last executing test programs: 7m11.289232735s ago: executing program 0 (id=890): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7m11.028771752s ago: executing program 0 (id=894): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000000)=0x532) 7m10.189548556s ago: executing program 0 (id=911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000000, 0x0, 0x0) 7m9.269587317s ago: executing program 0 (id=921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 7m9.138744579s ago: executing program 0 (id=924): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x80100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096}) 7m7.810163767s ago: executing program 0 (id=933): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="75c1ccd07a5210306c94e254649640be1983f79c5bfe88cd6a730000606759578db363f48925080034d4ee1384db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5829977dd63ce2c88d43b177e47be6084fe6987e000000000044926ba36073dd60af39", 0x68}, {&(0x7f0000000380)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c98849b5aac3bcce677efe2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e408cb5d1991683fcbda9a14049906002cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e", 0x82}], 0x2}, 0x8000) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/254, 0xe9}, {&(0x7f0000000f40)=""/4080}, {&(0x7f0000000180)=""/63}], 0x1, &(0x7f0000003d00)=""/4056, 0xce7}, 0x0) close(r0) 7m7.42109141s ago: executing program 32 (id=933): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="75c1ccd07a5210306c94e254649640be1983f79c5bfe88cd6a730000606759578db363f48925080034d4ee1384db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5829977dd63ce2c88d43b177e47be6084fe6987e000000000044926ba36073dd60af39", 0x68}, {&(0x7f0000000380)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c98849b5aac3bcce677efe2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e408cb5d1991683fcbda9a14049906002cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e", 0x82}], 0x2}, 0x8000) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/254, 0xe9}, {&(0x7f0000000f40)=""/4080}, {&(0x7f0000000180)=""/63}], 0x1, &(0x7f0000003d00)=""/4056, 0xce7}, 0x0) close(r0) 3m38.074641345s ago: executing program 3 (id=3427): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3}) 3m37.984270022s ago: executing program 3 (id=3436): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) 3m37.829881595s ago: executing program 3 (id=3430): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) 3m37.467738622s ago: executing program 3 (id=3434): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) 3m37.279702609s ago: executing program 3 (id=3438): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m36.032855479s ago: executing program 3 (id=3448): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 3m35.641210793s ago: executing program 33 (id=3448): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 3m35.616956639s ago: executing program 1 (id=3451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x29c, 0x0, 0x2}, {0x3b2, 0x0, 0x1}, {0x770, 0x0, 0x2}]}) 3m35.102320597s ago: executing program 1 (id=3453): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m35.04352312s ago: executing program 1 (id=3454): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 3m34.938618111s ago: executing program 1 (id=3455): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) 3m34.907938292s ago: executing program 1 (id=3456): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 3m34.102405057s ago: executing program 1 (id=3462): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000380)=@can={{}, 0x0, 0x3, 0x4, 0x0, "000000cef4949800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) 3m33.872645473s ago: executing program 34 (id=3462): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000380)=@can={{}, 0x0, 0x3, 0x4, 0x0, "000000cef4949800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) 3m23.030122175s ago: executing program 2 (id=3511): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) getpeername(r0, 0x0, &(0x7f0000000100)) 3m22.918795553s ago: executing program 2 (id=3513): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x7, @private2={0xfc, 0x2, '\x00', 0x13}, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 3m22.656754145s ago: executing program 2 (id=3515): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff03, 0x0) 3m21.722045251s ago: executing program 2 (id=3519): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 3m21.614164973s ago: executing program 2 (id=3520): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x9, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)="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", 0xff}, {&(0x7f00000001c0)="6b65b245210eb4947e96e2a46e681e1d7db684f7f93ce2fad4d85c3872222da9a0d524394eb3777e95af9d78620acf7f2cc5120af2ba215d1f7457569f50fd594816891a3f01fc2f34da52a95c7a4c47a977856aaf0cbd63d1217caceb26516425eb0528e337f49f1c32c4dede43528eca6fee667c89b595d4b09fe4", 0x7c}, {&(0x7f0000000240)="25f0d950b7b7666562d73be020c81b0f53f1e5c0b6b34c80dcf75f635dc9cb66c3837056126a71de71f0fffa55dc53fe9ea5f7f1109718f6e681456a4960b6e42af1c5f886c795596b8222b354547a8738d2cdebab08cc6ac1cc673ae1", 0x5d}, {&(0x7f00000002c0)="8458282e9a4af07ae78ae6d0f77d2d578ba2d0d4e345694b586c2bbcef9ec653c1c7fb8d52107aa921075f112e4a7cd67be8a65e684e8e0c53752f2a999f8e19191cd0f3e337da873a52fa77904624c54a061d38f71bfc0672f88534bdd1d7cab7f707a3a15b3707c79b6184a07b9ca0c11a1804993b32bd3d66a7a9c19e629e7e2fade200b75b733c80629a042ed88bb80c0ff3d663cae04452f2603a88b507881bf48f77108e2fdf94c8f8a437a8eb7f2f5b9f70b9db7364e3ee5e09c1b2757eeb5305e6007706900f0536443d82cddab70c184f5b44e9111166f7f8df88709f027efdaa9abbc7a691d454cd3cce42c0a735659308face72314b670fe0a56c4d8ffbfcb10e71de95db2fdcf2e4680ebb63af9f7c8ea9413a1a32715980361a5a255caede69768935ae2f6df2bb08ea683a61049aeea02582963dd9d2c2e041fa48b4bc708818a8ac3850adedde8adc8e6afd7bbe8b476e57af66fc4d94777a61a3311b3f1c94f288e80894e1af1d04802d6bc40200116f4d4311e1ed1ce60253063b26b92db9c99fe2d510c7de1b19227628eac5fa8c33cf74f285c8aecfaeb0f25ac26a55f97a7dbcb4fd2fbab57a19920eaeb0d42f0387363419f5fe80be759a6e5c9ca0edb6c60e3f69aa506a29fae99b5fc349d298823dfa2b88a9636dd3029a440cef7877adeff0aa4987a9f85e067f08b3406e6b678bedc9b3f22ca892775f9bcbf5df35af93f9667762d28b2d0342477d8e06d042f3a4fb42b667d964cece207eee7ea93c90f68570f8252d0b6abc75a4c5ebbbf47f0ee5511daccee3ef01f75e0571c3d9d7eab7610a95ae2da6508026325480e28e5d07d38b280f35b79897c5af062ff93e805e797aeb031c31771460a967ec5fb3a4f833a702dfcc7cbbbdd57ca93277ac55402c69f361eaf965a47548390d3fcf0c6eb056f83435f3690c21a082c686caeb82ccec7319b5cd2a51de665c6c7203f072ce06856c722136af0ae8dcf79ee8bad494929e41d98e9e0897ce5d2b1c6eb701070ceee859a8cb9b171fbd0e18e5d8ff5961341b7ae2f671a7d7cfbcca9f4f2a32fe8e32135395f618426f4e00308392015cdeabd8ee17cf55a66944199ef1032729d8507681092947f59597df472ae938c483429171e61d7cc3d790baa287ef64f868c5308a676710608c924dc8d3db21205f6d75185595ff58d4e3f4253efa970676e33d28a2028f9711ea5b126a50ec3c99e472e45615266ff040492bb0d9deaf94462879e0567dd7339d9a8e2097b33b926b192d8055ac75a22cc8b48527030dabeea99eb6d62d8ef0e6468f7df94c3a32879e336e2897690ed975edc638174366d5bc", 0x3c1}], 0x4}, 0x7101}], 0x1, 0x4001c00) 3m19.776707909s ago: executing program 2 (id=3525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x204e) 3m19.54396693s ago: executing program 35 (id=3525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x204e) 2m26.984066224s ago: executing program 4 (id=3942): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x2, 0x1) sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.88218259s ago: executing program 4 (id=3944): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfffd}, &(0x7f0000000000)=0x90) 2m26.662093023s ago: executing program 4 (id=3948): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) read(r1, 0x0, 0x0) 2m24.889736282s ago: executing program 4 (id=3973): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000100)) 2m24.783528607s ago: executing program 4 (id=3975): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m24.631928349s ago: executing program 4 (id=3979): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={0x30, r0, 0x1, 0xffffffff, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x30}}, 0x10) 2m22.177377862s ago: executing program 6 (id=4011): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m22.042481948s ago: executing program 6 (id=4013): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x9}}, 0x10) 2m22.042226844s ago: executing program 6 (id=4014): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m21.736494337s ago: executing program 6 (id=4015): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 2m21.68167606s ago: executing program 6 (id=4016): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 2m21.047874016s ago: executing program 6 (id=4020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0x1888b000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 2m20.735651464s ago: executing program 36 (id=4020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0x1888b000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 2m9.428150907s ago: executing program 37 (id=3979): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={0x30, r0, 0x1, 0xffffffff, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x30}}, 0x10) 2.563804474s ago: executing program 7 (id=5394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003f40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.563112327s ago: executing program 5 (id=5395): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10094}, 0x4000) 2.311582926s ago: executing program 7 (id=5397): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2.311423169s ago: executing program 5 (id=5398): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x2}) 1.736696193s ago: executing program 7 (id=5402): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fanotify_init(0x18, 0x1000) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x4000003b, r2, 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1) 1.598493875s ago: executing program 8 (id=5403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x22020600) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.494486996s ago: executing program 7 (id=5404): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r1) 1.317135874s ago: executing program 9 (id=5405): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10094}, 0x4000) 1.196043725s ago: executing program 8 (id=5406): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003f40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.192488471s ago: executing program 5 (id=5415): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 1.157865241s ago: executing program 9 (id=5407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x109881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.091836445s ago: executing program 7 (id=5408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) 860.196098ms ago: executing program 9 (id=5409): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 750.446925ms ago: executing program 9 (id=5410): mkdirat(0xffffffffffffff9c, 0x0, 0x181) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)) 750.283235ms ago: executing program 5 (id=5412): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x82, 0x2, 0x7, 0x0, 0x2, 0xf3b}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1fd) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 749.330544ms ago: executing program 8 (id=5420): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24004880) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="202b7e6dd200"}) 545.230429ms ago: executing program 5 (id=5413): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x5, r0, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 542.703682ms ago: executing program 9 (id=5423): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 541.141089ms ago: executing program 8 (id=5424): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc001001b}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 187.763121ms ago: executing program 9 (id=5414): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x2}) 187.575142ms ago: executing program 8 (id=5416): syz_kvm_add_vcpu$x86(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x4}) 187.09444ms ago: executing program 5 (id=5417): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvtap0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x40, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}) 642.869µs ago: executing program 7 (id=5418): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10094}, 0x4000) 0s ago: executing program 8 (id=5429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x1, @loopback, 0xfffffff6}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) kernel console output (not intermixed with test programs): [ 395.756353][T13710] veth1_vlan: entered promiscuous mode [ 395.760981][T13680] veth1_macvtap: entered promiscuous mode [ 395.898870][T13909] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.152421][T13991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.181315][ T5829] Bluetooth: hci0: command tx timeout [ 396.231931][T13680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.245446][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.245615][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.308904][T13680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.325676][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.325831][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.532791][T13991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.591777][ T5485] 8021q: adding VLAN 0 to HW filter on device eth12 [ 396.607951][T13710] veth0_macvtap: entered promiscuous mode [ 396.622218][ T2429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.646533][ T2429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.677343][ T2429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.700562][T13710] veth1_macvtap: entered promiscuous mode [ 396.724208][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.961817][T13991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.333276][T13710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.710349][T13710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.987852][ T1533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.059500][ T1533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.061371][ T1533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.061617][ T1533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.255222][ T5829] Bluetooth: hci0: command tx timeout [ 399.031735][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.031755][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.693681][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.693698][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.750394][T13909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.804352][T13991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.853914][T13991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.870127][T13991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 399.930161][T13991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.933963][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.933980][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.969697][T13991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.024384][T13991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.042505][T13991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.099816][T13991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.373066][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.373088][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.694129][T13909] veth0_vlan: entered promiscuous mode [ 400.740400][T13909] veth1_vlan: entered promiscuous mode [ 400.767426][T14114] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3550'. [ 401.033572][T13991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.169588][T14121] loop5: detected capacity change from 0 to 7 [ 401.213020][T14121] Dev loop5: unable to read RDB block 7 [ 401.213058][T14121] loop5: AHDI p1 [ 401.213089][T14121] loop5: partition table partially beyond EOD, truncated [ 401.303576][T13909] veth0_macvtap: entered promiscuous mode [ 401.319677][ T5190] Dev loop5: unable to read RDB block 7 [ 401.319703][ T5190] loop5: AHDI p1 [ 401.319734][ T5190] loop5: partition table partially beyond EOD, truncated [ 401.322396][T13991] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.444923][T13909] veth1_macvtap: entered promiscuous mode [ 401.461454][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.461575][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.464946][T14124] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3553'. [ 401.559423][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.559661][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.671427][T13909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.743785][T13909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.792770][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.833681][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.850535][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.862971][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.675079][ T818] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 402.895294][ T818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.895328][ T818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.895349][ T818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.895389][ T818] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.895411][ T818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.008952][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.008971][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.113330][ T818] usb 6-1: config 0 descriptor?? [ 403.124792][ T818] hub 6-1:0.0: USB hub found [ 403.358110][ T818] hub 6-1:0.0: 9 ports detected [ 403.360145][ T818] hub 6-1:0.0: insufficient power available to use all downstream ports [ 403.564010][ T818] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 403.564033][ T818] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 403.627907][ T818] usb 6-1: USB disconnect, device number 2 [ 403.754405][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.754426][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.972294][T13991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.412373][T14198] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3572'. [ 405.536303][T13991] veth0_vlan: entered promiscuous mode [ 405.731358][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3575'. [ 405.788627][T13991] veth1_vlan: entered promiscuous mode [ 405.818214][T14208] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3577'. [ 405.818235][T14208] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 406.223405][T13991] veth0_macvtap: entered promiscuous mode [ 406.251648][T13991] veth1_macvtap: entered promiscuous mode [ 406.380573][T13991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.402829][T14220] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 406.420135][T14220] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 406.428585][T13991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.461505][T14223] netlink: 'syz.6.3584': attribute type 83 has an invalid length. [ 406.474873][ T1533] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.489920][ T1533] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.505465][ T1533] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.568340][ T191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.981375][T14251] netlink: 'syz.5.3595': attribute type 10 has an invalid length. [ 407.981396][T14251] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3595'. [ 408.307606][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.307623][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.503277][ T1533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.503297][ T1533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.966743][T14274] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3602'. [ 409.443181][T14239] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 409.649340][T14239] usb 7-1: Using ep0 maxpacket: 16 [ 409.658827][T14239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.658859][T14239] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 409.658896][T14239] usb 7-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 409.658916][T14239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.673107][T14239] usb 7-1: config 0 descriptor?? [ 410.149394][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.149434][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.149459][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.149482][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.151183][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.151221][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.151247][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.151270][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.151294][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.151320][T14239] aquacomputer_d5next 0003:0C70:F003.002B: unknown main item tag 0x0 [ 410.181414][T14239] aquacomputer_d5next 0003:0C70:F003.002B: hidraw0: USB HID v0.0a Device [HID 0c70:f003] on usb-dummy_hcd.6-1/input0 [ 410.380871][T14239] usb 7-1: USB disconnect, device number 2 [ 410.691785][T14307] fido_id[14307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 411.826664][T14365] netlink: 'syz.4.3632': attribute type 83 has an invalid length. [ 412.007036][T14370] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3636'. [ 412.500713][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3642'. [ 412.500742][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3642'. [ 412.500754][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3642'. [ 413.189001][T14423] netlink: 'syz.7.3653': attribute type 10 has an invalid length. [ 413.569709][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.583879][T14423] team0: Port device netdevsim0 added [ 414.020244][T14453] netlink: 'syz.4.3664': attribute type 2 has an invalid length. [ 414.020266][T14453] netlink: 'syz.4.3664': attribute type 5 has an invalid length. [ 414.075128][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 414.226147][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 414.228512][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 414.232619][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 414.232646][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 414.232666][ T10] usb 6-1: Product: syz [ 414.232680][ T10] usb 6-1: Manufacturer: syz [ 414.232694][ T10] usb 6-1: SerialNumber: syz [ 414.296473][ T10] usb 6-1: config 0 descriptor?? [ 414.297652][T14444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 414.300013][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 414.300046][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 414.878300][ T10] usb 6-1: USB disconnect, device number 3 [ 415.188520][T14497] binder: 14496:14497 ioctl c0306201 0 returned -14 [ 415.639670][T14513] tap0: tun_chr_ioctl cmd 1074025672 [ 415.639691][T14513] tap0: ignored: set checksum enabled [ 416.672210][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3694'. [ 417.007286][T14078] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 417.171704][T14078] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 417.171736][T14078] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.171756][T14078] usb 7-1: Product: syz [ 417.171770][T14078] usb 7-1: Manufacturer: syz [ 417.171783][T14078] usb 7-1: SerialNumber: syz [ 417.223489][T14078] usb 7-1: config 0 descriptor?? [ 417.302939][T14577] tipc: Started in network mode [ 417.302966][T14577] tipc: Node identity ac14140f, cluster identity 4711 [ 417.303269][T14577] tipc: New replicast peer: 255.255.255.255 [ 417.446200][T14577] tipc: Enabled bearer , priority 10 [ 417.452892][T14078] usb 7-1: ignoring: probably an ADSL modem [ 417.858958][T14078] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 418.084355][ T10] usb 7-1: USB disconnect, device number 3 [ 418.415140][ T10] tipc: Node number set to 2886997007 [ 419.392433][ T5829] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 419.392625][ T5829] Bluetooth: hci3: Injecting HCI hardware error event [ 419.396024][ T60] Bluetooth: hci3: hardware error 0x00 [ 420.680288][T14690] netlink: 14532 bytes leftover after parsing attributes in process `syz.5.3746'. [ 421.775693][ T60] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 422.025158][ T5811] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 422.080295][T14736] netlink: 'syz.5.3768': attribute type 27 has an invalid length. [ 422.080315][T14736] netlink: 'syz.5.3768': attribute type 1 has an invalid length. [ 422.147629][T14738] tmpfs: Too few inodes for current use [ 422.222027][ T5811] usb 7-1: config 120 has an invalid interface number: 138 but max is 0 [ 422.222055][ T5811] usb 7-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 422.222072][ T5811] usb 7-1: config 120 has no interface number 0 [ 422.222101][ T5811] usb 7-1: config 120 interface 138 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 422.222121][ T5811] usb 7-1: config 120 interface 138 has no altsetting 0 [ 422.225260][ T5811] usb 7-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 422.225289][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.225312][ T5811] usb 7-1: Product: syz [ 422.225324][ T5811] usb 7-1: Manufacturer: syz [ 422.225340][ T5811] usb 7-1: SerialNumber: syz [ 422.540841][ T5811] ums-usbat 7-1:120.138: USB Mass Storage device detected [ 422.580946][ T5811] ums-usbat 7-1:120.138: This device (03f0,0307,0001 S ee P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 422.580946][ T5811] Please send a copy of this message to and [ 422.779657][ T5811] usb 7-1: USB disconnect, device number 4 [ 422.854671][T14751] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 423.239773][ T10] hid (null): global environment stack underflow [ 423.333790][T14239] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 423.334086][T14239] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 423.334391][T14239] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 423.334652][T14239] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 423.334667][T14239] rtc rtc0: __rtc_set_alarm: err=-22 [ 423.418572][ T10] hid-generic 0005:4C4A:0004.002C: global environment stack underflow [ 423.418591][ T10] hid-generic 0005:4C4A:0004.002C: item 0 0 1 11 parsing failed [ 423.419387][ T10] hid-generic 0005:4C4A:0004.002C: probe with driver hid-generic failed with error -22 [ 424.215231][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 424.369093][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 424.385825][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 424.410265][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 424.410296][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.410317][ T10] usb 5-1: Product: syz [ 424.410330][ T10] usb 5-1: Manufacturer: syz [ 424.410345][ T10] usb 5-1: SerialNumber: syz [ 424.651537][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 425.007419][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3801'. [ 425.263712][ T10] gspca_vc032x: reg_r err -71 [ 425.263829][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263841][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263850][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263858][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263866][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263873][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263881][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263890][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263899][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263906][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263914][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263922][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263930][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263937][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263945][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263953][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263961][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263970][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.263978][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.264012][ T10] gspca_vc032x: Unknown sensor... [ 425.264097][ T10] vc032x 5-1:12.0: probe with driver vc032x failed with error -22 [ 425.283361][ T10] usb 5-1: USB disconnect, device number 30 [ 425.800575][T14239] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 425.951331][T14239] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.951364][T14239] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.951407][T14239] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 425.951430][T14239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.212567][T14239] usb 6-1: GET_CAPABILITIES returned 0 [ 426.212615][T14239] usbtmc 6-1:16.0: can't read capabilities [ 426.431125][ T5811] usb 6-1: USB disconnect, device number 4 [ 427.168077][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3826'. [ 427.254411][T14866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.917651][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 428.220641][T14906] Bluetooth: MGMT ver 1.23 [ 428.405255][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 428.522840][ C1] sd 0:0:1:0: [sda] tag#2194 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 428.522889][ C1] sd 0:0:1:0: [sda] tag#2194 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 428.565141][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 428.567693][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.567723][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.567745][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 428.567790][ T10] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 428.567812][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.658882][T14925] block nbd5: NBD_DISCONNECT [ 428.661241][ T10] usb 7-1: config 0 descriptor?? [ 428.874615][T14929] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3858'. [ 428.911842][T14929] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3858'. [ 428.912372][T14929] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3858'. [ 429.077834][ T10] hid (null): bogus close delimiter [ 429.077854][ T10] hid (null): global environment stack underflow [ 429.107082][ T10] hid_parser_main: 28 callbacks suppressed [ 429.107107][ T10] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 429.107139][ T10] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 429.107165][ T10] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 429.107190][ T10] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 429.107216][ T10] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 429.107241][ T10] waterforce 0003:1044:7A4D.002D: unknown main item tag 0x0 [ 429.110790][ T10] waterforce 0003:1044:7A4D.002D: reserved main item tag 0xe [ 429.110892][ T10] waterforce 0003:1044:7A4D.002D: bogus close delimiter [ 429.110907][ T10] waterforce 0003:1044:7A4D.002D: item 0 0 2 10 parsing failed [ 429.111675][ T10] waterforce 0003:1044:7A4D.002D: hid parse failed with -22 [ 429.111784][ T10] waterforce 0003:1044:7A4D.002D: probe with driver waterforce failed with error -22 [ 429.159158][T14935] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3861'. [ 429.159195][T14935] netlink: 'syz.5.3861': attribute type 2 has an invalid length. [ 429.255097][ T5879] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 429.313536][T14239] usb 7-1: USB disconnect, device number 5 [ 429.450948][ T5879] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 429.450989][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.451012][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.451031][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 429.456076][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 429.456106][ T5879] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 429.456126][ T5879] usb 5-1: Manufacturer: syz [ 429.470192][ T5879] usb 5-1: config 0 descriptor?? [ 429.893917][ T5879] appleir 0003:05AC:8243.002E: unknown main item tag 0x0 [ 429.942191][ T5879] appleir 0003:05AC:8243.002E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 430.065168][T14239] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 430.178339][ T5811] usb 5-1: USB disconnect, device number 31 [ 430.238934][T14239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 430.238985][T14239] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 430.239010][T14239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.254495][T14239] usb 6-1: config 0 descriptor?? [ 430.257837][T14951] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 430.701074][T14239] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 430.701112][T14239] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 430.701138][T14239] asus 0003:0B05:1ABE.002F: unknown main item tag 0x0 [ 430.760375][T14239] asus 0003:0B05:1ABE.002F: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.5-1/input0 [ 430.917358][ T5879] usb 6-1: USB disconnect, device number 5 [ 430.989113][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3877'. [ 431.595268][ T5811] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 431.641242][T15000] netlink: 'syz.5.3889': attribute type 83 has an invalid length. [ 431.755561][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 431.758881][ T5811] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 431.758907][ T5811] usb 5-1: config 0 has no interface number 0 [ 431.758976][ T5811] usb 5-1: config 0 interface 184 has no altsetting 0 [ 431.761011][ T5811] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 431.761035][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.761053][ T5811] usb 5-1: Product: syz [ 431.761064][ T5811] usb 5-1: Manufacturer: syz [ 431.761075][ T5811] usb 5-1: SerialNumber: syz [ 431.771367][ T5811] usb 5-1: config 0 descriptor?? [ 432.632238][ T5811] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 432.632269][ T5811] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 432.635980][ T5811] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 432.636011][ T5811] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 432.636030][ T5811] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 432.636048][ T5811] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 432.636345][ T5811] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 432.654008][ T5811] usb 5-1: USB disconnect, device number 32 [ 433.080381][T15044] pimreg: tun_chr_ioctl cmd 1074025676 [ 433.080404][T15044] pimreg: owner set to 0 [ 433.188762][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3911'. [ 433.716271][ T5811] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 433.717027][T15067] overlayfs: failed lookup in lower (newroot/97, name='file0', err=-40): overlapping layers [ 433.866144][ T5811] usb 6-1: Using ep0 maxpacket: 32 [ 433.869068][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.869097][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.869134][ T5811] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.869155][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.890636][ T5811] usb 6-1: config 0 descriptor?? [ 433.901578][ T5811] hub 6-1:0.0: USB hub found [ 434.104841][ T5811] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 434.783069][ T5811] hid-generic 0003:046D:C31C.0030: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 434.958625][ T5811] usb 6-1: USB disconnect, device number 6 [ 435.488866][T15115] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3939'. [ 436.145163][T14074] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 436.297160][T14074] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 436.298438][T14074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.298497][T14074] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.298524][T14074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.300111][T14074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.300159][T14074] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.300187][T14074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.301783][T14074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.301836][T14074] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.301861][T14074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.371377][T14074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.371433][T14074] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.371460][T14074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.396135][T14074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.396190][T14074] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.396216][T14074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.453215][T14074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.453273][T14074] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.453300][T14074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.465919][T14074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.465974][T14074] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.466001][T14074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.517747][T14074] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.517796][T14074] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.517827][T14074] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.530169][T14074] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 436.530198][T14074] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 436.530218][T14074] usb 5-1: Product: syz [ 436.530231][T14074] usb 5-1: Manufacturer: syz [ 436.530243][T14074] usb 5-1: SerialNumber: syz [ 436.584495][T14074] usb 5-1: config 0 descriptor?? [ 436.722919][T14074] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 436.861147][ T5879] usb 5-1: USB disconnect, device number 33 [ 436.877488][ T5879] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 437.292794][T15175] veth1_macvtap: left promiscuous mode [ 437.292817][T15175] macsec0: entered promiscuous mode [ 437.346816][T15176] veth1_macvtap: entered promiscuous mode [ 437.348331][T15176] macsec0: left promiscuous mode [ 437.851691][T15199] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3976'. [ 438.459490][T15226] netlink: 14478 bytes leftover after parsing attributes in process `syz.6.3989'. [ 438.595699][ T5879] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 438.745438][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 438.748445][ T5879] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.748469][ T5879] usb 6-1: config 0 has no interface number 0 [ 438.748512][ T5879] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.748538][ T5879] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.748572][ T5879] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 438.748593][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.752443][T15234] program syz.7.3992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.788823][ T5879] usb 6-1: config 0 descriptor?? [ 438.827672][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3993'. [ 439.415466][ T5879] uclogic 0003:28BD:0071.0031: pen parameters not found [ 439.415491][ T5879] uclogic 0003:28BD:0071.0031: interface is invalid, ignoring [ 439.442078][ T5879] usb 6-1: USB disconnect, device number 7 [ 439.475777][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.475865][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.695256][ T5829] Bluetooth: hci0: command 0x0401 tx timeout [ 439.700898][ T60] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 439.754048][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c751400: rx timeout, send abort [ 440.256643][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c751400: abort rx timeout. Force session deactivation [ 441.511643][T15290] netlink: 'syz.5.4019': attribute type 10 has an invalid length. [ 441.736963][T15290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.754500][T15290] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 442.204128][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.251785][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.284894][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.308606][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.310658][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.461936][ T67] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.052827][ T67] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.141849][T15308] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4028'. [ 443.605959][ T67] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.202657][ T67] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.415234][ T60] Bluetooth: hci1: command tx timeout [ 444.426890][T15294] chnl_net:caif_netlink_parms(): no params data found [ 445.017462][T15294] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.027003][T15294] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.027313][T15294] bridge_slave_0: entered allmulticast mode [ 445.030533][T15294] bridge_slave_0: entered promiscuous mode [ 445.034374][T15294] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.034718][T15294] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.041973][T15294] bridge_slave_1: entered allmulticast mode [ 445.046037][T15294] bridge_slave_1: entered promiscuous mode [ 445.232818][T15294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.259598][T15294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.398586][T15294] team0: Port device team_slave_0 added [ 445.417121][T15294] team0: Port device team_slave_1 added [ 445.861505][ T67] bridge_slave_1: left allmulticast mode [ 445.861534][ T67] bridge_slave_1: left promiscuous mode [ 445.861799][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.996974][ T67] bridge_slave_0: left allmulticast mode [ 445.997000][ T67] bridge_slave_0: left promiscuous mode [ 445.997269][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.036461][T15347] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4043'. [ 446.089268][T15348] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4043'. [ 446.496981][ T60] Bluetooth: hci1: command tx timeout [ 447.278540][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.368027][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.422775][ T67] bond0 (unregistering): Released all slaves [ 447.469278][T15294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.469289][T15294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.469303][T15294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.841142][T15294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.841153][T15294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.841168][T15294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.126053][T15294] hsr_slave_0: entered promiscuous mode [ 448.131911][T15294] hsr_slave_1: entered promiscuous mode [ 448.133482][T15294] debugfs: 'hsr0' already exists in 'hsr' [ 448.133503][T15294] Cannot create hsr debugfs directory [ 448.577491][ T60] Bluetooth: hci1: command tx timeout [ 449.991734][ T5485] 8021q: adding VLAN 0 to HW filter on device eth13 [ 450.655146][ T60] Bluetooth: hci1: command tx timeout [ 450.655317][ T67] hsr_slave_0: left promiscuous mode [ 450.658988][T15325] Set syz1 is full, maxelem 65536 reached [ 450.695088][ T67] hsr_slave_1: left promiscuous mode [ 450.696287][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.696311][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.740873][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.740901][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.886942][T15395] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 450.969362][ T67] veth1_macvtap: left promiscuous mode [ 450.996123][ T67] veth0_macvtap: left promiscuous mode [ 450.996431][ T67] veth1_vlan: left promiscuous mode [ 450.996598][ T67] veth0_vlan: left promiscuous mode [ 451.885788][ T67] team0 (unregistering): Port device team_slave_1 removed [ 451.966012][ T67] team0 (unregistering): Port device team_slave_0 removed [ 452.443378][T15422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4070'. [ 452.967425][T15437] binder: 15434:15437 ioctl 40046205 0 returned -22 [ 453.777021][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.848262][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.875792][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.880181][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.883487][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.452852][T15465] veth1_virt_wifi: entered allmulticast mode [ 454.452912][T15465] veth1_virt_wifi: left allmulticast mode [ 454.639762][ T5485] 8021q: adding VLAN 0 to HW filter on device eth14 [ 455.090717][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4089'. [ 455.272336][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 455.272353][ T38] audit: type=1326 audit(1776373925.259:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.5.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 455.349012][T15294] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 455.628557][T15294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.679347][T15294] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 455.792111][T15294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.879590][T15294] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 455.952227][T15294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.019158][ T60] Bluetooth: hci4: command tx timeout [ 456.066584][T15294] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 456.130042][T15294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.534437][ T5485] 8021q: adding VLAN 0 to HW filter on device eth15 [ 456.652078][T15448] chnl_net:caif_netlink_parms(): no params data found [ 456.775247][T14239] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 456.881443][T15448] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.881614][T15448] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.881826][T15448] bridge_slave_0: entered allmulticast mode [ 456.888184][T15448] bridge_slave_0: entered promiscuous mode [ 456.938359][T15448] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.938723][T15448] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.939043][T15448] bridge_slave_1: entered allmulticast mode [ 456.941835][T15448] bridge_slave_1: entered promiscuous mode [ 456.968424][T14239] usb 6-1: Using ep0 maxpacket: 16 [ 456.983392][T14239] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.983427][T14239] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 456.983453][T14239] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.983487][T14239] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 456.983510][T14239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.051234][T14239] usb 6-1: config 0 descriptor?? [ 457.130895][T15448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.161669][T15448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.307106][T15448] team0: Port device team_slave_0 added [ 457.319387][T15448] team0: Port device team_slave_1 added [ 457.463230][T15294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.467294][T15448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.467309][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.467332][T15448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.473261][T15448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.473275][T15448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.473299][T15448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.589219][T14239] hid_parser_main: 477 callbacks suppressed [ 457.589243][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589274][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589300][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589324][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589348][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589372][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589397][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589422][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589448][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.589473][T14239] logitech 0003:046D:C50C.0032: unknown main item tag 0x0 [ 457.688023][T14239] logitech 0003:046D:C50C.0032: hidraw0: USB HID v0.08 Device [HID 046d:c50c] on usb-dummy_hcd.5-1/input0 [ 457.709494][T14239] usb 6-1: USB disconnect, device number 8 [ 457.792067][T15538] fido_id[15538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 457.932569][T15448] hsr_slave_0: entered promiscuous mode [ 457.934684][T15448] hsr_slave_1: entered promiscuous mode [ 457.942615][T15448] debugfs: 'hsr0' already exists in 'hsr' [ 457.942638][T15448] Cannot create hsr debugfs directory [ 457.954660][T15294] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.985122][ T5485] 8021q: adding VLAN 0 to HW filter on device eth16 [ 458.064288][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.064473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.095084][ T60] Bluetooth: hci4: command tx timeout [ 458.154355][ T2429] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.154517][ T2429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.367845][T15549] program syz.7.4107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.404361][T15548] veth1_virt_wifi: entered allmulticast mode [ 458.440238][T15548] veth1_virt_wifi: left allmulticast mode [ 459.512296][T15294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.759711][T15448] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 459.830262][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.830613][T15580] : renamed from vlan0 (while UP) [ 459.877112][T15448] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 459.929684][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.931982][T15448] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 459.983199][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.012467][T15448] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 460.025278][T15587] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 460.025278][T15587] The task syz.5.4113 (15587) triggered the difference, watch for misbehavior. [ 460.124384][T15448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.185130][ T60] Bluetooth: hci4: command tx timeout [ 460.308826][T15294] veth0_vlan: entered promiscuous mode [ 460.358733][T15294] veth1_vlan: entered promiscuous mode [ 460.443387][T15448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.558354][T15294] veth0_macvtap: entered promiscuous mode [ 460.591060][T15294] veth1_macvtap: entered promiscuous mode [ 460.612255][T15448] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.646911][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.647052][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.694914][T15294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.701430][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.701531][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.753255][T15294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.823285][ T191] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.834892][ T191] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.840224][ T191] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.843326][ T191] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.261056][ T60] Bluetooth: hci4: command tx timeout [ 462.311637][ T2429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.311656][ T2429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.481698][T15611] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4119'. [ 462.762021][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.762040][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.033559][T15448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.259721][T15448] veth0_vlan: entered promiscuous mode [ 464.322631][T15448] veth1_vlan: entered promiscuous mode [ 464.570887][T15448] veth0_macvtap: entered promiscuous mode [ 464.627505][T15448] veth1_macvtap: entered promiscuous mode [ 464.709832][T15665] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.4139'. [ 464.709927][T15665] openvswitch: netlink: Message has 5 unknown bytes. [ 464.733945][T15448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.790758][T15448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.790846][T15667] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4140'. [ 464.798885][T15667] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4140'. [ 464.842599][ T2374] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.842858][ T2374] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.842894][ T2374] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.842926][ T2374] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.669318][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.669336][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.039318][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.039338][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.521636][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.534168][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.882641][T15692] use of bytesused == 0 is deprecated and will be removed in the future, [ 466.882657][T15692] use the actual size instead. [ 467.495522][T15711] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4157'. [ 467.595142][ T5879] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 467.676708][T15711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.749312][ T5879] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.749340][ T5879] usb 6-1: config 0 has no interface number 0 [ 467.768537][ T5879] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 467.768665][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.768684][ T5879] usb 6-1: Product: syz [ 467.768698][ T5879] usb 6-1: Manufacturer: syz [ 467.768711][ T5879] usb 6-1: SerialNumber: syz [ 467.805939][T15711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.836224][ T5879] usb 6-1: config 0 descriptor?? [ 467.906702][T15711] bond0 (unregistering): Released all slaves [ 468.056966][ T5879] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 468.088270][ T5879] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 468.088699][ T5879] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 468.088801][ T5879] usb 6-1: media controller created [ 468.127524][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.690963][T15737] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 468.690992][T15737] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 468.691280][T15737] overlayfs: failed to set uuid (142/file0, err=-13); falling back to uuid=null. [ 469.224610][T15747] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4173'. [ 469.336962][ T5879] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 469.494577][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4175'. [ 469.577514][ T5879] usb 6-1: USB disconnect, device number 9 [ 470.217872][T15774] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4183'. [ 471.552390][T15818] 9p: Bad value for 'rfdno' [ 472.375189][T14076] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 472.503370][T15851] Set syz0 is full, maxelem 0 reached [ 472.525099][T14076] usb 6-1: Using ep0 maxpacket: 32 [ 472.527386][T14076] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.527418][T14076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 472.527444][T14076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 472.527495][T14076] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 472.527518][T14076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.533577][T14076] usb 6-1: config 0 descriptor?? [ 472.534500][T15840] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 472.648346][T14076] hub 6-1:0.0: USB hub found [ 472.735866][T15857] binder: 15855:15857 ioctl c018620c 200000000280 returned -1 [ 472.779526][T14076] hub 6-1:0.0: 2 ports detected [ 472.950228][T15856] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4207'. [ 473.431918][T14076] usb 6-1: USB disconnect, device number 10 [ 473.968020][T15893] virtiofs: Unknown parameter 'always 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 20 batadv0 : 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 21 vxcan0 : 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 22 vxcan1 : 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 23 veth0 : 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 24 veth1 : 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 25 wg0 : 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 26 wg1 : 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 27 wg2 : 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 28 veth0_to_bridge: 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 29 bridge_slave_0: 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 30 veth1_to_bridge: 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 31 bridge_slave_1: 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 32 veth0_to_bond: 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 34 veth1_to_bond: 1 V3 [ 473.968020][T15893] 010000E0 1 0:00000000 0 [ 473.968020][T15893] 36 veth0_to_team: 1 V3 [ 473.968020][T15893] 010000E0 1 [ 474.995344][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 475.920155][T15960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4246'. [ 476.342765][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4254'. [ 476.807915][T14074] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 476.955065][T14074] usb 10-1: Using ep0 maxpacket: 8 [ 476.992561][T14074] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 476.992595][T14074] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 476.992617][T14074] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.992638][T14074] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.992675][T14074] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.992696][T14074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.303650][T14074] usb 10-1: GET_CAPABILITIES returned 0 [ 477.303698][T14074] usbtmc 10-1:16.0: can't read capabilities [ 477.559173][ T5811] usb 10-1: USB disconnect, device number 2 [ 477.738577][ T38] audit: type=1326 audit(1776373947.729:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.738906][ T38] audit: type=1326 audit(1776373947.729:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.739184][ T38] audit: type=1326 audit(1776373947.729:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.739517][ T38] audit: type=1326 audit(1776373947.729:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.739781][ T38] audit: type=1326 audit(1776373947.729:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.740034][ T38] audit: type=1326 audit(1776373947.729:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.740326][ T38] audit: type=1326 audit(1776373947.729:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.740680][ T38] audit: type=1326 audit(1776373947.729:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.740941][ T38] audit: type=1326 audit(1776373947.729:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.741196][ T38] audit: type=1326 audit(1776373947.729:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x7fc00000 [ 477.983263][T16024] netlink: 'syz.5.4277': attribute type 10 has an invalid length. [ 477.985090][T14076] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 478.052621][T16024] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 478.151237][T14076] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 478.151272][T14076] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.151314][T14076] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 478.151336][T14076] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.199947][T14076] usb 9-1: config 0 descriptor?? [ 478.326850][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4280'. [ 478.648246][T14076] hid_parser_main: 28 callbacks suppressed [ 478.648268][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648300][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648324][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648350][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648374][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648397][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648421][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648447][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648471][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.648496][T14076] kovaplus 0003:1E7D:2D50.0033: unknown main item tag 0x0 [ 478.651373][T14076] kovaplus 0003:1E7D:2D50.0033: item fetching failed at offset 140/235 [ 478.694769][T14076] kovaplus 0003:1E7D:2D50.0033: parse failed [ 478.694868][T14076] kovaplus 0003:1E7D:2D50.0033: probe with driver kovaplus failed with error -22 [ 478.846921][ T5830] usb 9-1: USB disconnect, device number 2 [ 479.495244][T14076] hid-generic 0006:0004:0009.0034: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 479.633411][T16053] fido_id[16053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 479.775213][T16061] netlink: 'syz.8.4295': attribute type 4 has an invalid length. [ 480.667991][T16087] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 480.668011][T16087] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 480.946704][T16096] tipc: Started in network mode [ 480.946732][T16096] tipc: Node identity ac14140f, cluster identity 4711 [ 480.947056][T16096] tipc: New replicast peer: 255.255.255.255 [ 480.949904][T16096] tipc: Enabled bearer , priority 10 [ 481.379713][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4319'. [ 481.379742][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4319'. [ 481.963934][ T5878] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 482.065190][ T37] tipc: Node number set to 2886997007 [ 482.125089][ T5878] usb 10-1: Using ep0 maxpacket: 32 [ 482.127946][ T5878] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 482.127972][ T5878] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 482.127998][ T5878] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 482.128015][ T5878] usb 10-1: config 1 has no interface number 0 [ 482.128054][ T5878] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.128077][ T5878] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 482.128113][ T5878] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 482.128134][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.285280][ T5878] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 482.525052][ T5830] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 482.588769][ T5878] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 482.675936][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 482.678000][ T5830] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.678048][ T5830] usb 6-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 482.678070][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.700254][ T5830] usb 6-1: config 0 descriptor?? [ 482.974876][ T5830] usb 6-1: USB disconnect, device number 11 [ 483.012822][T14078] usb 10-1: USB disconnect, device number 3 [ 483.033357][T14078] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 483.487078][T16140] infiniband syz1: set active [ 483.488741][T16140] infiniband syz1: added syz_tun [ 483.523935][T16140] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 483.534895][T16140] infiniband syz1: Couldn't open port 1 [ 483.541373][T16140] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 483.541407][T16140] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 483.541445][T16140] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 483.893275][T16140] RDS/IB: syz1: added [ 483.903264][T16140] smc: adding ib device syz1 with port count 1 [ 483.918646][T16140] smc: ib device syz1 port 1 has no pnetid [ 484.035220][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 484.225042][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 484.227319][ T5878] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.227341][ T5878] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.232671][ T5878] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.233036][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.233058][ T5878] usb 6-1: Product: syz [ 484.233070][ T5878] usb 6-1: Manufacturer: syz [ 484.233082][ T5878] usb 6-1: SerialNumber: syz [ 484.352986][ T5878] usb 6-1: 0:2 : does not exist [ 484.558319][ T5878] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 484.702620][ T5878] usb 6-1: USB disconnect, device number 12 [ 484.898654][T14081] udevd[14081]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.421152][T16183] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4350'. [ 486.090014][T16198] loop9: detected capacity change from 0 to 524287936 [ 488.106476][T16223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 488.106622][T16223] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 488.242427][T16223] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 488.400480][ T38] kauditd_printk_skb: 24 callbacks suppressed [ 488.400498][ T38] audit: type=1800 audit(1776374214.193:83): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4368" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 488.483247][T16224] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 488.483290][T16224] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 488.483313][T16224] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 488.570758][T16241] fuse: Bad value for 'fd' [ 488.577600][T16223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.577684][T16223] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 488.787184][T16223] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 488.886043][T16223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 488.886146][T16223] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 488.956268][T16223] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 489.017706][T16223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 489.017825][T16223] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 489.092975][T16223] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 489.645210][ T5830] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 489.797439][ T5830] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 489.797488][ T5830] usb 10-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 489.797512][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.798392][T16259] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4384'. [ 489.850438][ T5830] usb 10-1: config 0 descriptor?? [ 489.851430][T16247] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 489.855835][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.191686][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4388'. [ 490.306117][ T5830] hid (null): global environment stack underflow [ 490.342211][ T5830] hid_parser_main: 131 callbacks suppressed [ 490.342237][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342271][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342297][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342323][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342348][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342373][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342397][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342421][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342446][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.342471][ T5830] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 490.353752][ T5830] asus 0003:0B05:1ABE.0035: global environment stack underflow [ 490.353773][ T5830] asus 0003:0B05:1ABE.0035: item 0 1 1 11 parsing failed [ 490.354549][ T5830] asus 0003:0B05:1ABE.0035: Asus hid parse failed: -22 [ 490.358174][ T5830] asus 0003:0B05:1ABE.0035: probe with driver asus failed with error -22 [ 490.625839][ T5811] usb 10-1: USB disconnect, device number 4 [ 490.656331][ T60] Bluetooth: hci0: command 0x0401 tx timeout [ 490.897285][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 491.055057][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 491.939399][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 492.735484][ T5829] Bluetooth: hci0: command 0x0401 tx timeout [ 492.844404][T16353] sctp: [Deprecated]: syz.5.4430 (pid 16353) Use of int in max_burst socket option deprecated. [ 492.844404][T16353] Use struct sctp_assoc_value instead [ 492.975301][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 493.061196][ T38] audit: type=1326 audit(1776374219.043:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.4433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba582cc819 code=0x0 [ 493.135100][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 493.557574][T16378] sctp: [Deprecated]: syz.8.4439 (pid 16378) Use of int in max_burst socket option deprecated. [ 493.557574][T16378] Use struct sctp_assoc_value instead [ 494.016752][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 494.692940][T16417] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4457'. [ 494.815307][ T5829] Bluetooth: hci0: command 0x0401 tx timeout [ 495.056850][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 495.068847][ T5811] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 495.112615][T16429] input: syz0 as /devices/virtual/input/input42 [ 495.216449][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 495.241800][ T5811] usb 10-1: Using ep0 maxpacket: 16 [ 495.243473][ T5811] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.243504][ T5811] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 495.243523][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 495.243542][ T5811] usb 10-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 495.243554][ T5811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.349489][ T5811] usb 10-1: config 0 descriptor?? [ 495.576971][ T38] audit: type=1326 audit(1776374221.563:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16439 comm="syz.5.4465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a763cc819 code=0x0 [ 495.797734][ T5811] hid_parser_main: 302 callbacks suppressed [ 495.797756][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797782][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797805][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797830][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797855][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797880][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797903][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797924][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797946][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.797969][ T5811] logitech 0003:046D:C50C.0036: unknown main item tag 0x0 [ 495.812396][ T5811] logitech 0003:046D:C50C.0036: hidraw0: USB HID v0.08 Device [HID 046d:c50c] on usb-dummy_hcd.9-1/input0 [ 495.992572][ T5878] usb 10-1: USB disconnect, device number 5 [ 497.016372][T16485] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4485'. [ 497.109173][T16488] misc userio: Can't change port type on an already running userio instance [ 497.221439][T16485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.286125][T16485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.367809][T16485] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 497.516337][T16485] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 497.670898][T16485] bond0 (unregistering): Released all slaves [ 498.200371][T16511] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 498.200397][T16511] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 498.209984][T16511] overlayfs: failed to set uuid (110/file0, err=-13); falling back to uuid=null. [ 498.365913][ T37] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 498.515108][ T37] usb 10-1: Using ep0 maxpacket: 16 [ 498.530175][ T37] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 498.530205][ T37] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.530226][ T37] usb 10-1: Product: syz [ 498.530240][ T37] usb 10-1: Manufacturer: syz [ 498.530253][ T37] usb 10-1: SerialNumber: syz [ 498.914606][T16527] blkio.reset_stats is deprecated [ 499.205624][T16537] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4509'. [ 499.400661][ T37] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 499.407531][ T37] usb 10-1: USB disconnect, device number 6 [ 499.481607][T16537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.587150][T16537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.651490][T16537] bond0 (unregistering): Released all slaves [ 500.299147][ T5879] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 500.396380][T16567] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4524'. [ 500.445342][ T5879] usb 10-1: Using ep0 maxpacket: 16 [ 500.449540][ T5879] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 500.449598][ T5879] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 500.449637][ T5879] usb 10-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 500.449660][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.508299][ T5879] usb 10-1: config 0 descriptor?? [ 500.911800][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.947359][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.978850][ T5879] hid_parser_main: 28 callbacks suppressed [ 500.978875][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.978903][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.979090][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.979118][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.979144][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.979169][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.979195][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.979220][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.979245][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.979270][ T5879] lenovo 0003:17EF:6062.0037: unknown main item tag 0x0 [ 500.983039][ T5879] lenovo 0003:17EF:6062.0037: hidraw0: USB HID v0.0a Device [HID 17ef:6062] on usb-dummy_hcd.9-1/input0 [ 501.235520][ T5830] usb 10-1: USB disconnect, device number 7 [ 501.504436][T16601] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4538'. [ 501.645515][ T5879] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 501.752609][T16605] virtiofs: Unknown parameter 'always 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 20 batadv0 : 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 21 vxcan0 : 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 22 vxcan1 : 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 23 veth0 : 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 24 veth1 : 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 25 wg0 : 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 26 wg1 : 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 27 wg2 : 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 28 veth0_to_bridge: 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 29 bridge_slave_0: 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 30 veth1_to_bridge: 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 31 bridge_slave_1: 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 32 veth0_to_bond: 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 34 veth1_to_bond: 1 V3 [ 501.752609][T16605] 010000E0 1 0:00000000 0 [ 501.752609][T16605] 36 veth0_to_team: 1 V3 [ 501.752609][T16605] 010000E0 1 [ 501.795066][ T5879] usb 9-1: Using ep0 maxpacket: 32 [ 501.798211][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.798243][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 501.798269][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 501.798310][ T5879] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 501.798333][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.819854][ T5879] usb 9-1: config 0 descriptor?? [ 501.858941][T16598] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 501.875160][ T5879] hub 9-1:0.0: USB hub found [ 502.089806][ T5879] hub 9-1:0.0: 2 ports detected [ 502.405536][ T37] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 502.717682][ T5879] usb 9-1: USB disconnect, device number 3 [ 503.520260][T16638] program syz.5.4553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.885861][T16692] kvm: kvm [16691]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x6 [ 505.755736][T16715] batadv_slave_1: entered promiscuous mode [ 505.756001][T16718] batadv_slave_1: left promiscuous mode [ 505.896308][ T5878] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 506.075843][ T5878] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.075879][ T5878] usb 9-1: config 0 has no interface number 0 [ 506.086990][ T5878] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 506.087019][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.087038][ T5878] usb 9-1: Product: syz [ 506.087051][ T5878] usb 9-1: Manufacturer: syz [ 506.087064][ T5878] usb 9-1: SerialNumber: syz [ 506.111366][ T5878] usb 9-1: config 0 descriptor?? [ 506.324513][ T5878] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 506.391398][T16741] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4599'. [ 506.488941][ T5878] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 506.489272][ T5878] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 506.489318][ T5878] usb 9-1: media controller created [ 506.634181][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.803328][ T5878] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 507.013728][ T5878] usb 9-1: USB disconnect, device number 4 [ 507.051894][T15159] udevd[15159]: setting mode of /dev/bus/usb/009/004 to 020664 failed: No such file or directory [ 507.052049][T15159] udevd[15159]: setting owner of /dev/bus/usb/009/004 to uid=0, gid=0 failed: No such file or directory [ 507.446360][ T37] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 507.532049][T16776] input: syz1 as /devices/virtual/input/input44 [ 507.605076][ T37] usb 10-1: Using ep0 maxpacket: 8 [ 507.607364][ T37] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 507.607419][ T37] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.607442][ T37] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.607476][ T37] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.607500][ T37] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.607541][ T37] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.607564][ T37] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.955768][ T37] usb 10-1: GET_CAPABILITIES returned 0 [ 507.955813][ T37] usbtmc 10-1:16.0: can't read capabilities [ 508.166499][ T37] usb 10-1: USB disconnect, device number 8 [ 508.608171][T16810] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4633'. [ 509.377928][T14078] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 509.423522][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4648'. [ 509.565321][T14078] usb 6-1: Using ep0 maxpacket: 8 [ 509.577602][T14078] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 509.577636][T14078] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 509.577661][T14078] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.577685][T14078] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.577726][T14078] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 509.577749][T14078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.814853][T14078] usb 6-1: GET_CAPABILITIES returned 0 [ 509.820758][T14078] usbtmc 6-1:16.0: can't read capabilities [ 510.038800][ T5878] usb 6-1: USB disconnect, device number 13 [ 510.895224][T14078] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 510.926569][ T5879] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 511.055104][T14078] usb 9-1: Using ep0 maxpacket: 16 [ 511.067114][T14078] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.067139][T14078] usb 9-1: config 0 interface 0 has no altsetting 0 [ 511.069854][T14078] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 511.069874][T14078] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.069884][T14078] usb 9-1: Product: syz [ 511.069892][T14078] usb 9-1: Manufacturer: syz [ 511.069899][T14078] usb 9-1: SerialNumber: syz [ 511.078053][T14078] usb 9-1: config 0 descriptor?? [ 511.082522][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 511.129420][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 511.129454][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 511.164748][ T5879] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 511.164778][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.164797][ T5879] usb 6-1: Product: syz [ 511.164811][ T5879] usb 6-1: Manufacturer: syz [ 511.164824][ T5879] usb 6-1: SerialNumber: syz [ 511.202415][ T5879] usb 6-1: config 0 descriptor?? [ 511.218909][ T5879] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 511.218964][ T5879] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 511.699086][ T5878] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 511.836093][ T5879] em28xx 6-1:0.0: chip ID is em2870 [ 511.866294][ T5878] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.866321][ T5878] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 511.866374][ T5878] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 511.866417][ T5878] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 511.866440][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.996767][T16882] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 512.001798][ T5878] hub 10-1:1.0: bad descriptor, ignoring hub [ 512.001834][ T5878] hub 10-1:1.0: probe with driver hub failed with error -5 [ 512.004884][ T5878] cdc_wdm 10-1:1.0: skipping garbage [ 512.014261][ T5878] cdc_wdm 10-1:1.0: skipping garbage [ 512.065277][ T5878] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 512.065367][ T5878] cdc_wdm 10-1:1.0: Unknown control protocol [ 512.172533][ T818] usb 6-1: USB disconnect, device number 14 [ 512.187175][ T818] em28xx 6-1:0.0: Disconnecting em28xx [ 512.430443][ T5811] usb 10-1: USB disconnect, device number 9 [ 512.888363][ T818] em28xx 6-1:0.0: Freeing device [ 512.961537][T14078] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input45 [ 513.431382][T16903] netlink: 'syz.5.4677': attribute type 2 has an invalid length. [ 513.431403][T16903] netlink: 'syz.5.4677': attribute type 11 has an invalid length. [ 513.431415][T16903] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4677'. [ 513.693734][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 513.772794][T14078] imon:send_packet: packet tx failed (-71) [ 513.785288][T14078] imon 9-1:0.0: panel buttons/knobs setup failed [ 513.972557][T14078] rc_core: IR keymap rc-imon-pad not found [ 513.972578][T14078] Registered IR keymap rc-empty [ 513.972755][T14078] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 513.972772][T14078] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 513.976827][T14078] imon:send_packet: packet tx failed (-71) [ 514.006927][ T38] audit: type=1326 audit(1776374239.993:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.006981][ T38] audit: type=1326 audit(1776374239.993:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.007017][ T38] audit: type=1326 audit(1776374239.993:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.007051][ T38] audit: type=1326 audit(1776374239.993:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.007465][ T38] audit: type=1326 audit(1776374239.993:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.007505][ T38] audit: type=1326 audit(1776374239.993:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.007540][ T38] audit: type=1326 audit(1776374239.993:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.007575][ T38] audit: type=1326 audit(1776374239.993:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.007609][ T38] audit: type=1326 audit(1776374239.993:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.009167][T14078] imon 9-1:0.0: remote input dev register failed [ 514.009352][T14078] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 514.011777][ T38] audit: type=1326 audit(1776374239.993:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16896 comm="syz.9.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba582cc819 code=0x7fc00000 [ 514.416149][T14074] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 514.565069][T14074] usb 6-1: Using ep0 maxpacket: 16 [ 514.597592][ T5829] Bluetooth: hci2: Malformed LE Event: 0x0d [ 514.598842][T14074] usb 6-1: unable to get BOS descriptor or descriptor too short [ 514.599874][T14074] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 514.599907][T14074] usb 6-1: can't read configurations, error -71 [ 514.812352][T16931] netlink: 16146 bytes leftover after parsing attributes in process `syz.8.4690'. [ 514.831635][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4691'. [ 514.988228][ T5879] hid_parser_main: 32 callbacks suppressed [ 514.988249][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988276][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988300][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988321][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988345][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988370][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988394][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988418][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988442][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 514.988464][ T5879] hid-generic 0006:0004:0009.0039: unknown main item tag 0x0 [ 515.020809][T16935] loop4: detected capacity change from 0 to 65536 [ 515.070694][T14078] imon 9-1:0.0: unable to initialize intf0, err 0 [ 515.070715][T14078] imon:imon_probe: failed to initialize context! [ 515.070726][T14078] imon 9-1:0.0: unable to register, err -19 [ 515.093959][T14078] usb 9-1: USB disconnect, device number 5 [ 515.153454][T16935] loop4: detected capacity change from 65536 to 523370496 [ 515.231736][ T5879] hid-generic 0006:0004:0009.0039: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 515.669898][T16940] fido_id[16940]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 517.057036][T16984] binder: BINDER_SET_CONTEXT_MGR already set [ 517.057055][T16984] binder: 16983:16984 ioctl 4018620d 200000004a80 returned -16 [ 517.467132][T16997] netlink: 'syz.7.4721': attribute type 1 has an invalid length. [ 517.467174][T16997] netlink: 'syz.7.4721': attribute type 2 has an invalid length. [ 517.467187][T16997] netlink: 'syz.7.4721': attribute type 1 has an invalid length. [ 517.467198][T16997] netlink: 'syz.7.4721': attribute type 3 has an invalid length. [ 517.467210][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4721'. [ 518.371289][T17032] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4737'. [ 518.371311][T17032] netlink: 'syz.7.4737': attribute type 1 has an invalid length. [ 520.710889][T17115] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4775'. [ 520.790869][T17117] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4776'. [ 520.790884][T17117] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 521.387809][T14078] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 521.545050][T14078] usb 9-1: Using ep0 maxpacket: 16 [ 521.554458][T14078] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.554482][T14078] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.566873][T14078] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.566900][T14078] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.566923][T14078] usb 9-1: Product: syz [ 521.566935][T14078] usb 9-1: Manufacturer: syz [ 521.566949][T14078] usb 9-1: SerialNumber: syz [ 521.612387][T14078] usb 9-1: 0:2 : does not exist [ 521.820454][T14078] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 522.038510][T14078] usb 9-1: USB disconnect, device number 6 [ 522.166547][T14081] udevd[14081]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.595262][T14074] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 522.684533][T17171] netlink: 'syz.8.4799': attribute type 9 has an invalid length. [ 522.684547][T17171] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4799'. [ 522.749714][T14074] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 522.749744][T14074] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 522.749764][T14074] usb 6-1: Product: syz [ 522.779492][T17173] loop5: detected capacity change from 0 to 7 [ 522.802682][T14074] usb 6-1: config 0 descriptor?? [ 522.821372][T14074] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 522.823791][T14074] usb 6-1: Detected FT232H [ 523.046178][T14074] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 523.463774][T14074] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 523.539546][T14074] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 523.579505][T14074] usb 6-1: USB disconnect, device number 17 [ 523.660601][T17173] Dev loop5: unable to read RDB block 7 [ 523.660639][T17173] loop5: unable to read partition table [ 523.660812][T17173] loop5: partition table beyond EOD, truncated [ 523.664049][T17173] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 523.734211][T14074] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 523.749088][T14074] ftdi_sio 6-1:0.0: device disconnected [ 526.402353][T17243] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4830'. [ 526.596786][T17252] Bluetooth: MGMT ver 1.23 [ 526.686565][T14078] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 526.857907][T14078] usb 9-1: Using ep0 maxpacket: 32 [ 526.860511][T14078] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 526.860536][T14078] usb 9-1: config 0 has no interface number 0 [ 526.860581][T14078] usb 9-1: config 0 interface 184 has no altsetting 0 [ 526.867689][T14078] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 526.867715][T14078] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.867735][T14078] usb 9-1: Product: syz [ 526.867748][T14078] usb 9-1: Manufacturer: syz [ 526.867761][T14078] usb 9-1: SerialNumber: syz [ 526.884384][T14078] usb 9-1: config 0 descriptor?? [ 527.190344][T17269] program syz.5.4842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.513892][T14078] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 527.513911][T14078] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.717178][T14078] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 527.717208][T14078] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 527.717227][T14078] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 527.717509][T14078] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 527.734762][T14078] usb 9-1: USB disconnect, device number 7 [ 529.505085][ T818] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 529.680596][ T818] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.680627][ T818] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.680675][ T818] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 529.680697][ T818] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.736787][T17327] Invalid source name [ 529.736798][T17327] UBIFS error (pid: 17327): cannot open "./file0", error -22 [ 529.952368][ T818] usb 10-1: usb_control_msg returned -32 [ 529.952397][ T818] usbtmc 10-1:16.0: can't read capabilities [ 531.037143][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4878'. [ 531.396706][ T818] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 531.567584][ T818] usb 9-1: Using ep0 maxpacket: 8 [ 531.572436][ T818] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 531.572460][ T818] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 531.572474][ T818] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.572486][ T818] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.572510][ T818] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 531.572522][ T818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.854719][ T818] usb 9-1: usb_control_msg returned -32 [ 531.854765][ T818] usbtmc 9-1:16.0: can't read capabilities [ 531.906211][T17369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.952541][T17369] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 532.276445][ T5879] usb 10-1: USB disconnect, device number 10 [ 533.605053][ T818] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 533.735179][ T10] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 533.765071][ T818] usb 10-1: Using ep0 maxpacket: 16 [ 533.767130][ T818] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.767161][ T818] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.767183][ T818] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 533.767209][ T818] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 533.767221][ T818] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.774571][ T818] usb 10-1: config 0 descriptor?? [ 533.892979][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 533.894227][ T10] usb 6-1: config 194 has an invalid interface number: 4 but max is 0 [ 533.894330][ T10] usb 6-1: config 194 has no interface number 0 [ 533.894363][ T10] usb 6-1: config 194 interface 4 has no altsetting 0 [ 533.931283][ T10] usb 6-1: string descriptor 0 read error: -22 [ 533.931418][ T10] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 533.931442][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.200665][T14076] usb 9-1: USB disconnect, device number 8 [ 534.219773][T14077] usb 6-1: USB disconnect, device number 18 [ 534.303731][ T818] hid_parser_main: 7 callbacks suppressed [ 534.303754][ T818] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 534.383400][ T818] microsoft 0003:045E:07DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 534.383434][ T818] microsoft 0003:045E:07DA.003A: no inputs found [ 534.383448][ T818] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway [ 534.439555][ T818] usb 10-1: USB disconnect, device number 11 [ 534.602077][T17399] fido_id[17399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 535.289339][T17416] Bluetooth: MGMT ver 1.23 [ 537.677654][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 537.828152][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 537.828185][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 537.828207][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 537.828231][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 537.831330][ T10] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 537.831356][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.831375][ T10] usb 10-1: Product: syz [ 537.831389][ T10] usb 10-1: Manufacturer: syz [ 537.831488][ T10] usb 10-1: SerialNumber: syz [ 537.920114][ T10] usb 10-1: config 0 descriptor?? [ 538.141922][ T10] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 538.155223][T14077] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 538.344445][ T10] usb 10-1: USB disconnect, device number 12 [ 538.355410][T14077] usb 6-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 538.355435][T14077] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 538.373464][T14077] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 538.373492][T14077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 538.373524][T14077] usb 6-1: SerialNumber: syz [ 538.730846][T14077] usb 6-1: 0:2 : does not exist [ 538.731048][T14077] usb 6-1: unit 108 not found! [ 539.010487][T14077] usb 6-1: USB disconnect, device number 19 [ 539.245104][T14081] udevd[14081]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.310023][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4944'. [ 539.605764][T17521] netlink: 762 bytes leftover after parsing attributes in process `syz.8.4949'. [ 540.280862][T17544] kvm: apic: phys broadcast and lowest prio [ 540.297476][T14077] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 540.501473][T14077] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.501505][T14077] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.501526][T14077] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.501569][T14077] usb 9-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 540.501592][T14077] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.531108][T14077] usb 9-1: config 0 descriptor?? [ 541.023872][T14077] kye 0003:0458:501A.003B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 541.024313][T14077] kye 0003:0458:501A.003B: unknown main item tag 0x5 [ 541.037336][T14077] kye 0003:0458:501A.003B: hidraw0: USB HID vff.fc Device [HID 0458:501a] on usb-dummy_hcd.8-1/input0 [ 541.037367][T14077] kye 0003:0458:501A.003B: tablet-enabling feature report not found [ 541.037381][T14077] kye 0003:0458:501A.003B: tablet enabling failed [ 541.249014][T14077] usb 9-1: USB disconnect, device number 9 [ 541.399926][ T5829] Bluetooth: hci4: unexpected event for opcode 0x200c [ 542.421132][T17596] binder: 17595:17596 ioctl c0306201 0 returned -14 [ 542.605726][T14078] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 542.765023][T14078] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 542.765055][T14078] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 542.765077][T14078] usb 10-1: config 1 interface 0 has no altsetting 0 [ 542.767595][T14078] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 542.767625][T14078] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.767645][T14078] usb 10-1: Product: syz [ 542.767659][T14078] usb 10-1: Manufacturer: syz [ 542.767672][T14078] usb 10-1: SerialNumber: syz [ 542.780147][T17594] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 542.780256][T17594] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 542.805098][T14077] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 542.978784][T14077] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.978891][T14077] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 542.994092][T14077] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.994173][T14077] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 542.994192][T14077] usb 9-1: Product: syz [ 542.994206][T14077] usb 9-1: SerialNumber: syz [ 543.919831][T14078] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:a6:2d:fb:bd:16 [ 544.057008][T14078] rtl8150 10-1:1.0: eth17: rtl8150 is detected [ 544.095061][T14077] cdc_ncm 9-1:1.0: bind() failure [ 544.115792][T14078] usb 10-1: USB disconnect, device number 13 [ 544.136866][T14077] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 544.139289][T14077] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 544.142150][T14077] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 544.189258][T14077] usb 9-1: USB disconnect, device number 10 [ 544.784568][T17637] Invalid argument reading file caps for ./file0 [ 545.455310][ T5829] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 545.455605][ T5829] Bluetooth: hci4: Injecting HCI hardware error event [ 545.459677][ T60] Bluetooth: hci4: hardware error 0x00 [ 545.681936][T14074] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 545.741652][T17671] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5013'. [ 545.829584][T14074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 545.829619][T14074] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.829657][T14074] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 545.829680][T14074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.909149][T14074] usb 6-1: config 0 descriptor?? [ 545.922127][T14074] hub 6-1:0.0: USB hub found [ 546.116229][T14074] hub 6-1:0.0: 1 port detected [ 546.731393][T14074] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 546.757507][ T5879] usb 6-1: USB disconnect, device number 20 [ 547.536757][ T60] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 548.122313][T17742] netlink: 176 bytes leftover after parsing attributes in process `syz.7.5043'. [ 548.241101][T17746] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5044'. [ 548.970980][T17767] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5054'. [ 549.016816][T17768] netlink: 176 bytes leftover after parsing attributes in process `syz.9.5053'. [ 551.159603][T14074] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 551.305383][T14074] usb 10-1: Using ep0 maxpacket: 8 [ 551.318643][T14074] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.318670][T14074] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.318695][T14074] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.318717][T14074] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.318757][T14074] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.318780][T14074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.619345][T14074] usb 10-1: GET_CAPABILITIES returned 0 [ 551.619391][T14074] usbtmc 10-1:16.0: can't read capabilities [ 551.823567][T14074] usb 10-1: USB disconnect, device number 14 [ 552.010064][ T37] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 552.026212][ T37] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.745156][T14074] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 552.897849][T14074] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.897896][T14074] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 552.927796][T14074] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.927825][T14074] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 552.927845][T14074] usb 10-1: Product: syz [ 552.927858][T14074] usb 10-1: SerialNumber: syz [ 553.935118][T14076] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 554.011553][T14074] cdc_ncm 10-1:1.0: bind() failure [ 554.029956][T14074] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 554.030604][T14074] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 554.031664][T14074] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 554.062474][T14074] usb 10-1: USB disconnect, device number 15 [ 554.106908][T14076] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 554.106930][T14076] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.106951][T14076] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.106963][T14076] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.110652][T14076] usb 9-1: config 0 descriptor?? [ 554.170434][T14076] hub 9-1:0.0: USB hub found [ 554.319194][T14076] hub 9-1:0.0: 1 port detected [ 554.932134][T14076] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 554.940756][T14077] usb 9-1: USB disconnect, device number 11 [ 555.006563][T14016] usb 9-1: Failed to suspend device, error -19 [ 555.398947][T17922] 9pnet: p9_errstr2errno: server reported unknown error [ 556.030258][ T38] audit: type=1326 audit(1776374538.018:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.8.5138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde468bc819 code=0x0 [ 556.695248][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5156'. [ 557.478701][T18000] 9pnet: p9_errstr2errno: server reported unknown error [ 557.717913][T18007] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 557.718245][ T37] IPVS: starting estimator thread 0... [ 557.805158][T18010] IPVS: using max 9 ests per chain, 21600 per kthread [ 558.464771][T18026] 9pnet: p9_errstr2errno: server reported unknown error [ 558.646002][T14074] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 558.795066][T14074] usb 10-1: Using ep0 maxpacket: 32 [ 558.800708][T14074] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 558.800735][T14074] usb 10-1: config 0 has no interface number 0 [ 558.803848][T14074] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 558.836332][T14074] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.836362][T14074] usb 10-1: Product: syz [ 558.836374][T14074] usb 10-1: Manufacturer: syz [ 558.836392][T14074] usb 10-1: SerialNumber: syz [ 558.841812][T14074] usb 10-1: config 0 descriptor?? [ 558.875360][T14074] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 558.905585][T14078] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 559.065222][T14078] usb 6-1: Using ep0 maxpacket: 8 [ 559.071727][T14078] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 559.071781][T14078] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.071804][T14078] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 559.071827][T14078] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.071850][T14078] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.071889][T14078] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 559.071910][T14078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.078662][T14074] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 559.096584][T14077] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 559.210837][T14074] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 559.281106][T14077] usb 9-1: Using ep0 maxpacket: 8 [ 559.300519][T14077] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.300553][T14077] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 559.300581][T14077] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.300654][T14077] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.300680][T14077] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.300693][T14077] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.358339][T14078] usb 6-1: GET_CAPABILITIES returned 0 [ 559.358383][T14078] usbtmc 6-1:16.0: can't read capabilities [ 559.529646][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 559.582262][T14078] usb 10-1: USB disconnect, device number 16 [ 559.630248][T14077] usb 9-1: GET_CAPABILITIES returned 0 [ 559.630293][T14077] usbtmc 9-1:16.0: can't read capabilities [ 559.653959][ T818] usb 6-1: USB disconnect, device number 21 [ 559.718634][T14078] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 559.754626][T14078] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 559.762771][T14078] quatech2 10-1:0.51: device disconnected [ 559.849860][T14077] usb 9-1: USB disconnect, device number 12 [ 560.170178][T18054] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5186'. [ 560.676110][ T818] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 560.836994][ T818] usb 10-1: Using ep0 maxpacket: 16 [ 560.838683][ T818] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 560.838713][ T818] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.841726][ T818] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.841752][ T818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.841770][ T818] usb 10-1: Product: syz [ 560.841783][ T818] usb 10-1: Manufacturer: syz [ 560.841796][ T818] usb 10-1: SerialNumber: syz [ 560.905446][ T818] usb 10-1: config 0 descriptor?? [ 560.919719][ T818] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 560.919752][ T818] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 561.105083][T14076] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 561.255186][T14076] usb 9-1: Using ep0 maxpacket: 32 [ 561.263558][T14076] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 561.263574][T14076] usb 9-1: config 0 has no interface number 0 [ 561.281047][T14076] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 561.281075][T14076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.281095][T14076] usb 9-1: Product: syz [ 561.281108][T14076] usb 9-1: Manufacturer: syz [ 561.281123][T14076] usb 9-1: SerialNumber: syz [ 561.317834][T14076] usb 9-1: config 0 descriptor?? [ 561.323436][T14076] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 561.526468][ T818] em28xx 10-1:0.0: chip ID is em2870 [ 561.552760][T14076] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 561.582008][T14076] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 561.734607][ T818] usb 10-1: USB disconnect, device number 17 [ 561.743883][ T818] em28xx 10-1:0.0: Disconnecting em28xx [ 561.755799][ T818] em28xx 10-1:0.0: Freeing device [ 561.950809][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 561.954234][T14076] usb 9-1: USB disconnect, device number 13 [ 561.970379][T14076] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 561.981563][T14076] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 561.992211][T14076] quatech2 9-1:0.51: device disconnected [ 562.325375][T18086] netlink: 'syz.9.5200': attribute type 2 has an invalid length. [ 562.325396][T18086] netlink: 'syz.9.5200': attribute type 11 has an invalid length. [ 562.325410][T18086] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5200'. [ 562.346327][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.346418][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.005125][T14074] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 563.155108][T14074] usb 9-1: Using ep0 maxpacket: 16 [ 563.161393][ T60] Bluetooth: hci1: Malformed LE Event: 0x0d [ 563.164797][T14074] usb 9-1: unable to get BOS descriptor or descriptor too short [ 563.171769][T14074] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 563.171802][T14074] usb 9-1: can't read configurations, error -71 [ 563.771938][T18109] loop4: detected capacity change from 0 to 65536 [ 563.817345][T18109] loop4: detected capacity change from 65536 to 523370496 [ 563.965430][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 564.118848][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.118875][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.118901][ T10] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 564.118915][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.124365][ T10] usb 10-1: config 0 descriptor?? [ 564.225363][T14074] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 564.375056][T14074] usb 9-1: Using ep0 maxpacket: 16 [ 564.384068][T14074] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 564.384122][T14074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 564.410444][T14074] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 564.410473][T14074] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.410547][T14074] usb 9-1: Product: syz [ 564.410560][T14074] usb 9-1: Manufacturer: syz [ 564.410574][T14074] usb 9-1: SerialNumber: syz [ 564.462471][T14074] usb 9-1: config 0 descriptor?? [ 564.523567][T14074] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 564.523609][T14074] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 564.750257][ T10] cm6533_jd 0003:0D8C:0022.003D: unknown main item tag 0x0 [ 564.750435][ T10] cm6533_jd 0003:0D8C:0022.003D: unknown main item tag 0x0 [ 564.949878][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0D8C:0022.003D/input/input49 [ 565.174143][T14074] em28xx 9-1:0.0: chip ID is em2870 [ 565.227241][ T10] cm6533_jd 0003:0D8C:0022.003D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0 [ 565.256365][ T10] usb 10-1: USB disconnect, device number 18 [ 565.500695][ T818] usb 9-1: USB disconnect, device number 15 [ 565.599335][T18141] fido_id[18141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 565.604989][ T818] em28xx 9-1:0.0: Disconnecting em28xx [ 565.685210][ T818] em28xx 9-1:0.0: Freeing device [ 565.953843][T18155] binder: BINDER_SET_CONTEXT_MGR already set [ 565.953858][T18155] binder: 18154:18155 ioctl 4018620d 200000004a80 returned -16 [ 566.448154][T18171] binder: BINDER_SET_CONTEXT_MGR already set [ 566.448163][T18171] binder: 18170:18171 ioctl 4018620d 200000004a80 returned -16 [ 566.562240][T18177] netlink: 'syz.5.5242': attribute type 1 has an invalid length. [ 566.562703][T18177] netlink: 'syz.5.5242': attribute type 2 has an invalid length. [ 566.562719][T18177] netlink: 'syz.5.5242': attribute type 1 has an invalid length. [ 566.562732][T18177] netlink: 'syz.5.5242': attribute type 3 has an invalid length. [ 566.562744][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5242'. [ 566.904035][T18188] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5248'. [ 566.904057][T18188] netlink: 'syz.5.5248': attribute type 1 has an invalid length. [ 567.567155][T18211] netlink: 'syz.8.5260': attribute type 1 has an invalid length. [ 567.567198][T18211] netlink: 'syz.8.5260': attribute type 2 has an invalid length. [ 567.567211][T18211] netlink: 'syz.8.5260': attribute type 1 has an invalid length. [ 567.567223][T18211] netlink: 'syz.8.5260': attribute type 3 has an invalid length. [ 567.567234][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5260'. [ 567.779868][T18221] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5264'. [ 567.779883][T18221] netlink: 'syz.8.5264': attribute type 1 has an invalid length. [ 569.905117][ T5879] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 570.067656][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.067691][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.067727][ T5879] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 570.067751][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.111478][ T5879] usb 6-1: config 0 descriptor?? [ 570.541120][ T5879] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 570.541247][ T5879] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 570.552274][ T5879] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.003E/input/input50 [ 570.724740][ T5879] cm6533_jd 0003:0D8C:0022.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 570.821054][ T818] usb 6-1: USB disconnect, device number 22 [ 570.883050][T18303] fido_id[18303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 571.158378][T18309] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5302'. [ 571.548508][T18322] netlink: 'syz.5.5309': attribute type 9 has an invalid length. [ 571.548530][T18322] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5309'. [ 572.005134][ T5879] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 572.158888][ T5879] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 572.158916][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.158927][ T5879] usb 10-1: Product: syz [ 572.158934][ T5879] usb 10-1: Manufacturer: syz [ 572.158942][ T5879] usb 10-1: SerialNumber: syz [ 572.275072][ T818] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 572.425169][ T818] usb 6-1: Using ep0 maxpacket: 16 [ 572.429950][ T818] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.429973][ T818] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.439667][ T5879] rtl8150 10-1:1.0: couldn't reset the device [ 572.440018][ T5879] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 572.473394][ T818] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.473420][ T818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.473439][ T818] usb 6-1: Product: syz [ 572.473451][ T818] usb 6-1: Manufacturer: syz [ 572.473464][ T818] usb 6-1: SerialNumber: syz [ 572.480563][ T5879] usb 10-1: USB disconnect, device number 19 [ 572.547878][ T818] usb 6-1: 0:2 : does not exist [ 572.742366][ T818] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 572.857683][ T818] usb 6-1: USB disconnect, device number 23 [ 572.908039][T14081] udevd[14081]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.258142][T18359] netlink: 'syz.9.5323': attribute type 9 has an invalid length. [ 574.258163][T18359] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5323'. [ 574.384371][T18362] loop5: detected capacity change from 0 to 7 [ 574.397938][T18362] Dev loop5: unable to read RDB block 7 [ 574.397977][T18362] loop5: unable to read partition table [ 574.398161][T18362] loop5: partition table beyond EOD, truncated [ 574.399706][T18362] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 575.264824][T18392] program syz.9.5341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.966903][T18438] netlink: 112 bytes leftover after parsing attributes in process `syz.8.5360'. [ 577.302555][T18446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5374'. [ 578.552332][T18472] loop5: detected capacity change from 0 to 7 [ 578.555601][T18472] Dev loop5: unable to read RDB block 7 [ 578.555649][T18472] loop5: unable to read partition table [ 578.555945][T18472] loop5: partition table beyond EOD, truncated [ 578.557069][T18472] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 578.842068][T18481] Invalid source name [ 578.842084][T18481] UBIFS error (pid: 18481): cannot open "./file0", error -22 [ 579.147123][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5378'. [ 579.654493][T18501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.711678][T18506] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 580.265456][T18516] 9p: Bad value for 'wfdno' [ 580.872822][T18532] Invalid source name [ 580.872839][T18532] UBIFS error (pid: 18532): cannot open "./file0", error -22 [ 580.971175][T18534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.028915][T18534] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 582.825363][ T39] INFO: task syz-executor:13991 blocked for more than 143 seconds. [ 582.825386][ T39] Tainted: G L syzkaller #0 [ 582.825395][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 582.825402][ T39] task:syz-executor state:D stack:18368 pid:13991 tgid:13991 ppid:1 task_flags:0x400140 flags:0x00080002 [ 582.825444][ T39] Call Trace: [ 582.825450][ T39] [ 582.825460][ T39] __schedule+0x169e/0x54f0 [ 582.825498][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 582.825522][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 582.825544][ T39] ? rt_spin_lock+0x1e0/0x400 [ 582.825563][ T39] ? __pfx___schedule+0x10/0x10 [ 582.825590][ T39] ? schedule+0x90/0x360 [ 582.825612][ T39] schedule+0x164/0x360 [ 582.825631][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 582.825649][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 582.825667][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 582.825688][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 582.825705][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 582.825728][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 582.825750][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 582.825768][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 582.825788][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 582.825808][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 582.825828][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 582.825846][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 582.825866][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 582.825885][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 582.825907][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 582.825930][ T39] deactivate_locked_super+0xbc/0x130 [ 582.825951][ T39] cleanup_mnt+0x437/0x4d0 [ 582.825972][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.825996][ T39] task_work_run+0x1d9/0x270 [ 582.826072][ T39] ? __pfx_task_work_run+0x10/0x10 [ 582.826098][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.826116][ T39] exit_to_user_mode_loop+0xed/0x480 [ 582.826136][ T39] ? rcu_is_watching+0x15/0xb0 [ 582.826160][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.826179][ T39] do_syscall_64+0x33e/0xf80 [ 582.826198][ T39] ? trace_irq_disable+0x3b/0x140 [ 582.826315][ T39] ? clear_bhb_loop+0x40/0x90 [ 582.826335][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.826355][ T39] RIP: 0033:0x7ff9dbbbda57 [ 582.826368][ T39] RSP: 002b:00007ffc0d5bd2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 582.826383][ T39] RAX: 0000000000000000 RBX: 00007ff9dbc52048 RCX: 00007ff9dbbbda57 [ 582.826393][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0d5bd3b0 [ 582.826401][ T39] RBP: 00007ffc0d5bd3b0 R08: 00007ffc0d5be3b0 R09: 00000000ffffffff [ 582.826411][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0d5be440 [ 582.826420][ T39] R13: 00007ff9dbc52048 R14: 000000000006af8c R15: 00007ffc0d5be480 [ 582.826443][ T39] [ 582.826499][ T39] [ 582.826499][ T39] Showing all locks held in the system: [ 582.826509][ T39] 10 locks held by kworker/1:1/37: [ 582.826518][ T39] #0: ffff88802bd15138 ((wq_completion)wg-crypt-wg2#10){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 582.826563][ T39] #1: ffffc90000ae7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 582.826598][ T39] #2: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 582.826628][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 582.826656][ T39] #4: ffff88805fbb1798 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 582.826691][ T39] #5: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 582.826739][ T39] #6: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 582.826770][ T39] #7: ffffffff8e3c8160 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x910 [ 582.826805][ T39] #8: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: ip6_route_output_flags+0x2e/0x5e0 [ 582.826839][ T39] #9: ffff8880b873b9a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 582.826872][ T39] 1 lock held by khungtaskd/39: [ 582.826881][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 582.826921][ T39] 2 locks held by kworker/u8:4/67: [ 582.826929][ T39] #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 582.826963][ T39] #1: ffffc9000152fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 582.827017][ T39] 2 locks held by getty/5577: [ 582.827036][ T39] #0: ffff8880342d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 582.827077][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 582.827124][ T39] 1 lock held by syz-executor/13991: [ 582.827133][ T39] #0: ffff88803a2860d0 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 582.827176][ T39] 3 locks held by udevd/14081: [ 582.827183][ T39] #0: ffff88801249c480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 582.827223][ T39] #1: ffff88802508b7d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 582.827273][ T39] #2: ffffffff8eae6ef8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 582.827399][ T39] 2 locks held by syz.5.5376/18473: [ 582.827408][ T39] #0: ffff88802b6f0480 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x380d/0x4540 [ 582.827447][ T39] #1: ffff88805fc79278 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 582.827483][ T39] [ 582.827487][ T39] ============================================= [ 582.827487][ T39] [ 582.827501][ T39] NMI backtrace for cpu 0 [ 582.827519][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 582.827538][ T39] Tainted: [L]=SOFTLOCKUP [ 582.827542][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 582.827550][ T39] Call Trace: [ 582.827557][ T39] [ 582.827562][ T39] dump_stack_lvl+0xe8/0x150 [ 582.827579][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 582.827595][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 582.827612][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 582.827631][ T39] sys_info+0x135/0x170 [ 582.827646][ T39] watchdog+0xfd3/0x1030 [ 582.827668][ T39] ? watchdog+0x1c9/0x1030 [ 582.827688][ T39] kthread+0x388/0x470 [ 582.827706][ T39] ? __pfx_watchdog+0x10/0x10 [ 582.827719][ T39] ? __pfx_kthread+0x10/0x10 [ 582.827735][ T39] ret_from_fork+0x514/0xb70 [ 582.827751][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 582.827764][ T39] ? __switch_to+0xc79/0x1410 [ 582.827783][ T39] ? __pfx_kthread+0x10/0x10 [ 582.827800][ T39] ret_from_fork_asm+0x1a/0x30 [ 582.827827][ T39] [ 582.827833][ T39] Sending NMI from CPU 0 to CPUs 1: [ 582.827861][ C1] NMI backtrace for cpu 1 [ 582.827877][ C1] CPU: 1 UID: 0 PID: 37 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 582.827898][ C1] Tainted: [L]=SOFTLOCKUP [ 582.827904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 582.827914][ C1] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 582.827933][ C1] RIP: 0010:__lock_acquire+0x1980/0x2cf0 [ 582.827953][ C1] Code: 00 39 05 9f c3 22 12 73 06 89 05 97 c3 22 12 48 8b 02 48 89 df 4c 39 e8 0f 84 2c fe ff ff 4c 89 60 30 48 8b 00 4c 39 e8 75 f4 <48> 89 df e9 18 fe ff ff 48 89 fb 48 c7 c7 10 54 29 8e 4c 89 fe e8 [ 582.827965][ C1] RSP: 0018:ffffc90000ae6f50 EFLAGS: 00000046 [ 582.827976][ C1] RAX: ffffffff93697ec0 RBX: 00000000000003cd RCX: 00000000000006e8 [ 582.827987][ C1] RDX: ffffffff96530c68 RSI: ffff88801eaf2c48 RDI: 00000000000003cd [ 582.827997][ C1] RBP: 424da3a4427991c3 R08: ffffc90000ae6f18 R09: 0000000000000020 [ 582.828008][ C1] R10: dffffc0000000000 R11: ffffffff81a12540 R12: ffffffff966a2df8 [ 582.828019][ C1] R13: ffffffff93697ec0 R14: ffff88801eaf1ec0 R15: 00000000000006e7 [ 582.828029][ C1] FS: 0000000000000000(0000) GS:ffff888125b64000(0000) knlGS:0000000000000000 [ 582.828042][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.828052][ C1] CR2: 00007ffd1ee05ea0 CR3: 0000000065588000 CR4: 00000000003526f0 [ 582.828065][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 582.828074][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 582.828084][ C1] Call Trace: [ 582.828090][ C1] [ 582.828103][ C1] ? ktime_get+0x45/0x220 [ 582.828119][ C1] lock_acquire+0x106/0x350 [ 582.828135][ C1] ? ktime_get+0x45/0x220 [ 582.828150][ C1] ? finish_task_switch+0x15f/0xbe0 [ 582.828168][ C1] ? lock_acquire+0x106/0x350 [ 582.828184][ C1] ? finish_task_switch+0x15f/0xbe0 [ 582.828203][ C1] ? ktime_get+0x45/0x220 [ 582.828217][ C1] seqcount_lockdep_reader_access+0x55/0x100 [ 582.828233][ C1] ? ktime_get+0x45/0x220 [ 582.828247][ C1] ktime_get+0x45/0x220 [ 582.828263][ C1] finish_task_switch+0x312/0xbe0 [ 582.828291][ C1] __schedule+0x16a6/0x54f0 [ 582.828315][ C1] ? unwind_next_frame+0xa6/0x2550 [ 582.828337][ C1] ? __pfx___schedule+0x10/0x10 [ 582.828360][ C1] preempt_schedule_irq+0x4d/0xa0 [ 582.828378][ C1] irqentry_exit+0x14f/0x730 [ 582.828399][ C1] ? rcu_is_watching+0x15/0xb0 [ 582.828420][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 582.828435][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x28/0x80 [ 582.828450][ C1] Code: 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d b8 d1 f6 10 65 8b 35 d9 d1 f6 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 e4 0b 00 00 <89> d7 09 f7 74 11 85 f6 75 39 85 d2 74 35 83 b9 b4 16 00 00 00 74 [ 582.828461][ C1] RSP: 0018:ffffc90000ae7558 EFLAGS: 00000246 [ 582.828473][ C1] RAX: ffffffff89152709 RBX: ffffffff9a849be0 RCX: ffff88801eaf1ec0 [ 582.828484][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.828493][ C1] RBP: ffffc90000ae76e8 R08: 0000000000000000 R09: 0000000000000000 [ 582.828502][ C1] R10: ffffc90000ae74c0 R11: fffff5200015ce9c R12: e00000000caf6c83 [ 582.828513][ C1] R13: e00000000caf6c82 R14: 1ffffffff350937c R15: e00000000caf6c82 [ 582.828526][ C1] ? save_dst_trace_buffer+0x1a9/0x5b0 [ 582.828547][ C1] save_dst_trace_buffer+0x1a9/0x5b0 [ 582.828566][ C1] ? __pfx_save_dst_trace_buffer+0x10/0x10 [ 582.828582][ C1] ? fib6_rule_lookup+0x3ce/0x740 [ 582.828596][ C1] ? ip6_route_output_flags+0x3df/0x5e0 [ 582.828611][ C1] ? ip6_dst_lookup_tail+0x2ae/0x15a0 [ 582.828628][ C1] ? ip6_dst_lookup_flow+0x89/0x150 [ 582.828644][ C1] ? send6+0x4dc/0x910 [ 582.828658][ C1] ? wg_socket_send_skb_to_peer+0x128/0x200 [ 582.828673][ C1] ? wg_packet_tx_worker+0x1c8/0x7c0 [ 582.828688][ C1] ? process_one_work+0x9a3/0x1710 [ 582.828700][ C1] ? worker_thread+0xba8/0x11e0 [ 582.828714][ C1] ? kthread+0x388/0x470 [ 582.828729][ C1] ? ret_from_fork+0x514/0xb70 [ 582.828742][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 582.828764][ C1] ip6_route_output_flags+0x3df/0x5e0 [ 582.828779][ C1] ? ip6_route_output_flags+0x2e/0x5e0 [ 582.828796][ C1] ip6_dst_lookup_tail+0x2ae/0x15a0 [ 582.828817][ C1] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 582.828834][ C1] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 582.828856][ C1] ? __ipv6_chk_addr_and_flags+0x68f/0x7f0 [ 582.828875][ C1] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 582.828897][ C1] ip6_dst_lookup_flow+0x89/0x150 [ 582.828915][ C1] send6+0x4dc/0x910 [ 582.828933][ C1] ? send6+0x255/0x910 [ 582.828948][ C1] ? __pfx_send6+0x10/0x10 [ 582.828962][ C1] ? rcu_is_watching+0x15/0xb0 [ 582.828983][ C1] ? rcu_is_watching+0x15/0xb0 [ 582.829001][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 582.829015][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 582.829032][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 582.829048][ C1] wg_socket_send_skb_to_peer+0x128/0x200 [ 582.829066][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 582.829085][ C1] ? process_one_work+0x8b7/0x1710 [ 582.829098][ C1] process_one_work+0x9a3/0x1710 [ 582.829118][ C1] ? __pfx_process_one_work+0x10/0x10 [ 582.829131][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 582.829151][ C1] worker_thread+0xba8/0x11e0 [ 582.829174][ C1] kthread+0x388/0x470 [ 582.829190][ C1] ? __pfx_worker_thread+0x10/0x10 [ 582.829204][ C1] ? __pfx_kthread+0x10/0x10 [ 582.829221][ C1] ret_from_fork+0x514/0xb70 [ 582.829236][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 582.829250][ C1] ? __switch_to+0xc79/0x1410 [ 582.829270][ C1] ? __pfx_kthread+0x10/0x10 [ 582.829292][ C1] ret_from_fork_asm+0x1a/0x30 [ 582.829313][ C1] [ 582.829937][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 582.829951][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 582.829969][ T39] Tainted: [L]=SOFTLOCKUP [ 582.829974][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 582.829981][ T39] Call Trace: [ 582.829987][ T39] [ 582.829993][ T39] vpanic+0x56c/0xa60 [ 582.830012][ T39] ? __pfx___schedule+0x10/0x10 [ 582.830038][ T39] ? __pfx_vpanic+0x10/0x10 [ 582.830060][ T39] panic+0xc5/0xd0 [ 582.830076][ T39] ? __pfx_panic+0x10/0x10 [ 582.830092][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 582.830115][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 582.830135][ T39] watchdog+0x102c/0x1030 [ 582.830158][ T39] ? watchdog+0x1c9/0x1030 [ 582.830178][ T39] kthread+0x388/0x470 [ 582.830197][ T39] ? __pfx_watchdog+0x10/0x10 [ 582.830211][ T39] ? __pfx_kthread+0x10/0x10 [ 582.830228][ T39] ret_from_fork+0x514/0xb70 [ 582.830244][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 582.830257][ T39] ? __switch_to+0xc79/0x1410 [ 582.830278][ T39] ? __pfx_kthread+0x10/0x10 [ 582.830296][ T39] ret_from_fork_asm+0x1a/0x30 [ 582.830322][ T39] [ 582.834444][ T39] Kernel Offset: disabled