last executing test programs: 1m37.876343965s ago: executing program 1 (id=15): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 1m37.71962138s ago: executing program 1 (id=19): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) close(r0) 1m37.639098068s ago: executing program 1 (id=21): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x215463, 0x0) 1m37.590386499s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x28e3291, 0x0) 1m37.519475828s ago: executing program 1 (id=27): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m36.287849078s ago: executing program 1 (id=42): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xa6b}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1b5000}]}, 0x44}}, 0x20000000) 1m36.216106795s ago: executing program 32 (id=42): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xa6b}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1b5000}]}, 0x44}}, 0x20000000) 55.188615967s ago: executing program 2 (id=796): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 55.026614851s ago: executing program 2 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 54.960855204s ago: executing program 2 (id=804): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 54.868057574s ago: executing program 2 (id=806): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003f000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) rename(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='./file0/file0\x00') 54.810521981s ago: executing program 2 (id=808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x10000002, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x200204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 54.4618209s ago: executing program 2 (id=814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 54.311015132s ago: executing program 33 (id=814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.698810012s ago: executing program 0 (id=1583): unshare(0x62040200) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.846249458s ago: executing program 0 (id=1603): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x2, 0x1}) 2.792292313s ago: executing program 0 (id=1605): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x20084005) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) 2.706160771s ago: executing program 0 (id=1609): pselect6(0x40, &(0x7f0000000100)={0x3, 0x5, 0x400000000000, 0x0, 0x3d7, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) 2.081760953s ago: executing program 5 (id=1628): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.039372116s ago: executing program 5 (id=1629): r0 = inotify_init() pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.975864797s ago: executing program 5 (id=1631): io_uring_setup(0x3fa0, &(0x7f00000000c0)={0x0, 0x42e5, 0x400, 0x1, 0x33a}) close(0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) 1.804952747s ago: executing program 0 (id=1636): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0) 1.588526467s ago: executing program 3 (id=1646): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7f, 0x0, 0x7fc00100}]}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) 1.419823638s ago: executing program 4 (id=1649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x8, 0x4) 1.228893449s ago: executing program 4 (id=1650): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x42, 0x81) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) unshare(0x28000600) mount$tmpfs(0x0, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2160413, 0x0) 1.089915028s ago: executing program 5 (id=1651): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 918.655775ms ago: executing program 5 (id=1652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000331000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="b9c00d0000b8515c7defba000000000f304a99ab66baa000b005eec4e2b9a8023641f7e266b803008ee0440f20c0350e000000440f22c00fc75d06b9370900000f32", 0x42}], 0x1, 0x50, &(0x7f0000000280), 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) 918.181622ms ago: executing program 0 (id=1653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 794.664756ms ago: executing program 5 (id=1654): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="40000f0000000116e0875a3c3e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 414.433788ms ago: executing program 4 (id=1655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 414.327796ms ago: executing program 3 (id=1656): mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000640)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x20001, 0x91) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="98da", 0x2}], 0x1, 0x4) 337.915945ms ago: executing program 3 (id=1657): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 336.844558ms ago: executing program 4 (id=1658): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 327.91797ms ago: executing program 3 (id=1659): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 300.20876ms ago: executing program 4 (id=1660): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969", 0x8}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x54}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x61) 218.502659ms ago: executing program 4 (id=1661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 218.001085ms ago: executing program 3 (id=1662): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x2000}) 0s ago: executing program 3 (id=1663): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) creat(&(0x7f0000000280)='./bus\x00', 0x2) kernel console output (not intermixed with test programs): lid descriptor of length 55, skipping remainder of the config [ 66.682188][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 66.684928][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.685908][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 66.690121][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.693760][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 66.694962][ T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.696872][ T6001] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.700746][ T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.703603][ T6001] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.703618][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.704900][ T6001] usb 7-1: config 0 descriptor?? [ 66.708335][ T29] usb 9-1: Product: syz [ 66.719207][ T29] usb 9-1: Manufacturer: syz [ 66.723514][ T842] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.727095][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 66.729193][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 66.733125][ T29] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 66.735774][ T29] cdc_wdm 9-1:1.0: Unknown control protocol [ 66.873594][ T842] usb 8-1: Using ep0 maxpacket: 8 [ 66.882288][ T842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.887060][ T842] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.889909][ T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.894504][ T842] usb 8-1: config 0 descriptor?? [ 66.989805][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 66.992174][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 66.995726][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 66.997889][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.000499][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 67.002728][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.004856][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 67.006986][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.009108][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 67.011194][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.013371][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 67.015551][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.017877][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 67.019957][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.022161][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 67.024358][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.026793][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 67.029133][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.031220][ T6017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.034234][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 67.036946][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 67.039698][ T29] usb 9-1: USB disconnect, device number 3 [ 67.042191][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 67.110039][ T842] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 67.120908][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.124135][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.127097][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.130067][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.133009][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.136358][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.139142][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.141504][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.144070][ T6001] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 67.150637][ T6001] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 67.316565][ T29] usb 8-1: USB disconnect, device number 4 [ 67.316664][ C1] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 67.319937][ T34] usb 7-1: USB disconnect, device number 5 [ 67.563564][ T5972] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.644792][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.715976][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 67.720037][ T5972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.722721][ T5972] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 67.726764][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.732763][ T6761] netlink: 'syz.4.266': attribute type 83 has an invalid length. [ 67.734178][ T5972] usb 5-1: config 0 descriptor?? [ 67.840430][ T5938] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 67.844941][ T5938] CPU: 1 UID: 0 PID: 5938 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 67.844967][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.844980][ T5938] Workqueue: hci2 hci_rx_work [ 67.845005][ T5938] Call Trace: [ 67.845012][ T5938] [ 67.845020][ T5938] dump_stack_lvl+0x100/0x190 [ 67.845050][ T5938] sysfs_warn_dup.cold+0x1c/0x28 [ 67.845077][ T5938] sysfs_create_dir_ns+0x24b/0x2b0 [ 67.845108][ T5938] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 67.845137][ T5938] ? find_held_lock+0x2b/0x80 [ 67.845165][ T5938] ? kobject_add_internal+0x25f/0x930 [ 67.845193][ T5938] ? kobject_add_internal+0x25f/0x930 [ 67.845222][ T5938] ? do_raw_spin_unlock+0x145/0x1e0 [ 67.845250][ T5938] kobject_add_internal+0x2c8/0x930 [ 67.845282][ T5938] kobject_add+0x16a/0x1e0 [ 67.845308][ T5938] ? __pfx_kobject_add+0x10/0x10 [ 67.845334][ T5938] ? class_to_subsys+0x10f/0x150 [ 67.845361][ T5938] ? kobject_put+0xb9/0x640 [ 67.845385][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 67.845412][ T5938] device_add+0x294/0x1950 [ 67.845435][ T5938] ? __pfx_dev_set_name+0x10/0x10 [ 67.845461][ T5938] ? __pfx_device_add+0x10/0x10 [ 67.845484][ T5938] ? mgmt_send_event_skb+0x2fb/0x460 [ 67.845514][ T5938] hci_conn_add_sysfs+0x1a3/0x260 [ 67.845540][ T5938] le_conn_complete_evt+0x11cb/0x1f40 [ 67.845568][ T5938] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 67.845597][ T5938] hci_le_conn_complete_evt+0x23c/0x3a0 [ 67.845619][ T5938] ? skb_pull_data+0x15f/0x1e0 [ 67.845653][ T5938] hci_le_meta_evt+0x34a/0x5f0 [ 67.845675][ T5938] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 67.845700][ T5938] hci_event_packet+0x682/0x11c0 [ 67.845722][ T5938] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 67.845746][ T5938] ? __pfx_hci_event_packet+0x10/0x10 [ 67.845770][ T5938] ? kcov_remote_start+0x374/0x660 [ 67.845798][ T5938] ? lockdep_hardirqs_on+0x78/0x100 [ 67.845829][ T5938] hci_rx_work+0x451/0xfc0 [ 67.845856][ T5938] process_one_work+0x9d7/0x1920 [ 67.845891][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 67.845930][ T5938] ? __pfx_hci_rx_work+0x10/0x10 [ 67.845954][ T5938] worker_thread+0x5da/0xe40 [ 67.845986][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 67.846012][ T5938] ? kthread+0x13a/0x450 [ 67.846035][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 67.846060][ T5938] kthread+0x370/0x450 [ 67.846082][ T5938] ? __pfx_kthread+0x10/0x10 [ 67.846106][ T5938] ret_from_fork+0x754/0xd80 [ 67.846134][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 67.846162][ T5938] ? __switch_to+0x7b4/0x1120 [ 67.846182][ T5938] ? __pfx_kthread+0x10/0x10 [ 67.846207][ T5938] ret_from_fork_asm+0x1a/0x30 [ 67.846241][ T5938] [ 67.846264][ T5938] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.957375][ T5938] Bluetooth: hci2: failed to register connection device [ 68.034316][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.062445][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 68.153849][ T5972] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 68.224424][ T6001] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 68.274847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.373724][ T1330] usb 5-1: USB disconnect, device number 3 [ 68.397801][ T6001] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.400343][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.403991][ T6001] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.407736][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.411253][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.424834][ T6001] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.427235][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.430618][ T6001] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.443591][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.447213][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.456693][ T6001] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 68.459564][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.463150][ T6001] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.467117][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.470832][ T6001] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.478610][ T6001] usb 7-1: string descriptor 0 read error: -22 [ 68.480612][ T6001] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 68.483639][ T6001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.496925][ T6001] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 68.991601][ T6824] netlink: 'syz.3.293': attribute type 12 has an invalid length. [ 69.003981][ T6824] netlink: 'syz.3.293': attribute type 29 has an invalid length. [ 69.006461][ T6824] netlink: 148 bytes leftover after parsing attributes in process `syz.3.293'. [ 69.009662][ T6824] netlink: 59 bytes leftover after parsing attributes in process `syz.3.293'. [ 69.083625][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.249291][ T1330] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.358644][ T6845] kvm: user requested TSC rate below hardware speed [ 69.394790][ T1330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.397990][ T1330] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.402591][ T1330] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 69.413469][ T1330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.416039][ T1330] usb 5-1: Product: syz [ 69.417378][ T1330] usb 5-1: Manufacturer: syz [ 69.418851][ T1330] usb 5-1: SerialNumber: syz [ 69.424564][ T1330] usb 5-1: config 0 descriptor?? [ 69.632153][ T1330] usb 5-1: USB disconnect, device number 4 [ 70.124232][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.197830][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 70.382323][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.316'. [ 70.395071][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.428208][ T6001] IPVS: starting estimator thread 0... [ 70.431636][ T6885] tipc: Started in network mode [ 70.433224][ T6885] tipc: Node identity ac1414aa, cluster identity 4711 [ 70.436056][ T6885] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 70.438984][ T6885] tipc: Enabled bearer , priority 10 [ 70.553536][ T6886] IPVS: using max 45 ests per chain, 108000 per kthread [ 70.835451][ T10] usb 7-1: USB disconnect, device number 6 [ 70.995117][ C2] net_ratelimit: 4 callbacks suppressed [ 70.995129][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 71.133955][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 71.153672][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.161376][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 71.167705][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 71.203642][ T6917] mmap: syz.2.330 (6917) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.273652][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 71.399661][ T6944] batadv_slave_0: entered promiscuous mode [ 71.403170][ T6942] batadv_slave_0: left promiscuous mode [ 71.413462][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 71.453249][ T6948] netlink: 44 bytes leftover after parsing attributes in process `syz.2.338'. [ 71.465088][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.468529][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.482450][ T6948] netlink: 44 bytes leftover after parsing attributes in process `syz.2.338'. [ 71.555829][ T6001] tipc: Node number set to 2886997162 [ 71.693488][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 71.847272][ T6986] 9pnet: p9_errstr2errno: server reported unknown error [ 71.876096][ T6995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.360'. [ 71.963505][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 72.194006][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.486710][ T7061] input: syz0 as /devices/virtual/input/input7 [ 72.493535][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 72.951089][ T7086] tun0: tun_chr_ioctl cmd 1074025675 [ 72.953321][ T7086] tun0: persist enabled [ 72.955789][ T7086] tun0: tun_chr_ioctl cmd 1074025675 [ 72.958068][ T7086] tun0: persist disabled [ 73.003381][ T7088] syzkaller1: entered promiscuous mode [ 73.006025][ T7088] syzkaller1: entered allmulticast mode [ 73.077156][ T7090] __nla_validate_parse: 2 callbacks suppressed [ 73.077175][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 73.234209][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.448289][ T40] audit: type=1326 audit(1771147018.010:36): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=7110 comm="syz.4.408" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc8f6c code=0x0 [ 74.003521][ T5972] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 74.113636][ T5938] Bluetooth: hci2: command 0x0406 tx timeout [ 74.163500][ T5972] usb 8-1: Using ep0 maxpacket: 32 [ 74.167136][ T5972] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 74.171153][ T5972] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 74.176035][ T5972] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.180181][ T5972] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 74.189235][ T5972] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 74.192963][ T5972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.193459][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.196332][ T5972] usb 8-1: Product: syz [ 74.200471][ T5972] usb 8-1: Manufacturer: syz [ 74.202384][ T5972] usb 8-1: SerialNumber: syz [ 74.212870][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 74.217721][ T5972] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input8 [ 74.343593][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 74.355674][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 74.359192][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.362376][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.365766][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.369814][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.372655][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.423536][ T5972] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 74.426208][ T5972] (id 0x00) [ 74.473608][ T5972] rc_core: IR keymap rc-imon-pad not found [ 74.475633][ T5972] Registered IR keymap rc-empty [ 74.477344][ T5972] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 74.480676][ T5972] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 74.582586][ T29] usb 7-1: usb_control_msg returned -32 [ 74.584428][ T29] usbtmc 7-1:16.0: can't read capabilities [ 74.646364][ T5972] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 74.651088][ T5972] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input9 [ 74.658323][ T5972] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:5> initialized [ 74.815872][ T29] usb 8-1: USB disconnect, device number 5 [ 74.935678][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 74.939488][ T7150] usbtmc 7-1:16.0: Unable to send data, error -71 [ 75.692334][ T6086] libceph: connect (1)[c::]:6789 error -101 [ 75.694871][ T6086] libceph: mon0 (1)[c::]:6789 connect error [ 75.743948][ T7166] ceph: No mds server is up or the cluster is laggy [ 75.818352][ T7175] sctp: [Deprecated]: syz.3.433 (pid 7175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.818352][ T7175] Use struct sctp_sack_info instead [ 75.956917][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.959692][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.963713][ T829] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 76.123520][ T829] usb 9-1: Using ep0 maxpacket: 16 [ 76.129162][ T829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.132580][ T829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.136054][ T829] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 76.139057][ T829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.143025][ T829] usb 9-1: config 0 descriptor?? [ 76.353628][ T29] net_ratelimit: 8 callbacks suppressed [ 76.353640][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.557798][ T829] hid_parser_main: 6 callbacks suppressed [ 76.557811][ T829] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 76.561952][ T829] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 76.566720][ T829] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 76.569220][ T829] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 76.571879][ T829] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 76.590611][ T829] cm6533_jd 0003:0D8C:0022.0007: hiddev1,hidraw1: USB HID va6.05 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 76.603924][ T1330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.673569][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 76.753699][ T1330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.766095][ T29] usb 9-1: USB disconnect, device number 4 [ 76.941170][ T842] usb 7-1: USB disconnect, device number 7 [ 77.015104][ T7211] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 77.393809][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.394062][ T829] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 77.563499][ T829] usb 7-1: Using ep0 maxpacket: 8 [ 77.567566][ T829] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 77.570600][ T829] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.575747][ T829] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.579286][ T829] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.584225][ T829] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.588859][ T829] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.592441][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.713536][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 77.743717][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 77.767842][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 77.805919][ T829] usb 7-1: usb_control_msg returned -32 [ 77.807819][ T829] usbtmc 7-1:16.0: can't read capabilities [ 77.874367][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.023595][ T829] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.157778][ T7257] usbtmc 7-1:16.0: usb_bulk_msg returned -71 [ 78.173538][ T829] usb 8-1: Using ep0 maxpacket: 16 [ 78.177077][ T829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.180480][ T829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.183835][ T829] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 78.186735][ T829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.190826][ T829] usb 8-1: config 0 descriptor?? [ 78.358830][ T842] usb 7-1: USB disconnect, device number 8 [ 78.433658][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.604014][ T829] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 78.606378][ T829] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 78.608748][ T829] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 78.611028][ T829] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 78.613314][ T829] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 78.619563][ T829] cm6533_jd 0003:0D8C:0022.0008: hiddev0,hidraw1: USB HID va6.05 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 78.753620][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 78.867714][ T1330] usb 8-1: USB disconnect, device number 6 [ 79.474609][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.523631][ T6016] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 80.694933][ T6016] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 80.698532][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.702067][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.705432][ T6016] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 80.710614][ T6016] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 80.714280][ T6016] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 80.716966][ T6016] usb 9-1: Manufacturer: syz [ 80.719765][ T6016] usb 9-1: config 0 descriptor?? [ 81.133470][ T6016] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 81.209003][ T7313] loop8: detected capacity change from 0 to 8 [ 81.214271][ T5934] Dev loop8: unable to read RDB block 8 [ 81.216077][ T5934] loop8: unable to read partition table [ 81.217999][ T5934] loop8: partition table beyond EOD, truncated [ 81.222925][ T7313] Dev loop8: unable to read RDB block 8 [ 81.225799][ T7313] loop8: unable to read partition table [ 81.227722][ T7313] loop8: partition table beyond EOD, truncated [ 81.229630][ T7313] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 81.386030][ T6016] usb 9-1: USB disconnect, device number 5 [ 81.543488][ T842] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 81.553619][ T6756] net_ratelimit: 4 callbacks suppressed [ 81.553630][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.704192][ T842] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 81.708345][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.712052][ T842] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.714522][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.717172][ T842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.719408][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.721915][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.727380][ T842] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.730769][ T842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.734085][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.737186][ T842] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.741650][ T842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.745170][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.748419][ T842] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.751825][ T842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.755701][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.759424][ T842] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.763561][ T842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.766640][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.770272][ T842] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.774885][ T842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.778417][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.781820][ T842] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.785891][ T842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.789426][ T842] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.792281][ T842] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.796427][ T842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.800039][ T842] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 81.802970][ T842] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 81.805765][ T842] usb 8-1: Product: syz [ 81.807105][ T842] usb 8-1: Manufacturer: syz [ 81.808596][ T842] usb 8-1: SerialNumber: syz [ 81.811843][ T842] usb 8-1: config 0 descriptor?? [ 81.818766][ T842] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 81.873499][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 82.032243][ T842] usb 8-1: USB disconnect, device number 7 [ 82.037265][ T842] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 82.248794][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 82.251604][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 82.567703][ T5938] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 82.571670][ T5938] CPU: 3 UID: 0 PID: 5938 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 82.571687][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.571697][ T5938] Workqueue: hci3 hci_rx_work [ 82.571714][ T5938] Call Trace: [ 82.571720][ T5938] [ 82.571725][ T5938] dump_stack_lvl+0x100/0x190 [ 82.571744][ T5938] sysfs_warn_dup.cold+0x1c/0x28 [ 82.571760][ T5938] sysfs_create_dir_ns+0x24b/0x2b0 [ 82.571781][ T5938] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 82.571798][ T5938] ? find_held_lock+0x2b/0x80 [ 82.571814][ T5938] ? kobject_add_internal+0x25f/0x930 [ 82.571832][ T5938] ? kobject_add_internal+0x25f/0x930 [ 82.571849][ T5938] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.571865][ T5938] kobject_add_internal+0x2c8/0x930 [ 82.571889][ T5938] kobject_add+0x16a/0x1e0 [ 82.571911][ T5938] ? __pfx_kobject_add+0x10/0x10 [ 82.571934][ T5938] ? class_to_subsys+0x10f/0x150 [ 82.571959][ T5938] ? kobject_put+0xb9/0x640 [ 82.571984][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 82.572010][ T5938] device_add+0x294/0x1950 [ 82.572032][ T5938] ? __pfx_dev_set_name+0x10/0x10 [ 82.572048][ T5938] ? __pfx_device_add+0x10/0x10 [ 82.572061][ T5938] ? mgmt_send_event_skb+0x2fb/0x460 [ 82.572077][ T5938] hci_conn_add_sysfs+0x1a3/0x260 [ 82.572092][ T5938] le_conn_complete_evt+0x11cb/0x1f40 [ 82.572107][ T5938] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 82.572123][ T5938] hci_le_conn_complete_evt+0x23c/0x3a0 [ 82.572136][ T5938] ? skb_pull_data+0x15f/0x1e0 [ 82.572155][ T5938] hci_le_meta_evt+0x34a/0x5f0 [ 82.572168][ T5938] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 82.572183][ T5938] hci_event_packet+0x682/0x11c0 [ 82.572195][ T5938] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 82.572209][ T5938] ? __pfx_hci_event_packet+0x10/0x10 [ 82.572223][ T5938] ? kcov_remote_start+0x374/0x660 [ 82.572238][ T5938] ? lockdep_hardirqs_on+0x78/0x100 [ 82.572255][ T5938] hci_rx_work+0x451/0xfc0 [ 82.572271][ T5938] process_one_work+0x9d7/0x1920 [ 82.572291][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 82.572310][ T5938] ? __pfx_hci_rx_work+0x10/0x10 [ 82.572323][ T5938] worker_thread+0x5da/0xe40 [ 82.572340][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 82.572355][ T5938] ? kthread+0x13a/0x450 [ 82.572367][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 82.572381][ T5938] kthread+0x370/0x450 [ 82.572393][ T5938] ? __pfx_kthread+0x10/0x10 [ 82.572407][ T5938] ret_from_fork+0x754/0xd80 [ 82.572424][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 82.572440][ T5938] ? __switch_to+0x7b4/0x1120 [ 82.572451][ T5938] ? __pfx_kthread+0x10/0x10 [ 82.572472][ T5938] ret_from_fork_asm+0x1a/0x30 [ 82.572516][ T5938] [ 82.572536][ T5938] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.603485][ T6001] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 82.604182][ T5938] Bluetooth: hci3: failed to register connection device [ 82.605800][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.765464][ T6001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.769316][ T6001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.772461][ T6001] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.776725][ T6001] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.780222][ T6001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.784355][ T6001] usb 9-1: config 0 descriptor?? [ 82.913474][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 83.204774][ T6001] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 83.217402][ T6001] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 83.354980][ T7348] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 83.456430][ T5972] usb 9-1: USB disconnect, device number 6 [ 83.634890][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.953598][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 83.956822][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.274690][ T1330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.144234][ T1330] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 85.148707][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 85.151232][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 85.293532][ T1330] usb 9-1: Using ep0 maxpacket: 8 [ 85.298277][ T1330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.303034][ T1330] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.306914][ T1330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.316614][ T1330] usb 9-1: config 0 descriptor?? [ 85.413830][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 85.416778][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 85.529647][ T1330] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 85.933807][ T829] libceph: connect (1)[c::]:6789 error -101 [ 85.936617][ T829] libceph: mon0 (1)[c::]:6789 connect error [ 85.975073][ T7400] ceph: No mds server is up or the cluster is laggy [ 85.985149][ T829] usb 9-1: USB disconnect, device number 7 [ 86.196334][ T53] cfg80211: failed to load regulatory.db [ 86.763687][ T53] net_ratelimit: 10 callbacks suppressed [ 86.763705][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.083537][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 87.203969][ T3239] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.314788][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.353665][ T3239] usb 5-1: Using ep0 maxpacket: 8 [ 87.357701][ T3239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.361409][ T3239] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 87.364708][ T3239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.373856][ T3239] usb 5-1: config 0 descriptor?? [ 87.589099][ T3239] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 87.803740][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.033691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.044009][ T6086] usb 5-1: USB disconnect, device number 5 [ 88.114129][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 88.307460][ T7499] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 88.320980][ T7499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.603754][ T842] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 88.753648][ T5938] Bluetooth: hci3: command 0x0406 tx timeout [ 88.764979][ T842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.769714][ T842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.775248][ T842] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.781057][ T842] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.785088][ T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.791436][ T842] usb 8-1: config 0 descriptor?? [ 88.851992][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.039285][ T7545] input: syz0 as /devices/virtual/input/input11 [ 89.153963][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 89.204352][ T842] hid_parser_main: 1 callbacks suppressed [ 89.204424][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.210553][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.215473][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.218719][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.222088][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.225817][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.229287][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.232618][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.236932][ T842] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 89.253451][ T842] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 89.362426][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 89.370570][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 89.374816][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 89.466035][ T3239] usb 8-1: USB disconnect, device number 8 [ 89.884615][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.036693][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'. [ 90.185408][ T7627] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 90.203478][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 90.208726][ T7627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.311909][ T7634] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 90.429525][ T7640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.624'. [ 90.453594][ T5972] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 90.608351][ T5972] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.613204][ T5972] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.618037][ T5972] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.623503][ T5972] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.627263][ T5972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.632480][ T5972] usb 9-1: config 0 descriptor?? [ 91.046000][ T5972] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 91.053087][ T5972] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 91.319080][ T5972] usb 9-1: USB disconnect, device number 8 [ 91.452014][ T40] audit: type=1326 audit(1771147036.010:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.0.657" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f16f6c code=0x0 [ 91.945316][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 91.956431][ T6001] net_ratelimit: 10 callbacks suppressed [ 91.956443][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.964534][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.038603][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'. [ 92.043117][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 92.046187][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 92.275011][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 92.487885][ T7765] syzkaller1: entered promiscuous mode [ 92.490163][ T7765] syzkaller1: entered allmulticast mode [ 92.523574][ T7772] input: syz0 as /devices/virtual/input/input12 [ 92.733524][ T6756] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.893483][ T6756] usb 5-1: Using ep0 maxpacket: 8 [ 92.897074][ T6756] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 92.899853][ T6756] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 92.902679][ T6756] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 92.910062][ T6756] usb 5-1: config 250 has no interface number 0 [ 92.912055][ T6756] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 92.923439][ T6756] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 92.928427][ T6756] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.931646][ T6756] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.939052][ T6756] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 92.943972][ T6756] usb 5-1: config 250 interface 228 has no altsetting 0 [ 92.947616][ T6756] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 92.950438][ T6756] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 92.953043][ T6756] usb 5-1: Product: syz [ 92.954868][ T6756] usb 5-1: SerialNumber: syz [ 92.974510][ T6756] hub 5-1:250.228: bad descriptor, ignoring hub [ 92.976692][ T6756] hub 5-1:250.228: probe with driver hub failed with error -5 [ 92.993707][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.027632][ T7807] netlink: 44 bytes leftover after parsing attributes in process `syz.4.696'. [ 93.197829][ T6756] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 93.323560][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 93.393861][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.504543][ T1330] usb 5-1: USB disconnect, device number 6 [ 93.509433][ T1330] usblp0: removed [ 93.612269][ T40] audit: type=1326 audit(1771147038.170:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.726" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc8f6c code=0x0 [ 94.009813][ T7871] syzkaller1: entered promiscuous mode [ 94.012700][ T7871] syzkaller1: entered allmulticast mode [ 94.033994][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.353520][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 94.525114][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.779549][ T6001] hid_parser_main: 8 callbacks suppressed [ 94.779563][ T6001] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 94.787957][ T6001] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 95.060609][ T40] audit: type=1326 audit(1771147039.620:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.2.740" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x0 [ 95.074732][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.655241][ T7949] __nla_validate_parse: 2 callbacks suppressed [ 95.655254][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 95.780966][ T7958] syzkaller1: entered promiscuous mode [ 95.783984][ T7958] syzkaller1: entered allmulticast mode [ 96.313524][ T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 96.371407][ T8007] input: syz1 as /devices/virtual/input/input13 [ 96.473789][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 96.477327][ T53] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 96.479974][ T53] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 96.483002][ T53] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 96.486435][ T53] usb 8-1: config 250 has no interface number 0 [ 96.488416][ T53] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 96.492164][ T53] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 96.496542][ T53] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.500761][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.503542][ T53] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.508462][ T53] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 96.512915][ T53] usb 8-1: config 250 interface 228 has no altsetting 0 [ 96.516841][ T53] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 96.519800][ T53] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 96.522464][ T53] usb 8-1: Product: syz [ 96.524247][ T53] usb 8-1: SerialNumber: syz [ 96.536427][ T53] hub 8-1:250.228: bad descriptor, ignoring hub [ 96.539167][ T53] hub 8-1:250.228: probe with driver hub failed with error -5 [ 96.742170][ T53] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 97.057834][ T53] usb 8-1: USB disconnect, device number 9 [ 97.064836][ T53] usblp0: removed [ 97.075474][ T3239] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 97.080464][ T3239] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 97.153605][ T6756] net_ratelimit: 10 callbacks suppressed [ 97.153617][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.473546][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 97.553633][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.751213][ T53] IPVS: starting estimator thread 0... [ 97.833827][ T8046] IPVS: using max 27 ests per chain, 64800 per kthread [ 97.895716][ T535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.968911][ T535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.052140][ T535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.059528][ T8057] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 98.064473][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.068144][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.072467][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.076209][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.079077][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.117388][ T8066] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 98.146785][ T535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.166850][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.206914][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.226165][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 98.289800][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 98.431366][ T535] bridge_slave_1: left allmulticast mode [ 98.434011][ T535] bridge_slave_1: left promiscuous mode [ 98.436562][ T535] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.441817][ T535] bridge_slave_0: left allmulticast mode [ 98.446799][ T535] bridge_slave_0: left promiscuous mode [ 98.449272][ T535] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.476204][ T8087] block nbd3: not configured, cannot reconfigure [ 98.513518][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 98.684746][ T535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.689894][ T535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.710443][ T535] bond0 (unregistering): Released all slaves [ 98.753627][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.756589][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.760376][ T8060] bridge_slave_0: entered allmulticast mode [ 98.774204][ T8060] bridge_slave_0: entered promiscuous mode [ 98.778933][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.781813][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.793641][ T8060] bridge_slave_1: entered allmulticast mode [ 98.797984][ T8060] bridge_slave_1: entered promiscuous mode [ 98.828386][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.833446][ T535] tipc: Disabling bearer [ 98.835394][ T535] tipc: Left network mode [ 98.847835][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.850267][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.855003][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.858305][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.867545][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.874849][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.890603][ T8060] team0: Port device team_slave_0 added [ 98.901438][ T8060] team0: Port device team_slave_1 added [ 98.996986][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.999872][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.010600][ T5972] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 99.014604][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.076423][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.079104][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.087612][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.167479][ T5972] usb 9-1: Using ep0 maxpacket: 8 [ 99.169236][ T8060] hsr_slave_0: entered promiscuous mode [ 99.173005][ T8060] hsr_slave_1: entered promiscuous mode [ 99.173265][ T5972] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 99.176089][ T8060] debugfs: 'hsr0' already exists in 'hsr' [ 99.180149][ T5972] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.181016][ T8060] Cannot create hsr debugfs directory [ 99.185740][ T5972] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.191234][ T5972] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.197618][ T5972] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.202957][ T5972] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.207084][ T5972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.234398][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.379763][ T8100] chnl_net:caif_netlink_parms(): no params data found [ 99.423526][ T535] hsr_slave_0: left promiscuous mode [ 99.426205][ T5972] usb 9-1: usb_control_msg returned -32 [ 99.428603][ T5972] usbtmc 9-1:16.0: can't read capabilities [ 99.432517][ T535] hsr_slave_1: left promiscuous mode [ 99.437602][ T535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.439888][ T535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.442500][ T535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.445659][ T535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.456030][ T535] veth1_macvtap: left promiscuous mode [ 99.458223][ T535] veth0_macvtap: left promiscuous mode [ 99.460641][ T535] veth1_vlan: left promiscuous mode [ 99.462949][ T535] veth0_vlan: left promiscuous mode [ 99.616462][ T535] team0 (unregistering): Port device team_slave_1 removed [ 99.621919][ T8129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.624531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.628416][ T8129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.632677][ T535] team0 (unregistering): Port device team_slave_0 removed [ 99.805750][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.808875][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.811587][ T8100] bridge_slave_0: entered allmulticast mode [ 99.814820][ T8100] bridge_slave_0: entered promiscuous mode [ 99.819195][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.821803][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.824500][ T8100] bridge_slave_1: entered allmulticast mode [ 99.827694][ T8100] bridge_slave_1: entered promiscuous mode [ 99.852444][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.857691][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.872258][ T8100] team0: Port device team_slave_0 added [ 99.875848][ T8100] team0: Port device team_slave_1 added [ 99.889567][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.891788][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.899989][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.904276][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.906512][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.915428][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.936732][ T8100] hsr_slave_0: entered promiscuous mode [ 99.939334][ T8100] hsr_slave_1: entered promiscuous mode [ 99.941482][ T8100] debugfs: 'hsr0' already exists in 'hsr' [ 99.943483][ T8100] Cannot create hsr debugfs directory [ 100.113675][ T5942] Bluetooth: hci0: command tx timeout [ 100.130983][ T8146] usbtmc 9-1:16.0: CHECK_CLEAR_STATUS returned 8a [ 100.273770][ T8100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.279580][ T8100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.287431][ T8100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.297474][ T535] IPVS: stop unused estimator thread 0... [ 100.302035][ T8100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.332378][ T8060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.340830][ T34] usb 9-1: USB disconnect, device number 9 [ 100.350965][ T8060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.361017][ T8060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.369938][ T8060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.398057][ T535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.452841][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.490843][ T535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.500921][ T8100] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.508751][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.511786][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.520354][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.523383][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.552091][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.574974][ T535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.590159][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.601416][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.604802][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.616996][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.620132][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.653216][ T535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.756608][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.789217][ T535] bridge_slave_1: left allmulticast mode [ 100.791496][ T535] bridge_slave_1: left promiscuous mode [ 100.794748][ T535] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.799792][ T535] bridge_slave_0: left allmulticast mode [ 100.802024][ T535] bridge_slave_0: left promiscuous mode [ 100.806973][ T535] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.914878][ T5942] Bluetooth: hci1: command tx timeout [ 100.916257][ T8183] block nbd4: not configured, cannot reconfigure [ 100.948980][ T535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.956483][ T535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.962274][ T535] bond0 (unregistering): Released all slaves [ 100.968171][ T535] bond1 (unregistering): Released all slaves [ 100.976202][ T535] bond2 (unregistering): Released all slaves [ 100.999865][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.028396][ T8060] veth0_vlan: entered promiscuous mode [ 101.035528][ T8060] veth1_vlan: entered promiscuous mode [ 101.053297][ T8060] veth0_macvtap: entered promiscuous mode [ 101.059785][ T8060] veth1_macvtap: entered promiscuous mode [ 101.069077][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.081645][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.103240][ T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.108458][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.128088][ T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.149714][ T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.246178][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.248691][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.257611][ T8100] veth0_vlan: entered promiscuous mode [ 101.269378][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.271687][ T8100] veth1_vlan: entered promiscuous mode [ 101.272054][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.292166][ T8100] veth0_macvtap: entered promiscuous mode [ 101.299009][ T8100] veth1_macvtap: entered promiscuous mode [ 101.307903][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.312558][ T34] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 101.319137][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.323564][ T34] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 101.328048][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.331748][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.336397][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.345096][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.367285][ T535] hsr_slave_0: left promiscuous mode [ 101.373573][ T535] hsr_slave_1: left promiscuous mode [ 101.378278][ T535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.381454][ T535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.387143][ T535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.390833][ T535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.405979][ T8217] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.831'. [ 101.409774][ T535] veth1_macvtap: left promiscuous mode [ 101.412137][ T535] veth0_macvtap: left promiscuous mode [ 101.415938][ T535] veth1_vlan: left promiscuous mode [ 101.418360][ T535] veth0_vlan: left promiscuous mode [ 101.618626][ T535] team0 (unregistering): Port device team_slave_1 removed [ 101.632260][ T535] team0 (unregistering): Port device team_slave_0 removed [ 101.803065][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.806032][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.830527][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.833040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.866890][ T8242] veth1_to_bond: entered allmulticast mode [ 101.889279][ T8242] veth1_to_bond: left allmulticast mode [ 101.945128][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.012154][ T6001] hid-generic 0005:0006:5508.0010: item fetching failed at offset 0/1 [ 102.017063][ T6001] hid-generic 0005:0006:5508.0010: probe with driver hid-generic failed with error -22 [ 102.041320][ T8265] netlink: 'syz.4.848': attribute type 11 has an invalid length. [ 102.049439][ T8265] netlink: 56 bytes leftover after parsing attributes in process `syz.4.848'. [ 102.054162][ T8265] netlink: 'syz.4.848': attribute type 11 has an invalid length. [ 102.056648][ T8265] netlink: 56 bytes leftover after parsing attributes in process `syz.4.848'. [ 102.092241][ T535] IPVS: stop unused estimator thread 0... [ 102.194247][ T5942] Bluetooth: hci0: command tx timeout [ 102.348816][ T5972] hid-generic 0005:0006:5508.0011: item fetching failed at offset 0/1 [ 102.352498][ T5972] hid-generic 0005:0006:5508.0011: probe with driver hid-generic failed with error -22 [ 102.363663][ T53] net_ratelimit: 7 callbacks suppressed [ 102.363678][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.393891][ T24] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 102.475483][ T8312] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.555275][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 102.558645][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.563353][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.569383][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.574013][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.582625][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 102.585650][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.589071][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.592852][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.596863][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.601631][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 102.604828][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.609921][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.614150][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.617925][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.624519][ T24] usb 5-1: string descriptor 0 read error: -22 [ 102.626693][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 102.629690][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.637540][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 102.949670][ T29] usb 5-1: USB disconnect, device number 7 [ 102.952711][ T8331] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 102.993566][ T5942] Bluetooth: hci1: command tx timeout [ 103.141708][ T8335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.162000][ T53] hid-generic 0005:0006:5508.0012: item fetching failed at offset 0/1 [ 103.170228][ T53] hid-generic 0005:0006:5508.0012: probe with driver hid-generic failed with error -22 [ 103.202876][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.270288][ T8348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.403713][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.418046][ T8351] netlink: 'syz.5.874': attribute type 11 has an invalid length. [ 103.421228][ T8351] netlink: 56 bytes leftover after parsing attributes in process `syz.5.874'. [ 103.426829][ T8351] netlink: 'syz.5.874': attribute type 11 has an invalid length. [ 103.430061][ T8351] netlink: 56 bytes leftover after parsing attributes in process `syz.5.874'. [ 103.481564][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 103.539533][ T8359] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 103.633934][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.773474][ T40] audit: type=1326 audit(1771147048.330:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.5.885" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703ef6c code=0x0 [ 104.130600][ T8371] overlayfs: missing 'lowerdir' [ 104.273874][ T5942] Bluetooth: hci0: command tx timeout [ 104.433693][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.453580][ T24] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 104.517578][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.520573][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.523572][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.526559][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.529373][ T8377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.534870][ T8376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.618613][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 104.621076][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.624728][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.628973][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.632561][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.637035][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 104.639640][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.643037][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.648588][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.651648][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.891'. [ 104.653275][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.661481][ T24] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 104.662441][ T8384] vxlan0: entered promiscuous mode [ 104.664069][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.667485][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.670528][ T24] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.672971][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.677159][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.677187][ T24] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.680648][ T24] usb 9-1: string descriptor 0 read error: -22 [ 104.685032][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.687983][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.689861][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.700074][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.710478][ T24] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 104.753696][ C3] vcan0: j1939_tp_rxtimer: 0xffff888013550c00: rx timeout, send abort [ 104.758555][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888013550c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.019660][ T24] usb 9-1: USB disconnect, device number 10 [ 105.023275][ T8391] usb 9-1: Couldn't submit interrupt_out_urb -19 [ 105.083609][ T5942] Bluetooth: hci1: command tx timeout [ 105.213477][ T6001] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 105.363552][ T6001] usb 10-1: Using ep0 maxpacket: 8 [ 105.366705][ T6001] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 105.369521][ T6001] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.373195][ T6001] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.376604][ T6001] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.380262][ T6001] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.384378][ T6001] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.387395][ T6001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.599978][ T6001] usb 10-1: GET_CAPABILITIES returned 0 [ 105.601999][ T6001] usbtmc 10-1:16.0: can't read capabilities [ 105.802555][ T29] usb 10-1: USB disconnect, device number 2 [ 105.893597][ T6756] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 106.053505][ T6756] usb 9-1: Using ep0 maxpacket: 8 [ 106.061155][ T6756] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 106.065209][ T6756] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 106.069822][ T6756] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.074173][ T6756] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 106.078892][ T6756] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 106.082433][ T6756] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.086596][ T6756] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.089443][ T6756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.300912][ T6756] usb 9-1: usb_control_msg returned -32 [ 106.302755][ T6756] usbtmc 9-1:16.0: can't read capabilities [ 106.353661][ T5942] Bluetooth: hci0: command tx timeout [ 106.657701][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 106.662984][ T8416] usbtmc 9-1:16.0: Unable to send data, error -71 [ 106.666886][ T8416] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 106.868161][ T6756] usb 9-1: USB disconnect, device number 11 [ 107.073528][ T29] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 107.154028][ T5942] Bluetooth: hci1: command tx timeout [ 107.234762][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.237196][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 107.241513][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.246352][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.250119][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 107.255331][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.258401][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 107.262507][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.267367][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.271403][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 107.276060][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 107.279042][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 107.283078][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.287098][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 107.291576][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 107.299162][ T29] usb 5-1: string descriptor 0 read error: -22 [ 107.301833][ T29] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.309214][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.317254][ T29] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 107.554364][ T53] net_ratelimit: 3 callbacks suppressed [ 107.554375][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.625962][ T5972] usb 5-1: USB disconnect, device number 8 [ 107.773482][ T29] psmouse serio2: Failed to reset mouse on : -5 [ 108.425818][ T8453] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 108.608347][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.893493][ T3239] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 109.053504][ T3239] usb 8-1: Using ep0 maxpacket: 8 [ 109.059818][ T3239] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 109.062283][ T3239] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.065709][ T3239] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.068807][ T3239] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.071761][ T3239] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.075888][ T3239] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.078846][ T3239] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.290379][ T3239] usb 8-1: usb_control_msg returned -32 [ 109.293171][ T3239] usbtmc 8-1:16.0: can't read capabilities [ 109.633818][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.713708][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.995099][ T8492] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned 8a [ 110.197352][ T53] usb 8-1: USB disconnect, device number 10 [ 110.673747][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.973610][ T3239] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 111.043508][ T6756] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 111.046121][ T40] audit: type=1326 audit(1771147055.610:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.937" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3f6c code=0x0 [ 111.153463][ T3239] usb 10-1: Using ep0 maxpacket: 8 [ 111.155824][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.156672][ T3239] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 111.160950][ T3239] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.164044][ T3239] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.167095][ T3239] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.170170][ T3239] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.174485][ T3239] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.177365][ T3239] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.193626][ T6756] usb 8-1: Using ep0 maxpacket: 8 [ 111.196553][ T6756] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 111.199306][ T6756] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.202273][ T6756] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.205326][ T6756] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.208490][ T6756] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.212343][ T6756] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.215184][ T6756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.393054][ T3239] usb 10-1: usb_control_msg returned -32 [ 111.395235][ T3239] usbtmc 10-1:16.0: can't read capabilities [ 111.427780][ T6756] usb 8-1: GET_CAPABILITIES returned 0 [ 111.429543][ T6756] usbtmc 8-1:16.0: can't read capabilities [ 111.603486][ T29] misc userio: Buffer overflowed, userio client isn't keeping up [ 111.631576][ T3239] usb 8-1: USB disconnect, device number 11 [ 111.713783][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.794008][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.097968][ T8515] usbtmc 10-1:16.0: CHECK_CLEAR_STATUS returned 8a [ 112.299968][ T53] usb 10-1: USB disconnect, device number 3 [ 112.433881][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.676629][ T29] input: PS/2 Generic Mouse as /devices/serio2/input/input14 [ 112.753601][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.763568][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.904488][ T29] psmouse serio2: Failed to enable mouse on [ 112.905450][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'. [ 112.916407][ T8544] vxlan0: entered promiscuous mode [ 112.921822][ T535] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.926750][ T535] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.934327][ T535] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.938781][ T535] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.133259][ T8563] evm: overlay not supported [ 113.803784][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.963494][ T24] psmouse serio3: Failed to reset mouse on : -5 [ 114.259006][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 114.434492][ T8609] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.973'. [ 114.846219][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.858419][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 114.862066][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 114.938719][ T8640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.041357][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 115.151893][ T8662] loop2: detected capacity change from 0 to 7 [ 115.158697][ T8662] Dev loop2: unable to read RDB block 7 [ 115.160567][ T8662] loop2: AHDI p1 p2 p3 [ 115.161941][ T8662] loop2: partition table partially beyond EOD, truncated [ 115.170618][ T8662] loop2: p1 start 1601398130 is beyond EOD, truncated [ 115.172933][ T8662] loop2: p2 start 1702059890 is beyond EOD, truncated [ 115.351970][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1003'. [ 115.358016][ T8681] bond0: invalid ARP target 0.0.0.0 specified for addition [ 115.360947][ T8681] bond0: option arp_ip_target: invalid value (0) [ 115.635061][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.687534][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.690380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.752655][ T40] audit: type=1326 audit(1771147060.310:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8709 comm="syz.3.1017" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef6c code=0x0 [ 115.884672][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.924989][ T8721] binder: 8720:8721 ioctl c0306201 800001c0 returned -22 [ 116.063510][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 116.110448][ T8727] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.213552][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 116.216413][ T29] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 116.219723][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.224088][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.228079][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.232147][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.237799][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.241566][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.454677][ T29] usb 9-1: GET_CAPABILITIES returned 0 [ 116.456963][ T29] usbtmc 9-1:16.0: can't read capabilities [ 116.658570][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.662002][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.665598][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.669089][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.672240][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.676254][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.679796][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.682986][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.686588][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.689633][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.693280][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.696257][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.700788][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.704029][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.707590][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.710701][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 116.719089][ T6024] usb 9-1: USB disconnect, device number 12 [ 116.897534][ T8741] input: syz0 as /devices/virtual/input/input16 [ 117.289441][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 117.295567][ T5942] Bluetooth: min 0 < 6 [ 117.753529][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 117.953784][ T6756] net_ratelimit: 1 callbacks suppressed [ 117.953802][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.963625][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.000255][ T8781] input: syz0 as /devices/virtual/input/input17 [ 118.073592][ T6086] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 118.225199][ T6086] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.228803][ T6086] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.231903][ T6086] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.236328][ T6086] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.239112][ T6086] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.243266][ T6086] usb 8-1: config 0 descriptor?? [ 118.658413][ T6086] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 118.674386][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.714208][ T6756] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.832376][ T24] input: PS/2 Generic Mouse as /devices/serio3/input/input15 [ 118.884674][ T6756] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.889627][ T6756] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 118.894995][ T6756] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 118.899050][ T6756] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.902753][ T6756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.911166][ T8788] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 118.913132][ T8807] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.918975][ T6756] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.004283][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.026031][ T8811] netlink: 'syz.4.1062': attribute type 4 has an invalid length. [ 119.043653][ T24] psmouse serio3: Failed to enable mouse on [ 119.099942][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 119.139076][ T6016] usb 5-1: USB disconnect, device number 9 [ 119.273264][ T8819] erspan0: entered promiscuous mode [ 119.277498][ T8819] erspan0: left promiscuous mode [ 119.314578][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 119.476523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.866886][ C1] plantronics 0003:047F:FFFF.0013: usb_submit_urb(ctrl) failed: -1 [ 119.938250][ T8843] netlink: 'syz.5.1076': attribute type 2 has an invalid length. [ 119.941091][ T8843] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1076'. [ 120.034076][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.081978][ T40] audit: type=1326 audit(1771147064.640:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.1080" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3f6c code=0x0 [ 120.418594][ T5942] Bluetooth: min 0 < 6 [ 120.628207][ T8864] capability: warning: `syz.4.1085' uses 32-bit capabilities (legacy support in use) [ 120.643898][ T24] usb 8-1: USB disconnect, device number 12 [ 120.832194][ T8873] netlink: 'syz.3.1088': attribute type 4 has an invalid length. [ 120.961822][ T5942] Bluetooth: min 0 < 6 [ 121.183617][ T6086] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 121.343583][ T6086] usb 9-1: Using ep0 maxpacket: 8 [ 121.346759][ T6086] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 121.350264][ T6086] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 121.357323][ T6086] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.361591][ T6086] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 121.367170][ T6086] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 121.371497][ T6086] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.377502][ T6086] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.381369][ T6086] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.528485][ T8901] netlink: 'syz.0.1101': attribute type 4 has an invalid length. [ 121.607637][ T6086] usb 9-1: usb_control_msg returned -32 [ 121.609757][ T6086] usbtmc 9-1:16.0: can't read capabilities [ 121.675639][ T8906] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1103'. [ 121.678877][ T8906] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1103'. [ 121.960943][ T8920] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -71 [ 121.964345][ T8920] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 121.968529][ T6756] usb 9-1: USB disconnect, device number 13 [ 122.443596][ T5942] Bluetooth: hci3: command 0x0406 tx timeout [ 122.463538][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 122.616692][ T24] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.622198][ T24] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 122.626253][ T24] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 122.630438][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.634541][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.640741][ T8925] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 122.647761][ T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.861916][ T34] usb 10-1: USB disconnect, device number 4 [ 123.003793][ T5942] Bluetooth: hci0: command tx timeout [ 123.163535][ T6016] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 123.325643][ T6016] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 123.329131][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.333771][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.337559][ T6016] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.342266][ T6016] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.346000][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.352175][ T6016] usb 9-1: config 0 descriptor?? [ 123.778815][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.781521][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.783996][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.786443][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.788852][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.791291][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.793873][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.796504][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.798963][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.801495][ T6016] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 123.813564][ T6016] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 124.783488][ T34] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 124.935972][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 124.939287][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 124.943981][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.948922][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 124.953837][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 124.959723][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 124.962986][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 124.967731][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.973579][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 124.978334][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 124.984785][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 124.988010][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 124.992597][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.997686][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 125.002434][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 125.010787][ T34] usb 8-1: string descriptor 0 read error: -22 [ 125.013668][ T34] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 125.017543][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.028439][ T34] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 125.285267][ T24] usb 8-1: USB disconnect, device number 13 [ 125.751884][ T9044] overlayfs: statfs failed on './file0' [ 126.135490][ T34] usb 9-1: USB disconnect, device number 14 [ 126.303506][ T34] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 126.477373][ T34] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 126.483111][ T34] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 126.488488][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 126.493378][ T34] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.502446][ T34] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.506700][ T34] usb 9-1: Product: syz [ 126.508431][ T34] usb 9-1: Manufacturer: syz [ 126.511001][ T34] usb 9-1: SerialNumber: syz [ 126.515480][ T34] usb 9-1: config 0 descriptor?? [ 126.521488][ T34] usb 9-1: selecting invalid altsetting 0 [ 126.535244][ T9070] overlayfs: statfs failed on './file0' [ 126.745376][ T9048] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 126.749335][ T6001] usb 9-1: USB disconnect, device number 15 [ 127.098731][ T9098] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1194'. [ 127.390180][ T9105] ip6gretap1: entered promiscuous mode [ 127.391964][ T9105] ip6gretap1: entered allmulticast mode [ 127.743470][ T6756] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 127.895211][ T6756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 127.898797][ T6756] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 127.901694][ T6756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.905644][ T6756] usb 9-1: config 0 descriptor?? [ 127.908730][ T9111] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.211227][ T6756] usbhid 9-1:0.0: can't add hid device: -71 [ 128.213217][ T6756] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 128.227192][ T6756] usb 9-1: USB disconnect, device number 16 [ 128.503517][ T53] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 128.654764][ T53] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 128.658217][ T53] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.662578][ T53] usb 10-1: config 0 has no interfaces? [ 128.664974][ T53] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 128.668599][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.673983][ T53] usb 10-1: config 0 descriptor?? [ 128.844722][ T9139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.848098][ T9139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.880710][ T6001] usb 10-1: USB disconnect, device number 5 [ 128.911104][ T9139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.916241][ T9139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.994862][ T9139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.997974][ T9139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.083723][ T9139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.086987][ T9139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.178722][ T43] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.181415][ T43] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.188185][ T9141] Bluetooth: MGMT ver 1.23 [ 129.190155][ T43] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.190175][ T43] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.195130][ T43] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.198433][ T9141] Bluetooth: hci0: unsupported parameter 255 [ 129.199809][ T43] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.202460][ T9141] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 129.211254][ T43] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.216227][ T43] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.626371][ T9176] ip6gretap1: entered promiscuous mode [ 129.628888][ T9176] ip6gretap1: entered allmulticast mode [ 129.715099][ T9179] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1229'. [ 129.789717][ T9186] kernel read not supported for file /cpuacct.usage_percpu (pid: 9186 comm: syz.0.1231) [ 129.794158][ T40] audit: type=1800 audit(1771147074.350:44): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1231" name="cpuacct.usage_percpu" dev="mqueue" ino=29705 res=0 errno=0 [ 129.835184][ T9190] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1224'. [ 129.934965][ T9198] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 130.323714][ T6001] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 130.474771][ T6001] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.477844][ T6001] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.481407][ T6001] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.490601][ T6001] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 130.494364][ T6001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.501745][ T6001] usb 8-1: Product: syz [ 130.504281][ T6001] usb 8-1: Manufacturer: syz [ 130.506494][ T6001] usb 8-1: SerialNumber: syz [ 130.514123][ T6001] hub 8-1:1.0: bad descriptor, ignoring hub [ 130.516413][ T6001] hub 8-1:1.0: probe with driver hub failed with error -5 [ 130.724044][ T6001] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 131.166997][ T9249] kernel read not supported for file /cpuacct.usage_percpu (pid: 9249 comm: syz.5.1252) [ 131.171278][ T40] audit: type=1800 audit(1771147075.730:45): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1252" name="cpuacct.usage_percpu" dev="mqueue" ino=27863 res=0 errno=0 [ 131.218518][ T9257] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1259'. [ 131.343505][ T9203] usb 8-1: reset high-speed USB device number 14 using dummy_hcd [ 131.369750][ T9268] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 131.372241][ T9268] netlink: 'syz.4.1257': attribute type 4 has an invalid length. [ 131.374826][ T9268] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1257'. [ 131.510336][ T9203] usb 8-1: device firmware changed [ 131.515101][ T24] usb 8-1: USB disconnect, device number 14 [ 131.519918][ T24] usblp0: removed [ 131.664398][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 131.835184][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.840448][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.850555][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.856763][ T24] usb 8-1: string descriptor 0 read error: -22 [ 131.858601][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 131.861130][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.866547][ T24] hub 8-1:1.0: bad descriptor, ignoring hub [ 131.868320][ T24] hub 8-1:1.0: probe with driver hub failed with error -5 [ 132.014261][ T6024] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 132.079633][ T24] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 132.106694][ T24] usb 8-1: USB disconnect, device number 15 [ 132.109945][ T24] usblp0: removed [ 132.165599][ T6024] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 132.168830][ T6024] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 132.172317][ T6024] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.184760][ T6024] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.189051][ T6024] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 132.191404][ T6024] usb 10-1: Product: syz [ 132.195532][ T6024] usb 10-1: Manufacturer: syz [ 132.196947][ T6024] usb 10-1: SerialNumber: syz [ 132.199610][ T6024] usb 10-1: config 0 descriptor?? [ 132.204738][ T6024] usb 10-1: selecting invalid altsetting 0 [ 132.424512][ T9301] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 132.430486][ T6086] usb 10-1: USB disconnect, device number 6 [ 132.436406][ T9327] kvm: user requested TSC rate below hardware speed [ 132.648997][ T9338] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.1288'. [ 132.653705][ T9338] netlink: Conntrack attr has 4 unknown bytes [ 132.687786][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'. [ 132.723950][ T29] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 132.883477][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 132.887530][ T29] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 132.892353][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.897269][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.901483][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 132.907189][ T29] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 132.910651][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.918727][ T29] usb 9-1: config 0 descriptor?? [ 133.280557][ T9368] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1298'. [ 133.284163][ T9368] netlink: 320 bytes leftover after parsing attributes in process `syz.3.1298'. [ 133.335891][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.0015/input/input18 [ 133.399150][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.0015/input/input19 [ 133.483342][ T29] kye 0003:0458:5013.0015: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 133.539598][ T29] usb 9-1: USB disconnect, device number 17 [ 134.203827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.609984][ T9420] kvm: user requested TSC rate below hardware speed [ 134.616833][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1323'. [ 134.699800][ T9427] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.923015][ T9462] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 135.033555][ T34] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 135.205500][ T34] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 135.210088][ T34] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 135.215694][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.225373][ T34] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.229116][ T34] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.232468][ T34] usb 5-1: Product: syz [ 135.242324][ T34] usb 5-1: Manufacturer: syz [ 135.244878][ T34] usb 5-1: SerialNumber: syz [ 135.248399][ T34] usb 5-1: config 0 descriptor?? [ 135.254399][ T34] usb 5-1: selecting invalid altsetting 0 [ 135.460594][ T9439] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 135.464763][ T6001] usb 5-1: USB disconnect, device number 10 [ 136.075984][ T9483] "syz.5.1349" (9483) uses obsolete ecb(arc4) skcipher [ 136.374498][ T34] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 136.533505][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 136.537514][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 136.540389][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.544981][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.548324][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.552144][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.563482][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.567240][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.605811][ T9511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.791733][ T34] usb 8-1: usb_control_msg returned -32 [ 136.796283][ T34] usbtmc 8-1:16.0: can't read capabilities [ 137.395760][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.398495][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.484121][ T9562] input: syz0 as /devices/virtual/input/input20 [ 137.496718][ T9565] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 137.697925][ T53] usb 8-1: USB disconnect, device number 16 [ 138.989455][ T9650] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 138.992747][ T9650] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 139.041547][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 139.295007][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 139.449557][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.453805][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.457723][ T24] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.466583][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 139.470366][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.478342][ T24] usb 10-1: Product: syz [ 139.480346][ T24] usb 10-1: Manufacturer: syz [ 139.482343][ T24] usb 10-1: SerialNumber: syz [ 139.495485][ T24] hub 10-1:1.0: bad descriptor, ignoring hub [ 139.497679][ T24] hub 10-1:1.0: probe with driver hub failed with error -5 [ 139.514224][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 139.672434][ T9683] "syz.0.1432" (9683) uses obsolete ecb(arc4) skcipher [ 139.711458][ T24] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 139.786488][ T9691] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 139.789733][ T9691] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 139.965913][ T9707] "syz.4.1444" (9707) uses obsolete ecb(arc4) skcipher [ 140.313566][ T9654] usb 10-1: reset high-speed USB device number 7 using dummy_hcd [ 140.436676][ T9731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.488578][ T9654] usb 10-1: device firmware changed [ 140.491723][ T5972] usb 10-1: USB disconnect, device number 7 [ 140.508981][ T5972] usblp0: removed [ 140.512343][ T9731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.608743][ T9731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.643536][ T5972] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 140.700056][ T9731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.788388][ T43] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.798715][ T43] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.805132][ T5972] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.809210][ T5972] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.813558][ T43] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.817028][ T5972] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.825011][ T43] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.829412][ T5972] usb 10-1: string descriptor 0 read error: -22 [ 140.832116][ T5972] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 140.836781][ T5972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.850625][ T5972] hub 10-1:1.0: bad descriptor, ignoring hub [ 140.853230][ T5972] hub 10-1:1.0: probe with driver hub failed with error -5 [ 141.077922][ T5972] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.123680][ T5972] usb 10-1: USB disconnect, device number 8 [ 141.127469][ T5972] usblp0: removed [ 141.144742][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 141.233106][ T9762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.239427][ T9762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.336978][ T9762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.341359][ T9762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.410668][ T9762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.415302][ T9762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.480472][ T9762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.485230][ T9762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.596181][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.599112][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.610880][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.614632][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.627117][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.633634][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.651446][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.655208][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.837102][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 142.012473][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.044218][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 142.048197][ T9800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1486'. [ 142.070118][ T9799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.077071][ T9799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.148054][ T9799] vxlan0: left promiscuous mode [ 142.176508][ T9800] geneve2: entered promiscuous mode [ 142.178441][ T9800] geneve2: entered allmulticast mode [ 142.181246][ T43] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.186826][ T43] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.190366][ T43] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.197269][ T43] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.622865][ T40] audit: type=1326 audit(1771147087.180:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.0.1492" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3f6c code=0x0 [ 143.753197][ T9846] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.758367][ T9846] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.835419][ T9846] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.839722][ T9846] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.916020][ T9846] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.919876][ T9846] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.027726][ T9846] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.032444][ T9846] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.083506][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 144.130057][ T73] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.132658][ T73] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.144368][ T73] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.147971][ T73] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.160705][ T73] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.164367][ T73] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.175847][ T73] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.179330][ T73] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.263637][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 144.266713][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 144.270259][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.274549][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.278091][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 144.282551][ T24] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 144.285898][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.289642][ T24] usb 8-1: config 0 descriptor?? [ 144.704360][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.0016/input/input21 [ 144.779727][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.0016/input/input22 [ 144.840808][ T24] kye 0003:0458:5013.0016: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 144.903285][ T6086] usb 8-1: USB disconnect, device number 17 [ 145.064110][ T9895] input: syz0 as /devices/virtual/input/input23 [ 145.443338][ T9907] "syz.3.1530" (9907) uses obsolete ecb(arc4) skcipher [ 147.068998][ T9959] netlink: 'syz.5.1552': attribute type 1 has an invalid length. [ 147.106538][ T9959] bond1: entered promiscuous mode [ 147.108949][ T9959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.122650][ T9959] bond1: (slave bridge1): making interface the new active one [ 147.125659][ T9959] bridge1: entered promiscuous mode [ 147.127854][ T9959] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 148.302739][ T9980] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1562'. [ 148.367334][ T9984] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1564'. [ 148.652514][ T9995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1569'. [ 149.459656][ T40] audit: type=1326 audit(1771147094.020:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.0.1583" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f6c code=0x0 [ 149.482616][T10038] geneve2: entered promiscuous mode [ 149.485063][T10038] geneve2: entered allmulticast mode [ 149.594564][T10041] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1589'. [ 150.316227][T10079] binder: 10078:10079 ioctl 4018620d 0 returned -22 [ 150.416928][ T40] audit: type=1800 audit(1771147094.980:48): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.1610" name="/newroot/168/bus" dev="tmpfs" ino=907 res=0 errno=0 [ 150.424611][T10086] Invalid ELF header len 8 [ 150.701637][T10109] netlink: 'syz.3.1619': attribute type 9 has an invalid length. [ 150.705372][T10109] netlink: 'syz.3.1619': attribute type 11 has an invalid length. [ 150.707920][T10109] netlink: 'syz.3.1619': attribute type 12 has an invalid length. [ 150.710477][T10109] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1619'. [ 150.713547][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 151.174177][T10140] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1633'. [ 151.808434][ T40] audit: type=1326 audit(1771147096.370:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.4.1650" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc8f6c code=0x0 [ 152.423558][ T6024] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.513638][ T5972] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 152.573569][ T6024] usb 5-1: Using ep0 maxpacket: 16 [ 152.576544][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.579968][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.582955][ T6024] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.587131][ T6024] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 152.589951][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.594132][ T6024] usb 5-1: config 0 descriptor?? [ 152.663537][ T5972] usb 10-1: Using ep0 maxpacket: 8 [ 152.666719][ T5972] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 152.669451][ T5972] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.672667][ T5972] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.676051][ T5972] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.679331][ T5972] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.684377][ T5972] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.687570][ T5972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.790871][T10201] binder: 10200:10201 ioctl c0306201 800003c0 returned -14 [ 153.007143][ T6024] hid_parser_main: 4 callbacks suppressed [ 153.007165][ T6024] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 153.012894][ T6024] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 153.020069][ T6024] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 153.023250][ T6024] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 153.026187][ T6024] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 153.031245][ T40] audit: type=1326 audit(1771147097.590:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.3.1663" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef6c code=0x0 [ 153.031289][ T6024] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 153.056143][ T6024] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 153.060148][ T6024] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 153.098204][ T5972] usb 10-1: USB disconnect, device number 9 [ 153.206707][T10186] random: crng reseeded on system resumption [ 153.219999][ T6001] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 153.220153][ T6086] usb 5-1: USB disconnect, device number 11 [ 153.225326][ T6001] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 153.236399][ T6001] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 153.236450][ T6086] ------------[ cut here ]------------ [ 153.240214][ T6001] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 153.241999][ T6086] workqueue: work disable count underflowed [ 153.242007][ T6086] WARNING: kernel/workqueue.c:4409 at enable_work+0x2d1/0x320, CPU#3: kworker/3:3/6086 [ 153.242033][ T6086] Modules linked in: [ 153.242056][ T6086] CPU: 3 UID: 0 PID: 6086 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.255442][ T6086] Tainted: [L]=SOFTLOCKUP [ 153.256923][ T6086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.260142][ T6086] Workqueue: usb_hub_wq hub_event SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 153.261985][ T6086] RIP: 0010:enable_work+0x2d1/0x320 [ 153.264315][ T6086] Code: ff e8 83 71 38 00 e8 9e f3 bb 09 e9 61 ff ff ff e8 74 71 38 00 90 0f 0b 90 e9 17 fe ff ff e8 66 71 38 00 48 8d 3d 2f ce 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 1a c7 a3 00 e9 [ 153.272375][ T6086] RSP: 0018:ffffc900066673b0 EFLAGS: 00010083 [ 153.275026][ T6086] RAX: 000000000003c5dc RBX: 0000000000000000 RCX: ffffc9002fa88000 [ 153.278124][ T6086] RDX: 0000000000100000 RSI: ffffffff81cf867a RDI: ffffffff90dc54b0 [ 153.280663][ T6086] RBP: ffff888025515738 R08: 0000000000000007 R09: 0000000000000000 [ 153.283753][ T6086] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 153.286031][ T6086] R13: 1ffff92000ccce77 R14: ffff888025515698 R15: 000000007fffffff [ 153.288651][ T6086] FS: 0000000000000000(0000) GS:ffff88809745a000(0000) knlGS:0000000000000000 [ 153.291571][ T6086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.294027][ T6086] CR2: 0000000034708ff8 CR3: 0000000071d8a000 CR4: 0000000000352ef0 [ 153.296690][ T6086] Call Trace: [ 153.297828][ T6086] [ 153.298817][ T6086] ? __pfx_enable_work+0x10/0x10 [ 153.300494][ T6086] ? __pfx___might_resched+0x10/0x10 [ 153.302273][ T6086] cancel_delayed_work_sync+0x96/0xf0 [ 153.304019][ T6086] thermal_zone_device_unregister+0x28e/0x4e0 [ 153.306011][ T6086] ? __pfx_shield_remove+0x10/0x10 [ 153.307782][ T6086] power_supply_unregister+0x10a/0x150 [ 153.309572][ T6086] shield_remove+0x75/0x130 [ 153.311082][ T6086] ? __pfx_shield_remove+0x10/0x10 [ 153.312953][ T6086] hid_device_remove+0xd1/0x270 [ 153.314552][ T6086] ? __pfx_hid_device_remove+0x10/0x10 [ 153.316369][ T6086] device_remove+0xcb/0x180 [ 153.317910][ T6086] device_release_driver_internal+0x42e/0x600 [ 153.320497][ T6086] bus_remove_device+0x22f/0x440 [ 153.322649][ T6086] device_del+0x376/0x9b0 [ 153.324508][ T6086] ? __pfx_device_del+0x10/0x10 [ 153.326530][ T6086] ? do_raw_spin_lock+0x128/0x260 [ 153.328700][ T6086] ? find_held_lock+0x2b/0x80 [ 153.330747][ T6086] hid_destroy_device+0x19c/0x240 [ 153.332967][ T6086] usbhid_disconnect+0xa0/0xe0 [ 153.334876][ T6086] usb_unbind_interface+0x1dd/0x9e0 [ 153.336552][ T6086] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 153.338333][ T6086] ? __pfx_usb_unbind_interface+0x10/0x10 [ 153.340168][ T6086] device_remove+0x12a/0x180 [ 153.341676][ T6086] device_release_driver_internal+0x42e/0x600 [ 153.343599][ T6086] bus_remove_device+0x22f/0x440 [ 153.345244][ T6086] device_del+0x376/0x9b0 [ 153.346629][ T6086] ? __pfx_device_del+0x10/0x10 [ 153.348268][ T6086] ? kobject_put+0xb9/0x640 [ 153.349804][ T6086] usb_disable_device+0x367/0x810 [ 153.351591][ T6086] usb_disconnect+0x2e2/0x9a0 [ 153.353612][ T6086] hub_event+0x1d0c/0x4af0 [ 153.355560][ T6086] ? __lock_acquire+0x4a5/0x2630 [ 153.357610][ T6086] ? do_raw_spin_unlock+0x145/0x1e0 [ 153.359875][ T6086] ? __pfx_hub_event+0x10/0x10 [ 153.361929][ T6086] ? debug_object_deactivate+0x2e4/0x3b0 [ 153.364364][ T6086] ? perf_trace_sched_process_wait+0xb0/0x670 [ 153.366814][ T6086] ? rcu_is_watching+0x12/0xc0 [ 153.368411][ T6086] process_one_work+0x9d7/0x1920 [ 153.370000][ T6086] ? __pfx_process_one_work+0x10/0x10 [ 153.371811][ T6086] ? __pfx_hub_event+0x10/0x10 [ 153.373545][ T6086] worker_thread+0x5da/0xe40 [ 153.375077][ T6086] ? __pfx_worker_thread+0x10/0x10 [ 153.376768][ T6086] ? kthread+0x13a/0x450 [ 153.378136][ T6086] ? __pfx_worker_thread+0x10/0x10 [ 153.379812][ T6086] kthread+0x370/0x450 [ 153.381150][ T6086] ? __pfx_kthread+0x10/0x10 [ 153.382706][ T6086] ret_from_fork+0x754/0xd80 [ 153.384214][ T6086] ? __pfx_ret_from_fork+0x10/0x10 [ 153.385870][ T6086] ? __switch_to+0x7b4/0x1120 [ 153.387409][ T6086] ? __pfx_kthread+0x10/0x10 [ 153.389127][ T6086] ret_from_fork_asm+0x1a/0x30 [ 153.391164][ T6086] [ 153.392518][ T6086] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.395582][ T6086] CPU: 3 UID: 0 PID: 6086 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.400187][ T6086] Tainted: [L]=SOFTLOCKUP [ 153.401962][ T6086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.405804][ T6086] Workqueue: usb_hub_wq hub_event [ 153.407421][ T6086] Call Trace: [ 153.408489][ T6086] [ 153.409440][ T6086] dump_stack_lvl+0x100/0x190 [ 153.410953][ T6086] vpanic+0x552/0x970 [ 153.412288][ T6086] ? __pfx_vpanic+0x10/0x10 [ 153.413747][ T6086] panic+0xd1/0xe0 [ 153.415011][ T6086] ? __pfx_panic+0x10/0x10 [ 153.416459][ T6086] check_panic_on_warn.cold+0x19/0x34 [ 153.418134][ T6086] ? enable_work+0x2d1/0x320 [ 153.419592][ T6086] __warn.cold+0x191/0x348 [ 153.421048][ T6086] __report_bug+0x296/0x3d0 [ 153.422875][ T6086] ? enable_work+0x2d1/0x320 [ 153.424866][ T6086] ? __pfx___report_bug+0x10/0x10 [ 153.427013][ T6086] ? __pfx_debug_object_free+0x10/0x10 [ 153.429203][ T6086] ? enable_work+0x2ca/0x320 [ 153.430956][ T6086] ? find_held_lock+0x2b/0x80 [ 153.432770][ T6086] ? __flush_work+0x928/0xcb0 [ 153.434556][ T6086] ? __flush_work+0x928/0xcb0 [ 153.436636][ T6086] report_bug_entry+0xe1/0x290 [ 153.438730][ T6086] ? enable_work+0x2d1/0x320 [ 153.440746][ T6086] handle_bug+0x1c9/0x2a0 [ 153.442210][ T6086] exc_invalid_op+0x17/0x50 [ 153.443678][ T6086] asm_exc_invalid_op+0x1a/0x20 [ 153.445279][ T6086] RIP: 0010:enable_work+0x2d1/0x320 [ 153.446939][ T6086] Code: ff e8 83 71 38 00 e8 9e f3 bb 09 e9 61 ff ff ff e8 74 71 38 00 90 0f 0b 90 e9 17 fe ff ff e8 66 71 38 00 48 8d 3d 2f ce 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 1a c7 a3 00 e9 [ 153.453115][ T6086] RSP: 0018:ffffc900066673b0 EFLAGS: 00010083 [ 153.455070][ T6086] RAX: 000000000003c5dc RBX: 0000000000000000 RCX: ffffc9002fa88000 [ 153.457571][ T6086] RDX: 0000000000100000 RSI: ffffffff81cf867a RDI: ffffffff90dc54b0 [ 153.460117][ T6086] RBP: ffff888025515738 R08: 0000000000000007 R09: 0000000000000000 [ 153.463025][ T6086] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 153.465648][ T6086] R13: 1ffff92000ccce77 R14: ffff888025515698 R15: 000000007fffffff [ 153.468694][ T6086] ? enable_work+0x2ca/0x320 [ 153.470708][ T6086] ? __pfx_enable_work+0x10/0x10 [ 153.472732][ T6086] ? __pfx___might_resched+0x10/0x10 [ 153.475053][ T6086] cancel_delayed_work_sync+0x96/0xf0 [ 153.477363][ T6086] thermal_zone_device_unregister+0x28e/0x4e0 [ 153.479945][ T6086] ? __pfx_shield_remove+0x10/0x10 [ 153.482025][ T6086] power_supply_unregister+0x10a/0x150 [ 153.483815][ T6086] shield_remove+0x75/0x130 [ 153.485252][ T6086] ? __pfx_shield_remove+0x10/0x10 [ 153.486825][ T6086] hid_device_remove+0xd1/0x270 [ 153.488386][ T6086] ? __pfx_hid_device_remove+0x10/0x10 [ 153.490039][ T6086] device_remove+0xcb/0x180 [ 153.491540][ T6086] device_release_driver_internal+0x42e/0x600 [ 153.493368][ T6086] bus_remove_device+0x22f/0x440 [ 153.494794][ T6086] device_del+0x376/0x9b0 [ 153.496034][ T6086] ? __pfx_device_del+0x10/0x10 [ 153.497578][ T6086] ? do_raw_spin_lock+0x128/0x260 [ 153.499190][ T6086] ? find_held_lock+0x2b/0x80 [ 153.500718][ T6086] hid_destroy_device+0x19c/0x240 [ 153.502357][ T6086] usbhid_disconnect+0xa0/0xe0 [ 153.503829][ T6086] usb_unbind_interface+0x1dd/0x9e0 [ 153.505560][ T6086] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 153.507319][ T6086] ? __pfx_usb_unbind_interface+0x10/0x10 [ 153.509237][ T6086] device_remove+0x12a/0x180 [ 153.510749][ T6086] device_release_driver_internal+0x42e/0x600 [ 153.512939][ T6086] bus_remove_device+0x22f/0x440 [ 153.514524][ T6086] device_del+0x376/0x9b0 [ 153.515916][ T6086] ? __pfx_device_del+0x10/0x10 [ 153.517466][ T6086] ? kobject_put+0xb9/0x640 [ 153.518928][ T6086] usb_disable_device+0x367/0x810 [ 153.520559][ T6086] usb_disconnect+0x2e2/0x9a0 [ 153.522103][ T6086] hub_event+0x1d0c/0x4af0 [ 153.523576][ T6086] ? __lock_acquire+0x4a5/0x2630 [ 153.525177][ T6086] ? do_raw_spin_unlock+0x145/0x1e0 [ 153.526817][ T6086] ? __pfx_hub_event+0x10/0x10 [ 153.528362][ T6086] ? debug_object_deactivate+0x2e4/0x3b0 [ 153.530297][ T6086] ? perf_trace_sched_process_wait+0xb0/0x670 [ 153.532467][ T6086] ? rcu_is_watching+0x12/0xc0 [ 153.534596][ T6086] process_one_work+0x9d7/0x1920 [ 153.536587][ T6086] ? __pfx_process_one_work+0x10/0x10 [ 153.538345][ T6086] ? __pfx_hub_event+0x10/0x10 [ 153.539916][ T6086] worker_thread+0x5da/0xe40 [ 153.541389][ T6086] ? __pfx_worker_thread+0x10/0x10 [ 153.543092][ T6086] ? kthread+0x13a/0x450 [ 153.544452][ T6086] ? __pfx_worker_thread+0x10/0x10 [ 153.546284][ T6086] kthread+0x370/0x450 [ 153.547665][ T6086] ? __pfx_kthread+0x10/0x10 [ 153.549271][ T6086] ret_from_fork+0x754/0xd80 [ 153.550858][ T6086] ? __pfx_ret_from_fork+0x10/0x10 [ 153.552528][ T6086] ? __switch_to+0x7b4/0x1120 [ 153.554037][ T6086] ? __pfx_kthread+0x10/0x10 [ 153.555647][ T6086] ret_from_fork_asm+0x1a/0x30 [ 153.557397][ T6086] [ 153.559101][ T6086] Kernel Offset: disabled [ 153.560526][ T6086] Rebooting in 86400 seconds..