last executing test programs: 4m24.444651022s ago: executing program 3 (id=1251): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 4m24.292922988s ago: executing program 3 (id=1254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 4m24.217335714s ago: executing program 3 (id=1256): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 4m23.685712222s ago: executing program 3 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 4m23.617386221s ago: executing program 3 (id=1264): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) 4m22.35232566s ago: executing program 3 (id=1286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8894) 4m21.949482482s ago: executing program 32 (id=1286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8894) 3m7.72912133s ago: executing program 0 (id=2146): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) 3m7.564612796s ago: executing program 0 (id=2150): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) pipe(&(0x7f0000019480)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000, 0x0, 0x3ff, 0x4, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000004, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m6.717955507s ago: executing program 0 (id=2161): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 2m40.881474573s ago: executing program 0 (id=2161): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 2m40.721176074s ago: executing program 0 (id=2341): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m40.544951686s ago: executing program 0 (id=2346): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) 2m25.337123031s ago: executing program 33 (id=2346): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) 32.345935211s ago: executing program 5 (id=3895): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x80802, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x7002}], 0x1, 0x48000000) 32.201543863s ago: executing program 5 (id=3896): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000440)={0x0, 0x0, 0x0, [0x3, 0x200, 0x3, 0x0, 0x3], [0x2846, 0xb, 0x3, 0xd, 0x0, 0x401, 0x3ff, 0x400, 0xfffffffffffffffb, 0x0, 0x6, 0xffffffffffffff7b, 0x81, 0xcc, 0x8, 0x80000001, 0xffffffff, 0x5, 0xce, 0x0, 0x1, 0xb4, 0x7, 0x2, 0x8001, 0x9699, 0x3, 0x5, 0x0, 0x6db, 0x1, 0x1b1d8d25, 0x8, 0x5, 0x80, 0x6, 0x3, 0x2, 0x8da9, 0x5, 0x6, 0x4, 0x7, 0x6, 0x4, 0x2c4, 0x3ff, 0x2, 0x4, 0x6, 0x455, 0x1, 0x7fffffffffffffff, 0x80000001, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x8000000000000000, 0xfffffffffffffff9, 0xb27, 0x120000000, 0xc, 0x1, 0x7, 0x10001, 0x4, 0x7fffffffffffffff, 0xfffffffffffffff8, 0x9, 0x5, 0xffffffff, 0x800, 0x200, 0x2de, 0x65, 0x2400000000, 0x9d, 0x2, 0x0, 0x5, 0x0, 0x4, 0x100000000b, 0x2, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0xfffffffffffffffb, 0x0, 0x7, 0x200, 0x9, 0x10, 0x8, 0xadf, 0xb3, 0xe, 0x80000000, 0xfffffffffffffff6, 0x0, 0x9, 0x0, 0x8, 0x8, 0xc67d, 0x4, 0x7b8, 0x7, 0x5, 0x4, 0x1, 0x7, 0x9, 0x10, 0xfffffffffffffffa, 0x9, 0xa, 0x3ff, 0xa51d, 0x9]}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 32.08237587s ago: executing program 5 (id=3900): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x15) 31.752427813s ago: executing program 5 (id=3903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 31.700535752s ago: executing program 5 (id=3905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 30.860673531s ago: executing program 5 (id=3920): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc4}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 30.620191348s ago: executing program 34 (id=3920): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc4}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 24.578298925s ago: executing program 2 (id=3972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 23.483365647s ago: executing program 2 (id=3975): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 21.949507549s ago: executing program 2 (id=3986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 21.256815242s ago: executing program 2 (id=3988): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 21.073289958s ago: executing program 2 (id=3991): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0xffffffc0, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.752661221s ago: executing program 2 (id=3997): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x38c) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 18.504293707s ago: executing program 35 (id=3997): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x38c) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 3.267841594s ago: executing program 4 (id=4097): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r0, 0x20) shutdown(r0, 0x0) 3.095210636s ago: executing program 4 (id=4098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.805926516s ago: executing program 4 (id=4099): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2.460526228s ago: executing program 1 (id=4102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x400000f3, 0x0, 0xb}]}) 1.938596839s ago: executing program 1 (id=4103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x288, 0x0, 0xa7e}]}) 1.650571242s ago: executing program 1 (id=4104): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7]}) 1.408580245s ago: executing program 1 (id=4105): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r2, @ANYBLOB="060036807900"], 0x24}}, 0x0) 1.245709573s ago: executing program 1 (id=4106): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x2, 0x602, 0x1, 0x0, 0xe, "0387c196519ca999"}) 843.517721ms ago: executing program 1 (id=4107): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) 792.734225ms ago: executing program 4 (id=4108): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000001000/0x2000)=nil, 0x2000}) 562.605858ms ago: executing program 4 (id=4109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 520.658344ms ago: executing program 6 (id=3921): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 387.936797ms ago: executing program 4 (id=4110): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xfd, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x1, 0x1, 0x6, {0x0, 0xea60}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) 247.684239ms ago: executing program 6 (id=4111): r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 0s ago: executing program 6 (id=4112): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="75c1ccd07a5210306c94e254649640be1983f79c5bfe88cd6a730000606759578db363f48925080034d4ee1384db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5829977dd63ce2c88d43b177e47be6084fe6987e000000000044926ba36073dd60af39", 0x68}, {&(0x7f0000000380)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c98849b5aac3bcce677efe2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e408cb5d1991683fcbda9a14049906002cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e", 0x82}], 0x2}, 0x8000) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/254, 0xe9}, {&(0x7f0000000f40)=""/4080}, {&(0x7f0000000180)=""/63}], 0x1, &(0x7f0000003d00)=""/4056, 0xce7}, 0x0) close(r0) kernel console output (not intermixed with test programs): 437078][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.437253][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.270568][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 278.405510][T10848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.470837][ T5896] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 278.636805][ T5896] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 278.636830][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 278.636840][ T5896] usb 2-1: Product: syz [ 278.663211][ T5896] usb 2-1: config 0 descriptor?? [ 278.671979][T10848] veth0_vlan: entered promiscuous mode [ 278.690147][T10848] veth1_vlan: entered promiscuous mode [ 278.704291][ T5896] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 278.712318][ T5896] usb 2-1: Detected FT232H [ 278.886834][ T5896] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 279.234749][T10848] veth0_macvtap: entered promiscuous mode [ 279.256713][T10848] veth1_macvtap: entered promiscuous mode [ 279.293334][ T5896] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 279.296503][ T5896] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 279.370517][ T5896] usb 2-1: USB disconnect, device number 29 [ 279.400993][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 279.401391][ T5896] ftdi_sio 2-1:0.0: device disconnected [ 279.414302][T10848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.447700][T10848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.560805][ T1239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.561017][ T1239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.561619][ T1239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.564917][ T1239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.913071][ T820] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 280.124076][ T820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 280.124124][ T820] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 280.124147][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.279512][ T820] usb 3-1: config 0 descriptor?? [ 280.285781][T11344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 280.505068][ T38] audit: type=1326 audit(1776366012.581:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.4.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4563ffc819 code=0x7fc00000 [ 280.711306][ T820] hid (null): global environment stack underflow [ 280.839330][ T820] hid_parser_main: 14 callbacks suppressed [ 280.839351][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839378][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839399][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839421][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839445][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839469][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839492][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839516][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839540][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.839564][ T820] asus 0003:0B05:1ABE.002D: unknown main item tag 0x0 [ 280.842520][ T820] asus 0003:0B05:1ABE.002D: global environment stack underflow [ 280.842540][ T820] asus 0003:0B05:1ABE.002D: item 0 1 1 11 parsing failed [ 280.843214][ T820] asus 0003:0B05:1ABE.002D: Asus hid parse failed: -22 [ 280.843301][ T820] asus 0003:0B05:1ABE.002D: probe with driver asus failed with error -22 [ 281.071465][ T820] usb 3-1: USB disconnect, device number 34 [ 281.500130][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.500148][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.920945][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.920963][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.484436][T11403] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2344'. [ 282.704483][T11414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2351'. [ 282.704583][T11414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2351'. [ 282.813704][T11420] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2352'. [ 282.825641][T11420] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2352'. [ 283.258557][ T5915] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 283.365339][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 283.429878][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 283.442624][ T5915] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.442657][ T5915] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 283.442681][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 283.442710][ T5915] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 283.442731][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.500459][ T5915] usb 2-1: config 0 descriptor?? [ 283.773133][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.811450][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.934010][ T5915] hid-thrustmaster 0003:044F:B65D.002E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 283.934244][ T5915] hid-thrustmaster 0003:044F:B65D.002E: setup data couldn't be sent [ 284.124524][ C0] hid-thrustmaster 0003:044F:B65D.002E: URB to get model id failed with error -71 [ 284.128482][ T5896] usb 2-1: USB disconnect, device number 30 [ 297.976128][T10394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.038031][T10394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.053754][T10394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.056368][T10394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.057072][T10394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.073056][ T37] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 298.301896][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 298.318577][ T37] usb 2-1: string descriptor 0 read error: -22 [ 298.318721][ T37] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 298.318745][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.393556][ T37] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.393647][ T37] usb 2-1: MIDIStreaming interface descriptor not found [ 298.723793][ T37] usb 2-1: USB disconnect, device number 31 [ 299.831486][T11523] overlay: filesystem on ./file0 is read-only [ 300.130470][T11534] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 300.130543][T11534] netlink: 'syz.1.2401': attribute type 2 has an invalid length. [ 300.130550][T11534] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 300.130557][T11534] netlink: 'syz.1.2401': attribute type 3 has an invalid length. [ 300.130563][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'. [ 300.230452][ T5143] Bluetooth: hci4: command tx timeout [ 300.287774][T11474] chnl_net:caif_netlink_parms(): no params data found [ 300.485386][T11543] loop8: detected capacity change from 0 to 1 [ 300.571024][T11543] Dev loop8: unable to read RDB block 1 [ 300.571069][T11543] loop8: unable to read partition table [ 300.571270][T11543] loop8: partition table beyond EOD, truncated [ 300.571301][T11543] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 300.787224][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.787595][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.787846][T11474] bridge_slave_0: entered allmulticast mode [ 300.794079][T11474] bridge_slave_0: entered promiscuous mode [ 300.804633][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.804978][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.805225][T11474] bridge_slave_1: entered allmulticast mode [ 300.808928][T11474] bridge_slave_1: entered promiscuous mode [ 300.902391][T11474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.931167][T11474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.267171][T11474] team0: Port device team_slave_0 added [ 301.339318][ T5915] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 301.394419][T11474] team0: Port device team_slave_1 added [ 301.501615][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 301.501662][ T5915] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 301.501695][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.542537][ T5915] usb 5-1: config 0 descriptor?? [ 301.543228][T11565] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.599230][T11474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.599246][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.599271][T11474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.603919][T11583] program syz.1.2423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.644068][T11474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.644083][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.644106][T11474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.761847][T11474] hsr_slave_0: entered promiscuous mode [ 301.766763][T11474] hsr_slave_1: entered promiscuous mode [ 301.997605][ T5915] hid_parser_main: 307 callbacks suppressed [ 301.997631][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997660][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997685][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997709][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997733][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997757][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997779][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997803][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997827][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 301.997850][ T5915] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 302.002714][ T5915] asus 0003:0B05:1ABE.002F: unbalanced collection at end of report description [ 302.003476][ T5915] asus 0003:0B05:1ABE.002F: Asus hid parse failed: -22 [ 302.003577][ T5915] asus 0003:0B05:1ABE.002F: probe with driver asus failed with error -22 [ 302.175452][ T5914] usb 5-1: USB disconnect, device number 7 [ 302.308376][ T5143] Bluetooth: hci4: command tx timeout [ 303.582646][T11617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2435'. [ 303.737509][T11474] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.772515][T11474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.774874][T11474] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.797136][T11623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2441'. [ 303.822455][T11474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.823227][T11474] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.869954][T11474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.872558][T11474] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.936656][T11474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.204703][T11474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.257384][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.281481][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.281704][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.336586][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.336674][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.353998][T11647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2449'. [ 304.388408][ T5143] Bluetooth: hci4: command tx timeout [ 305.402063][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.545796][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 306.165223][T11474] veth0_vlan: entered promiscuous mode [ 306.228508][T11474] veth1_vlan: entered promiscuous mode [ 306.403189][T11719] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 306.403475][T11719] syzkaller1: linktype set to 786 [ 306.478498][ T5143] Bluetooth: hci4: command tx timeout [ 306.566365][T11474] veth0_macvtap: entered promiscuous mode [ 306.581736][T11474] veth1_macvtap: entered promiscuous mode [ 306.617344][T11474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.662082][T11474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.735612][ T1433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.736552][ T1433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.738777][ T1433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.773769][ T5869] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 306.829515][ T1433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.995918][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.995948][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.995982][ T5869] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 306.996002][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.055871][ T5869] usb 2-1: config 0 descriptor?? [ 307.268645][T11736] Zero length message leads to an empty skb [ 307.367641][T11736] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2485'. [ 307.598602][ T5869] hid_parser_main: 445 callbacks suppressed [ 307.598626][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598656][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598677][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598699][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598723][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598745][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598768][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598793][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598816][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.598849][ T5869] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 307.600035][ T5869] petalynx 0003:18B1:0037.0030: item fetching failed at offset 134/235 [ 307.600679][ T5869] petalynx 0003:18B1:0037.0030: parse failed [ 307.600739][ T5869] petalynx 0003:18B1:0037.0030: probe with driver petalynx failed with error -22 [ 307.922686][ T5869] usb 2-1: USB disconnect, device number 32 [ 308.203086][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.203105][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.400248][ T1433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.400268][ T1433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.985466][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2498'. [ 308.985490][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2498'. [ 309.314338][T11784] tap1: tun_chr_ioctl cmd 1074025678 [ 309.314360][T11784] tap1: group set to 21 [ 309.957273][T11816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2521'. [ 310.138443][ T5869] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 310.296813][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.296845][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.296882][ T5869] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 310.296904][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.356622][ T5869] usb 2-1: config 0 descriptor?? [ 310.811101][ T5869] kye 0003:0458:0138.0031: collection stack underflow [ 310.811133][ T5869] kye 0003:0458:0138.0031: item 0 0 0 12 parsing failed [ 310.811860][ T5869] kye 0003:0458:0138.0031: parse failed [ 310.811928][ T5869] kye 0003:0458:0138.0031: probe with driver kye failed with error -22 [ 310.833614][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 310.984007][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 310.998805][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.998838][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.998878][ T5915] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 310.998899][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.020828][ T5915] usb 6-1: config 0 descriptor?? [ 311.026570][ T9] usb 2-1: USB disconnect, device number 33 [ 311.434194][T11853] sp0: Synchronizing with TNC [ 311.470446][ T5915] cherry 0003:046A:0027.0032: fixing up Cherry Cymotion report descriptor [ 311.489737][ T5915] cherry 0003:046A:0027.0032: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.5-1/input0 [ 311.671520][ T5913] usb 6-1: USB disconnect, device number 2 [ 311.696745][T11859] fido_id[11859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 312.661775][T11896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2560'. [ 313.078921][ T37] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 313.244586][ T37] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 313.244615][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.244634][ T37] usb 3-1: Product: syz [ 313.244646][ T37] usb 3-1: Manufacturer: syz [ 313.244659][ T37] usb 3-1: SerialNumber: syz [ 313.597700][ T37] rtl8150 3-1:1.0: couldn't reset the device [ 313.598046][ T37] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 313.648792][ T37] usb 3-1: USB disconnect, device number 35 [ 313.883865][T11945] netlink: 'syz.5.2581': attribute type 1 has an invalid length. [ 313.883910][T11945] netlink: 'syz.5.2581': attribute type 2 has an invalid length. [ 313.883923][T11945] netlink: 'syz.5.2581': attribute type 1 has an invalid length. [ 314.037847][T11952] binder: 11951:11952 ioctl c018620c 200000000280 returned -1 [ 314.187368][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 314.187410][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 314.336730][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2591'. [ 314.401636][T11971] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2594'. [ 314.645194][T11983] loop3: detected capacity change from 0 to 7 [ 314.649614][T11983] Dev loop3: unable to read RDB block 7 [ 314.649654][T11983] loop3: unable to read partition table [ 314.649839][T11983] loop3: partition table beyond EOD, truncated [ 314.649866][T11983] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 314.730137][ T37] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 314.904663][ T37] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.904692][ T37] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.904731][ T37] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.904751][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.184611][ T37] usb 2-1: GET_CAPABILITIES returned 0 [ 315.184659][ T37] usbtmc 2-1:16.0: can't read capabilities [ 315.322105][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2609'. [ 315.383003][T12004] loop3: detected capacity change from 0 to 7 [ 315.423087][ T9] usb 2-1: USB disconnect, device number 34 [ 315.483934][T12004] Dev loop3: unable to read RDB block 7 [ 315.483976][T12004] loop3: unable to read partition table [ 315.506169][T12004] loop3: partition table beyond EOD, truncated [ 315.506201][T12004] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 315.820870][T12011] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.821046][T12011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.821204][T12011] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.821402][T12011] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.821479][T12011] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 315.913297][T12011] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 316.001833][T12011] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 316.001912][T12011] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 316.103383][T12011] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 316.672231][T12046] Cache volume key already in use (9p,(null),) [ 316.967663][ T13] smc: removing ib device syz1 [ 317.130484][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.324491][ T37] syz1: Port: 1 Link DOWN [ 317.407946][T12052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.412851][T12052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.421475][T12052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.421766][T12052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.804824][ T13] smbdirect: ib_dev[syz1] removed [ 317.898080][T12070] team0: No ports can be present during mode change [ 318.758504][ T5913] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 318.918367][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 318.928146][ T5913] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.928178][ T5913] usb 6-1: config 0 interface 0 has no altsetting 0 [ 318.945056][ T5913] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 318.945082][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.999532][ T5913] usb 6-1: config 0 descriptor?? [ 319.433450][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 319.433572][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 319.433657][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 319.433683][ T5143] Bluetooth: hci1: command 0x2016 tx timeout [ 319.537027][ T5913] mcp2221 0003:04D8:00DD.0033: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 319.930566][ T5915] usb 6-1: USB disconnect, device number 3 [ 320.642009][T12118] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.2665'. [ 321.348782][ T5913] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 321.508512][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 321.517416][T10394] Bluetooth: hci0: command 0x0c1a tx timeout [ 321.517451][T10394] Bluetooth: hci4: command 0x0c1a tx timeout [ 321.572509][ T5913] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 321.572543][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.572574][ T5913] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 321.572596][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.766886][ T5913] usb 5-1: config 0 descriptor?? [ 322.201701][ T5913] hid_parser_main: 223 callbacks suppressed [ 322.201724][ T5913] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 322.201753][ T5913] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 322.201775][ T5913] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 322.201796][ T5913] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 322.201820][ T5913] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 322.265340][ T169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.405079][ T5913] hid-thrustmaster 0003:044F:B65D.0034: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 322.405520][ T5913] hid-thrustmaster 0003:044F:B65D.0034: setup data couldn't be sent [ 322.405808][ C1] hid-thrustmaster 0003:044F:B65D.0034: URB to get model id failed with error -71 [ 322.469298][ T5913] usb 5-1: USB disconnect, device number 8 [ 322.750713][T10394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.815534][T10394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.827389][T10394] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.840375][T10394] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.855092][T10394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.589590][T10394] Bluetooth: hci0: command 0x0c1a tx timeout [ 323.589640][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 323.783085][ T169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.076101][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2692'. [ 324.433328][ T169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.448408][ T5915] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 324.483088][T12187] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2693'. [ 324.625394][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 324.630158][ T5915] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 324.630190][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 324.630221][ T5915] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 324.630243][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.724328][ T5915] usb 6-1: config 0 descriptor?? [ 324.865539][T12201] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2699'. [ 324.956980][ T5143] Bluetooth: hci2: command tx timeout [ 325.166471][ T5915] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0 [ 325.166506][ T5915] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0 [ 325.166531][ T5915] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0 [ 325.166554][ T5915] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0 [ 325.166576][ T5915] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0 [ 325.173530][ T5915] hid-thrustmaster 0003:044F:B65D.0035: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 325.173748][ T5915] hid-thrustmaster 0003:044F:B65D.0035: setup data couldn't be sent [ 325.372983][ C0] hid-thrustmaster 0003:044F:B65D.0035: URB to get model id failed with error -71 [ 325.394463][ T37] usb 6-1: USB disconnect, device number 4 [ 325.399433][ T169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.540621][T12151] chnl_net:caif_netlink_parms(): no params data found [ 325.816360][T12151] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.816678][T12151] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.816912][T12151] bridge_slave_0: entered allmulticast mode [ 325.841118][T12151] bridge_slave_0: entered promiscuous mode [ 325.853110][T12151] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.853349][T12151] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.853550][T12151] bridge_slave_1: entered allmulticast mode [ 325.860808][T12151] bridge_slave_1: entered promiscuous mode [ 326.038470][ T5895] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 326.190256][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 326.193363][ T5895] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 326.193412][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.193435][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.193457][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.193475][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.193510][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.193531][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.345406][T12151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.392336][T12151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.530150][ T5895] usb 3-1: GET_CAPABILITIES returned 0 [ 326.530193][ T5895] usbtmc 3-1:16.0: can't read capabilities [ 326.738438][ T820] usb 3-1: USB disconnect, device number 36 [ 326.835057][T12151] team0: Port device team_slave_0 added [ 327.014481][T12151] team0: Port device team_slave_1 added [ 327.029977][ T5143] Bluetooth: hci2: command tx timeout [ 327.245587][T12246] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2710'. [ 327.409100][ T169] bridge_slave_1: left allmulticast mode [ 327.409124][ T169] bridge_slave_1: left promiscuous mode [ 327.453218][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.530022][ T169] bridge_slave_0: left allmulticast mode [ 327.530049][ T169] bridge_slave_0: left promiscuous mode [ 327.530287][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.530350][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.590493][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.648347][ T169] bond0 (unregistering): Released all slaves [ 328.686688][ T5489] 8021q: adding VLAN 0 to HW filter on device eth5 [ 328.721486][T12151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.721501][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.721525][T12151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.776932][T12151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.776948][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.776972][T12151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.007450][T12151] hsr_slave_0: entered promiscuous mode [ 329.028652][T12151] hsr_slave_1: entered promiscuous mode [ 329.030275][T12151] debugfs: 'hsr0' already exists in 'hsr' [ 329.030297][T12151] Cannot create hsr debugfs directory [ 329.109612][ T5143] Bluetooth: hci2: command tx timeout [ 330.696708][ T38] audit: type=1800 audit(1776366574.826:19): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2738" name=6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0 dev="tmpfs" ino=1043 res=0 errno=0 [ 331.200407][ T5143] Bluetooth: hci2: command tx timeout [ 331.233497][ T5489] 8021q: adding VLAN 0 to HW filter on device eth6 [ 331.739980][ T38] audit: type=1800 audit(1776366575.876:20): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2747" name=6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0 dev="tmpfs" ino=24 res=0 errno=0 [ 331.898598][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 332.214307][T12336] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 332.706407][ T38] audit: type=1800 audit(1776366576.836:21): pid=12350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2751" name=6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0 dev="tmpfs" ino=1044 res=0 errno=0 [ 332.753649][ T37] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 332.753919][ T37] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 332.754181][ T37] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 332.754446][ T37] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 332.754462][ T37] rtc rtc0: __rtc_set_alarm: err=-22 [ 332.898375][ T169] hsr_slave_0: left promiscuous mode [ 332.939265][ T169] hsr_slave_1: left promiscuous mode [ 332.940512][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.940537][ T169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.981875][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.981907][ T169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.060595][ T169] veth1_macvtap: left promiscuous mode [ 333.060756][ T169] veth0_macvtap: left promiscuous mode [ 333.060938][ T169] veth1_vlan: left promiscuous mode [ 333.061041][ T169] veth0_vlan: left promiscuous mode [ 333.829135][ T169] team0 (unregistering): Port device team_slave_1 removed [ 333.889179][ T169] team0 (unregistering): Port device team_slave_0 removed [ 335.590162][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 336.550798][T12151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.708777][T12151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.709504][T12151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.862025][T12430] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2777'. [ 336.897606][T12151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.916956][T12151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.035826][T12151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.036629][T12151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 337.090988][T12151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.618024][T12151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.694128][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 337.807998][T12151] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.918995][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.919143][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.027479][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.029161][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.445238][T12486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2792'. [ 338.694874][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 338.753609][T12151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.958002][T12151] veth0_vlan: entered promiscuous mode [ 338.988102][T12151] veth1_vlan: entered promiscuous mode [ 339.072196][T12151] veth0_macvtap: entered promiscuous mode [ 339.082139][T12151] veth1_macvtap: entered promiscuous mode [ 339.112878][T12151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.128425][ T5895] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 339.142941][T12151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.167966][ T169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.186011][ T169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.186090][ T169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.186123][ T169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.329535][ T5895] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 339.329562][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 339.329573][ T5895] usb 5-1: Product: syz [ 339.336144][ T5895] usb 5-1: config 0 descriptor?? [ 339.386484][ T5895] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 339.417209][ T5895] usb 5-1: Detected FT232H [ 339.599712][ T5895] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 340.003128][ T1917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.003148][ T1917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.028955][ T5895] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 340.108106][ T5895] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 340.160302][ T5895] usb 5-1: USB disconnect, device number 9 [ 340.322217][ T5895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 340.330353][ T5895] ftdi_sio 5-1:0.0: device disconnected [ 340.432508][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.432527][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.676660][T12510] loop5: detected capacity change from 0 to 7 [ 341.340444][T12528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2804'. [ 341.343674][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 341.802787][T12510] Dev loop5: unable to read RDB block 7 [ 341.802829][T12510] loop5: unable to read partition table [ 341.803164][T12510] loop5: partition table beyond EOD, truncated [ 341.825944][T12540] virtiofs: Unknown parameter 'always 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 18 nlmon0 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 20 batadv0 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 21 vxcan0 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 22 vxcan1 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 23 veth0 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 24 veth1 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 25 wg0 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 26 wg1 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 27 wg2 : 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 28 veth0_to_bridge: 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 29 bridge_slave_0: 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 30 veth1_to_bridge: 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 31 bridge_slave_1: 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 32 veth0_to_bond: 1 V3 [ 341.825944][T12540] 010000E0 1 0:00000000 0 [ 341.825944][T12540] 33 bond_slave_0: 1 V3 [ 341.825944][T12540] 010000E0 1 0:0 [ 341.829971][T12510] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 342.654475][T12569] input: syz0 as /devices/virtual/input/input25 [ 343.121741][ T5915] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 343.274680][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274712][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274733][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274752][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274781][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274800][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274818][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274838][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274856][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.274875][ T37] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 343.287437][ T37] hid-generic 0006:0004:0009.0036: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 343.379429][ T5915] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 343.379457][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.379475][ T5915] usb 6-1: Product: syz [ 343.379489][ T5915] usb 6-1: Manufacturer: syz [ 343.379502][ T5915] usb 6-1: SerialNumber: syz [ 343.434017][T12601] fido_id[12601]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 343.545652][ T5915] usb 6-1: config 0 descriptor?? [ 343.556808][ T5915] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 005 [ 343.897337][T12614] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2848'. [ 343.912916][T12614] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2848'. [ 343.942052][T12616] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.975258][T12616] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.981077][ T5915] (null): failure reading functionality [ 344.049839][ T5915] i2c i2c-1: connected i2c-tiny-usb device [ 344.291909][ T5896] usb 6-1: USB disconnect, device number 5 [ 344.464253][T12633] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2856'. [ 344.899405][ T5896] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 345.049908][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 345.057563][ T5896] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.057596][ T5896] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 345.057627][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 345.057657][ T5896] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 345.057678][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.124329][ T5896] usb 3-1: config 0 descriptor?? [ 345.597660][ T5896] hid-thrustmaster 0003:044F:B65D.0037: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 345.597891][ T5896] hid-thrustmaster 0003:044F:B65D.0037: setup data couldn't be sent [ 345.797161][ C0] hid-thrustmaster 0003:044F:B65D.0037: URB to get model id failed with error -71 [ 345.798997][ T820] usb 3-1: USB disconnect, device number 37 [ 345.866961][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 345.886264][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 345.935128][T12664] fido_id[12664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 346.246626][ T5143] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 346.414030][T12688] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.2881'. [ 346.533720][T12695] C: renamed from team_slave_0 (while UP) [ 346.571251][T12695] netlink: 'syz.5.2885': attribute type 1 has an invalid length. [ 346.571271][T12695] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2885'. [ 346.774685][T12709] overlay: filesystem on ./file0 is read-only [ 346.851807][T12711] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 346.851851][T12711] netlink: 'syz.2.2894': attribute type 2 has an invalid length. [ 346.851863][T12711] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 346.851875][T12711] netlink: 'syz.2.2894': attribute type 3 has an invalid length. [ 346.851887][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'. [ 348.599924][ T5915] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 348.758831][ T5915] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 348.758850][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.758860][ T5915] usb 2-1: Product: syz [ 348.758868][ T5915] usb 2-1: Manufacturer: syz [ 348.758875][ T5915] usb 2-1: SerialNumber: syz [ 348.846401][ T5915] usb 2-1: config 0 descriptor?? [ 348.856266][ T5915] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 035 [ 348.921701][T12792] program syz.4.2916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.037814][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2920'. [ 349.039769][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2920'. [ 349.194803][T12800] loop8: detected capacity change from 0 to 1 [ 349.210181][ T5896] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 349.225224][T12800] Dev loop8: unable to read RDB block 1 [ 349.225272][T12800] loop8: unable to read partition table [ 349.225534][T12800] loop8: partition table beyond EOD, truncated [ 349.225564][T12800] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 349.264269][ T5915] (null): failure reading functionality [ 349.325628][ T5915] i2c i2c-1: connected i2c-tiny-usb device [ 349.358365][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 349.362427][ T5896] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 349.362452][ T5896] usb 6-1: config 0 has no interface number 0 [ 349.362493][ T5896] usb 6-1: config 0 interface 12 has no altsetting 0 [ 349.367464][ T5896] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 349.367490][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.367509][ T5896] usb 6-1: Product: syz [ 349.367522][ T5896] usb 6-1: Manufacturer: syz [ 349.367534][ T5896] usb 6-1: SerialNumber: syz [ 349.440380][ T5896] usb 6-1: config 0 descriptor?? [ 349.495060][ T820] usb 2-1: USB disconnect, device number 35 [ 349.818408][ T5915] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 349.970696][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 349.970759][ T5915] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 349.970771][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.009307][ T5915] usb 3-1: config 0 descriptor?? [ 350.036463][T12808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 350.277367][ T5896] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 350.277471][ T5896] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 350.277489][ T5896] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 350.277575][ T5896] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 350.299489][ T5896] usb 6-1: USB disconnect, device number 6 [ 350.543448][ T5915] hid_parser_main: 12 callbacks suppressed [ 350.543473][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543503][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543528][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543553][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543578][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543603][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543626][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543649][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543671][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.543694][ T5915] asus 0003:0B05:1ABE.0038: unknown main item tag 0x0 [ 350.566130][ T5915] asus 0003:0B05:1ABE.0038: unbalanced collection at end of report description [ 350.566892][ T5915] asus 0003:0B05:1ABE.0038: Asus hid parse failed: -22 [ 350.567006][ T5915] asus 0003:0B05:1ABE.0038: probe with driver asus failed with error -22 [ 350.786722][ T5915] usb 3-1: USB disconnect, device number 38 [ 351.511500][T12829] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.2936'. [ 351.694261][T12839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2941'. [ 351.762095][T12842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2948'. [ 352.208055][ T37] hid-generic 0006:0004:0009.0039: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 352.378115][T12870] fido_id[12870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 352.727055][T12894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2963'. [ 353.151140][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 353.302355][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 353.302404][ T10] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 353.302426][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.340418][ T10] usb 6-1: config 0 descriptor?? [ 353.341769][T12905] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 353.771939][T12941] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2978'. [ 353.788824][ T10] hid (null): global environment stack underflow [ 353.817652][ T10] asus 0003:0B05:1ABE.003A: global environment stack underflow [ 353.817677][ T10] asus 0003:0B05:1ABE.003A: item 0 1 1 11 parsing failed [ 353.821699][ T10] asus 0003:0B05:1ABE.003A: Asus hid parse failed: -22 [ 353.821801][ T10] asus 0003:0B05:1ABE.003A: probe with driver asus failed with error -22 [ 353.957659][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 354.040141][ T5895] usb 6-1: USB disconnect, device number 7 [ 354.177071][T12956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2982'. [ 354.177195][T12956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2982'. [ 354.210451][T12959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2983'. [ 354.216057][T12959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2983'. [ 355.382940][T13017] netlink: 'syz.5.3005': attribute type 1 has an invalid length. [ 355.382977][T13017] netlink: 'syz.5.3005': attribute type 2 has an invalid length. [ 355.382984][T13017] netlink: 'syz.5.3005': attribute type 1 has an invalid length. [ 355.382991][T13017] netlink: 'syz.5.3005': attribute type 3 has an invalid length. [ 355.399509][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 355.552241][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 355.554183][ T5895] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.554215][ T5895] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 355.554240][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 355.554270][ T5895] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 355.554290][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.623165][ T5895] usb 5-1: config 0 descriptor?? [ 356.068972][ T5895] hid_parser_main: 774 callbacks suppressed [ 356.068995][ T5895] hid-thrustmaster 0003:044F:B65D.003B: unknown main item tag 0x0 [ 356.069022][ T5895] hid-thrustmaster 0003:044F:B65D.003B: unknown main item tag 0x0 [ 356.069043][ T5895] hid-thrustmaster 0003:044F:B65D.003B: unknown main item tag 0x0 [ 356.069062][ T5895] hid-thrustmaster 0003:044F:B65D.003B: unknown main item tag 0x0 [ 356.069081][ T5895] hid-thrustmaster 0003:044F:B65D.003B: unknown main item tag 0x0 [ 356.131647][ T5895] hid-thrustmaster 0003:044F:B65D.003B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 356.131780][ T5895] hid-thrustmaster 0003:044F:B65D.003B: setup data couldn't be sent [ 356.223382][T13048] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 356.223846][T13048] syzkaller1: linktype set to 786 [ 356.286374][ C0] hid-thrustmaster 0003:044F:B65D.003B: URB to get model id failed with error -71 [ 356.304637][ T820] usb 5-1: USB disconnect, device number 10 [ 356.438399][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 356.559977][T13055] overlay: filesystem on ./file0 is read-only [ 356.590106][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 356.590127][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.590147][ T10] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 356.590159][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.593606][ T10] usb 6-1: config 0 descriptor?? [ 356.993533][T13067] __nla_validate_parse: 2 callbacks suppressed [ 356.993546][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 356.993557][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3029'. [ 357.029991][ T10] petalynx 0003:18B1:0037.003C: unknown main item tag 0x0 [ 357.030026][ T10] petalynx 0003:18B1:0037.003C: unknown main item tag 0x0 [ 357.030051][ T10] petalynx 0003:18B1:0037.003C: unknown main item tag 0x0 [ 357.030074][ T10] petalynx 0003:18B1:0037.003C: unknown main item tag 0x0 [ 357.030097][ T10] petalynx 0003:18B1:0037.003C: unknown main item tag 0x0 [ 357.036330][ T10] petalynx 0003:18B1:0037.003C: item fetching failed at offset 134/235 [ 357.037077][ T10] petalynx 0003:18B1:0037.003C: parse failed [ 357.037148][ T10] petalynx 0003:18B1:0037.003C: probe with driver petalynx failed with error -22 [ 357.240140][ T5895] usb 6-1: USB disconnect, device number 8 [ 357.368349][ T10] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 357.520539][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.524744][ T10] usb 5-1: string descriptor 0 read error: -22 [ 357.524835][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 357.524855][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.558703][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.572489][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 357.749962][ T10] usb 5-1: USB disconnect, device number 11 [ 358.294043][T13093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3050'. [ 358.403356][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3043'. [ 358.442267][T13098] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3052'. [ 358.523471][T13103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3045'. [ 359.624001][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3075'. [ 359.767991][T13169] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 359.775823][T13169] syzkaller1: linktype set to 786 [ 360.068505][ T5895] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 360.242399][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.242431][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.242469][ T5895] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 360.242491][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.255659][ T5895] usb 6-1: config 0 descriptor?? [ 360.384392][T13193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3090'. [ 360.486783][T13197] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3091'. [ 360.681915][ T5895] kye 0003:0458:0138.003D: collection stack underflow [ 360.681945][ T5895] kye 0003:0458:0138.003D: item 0 0 0 12 parsing failed [ 360.682712][ T5895] kye 0003:0458:0138.003D: parse failed [ 360.682780][ T5895] kye 0003:0458:0138.003D: probe with driver kye failed with error -22 [ 360.880683][ T37] usb 6-1: USB disconnect, device number 9 [ 361.013020][T13219] tap0: tun_chr_ioctl cmd 1074025678 [ 361.013040][T13219] tap0: group set to 21 [ 361.363978][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 361.748409][ T37] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 361.901393][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.901425][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.901464][ T37] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 361.901485][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.906668][ T37] usb 3-1: config 0 descriptor?? [ 362.362298][ T37] hid_parser_main: 178 callbacks suppressed [ 362.362326][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362354][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362377][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362401][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362424][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362448][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362470][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362493][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362517][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.362541][ T37] kye 0003:0458:0138.003E: unknown main item tag 0x0 [ 362.363010][ T37] kye 0003:0458:0138.003E: collection stack underflow [ 362.363032][ T37] kye 0003:0458:0138.003E: item 0 0 0 12 parsing failed [ 362.367453][ T37] kye 0003:0458:0138.003E: parse failed [ 362.367524][ T37] kye 0003:0458:0138.003E: probe with driver kye failed with error -22 [ 362.628457][ T5915] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 362.685139][ T37] usb 3-1: USB disconnect, device number 39 [ 362.748765][T13282] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 362.748912][T13282] netlink: 'syz.4.3133': attribute type 2 has an invalid length. [ 362.748926][T13282] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 362.799159][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 362.801153][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.801184][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.801220][ T5915] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 362.801242][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.880211][ T5915] usb 2-1: config 0 descriptor?? [ 362.907257][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3136'. [ 362.907353][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3136'. [ 363.107025][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3147'. [ 363.107062][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3147'. [ 363.328373][ T5915] cherry 0003:046A:0027.003F: fixing up Cherry Cymotion report descriptor [ 363.332763][ T5915] cherry 0003:046A:0027.003F: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.1-1/input0 [ 363.391489][T13308] loop5: detected capacity change from 0 to 7 [ 363.535117][ T820] usb 2-1: USB disconnect, device number 36 [ 363.767279][T13308] Dev loop5: unable to read RDB block 7 [ 363.767314][T13308] loop5: unable to read partition table [ 363.767438][T13308] loop5: partition table beyond EOD, truncated [ 363.767462][T13308] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 364.116230][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 364.733131][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3164'. [ 364.918439][ T5915] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 365.068345][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 365.070786][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.070816][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.070843][ T5915] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 365.070855][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.088964][ T820] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 365.136826][ T5915] usb 3-1: config 0 descriptor?? [ 365.267163][ T820] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 365.267192][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.267211][ T820] usb 2-1: Product: syz [ 365.267223][ T820] usb 2-1: Manufacturer: syz [ 365.267235][ T820] usb 2-1: SerialNumber: syz [ 365.590205][ T5915] cherry 0003:046A:0027.0040: fixing up Cherry Cymotion report descriptor [ 365.650981][ T820] rtl8150 2-1:1.0: couldn't reset the device [ 365.651352][ T820] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 365.656598][ T5915] cherry 0003:046A:0027.0040: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 365.704680][ T820] usb 2-1: USB disconnect, device number 37 [ 365.803954][ T37] usb 3-1: USB disconnect, device number 40 [ 365.932004][T13384] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.3179'. [ 366.421662][T13404] Bluetooth: MGMT ver 1.23 [ 367.250909][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 367.407784][ T5915] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 367.407813][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.407831][ T5915] usb 5-1: Product: syz [ 367.407845][ T5915] usb 5-1: Manufacturer: syz [ 367.407858][ T5915] usb 5-1: SerialNumber: syz [ 367.746825][ T5915] rtl8150 5-1:1.0: couldn't reset the device [ 367.747166][ T5915] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 367.781665][ T5915] usb 5-1: USB disconnect, device number 12 [ 368.743104][T13513] batadv_slave_1: entered promiscuous mode [ 368.744384][T13512] batadv_slave_1: left promiscuous mode [ 369.130393][T13536] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 369.130419][T13536] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 369.620934][T13561] batadv_slave_1: entered promiscuous mode [ 369.621722][T13560] batadv_slave_1: left promiscuous mode [ 370.468561][T13610] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3286'. [ 371.041524][T13638] netlink: 'syz.4.3300': attribute type 19 has an invalid length. [ 371.041557][T13638] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3300'. [ 371.133451][T13642] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 371.133471][T13642] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 371.905821][T13677] netlink: 'syz.2.3317': attribute type 19 has an invalid length. [ 371.905840][T13677] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3317'. [ 372.770158][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3332'. [ 374.042817][T13758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.501309][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 374.652821][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.652878][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 374.652902][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.699816][ T10] usb 5-1: config 0 descriptor?? [ 374.731070][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 374.909338][ T10] pwc: send_video_command error -71 [ 374.909366][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 374.909471][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 374.922339][ T10] usb 5-1: USB disconnect, device number 13 [ 375.031104][T13788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.203422][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.254452][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.254770][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.461584][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 375.594170][T13812] netlink: 'syz.5.3379': attribute type 10 has an invalid length. [ 375.594185][T13812] netlink: 'syz.5.3379': attribute type 29 has an invalid length. [ 375.632543][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.632595][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 375.632607][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.646164][ T10] usb 5-1: config 0 descriptor?? [ 375.678017][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 376.072947][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 376.074529][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 376.075070][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 376.076201][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 376.080343][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 376.081641][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 376.087798][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 376.090309][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 376.090766][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 376.091912][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 376.096522][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 376.099806][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 376.100253][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 376.101132][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 376.102017][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 376.104497][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 376.197876][ T10] pwc: Registered as video103. [ 376.265007][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 376.329500][ T10] usb 5-1: USB disconnect, device number 14 [ 376.880964][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3392'. [ 376.901024][T13846] program syz.4.3393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.447884][T13868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 377.449984][T13868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 377.948592][ T5895] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 378.101147][ T5895] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 378.101176][ T5895] usb 6-1: config 0 has no interface number 0 [ 378.101222][ T5895] usb 6-1: config 0 interface 41 has no altsetting 0 [ 378.103791][ T5895] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 378.103822][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.103842][ T5895] usb 6-1: Product: syz [ 378.103855][ T5895] usb 6-1: Manufacturer: syz [ 378.103870][ T5895] usb 6-1: SerialNumber: syz [ 378.114578][ T5895] usb 6-1: config 0 descriptor?? [ 378.563884][T13918] netlink: 'syz.4.3431': attribute type 8 has an invalid length. [ 378.563905][T13918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3431'. [ 378.609419][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.958355][ T820] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 378.972030][ T5895] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 378.972694][ T5895] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 378.993689][ T5895] usb 6-1: USB disconnect, device number 10 [ 379.118521][ T820] usb 3-1: Using ep0 maxpacket: 8 [ 379.123425][ T820] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 379.123459][ T820] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 379.123483][ T820] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.123503][ T820] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.123537][ T820] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.123556][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.246522][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 379.304440][T13938] misc userio: Begin command sent, but we're already running [ 379.406289][ T820] usb 3-1: GET_CAPABILITIES returned 0 [ 379.406333][ T820] usbtmc 3-1:16.0: can't read capabilities [ 379.572179][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3443'. [ 379.611617][ T5895] usb 3-1: USB disconnect, device number 41 [ 379.998559][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 380.055603][T13960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3449'. [ 380.159457][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 380.163502][ T5913] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 380.163527][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.163537][ T5913] usb 5-1: Product: syz [ 380.163545][ T5913] usb 5-1: Manufacturer: syz [ 380.163552][ T5913] usb 5-1: SerialNumber: syz [ 380.811680][ T5913] usb 5-1: clock source 0 is not valid, cannot use [ 381.026737][ T5913] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 381.027226][ T5913] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 381.072591][ T5913] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 381.072616][ T5913] usb 5-1: clock source 0 is not valid, cannot use [ 381.077695][ T5913] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 381.078777][ T5913] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 381.996770][ T5913] usb 5-1: USB disconnect, device number 15 [ 382.138093][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3470'. [ 382.822619][T11470] udevd[11470]: setting owner of /dev/bus/usb/005/015 to uid=0, gid=0 failed: No such file or directory [ 382.875488][T11486] udevd[11486]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.218418][ T5913] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 383.254438][ T5143] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 383.258481][ T5914] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 383.325863][T14056] netlink: 'syz.1.3492': attribute type 27 has an invalid length. [ 383.325884][T14056] netlink: 'syz.1.3492': attribute type 1 has an invalid length. [ 383.414904][ T5914] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 383.414925][ T5914] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 383.417516][ T5914] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 383.417543][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.417561][ T5914] usb 6-1: Product: syz [ 383.417574][ T5914] usb 6-1: Manufacturer: syz [ 383.417587][ T5914] usb 6-1: SerialNumber: syz [ 383.419122][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 383.440899][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.440950][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.440975][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 383.440995][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 383.441016][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.442581][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 383.442605][ T5913] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 383.442623][ T5913] usb 5-1: Manufacturer: syz [ 383.453708][ T5914] usb 6-1: config 0 descriptor?? [ 383.456949][ T5913] usb 5-1: config 0 descriptor?? [ 383.567048][T14043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 383.567165][T14043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 383.749982][ T5913] rc_core: IR keymap rc-hauppauge not found [ 383.750054][ T5913] Registered IR keymap rc-empty [ 383.750260][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.768482][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.817238][T14043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 383.817353][T14043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 383.839730][ T5913] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 383.916719][ T5913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 384.031441][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.054794][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.071423][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.089062][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.116020][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.129627][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.158694][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.188415][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.208449][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.219729][ T5914] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 384.235757][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.248399][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 384.371484][ T5913] mceusb 5-1:0.0: Registered with mce emulator interface version 95 [ 384.371508][ T5913] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 384.400515][ T5913] usb 5-1: USB disconnect, device number 16 [ 384.435417][ T5914] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 384.457198][ T5914] usb 6-1: USB disconnect, device number 11 [ 385.033791][ T5914] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 385.118406][ T5913] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 385.178476][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 385.181048][ T5914] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 385.181074][ T5914] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 385.181093][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 385.181112][ T5914] usb 3-1: config 1 has no interface number 0 [ 385.181162][ T5914] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.181177][ T5914] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 385.181201][ T5914] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 385.181320][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.287216][ T5914] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 385.293771][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 385.306140][ T5913] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 385.316361][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 385.316391][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.316410][ T5913] usb 2-1: Product: syz [ 385.316425][ T5913] usb 2-1: Manufacturer: syz [ 385.316438][ T5913] usb 2-1: SerialNumber: syz [ 385.531174][ T5914] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 385.652525][ T5913] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 385.776388][ T5913] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 385.776417][ T5913] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 385.921752][ T5914] usb 3-1: USB disconnect, device number 42 [ 385.932775][ T5914] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 386.186540][ T5913] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 386.299754][ T5913] usb 2-1: USB disconnect, device number 38 [ 386.390778][T14039] udevd[14039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 386.662679][T14151] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3535'. [ 386.795617][T14156] pim6reg: entered allmulticast mode [ 386.811392][T14155] pim6reg: left allmulticast mode [ 386.944167][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3539'. [ 387.279651][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3539'. [ 387.279673][T14164] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3539'. [ 387.280368][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3539'. [ 387.280385][T14164] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3539'. [ 388.070334][T14204] Bluetooth: MGMT ver 1.23 [ 388.428338][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 388.534744][T14223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3568'. [ 388.588347][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 388.590743][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 388.590770][ T10] usb 2-1: config 0 has no interface number 0 [ 388.590811][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 388.590836][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 388.593621][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 388.593650][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.593669][ T10] usb 2-1: Product: syz [ 388.593683][ T10] usb 2-1: Manufacturer: syz [ 388.593696][ T10] usb 2-1: SerialNumber: syz [ 388.676931][ T10] usb 2-1: config 0 descriptor?? [ 388.677812][T14209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.678124][T14209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.745548][T14227] netlink: 'syz.2.3570': attribute type 6 has an invalid length. [ 388.916004][T14209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.916173][T14209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 389.250058][T14240] sctp: Trying to GSO but underlying device doesn't support it. [ 389.525133][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 389.525170][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 389.525440][ T10] asix 2-1:0.251: probe with driver asix failed with error -71 [ 389.590783][ T10] usb 2-1: USB disconnect, device number 39 [ 389.881587][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 389.913978][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'. [ 389.913998][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'. [ 389.914006][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3588'. [ 389.970741][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'. [ 389.998405][ T5896] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 390.148452][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 390.155679][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.155710][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.155730][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.155770][ T5896] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 390.155791][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.194973][T14275] vivid-000: ================= START STATUS ================= [ 390.194992][T14275] vivid-000: Enable Output Cropping: true grabbed [ 390.195025][T14275] vivid-000: Enable Output Composing: true grabbed [ 390.195044][T14275] vivid-000: Enable Output Scaler: true grabbed [ 390.195064][T14275] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 390.195083][T14275] vivid-000: Transmit Mode: HDMI grabbed [ 390.195102][T14275] vivid-000: Hotplug Present: 0x00000000 [ 390.195119][T14275] vivid-000: RxSense Present: 0x00000000 [ 390.195135][T14275] vivid-000: EDID Present: 0x00000000 [ 390.195152][T14275] vivid-000: ================== END STATUS ================== [ 390.281658][ T5896] usb 5-1: config 0 descriptor?? [ 390.309451][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 390.482240][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 390.483120][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 390.512619][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.512648][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 390.512697][ T10] usb 3-1: config 1 interface 1 has no altsetting 1 [ 390.553268][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 390.553297][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.553369][ T10] usb 3-1: Product: syz [ 390.553382][ T10] usb 3-1: Manufacturer: syz [ 390.553397][ T10] usb 3-1: SerialNumber: syz [ 390.574286][T14287] netlink: 'syz.5.3598': attribute type 8 has an invalid length. [ 390.781299][ T5896] dragonrise 0003:0079:0006.0041: unbalanced collection at end of report description [ 390.800594][ T5896] dragonrise 0003:0079:0006.0041: parse failed [ 390.800729][ T5896] dragonrise 0003:0079:0006.0041: probe with driver dragonrise failed with error -22 [ 390.922849][ T5914] usb 5-1: USB disconnect, device number 17 [ 391.060098][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 391.109624][ T10] usb 3-1: USB disconnect, device number 43 [ 391.162577][T14039] udevd[14039]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.083617][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 392.167050][T14331] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 392.230393][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.230426][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.230461][ T10] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 392.230482][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.289408][ T10] usb 3-1: config 0 descriptor?? [ 392.959778][ T10] razer 0003:1532:010E.0042: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 393.077932][T14362] input: syz0 as /devices/virtual/input/input31 [ 393.214131][ T10] usb 3-1: USB disconnect, device number 44 [ 394.261078][T14417] blkio.reset_stats is deprecated [ 394.628494][ T5914] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 394.788539][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 394.793819][ T5914] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 394.793847][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.823245][ T5914] usb 2-1: config 0 descriptor?? [ 395.034167][ T5914] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 395.174243][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 395.176977][ T5914] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 395.177029][ T5914] usb 2-1: media controller created [ 395.396066][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 395.503432][ T5914] az6027: usb out operation failed. (-71) [ 395.504902][ T5914] az6027: usb out operation failed. (-71) [ 395.504917][ T5914] stb0899_attach: Driver disabled by Kconfig [ 395.504926][ T5914] az6027: no front-end attached [ 395.504926][ T5914] [ 395.505317][ T5914] az6027: usb out operation failed. (-71) [ 395.505333][ T5914] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 395.513020][ T5914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 395.520249][ T5914] dvb-usb: schedule remote query interval to 400 msecs. [ 395.520286][ T5914] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 395.529933][ T5914] usb 2-1: USB disconnect, device number 40 [ 395.719415][T14447] netlink: 'syz.2.3670': attribute type 10 has an invalid length. [ 395.860223][ T5914] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 396.078396][ T5143] Bluetooth: hci2: command tx timeout [ 396.238366][ T5914] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 396.380140][ T5914] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 396.380166][ T5914] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 396.380185][ T5914] usb 2-1: config 246 has no interface number 0 [ 396.380233][ T5914] usb 2-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.380247][ T5914] usb 2-1: config 246 interface 166 has no altsetting 0 [ 396.384433][ T5914] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 396.384458][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.384477][ T5914] usb 2-1: Product: syz [ 396.384489][ T5914] usb 2-1: Manufacturer: syz [ 396.384501][ T5914] usb 2-1: SerialNumber: syz [ 397.082684][ T5914] usb 2-1: Limiting number of CPorts to U8_MAX [ 397.107276][ T5914] usb 2-1: Not enough endpoints found in device, aborting! [ 397.331255][ T10] usb 2-1: USB disconnect, device number 41 [ 398.600591][ T5143] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 398.600678][ T5143] Bluetooth: hci1: Dropping invalid advertising data [ 398.600697][ T5143] Bluetooth: hci1: Malformed LE Event: 0x02 [ 398.828393][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 398.992788][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.992821][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.992842][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.992882][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.992905][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.997119][ T10] usb 5-1: config 0 descriptor?? [ 399.015828][ T10] hub 5-1:0.0: USB hub found [ 399.148313][ T5915] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 399.165787][T14572] tap0: tun_chr_ioctl cmd 1074025672 [ 399.165808][T14572] tap0: ignored: set checksum enabled [ 399.204811][ T10] hub 5-1:0.0: 9 ports detected [ 399.205309][ T10] hub 5-1:0.0: insufficient power available to use all downstream ports [ 399.344751][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 399.344781][ T5915] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 399.344831][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.379579][ T5915] usb 6-1: config 0 descriptor?? [ 399.380775][T14568] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 399.434518][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 399.434543][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 399.530917][ T10] usb 5-1: USB disconnect, device number 18 [ 399.632782][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3735'. [ 399.793214][ T5915] hid (null): global environment stack underflow [ 399.793228][ T5915] hid (null): unknown global tag 0xd [ 399.827412][ T5915] hid_parser_main: 145 callbacks suppressed [ 399.827435][ T5915] asus 0003:0B05:1ABE.0043: unknown main item tag 0x0 [ 399.827462][ T5915] asus 0003:0B05:1ABE.0043: unknown main item tag 0x0 [ 399.827485][ T5915] asus 0003:0B05:1ABE.0043: unknown main item tag 0x0 [ 399.827507][ T5915] asus 0003:0B05:1ABE.0043: unknown main item tag 0x0 [ 399.827530][ T5915] asus 0003:0B05:1ABE.0043: unknown main item tag 0x0 [ 399.827552][ T5915] asus 0003:0B05:1ABE.0043: unknown main item tag 0x0 [ 399.827576][ T5915] asus 0003:0B05:1ABE.0043: global environment stack underflow [ 399.827589][ T5915] asus 0003:0B05:1ABE.0043: item 0 4 1 11 parsing failed [ 399.829282][ T5915] asus 0003:0B05:1ABE.0043: Asus hid parse failed: -22 [ 399.829380][ T5915] asus 0003:0B05:1ABE.0043: probe with driver asus failed with error -22 [ 400.053411][ T5915] usb 6-1: USB disconnect, device number 12 [ 400.317107][T14604] Set syz0 is full, maxelem 0 reached [ 400.443315][ T38] audit: type=1326 audit(1776367412.574:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.1.3749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31114dc819 code=0x0 [ 400.478404][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 400.634735][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.634774][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 400.636863][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.636892][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.636909][ T10] usb 3-1: Product: syz [ 400.636920][ T10] usb 3-1: Manufacturer: syz [ 400.636932][ T10] usb 3-1: SerialNumber: syz [ 400.886824][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.900112][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.924068][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 400.959646][ T10] usb 3-1: USB disconnect, device number 45 [ 401.393175][T14651] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 401.411701][T14651] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 401.440284][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 401.624264][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 401.626930][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 401.626956][ T10] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 401.627015][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.627036][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.627058][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 401.627080][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.627118][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 401.627142][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.897893][ T10] usb 3-1: usb_control_msg returned -71 [ 401.897923][ T10] usbtmc 3-1:16.0: can't read capabilities [ 401.926800][ T10] usb 3-1: USB disconnect, device number 46 [ 402.020863][ T5914] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 402.036830][ T5914] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.078982][ T820] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 402.233449][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 402.246637][ T820] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 402.246665][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.246684][ T820] usb 5-1: Product: syz [ 402.246697][ T820] usb 5-1: Manufacturer: syz [ 402.246711][ T820] usb 5-1: SerialNumber: syz [ 402.302168][ T820] usb 5-1: config 0 descriptor?? [ 402.317264][ T820] gspca_main: spca508-2.14.0 probing 041e:4018 [ 402.515011][ T820] gspca_spca508: reg_read err -32 [ 402.515596][ T820] gspca_spca508: reg_read err -32 [ 402.717093][ T820] gspca_spca508: reg_read err -71 [ 402.725103][ T820] gspca_spca508: reg_read err -71 [ 402.725874][ T820] gspca_spca508: reg write: error -71 [ 402.725958][ T820] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 402.755518][ T820] usb 5-1: USB disconnect, device number 19 [ 402.878559][ T5896] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 403.001646][T14680] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3777'. [ 403.001668][T14680] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 403.029958][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 403.032300][ T5896] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.032326][ T5896] usb 3-1: config 0 has no interface number 0 [ 403.032365][ T5896] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.032404][ T5896] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 403.032426][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.086481][ T5896] usb 3-1: config 0 descriptor?? [ 403.132667][ T5896] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 403.473125][ T5913] usb 3-1: USB disconnect, device number 47 [ 403.935465][T14704] binder: 14703:14704 ioctl c018620c 200000000580 returned -22 [ 404.526014][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3802'. [ 405.159005][ T5896] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 405.240126][T14763] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 405.240149][T14763] overlayfs: workdir and upperdir must be separate subtrees [ 405.308312][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 405.310630][ T5896] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 405.310660][ T5896] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 405.310683][ T5896] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.310704][ T5896] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.310741][ T5896] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.310761][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.537921][ T5896] usb 2-1: GET_CAPABILITIES returned 0 [ 405.537996][ T5896] usbtmc 2-1:16.0: can't read capabilities [ 405.736823][ T5913] usb 2-1: USB disconnect, device number 42 [ 406.346769][T14803] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 406.358547][T14803] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 407.410353][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3850'. [ 407.618503][ T5914] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 407.773767][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.773820][ T5914] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 407.773844][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.816888][ T5914] usb 2-1: config 0 descriptor?? [ 407.832400][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 408.041174][ T5914] pwc: send_video_command error -71 [ 408.041191][ T5914] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 408.041297][ T5914] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 408.045313][ T5914] usb 2-1: USB disconnect, device number 43 [ 408.410749][T14878] misc userio: Begin command sent, but we're already running [ 408.428386][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 408.560075][ T5914] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 408.578446][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 408.580817][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 408.580847][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.580861][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.580873][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.580900][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.580912][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.750527][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.750580][ T5914] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 408.750602][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.792085][ T5914] usb 2-1: config 0 descriptor?? [ 408.807874][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 408.809752][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 408.809794][ T10] usbtmc 6-1:16.0: can't read capabilities [ 409.017800][ T10] usb 6-1: USB disconnect, device number 13 [ 409.200849][ T5914] pwc: recv_control_msg error -71 req 02 val 2b00 [ 409.201396][ T5914] pwc: recv_control_msg error -71 req 02 val 2700 [ 409.201853][ T5914] pwc: recv_control_msg error -71 req 02 val 2c00 [ 409.202288][ T5914] pwc: recv_control_msg error -71 req 04 val 1000 [ 409.202735][ T5914] pwc: recv_control_msg error -71 req 04 val 1300 [ 409.203146][ T5914] pwc: recv_control_msg error -71 req 04 val 1400 [ 409.203578][ T5914] pwc: recv_control_msg error -71 req 02 val 2000 [ 409.204001][ T5914] pwc: recv_control_msg error -71 req 02 val 2100 [ 409.204966][ T5914] pwc: recv_control_msg error -71 req 04 val 1500 [ 409.206817][ T5914] pwc: recv_control_msg error -71 req 02 val 2500 [ 409.209910][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 409.216776][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 409.225180][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 409.232771][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 409.278451][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 409.305601][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 409.335868][ T5914] pwc: Registered as video103. [ 409.351814][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 409.485326][ T5914] usb 2-1: USB disconnect, device number 44 [ 409.634119][T14039] udevd[14039]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 410.305558][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3886'. [ 411.437435][T14963] kvm: kvm [14962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x6 [ 412.135214][T11474] syz-executor (11474) used greatest stack depth: 18008 bytes left [ 412.746100][ T1297] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.894110][T10394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.975230][T10394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.987154][T10394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.995425][T10394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.996223][T10394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.416615][T15012] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3926'. [ 413.416732][T15012] netlink: 'syz.1.3926': attribute type 2 has an invalid length. [ 413.705702][T15006] chnl_net:caif_netlink_parms(): no params data found [ 413.708330][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 413.871449][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.872688][ T5914] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 413.875218][ T5914] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 413.875244][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.875263][ T5914] usb 5-1: Product: syz [ 413.875275][ T5914] usb 5-1: Manufacturer: syz [ 413.875288][ T5914] usb 5-1: SerialNumber: syz [ 414.006877][ T1297] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.196617][ T5914] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 414.386925][ T5914] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 414.386942][ T5914] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 414.487097][ T1297] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.585305][T15006] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.585620][T15006] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.585828][T15006] bridge_slave_0: entered allmulticast mode [ 414.594140][T15006] bridge_slave_0: entered promiscuous mode [ 414.615293][T15006] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.615565][T15006] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.616046][T15006] bridge_slave_1: entered allmulticast mode [ 414.634953][T15006] bridge_slave_1: entered promiscuous mode [ 414.852902][ T5914] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 414.924840][ T5914] usb 5-1: USB disconnect, device number 20 [ 415.073620][T14039] udevd[14039]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.117063][ T5143] Bluetooth: hci4: command tx timeout [ 415.126092][ T1297] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.325276][T15049] pim6reg: entered allmulticast mode [ 415.336855][T15006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.337330][T15048] pim6reg: left allmulticast mode [ 415.436051][T15006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.523686][ T5914] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 415.585170][T15006] team0: Port device team_slave_0 added [ 415.607019][T15006] team0: Port device team_slave_1 added [ 415.698339][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 415.740688][ T5914] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 415.740722][ T5914] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 415.740739][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 415.740756][ T5914] usb 2-1: config 1 has no interface number 0 [ 415.740799][ T5914] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.740820][ T5914] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 415.740853][ T5914] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 415.740870][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.853943][ T5914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 415.927316][T15006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.927330][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.927351][T15006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.946831][T15006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.946847][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.946872][T15006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.056133][ T5914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 416.207640][T15006] hsr_slave_0: entered promiscuous mode [ 416.213291][T15006] hsr_slave_1: entered promiscuous mode [ 416.217121][T15006] debugfs: 'hsr0' already exists in 'hsr' [ 416.217149][T15006] Cannot create hsr debugfs directory [ 416.492359][ T10] usb 2-1: USB disconnect, device number 45 [ 416.495721][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 417.146701][T15090] sctp: [Deprecated]: syz.4.3957 (pid 15090) Use of int in max_burst socket option deprecated. [ 417.146701][T15090] Use struct sctp_assoc_value instead [ 417.188425][ T5143] Bluetooth: hci4: command tx timeout [ 417.419707][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3966'. [ 417.419737][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3966'. [ 417.419751][T15097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3966'. [ 417.600532][T15102] vivid-000: ================= START STATUS ================= [ 417.600551][T15102] vivid-000: Enable Output Cropping: true grabbed [ 417.600576][T15102] vivid-000: Enable Output Composing: true grabbed [ 417.600595][T15102] vivid-000: Enable Output Scaler: true grabbed [ 417.600615][T15102] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 417.600634][T15102] vivid-000: Transmit Mode: HDMI grabbed [ 417.600652][T15102] vivid-000: Hotplug Present: 0x00000000 [ 417.600666][T15102] vivid-000: RxSense Present: 0x00000000 [ 417.600681][T15102] vivid-000: EDID Present: 0x00000000 [ 417.600699][T15102] vivid-000: ================== END STATUS ================== [ 417.709780][ T1297] bridge_slave_1: left allmulticast mode [ 417.709813][ T1297] bridge_slave_1: left promiscuous mode [ 417.710757][ T1297] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.791245][ T1297] bridge_slave_0: left promiscuous mode [ 417.793038][ T1297] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.264964][T15107] syz.4.3964 (15107) used greatest stack depth: 17152 bytes left [ 418.422951][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'. [ 419.010473][ T1297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.069126][ T1297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.127540][ T1297] bond0 (unregistering): Released all slaves [ 419.273999][ T5143] Bluetooth: hci4: command tx timeout [ 421.349623][ T5143] Bluetooth: hci4: command tx timeout [ 421.665146][ T5489] 8021q: adding VLAN 0 to HW filter on device eth5 [ 422.168337][ T5867] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 422.320729][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 422.320773][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 422.320797][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 422.324078][ T5867] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 422.324106][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.324126][ T5867] usb 5-1: Product: syz [ 422.324138][ T5867] usb 5-1: Manufacturer: syz [ 422.324152][ T5867] usb 5-1: SerialNumber: syz [ 422.392429][ T5867] usb 5-1: config 0 descriptor?? [ 422.393393][T15178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 422.393560][T15178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 422.395783][ T5867] usb 5-1: ucan: probing device on interface #0 [ 422.581670][ T1297] hsr_slave_0: left promiscuous mode [ 422.618419][ T1297] hsr_slave_1: left promiscuous mode [ 422.619399][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.619423][ T1297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.659502][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.659528][ T1297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.814889][ T1297] veth1_macvtap: left promiscuous mode [ 422.814971][ T1297] veth0_macvtap: left promiscuous mode [ 422.815315][ T1297] veth1_vlan: left promiscuous mode [ 422.815479][ T1297] veth0_vlan: left promiscuous mode [ 423.619534][ T1297] team0 (unregistering): Port device team_slave_1 removed [ 423.678968][ T1297] team0 (unregistering): Port device C removed [ 424.198602][T15185] tipc: Started in network mode [ 424.198620][T15185] tipc: Node identity ac14140f, cluster identity 4711 [ 424.198848][T15185] tipc: New replicast peer: 255.255.255.255 [ 424.202620][T15185] tipc: Enabled bearer , priority 10 [ 424.225771][ T5867] ucan 5-1:0.0 can0: registered device [ 424.227527][ T5867] ucan 5-1:0.0 can0: firmware string: unknown [ 424.298015][ T5867] usb 5-1: USB disconnect, device number 21 [ 424.786947][T15197] netlink: 'syz.4.3999': attribute type 27 has an invalid length. [ 424.786970][T15197] netlink: 'syz.4.3999': attribute type 1 has an invalid length. [ 424.991219][T15006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 425.124737][T15006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.140564][T15006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.184597][T10394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.205870][T15006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.244372][T15006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.247997][T10394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.251173][T10394] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.256862][T10394] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.257642][T10394] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.393168][T15006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.393351][ T5867] tipc: Node number set to 2886997007 [ 425.417735][T15006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.514109][T15006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.609191][T15221] program syz.1.4007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.445265][ T5489] 8021q: adding VLAN 0 to HW filter on device eth6 [ 426.782250][T15251] Invalid ELF header len 16 [ 426.930475][ T1297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.174189][T15006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.212646][T15198] chnl_net:caif_netlink_parms(): no params data found [ 427.352018][T10394] Bluetooth: hci1: command tx timeout [ 427.522565][ T1297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.017833][ T5489] 8021q: adding VLAN 0 to HW filter on device eth7 [ 428.056219][T15006] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.163411][T15288] netlink: 'syz.4.4022': attribute type 10 has an invalid length. [ 428.163425][T15288] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4022'. [ 428.357846][ T1297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.392695][T15296] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 428.426132][T15198] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.426474][T15198] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.426730][T15198] bridge_slave_0: entered allmulticast mode [ 428.431611][T15198] bridge_slave_0: entered promiscuous mode [ 428.442965][T15198] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.443892][T15198] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.444135][T15198] bridge_slave_1: entered allmulticast mode [ 428.447167][T15198] bridge_slave_1: entered promiscuous mode [ 428.453322][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.453481][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.646746][ T1447] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.646896][ T1447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.705289][T15198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.806348][T15198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.027441][ T1297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.299975][T15198] team0: Port device team_slave_0 added [ 429.336224][T15198] team0: Port device team_slave_1 added [ 429.439680][T10394] Bluetooth: hci1: command tx timeout [ 429.542652][T15198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.542668][T15198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.542692][T15198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.558732][T15198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.558748][T15198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.558772][T15198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.801326][ T820] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 429.952485][ T820] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.952510][ T820] usb 2-1: config 0 has no interface number 0 [ 429.952549][ T820] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 429.952575][ T820] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.952597][ T820] usb 2-1: config 0 interface 1 has no altsetting 0 [ 429.952626][ T820] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 429.952647][ T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.003911][ T820] usb 2-1: config 0 descriptor?? [ 430.336493][T15198] hsr_slave_0: entered promiscuous mode [ 430.350303][T15198] hsr_slave_1: entered promiscuous mode [ 430.404959][ T5489] 8021q: adding VLAN 0 to HW filter on device eth8 [ 430.470542][T15350] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 430.654510][ T820] uclogic 0003:2179:0053.0045: pen parameters not found [ 430.654535][ T820] uclogic 0003:2179:0053.0045: interface is invalid, ignoring [ 430.678953][ T820] usb 2-1: USB disconnect, device number 46 [ 431.448558][ T5895] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 431.505054][ T1297] bridge_slave_1: left allmulticast mode [ 431.505317][ T1297] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.519377][T10394] Bluetooth: hci1: command tx timeout [ 431.580020][ T1297] bridge_slave_0: left allmulticast mode [ 431.580046][ T1297] bridge_slave_0: left promiscuous mode [ 431.581976][ T1297] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.598479][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 431.601105][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.601134][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.601155][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.601192][ T5895] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 431.601212][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.614058][ T5895] usb 2-1: config 0 descriptor?? [ 431.956096][T15382] vxcan0: tx address claim with dlc 0 [ 432.039465][ T5895] dragonrise 0003:0079:0006.0046: unbalanced collection at end of report description [ 432.040420][ T5895] dragonrise 0003:0079:0006.0046: parse failed [ 432.040489][ T5895] dragonrise 0003:0079:0006.0046: probe with driver dragonrise failed with error -22 [ 432.271897][ T5895] usb 2-1: USB disconnect, device number 47 [ 433.112679][ T1297] tipc: Disabling bearer [ 433.112873][ T1297] tipc: Left network mode [ 433.239729][T15006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.398324][ T820] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 433.548352][ T820] usb 2-1: Using ep0 maxpacket: 32 [ 433.566187][ T820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.566215][ T820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.566246][ T820] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.566264][ T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.599947][T10394] Bluetooth: hci1: command tx timeout [ 433.629725][ T820] usb 2-1: config 0 descriptor?? [ 433.654111][ T820] hub 2-1:0.0: USB hub found [ 433.846089][ T820] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 434.775183][ T1297] IPVS: stopping master sync thread 8401 ... [ 434.839982][ T820] hid-generic 0003:046D:C31C.0047: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 434.941044][ T820] usb 2-1: USB disconnect, device number 48 [ 435.009983][T15441] fido_id[15441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 435.512179][T15450] program syz.1.4075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.685518][ T5489] 8021q: adding VLAN 0 to HW filter on device eth9 [ 436.585671][T15006] veth0_vlan: entered promiscuous mode [ 436.767610][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4085'. [ 436.777512][ T1297] hsr_slave_0: left promiscuous mode [ 436.818367][ T1297] hsr_slave_1: left promiscuous mode [ 436.819533][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.819556][ T1297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.861479][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.861503][ T1297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.000776][ T1297] veth1_macvtap: left promiscuous mode [ 437.050478][ T1297] veth0_macvtap: left promiscuous mode [ 437.094576][ T1297] veth1_vlan: left promiscuous mode [ 437.094712][ T1297] veth0_vlan: left promiscuous mode [ 438.039543][ T1297] team0 (unregistering): Port device team_slave_1 removed [ 438.079304][ T1297] team0 (unregistering): Port device team_slave_0 removed [ 438.250456][T15198] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 438.296288][T15198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.317986][ T5489] 8021q: adding VLAN 0 to HW filter on device eth10 [ 438.331412][T15198] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 438.453177][T15198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.461622][T15006] veth1_vlan: entered promiscuous mode [ 438.474768][T15198] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 438.523754][T15198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.527760][T15198] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 438.579808][T15198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.971672][T15006] veth0_macvtap: entered promiscuous mode [ 439.091458][T15006] veth1_macvtap: entered promiscuous mode [ 439.269713][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4094'. [ 439.326929][T15006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.602324][T15006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.768029][T15198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.774964][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.780613][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.803497][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.845309][ T1239] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.997801][T15198] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.010139][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.025847][T15550] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4098'. [ 440.332321][ T1433] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.332450][ T1433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.699919][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.700129][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.729013][ T5914] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 440.789616][ T5489] 8021q: adding VLAN 0 to HW filter on device eth11 [ 440.881211][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 440.893977][ T5914] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 440.894001][ T5914] usb 5-1: config 0 has no interface number 0 [ 440.896400][ T5914] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 440.896425][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.896444][ T5914] usb 5-1: Product: syz [ 440.896457][ T5914] usb 5-1: Manufacturer: syz [ 440.896470][ T5914] usb 5-1: SerialNumber: syz [ 441.000472][ T5914] usb 5-1: config 0 descriptor?? [ 441.015229][ T5914] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 441.253508][ T5914] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 441.261959][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.262030][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.336829][ T5914] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 441.620944][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 441.621531][ T5895] usb 5-1: USB disconnect, device number 22 [ 441.631725][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 441.637035][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 441.637871][ T5895] quatech2 5-1:0.51: device disconnected [ 441.709007][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.709027][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.539277][ T5867] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 442.610049][T15595] Set syz0 is full, maxelem 0 reached [ 442.688414][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 442.692275][ T5867] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 442.701356][ T5867] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 442.701386][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.701406][ T5867] usb 2-1: Product: syz [ 442.704523][ T5867] usb 2-1: Manufacturer: syz [ 442.704539][ T5867] usb 2-1: SerialNumber: syz [ 442.755428][ T5867] usb 2-1: config 0 descriptor?? [ 442.778501][ T5867] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 442.852905][T15198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.189178][ T39] INFO: task syz-executor:10848 blocked for more than 143 s[ 443.189178][ T39] INFO: task syz-executor:10848 blocked for more than 143 seconds. [ 443.189202][ T39] Tainted: G L syzkaller #0 [ 443.189210][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.189218][ T39] task:syz-executor state:D stack:20600 pid:10848 tgid:10848 ppid:1 task_flags:0x400140 flags:0x00080002 [ 443.189279][ T39] Call Trace: [ 443.189285][ T39] [ 443.189296][ T39] __schedule+0x169e/0x54f0 [ 443.189336][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.189361][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.189382][ T39] ? rt_spin_lock+0x1e0/0x400 [ 443.189400][ T39] ? __pfx___schedule+0x10/0x10 [ 443.189425][ T39] ? schedule+0x90/0x360 [ 443.189445][ T39] schedule+0x164/0x360 [ 443.189465][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 443.189485][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 443.189499][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 443.189516][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 443.189531][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.189550][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 443.189571][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 443.189588][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.189610][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.189632][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 443.189651][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 443.189668][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.189689][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.189720][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.189747][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 443.189769][ T39] deactivate_locked_super+0xbc/0x130 [ 443.189787][ T39] cleanup_mnt+0x437/0x4d0 [ 443.189805][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.189825][ T39] task_work_run+0x1d9/0x270 [ 443.189845][ T39] ? __pfx_task_work_run+0x10/0x10 [ 443.189866][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.189881][ T39] exit_to_user_mode_loop+0xed/0x480 [ 443.189897][ T39] ? rcu_is_watching+0x15/0xb0 [ 443.189916][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.189930][ T39] do_syscall_64+0x33e/0xf80 [ 443.189952][ T39] ? clear_bhb_loop+0x40/0x90 [ 443.189968][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.189987][ T39] RIP: 0033:0x7fac2394da57 [ 443.190004][ T39] RSP: 002b:00007ffe431b0a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 443.190019][ T39] RAX: 0000000000000000 RBX: 00007fac239e2048 RCX: 00007fac2394da57 [ 443.190029][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe431b0b50 [ 443.190038][ T39] RBP: 00007ffe431b0b50 R08: 00007ffe431b1b50 R09: 00000000ffffffff [ 443.190048][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe431b1be0 [ 443.190058][ T39] R13: 00007fac239e2048 R14: 0000000000044ece R15: 00007ffe431b1c20 [ 443.190081][ T39] [ 443.190129][ T39] [ 443.190129][ T39] Showing all locks held in the system: [ 443.190139][ T39] 1 lock held by khungtaskd/39: [ 443.190146][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 443.190191][ T39] 5 locks held by kworker/u8:7/169: [ 443.190199][ T39] #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 443.190229][ T39] #1: ffffc90003a07c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 443.190261][ T39] #2: ffff888034812310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 443.190302][ T39] #3: ffff88801ffe5920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 443.190339][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 443.190393][ T39] 2 locks held by getty/5582: [ 443.190401][ T39] #0: ffff8880338b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 443.190438][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 443.190503][ T39] 5 locks held by kworker/1:3/5867: [ 443.190512][ T39] #0: ffff888020ada938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 443.190549][ T39] #1: ffffc90005237c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 443.190581][ T39] #2: ffff88802abb6210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 443.190617][ T39] #3: ffff888050a4c210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 443.190655][ T39] #4: ffff8880409ce1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 443.190689][ T39] 3 locks held by kworker/0:5/5896: [ 443.190697][ T39] #0: ffff88813fe47938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 443.190739][ T39] #1: ffffc90005717c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 443.190776][ T39] #2: ffff88801df5b260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 443.190811][ T39] 7 locks held by kworker/1:5/5913: [ 443.190818][ T39] #0: ffff8880328c8138 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 443.190846][ T39] #1: ffffc90005b87c40 ((work_completion)(&(&idev->mc_dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 443.190874][ T39] #2: ffff88803c47e628 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x3d/0x5b0 [ 443.190904][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 443.190934][ T39] #4: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 443.190963][ T39] #5: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 443.190992][ T39] #6: ffff8880b873b9a0 (&rq->__lock){-...}-{2:2}, at: finish_task_switch+0x15f/0xbe0 [ 443.191031][ T39] 1 lock held by syz-executor/10848: [ 443.191040][ T39] #0: ffff88805c2ca0d0 (&type->s_umount_key#80){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 443.191081][ T39] 4 locks held by udevd/14039: [ 443.191088][ T39] #0: ffff88803d3d1090 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 443.191125][ T39] #1: ffff888058a7e878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 443.191168][ T39] #2: ffff88803482b698 (kn->active#24){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 443.191209][ T39] #3: ffff888050a4c210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 443.191243][ T39] 2 locks held by kworker/u8:2/15553: [ 443.191250][ T39] #0: ffff88801ae84938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 443.191282][ T39] #1: ffffc90004187c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 443.191312][ T39] 5 locks held by syz.4.4110/15599: [ 443.191319][ T39] #0: ffff88802c209f40 (&mdev->req_queue_mutex){+.+.}-{4:4}, at: __video_do_ioctl+0x27e/0xca0 [ 443.191356][ T39] #1: ffff88802c209ae8 (&dev_instance->mutex){+.+.}-{4:4}, at: __video_do_ioctl+0x476/0xca0 [ 443.191394][ T39] #2: ffff8880b8640858 ((&pcs->lock)){+.+.}-{3:3}, at: __kmalloc_node_noprof+0x41e/0x7f0 [ 443.191431][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 443.191466][ T39] #4: ffff88813fe39b58 (&barn->lock){+.+.}-{3:3}, at: __pcs_replace_empty_main+0x1e8/0x720 [ 443.191501][ T39] 1 lock held by syz.4.4110/15601: [ 443.191510][ T39] #0: ffff88802c209f40 (&mdev->req_queue_mutex){+.+.}-{4:4}, at: __video_do_ioctl+0x27e/0xca0 [ 443.191547][ T39] 1 lock held by syz.4.4110/15606: [ 443.191555][ T39] #0: ffff88802c209ae8 (&dev_instance->mutex){+.+.}-{4:4}, at: __video_do_ioctl+0x476/0xca0 [ 443.191597][ T39] 1 lock held by syz.6.4112/15613: [ 443.191605][ T39] #0: ffff88803a63d1b0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 443.191648][ T39] 2 locks held by modprobe/15611: [ 443.191656][ T39] #0: ffffffff8eae6ef8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 443.191690][ T39] #1: ffff88813fe39b58 (&barn->lock){+.+.}-{3:3}, at: __pcs_replace_empty_main+0x43e/0x720 [ 443.191734][ T39] 1 lock held by dhcpcd-run-hook/15612: [ 443.191741][ T39] #0: ffff88805abc9db0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2c2/0x9e0 [ 443.191779][ T39] [ 443.191783][ T39] ============================================= [ 443.191783][ T39] [ 443.191798][ T39] NMI backtrace for cpu 0 [ 443.191817][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.191834][ T39] Tainted: [L]=SOFTLOCKUP [ 443.191838][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.191845][ T39] Call Trace: [ 443.191851][ T39] [ 443.191856][ T39] dump_stack_lvl+0xe8/0x150 [ 443.191872][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 443.191887][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 443.191902][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 443.191920][ T39] sys_info+0x135/0x170 [ 443.191932][ T39] watchdog+0xfd3/0x1030 [ 443.191951][ T39] ? watchdog+0x1c9/0x1030 [ 443.191967][ T39] kthread+0x388/0x470 [ 443.191985][ T39] ? __pfx_watchdog+0x10/0x10 [ 443.191997][ T39] ? __pfx_kthread+0x10/0x10 [ 443.192013][ T39] ret_from_fork+0x514/0xb70 [ 443.192029][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 443.192043][ T39] ? __switch_to+0xc79/0x1410 [ 443.192064][ T39] ? __pfx_kthread+0x10/0x10 [ 443.192081][ T39] ret_from_fork_asm+0x1a/0x30 [ 443.192109][ T39] [ 443.192115][ T39] Sending NMI from CPU 0 to CPUs 1: [ 443.192143][ C1] NMI backtrace for cpu 1 [ 443.192159][ C1] CPU: 1 UID: 0 PID: 5913 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.192178][ C1] Tainted: [L]=SOFTLOCKUP [ 443.192183][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.192193][ C1] Workqueue: mld mld_dad_work [ 443.192210][ C1] RIP: 0010:__lock_acquire+0x197b/0x2cf0 [ 443.192229][ C1] Code: 14 25 ff 0f 00 00 39 05 9f c3 22 12 73 06 89 05 97 c3 22 12 48 8b 02 48 89 df 4c 39 e8 0f 84 2c fe ff ff 4c 89 60 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 18 fe ff ff 48 89 fb 48 c7 c7 10 54 29 [ 443.192242][ C1] RSP: 0000:ffffc90005b871b0 EFLAGS: 00000002 [ 443.192254][ C1] RAX: ffffffff96587748 RBX: 00000000000003cd RCX: 0000000000000540 [ 443.192264][ C1] RDX: ffffffff96552ae8 RSI: ffff888025bd8d10 RDI: 00000000000003cd [ 443.192274][ C1] RBP: 6a9c3414c8b72422 R08: ffffc90005b87178 R09: 0000000000000020 [ 443.192284][ C1] R10: dffffc0000000000 R11: ffffffff81a12540 R12: ffffffff96750f18 [ 443.192294][ C1] R13: ffffffff936a9030 R14: ffff888025bd8000 R15: 000000000000053f [ 443.192304][ C1] FS: 0000000000000000(0000) GS:ffff888125b64000(0000) knlGS:0000000000000000 [ 443.192316][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.192326][ C1] CR2: 00007f4b1eed7dac CR3: 000000002bdb4000 CR4: 00000000003526f0 [ 443.192339][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 443.192348][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 443.192356][ C1] Call Trace: [ 443.192361][ C1] [ 443.192369][ C1] ? check_path+0x21/0x40 [ 443.192393][ C1] ? debug_object_assert_init+0x70/0x340 [ 443.192408][ C1] lock_acquire+0x106/0x350 [ 443.192424][ C1] ? debug_object_assert_init+0x70/0x340 [ 443.192443][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 443.192468][ C1] ? debug_object_assert_init+0x70/0x340 [ 443.192483][ C1] debug_object_assert_init+0x70/0x340 [ 443.192499][ C1] hrtimer_start_range_ns+0x3f/0xef0 [ 443.192518][ C1] ? ktime_get+0x45/0x220 [ 443.192532][ C1] ? ktime_get+0x45/0x220 [ 443.192547][ C1] ? ktime_get+0x1f5/0x220 [ 443.192561][ C1] finish_task_switch+0x3cd/0xbe0 [ 443.192583][ C1] __schedule+0x16a6/0x54f0 [ 443.192602][ C1] ? ktime_get+0x45/0x220 [ 443.192618][ C1] ? lapic_next_event+0x11/0x20 [ 443.192632][ C1] ? clockevents_program_event+0x491/0x5f0 [ 443.192652][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 443.192673][ C1] ? __pfx___schedule+0x10/0x10 [ 443.192690][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.192709][ C1] ? irqentry_exit+0x218/0x730 [ 443.192730][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 443.192749][ C1] preempt_schedule_common+0x82/0xd0 [ 443.192767][ C1] preempt_schedule_thunk+0x16/0x30 [ 443.192787][ C1] _raw_spin_unlock_irqrestore+0x74/0x80 [ 443.192807][ C1] rt_mutex_slowunlock+0x4a7/0x8b0 [ 443.192822][ C1] ? reacquire_held_locks+0x104/0x190 [ 443.192840][ C1] ? rt_spin_lock+0x1e0/0x400 [ 443.192857][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 443.192874][ C1] ? rt_spin_unlock+0x14f/0x200 [ 443.192889][ C1] ? rt_spin_unlock+0x160/0x200 [ 443.192906][ C1] icmp6_dst_alloc+0x3d3/0x480 [ 443.192922][ C1] ? icmp6_dst_alloc+0x2b5/0x480 [ 443.192938][ C1] mld_sendpack+0x6ba/0xe40 [ 443.192954][ C1] ? __asan_memcpy+0x40/0x70 [ 443.192973][ C1] ? mld_sendpack+0x213/0xe40 [ 443.192988][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 443.193007][ C1] ? mld_send_initial_cr+0x352/0x550 [ 443.193022][ C1] mld_dad_work+0x45/0x5b0 [ 443.193038][ C1] ? process_one_work+0x8b7/0x1710 [ 443.193051][ C1] process_one_work+0x9a3/0x1710 [ 443.193071][ C1] ? __pfx_process_one_work+0x10/0x10 [ 443.193083][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.193102][ C1] worker_thread+0xba8/0x11e0 [ 443.193120][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.193139][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 443.193153][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 443.193169][ C1] kthread+0x388/0x470 [ 443.193184][ C1] ? __pfx_worker_thread+0x10/0x10 [ 443.193197][ C1] ? __pfx_kthread+0x10/0x10 [ 443.193213][ C1] ret_from_fork+0x514/0xb70 [ 443.193227][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 443.193241][ C1] ? __switch_to+0xc79/0x1410 [ 443.193260][ C1] ? __pfx_kthread+0x10/0x10 [ 443.193276][ C1] ret_from_fork_asm+0x1a/0x30 [ 443.193296][ C1] [ 443.205050][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 443.205072][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.205097][ T39] Tainted: [L]=SOFTLOCKUP [ 443.205103][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.205113][ T39] Call Trace: [ 443.205121][ T39] [ 443.205127][ T39] vpanic+0x56c/0xa60 [ 443.205152][ T39] ? __pfx___schedule+0x10/0x10 [ 443.205176][ T39] ? __pfx_vpanic+0x10/0x10 [ 443.205204][ T39] panic+0xc5/0xd0 [ 443.205223][ T39] ? __pfx_panic+0x10/0x10 [ 443.205245][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 443.205273][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 443.205297][ T39] watchdog+0x102c/0x1030 [ 443.205322][ T39] ? watchdog+0x1c9/0x1030 [ 443.205344][ T39] kthread+0x388/0x470 [ 443.205365][ T39] ? __pfx_watchdog+0x10/0x10 [ 443.205382][ T39] ? __pfx_kthread+0x10/0x10 [ 443.205404][ T39] ret_from_fork+0x514/0xb70 [ 443.205424][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 443.205442][ T39] ? __switch_to+0xc79/0x1410 [ 443.205467][ T39] ? __pfx_kthread+0x10/0x10 [ 443.205488][ T39] ret_from_fork_asm+0x1a/0x30 [ 443.205519][ T39] [ 443.206241][ T39] Kernel Offset: disabled