last executing test programs: 4m27.554598448s ago: executing program 3 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 4m27.295226368s ago: executing program 3 (id=228): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 4m27.172629887s ago: executing program 3 (id=230): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x28, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4m27.031834901s ago: executing program 3 (id=231): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 4m26.969173783s ago: executing program 3 (id=233): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg$inet6(r0, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 4m26.012252951s ago: executing program 3 (id=244): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') fchdir(r0) exit(0x3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) 4m25.023747909s ago: executing program 32 (id=244): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') fchdir(r0) exit(0x3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) 2m37.854663232s ago: executing program 4 (id=1370): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000000c0)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7f}) 2m37.790783941s ago: executing program 4 (id=1371): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0xf, 0x677ec255, 0x0, 0x0, 0xc8e, 0xfffffe00, 0x5}, 0x1c) 2m37.27003054s ago: executing program 4 (id=1382): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009000200002037153e37eb01", 0x26}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m37.109771368s ago: executing program 4 (id=1385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 2m36.575689337s ago: executing program 4 (id=1393): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m36.42477778s ago: executing program 4 (id=1396): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x6, 0xfb, 0x1ff, 0x1}, 0x3, 0x400000, 0x0, 0x6, 0x0, 0x9}}) 2m21.332147858s ago: executing program 33 (id=1396): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x6, 0xfb, 0x1ff, 0x1}, 0x3, 0x400000, 0x0, 0x6, 0x0, 0x9}}) 1m56.865125631s ago: executing program 0 (id=1881): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 1m56.713619963s ago: executing program 0 (id=1883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, 0x0, 0x0, 0x7f, 0x10, 0x4, 0x60, 0x8}) 1m56.409080665s ago: executing program 0 (id=1889): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) shutdown(r0, 0x0) shutdown(r0, 0x1) 1m56.228291361s ago: executing program 1 (id=1892): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2018, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0x7}], 0x1, 0x40000120, 0x0) 1m56.227495048s ago: executing program 0 (id=1900): r0 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064d2, &(0x7f0000000000)={0x2, 0x6, 0xbc0}) 1m56.113531093s ago: executing program 0 (id=1895): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 1m55.935757899s ago: executing program 0 (id=1896): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3f}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) 1m55.933001707s ago: executing program 1 (id=1897): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000002840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 1m55.777784022s ago: executing program 1 (id=1908): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14004895}}], 0x1, 0xc000) 1m55.65251343s ago: executing program 1 (id=1911): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x2}) 1m55.502944221s ago: executing program 1 (id=1906): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 1m55.125889499s ago: executing program 1 (id=1913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000440)={0x8, 0x0, [{0x18a, 0x0, 0x6}, {0x9bf, 0x0, 0x2}, {0xa0f, 0x0, 0x8000000000000000}, {0xb3e, 0x0, 0x1ff}, {0x38c, 0x0, 0x8f5}, {0xa5c, 0x0, 0x4}, {0x68f, 0x0, 0x4}, {0x8e5, 0x0, 0x6}]}) 1m40.811984265s ago: executing program 34 (id=1896): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3f}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) 1m40.072847332s ago: executing program 35 (id=1913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000440)={0x8, 0x0, [{0x18a, 0x0, 0x6}, {0x9bf, 0x0, 0x2}, {0xa0f, 0x0, 0x8000000000000000}, {0xb3e, 0x0, 0x1ff}, {0x38c, 0x0, 0x8f5}, {0xa5c, 0x0, 0x4}, {0x68f, 0x0, 0x4}, {0x8e5, 0x0, 0x6}]}) 1m2.2842607s ago: executing program 2 (id=2365): r0 = msgget$private(0x0, 0x40) msgsnd(r0, &(0x7f0000000380)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000480)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f00000003c0)={0x0, ""/183}, 0xbf, 0x2, 0x3000) 1m2.181757029s ago: executing program 2 (id=2368): r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @multicast1}, {0x6, @link_local}, 0x38, {0x2, 0xfffe, @local}, 'syz_tun\x00'}) 1m1.93686382s ago: executing program 2 (id=2372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x20a80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564dff, 0x0, 0x10000}]}) 1m1.652662107s ago: executing program 2 (id=2377): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) 1m1.439739526s ago: executing program 2 (id=2381): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m0.122688408s ago: executing program 2 (id=2395): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) 59.745903959s ago: executing program 36 (id=2395): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) 35.565018283s ago: executing program 6 (id=2673): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept$inet6(r0, 0x0, 0x0) 35.462992419s ago: executing program 6 (id=2675): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 35.299494s ago: executing program 6 (id=2677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(r0, 0x0, r1) read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0xfffffffffffffef8) 35.117389625s ago: executing program 6 (id=2679): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 35.066391386s ago: executing program 6 (id=2680): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000040)={0x28, 0x7, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.62110161s ago: executing program 6 (id=2689): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @random="c22aee767214"}, 0x14) 33.187970018s ago: executing program 37 (id=2689): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @random="c22aee767214"}, 0x14) 10.572961798s ago: executing program 5 (id=2866): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40) flock(r0, 0x1) flock(r0, 0x5) 10.556594001s ago: executing program 5 (id=2867): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1ecd, 0x800011, 0x1, 0x6, 0xa, "84899df67b85d4e19a2d933ddaaa753e83f453"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 10.445391404s ago: executing program 5 (id=2869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x7, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0xfec00000, 0x0, r2, 0x5}) 10.344939797s ago: executing program 5 (id=2871): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 10.273388402s ago: executing program 5 (id=2872): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48e1, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 8.49270402s ago: executing program 5 (id=2882): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0xa0000009, 0x0) 8.102011733s ago: executing program 38 (id=2882): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0xa0000009, 0x0) 6.198244189s ago: executing program 7 (id=2899): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f00000001c0)=""/153, 0x99) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e) 5.991064488s ago: executing program 9 (id=2902): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f00000014c0)=""/258, 0x102}, {&(0x7f0000001600)=""/50, 0x32}], 0x3}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 5.810190041s ago: executing program 9 (id=2903): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)={0x20, 0x0, 0x28, {0x28, 0x31, "f70ba381038de583bb48fd16a2cb4fdca0560fb30d54f3e5c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.111974401s ago: executing program 7 (id=2907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc001001b, 0x0, 0x102}]}) 4.847870342s ago: executing program 7 (id=2910): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 4.603015975s ago: executing program 7 (id=2912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 4.413023562s ago: executing program 7 (id=2913): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4.006295264s ago: executing program 9 (id=2916): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0xfffd) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0f8, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04040000000000000000000100e4f31fb741168477330c728360c134fec5be0b129a"], 0xd) 3.709086469s ago: executing program 7 (id=2917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0c0050800800070003"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20005004) 3.708948462s ago: executing program 8 (id=2918): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r1, 0x0, &(0x7f0000001200)="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", 0x800}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1}) 3.410557951s ago: executing program 39 (id=2917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0c0050800800070003"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20005004) 3.17058821s ago: executing program 8 (id=2920): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="a6dc628a600b17cbe584d2e73c68fe1865f3fbcf0e16db6e759d420151c6c5750400000000000008", 0x28}], 0x1}}], 0x1, 0x4040880) 3.035800325s ago: executing program 9 (id=2921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2.761643731s ago: executing program 8 (id=2922): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x1104c0, 0x4) 2.400552731s ago: executing program 8 (id=2924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) 1.956550705s ago: executing program 8 (id=2925): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.552626681s ago: executing program 9 (id=2926): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000480)={0x1, r2, r1}) 1.352436341s ago: executing program 9 (id=2927): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) 0s ago: executing program 8 (id=2928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011023}]}) kernel console output (not intermixed with test programs): , different from the interface descriptor's value: 100 [ 216.421040][ T5913] usb 5-1: config 168 interface 0 has no altsetting 0 [ 216.561821][ T5913] usb 5-1: string descriptor 0 read error: -22 [ 216.561977][ T5913] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 216.562000][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.738042][ T5913] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 216.795916][ T9100] binder: 9098:9100 ioctl c018620c 200000000280 returned -1 [ 217.040535][ T5895] usb 5-1: USB disconnect, device number 13 [ 217.142567][ T9113] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1334'. [ 218.212270][ T5895] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 218.372314][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 218.374078][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.374104][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.374116][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.374140][ T5895] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 218.374152][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.382890][ T5912] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 218.385749][ T5895] usb 2-1: config 0 descriptor?? [ 218.545976][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 218.548554][ T5912] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 218.548595][ T5912] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.548704][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.548734][ T5912] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.548759][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.548784][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.548866][ T5912] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.548893][ T5912] usb 1-1: config 168 interface 0 has no altsetting 0 [ 218.561183][ T5912] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 218.561224][ T5912] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.561328][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.561353][ T5912] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.561377][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.561401][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.561475][ T5912] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.561501][ T5912] usb 1-1: config 168 interface 0 has no altsetting 0 [ 218.566109][ T5912] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 218.566147][ T5912] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.581237][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.581329][ T5912] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.581356][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.581381][ T5912] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.581408][ T5912] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.581484][ T5912] usb 1-1: config 168 interface 0 has no altsetting 0 [ 218.588515][ T5912] usb 1-1: string descriptor 0 read error: -22 [ 218.606868][ T5912] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 218.606898][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.849824][ T5895] hid (null): bogus close delimiter [ 218.849844][ T5895] hid (null): global environment stack underflow [ 218.852199][ T5862] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 218.909309][ T5912] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 218.937253][ T5912] usb 1-1: USB disconnect, device number 16 [ 218.943770][ T5895] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 218.943804][ T5895] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 218.943830][ T5895] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 218.943856][ T5895] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 218.943881][ T5895] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 218.943907][ T5895] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 218.943934][ T5895] waterforce 0003:1044:7A4D.0010: reserved main item tag 0xe [ 218.944004][ T5895] waterforce 0003:1044:7A4D.0010: bogus close delimiter [ 218.944016][ T5895] waterforce 0003:1044:7A4D.0010: item 0 0 2 10 parsing failed [ 218.947875][ T5895] waterforce 0003:1044:7A4D.0010: hid parse failed with -22 [ 218.947983][ T5895] waterforce 0003:1044:7A4D.0010: probe with driver waterforce failed with error -22 [ 219.114374][ T5911] usb 2-1: USB disconnect, device number 18 [ 219.127560][ T5862] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 219.127589][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.154676][ T5862] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.154707][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 219.154728][ T5862] usb 5-1: Product: syz [ 219.154742][ T5862] usb 5-1: Manufacturer: syz [ 219.154757][ T5862] usb 5-1: SerialNumber: syz [ 219.160180][ T5862] usb 5-1: config 0 descriptor?? [ 219.211699][ T5862] usb 5-1: selecting invalid altsetting 0 [ 219.399051][ T32] usb 5-1: USB disconnect, device number 14 [ 219.743628][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 219.743655][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 220.509863][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 220.906047][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1382'. [ 221.126415][ T9218] pimreg: tun_chr_ioctl cmd 1074025676 [ 221.126439][ T9218] pimreg: owner set to 0 [ 221.916773][ T9251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.382970][ T5862] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 222.409018][ T9272] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1412'. [ 222.534525][ T5862] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 222.534589][ T5862] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 222.534612][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.553214][ T5862] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 223.605576][ T5862] stv0680 3-1:4.0: Could not get descriptor 0200 [ 223.662383][ T5827] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 223.806825][ T5862] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 223.806848][ T5862] stv0680 3-1:4.0: last error: 34, command = 0x31 [ 223.814343][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 223.835781][ T5827] usb 1-1: config 4 has an invalid interface number: 104 but max is 0 [ 223.835812][ T5827] usb 1-1: config 4 has no interface number 0 [ 223.835844][ T5827] usb 1-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11 [ 223.838106][ T5827] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8 [ 223.838134][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.838145][ T5827] usb 1-1: Product: syz [ 223.838153][ T5827] usb 1-1: Manufacturer: syz [ 223.838160][ T5827] usb 1-1: SerialNumber: syz [ 223.897294][ T5862] usb 3-1: USB disconnect, device number 19 [ 224.372299][ T5911] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 224.522952][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 224.527501][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.529058][ T5911] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 106, changing to 7 [ 224.557486][ T5911] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 224.557516][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.557536][ T5911] usb 2-1: Product: syz [ 224.557550][ T5911] usb 2-1: Manufacturer: syz [ 224.557565][ T5911] usb 2-1: SerialNumber: syz [ 224.830982][ T5911] usb 2-1: unit 14 not found! [ 224.888576][ T5827] rtsx_usb 1-1:4.104: probe with driver rtsx_usb failed with error -71 [ 224.952240][ T5827] usb 1-1: USB disconnect, device number 17 [ 225.019217][ T5911] usb 2-1: USB disconnect, device number 19 [ 225.190067][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.814314][ T9359] sp0: Synchronizing with TNC [ 225.854270][ T9365] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1455'. [ 226.514942][ T9383] capability: warning: `syz.2.1464' uses 32-bit capabilities (legacy support in use) [ 226.521141][ T37] audit: type=1326 audit(1776166922.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3524dc819 code=0x7ffc0000 [ 226.522545][ T5827] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 226.522723][ T37] audit: type=1326 audit(1776166922.070:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3524dc819 code=0x7ffc0000 [ 226.526010][ T37] audit: type=1326 audit(1776166922.080:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa3524dc819 code=0x7ffc0000 [ 226.527417][ T37] audit: type=1326 audit(1776166922.080:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3524dc582 code=0x7ffc0000 [ 226.528267][ T37] audit: type=1326 audit(1776166922.080:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3524dc582 code=0x7ffc0000 [ 226.529263][ T37] audit: type=1326 audit(1776166922.080:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3524dc819 code=0x7ffc0000 [ 226.530271][ T37] audit: type=1326 audit(1776166922.080:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa35249d04e code=0x7ffc0000 [ 226.531032][ T37] audit: type=1326 audit(1776166922.080:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3524dc819 code=0x7ffc0000 [ 226.531625][ T37] audit: type=1326 audit(1776166922.080:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa3524dc819 code=0x7ffc0000 [ 226.581512][ T37] audit: type=1326 audit(1776166922.130:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3524dc819 code=0x7ffc0000 [ 226.673572][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 226.675643][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.675673][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.675707][ T5827] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 226.675730][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.703818][ T5827] usb 1-1: config 0 descriptor?? [ 227.173423][ T5827] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 227.173460][ T5827] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 227.173485][ T5827] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 227.173509][ T5827] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 227.173533][ T5827] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 227.181813][ T5827] corsair 0003:1B1C:1B02.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 227.357352][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 227.479160][ T5827] corsair 0003:1B1C:1B02.0011: Read invalid backlight brightness: b0. [ 227.514491][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 227.671286][ T5827] usb 1-1: USB disconnect, device number 18 [ 227.672219][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 227.686070][ T5912] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.686103][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 227.686132][ T5912] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.686154][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.740780][ T5912] usb 3-1: config 0 descriptor?? [ 228.102353][ T5862] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 228.160233][ T5912] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 228.160268][ T5912] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 228.160294][ T5912] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 228.160320][ T5912] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 228.160345][ T5912] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 228.161240][ T5912] mcp2221 0003:04D8:00DD.0012: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 228.263800][ T5862] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 228.263829][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.263849][ T5862] usb 2-1: Product: syz [ 228.263863][ T5862] usb 2-1: Manufacturer: syz [ 228.263876][ T5862] usb 2-1: SerialNumber: syz [ 228.285252][ T5862] usb 2-1: config 0 descriptor?? [ 228.356740][ C1] usb 3-1: input irq status -75 received [ 228.496251][ T5862] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 228.604955][ T819] usb 3-1: USB disconnect, device number 20 [ 228.905666][ T5862] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 228.910270][ T5862] usb 2-1: USB disconnect, device number 20 [ 229.523247][ T5862] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 229.687494][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 229.690513][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.690564][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.690591][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.690611][ T5862] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 229.690632][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.714816][ T5862] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.714846][ T5862] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.714865][ T5862] usb 3-1: Manufacturer: syz [ 229.730291][ T5862] usb 3-1: config 0 descriptor?? [ 230.047754][ T9459] netlink: 'syz.1.1499': attribute type 9 has an invalid length. [ 230.047776][ T9459] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1499'. [ 230.152222][ T5862] rc_core: IR keymap rc-hauppauge not found [ 230.152241][ T5862] Registered IR keymap rc-empty [ 230.152344][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.172254][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.217544][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 230.225222][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 230.229794][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.249983][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.262310][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.282260][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.306114][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.322359][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.343178][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.365336][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.382406][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.404379][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 230.523804][ T5862] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 230.523831][ T5862] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 230.556719][ T5862] usb 3-1: USB disconnect, device number 21 [ 230.663161][ T9474] Bluetooth: MGMT ver 1.23 [ 230.663299][ T9474] Bluetooth: hci1: too big key_count value 65025 [ 231.182217][ T5912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 231.358067][ T5912] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 231.358098][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.358119][ T5912] usb 2-1: Product: syz [ 231.358133][ T5912] usb 2-1: Manufacturer: syz [ 231.358147][ T5912] usb 2-1: SerialNumber: syz [ 231.399427][ T5912] usb 2-1: config 0 descriptor?? [ 231.605899][ T5912] usb 2-1: ignoring: probably an ADSL modem [ 231.622359][ T32] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 231.785132][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.785189][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.785390][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.785423][ T32] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 231.785442][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.794013][ T32] usb 3-1: config 0 descriptor?? [ 232.011665][ T5912] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 232.172213][ T5913] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 232.217704][ T5862] usb 2-1: USB disconnect, device number 21 [ 232.255440][ T32] hid-rmi 0003:0461:4E72.0013: unknown main item tag 0x2 [ 232.255475][ T32] hid-rmi 0003:0461:4E72.0013: unknown main item tag 0x0 [ 232.255502][ T32] hid-rmi 0003:0461:4E72.0013: unknown main item tag 0x0 [ 232.255530][ T32] hid-rmi 0003:0461:4E72.0013: unknown main item tag 0x0 [ 232.255556][ T32] hid-rmi 0003:0461:4E72.0013: unknown main item tag 0x0 [ 232.255587][ T32] hid-rmi 0003:0461:4E72.0013: unknown main item tag 0x0 [ 232.314512][ T32] hid-rmi 0003:0461:4E72.0013: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 232.323746][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 232.340352][ T5913] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 232.340370][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.340380][ T5913] usb 1-1: Product: syz [ 232.340388][ T5913] usb 1-1: Manufacturer: syz [ 232.340395][ T5913] usb 1-1: SerialNumber: syz [ 232.460774][ T5862] usb 3-1: USB disconnect, device number 22 [ 232.583759][ T5913] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 232.596508][ T5913] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 232.596886][ T5913] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 232.596934][ T5913] usb 1-1: media controller created [ 232.610937][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.795264][ T9509] program syz.1.1522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.808446][ T5913] zl10353_read_register: readreg error (reg=127, ret==-71) [ 232.957486][ T5913] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 232.988284][ T5913] usb 1-1: USB disconnect, device number 19 [ 233.238836][ T9521] loop9: detected capacity change from 0 to 524287936 [ 236.364233][ T9630] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1578'. [ 236.627362][ T9642] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1584'. [ 236.793565][ T9649] input: syz0 as /devices/virtual/input/input17 [ 237.088414][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.137092][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.138825][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.171165][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.185324][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.783129][ T5862] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.932179][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 237.950704][ T5862] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 237.950721][ T5862] usb 2-1: config 0 has no interface number 0 [ 237.950748][ T5862] usb 2-1: config 0 interface 12 has no altsetting 0 [ 237.982231][ T5862] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 237.982260][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.982281][ T5862] usb 2-1: Product: syz [ 237.982295][ T5862] usb 2-1: Manufacturer: syz [ 237.982310][ T5862] usb 2-1: SerialNumber: syz [ 238.030923][ T5862] usb 2-1: config 0 descriptor?? [ 238.118828][ T9655] chnl_net:caif_netlink_parms(): no params data found [ 238.288242][ T9655] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.288452][ T9655] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.288625][ T9655] bridge_slave_0: entered allmulticast mode [ 238.290915][ T9655] bridge_slave_0: entered promiscuous mode [ 238.298173][ T9655] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.298358][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.298531][ T9655] bridge_slave_1: entered allmulticast mode [ 238.300940][ T9655] bridge_slave_1: entered promiscuous mode [ 238.366817][ T9655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.370052][ T9655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.484508][ T9655] team0: Port device team_slave_0 added [ 238.488707][ T9655] team0: Port device team_slave_1 added [ 238.529447][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.529464][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.529488][ T9655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.531673][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.531686][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.531711][ T9655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.731826][ T9655] hsr_slave_0: entered promiscuous mode [ 238.737436][ T9655] hsr_slave_1: entered promiscuous mode [ 238.911950][ T5862] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 238.923424][ T5862] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 238.923448][ T5862] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 238.923531][ T5862] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 238.998820][ T5862] usb 2-1: USB disconnect, device number 22 [ 239.362713][ T5826] Bluetooth: hci4: command tx timeout [ 240.559496][ T9655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.621581][ T9655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.623885][ T9655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.663060][ T9655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.663906][ T9655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 240.727820][ T9655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.733075][ T9655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.798210][ T9655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.199852][ T9770] input: syz0 as /devices/virtual/input/input18 [ 241.261930][ T9771] sg_read: process 944 (syz.2.1637) changed security contexts after opening file descriptor, this is not allowed. [ 241.442539][ T5826] Bluetooth: hci4: command tx timeout [ 241.447173][ T9655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.585832][ T9655] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.656498][ T825] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.678703][ T825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.759050][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.759124][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.961682][ T9788] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 242.462228][ T5862] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 242.541654][ T9655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.615847][ T5862] usb 1-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 242.615880][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.649242][ T5862] usb 1-1: config 0 descriptor?? [ 242.679740][ T5862] pwc: Creative Labs Webcam 5 detected. [ 242.759034][ T9822] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 243.283858][ T5862] pwc: recv_control_msg error -71 req 02 val 2b00 [ 243.324431][ T5862] pwc: recv_control_msg error -71 req 02 val 2700 [ 243.326345][ T5862] pwc: recv_control_msg error -71 req 04 val 1600 [ 243.326804][ T5862] pwc: recv_control_msg error -71 req 02 val 2c00 [ 243.327258][ T5862] pwc: recv_control_msg error -71 req 04 val 1000 [ 243.328881][ T5862] pwc: recv_control_msg error -71 req 04 val 1300 [ 243.329346][ T5862] pwc: recv_control_msg error -71 req 04 val 1400 [ 243.329811][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 243.330369][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 243.330837][ T5862] pwc: recv_control_msg error -71 req 06 val 0600 [ 243.331364][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 243.370708][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 243.407088][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 243.407581][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 243.408699][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 243.409220][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 243.409874][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 243.410334][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 243.410822][ T5862] pwc: Failed to power off camera (-71) [ 243.497169][ T5862] pwc: Registered as video103. [ 243.500523][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 243.522621][ T5826] Bluetooth: hci4: command tx timeout [ 243.531382][ T5862] usb 1-1: USB disconnect, device number 20 [ 243.742299][ T819] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 243.770157][ T9655] veth0_vlan: entered promiscuous mode [ 243.789588][ T9655] veth1_vlan: entered promiscuous mode [ 243.892851][ T819] usb 2-1: Using ep0 maxpacket: 32 [ 243.946789][ T9655] veth0_macvtap: entered promiscuous mode [ 243.968965][ T9655] veth1_macvtap: entered promiscuous mode [ 243.977801][ T819] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 243.977832][ T819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.977852][ T819] usb 2-1: Product: syz [ 243.977866][ T819] usb 2-1: Manufacturer: syz [ 243.977881][ T819] usb 2-1: SerialNumber: syz [ 244.016912][ T819] usb 2-1: config 0 descriptor?? [ 244.176367][ T9655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.275367][ T9655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.307737][ T825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.313039][ T825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.338208][ T825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.338759][ T825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.684331][ T819] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 244.684375][ T819] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 244.684447][ T819] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 245.603443][ T5826] Bluetooth: hci4: command tx timeout [ 245.824664][ T5912] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 245.829374][ T819] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 245.897222][ T819] usb 2-1: USB disconnect, device number 23 [ 245.995603][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 245.997274][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.997290][ T5912] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.997303][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 245.999028][ T5912] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 245.999044][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.999054][ T5912] usb 1-1: Product: syz [ 245.999062][ T5912] usb 1-1: Manufacturer: syz [ 245.999069][ T5912] usb 1-1: SerialNumber: syz [ 246.012906][ T5912] usb 1-1: config 0 descriptor?? [ 246.035619][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.035639][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.152306][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 246.315210][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 246.316668][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.316721][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.316747][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.318121][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.318169][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.318197][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.383267][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.383333][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.383362][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.388277][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.388337][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.388364][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.389580][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.389628][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.389654][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.427611][ T5912] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 246.480266][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.480326][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.480355][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.524091][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.524146][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.524173][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.534509][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.534563][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.534590][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.540922][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 246.540950][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 246.540970][ T10] usb 3-1: Product: syz [ 246.540984][ T10] usb 3-1: Manufacturer: syz [ 246.540998][ T10] usb 3-1: SerialNumber: syz [ 246.624553][ T10] usb 3-1: config 0 descriptor?? [ 246.680593][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 246.699690][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.699710][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.838653][ T5912] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 246.839294][ T5912] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 246.957602][ T5912] usb 1-1: USB disconnect, device number 21 [ 247.040639][ T44] usb 3-1: USB disconnect, device number 23 [ 247.163701][ T44] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 247.531521][ T5826] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 247.596430][ T9881] netlink: 'syz.1.1680': attribute type 27 has an invalid length. [ 247.596451][ T9881] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 247.693350][ T9885] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 247.693379][ T9885] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 247.693585][ T9885] overlayfs: failed to set uuid (462/file0, err=-13); falling back to uuid=null. [ 247.836839][ T819] kernel read not supported for file /radio0 (pid: 819 comm: kworker/0:2) [ 247.882611][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 248.032200][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 248.034441][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 248.034469][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 248.034488][ T10] usb 1-1: config 0 has no interface number 0 [ 248.034530][ T10] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.034555][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 248.034594][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.036075][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 248.036101][ T10] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 248.036121][ T10] usb 1-1: Product: syz [ 248.127161][ T10] usb 1-1: config 0 descriptor?? [ 248.128790][ T9883] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 248.618294][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 248.774415][ T10] usb 1-1: USB disconnect, device number 22 [ 249.458906][ T9946] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1709'. [ 249.458941][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 249.542463][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 249.642288][ T5893] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 249.687130][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'. [ 249.701980][ T10] usb 6-1: config 246 has an invalid interface number: 166 but max is 0 [ 249.702010][ T10] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 249.702029][ T10] usb 6-1: config 246 has no interface number 0 [ 249.710778][ T10] usb 6-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 249.710809][ T10] usb 6-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.710837][ T10] usb 6-1: config 246 interface 166 has no altsetting 0 [ 249.764395][ T10] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 249.764424][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.764443][ T10] usb 6-1: Product: syz [ 249.764456][ T10] usb 6-1: Manufacturer: syz [ 249.764470][ T10] usb 6-1: SerialNumber: syz [ 249.822499][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 249.855204][ T5893] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 249.855290][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.887653][ T5893] usb 1-1: config 0 descriptor?? [ 249.939205][ T5893] as10x_usb: device has been detected [ 249.950073][ T5893] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 250.036105][ T5893] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 250.436518][ T10] usb 6-1: Limiting number of CPorts to U8_MAX [ 250.452224][ T9970] Set syz0 is full, maxelem 0 reached [ 250.517336][ T10] usb 6-1: Unknown endpoint type found, address 0x0b [ 250.517360][ T10] usb 6-1: Not enough endpoints found in device, aborting! [ 250.610092][ T5893] as10x_usb: error during firmware upload part1 [ 250.610758][ T5893] Registered device nBox DVB-T Dongle [ 250.620746][ T5893] usb 1-1: USB disconnect, device number 23 [ 250.702474][ T5912] usb 6-1: USB disconnect, device number 2 [ 250.911809][ T5893] Unregistered device nBox DVB-T Dongle [ 250.918418][ T5893] as10x_usb: device has been disconnected [ 251.173216][ T9989] use of bytesused == 0 is deprecated and will be removed in the future, [ 251.173232][ T9989] use the actual size instead. [ 251.420732][ T9995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.135327][T10025] program syz.0.1745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.152247][ T5912] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 254.306412][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 254.306492][ T5912] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.306519][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.306548][ T5912] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 254.306570][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.318388][ T5912] usb 3-1: config 0 descriptor?? [ 254.449889][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.478486][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.743058][ T5912] hid (null): global environment stack underflow [ 254.743111][ T5912] hid (null): report_id 2839661142 is invalid [ 254.803870][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.803906][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.803932][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.803958][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.803983][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.804009][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.804034][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.804058][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.804082][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.804107][ T5912] semitek 0003:1EA7:0907.0014: unknown main item tag 0x0 [ 254.804684][ T5912] semitek 0003:1EA7:0907.0014: global environment stack underflow [ 254.804711][ T5912] semitek 0003:1EA7:0907.0014: item 0 4 1 11 parsing failed [ 254.810731][ T5912] semitek 0003:1EA7:0907.0014: probe with driver semitek failed with error -22 [ 254.981751][ T44] usb 3-1: USB disconnect, device number 24 [ 255.045606][T10111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 255.721313][T10133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.775689][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.775759][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.282301][ T5893] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 256.433690][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 256.438493][ T5893] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.438520][ T5893] usb 2-1: config 0 has no interface number 0 [ 256.438565][ T5893] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.438591][ T5893] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.438629][ T5893] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 256.438652][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.507971][ T5893] usb 2-1: config 0 descriptor?? [ 256.566341][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 257.174955][ T5893] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0015/input/input22 [ 257.401836][ T5893] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0015/input/input23 [ 257.479494][ T5893] uclogic 0003:28BD:0071.0015: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 257.516142][ T5893] usb 2-1: USB disconnect, device number 24 [ 257.793758][T10189] fido_id[10189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 257.823541][T10195] kvm: kvm [10192]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x5 [ 258.735471][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 258.883641][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 258.885724][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 258.885750][ T10] usb 3-1: config 0 has no interface number 0 [ 258.890895][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 258.890924][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.890944][ T10] usb 3-1: Product: syz [ 258.890959][ T10] usb 3-1: Manufacturer: syz [ 258.890973][ T10] usb 3-1: SerialNumber: syz [ 258.954878][ T10] usb 3-1: config 0 descriptor?? [ 258.959346][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 259.056205][T10237] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1843'. [ 259.187694][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.188552][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.263681][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 259.339870][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 259.415405][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 259.620440][ T5895] usb 3-1: USB disconnect, device number 25 [ 259.623980][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 259.659869][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 259.731747][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 259.738224][ T5895] quatech2 3-1:0.51: device disconnected [ 260.538339][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'. [ 260.538365][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'. [ 260.560546][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1873'. [ 261.310567][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1880'. [ 261.448203][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1884'. [ 261.448229][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1884'. [ 261.538261][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1885'. [ 261.997804][T10344] pimreg: tun_chr_ioctl cmd 1074025676 [ 261.997826][T10344] pimreg: owner set to 0 [ 262.473502][T10359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.922304][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 265.072371][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 265.075532][ T5911] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 265.075559][ T5911] usb 6-1: config 0 has no interface number 0 [ 265.077824][ T5911] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 265.077845][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.077856][ T5911] usb 6-1: Product: syz [ 265.077864][ T5911] usb 6-1: Manufacturer: syz [ 265.077871][ T5911] usb 6-1: SerialNumber: syz [ 265.081950][ T5911] usb 6-1: config 0 descriptor?? [ 265.096290][ T5911] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 265.301836][T10426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.304278][T10426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.325151][ T5911] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 265.331890][ T5911] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 265.520387][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 265.721824][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 265.736480][ T10] usb 6-1: USB disconnect, device number 3 [ 265.752684][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 265.775160][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 265.777415][ T10] quatech2 6-1:0.51: device disconnected [ 277.447371][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.491592][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.494414][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.495603][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.496563][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.959616][T10434] chnl_net:caif_netlink_parms(): no params data found [ 278.194466][ T5138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.273748][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.274745][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.275211][T10434] bridge_slave_0: entered allmulticast mode [ 278.280524][T10434] bridge_slave_0: entered promiscuous mode [ 278.281190][ T5138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.287965][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.289708][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.289919][T10434] bridge_slave_1: entered allmulticast mode [ 278.302697][T10434] bridge_slave_1: entered promiscuous mode [ 278.310251][ T5138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.350239][ T5138] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.351035][ T5138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.528579][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.545060][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.593606][T10434] team0: Port device team_slave_0 added [ 278.598836][T10434] team0: Port device team_slave_1 added [ 278.646516][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.646533][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.646556][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.648548][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.648559][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.648579][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.812461][T10434] hsr_slave_0: entered promiscuous mode [ 278.813205][T10434] hsr_slave_1: entered promiscuous mode [ 278.813729][T10434] debugfs: 'hsr0' already exists in 'hsr' [ 278.813746][T10434] Cannot create hsr debugfs directory [ 279.509660][T10455] chnl_net:caif_netlink_parms(): no params data found [ 279.584344][T10434] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.602390][ T5826] Bluetooth: hci5: command tx timeout [ 279.627891][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.642036][T10434] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.703081][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.725361][T10434] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 279.765395][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.772569][T10434] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.815921][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.848686][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.848824][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.848950][T10455] bridge_slave_0: entered allmulticast mode [ 279.850372][T10455] bridge_slave_0: entered promiscuous mode [ 279.878923][T10455] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.879051][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.879348][T10455] bridge_slave_1: entered allmulticast mode [ 279.881098][T10455] bridge_slave_1: entered promiscuous mode [ 279.930061][T10455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.939393][T10455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.000436][T10455] team0: Port device team_slave_0 added [ 280.009049][T10455] team0: Port device team_slave_1 added [ 280.049085][T10455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.049100][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.049120][T10455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.051379][T10455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.051390][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.051411][T10455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.197089][T10455] hsr_slave_0: entered promiscuous mode [ 280.198111][T10455] hsr_slave_1: entered promiscuous mode [ 280.198881][T10455] debugfs: 'hsr0' already exists in 'hsr' [ 280.198899][T10455] Cannot create hsr debugfs directory [ 280.416689][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.492430][ T5826] Bluetooth: hci6: command tx timeout [ 280.576261][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.636235][ T2349] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.636406][ T2349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.700218][ T2349] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.700355][ T2349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.832025][T10455] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 280.864901][T10455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.866297][T10455] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 280.914539][T10455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.917533][T10455] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 280.955306][T10455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.959415][T10455] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 281.000609][T10455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.235312][T10455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.277537][T10455] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.291932][ T2349] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.292005][ T2349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.369861][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.369995][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.437562][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.685573][ T5826] Bluetooth: hci5: command tx timeout [ 281.778035][T10455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.887158][T10434] veth0_vlan: entered promiscuous mode [ 281.899980][T10434] veth1_vlan: entered promiscuous mode [ 281.967521][T10434] veth0_macvtap: entered promiscuous mode [ 281.976406][T10434] veth1_macvtap: entered promiscuous mode [ 282.009874][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.017922][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.071610][ T825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.071657][ T825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.071701][ T825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.071743][ T825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.562239][ T5826] Bluetooth: hci6: command tx timeout [ 283.103159][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.103180][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.156532][T10455] veth0_vlan: entered promiscuous mode [ 283.180945][T10455] veth1_vlan: entered promiscuous mode [ 283.278347][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.278367][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.349949][T10455] veth0_macvtap: entered promiscuous mode [ 283.366235][T10455] veth1_macvtap: entered promiscuous mode [ 283.398589][T10455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.421431][T10455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.478654][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.481445][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.501291][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.527219][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.713304][ T5893] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 283.763842][ T5826] Bluetooth: hci5: command tx timeout [ 283.894007][ T5893] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 283.894038][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.894057][ T5893] usb 3-1: Product: syz [ 283.894070][ T5893] usb 3-1: Manufacturer: syz [ 283.894084][ T5893] usb 3-1: SerialNumber: syz [ 283.970502][ T5893] usb 3-1: config 0 descriptor?? [ 284.228394][ T5893] usb 3-1: ignoring: probably an ADSL modem [ 284.644177][ T5826] Bluetooth: hci6: command tx timeout [ 284.655869][ T5893] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 284.876530][ T5862] usb 3-1: USB disconnect, device number 26 [ 284.975660][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.975680][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.094984][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.095004][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.842280][ T5826] Bluetooth: hci5: command tx timeout [ 286.228019][T10556] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1972'. [ 286.519985][T10568] input: syz0 as /devices/virtual/input/input24 [ 286.724954][ T5826] Bluetooth: hci6: command tx timeout [ 287.534851][T10609] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2003'. [ 287.561374][T10608] input: syz0 as /devices/virtual/input/input25 [ 289.628110][T10690] input: syz0 as /devices/virtual/input/input26 [ 289.974361][T10706] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 290.644242][ T32] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 290.662191][T10502] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 290.792201][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 290.800949][ T32] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 290.800976][ T32] usb 6-1: config 0 has no interface number 0 [ 290.801021][ T32] usb 6-1: config 0 interface 12 has no altsetting 0 [ 290.837785][T10502] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 290.837816][T10502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.841599][ T32] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 290.841628][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.841648][ T32] usb 6-1: Product: syz [ 290.841663][ T32] usb 6-1: Manufacturer: syz [ 290.841677][ T32] usb 6-1: SerialNumber: syz [ 290.910444][T10502] usb 3-1: config 0 descriptor?? [ 290.916927][ T32] usb 6-1: config 0 descriptor?? [ 290.953619][T10502] pwc: Creative Labs Webcam 5 detected. [ 291.552332][T10502] pwc: recv_control_msg error -71 req 02 val 2b00 [ 291.552857][T10502] pwc: recv_control_msg error -71 req 02 val 2700 [ 291.553299][T10502] pwc: recv_control_msg error -71 req 04 val 1600 [ 291.555383][T10502] pwc: recv_control_msg error -71 req 02 val 2c00 [ 291.582176][T10502] pwc: recv_control_msg error -71 req 04 val 1000 [ 291.590121][T10502] pwc: recv_control_msg error -71 req 04 val 1300 [ 291.590609][T10502] pwc: recv_control_msg error -71 req 04 val 1400 [ 291.591049][T10502] pwc: recv_control_msg error -71 req 02 val 2000 [ 291.591537][T10502] pwc: recv_control_msg error -71 req 02 val 2100 [ 291.620320][T10502] pwc: recv_control_msg error -71 req 06 val 0600 [ 291.621839][T10502] pwc: recv_control_msg error -71 req 04 val 1500 [ 291.632600][T10502] pwc: recv_control_msg error -71 req 02 val 2500 [ 291.643826][T10502] pwc: recv_control_msg error -71 req 02 val 2400 [ 291.645663][T10502] pwc: recv_control_msg error -71 req 02 val 2600 [ 291.647516][T10502] pwc: recv_control_msg error -71 req 02 val 2900 [ 291.647932][T10502] pwc: recv_control_msg error -71 req 02 val 2800 [ 291.648485][T10502] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.648878][T10502] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.649305][T10502] pwc: Failed to power off camera (-71) [ 291.751558][T10502] pwc: Registered as video103. [ 291.761472][T10502] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 291.763692][ T32] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 291.763738][ T32] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 291.763754][ T32] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 291.763841][ T32] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 291.808205][ T32] usb 6-1: USB disconnect, device number 4 [ 291.864404][T10502] usb 3-1: USB disconnect, device number 27 [ 291.949103][T10760] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 292.493850][ T44] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 292.565529][T10785] netlink: 'syz.2.2076': attribute type 27 has an invalid length. [ 292.565550][T10785] netlink: 'syz.2.2076': attribute type 1 has an invalid length. [ 292.619864][ T5912] kernel read not supported for file /radio0 (pid: 5912 comm: kworker/1:6) [ 292.657150][ T44] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 292.658371][ T44] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.658423][ T44] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.658439][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.659427][ T44] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.659477][ T44] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.659502][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.660488][ T44] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.660537][ T44] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.660564][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.694115][ T44] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.694170][ T44] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.694197][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.706716][ T44] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.706786][ T44] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.706812][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.707835][ T44] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.707882][ T44] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.707907][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.709915][ T44] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.709972][ T44] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.709998][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.712257][ T44] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.712305][ T44] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.712331][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.725619][ T44] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 292.725646][ T44] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 292.725666][ T44] usb 7-1: Product: syz [ 292.725679][ T44] usb 7-1: Manufacturer: syz [ 292.725693][ T44] usb 7-1: SerialNumber: syz [ 292.755844][ T44] usb 7-1: config 0 descriptor?? [ 293.026416][ T44] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 293.056979][ T44] usb 7-1: USB disconnect, device number 2 [ 293.118792][ T44] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 293.321775][T10802] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 293.321792][T10802] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 293.321907][T10802] overlayfs: failed to set uuid (550/file0, err=-13); falling back to uuid=null. [ 293.486062][T10809] netlink: 'syz.5.2089': attribute type 27 has an invalid length. [ 293.486085][T10809] netlink: 'syz.5.2089': attribute type 1 has an invalid length. [ 293.833921][ T5893] kernel read not supported for file /radio0 (pid: 5893 comm: kworker/0:5) [ 294.150410][T10830] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2099'. [ 294.150456][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2099'. [ 294.297045][T10837] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2110'. [ 294.297067][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2110'. [ 294.519904][T10845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2105'. [ 294.526613][ T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 294.683050][ T44] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 294.684251][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.684315][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.684341][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.685512][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.685567][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.685593][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.686776][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.686833][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.686859][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.688047][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.688096][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.688121][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.689306][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.689355][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.689380][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.690713][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.690760][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.690786][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.691938][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.691980][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.692004][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.697488][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.697538][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.697564][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.703463][ T44] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 294.703490][ T44] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 294.703510][ T44] usb 6-1: Product: syz [ 294.703524][ T44] usb 6-1: Manufacturer: syz [ 294.703538][ T44] usb 6-1: SerialNumber: syz [ 294.734488][ T44] usb 6-1: config 0 descriptor?? [ 294.976787][ T44] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 295.011816][ T44] usb 6-1: USB disconnect, device number 5 [ 295.018293][T10502] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 295.050957][ T44] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 295.172259][T10502] usb 3-1: Using ep0 maxpacket: 32 [ 295.174029][T10502] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 295.174054][T10502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.177578][T10502] usb 3-1: config 0 descriptor?? [ 295.223467][T10502] as10x_usb: device has been detected [ 295.224418][T10502] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 295.259338][T10502] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 295.290208][T10502] as10x_usb: error during firmware upload part1 [ 295.290858][T10502] Registered device nBox DVB-T Dongle [ 295.401619][ T44] usb 3-1: USB disconnect, device number 28 [ 295.490090][ T44] Unregistered device nBox DVB-T Dongle [ 295.499383][T10852] as102_open: can't find device for minor 0 [ 295.499440][ T44] as10x_usb: device has been disconnected [ 296.092217][ T44] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 296.282356][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 296.284418][ T44] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.284440][ T44] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 296.284453][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 296.288533][ T44] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 296.288560][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.288571][ T44] usb 6-1: Product: syz [ 296.288579][ T44] usb 6-1: Manufacturer: syz [ 296.288587][ T44] usb 6-1: SerialNumber: syz [ 296.300791][ T44] usb 6-1: config 0 descriptor?? [ 296.734242][ T44] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 296.837280][T10897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.141853][ T44] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 297.168444][ T44] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 297.282421][ T44] usb 6-1: USB disconnect, device number 6 [ 297.761256][T10927] Set syz0 is full, maxelem 0 reached [ 297.800662][T10929] program syz.2.2148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.382227][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 298.532711][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 298.543157][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.543185][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 298.543208][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 298.547207][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 298.547235][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.547254][ T10] usb 3-1: Product: syz [ 298.547268][ T10] usb 3-1: Manufacturer: syz [ 298.547282][ T10] usb 3-1: SerialNumber: syz [ 298.622021][ T10] usb 3-1: config 0 descriptor?? [ 299.065402][ T10] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 299.302268][ T5912] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 299.465214][ T5912] usb 7-1: config 246 has an invalid interface number: 166 but max is 0 [ 299.465242][ T5912] usb 7-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 299.465261][ T5912] usb 7-1: config 246 has no interface number 0 [ 299.465304][ T5912] usb 7-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 299.465327][ T5912] usb 7-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.465355][ T5912] usb 7-1: config 246 interface 166 has no altsetting 0 [ 299.473324][ T10] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 299.473612][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 299.522317][ T5912] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 299.522348][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.522368][ T5912] usb 7-1: Product: syz [ 299.522383][ T5912] usb 7-1: Manufacturer: syz [ 299.522396][ T5912] usb 7-1: SerialNumber: syz [ 299.594752][ T10] usb 3-1: USB disconnect, device number 29 [ 300.195652][ T5912] usb 7-1: Limiting number of CPorts to U8_MAX [ 300.226173][ T5912] usb 7-1: Unknown endpoint type found, address 0x0b [ 300.226196][ T5912] usb 7-1: Not enough endpoints found in device, aborting! [ 300.448042][ T5912] usb 7-1: USB disconnect, device number 3 [ 301.794720][T11040] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.918919][T11040] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.517880][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2210'. [ 303.358007][T11099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.903909][ T32] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 304.053464][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 304.058330][ T32] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.058357][ T32] usb 6-1: config 0 has no interface number 0 [ 304.058390][ T32] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.058405][ T32] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.058427][ T32] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 304.058439][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.074643][ T32] usb 6-1: config 0 descriptor?? [ 304.847747][ T32] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0016/input/input28 [ 305.091863][ T32] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0016/input/input29 [ 305.271718][ T32] uclogic 0003:28BD:0071.0016: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 305.293408][ T32] usb 6-1: USB disconnect, device number 7 [ 305.330335][T11151] fido_id[11151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 305.921532][T11170] Cache volume key already in use (9p,(null),) [ 306.316325][T11184] netlink: 'syz.5.2261': attribute type 2 has an invalid length. [ 306.316347][T11184] netlink: 'syz.5.2261': attribute type 11 has an invalid length. [ 306.316360][T11184] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2261'. [ 306.651956][T11197] mmap: syz.6.2266 (11197) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 307.548732][T11235] overlay: filesystem on ./file0 not supported as upperdir [ 307.632537][ T5862] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 307.812624][ T5862] usb 3-1: not running at top speed; connect to a high speed hub [ 307.813902][ T5862] usb 3-1: config 2 has an invalid interface number: 52 but max is 0 [ 307.813925][ T5862] usb 3-1: config 2 has no interface number 0 [ 307.813952][ T5862] usb 3-1: config 2 interface 52 has no altsetting 0 [ 307.816800][ T5862] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=88.e3 [ 307.816825][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.816843][ T5862] usb 3-1: Product: syz [ 307.816857][ T5862] usb 3-1: Manufacturer: syz [ 307.816871][ T5862] usb 3-1: SerialNumber: syz [ 308.042333][T10502] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 308.065778][ T5862] gspca_main: touptek-2.14.0 probing 0547:6801 [ 308.101088][ T5862] usb 3-1: USB disconnect, device number 30 [ 308.172360][ T5138] Bluetooth: hci6: command tx timeout [ 308.198660][T10502] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 308.198687][T10502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.198698][T10502] usb 7-1: Product: syz [ 308.198706][T10502] usb 7-1: Manufacturer: syz [ 308.198713][T10502] usb 7-1: SerialNumber: syz [ 308.206755][T10502] usb 7-1: config 0 descriptor?? [ 308.234824][T10502] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 309.056509][T10502] gspca_stk1135: reg_w 0x5 err -71 [ 309.057579][T10502] gspca_stk1135: serial bus timeout: status=0x00 [ 309.057594][T10502] gspca_stk1135: Sensor write failed [ 309.057622][T10502] gspca_stk1135: serial bus timeout: status=0x00 [ 309.057636][T10502] gspca_stk1135: Sensor write failed [ 309.057669][T10502] gspca_stk1135: serial bus timeout: status=0x00 [ 309.057679][T10502] gspca_stk1135: Sensor read failed [ 309.057704][T10502] gspca_stk1135: serial bus timeout: status=0x00 [ 309.057714][T10502] gspca_stk1135: Sensor read failed [ 309.057722][T10502] gspca_stk1135: Detected sensor type unknown (0x0) [ 309.057751][T10502] gspca_stk1135: serial bus timeout: status=0x00 [ 309.057767][T10502] gspca_stk1135: Sensor read failed [ 309.057788][T10502] gspca_stk1135: serial bus timeout: status=0x00 [ 309.057798][T10502] gspca_stk1135: Sensor read failed [ 309.057831][T10502] gspca_stk1135: serial bus timeout: status=0x00 [ 309.057840][T10502] gspca_stk1135: Sensor write failed [ 309.057868][T10502] gspca_stk1135: serial bus timeout: status=0x00 [ 309.057877][T10502] gspca_stk1135: Sensor write failed [ 309.057974][T10502] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 309.080116][T10502] usb 7-1: USB disconnect, device number 4 [ 309.842652][ T5826] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 309.993857][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2298'. [ 310.057002][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2298'. [ 311.501318][ T5826] block nbd1: Receive control failed (result -32) [ 311.985504][ T32] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 312.048485][T11330] input: syz0 as /devices/virtual/input/input30 [ 312.144454][ T32] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.144486][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.176974][ T32] usb 3-1: config 0 descriptor?? [ 312.204669][ T32] cp210x 3-1:0.0: cp210x converter detected [ 312.611234][ T32] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 312.639605][ T32] usb 3-1: cp210x converter now attached to ttyUSB0 [ 312.814852][T10502] usb 3-1: USB disconnect, device number 31 [ 312.821536][T10502] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 312.957418][T10502] cp210x 3-1:0.0: device disconnected [ 313.090785][T11346] Set syz1 is full, maxelem 768 reached [ 313.462227][ T32] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 313.626188][ T32] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 313.626221][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.657342][ T32] usb 7-1: config 0 descriptor?? [ 313.871315][ T32] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 314.009454][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 314.009471][ T37] audit: type=1326 audit(1776167016.555:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.2.2345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0046f2c819 code=0x0 [ 314.138020][ T32] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 314.138045][ T32] [drm] Initialized udl on minor 2 [ 314.483512][ T32] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 314.506433][ T32] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 314.704900][ T32] usb 7-1: USB disconnect, device number 5 [ 314.745272][ T44] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 315.178556][T11390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.305229][T11393] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 316.852988][ T5912] IPVS: starting estimator thread 0... [ 316.944136][T11447] IPVS: using max 10 ests per chain, 24000 per kthread [ 317.225257][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225315][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.974527][T11475] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2394'. [ 317.974561][T11475] netlink: 'syz.7.2394': attribute type 1 has an invalid length. [ 318.421023][T11486] Set syz1 is full, maxelem 768 reached [ 318.626152][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.668510][T11490] netlink: 'syz.7.2401': attribute type 11 has an invalid length. [ 318.668534][T11490] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.2401'. [ 318.670439][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.674269][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.736593][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.738768][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.370400][T11487] chnl_net:caif_netlink_parms(): no params data found [ 319.534615][T11520] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2414'. [ 319.809369][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.811749][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.829656][T11487] bridge_slave_0: entered allmulticast mode [ 319.843173][T11487] bridge_slave_0: entered promiscuous mode [ 319.851297][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.857063][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.857304][T11487] bridge_slave_1: entered allmulticast mode [ 319.891187][T11487] bridge_slave_1: entered promiscuous mode [ 320.095973][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.105932][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.228129][T11487] team0: Port device team_slave_0 added [ 320.236384][T11487] team0: Port device team_slave_1 added [ 320.343370][T11539] netlink: 'syz.5.2421': attribute type 12 has an invalid length. [ 320.343393][T11539] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2421'. [ 320.504141][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.504157][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.504182][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.508902][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.508913][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.508928][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.674206][T11487] hsr_slave_0: entered promiscuous mode [ 320.677591][T11487] hsr_slave_1: entered promiscuous mode [ 320.680106][T11487] debugfs: 'hsr0' already exists in 'hsr' [ 320.680129][T11487] Cannot create hsr debugfs directory [ 320.882459][ T5138] Bluetooth: hci0: command tx timeout [ 321.037177][T11487] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 321.080505][T11487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.083852][T11487] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 321.127764][T11487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.128495][T11487] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 321.165080][T11487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.166316][T11487] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 321.182269][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 321.208764][T11487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.319704][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.335217][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.353688][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 321.353719][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.359710][ T10] usb 7-1: config 0 descriptor?? [ 321.370687][ T10] cp210x 7-1:0.0: cp210x converter detected [ 321.454793][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.455002][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.506371][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.506638][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.010142][ T10] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 322.010193][ T10] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 322.092450][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 322.102000][ T10] usb 7-1: USB disconnect, device number 6 [ 322.159353][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 322.172728][ T10] cp210x 7-1:0.0: device disconnected [ 322.218282][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.479832][T11487] veth0_vlan: entered promiscuous mode [ 322.493266][T11487] veth1_vlan: entered promiscuous mode [ 322.555498][T11487] veth0_macvtap: entered promiscuous mode [ 322.597973][T11487] veth1_macvtap: entered promiscuous mode [ 322.626722][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.654173][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.688907][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.699915][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.703058][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.723801][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.966170][ T5138] Bluetooth: hci0: command tx timeout [ 323.392881][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.392901][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.741371][ T825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.741392][ T825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.774834][T11591] loop8: detected capacity change from 0 to 1 [ 323.807236][T11591] Dev loop8: unable to read RDB block 1 [ 323.807280][T11591] loop8: unable to read partition table [ 323.807502][T11591] loop8: partition table beyond EOD, truncated [ 323.807551][T11591] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 323.942910][T11593] program syz.7.2437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.587682][T11612] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2444'. [ 324.743518][ T5912] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 324.907375][ T5912] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 324.907405][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 324.907425][ T5912] usb 7-1: Product: syz [ 324.967574][ T5912] usb 7-1: config 0 descriptor?? [ 325.005566][ T5912] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 325.012815][ T5912] usb 7-1: Detected FT232H [ 325.045318][ T5138] Bluetooth: hci0: command tx timeout [ 325.197141][ T5912] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 325.609447][ T5912] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 325.624032][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 325.625833][ T5912] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 325.678767][ T5912] usb 7-1: USB disconnect, device number 7 [ 325.709477][ T5912] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 325.710283][ T5912] ftdi_sio 7-1:0.0: device disconnected [ 325.776477][ T44] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 325.776510][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 325.776536][ T44] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 325.780314][ T44] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 325.780344][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.780380][ T44] usb 6-1: Product: syz [ 325.780395][ T44] usb 6-1: Manufacturer: syz [ 325.780409][ T44] usb 6-1: SerialNumber: syz [ 325.854368][ T44] usb 6-1: config 0 descriptor?? [ 325.855650][T11625] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 325.855795][T11625] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 325.889529][ T44] usb 6-1: ucan: probing device on interface #0 [ 326.037399][T11640] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2457'. [ 326.265578][ T44] usb 6-1: ucan: device reported invalid tx-fifo size [ 326.265602][ T44] usb 6-1: ucan: probe failed; try to update the device firmware [ 326.349343][T11648] sctp: Trying to GSO but underlying device doesn't support it. [ 326.422322][ T5862] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 326.468038][ T44] usb 6-1: USB disconnect, device number 8 [ 326.572384][ T5862] usb 9-1: Using ep0 maxpacket: 16 [ 326.574496][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.574534][ T5862] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.574547][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.581146][ T5862] usb 9-1: config 0 descriptor?? [ 326.814946][T11661] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2466'. [ 327.017361][ T5862] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 327.132275][ T5138] Bluetooth: hci0: command tx timeout [ 327.419009][ T818] usb 9-1: USB disconnect, device number 2 [ 328.128202][T11689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.503560][T11705] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2488'. [ 328.572794][ T819] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 328.749746][ T819] usb 7-1: Using ep0 maxpacket: 8 [ 328.775447][ T819] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 328.775479][ T819] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 328.775500][ T819] usb 7-1: Product: syz [ 328.775514][ T819] usb 7-1: Manufacturer: syz [ 328.775529][ T819] usb 7-1: SerialNumber: syz [ 328.794154][ T819] usb 7-1: config 0 descriptor?? [ 328.846176][ T819] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 329.109881][T11722] bridge0: port 3(veth1_macvtap) entered blocking state [ 329.110066][T11722] bridge0: port 3(veth1_macvtap) entered disabled state [ 329.110347][T11722] veth1_macvtap: entered allmulticast mode [ 329.287465][T11722] veth1_macvtap: left allmulticast mode [ 329.287719][T11724] tipc: Started in network mode [ 329.287858][T11724] tipc: Node identity ac14140f, cluster identity 4711 [ 329.317637][T11724] tipc: New replicast peer: 255.255.255.255 [ 329.319548][T11724] tipc: Enabled bearer , priority 10 [ 329.523677][ T819] input: gspca_zc3xx as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 329.649524][ T5911] usb 7-1: USB disconnect, device number 8 [ 329.796822][ C1] sd 0:0:1:0: [sda] tag#9633 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 329.796883][ C1] sd 0:0:1:0: [sda] tag#9633 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 330.438015][ T5912] tipc: Node number set to 2886997007 [ 330.737290][T11763] Bluetooth: MGMT ver 1.23 [ 330.794404][T11765] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2513'. [ 330.828915][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2515'. [ 331.420191][T11786] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2523'. [ 331.555137][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2527'. [ 331.945171][ T5912] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 332.111518][ T5912] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.111545][ T5912] usb 6-1: config 0 has no interface number 0 [ 332.139248][ T5912] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 332.139277][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.139295][ T5912] usb 6-1: Product: syz [ 332.139309][ T5912] usb 6-1: Manufacturer: syz [ 332.139323][ T5912] usb 6-1: SerialNumber: syz [ 332.189133][ T5912] usb 6-1: config 0 descriptor?? [ 332.203398][T11818] overlayfs: overlapping lowerdir path [ 332.405261][ T5912] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 332.422026][ T5912] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.422633][ T5912] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 332.422685][ T5912] usb 6-1: media controller created [ 332.462008][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.285184][ T5138] Bluetooth: hci0: command tx timeout [ 333.522608][ T5912] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 333.600540][ T5912] usb 6-1: USB disconnect, device number 9 [ 334.021840][T11856] kvm_intel: kvm [11854]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 334.175999][T11863] netlink: 'syz.6.2559': attribute type 1 has an invalid length. [ 334.176045][T11863] netlink: 'syz.6.2559': attribute type 2 has an invalid length. [ 334.176058][T11863] netlink: 'syz.6.2559': attribute type 1 has an invalid length. [ 334.724677][T11884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.932976][T11889] input: syz0 as /devices/virtual/input/input33 [ 336.884823][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2603'. [ 336.943780][T11957] netlink: 'syz.8.2604': attribute type 10 has an invalid length. [ 336.943803][T11957] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2604'. [ 337.643515][ T5912] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 337.792312][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 337.795768][ T5912] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.795821][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.795848][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.795868][ T5912] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 337.795892][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.797928][ T5912] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 337.797955][ T5912] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.797976][ T5912] usb 7-1: Manufacturer: syz [ 337.911177][ T5912] usb 7-1: config 0 descriptor?? [ 338.253628][ T5912] rc_core: IR keymap rc-hauppauge not found [ 338.253648][ T5912] Registered IR keymap rc-empty [ 338.253790][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.281229][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.300720][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 338.363445][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input34 [ 338.418300][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.432482][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.462545][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.492561][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.512314][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.532543][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.552362][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.587678][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.602498][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.632259][ T5912] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 338.699224][ T5912] mceusb 7-1:0.0: Registered Я with mce emulator interface version 1 [ 338.699248][ T5912] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 338.754295][ T5912] usb 7-1: USB disconnect, device number 9 [ 339.931552][T12020] netlink: 220 bytes leftover after parsing attributes in process `syz.8.2630'. [ 339.931575][T12020] netlink: 'syz.8.2630': attribute type 2 has an invalid length. [ 340.343019][ T818] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 340.503541][T12045] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2642'. [ 340.512333][ T818] usb 9-1: Using ep0 maxpacket: 16 [ 340.514606][ T818] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 340.514631][ T818] usb 9-1: config 0 has no interface number 0 [ 340.514675][ T818] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.514700][ T818] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.514932][ T818] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 340.514956][ T818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.606438][ T818] usb 9-1: config 0 descriptor?? [ 340.903351][T12053] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2646'. [ 341.226370][ T818] uclogic 0003:28BD:0071.0018: pen parameters not found [ 341.226406][ T818] uclogic 0003:28BD:0071.0018: interface is invalid, ignoring [ 341.260345][ T818] usb 9-1: USB disconnect, device number 3 [ 344.986580][T12147] netlink: 'syz.7.2691': attribute type 10 has an invalid length. [ 344.986601][T12147] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2691'. [ 345.578209][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.620685][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.629970][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.763117][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.764411][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.954779][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 346.199857][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.186286][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.233392][T12185] netlink: 'syz.5.2708': attribute type 12 has an invalid length. [ 347.233422][T12185] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2708'. [ 347.457766][T12195] misc userio: Begin command sent, but we're already running [ 347.610574][T12199] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2714'. [ 347.714114][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.909781][T12203] program syz.5.2716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.928741][ T5138] Bluetooth: hci5: command tx timeout [ 348.165532][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.584939][T12153] chnl_net:caif_netlink_parms(): no params data found [ 349.051163][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.051365][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.051596][T12153] bridge_slave_0: entered allmulticast mode [ 349.079062][T12153] bridge_slave_0: entered promiscuous mode [ 349.180423][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.180615][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.180773][T12153] bridge_slave_1: entered allmulticast mode [ 349.202836][ T5826] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 349.203594][ T5138] Bluetooth: hci7: command 0x1003 tx timeout [ 349.233863][T12153] bridge_slave_1: entered promiscuous mode [ 349.275430][T12242] sp0: Synchronizing with TNC [ 349.689567][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.709823][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.005809][ T5826] Bluetooth: hci5: command tx timeout [ 350.132409][ T5912] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 350.230501][T12153] team0: Port device team_slave_0 added [ 350.235836][T12153] team0: Port device team_slave_1 added [ 350.288816][ T5912] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 350.288845][ T5912] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 350.288865][ T5912] usb 9-1: config 0 has no interface number 0 [ 350.288908][ T5912] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 350.288944][ T5912] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 350.288967][ T5912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.306059][ T5912] usb 9-1: config 0 descriptor?? [ 350.323033][T12252] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 350.356905][ T57] bridge_slave_1: left allmulticast mode [ 350.356935][ T57] bridge_slave_1: left promiscuous mode [ 350.357181][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.453796][ T57] bridge_slave_0: left allmulticast mode [ 350.453847][ T57] bridge_slave_0: left promiscuous mode [ 350.478841][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.957168][ T5912] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.21/input/input36 [ 351.175276][ T5912] usb 9-1: USB disconnect, device number 4 [ 351.175365][ C1] keyspan_remote 9-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 351.603046][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.685101][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.726711][ T57] bond0 (unregistering): Released all slaves [ 351.984928][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.984946][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.984971][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.991586][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.991601][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.991625][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.082271][ T5826] Bluetooth: hci5: command tx timeout [ 352.252255][T12153] hsr_slave_0: entered promiscuous mode [ 352.263569][T12153] hsr_slave_1: entered promiscuous mode [ 352.271379][T12153] debugfs: 'hsr0' already exists in 'hsr' [ 352.271406][T12153] Cannot create hsr debugfs directory [ 353.641765][ T5484] 8021q: adding VLAN 0 to HW filter on device eth5 [ 353.737957][ T37] audit: type=1326 audit(1776167056.285:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.8.2755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faab210c819 code=0x0 [ 354.042942][ T819] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 354.162374][ T5826] Bluetooth: hci5: command tx timeout [ 354.196266][ T819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 354.216201][ T819] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 354.216233][ T819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.216252][ T819] usb 6-1: Product: syz [ 354.216266][ T819] usb 6-1: Manufacturer: syz [ 354.216280][ T819] usb 6-1: SerialNumber: syz [ 354.856577][T12326] IPVS: persistence engine module ip_vs_pe_ not found [ 354.925934][T12332] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2765'. [ 355.090311][ T819] usb 6-1: 1:1: cannot get freq at ep 0x1 [ 355.206839][ T819] usb 6-1: USB disconnect, device number 10 [ 355.233596][T12335] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 355.233618][T12335] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 355.824213][T10435] udevd[10435]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.858615][ T57] hsr_slave_0: left promiscuous mode [ 355.896074][ T57] hsr_slave_1: left promiscuous mode [ 355.915847][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.915866][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.071133][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.071162][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.389733][ T57] veth1_macvtap: left promiscuous mode [ 356.389828][ T57] veth0_macvtap: left promiscuous mode [ 356.452444][ T57] veth1_vlan: left promiscuous mode [ 356.452555][ T57] veth0_vlan: left promiscuous mode [ 357.954969][ T57] team0 (unregistering): Port device team_slave_1 removed [ 358.012967][ T57] team0 (unregistering): Port device team_slave_0 removed [ 358.312904][T12369] batadv_slave_1: entered promiscuous mode [ 358.319356][ T5484] 8021q: adding VLAN 0 to HW filter on device eth6 [ 358.384664][T12373] batadv_slave_1: left promiscuous mode [ 358.498445][T12153] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 358.521674][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.534077][T12153] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 358.606171][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.715382][T12153] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 358.888461][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.906863][T12153] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 359.190919][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.304786][T12433] netlink: 'syz.5.2803': attribute type 25 has an invalid length. [ 359.304806][T12433] netlink: 'syz.5.2803': attribute type 1 has an invalid length. [ 359.304897][T12433] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.818398][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.959148][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.017962][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.027185][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.128916][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.232375][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.251954][ T5826] Bluetooth: hci2: command 0x0405 tx timeout [ 360.778405][T12472] input: syz1 as /devices/virtual/input/input37 [ 361.359114][T12494] input: syz0 as /devices/virtual/input/input38 [ 361.386142][T12495] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2821'. [ 361.532640][ T5484] 8021q: adding VLAN 0 to HW filter on device eth7 [ 361.562205][ T5862] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 361.717228][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.717259][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 361.717275][ T5862] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.717299][ T5862] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 361.717311][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.780897][ T5862] usb 9-1: config 0 descriptor?? [ 361.781661][T12491] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 361.876414][T12153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.234154][ T5862] hid_parser_main: 49 callbacks suppressed [ 362.234179][ T5862] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x3 [ 362.234221][ T5862] gt683r_led 0003:1770:FF00.0019: unknown global tag 0xe [ 362.234238][ T5862] gt683r_led 0003:1770:FF00.0019: item 0 1 1 14 parsing failed [ 362.234973][ T5862] gt683r_led 0003:1770:FF00.0019: hid parsing failed [ 362.239757][ T5862] gt683r_led 0003:1770:FF00.0019: probe with driver gt683r_led failed with error -22 [ 362.436708][ T5912] usb 9-1: USB disconnect, device number 5 [ 362.838476][T12153] veth0_vlan: entered promiscuous mode [ 362.867332][T12153] veth1_vlan: entered promiscuous mode [ 362.943920][T12153] veth0_macvtap: entered promiscuous mode [ 362.967012][T12153] veth1_macvtap: entered promiscuous mode [ 363.091733][T12153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.241063][ T5484] 8021q: adding VLAN 0 to HW filter on device eth8 [ 363.346679][T12153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.377484][T12547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.377606][T12547] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 363.418616][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.433601][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.433895][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.433933][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.665583][T12556] nbd2: detected capacity change from 0 to 127 [ 363.699428][ T5138] block nbd2: Receive control failed (result -104) [ 364.223612][T12547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 364.223697][T12547] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 364.572349][T12547] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 364.586343][T12547] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 364.954417][T12547] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 365.093976][T12547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.094073][T12547] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 365.094852][T12569] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input39 [ 365.189604][T12547] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 365.287648][T12547] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 365.287779][T12547] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 365.426332][ C1] sd 0:0:1:0: [sda] tag#9642 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 365.426396][ C1] sd 0:0:1:0: [sda] tag#9642 CDB: Write(6) 0a 00 4e 22 00 00 [ 365.442593][ T5826] Bluetooth: hci2: command 0x0405 tx timeout [ 365.694870][T12547] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 365.820233][ T5138] Bluetooth: hci0: connection err: -111 [ 366.218230][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.218249][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.242467][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 366.345272][T12605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.423498][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.423518][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.642415][ T5138] Bluetooth: hci6: command 0x0c1a tx timeout [ 366.819389][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2859'. [ 367.002898][ T135] block nbd2: Connection timed out, retrying (0/1 alive) [ 367.014230][ T135] block nbd2: Connection timed out, retrying (0/1 alive) [ 367.014291][ T135] block nbd2: Connection timed out, retrying (0/1 alive) [ 367.014336][ T135] block nbd2: Connection timed out, retrying (0/1 alive) [ 367.014644][ T135] block nbd2: Dead connection, failed to find a fallback [ 367.014664][ T135] block nbd2: shutting down sockets [ 367.014676][ T135] blk_print_req_error: 53 callbacks suppressed [ 367.014687][ T135] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.014711][ T135] buffer_io_error: 54 callbacks suppressed [ 367.014720][ T135] Buffer I/O error on dev nbd2, logical block 3, async page read [ 367.015146][ T135] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.015172][ T135] Buffer I/O error on dev nbd2, logical block 2, async page read [ 367.015241][ T135] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.016411][ T135] Buffer I/O error on dev nbd2, logical block 1, async page read [ 367.016485][ T135] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.016507][ T135] Buffer I/O error on dev nbd2, logical block 0, async page read [ 367.068201][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.068232][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 367.068382][T10559] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.068403][T10559] Buffer I/O error on dev nbd2, logical block 1, async page read [ 367.068529][T10559] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.068558][T10559] Buffer I/O error on dev nbd2, logical block 2, async page read [ 367.068683][T10559] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.068703][T10559] Buffer I/O error on dev nbd2, logical block 3, async page read [ 367.068838][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.068859][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 367.068985][T10559] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.069006][T10559] Buffer I/O error on dev nbd2, logical block 1, async page read [ 367.087392][T10559] ldm_validate_partition_table(): Disk read failed. [ 367.103076][T10559] Dev nbd2: unable to read RDB block 0 [ 367.121953][T10559] nbd2: unable to read partition table [ 367.122624][ T5138] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.362253][ T5138] Bluetooth: hci5: command 0x0c1a tx timeout [ 367.400060][T10559] ldm_validate_partition_table(): Disk read failed. [ 367.401204][T10559] Dev nbd2: unable to read RDB block 0 [ 367.406723][T10559] nbd2: unable to read partition table [ 367.529599][ T5826] Bluetooth: hci2: command 0x0405 tx timeout [ 367.884435][ T5913] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 368.034811][ T5913] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 368.034854][ T5913] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 368.034879][ T5913] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 368.071300][ T5913] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 368.071331][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.071351][ T5913] usb 10-1: Product: syz [ 368.071364][ T5913] usb 10-1: Manufacturer: syz [ 368.071379][ T5913] usb 10-1: SerialNumber: syz [ 368.115771][ T5913] usb 10-1: config 0 descriptor?? [ 368.116554][T12643] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 368.116671][T12643] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 368.147074][ T5913] usb 10-1: ucan: probing device on interface #0 [ 368.250638][T12647] TCP: TCP_TX_DELAY enabled [ 368.322484][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 368.722852][ T5826] Bluetooth: hci6: command 0x0c1a tx timeout [ 368.764834][ T5913] ucan 10-1:0.0: probe with driver ucan failed with error -22 [ 368.977166][ T5895] usb 10-1: USB disconnect, device number 2 [ 369.202876][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.211226][ T5826] Bluetooth: hci0: adv larger than maximum supported [ 369.211238][ T5826] Bluetooth: hci0: Malformed LE Event: 0x0d [ 369.290402][T12660] sctp: [Deprecated]: syz.8.2878 (pid 12660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.290402][T12660] Use struct sctp_sack_info instead [ 369.442340][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 370.341696][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.379392][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.380910][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.411334][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.418398][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.802307][ T5138] Bluetooth: hci6: command 0x0c1a tx timeout [ 370.937388][T12691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.184781][T12696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.284975][ T5138] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.531515][ T5138] Bluetooth: hci5: command 0x0c1a tx timeout [ 371.711396][T12708] tap0: tun_chr_ioctl cmd 1074025675 [ 371.711418][T12708] tap0: persist enabled [ 372.215544][T12676] chnl_net:caif_netlink_parms(): no params data found [ 372.488226][T12676] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.488402][T12676] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.488565][T12676] bridge_slave_0: entered allmulticast mode [ 372.491701][T12676] bridge_slave_0: entered promiscuous mode [ 372.506787][T12676] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.508451][T12676] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.508659][T12676] bridge_slave_1: entered allmulticast mode [ 372.513541][T12676] bridge_slave_1: entered promiscuous mode [ 372.562488][ T5138] Bluetooth: hci4: command tx timeout [ 372.603711][T12676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.608126][ T10] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 372.615708][T12676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.718893][T12676] team0: Port device team_slave_0 added [ 372.723325][T12676] team0: Port device team_slave_1 added [ 372.756982][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.757017][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 372.757041][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 372.757079][ T10] usb 10-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 372.757101][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.802655][T12676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.802672][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.802696][T12676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.806756][T12676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.806770][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.806794][T12676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.821448][ T10] usb 10-1: config 0 descriptor?? [ 372.844696][T12728] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 373.283628][ T10] gt683r_led 0003:1770:FF00.001A: unknown main item tag 0x3 [ 373.283665][ T10] gt683r_led 0003:1770:FF00.001A: unknown global tag 0xe [ 373.283680][ T10] gt683r_led 0003:1770:FF00.001A: item 0 1 1 14 parsing failed [ 373.285821][ T10] gt683r_led 0003:1770:FF00.001A: hid parsing failed [ 373.285931][ T10] gt683r_led 0003:1770:FF00.001A: probe with driver gt683r_led failed with error -22 [ 373.503622][T12676] hsr_slave_0: entered promiscuous mode [ 373.510272][ T5912] usb 10-1: USB disconnect, device number 3 [ 373.518932][T12676] hsr_slave_1: entered promiscuous mode [ 373.519812][T12676] debugfs: 'hsr0' already exists in 'hsr' [ 373.534984][T12676] Cannot create hsr debugfs directory [ 373.602425][ T5138] Bluetooth: hci5: command 0x0c1a tx timeout [ 374.387012][T12758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.586215][T12758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 374.586408][T12758] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 374.586585][T12758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 374.609560][T12758] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 374.688834][T12758] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 374.850203][ T5829] Bluetooth: hci5: connection err: -111 [ 375.031984][ T5138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.108673][ T5138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.114290][ T5138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.131125][ T5138] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.186458][ T5138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.155065][T12563] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.392707][ T32] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 376.483736][ T5138] Bluetooth: hci2: command 0x0405 tx timeout [ 376.555428][ T32] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 376.555454][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.555470][ T32] usb 9-1: Product: syz [ 376.555482][ T32] usb 9-1: Manufacturer: syz [ 376.555493][ T32] usb 9-1: SerialNumber: syz [ 376.563982][ T32] usb 9-1: config 0 descriptor?? [ 376.619888][ T32] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 376.642756][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 376.642801][ T5138] Bluetooth: hci4: command 0x040f tx timeout [ 376.643775][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.433880][ T32] gspca_stk1135: reg_w 0x5 err -71 [ 377.434921][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 377.434934][ T32] gspca_stk1135: Sensor write failed [ 377.434959][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 377.434968][ T32] gspca_stk1135: Sensor write failed [ 377.434994][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 377.435003][ T32] gspca_stk1135: Sensor read failed [ 377.435029][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 377.435038][ T32] gspca_stk1135: Sensor read failed [ 377.435045][ T32] gspca_stk1135: Detected sensor type unknown (0x0) [ 377.435074][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 377.435083][ T32] gspca_stk1135: Sensor read failed [ 377.435108][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 377.435117][ T32] gspca_stk1135: Sensor read failed [ 377.435140][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 377.435149][ T32] gspca_stk1135: Sensor write failed [ 377.435174][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 377.435183][ T32] gspca_stk1135: Sensor write failed [ 377.435259][ T32] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 377.466085][ T32] usb 9-1: USB disconnect, device number 6 [ 377.522813][ T5829] Bluetooth: hci6: command tx timeout [ 377.800475][T12563] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.475961][T12563] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.679128][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.679224][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.726919][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 379.060127][ T5829] Bluetooth: hci7: command 0x1003 tx timeout [ 379.070481][ T5138] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 379.148473][T12563] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.602967][ T5138] Bluetooth: hci6: command tx timeout [ 380.159789][T12764] chnl_net:caif_netlink_parms(): no params data found [ 380.574753][ T38] INFO: task syz-executor:6503 blocked for more than 143 seconds. [ 380.574779][ T38] Tainted: G L syzka[ 380.574779][ T38] Tainted: G L syzkaller #0 [ 380.574789][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.574801][ T38] task:syz-executor state:D stack:22048 pid:6503 tgid:6503 ppid:1 task_flags:0x400140 flags:0x00080002 [ 380.574865][ T38] Call Trace: [ 380.574872][ T38] [ 380.574885][ T38] __schedule+0x169e/0x54f0 [ 380.574926][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.574952][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 380.574979][ T38] ? rt_spin_lock+0x1e0/0x400 [ 380.574999][ T38] ? __pfx___schedule+0x10/0x10 [ 380.575027][ T38] ? schedule+0x90/0x360 [ 380.575053][ T38] schedule+0x164/0x360 [ 380.575076][ T38] fuse_chan_wait_aborted+0x15b/0x250 [ 380.575109][ T38] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 380.575137][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 380.575159][ T38] ? __pfx_fuse_chan_abort+0x10/0x10 [ 380.575196][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 380.575222][ T38] fuse_conn_destroy+0x1e7/0x3e0 [ 380.575246][ T38] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 380.575266][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.575290][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 380.575311][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 380.575342][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 380.575372][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.575395][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.575417][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 380.575442][ T38] fuse_kill_sb_anon+0x1ef/0x270 [ 380.575469][ T38] deactivate_locked_super+0xbc/0x130 [ 380.575495][ T38] cleanup_mnt+0x437/0x4d0 [ 380.575520][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.575552][ T38] task_work_run+0x1d9/0x270 [ 380.575582][ T38] ? __pfx_task_work_run+0x10/0x10 [ 380.575615][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.575637][ T38] exit_to_user_mode_loop+0xed/0x480 [ 380.575660][ T38] ? rcu_is_watching+0x15/0xb0 [ 380.575688][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.575709][ T38] do_syscall_64+0x33e/0xf80 [ 380.575732][ T38] ? trace_irq_disable+0x3b/0x140 [ 380.575753][ T38] ? clear_bhb_loop+0x40/0x90 [ 380.575777][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.575802][ T38] RIP: 0033:0x7fcfb7e9da57 [ 380.575824][ T38] RSP: 002b:00007ffc3fa334d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 380.575844][ T38] RAX: 0000000000000000 RBX: 00007fcfb7f32048 RCX: 00007fcfb7e9da57 [ 380.575858][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3fa33590 [ 380.575871][ T38] RBP: 00007ffc3fa33590 R08: 00007ffc3fa34590 R09: 00000000ffffffff [ 380.575884][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3fa34620 [ 380.575897][ T38] R13: 00007fcfb7f32048 R14: 00000000000360e8 R15: 00007ffc3fa34660 [ 380.575928][ T38] [ 380.575993][ T38] [ 380.575993][ T38] Showing all locks held in the system: [ 380.576005][ T38] 3 locks held by kworker/1:0/32: [ 380.576016][ T38] #0: ffff88813ff5f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 380.585367][ T38] #1: ffffc90000a6fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 380.585396][ T38] #2: ffff8880294b2260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 380.585431][ T38] 1 lock held by khungtaskd/38: [ 380.585437][ T38] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 380.585495][ T38] 1 lock held by klogd/5178: [ 380.585501][ T38] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 380.585531][ T38] 1 lock held by dhcpcd/5484: [ 380.585537][ T38] #0: ffffffff8f79f5f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_delroute+0x130/0x330 [ 380.585562][ T38] 2 locks held by getty/5581: [ 380.585567][ T38] #0: ffff888037a460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 380.585593][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 380.585623][ T38] 1 lock held by syz-executor/5820: [ 380.585629][ T38] #0: ffff88802fea60d0 (&type->s_umount_key#58){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 380.585659][ T38] 1 lock held by syz-executor/5822: [ 380.585665][ T38] #0: ffff88803687a0d0 (&type->s_umount_key#58){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 380.585698][ T38] 1 lock held by syz-executor/6503: [ 380.585704][ T38] #0: ffff88803723e0d0 (&type->s_umount_key#58){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 380.585737][ T38] 3 locks held by kworker/0:7/10502: [ 380.585743][ T38] #0: ffff88813ff5f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 380.585766][ T38] #1: ffffc900041a7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 380.585790][ T38] #2: ffff888029682260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 380.585821][ T38] 6 locks held by kworker/u8:13/12563: [ 380.585827][ T38] #0: ffff88801aea6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 380.585850][ T38] #1: ffffc90004d97c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 380.585873][ T38] #2: ffffffff8f790ce0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 380.585901][ T38] #3: ffff888029681160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 380.585926][ T38] #4: ffff888034d70310 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 380.585953][ T38] #5: ffffffff8f79f5f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 380.585981][ T38] 4 locks held by kworker/u8:16/12566: [ 380.585987][ T38] #0: ffff888034081938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 380.586010][ T38] #1: ffffc90005197c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 380.586034][ T38] #2: ffff8880b8642d98 (&pcp->lock){+.+.}-{3:3}, at: __free_frozen_pages+0x7e5/0x10f0 [ 380.586062][ T38] #3: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 380.586087][ T38] 9 locks held by syz-executor/12676: [ 380.586093][ T38] #0: ffff888037f92480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 380.586122][ T38] #1: ffff88803d7d6478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 380.586155][ T38] #2: ffff888028c864b8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 380.586191][ T38] #3: ffffffff8f004318 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 380.586219][ T38] #4: ffff88802b57d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 380.586244][ T38] #5: ffff88805dbc6310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc30 [ 380.586271][ T38] #6: ffffffff8f79f5f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x894/0x1170 [ 380.586298][ T38] #7: ffff88804cfcc318 (&sb->s_type->i_mutex_key#4/1){+.+.}-{4:4}, at: start_dirop+0x4f/0x90 [ 380.586328][ T38] #8: ffff8880b86462b0 ((&pcs->lock)){+.+.}-{3:3}, at: kmem_cache_alloc_lru_noprof+0x1a8/0x680 [ 380.586357][ T38] 2 locks held by syz-executor/12764: [ 380.586362][ T38] #0: ffffffff8fcf28f0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 380.586393][ T38] #1: ffffffff8f79f5f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 380.586421][ T38] [ 380.586424][ T38] ============================================= [ 380.586424][ T38] [ 380.586434][ T38] NMI backtrace for cpu 0 [ 380.586449][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.586463][ T38] Tainted: [L]=SOFTLOCKUP [ 380.586467][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.586474][ T38] Call Trace: [ 380.586479][ T38] [ 380.586483][ T38] dump_stack_lvl+0xe8/0x150 [ 380.586496][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 380.586512][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 380.586525][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 380.586542][ T38] sys_info+0x135/0x170 [ 380.586556][ T38] watchdog+0xfd3/0x1030 [ 380.586571][ T38] ? watchdog+0x1c9/0x1030 [ 380.586584][ T38] kthread+0x388/0x470 [ 380.586597][ T38] ? __pfx_watchdog+0x10/0x10 [ 380.586607][ T38] ? __pfx_kthread+0x10/0x10 [ 380.586620][ T38] ret_from_fork+0x514/0xb70 [ 380.586633][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 380.586643][ T38] ? __switch_to+0xc79/0x1410 [ 380.586660][ T38] ? __pfx_kthread+0x10/0x10 [ 380.586673][ T38] ret_from_fork_asm+0x1a/0x30 [ 380.586693][ T38] [ 380.586696][ T38] Sending NMI from CPU 0 to CPUs 1: [ 380.586733][ C1] NMI backtrace for cpu 1 [ 380.586748][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.586769][ C1] Tainted: [L]=SOFTLOCKUP [ 380.586774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.586784][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 380.586805][ C1] Code: eb 83 02 e9 c3 c6 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 1b 29 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 380.586818][ C1] RSP: 0018:ffffc900001e7e20 EFLAGS: 00000242 [ 380.586832][ C1] RAX: 00000000000bb5ad RBX: ffffffff8199ca4a RCX: 0000000080000001 [ 380.586844][ C1] RDX: 0000000000000001 RSI: ffffffff8d99491e RDI: ffffffff8bca4960 [ 380.586855][ C1] RBP: ffffc900001e7f10 R08: ffff8880b8733e9b R09: 1ffff110170e67d3 [ 380.586866][ C1] R10: dffffc0000000000 R11: ffffed10170e67d4 R12: 0000000000000001 [ 380.586877][ C1] R13: 1ffff11003a54b88 R14: 0000000000000001 R15: 1ffff11003a54b88 [ 380.586888][ C1] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 380.586901][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.586911][ C1] CR2: 000055cdb086c320 CR3: 0000000038e5e000 CR4: 00000000003526f0 [ 380.586926][ C1] Call Trace: [ 380.586932][ C1] [ 380.586937][ C1] default_idle+0x9/0x20 [ 380.586957][ C1] default_idle_call+0x72/0xb0 [ 380.586978][ C1] do_idle+0x36a/0x5f0 [ 380.587002][ C1] ? __pfx_do_idle+0x10/0x10 [ 380.587027][ C1] cpu_startup_entry+0x43/0x60 [ 380.587048][ C1] start_secondary+0x101/0x110 [ 380.587062][ C1] common_startup_64+0x13e/0x147 [ 380.587089][ C1] [ 380.602255][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 380.602278][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.602304][ T38] Tainted: [L]=SOFTLOCKUP [ 380.602311][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.602323][ T38] Call Trace: [ 380.602331][ T38] [ 380.602340][ T38] vpanic+0x56c/0xa60 [ 380.602368][ T38] ? __pfx___schedule+0x10/0x10 [ 380.602390][ T38] ? __pfx_vpanic+0x10/0x10 [ 380.602429][ T38] panic+0xc5/0xd0 [ 380.602450][ T38] ? __pfx_panic+0x10/0x10 [ 380.602472][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 380.602502][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 380.602535][ T38] watchdog+0x102c/0x1030 [ 380.602561][ T38] ? watchdog+0x1c9/0x1030 [ 380.602585][ T38] kthread+0x388/0x470 [ 380.602608][ T38] ? __pfx_watchdog+0x10/0x10 [ 380.602626][ T38] ? __pfx_kthread+0x10/0x10 [ 380.602650][ T38] ret_from_fork+0x514/0xb70 [ 380.602676][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 380.602694][ T38] ? __switch_to+0xc79/0x1410 [ 380.602721][ T38] ? __pfx_kthread+0x10/0x10 [ 380.602745][ T38] ret_from_fork_asm+0x1a/0x30 [ 380.602780][ T38] [ 380.603175][ T38] Kernel Offset: disabled