriptor?? [ 335.443948][T14078] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 335.476366][ T5942] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 335.557467][ T10] gs_usb 8-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 335.613203][ T10] usb 8-1: USB disconnect, device number 6 [ 335.648878][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.686555][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.716256][ T5942] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 335.730847][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.743187][ T5942] usb 5-1: config 0 descriptor?? [ 336.108619][ T24] ipheth 9-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 336.151503][ T24] ipheth 9-1:0.196: Apple iPhone USB Ethernet device attached [ 336.165760][ T5942] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 336.211821][ T5942] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 336.286691][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 336.334952][ T3099] usb 9-1: USB disconnect, device number 5 [ 336.379561][ T5942] cp2112 0003:10C4:EA90.0027: error requesting version [ 336.431077][ T5942] cp2112 0003:10C4:EA90.0027: probe with driver cp2112 failed with error -71 [ 336.447569][T14120] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3422'. [ 336.447739][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 336.477867][ T3099] ipheth 9-1:0.196: Apple iPhone USB Ethernet now disconnected [ 336.492897][ T5942] usb 5-1: USB disconnect, device number 25 [ 336.509255][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.542117][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.573394][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 336.599240][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.646480][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.665924][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.916655][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 336.923484][ T10] usbtmc 7-1:16.0: can't read capabilities [ 337.151819][ T10] usb 7-1: USB disconnect, device number 13 [ 337.519889][T14124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.534558][T14124] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 337.555976][T14124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.570585][T14124] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 337.585034][T14124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.599053][T14124] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 337.652529][T14124] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 337.665615][T14124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.675573][T14124] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 337.699933][T14124] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 337.726962][T14124] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 337.733026][T14124] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 337.755387][T14124] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 338.314095][T14179] program syz.8.3435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.783706][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 339.366519][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 339.562740][ T10] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 339.581377][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 339.593848][ T10] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 339.612453][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.623907][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.634962][ T10] usb 7-1: Product: syz [ 339.639395][ T10] usb 7-1: Manufacturer: syz [ 339.644016][ T10] usb 7-1: SerialNumber: syz [ 339.656397][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 339.752825][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout [ 339.758970][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.867099][ T10] cdc_ncm 7-1:1.0: bind() failure [ 339.891033][ T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 339.906235][ T10] cdc_ncm 7-1:1.1: bind() failure [ 339.932963][ T10] usb 7-1: USB disconnect, device number 14 [ 340.058267][ T5851] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 340.245431][ T5851] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.265163][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.279696][ T5851] usb 5-1: Product: syz [ 340.283998][ T5851] usb 5-1: Manufacturer: syz [ 340.295156][ T5851] usb 5-1: SerialNumber: syz [ 340.325181][ T5851] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 340.364054][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.856504][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 341.228243][ T5851] usb 5-1: USB disconnect, device number 26 [ 341.260877][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3462'. [ 341.297276][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3462'. [ 341.667232][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 341.686220][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 341.739607][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 341.819313][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout [ 341.825259][ T24] usb 5-1: Service connection timeout for: 257 [ 341.825655][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.837746][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 341.844607][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 341.855768][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.866235][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 341.874647][ T24] ath9k_htc: Failed to initialize the device [ 341.880226][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 341.902941][ T10] pvrusb2: ********** [ 341.907071][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 341.917891][ T10] pvrusb2: Important functionality might not be entirely working. [ 341.925765][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 341.937538][ T10] pvrusb2: ********** [ 341.956456][ T5851] usb 5-1: ath9k_htc: USB layer deinitialized [ 342.096375][ T2347] pvrusb2: Invalid write control endpoint [ 342.282283][ T2347] pvrusb2: Invalid write control endpoint [ 342.309773][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 342.327009][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 342.365926][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 342.381015][ T2347] pvrusb2: Device being rendered inoperable [ 342.396407][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 342.405902][ T10] usb 9-1: USB disconnect, device number 6 [ 342.413865][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 342.425728][ T2347] pvrusb2: Attached sub-driver cx25840 [ 342.432103][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 342.457354][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 342.517140][ T3099] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 342.676591][ T3099] usb 5-1: Using ep0 maxpacket: 8 [ 342.693853][ T3099] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 342.711045][ T3099] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 342.733215][ T3099] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.754896][ T3099] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.774282][ T3099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.784389][ T3099] usb 5-1: Product: syz [ 342.793038][ T3099] usb 5-1: Manufacturer: syz [ 342.803158][ T3099] usb 5-1: SerialNumber: syz [ 342.876421][ T5942] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 343.048239][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.076258][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.099219][ T5942] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 343.126270][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.159106][ T5942] usb 8-1: config 0 descriptor?? [ 343.438214][ T3099] usb 5-1: 0:2 : does not exist [ 343.603078][ T5942] steelseries 0003:1038:12B6.0028: unknown main item tag 0x3 [ 343.654326][ T10] usb 5-1: USB disconnect, device number 27 [ 343.674299][ T5942] steelseries 0003:1038:12B6.0028: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.7-1/input0 [ 343.818275][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 343.896524][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout [ 343.903297][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.080763][ T24] usb 8-1: USB disconnect, device number 7 [ 344.759488][T14385] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3493'. [ 344.831829][T14390] program syz.8.3494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.246373][ T5851] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 345.430286][ T5851] usb 5-1: Using ep0 maxpacket: 8 [ 345.448173][ T5851] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.479253][ T5851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.498089][ T5851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.511261][ T5851] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.545854][ T5851] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.555308][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.707267][ T5942] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 345.791861][ T5851] usb 5-1: GET_CAPABILITIES returned 0 [ 345.802634][ T5851] usbtmc 5-1:16.0: can't read capabilities [ 345.913416][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.938926][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.958210][ T5942] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 345.987407][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.008818][ T5942] usb 8-1: config 0 descriptor?? [ 346.045162][ T5851] usb 5-1: USB disconnect, device number 28 [ 346.356759][ T30] audit: type=1326 audit(1752657721.105:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.6.3514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x0 [ 346.444271][ T5942] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 346.466162][ T5942] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 346.473007][ T5942] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 346.498206][ T5942] isku 0003:1E7D:319C.0029: unknown main item tag 0x0 [ 346.509125][ T5942] isku 0003:1E7D:319C.0029: item fetching failed at offset 4/7 [ 346.526662][ T5942] isku 0003:1E7D:319C.0029: parse failed [ 346.532385][ T5942] isku 0003:1E7D:319C.0029: probe with driver isku failed with error -22 [ 346.666717][ T5942] usb 8-1: USB disconnect, device number 8 [ 347.545803][T14489] Bluetooth: MGMT ver 1.23 [ 347.747909][ T5942] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 347.916407][ T5942] usb 5-1: Using ep0 maxpacket: 8 [ 347.930602][ T5942] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 347.945555][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.954603][ T5942] usb 5-1: Product: syz [ 347.959231][ T5942] usb 5-1: Manufacturer: syz [ 347.963858][ T5942] usb 5-1: SerialNumber: syz [ 347.981081][ T5942] usb 5-1: config 0 descriptor?? [ 347.996843][ T5942] gspca_main: se401-2.14.0 probing 047d:5003 [ 348.254510][T14507] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3527'. [ 348.403481][ T5942] gspca_se401: ExtraFeatures: 255 [ 348.417087][ T5942] gspca_se401: Frame size: 2314x0 bayer [ 348.442971][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 348.459834][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 348.496339][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 348.502405][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 348.535025][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 348.552144][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 348.576225][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 348.612559][ T5942] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44 [ 348.661600][ T5942] usb 5-1: USB disconnect, device number 29 [ 348.775085][T14524] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3535'. [ 348.812496][T14524] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3535'. [ 348.844076][T14524] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3535'. [ 348.994124][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3536'. [ 349.016232][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3536'. [ 349.156911][T14534] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3539'. [ 349.331639][T14540] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.393006][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.400263][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.852570][T14564] team0: No ports can be present during mode change [ 350.006991][T14550] Set syz1 is full, maxelem 65536 reached [ 350.136288][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 350.346510][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.374447][ T10] usb 8-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 350.405975][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.484543][ T10] usb 8-1: config 0 descriptor?? [ 350.859440][ T1170] block nbd0: Possible stuck request ffff888025490000: control (read@0,1024B). Runtime 240 seconds [ 350.871334][ T1170] block nbd0: Possible stuck request ffff8880254901c0: control (read@1024,1024B). Runtime 240 seconds [ 350.882818][ T1170] block nbd0: Possible stuck request ffff888025490380: control (read@2048,1024B). Runtime 240 seconds [ 350.894538][ T1170] block nbd0: Possible stuck request ffff888025490540: control (read@3072,1024B). Runtime 240 seconds [ 350.927827][ T10] razer 0003:1532:010E.002A: unknown main item tag 0x0 [ 350.935764][ T10] razer 0003:1532:010E.002A: unknown main item tag 0x0 [ 350.943755][ T10] razer 0003:1532:010E.002A: unknown main item tag 0x0 [ 350.951139][ T10] razer 0003:1532:010E.002A: unknown main item tag 0x0 [ 350.958412][ T10] razer 0003:1532:010E.002A: unknown main item tag 0x0 [ 350.967742][ T5942] IPVS: starting estimator thread 0... [ 351.057065][T14601] IPVS: using max 25 ests per chain, 60000 per kthread [ 351.127272][ T10] razer 0003:1532:010E.002A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.7-1/input0 [ 351.287912][ T5942] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 351.334559][ T5900] usb 8-1: USB disconnect, device number 9 [ 351.458659][ T5942] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 351.483221][ T5942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.524391][ T5942] usb 9-1: Product: syz [ 351.551185][ T5942] usb 9-1: Manufacturer: syz [ 351.555946][ T5942] usb 9-1: SerialNumber: syz [ 351.590218][ T5942] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 351.617344][ T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 352.104209][T14632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3585'. [ 352.482436][ T5900] usb 9-1: USB disconnect, device number 7 [ 352.910024][ T30] audit: type=1326 audit(1752657727.655:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.7.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7bf8e929 code=0x7fc00000 [ 353.043195][T14667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.096934][ T10] usb 9-1: Service connection timeout for: 257 [ 353.103169][ T10] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 353.149114][ T10] ath9k_htc: Failed to initialize the device [ 353.189843][ T5900] usb 9-1: ath9k_htc: USB layer deinitialized [ 353.196351][ T5942] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 353.376497][ T5942] usb 7-1: Using ep0 maxpacket: 8 [ 353.395200][ T5942] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 353.405645][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.446234][ T5942] usb 7-1: Product: syz [ 353.450453][ T5942] usb 7-1: Manufacturer: syz [ 353.469936][ T5942] usb 7-1: SerialNumber: syz [ 353.489044][ T5942] usb 7-1: config 0 descriptor?? [ 353.499167][ T5942] gspca_main: se401-2.14.0 probing 047d:5003 [ 353.650152][T14688] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3612'. [ 353.909837][ T5942] gspca_se401: ExtraFeatures: 255 [ 353.914933][ T5942] gspca_se401: Frame size: 2314x0 bayer [ 353.937636][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 353.943702][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 353.963739][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 353.975344][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 353.988138][T14701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.995170][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 354.002895][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 354.022285][ T5942] gspca_se401: Frame size: 0x0 1/16th janggu [ 354.144112][ T5942] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input45 [ 354.190919][ T5942] usb 7-1: USB disconnect, device number 15 [ 354.255247][T14706] sp0: Synchronizing with TNC [ 354.510485][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3626'. [ 354.622028][T14722] netlink: 'syz.4.3628': attribute type 37 has an invalid length. [ 355.264474][T14745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.333308][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3657'. [ 356.646333][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 356.796218][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 356.803566][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.814171][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.824702][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 356.837230][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.864072][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.886629][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.986195][ T5942] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 356.994986][ T5856] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 357.112858][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 357.127289][ T24] usbtmc 8-1:16.0: can't read capabilities [ 357.158630][ T5942] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 357.177180][ T5942] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 357.200381][ T5942] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.210559][ T5942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.219270][ T5942] usb 9-1: Product: syz [ 357.227761][ T5942] usb 9-1: Manufacturer: syz [ 357.232392][ T5942] usb 9-1: SerialNumber: syz [ 357.326236][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 357.337396][ T5851] usb 8-1: USB disconnect, device number 10 [ 357.471619][ T5942] cdc_ncm 9-1:1.0: bind() failure [ 357.492880][ T5942] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 357.508293][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 357.525232][T14820] tmpfs: Invalid uid '0x00000000ffffffff' [ 357.528749][ T5942] cdc_ncm 9-1:1.1: bind() failure [ 357.537655][ T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 357.550091][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.564015][ T5942] usb 9-1: USB disconnect, device number 8 [ 357.583734][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.640577][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 357.659736][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.683249][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 357.689978][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 357.697731][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 357.706423][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 357.711684][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 357.904054][ T5856] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 357.904128][ T5856] Bluetooth: hci3: adv larger than maximum supported [ 357.913553][ T5856] Bluetooth: hci3: Malformed LE Event: 0x0d [ 358.006651][ T24] usb 5-1: USB disconnect, device number 30 [ 358.196920][T14832] wireguard: wg1: Could not create IPv4 socket [ 358.374051][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3683'. [ 359.036246][ T5851] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 359.200460][ T5851] usb 7-1: Using ep0 maxpacket: 8 [ 359.223000][ T5851] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 359.254210][ T5851] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 359.274773][ T5851] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.309515][ T5851] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 359.340425][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.373501][ T5851] hub 7-1:1.0: bad descriptor, ignoring hub [ 359.402719][ T5851] hub 7-1:1.0: probe with driver hub failed with error -5 [ 359.421737][ T5851] cdc_wdm 7-1:1.0: skipping garbage [ 359.432748][ T5851] cdc_wdm 7-1:1.0: skipping garbage [ 359.446265][ T5851] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 359.589370][ T5856] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 359.589438][ T5856] Bluetooth: hci4: adv larger than maximum supported [ 359.601007][ T5856] Bluetooth: hci4: Malformed LE Event: 0x0d [ 359.696586][ T5942] usb 7-1: USB disconnect, device number 16 [ 359.756343][ T5900] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 359.764006][ T5851] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 359.916274][ T5851] usb 8-1: Using ep0 maxpacket: 8 [ 359.923533][ T5900] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 359.932440][ T5900] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 359.941810][ T5851] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 359.950169][ T5900] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 359.960634][ T5851] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 359.968804][ T5900] usb 5-1: config 220 has no interface number 2 [ 359.975099][ T5900] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 359.988419][ T5851] usb 8-1: config 0 has no interface number 0 [ 359.994515][ T5851] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.007259][ T5900] usb 5-1: config 220 interface 0 has no altsetting 0 [ 360.014043][ T5900] usb 5-1: config 220 interface 76 has no altsetting 0 [ 360.020934][ T5851] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.031942][ T5851] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.043652][ T5900] usb 5-1: config 220 interface 1 has no altsetting 0 [ 360.052451][ T5851] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 360.061684][ T5851] usb 8-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 360.069901][ T5900] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 360.079069][ T5851] usb 8-1: Product: syz [ 360.083241][ T5851] usb 8-1: Manufacturer: syz [ 360.087897][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.095899][ T5900] usb 5-1: Product: syz [ 360.102857][ T5851] usb 8-1: config 0 descriptor?? [ 360.109222][ T5900] usb 5-1: Manufacturer: syz [ 360.113849][ T5900] usb 5-1: SerialNumber: syz [ 360.119377][T14884] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 360.373189][ T5900] usb 5-1: selecting invalid altsetting 0 [ 360.382216][ T5900] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 360.388651][ T5900] usb 5-1: No valid video chain found. [ 360.407884][ T5900] usb 5-1: selecting invalid altsetting 0 [ 360.413713][ T5900] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 360.432636][ T5900] usb 5-1: USB disconnect, device number 31 [ 360.506333][ T5942] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 360.659535][ T5942] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 360.668858][ T5942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.680065][ T5942] usb 9-1: config 0 descriptor?? [ 360.756346][ T5851] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.21/input/input46 [ 360.905841][ T5942] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 360.986013][ T10] usb 8-1: USB disconnect, device number 11 [ 360.986151][ C1] keyspan_remote 8-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 361.018690][ T5856] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 361.029472][ T5856] Bluetooth: hci4: Injecting HCI hardware error event [ 361.038182][ T5860] Bluetooth: hci4: hardware error 0x00 [ 361.120397][ T5942] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 361.127542][ T5942] [drm] Initialized udl on minor 2 [ 361.513107][ T5942] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 361.532140][ T5942] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 361.542571][ T9] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 361.556529][ T5942] usb 9-1: USB disconnect, device number 9 [ 361.571696][ T9] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 362.185940][T14924] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3720'. [ 362.206455][ T5942] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 362.253421][T14926] netlink: 'syz.8.3722': attribute type 5 has an invalid length. [ 362.264078][T14926] netlink: 'syz.8.3722': attribute type 25 has an invalid length. [ 362.396265][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 362.404671][ T5942] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.423239][ T5942] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 362.441110][ T5942] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 362.453293][ T5942] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 362.475301][ T5942] usb 5-1: config 1 interface 0 has no altsetting 0 [ 362.484571][ T5942] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.496362][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 362.504412][ T5942] usb 5-1: SerialNumber: syz [ 362.527308][T14918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.534841][T14918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.597459][T14934] support for cryptoloop has been removed. Use dm-crypt instead. [ 363.018949][ T5851] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 363.106463][ T5860] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 363.136335][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 363.172060][T14918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.180440][ T5851] usb 9-1: Using ep0 maxpacket: 32 [ 363.183541][T14918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.187989][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.203663][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.214220][ T5851] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 363.223578][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.234351][ T5851] usb 9-1: config 0 descriptor?? [ 363.296233][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 363.302943][ T24] usb 7-1: config 5 has an invalid interface number: 153 but max is 0 [ 363.311539][ T24] usb 7-1: config 5 has no interface number 0 [ 363.318111][ T24] usb 7-1: config 5 interface 153 has no altsetting 0 [ 363.327819][ T24] usb 7-1: New USB device found, idVendor=12d1, idProduct=763a, bcdDevice=4a.a8 [ 363.337133][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.345159][ T24] usb 7-1: Product: syz [ 363.349494][ T24] usb 7-1: Manufacturer: syz [ 363.354125][ T24] usb 7-1: SerialNumber: syz [ 363.405418][ T5942] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 363.421599][ T5942] usb 5-1: USB disconnect, device number 32 [ 363.573556][ T24] huawei_cdc_ncm 7-1:5.153: CDC Union missing and no IAD found [ 363.581414][ T24] huawei_cdc_ncm 7-1:5.153: bind() failure [ 363.597619][ T24] usb 7-1: USB disconnect, device number 17 [ 363.654281][ T5851] ft260 0003:0403:6030.002B: unknown main item tag 0x0 [ 363.851385][ T5851] ft260 0003:0403:6030.002B: chip code: 6424 8183 [ 363.969706][T14948] kernel read not supported for file /!se÷ih,i¬PælNnuxselinux (pid: 14948 comm: syz.7.3732) [ 363.970812][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3731'. [ 363.983244][ T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 363.996141][ T30] audit: type=1800 audit(1752657738.725:72): pid=14948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3732" name=217365F769682C1769AC50E66C4E6E757873656C696E7578 dev="mqueue" ino=62131 res=0 errno=0 [ 364.053316][ T5851] ft260 0003:0403:6030.002B: failed to retrieve system status [ 364.064431][ T5851] ft260 0003:0403:6030.002B: probe with driver ft260 failed with error -71 [ 364.085763][ T5851] usb 9-1: USB disconnect, device number 10 [ 364.478609][T14965] support for cryptoloop has been removed. Use dm-crypt instead. [ 364.715766][T14975] sctp: [Deprecated]: syz.8.3745 (pid 14975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.715766][T14975] Use struct sctp_sack_info instead [ 365.065765][T14987] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3752'. [ 365.696940][T15016] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3765'. [ 365.731566][T15016] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3765'. [ 365.749204][T15016] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3765'. [ 367.172556][T15059] kvm: kvm [15057]: vcpu4, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x3 [ 367.435557][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3792'. [ 367.475815][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3792'. [ 367.507051][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3792'. [ 367.527607][T15077] Bluetooth: MGMT ver 1.23 [ 367.660610][T15082] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3797'. [ 367.953373][T15096] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3805'. [ 367.986222][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 368.166272][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 368.206884][ T10] usb 9-1: config 0 has no interfaces? [ 368.223186][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 368.241167][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.250786][ T10] usb 9-1: Product: syz [ 368.264280][ T10] usb 9-1: Manufacturer: syz [ 368.277166][ T10] usb 9-1: SerialNumber: syz [ 368.303269][ T10] usb 9-1: config 0 descriptor?? [ 368.459215][T15119] Bluetooth: MGMT ver 1.23 [ 368.524464][ T5942] usb 9-1: USB disconnect, device number 11 [ 368.596565][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 368.767022][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 368.784015][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.817198][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.846594][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 368.872049][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.897600][ T10] usb 8-1: config 0 descriptor?? [ 369.164021][T15145] __nla_validate_parse: 2 callbacks suppressed [ 369.164042][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3828'. [ 369.325670][ T10] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 369.515152][ T10] ft260 0003:0403:6030.002C: chip code: 6424 8183 [ 369.545942][T15161] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3843'. [ 369.723827][ T10] ft260 0003:0403:6030.002C: failed to retrieve system status [ 369.759060][ T10] ft260 0003:0403:6030.002C: probe with driver ft260 failed with error -71 [ 369.792014][ T10] usb 8-1: USB disconnect, device number 12 [ 369.854920][T15172] netlink: 'syz.4.3839': attribute type 29 has an invalid length. [ 371.179702][T15235] input: syz0 as /devices/virtual/input/input47 [ 371.901906][ T5860] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 372.376298][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 372.580321][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.600920][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.621316][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 372.638067][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.673922][ T10] usb 5-1: config 0 descriptor?? [ 373.029597][T15309] tun0: tun_chr_ioctl cmd 1074025676 [ 373.035121][T15309] tun0: owner set to 0 [ 373.119391][ T10] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 373.136923][ T10] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 373.144651][ T10] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 373.166190][ T10] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 373.173033][ T10] isku 0003:1E7D:319C.002D: item fetching failed at offset 4/7 [ 373.200391][ T10] isku 0003:1E7D:319C.002D: parse failed [ 373.217398][ T10] isku 0003:1E7D:319C.002D: probe with driver isku failed with error -22 [ 373.337875][ T5851] usb 5-1: USB disconnect, device number 33 [ 373.712687][T15330] tun0: tun_chr_ioctl cmd 1074025676 [ 373.738657][T15330] tun0: owner set to 0 [ 373.970876][T15339] IPVS: persistence engine module ip_vs_pe_ not found [ 374.071695][T15351] binfmt_misc: register: failed to install interpreter file ./file0 [ 374.216551][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 374.253859][T15357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3922'. [ 374.265700][T15357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3922'. [ 374.312613][T15357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3922'. [ 374.337841][T15361] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3932'. [ 374.354030][T15361] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3932'. [ 374.399302][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 374.424504][ T10] usb 8-1: config 0 has no interfaces? [ 374.433937][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 374.452199][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.470937][ T10] usb 8-1: Product: syz [ 374.475602][ T10] usb 8-1: Manufacturer: syz [ 374.494394][ T10] usb 8-1: SerialNumber: syz [ 374.524959][ T10] usb 8-1: config 0 descriptor?? [ 374.765574][ T24] usb 8-1: USB disconnect, device number 13 [ 375.016862][ T5942] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 375.168481][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 375.185047][ T5942] usb 5-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 375.194537][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.205441][ T5942] usb 5-1: config 0 descriptor?? [ 375.548296][ T30] audit: type=1326 audit(1752657750.295:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.607766][ T30] audit: type=1326 audit(1752657750.295:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.641696][ T30] audit: type=1326 audit(1752657750.295:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.650206][ T5942] ntrig 0003:1B96:0013.002E: unknown main item tag 0x0 [ 375.675540][ T30] audit: type=1326 audit(1752657750.295:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.694828][ T5942] ntrig 0003:1B96:0013.002E: unknown main item tag 0x0 [ 375.709609][ T5942] ntrig 0003:1B96:0013.002E: unknown main item tag 0x0 [ 375.709655][ T30] audit: type=1326 audit(1752657750.295:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.739402][ T5942] ntrig 0003:1B96:0013.002E: hidraw0: USB HID v0.00 Device [HID 1b96:0013] on usb-dummy_hcd.4-1/input0 [ 375.755255][ T30] audit: type=1326 audit(1752657750.295:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.868243][ T30] audit: type=1326 audit(1752657750.295:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.874034][ T5942] ntrig 0003:1B96:0013.002E: Firmware version: 1.12.19.27.7 (f2d3 677b) [ 375.909173][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.915620][ T30] audit: type=1326 audit(1752657750.295:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.938502][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.946657][ T30] audit: type=1326 audit(1752657750.295:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 375.968915][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.976622][ T5860] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 375.986733][ T5860] Bluetooth: hci3: Injecting HCI hardware error event [ 375.996050][ T5856] Bluetooth: hci3: hardware error 0x00 [ 376.002512][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3949'. [ 376.017102][ T30] audit: type=1326 audit(1752657750.295:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x7fc00000 [ 376.038958][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.046561][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.108609][ T5942] usb 5-1: USB disconnect, device number 34 [ 376.575615][T15422] pim6reg: entered allmulticast mode [ 376.595897][T15421] pim6reg: left allmulticast mode [ 376.687809][T15425] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3955'. [ 377.429403][T15461] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3967'. [ 378.056568][ T5856] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 378.159006][T15495] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3986'. [ 378.236226][ T5942] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 378.381919][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.392351][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.417995][ T5942] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 378.428216][ T5942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.446855][ T5942] usb 9-1: config 0 descriptor?? [ 378.459125][ T5942] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 378.714131][T15518] pim6reg: entered allmulticast mode [ 378.723318][T15517] pim6reg: left allmulticast mode [ 379.282036][ T5942] usb 9-1: USB disconnect, device number 12 [ 379.487433][T15541] pim6reg: entered allmulticast mode [ 379.495602][T15540] pim6reg: left allmulticast mode [ 379.646325][ T5900] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 379.716335][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 379.821241][ T5900] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 379.830932][ T5900] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 379.845919][ T5900] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 379.860567][ T5900] usb 7-1: config 220 has no interface number 2 [ 379.867292][ T5900] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 379.876541][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 379.891569][ T9] usb 5-1: config 5 has an invalid interface number: 153 but max is 0 [ 379.899620][ T5900] usb 7-1: config 220 interface 0 has no altsetting 0 [ 379.908252][ T5900] usb 7-1: config 220 interface 76 has no altsetting 0 [ 379.915408][ T5900] usb 7-1: config 220 interface 1 has no altsetting 0 [ 379.922330][ T9] usb 5-1: config 5 has no interface number 0 [ 379.925987][ T5900] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 379.934536][ T9] usb 5-1: config 5 interface 153 has no altsetting 0 [ 379.940202][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.963789][ T9] usb 5-1: New USB device found, idVendor=12d1, idProduct=763a, bcdDevice=4a.a8 [ 379.973807][ T5900] usb 7-1: Product: syz [ 379.982944][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.991233][ T5900] usb 7-1: Manufacturer: syz [ 379.991252][ T5900] usb 7-1: SerialNumber: syz [ 380.035217][ T9] usb 5-1: Product: syz [ 380.045331][ T9] usb 5-1: Manufacturer: syz [ 380.055441][ T9] usb 5-1: SerialNumber: syz [ 380.216274][ T5900] usb 7-1: selecting invalid altsetting 0 [ 380.234620][ T5900] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 380.252856][ T5900] usb 7-1: No valid video chain found. [ 380.300141][ T5900] usb 7-1: selecting invalid altsetting 0 [ 380.305925][ T5900] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 380.329072][ T9] huawei_cdc_ncm 5-1:5.153: CDC Union missing and no IAD found [ 380.349499][ T9] huawei_cdc_ncm 5-1:5.153: bind() failure [ 380.357605][ T5900] usb 7-1: USB disconnect, device number 18 [ 380.410360][ T9] usb 5-1: USB disconnect, device number 35 [ 380.478691][T15563] pim6reg: entered allmulticast mode [ 380.496057][T15562] pim6reg: left allmulticast mode [ 380.846327][ T5900] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 380.937788][ T1170] block nbd0: Possible stuck request ffff888025490000: control (read@0,1024B). Runtime 270 seconds [ 380.948679][ T1170] block nbd0: Possible stuck request ffff8880254901c0: control (read@1024,1024B). Runtime 270 seconds [ 380.960361][ T1170] block nbd0: Possible stuck request ffff888025490380: control (read@2048,1024B). Runtime 270 seconds [ 380.971444][ T1170] block nbd0: Possible stuck request ffff888025490540: control (read@3072,1024B). Runtime 270 seconds [ 381.028858][ T5900] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 381.057645][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.111117][ T5900] usb 8-1: config 0 descriptor?? [ 381.136065][ T5900] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 381.274137][T15590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4030'. [ 381.285373][T15590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4030'. [ 381.302351][T15590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4030'. [ 381.356356][ T906] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 381.516230][ T906] usb 9-1: Using ep0 maxpacket: 32 [ 381.525229][ T906] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 381.535111][ T906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.546962][ T906] usb 9-1: config 0 descriptor?? [ 381.562527][ T906] gspca_main: sq930x-2.14.0 probing 041e:403c [ 381.707050][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 381.866184][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 381.875380][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 381.884864][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.893221][ T24] usb 7-1: Product: syz [ 381.897486][ T24] usb 7-1: Manufacturer: syz [ 381.902096][ T24] usb 7-1: SerialNumber: syz [ 381.910261][ T24] usb 7-1: config 0 descriptor?? [ 381.942986][ T5900] usb 8-1: USB disconnect, device number 14 [ 382.122492][ T24] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 382.398037][ T906] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 382.466513][ T906] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 382.498097][ T906] usb 9-1: USB disconnect, device number 13 [ 382.729515][ T24] usb write operation failed. (-71) [ 382.755788][ T24] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 382.785984][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 382.793982][ T24] usb 7-1: media controller created [ 382.806725][ T24] usb read operation failed. (-71) [ 382.822661][ T24] usb write operation failed. (-71) [ 382.844860][ T24] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 382.870904][ T24] usb 7-1: USB disconnect, device number 19 [ 382.961919][T15612] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4040'. [ 382.975124][T15612] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4040'. [ 382.986579][T15612] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4040'. [ 383.358745][ T906] kernel read not supported for file /dsp1 (pid: 906 comm: kworker/1:2) [ 384.197009][ T906] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 384.357957][ T906] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 384.384380][ T906] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.405411][ T906] usb 8-1: config 0 descriptor?? [ 384.422772][ T906] gspca_main: spca508-2.14.0 probing 8086:0110 [ 384.624472][ T906] gspca_spca508: reg_read err -32 [ 384.632867][ T906] gspca_spca508: reg_read err -32 [ 384.841626][ T906] gspca_spca508: reg_read err -71 [ 384.857098][ T906] gspca_spca508: reg_read err -71 [ 384.862732][ T906] gspca_spca508: reg write: error -71 [ 384.870279][ T906] spca508 8-1:0.0: probe with driver spca508 failed with error -71 [ 384.881502][ T906] usb 8-1: USB disconnect, device number 15 [ 385.265367][T15714] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4088'. [ 385.275953][T15714] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4088'. [ 385.290289][T15714] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4088'. [ 385.766484][ T3099] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 385.920750][ T3099] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 385.933624][ T3099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.942232][ T3099] usb 5-1: Product: syz [ 385.947192][ T3099] usb 5-1: Manufacturer: syz [ 385.952000][ T3099] usb 5-1: SerialNumber: syz [ 385.960966][ T3099] usb 5-1: config 0 descriptor?? [ 386.179980][ T3099] usb 5-1: ignoring: probably an ADSL modem [ 386.585434][ T3099] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 386.698970][ T906] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 386.800752][ T5900] usb 5-1: USB disconnect, device number 36 [ 386.816370][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 386.868385][ T906] usb 7-1: Using ep0 maxpacket: 32 [ 386.878368][ T906] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 386.895870][ T906] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 386.905530][ T906] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 386.913925][ T906] usb 7-1: Product: syz [ 386.918413][ T906] usb 7-1: Manufacturer: syz [ 386.923044][ T906] usb 7-1: SerialNumber: syz [ 386.937112][ T906] usb 7-1: config 0 descriptor?? [ 386.944447][T15745] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 386.986282][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 386.993035][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 387.000923][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.012418][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.024707][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.036002][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.048427][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 387.055863][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.067231][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.083167][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.094349][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.108049][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 387.115471][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.127065][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.138796][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.149890][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.168731][ T9] usb 8-1: string descriptor 0 read error: -22 [ 387.180020][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 387.190174][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.193147][ T5900] usb 7-1: USB disconnect, device number 20 [ 387.226071][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 387.458755][ T9] usb 8-1: USB disconnect, device number 16 [ 388.284322][T15797] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4128'. [ 388.325003][T15797] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4128'. [ 388.342800][T15797] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4128'. [ 388.896333][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 389.066203][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 389.075246][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 389.097144][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.126749][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 389.126766][ T30] audit: type=1326 audit(1752657763.855:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 389.155741][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.168006][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.179602][ T30] audit: type=1326 audit(1752657763.855:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 389.201947][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.209910][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.247538][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 389.256370][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.294662][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.294684][ T30] audit: type=1326 audit(1752657763.855:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 389.319459][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.360838][ T30] audit: type=1326 audit(1752657763.855:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 389.384064][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.385593][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 389.404559][ T30] audit: type=1326 audit(1752657763.855:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 389.417709][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.433083][ T30] audit: type=1326 audit(1752657763.855:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7c38e929 code=0x7fc00000 [ 389.479983][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.492087][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.504033][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.520731][ T9] usb 9-1: string descriptor 0 read error: -22 [ 389.528057][ T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 389.537524][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.573829][ T9] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 389.792231][ T5851] usb 9-1: USB disconnect, device number 14 [ 390.004769][T15816] adutux: No device or device unplugged -19 [ 390.101773][ T30] audit: type=1326 audit(1752657764.845:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15850 comm="syz.6.4153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x0 [ 390.408573][T15865] binder: 15864:15865 ioctl c018620c 200000000580 returned -22 [ 390.458734][T15867] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4160'. [ 390.994423][T15885] @: renamed from vlan0 (while UP) [ 392.304554][T15949] C: renamed from team_slave_0 (while UP) [ 392.330316][T15949] netlink: 'syz.6.4198': attribute type 3 has an invalid length. [ 392.376460][T15949] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4198'. [ 392.486688][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 392.562278][ T30] audit: type=1326 audit(1752657767.305:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.8.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a51b8e929 code=0x7fc00000 [ 392.691183][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 392.706614][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 392.732770][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 392.752320][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 392.766166][ T9] usb 5-1: Product: syz [ 392.770353][ T9] usb 5-1: Manufacturer: syz [ 392.796340][ T9] usb 5-1: SerialNumber: syz [ 392.804280][ T9] usb 5-1: config 0 descriptor?? [ 392.825131][ T9] usb 5-1: selecting invalid altsetting 0 [ 393.095947][ T906] usb 5-1: USB disconnect, device number 37 [ 393.748389][T15997] netlink: 'syz.4.4227': attribute type 3 has an invalid length. [ 393.761529][T15997] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4227'. [ 393.907123][ T30] audit: type=1326 audit(1752657768.655:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.8.4221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a51b8e929 code=0x0 [ 394.463303][ T30] audit: type=1326 audit(1752657769.205:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.7.4236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d7bf8e929 code=0x0 [ 394.796199][ T5942] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 394.969061][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 394.982263][ T5942] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 395.002116][ T5942] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.015103][ T5942] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 395.033863][ T5942] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.041441][ T5942] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 395.062140][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.079303][ T5942] usb 5-1: config 0 descriptor?? [ 395.510246][ T5942] zeroplus 0003:0C12:0030.002F: collection stack underflow [ 395.536524][ T5942] zeroplus 0003:0C12:0030.002F: item 0 1 0 12 parsing failed [ 395.553824][ T5942] zeroplus 0003:0C12:0030.002F: parse failed [ 395.561681][ T5942] zeroplus 0003:0C12:0030.002F: probe with driver zeroplus failed with error -22 [ 395.747615][ T5851] usb 5-1: USB disconnect, device number 38 [ 396.906326][ T3099] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 397.082362][T16151] delete_channel: no stack [ 397.097234][ T3099] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 397.122583][ T3099] usb 9-1: config 0 interface 0 has no altsetting 0 [ 397.142803][ T3099] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.161127][ T3099] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.173237][ T3099] usb 9-1: Product: syz [ 397.179783][ T3099] usb 9-1: Manufacturer: syz [ 397.184432][ T3099] usb 9-1: SerialNumber: syz [ 397.204047][ T3099] usb 9-1: config 0 descriptor?? [ 397.231948][ T3099] usb 9-1: selecting invalid altsetting 0 [ 397.516556][ T5851] usb 9-1: USB disconnect, device number 15 [ 397.541281][ T30] audit: type=1326 audit(1752657772.285:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16170 comm="syz.6.4310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f3618e929 code=0x0 [ 397.588922][ T906] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 397.746282][ T906] usb 5-1: Using ep0 maxpacket: 16 [ 397.762540][ T906] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 397.772710][ T906] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 397.784899][ T906] usb 5-1: Product: syz [ 397.790094][ T906] usb 5-1: Manufacturer: syz [ 397.795236][ T906] usb 5-1: SerialNumber: syz [ 397.807522][ T906] usb 5-1: config 0 descriptor?? [ 398.017652][ T5942] usb 5-1: USB disconnect, device number 39 [ 398.119949][T16182] delete_channel: no stack [ 398.440954][T16200] netlink: 'syz.7.4315': attribute type 29 has an invalid length. [ 399.086363][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 399.236394][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 399.267341][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 399.280663][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.295384][ T24] usb 5-1: Product: syz [ 399.302125][ T24] usb 5-1: Manufacturer: syz [ 399.307425][ T24] usb 5-1: SerialNumber: syz [ 399.314826][ T24] usb 5-1: config 0 descriptor?? [ 399.324055][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 399.950312][ T24] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 400.115087][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.138943][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.147071][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.163259][ T24] usb 5-1: USB disconnect, device number 40 [ 400.169688][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.180009][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.551599][T16252] chnl_net:caif_netlink_parms(): no params data found [ 400.733486][T16252] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.743784][T16252] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.751422][T16252] bridge_slave_0: entered allmulticast mode [ 400.761192][T16252] bridge_slave_0: entered promiscuous mode [ 400.770335][T16252] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.778151][T16252] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.785503][T16252] bridge_slave_1: entered allmulticast mode [ 400.794771][T16252] bridge_slave_1: entered promiscuous mode [ 400.869700][T16252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.900038][T16252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.929162][T16287] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4354'. [ 400.959585][T16252] team0: Port device team_slave_0 added [ 400.974005][T16252] team0: Port device team_slave_1 added [ 401.028356][T16252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.043130][T16252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.069204][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.107924][T16252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.127220][T16252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.142372][T16252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.178298][T16252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.313856][T16252] hsr_slave_0: entered promiscuous mode [ 401.321425][T16252] hsr_slave_1: entered promiscuous mode [ 401.335521][T16252] debugfs: 'hsr0' already exists in 'hsr' [ 401.345378][T16252] Cannot create hsr debugfs directory [ 401.661981][T16252] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.784355][T16252] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.866293][T16325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4372'. [ 401.888825][T16252] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.984148][T16252] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.133139][ T13] bridge_slave_1: left allmulticast mode [ 402.168710][ T13] bridge_slave_1: left promiscuous mode [ 402.180913][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.196856][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.221453][ T5860] Bluetooth: hci2: command tx timeout [ 402.540877][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.551893][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.562054][ T13] bond0 (unregistering): Released all slaves [ 402.641286][T16252] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 402.680806][T16252] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 402.686444][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4381'. [ 402.703633][ T31] INFO: task syz.0.2309:11283 blocked for more than 143 seconds. [ 402.710150][T16252] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 402.716479][ T31] Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 [ 402.729686][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 402.739015][ T31] task:syz.0.2309 state:D stack:28328 pid:11283 tgid:11282 ppid:5847 task_flags:0x400040 flags:0x00004004 [ 402.761870][ T31] Call Trace: [ 402.765462][ T31] [ 402.768568][ T31] __schedule+0x16f5/0x4d00 [ 402.773120][ T31] ? do_filp_open+0x1fa/0x410 [ 402.806370][ T31] ? do_sys_openat2+0x121/0x1c0 [ 402.811307][ T31] ? __lock_acquire+0xab9/0xd20 [ 402.836041][ T31] ? schedule+0x165/0x360 [ 402.844898][ T31] ? __pfx___schedule+0x10/0x10 [ 402.849922][ T31] ? schedule+0x91/0x360 [ 402.856287][ T31] schedule+0x165/0x360 [ 402.860691][ T31] schedule_preempt_disabled+0x13/0x30 [ 402.875582][ T31] __mutex_lock+0x724/0xe80 [ 402.880967][ T31] ? __mutex_lock+0x51b/0xe80 [ 402.885952][ T31] ? bdev_open+0xe0/0xd30 [ 402.906359][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 402.911419][ T31] ? wait_on_inode+0xc0/0x230 [ 402.926548][ T31] ? kobject_get_unless_zero+0x161/0x1f0 [ 402.932250][ T31] ? disk_block_events+0xab/0x120 [ 402.941372][ T31] ? bdev_open+0xaf/0xd30 [ 402.945759][ T31] bdev_open+0xe0/0xd30 [ 402.956218][ T31] blkdev_open+0x3a8/0x510 [ 402.960665][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 402.965640][ T31] do_dentry_open+0x953/0x13f0 [ 402.996750][ T31] vfs_open+0x3b/0x340 [ 403.000887][ T31] ? path_openat+0x2ecd/0x3830 [ 403.005674][ T31] path_openat+0x2ee5/0x3830 [ 403.026241][ T31] ? arch_stack_walk+0xfc/0x150 [ 403.031188][ T31] ? __pfx_path_openat+0x10/0x10 [ 403.046139][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.069339][ T31] ? irqentry_exit+0x74/0x90 [ 403.073965][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.086193][ T31] do_filp_open+0x1fa/0x410 [ 403.093245][ T31] ? __lock_acquire+0xab9/0xd20 [ 403.098188][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 403.103279][ T31] ? _raw_spin_unlock+0x28/0x50 [ 403.108961][ T31] ? alloc_fd+0x64c/0x6c0 [ 403.113333][ T31] do_sys_openat2+0x121/0x1c0 [ 403.118344][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 403.123577][ T31] ? exc_page_fault+0x76/0xf0 [ 403.128345][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 403.133662][ T31] __x64_sys_openat+0x138/0x170 [ 403.138696][ T31] do_syscall_64+0xfa/0x3b0 [ 403.143238][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.149834][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.155930][ T31] ? clear_bhb_loop+0x60/0xb0 [ 403.160645][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.166666][ T31] RIP: 0033:0x7fbb88b8d290 [ 403.171103][ T31] RSP: 002b:00007fbb89a74b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 403.179675][ T31] RAX: ffffffffffffffda RBX: 0000000000080200 RCX: 00007fbb88b8d290 [ 403.187722][ T31] RDX: 0000000000080200 RSI: 00007fbb89a74c10 RDI: 00000000ffffff9c [ 403.195737][ T31] RBP: 00007fbb89a74c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 403.203897][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 403.212189][ T31] R13: 0000000000000001 R14: 00007fbb88db5fa0 R15: 00007ffd9e4b8f58 [ 403.220281][ T31] [ 403.223377][ T31] [ 403.223377][ T31] Showing all locks held in the system: [ 403.266154][ T31] 4 locks held by kworker/u8:1/13: [ 403.271311][ T31] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 403.290226][T16350] netlink: 'syz.4.4382': attribute type 29 has an invalid length. [ 403.312779][ T31] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 403.357922][ T31] #2: ffffffff8f92b850 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 403.376174][ T31] #3: ffffffff8e5447f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 403.395976][ T31] 1 lock held by khungtaskd/31: [ 403.401397][ T31] #0: ffffffff8e53eca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 403.411583][ T31] 2 locks held by kworker/u8:10/3509: [ 403.417599][ T31] 2 locks held by getty/5612: [ 403.422299][ T31] #0: ffff8880341bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 403.432434][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 403.443008][ T31] 1 lock held by udevd/6332: [ 403.447848][ T31] #0: ffff888142fe7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 403.458036][ T31] 1 lock held by syz.0.2309/11283: [ 403.463166][ T31] #0: ffff888142fe7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 403.478115][ T31] 3 locks held by syz.6.3416/14095: [ 403.516255][ T31] [ 403.518633][ T31] ============================================= [ 403.518633][ T31] [ 403.556243][ T31] NMI backtrace for cpu 0 [ 403.556274][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 403.556295][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.556305][ T31] Call Trace: [ 403.556312][ T31] [ 403.556319][ T31] dump_stack_lvl+0x189/0x250 [ 403.556346][ T31] ? __wake_up_klogd+0xd9/0x110 [ 403.556366][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.556389][ T31] ? __pfx__printk+0x10/0x10 [ 403.556425][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 403.556454][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 403.556476][ T31] ? _printk+0xcf/0x120 [ 403.556504][ T31] ? __pfx__printk+0x10/0x10 [ 403.556530][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 403.556553][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 403.556581][ T31] watchdog+0xfee/0x1030 [ 403.556602][ T31] ? watchdog+0x1de/0x1030 [ 403.556627][ T31] kthread+0x70e/0x8a0 [ 403.556646][ T31] ? __pfx_watchdog+0x10/0x10 [ 403.556663][ T31] ? __pfx_kthread+0x10/0x10 [ 403.556680][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 403.556697][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.556712][ T31] ? __pfx_kthread+0x10/0x10 [ 403.556729][ T31] ret_from_fork+0x3f9/0x770 [ 403.556752][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 403.556779][ T31] ? __switch_to_asm+0x39/0x70 [ 403.556794][ T31] ? __switch_to_asm+0x33/0x70 [ 403.556808][ T31] ? __pfx_kthread+0x10/0x10 [ 403.556824][ T31] ret_from_fork_asm+0x1a/0x30 [ 403.556854][ T31] [ 403.556860][ T31] Sending NMI from CPU 0 to CPUs 1: [ 403.715566][ C1] NMI backtrace for cpu 1 [ 403.715583][ C1] CPU: 1 UID: 0 PID: 14095 Comm: syz.6.3416 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 403.715605][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.715616][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x57/0x180 [ 403.715647][ C1] Code: c7 04 24 b3 8a b5 41 48 c7 44 24 08 7e 9a e6 8d 48 c7 44 24 10 70 68 18 82 49 89 e7 49 c1 ef 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 <49> bc 00 00 00 00 00 fc ff df 4b 89 04 27 66 43 c7 44 27 09 f3 f3 [ 403.715662][ C1] RSP: 0018:ffffc900038c7600 EFLAGS: 00000806 [ 403.715690][ C1] RAX: f2f2f200f1f1f1f1 RBX: ffff88813fffbc50 RCX: dffffc0000000000 [ 403.715703][ C1] RDX: ffff88813fffbb80 RSI: ffffea000138f7c0 RDI: ffff88813fffbc50 [ 403.715715][ C1] RBP: ffffc900038c76a8 R08: 0000000000000000 R09: 0000000000000000 [ 403.715726][ C1] R10: dffffc0000000000 R11: fffffbfff1fc77e7 R12: 1ffff11027fff78a [ 403.715738][ C1] R13: ffff88813fffbc20 R14: ffffea000138f7c0 R15: 1ffff92000718ec0 [ 403.715750][ C1] FS: 0000000000000000(0000) GS:ffff8881258b4000(0000) knlGS:0000000000000000 [ 403.715775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.715785][ C1] CR2: 000055749f6a7000 CR3: 0000000030b9e000 CR4: 00000000003526f0 [ 403.715800][ C1] Call Trace: [ 403.715806][ C1] [ 403.715812][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 403.715834][ C1] ? do_raw_spin_lock+0x121/0x290 [ 403.715851][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 403.715868][ C1] bad_range+0x8b/0x2c0 [ 403.715892][ C1] __free_one_page+0xf4/0xbd0 [ 403.715912][ C1] free_pcppages_bulk+0x2da/0x4e0 [ 403.715935][ C1] free_frozen_page_commit+0x62c/0x1070 [ 403.715955][ C1] __free_frozen_pages+0x67f/0xd30 [ 403.715975][ C1] vfree+0x25a/0x400 [ 403.715998][ C1] ? __pfx_kcov_close+0x10/0x10 [ 403.716014][ C1] kcov_close+0x28/0x50 [ 403.716028][ C1] __fput+0x449/0xa70 [ 403.716055][ C1] task_work_run+0x1d1/0x260 [ 403.716075][ C1] ? __pfx_task_work_run+0x10/0x10 [ 403.716093][ C1] ? kmem_cache_free+0x18f/0x400 [ 403.716121][ C1] do_exit+0x6b5/0x2300 [ 403.716138][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 403.716151][ C1] ? do_raw_spin_lock+0x121/0x290 [ 403.716166][ C1] ? __pfx_do_exit+0x10/0x10 [ 403.716188][ C1] do_group_exit+0x21c/0x2d0 [ 403.716202][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.716220][ C1] get_signal+0x1286/0x1340 [ 403.716250][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 403.716269][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 403.716289][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 403.716314][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 403.716334][ C1] exit_to_user_mode_loop+0x75/0x110 [ 403.716351][ C1] do_syscall_64+0x2bd/0x3b0 [ 403.716367][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.716383][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.716398][ C1] ? clear_bhb_loop+0x60/0xb0 [ 403.716416][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.716430][ C1] RIP: 0033:0x7f6f361c11e5 [ 403.716443][ C1] Code: Unable to access opcode bytes at 0x7f6f361c11bb. [ 403.716451][ C1] RSP: 002b:00007f6f37013f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 403.716465][ C1] RAX: fffffffffffffdfc RBX: 00007f6f363b5fa0 RCX: 00007f6f361c11e5 [ 403.716477][ C1] RDX: 00007f6f37013fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.716493][ C1] RBP: 00007f6f36210b39 R08: 0000000000000000 R09: 0000000000000000 [ 403.716503][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 403.716512][ C1] R13: 0000000000000001 R14: 00007f6f363b5fa0 R15: 00007ffdd96882c8 [ 403.716531][ C1] [ 404.155611][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 404.162528][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 404.173827][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.183913][ T31] Call Trace: [ 404.187220][ T31] [ 404.190163][ T31] dump_stack_lvl+0x99/0x250 [ 404.194784][ T31] ? __asan_memcpy+0x40/0x70 [ 404.199397][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.204639][ T31] ? __pfx__printk+0x10/0x10 [ 404.209269][ T31] vpanic+0x281/0x750 [ 404.213282][ T31] ? __pfx_vpanic+0x10/0x10 [ 404.217809][ T31] ? preempt_schedule+0xae/0xc0 [ 404.222682][ T31] ? preempt_schedule_common+0x83/0xd0 [ 404.228158][ T31] panic+0xb9/0xc0 [ 404.231896][ T31] ? __pfx_panic+0x10/0x10 [ 404.236331][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 404.241724][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 404.247900][ T31] watchdog+0x102d/0x1030 [ 404.252246][ T31] ? watchdog+0x1de/0x1030 [ 404.256713][ T31] kthread+0x70e/0x8a0 [ 404.260798][ T31] ? __pfx_watchdog+0x10/0x10 [ 404.265486][ T31] ? __pfx_kthread+0x10/0x10 [ 404.270097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.275314][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.280540][ T31] ? __pfx_kthread+0x10/0x10 [ 404.285145][ T31] ret_from_fork+0x3f9/0x770 [ 404.289761][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 404.294898][ T31] ? __switch_to_asm+0x39/0x70 [ 404.299680][ T31] ? __switch_to_asm+0x33/0x70 [ 404.304463][ T31] ? __pfx_kthread+0x10/0x10 [ 404.309075][ T31] ret_from_fork_asm+0x1a/0x30 [ 404.313873][ T31] [ 404.317249][ T31] Kernel Offset: disabled [ 404.321576][ T31] Rebooting in 86400 seconds..