last executing test programs: 4m8.914450834s ago: executing program 3 (id=541): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) close_range(r0, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x5f) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) 4m8.312498471s ago: executing program 3 (id=542): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/21, 0x15}], 0x1}, 0x4}], 0x2, 0x60, 0x0) 4m7.116981302s ago: executing program 3 (id=546): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='snd_soc_jack_notify\x00', 0xffffffffffffffff, 0x0, 0x81}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x3c, &(0x7f0000ff9000/0x1000)=nil, 0x3) 4m5.811421301s ago: executing program 3 (id=553): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="02130000020000000400000000000000fb98ac38ca0a8d450962c845d96f3a155bc1f6ce6552142164194e378665892938a3139ceb265c6e6cf55b3defdad771f3019fc4192e4bd6104b127adb7a67a8bbb0adb7015ce8bde493c35ec9293f4fe8aadb41a3e18d6457b2232f534e7461f3d13b4a6459294c70a06222cd83f5d0b1d4381a340cd33f107314d50f4282e50191542ef41bb0cea9d0dd149942b437f9ed2777fa4e5a3ffac6f841db"], 0x10}}, 0x0) 4m5.735951074s ago: executing program 3 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x2c, 0x6e}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x40000007ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @private1, 0xf}, 0x1c) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x8000000) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) umount2(&(0x7f0000002400)='./file0/../file0\x00', 0xb) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000200)={0x6, "826ee1dd54586ce17d8af8dfc97b328684bb1b347b16071086bec75c2cb040ab", 0x0, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) 4m3.248119918s ago: executing program 3 (id=561): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x40c6}, 0x984e45ff733bc95) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0x418d, &(0x7f0000000240)={0x0, 0x8e07, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/rcu_expedited', 0x212101, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xa7e3}, @TCA_CT_LABELS_MASK={0x14, 0x8, "56a90cb01a297ef867dc9c378218b92d"}]}, {0x3f, 0x6, "4a0176dbe7dff86997ef181676696a27e4c148dbee1af269862cf3a793048675dd9e664f4ed68344edf29d79e4630d07e11dc9a0ad9056430f5d6a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x19, 0x1}) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x10020, &(0x7f00000005c0)={[{@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off}, {@nfs_export_on}, {@redirect_dir_off}, {@verity_on}, {@userxattr}, {@uuid_on}], [{@uid_gt={'uid>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xdf07}}, {@appraise_type}, {@hash}, {@flag='mand'}, {@subj_role={'subj_role', 0x3d, '-'}}, {@audit}, {@seclabel}, {@appraise}]}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r8, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x7) 3m48.219723885s ago: executing program 32 (id=561): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x40c6}, 0x984e45ff733bc95) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0x418d, &(0x7f0000000240)={0x0, 0x8e07, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/rcu_expedited', 0x212101, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xa7e3}, @TCA_CT_LABELS_MASK={0x14, 0x8, "56a90cb01a297ef867dc9c378218b92d"}]}, {0x3f, 0x6, "4a0176dbe7dff86997ef181676696a27e4c148dbee1af269862cf3a793048675dd9e664f4ed68344edf29d79e4630d07e11dc9a0ad9056430f5d6a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x19, 0x1}) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x10020, &(0x7f00000005c0)={[{@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off}, {@nfs_export_on}, {@redirect_dir_off}, {@verity_on}, {@userxattr}, {@uuid_on}], [{@uid_gt={'uid>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xdf07}}, {@appraise_type}, {@hash}, {@flag='mand'}, {@subj_role={'subj_role', 0x3d, '-'}}, {@audit}, {@seclabel}, {@appraise}]}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r8, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x7) 1.019427764s ago: executing program 1 (id=3751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x8, 0x1, 0x0, 0xfffc, {[@window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x12, [0x4000091, 0x2, 0x0, 0x31f3]}]}}}}}}}, 0x0) 950.089629ms ago: executing program 1 (id=3754): syz_emit_vhci(0x0, 0xa) 949.975969ms ago: executing program 2 (id=3755): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast}}}], 0x20}}], 0x1, 0x4000804) 949.732278ms ago: executing program 1 (id=3757): r0 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) close_range(r0, 0xffffffffffffffff, 0x0) 891.10545ms ago: executing program 2 (id=3758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r2, 0x0) 890.83967ms ago: executing program 1 (id=3760): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) 890.767629ms ago: executing program 2 (id=3761): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1], 0x448}}, 0x0) 830.068225ms ago: executing program 1 (id=3763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x8, 0x1, 0x0, 0xfffc, {[@window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x12, [0x4000091, 0x2, 0x0, 0x31f3]}]}}}}}}}, 0x0) 830.02047ms ago: executing program 2 (id=3764): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 829.53357ms ago: executing program 1 (id=3766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0x403c5404, 0x0) recvmmsg(r1, 0x0, 0x0, 0x100, &(0x7f0000002700)) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 759.977574ms ago: executing program 2 (id=3767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000d00)={0x0, 'macvtap0\x00', {0x4}, 0xd}) pipe2(0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) preadv2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x4) 711.123632ms ago: executing program 2 (id=3769): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x7, {0x7, 0xd, "3d91419d00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 540.866475ms ago: executing program 4 (id=3771): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045014, 0x0) 540.675967ms ago: executing program 4 (id=3772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 471.194928ms ago: executing program 4 (id=3773): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) 400.32606ms ago: executing program 4 (id=3775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) 328.715651ms ago: executing program 0 (id=3777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000d00)={0x0, 'macvtap0\x00', {0x4}, 0xd}) pipe2(0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) preadv2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x4) 328.535428ms ago: executing program 0 (id=3778): ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast1}, 'lo\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 250.507294ms ago: executing program 0 (id=3779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 250.341617ms ago: executing program 0 (id=3780): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x8, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}, {0xb, 0x3, 0x4, 0x2, 0xfff, 0x122b4f22, 0x6}]}) 200.738617ms ago: executing program 4 (id=3781): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 200.609944ms ago: executing program 4 (id=3782): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, 0x0) 81.07632ms ago: executing program 0 (id=3783): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 0s ago: executing program 0 (id=3784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x6, 0x1, 0x4}) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.4.2269'. [ 398.444678][T13847] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2269'. [ 398.481177][ T6032] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.496100][ T6032] usb 7-1: config 0 interface 0 has no altsetting 0 [ 398.498955][ T6032] usb 7-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 398.503276][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.507159][T13797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.514605][ T6032] usb 7-1: config 0 descriptor?? [ 398.550496][T13797] veth0_vlan: entered promiscuous mode [ 398.559612][T13797] veth1_vlan: entered promiscuous mode [ 398.579177][T13857] binder: 13856:13857 ioctl c018620c 80000040 returned -22 [ 398.586236][T13797] veth0_macvtap: entered promiscuous mode [ 398.592869][T13797] veth1_macvtap: entered promiscuous mode [ 398.609330][T13797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.620633][T13797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.630926][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.634497][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.639133][ T6143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.641778][ T6143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.717009][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.719510][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.743468][T10116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.746813][T10116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.788324][T13867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2278'. [ 398.791983][T13867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2278'. [ 398.798443][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 398.798454][ T40] audit: type=1804 audit(1767233675.650:143): pid=13869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2251" name="/newroot/0/file0" dev="tmpfs" ino=18 res=1 errno=0 [ 398.875709][ T5944] Bluetooth: hci0: command tx timeout [ 398.936572][ T6032] input: HID 0458:500f as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:500F.0011/input/input23 [ 398.961027][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 398.977652][T13881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2284'. [ 399.001865][ T6032] input: HID 0458:500f as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:500F.0011/input/input24 [ 399.030674][T13887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'. [ 399.034692][T13887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'. [ 399.081142][ T6032] kye 0003:0458:500F.0011: input,hiddev0,hidraw1: USB HID v80.00 Device [HID 0458:500f] on usb-dummy_hcd.2-1/input0 [ 399.125019][ T6032] usb 7-1: USB disconnect, device number 31 [ 399.315992][ T6072] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 399.465825][ T6072] usb 9-1: Using ep0 maxpacket: 32 [ 399.470099][ T6072] usb 9-1: unable to get BOS descriptor or descriptor too short [ 399.474456][ T6072] usb 9-1: config 1 has an invalid interface number: 144 but max is 1 [ 399.478089][ T6072] usb 9-1: config 1 has an invalid interface number: 149 but max is 1 [ 399.481644][ T6072] usb 9-1: config 1 has no interface number 0 [ 399.484338][ T6072] usb 9-1: config 1 has no interface number 1 [ 399.485691][ T53] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 399.487015][ T6072] usb 9-1: config 1 interface 144 altsetting 8 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 399.493887][ T6072] usb 9-1: config 1 interface 144 altsetting 8 endpoint 0xD has an invalid bInterval 165, changing to 11 [ 399.498683][ T6072] usb 9-1: config 1 interface 144 has no altsetting 0 [ 399.501606][ T6072] usb 9-1: config 1 interface 149 has no altsetting 0 [ 399.506706][ T6072] usb 9-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=5c.64 [ 399.510127][ T6072] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.513052][ T6072] usb 9-1: Product: syz [ 399.514490][ T6072] usb 9-1: Manufacturer: syz [ 399.516180][ T6072] usb 9-1: SerialNumber: syz [ 399.645682][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 399.649836][ T53] usb 6-1: config 0 has no interfaces? [ 399.652287][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 399.656418][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.661551][ T53] usb 6-1: config 0 descriptor?? [ 399.724866][ T6072] cypress_m8 9-1:1.144: HID->COM RS232 Adapter converter detected [ 399.728252][ T6072] cyphidcom ttyUSB0: required endpoint is missing [ 399.732185][ T6072] cypress_m8 9-1:1.149: HID->COM RS232 Adapter converter detected [ 399.735198][ T6072] cyphidcom ttyUSB1: required endpoint is missing [ 399.738740][ T6072] usb 9-1: USB disconnect, device number 29 [ 399.742058][ T6072] cypress_m8 9-1:1.144: device disconnected [ 399.744613][ T6072] cypress_m8 9-1:1.149: device disconnected [ 399.867497][ T6021] usb 6-1: USB disconnect, device number 29 [ 400.491369][ T6072] usb 5-1: USB disconnect, device number 42 [ 400.576758][ T6021] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 400.737667][ T6021] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 400.741160][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 400.744027][ T6021] usb 7-1: Product: syz [ 400.750753][ T6021] usb 7-1: SerialNumber: syz [ 400.753544][ T6021] usb 7-1: config 0 descriptor?? [ 400.945627][ T5944] Bluetooth: hci0: command tx timeout [ 400.959239][ T6021] hso 7-1:0.0: Failed to find BULK IN ep [ 401.158900][ T6021] usb 7-1: USB disconnect, device number 32 [ 401.585711][ T6032] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 401.755812][ T6032] usb 9-1: Using ep0 maxpacket: 8 [ 401.759191][ T6032] usb 9-1: config 0 has no interfaces? [ 401.761186][ T6032] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 401.764277][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.769486][ T6032] usb 9-1: config 0 descriptor?? [ 401.976516][ T6032] usb 9-1: USB disconnect, device number 30 [ 402.648485][ T5944] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 402.668356][T13998] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 402.670763][T13998] overlayfs: failed to set xattr on upper [ 402.672617][T13998] overlayfs: ...falling back to redirect_dir=nofollow. [ 402.675455][T13998] overlayfs: ...falling back to index=off. [ 402.677801][T13998] overlayfs: ...falling back to uuid=null. [ 402.845699][ T6386] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 402.956566][ T6021] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 402.997442][ T6386] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.003924][ T6386] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 403.007916][ T6386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.011409][ T6386] usb 6-1: Product: syz [ 403.013279][ T6386] usb 6-1: Manufacturer: syz [ 403.015346][ T6386] usb 6-1: SerialNumber: syz [ 403.019993][ T6386] usb 6-1: config 0 descriptor?? [ 403.024485][ T6386] CoreChips 6-1:0.0: probe with driver CoreChips failed with error -22 [ 403.035754][ T5944] Bluetooth: hci0: command tx timeout [ 403.115647][ T6021] usb 9-1: Using ep0 maxpacket: 8 [ 403.119642][ T6021] usb 9-1: config 0 has no interfaces? [ 403.121454][ T6021] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.124707][ T6021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.129277][ T6021] usb 9-1: config 0 descriptor?? [ 403.334580][ T6021] usb 9-1: USB disconnect, device number 31 [ 403.614421][ T5944] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 404.305882][ T6021] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 404.386276][ T6446] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 404.466814][ T6021] usb 9-1: Using ep0 maxpacket: 8 [ 404.471047][ T6021] usb 9-1: config 0 has no interfaces? [ 404.473469][ T6021] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 404.476887][ T6021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.481715][ T6021] usb 9-1: config 0 descriptor?? [ 404.548540][ T6446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.553507][ T6446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.557926][ T6446] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 404.572589][ T6446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.595852][ T6446] usb 5-1: config 0 descriptor?? [ 404.688516][ T53] usb 9-1: USB disconnect, device number 32 [ 405.007123][ T6446] pyra 0003:1E7D:2CF6.0012: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 405.115818][ T5944] Bluetooth: hci0: command tx timeout [ 405.265975][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.269351][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.345624][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.348378][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.351867][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.354805][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.465694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.468441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.507627][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.510592][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.602712][ T6386] usb 6-1: USB disconnect, device number 30 [ 405.605927][ T6446] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 405.608694][ T6446] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 405.611978][ T6446] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -71 [ 405.625641][ T6446] usb 5-1: USB disconnect, device number 43 [ 406.023105][T14128] binder: 14127:14128 ioctl c00c6211 ffffffff returned -14 [ 406.455678][ T6386] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 406.527432][T14143] netlink: 'syz.4.2404': attribute type 46 has an invalid length. [ 406.615762][ T6386] usb 5-1: Using ep0 maxpacket: 16 [ 406.620675][ T6386] usb 5-1: unable to get BOS descriptor or descriptor too short [ 406.625082][ T6386] usb 5-1: config 6 has an invalid interface number: 202 but max is 0 [ 406.628514][ T6386] usb 5-1: config 6 has no interface number 0 [ 406.630977][ T6386] usb 5-1: config 6 interface 202 has no altsetting 0 [ 406.635373][ T6386] usb 5-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d4.1f [ 406.638984][ T6386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.641953][ T6386] usb 5-1: Product: syz [ 406.643599][ T6386] usb 5-1: Manufacturer: syz [ 406.645497][ T6386] usb 5-1: SerialNumber: syz [ 406.796251][ T34] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 406.863231][ T6386] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 14 is not bulk. [ 406.872124][ T6386] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 8 is not bulk. [ 406.875338][ T6386] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 7 is not bulk. [ 406.879781][ T6386] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 406.896042][ T6386] usb 5-1: USB disconnect, device number 44 [ 406.955749][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 406.959419][ T34] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 406.962309][ T34] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.975782][ T34] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.990238][ T34] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.993891][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.999178][ T34] usb 9-1: Product: syz [ 407.000567][ T34] usb 9-1: Manufacturer: syz [ 407.002082][ T34] usb 9-1: SerialNumber: syz [ 407.144465][T14159] __nla_validate_parse: 1 callbacks suppressed [ 407.144476][T14159] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2412'. [ 407.197612][T14163] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 407.445809][ T34] usb 9-1: 0:2 : does not exist [ 407.465709][T14178] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2422'. [ 407.514336][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.518608][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.522692][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.536787][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.539879][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.621285][T14188] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 407.689373][T12445] syz_tun (unregistering): left allmulticast mode [ 407.691730][T12445] syz_tun (unregistering): left promiscuous mode [ 407.694055][T12445] bridge0: port 4(syz_tun) entered disabled state [ 407.788220][T14181] chnl_net:caif_netlink_parms(): no params data found [ 407.844751][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.847454][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.850007][T14181] bridge_slave_0: entered allmulticast mode [ 407.852973][T14181] bridge_slave_0: entered promiscuous mode [ 407.856722][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.859164][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.861582][T14181] bridge_slave_1: entered allmulticast mode [ 407.864335][T14181] bridge_slave_1: entered promiscuous mode [ 407.879712][T14181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.884293][T14181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.899848][T14181] team0: Port device team_slave_0 added [ 407.903768][T14181] team0: Port device team_slave_1 added [ 407.906054][ T6032] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 407.920852][T14181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.923281][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.933956][T14181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.940249][T14181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.943375][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.954741][T14181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.978831][T14181] hsr_slave_0: entered promiscuous mode [ 407.981222][T14181] hsr_slave_1: entered promiscuous mode [ 407.983453][T14181] debugfs: 'hsr0' already exists in 'hsr' [ 407.985460][T14181] Cannot create hsr debugfs directory [ 408.045718][ T6386] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 408.075914][ T6032] usb 5-1: Using ep0 maxpacket: 16 [ 408.079397][ T6032] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.082671][ T6032] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.087397][ T6032] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.090369][ T6032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.092964][ T6032] usb 5-1: Product: syz [ 408.094380][ T6032] usb 5-1: Manufacturer: syz [ 408.095987][ T6032] usb 5-1: SerialNumber: syz [ 408.196843][ T6386] usb 6-1: Using ep0 maxpacket: 8 [ 408.200023][ T6386] usb 6-1: config 0 has no interfaces? [ 408.201877][ T6386] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.204876][ T6386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.208969][ T6386] usb 6-1: config 0 descriptor?? [ 408.379820][T14181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 408.384184][T14181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 408.388900][T14181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 408.393379][T14181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 408.414315][ T6386] usb 6-1: USB disconnect, device number 31 [ 408.427154][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.429549][T14181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.432010][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.434400][T14181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.454163][ T34] usb 9-1: 1:0: failed to get current value for ch 0 (-22) [ 408.477567][ T34] usb 9-1: USB disconnect, device number 33 [ 408.484895][T14181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.493064][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.497454][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.507570][T14181] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.516845][T10116] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.519506][T10116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.526797][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.529166][ T6546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.648562][T14181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.672660][T14181] veth0_vlan: entered promiscuous mode [ 408.678618][T14181] veth1_vlan: entered promiscuous mode [ 408.679059][ T6032] usb 5-1: cannot find UAC_HEADER [ 408.693364][T14181] veth0_macvtap: entered promiscuous mode [ 408.696850][ T6032] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 408.697847][T14181] veth1_macvtap: entered promiscuous mode [ 408.703068][ T6032] usb 5-1: USB disconnect, device number 45 [ 408.711011][T14181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.718696][T14181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.724966][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.728625][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.731520][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.734943][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.779641][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.782255][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.798715][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.801304][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.980893][T14224] dummy0: entered promiscuous mode [ 408.984031][T14224] dummy0: left promiscuous mode [ 409.054361][T14234] netlink: 'syz.2.2440': attribute type 10 has an invalid length. [ 409.063612][T14234] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 409.067493][T14234] team0: Failed to send options change via netlink (err -105) [ 409.070636][T14234] team0: Port device netdevsim0 added [ 409.567188][T14285] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2461'. [ 409.586657][ T5944] Bluetooth: hci3: command tx timeout [ 409.654888][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.665228][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.668777][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.672166][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.675615][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.714668][ T6096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.718924][ T6096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.811082][ T6096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.814541][ T6096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.848026][T14289] chnl_net:caif_netlink_parms(): no params data found [ 409.893882][ T6096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.897417][ T6096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.942284][T14289] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.945673][T14289] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.948100][T14289] bridge_slave_0: entered allmulticast mode [ 409.951142][T14289] bridge_slave_0: entered promiscuous mode [ 409.969131][ T6096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.973467][ T6096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.982297][T14289] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.984777][T14289] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.987702][T14289] bridge_slave_1: entered allmulticast mode [ 409.994878][T14289] bridge_slave_1: entered promiscuous mode [ 410.020317][T14289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.026525][T14289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.046123][T14289] team0: Port device team_slave_0 added [ 410.049330][T14289] team0: Port device team_slave_1 added [ 410.083482][T14289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.086194][T14289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.094739][T14289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.099283][T14289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.101536][T14289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.110032][T14289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.133632][T14289] hsr_slave_0: entered promiscuous mode [ 410.136210][T14289] hsr_slave_1: entered promiscuous mode [ 410.138546][T14289] debugfs: 'hsr0' already exists in 'hsr' [ 410.140402][T14289] Cannot create hsr debugfs directory [ 410.212585][ T6096] bridge_slave_0: left allmulticast mode [ 410.214641][ T6096] bridge_slave_0: left promiscuous mode [ 410.216733][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.285762][ T53] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 410.445689][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 410.449159][ T53] usb 9-1: config 0 has an invalid interface number: 115 but max is 0 [ 410.452056][ T53] usb 9-1: config 0 has no interface number 0 [ 410.454265][ T53] usb 9-1: config 0 interface 115 has no altsetting 0 [ 410.459448][ T53] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=fb.74 [ 410.463604][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.467281][ T53] usb 9-1: Product: syz [ 410.469272][ T53] usb 9-1: Manufacturer: syz [ 410.471455][ T53] usb 9-1: SerialNumber: syz [ 410.476420][ T53] usb 9-1: config 0 descriptor?? [ 410.484367][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.491754][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.498131][ T6096] bond0 (unregistering): Released all slaves [ 410.516911][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.527262][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.530436][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.534379][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.537899][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.697146][ T53] usb 9-1: USB disconnect, device number 34 [ 410.732213][T14310] chnl_net:caif_netlink_parms(): no params data found [ 410.789210][ T6032] net_ratelimit: 19 callbacks suppressed [ 410.789222][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.937996][T14310] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.940411][T14310] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.942810][T14310] bridge_slave_0: entered allmulticast mode [ 410.945997][T14310] bridge_slave_0: entered promiscuous mode [ 410.949381][T14310] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.951725][T14310] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.954119][T14310] bridge_slave_1: entered allmulticast mode [ 410.957983][T14310] bridge_slave_1: entered promiscuous mode [ 410.968264][ T6096] hsr_slave_0: left promiscuous mode [ 410.970537][ T6096] hsr_slave_1: left promiscuous mode [ 410.972599][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.975040][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.978957][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.981364][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.996291][ T6096] veth1_macvtap: left promiscuous mode [ 410.998810][ T6096] veth0_macvtap: left promiscuous mode [ 411.001426][ T6096] veth1_vlan: left allmulticast mode [ 411.004808][ T6096] veth1_vlan: left promiscuous mode [ 411.007952][ T6096] veth0_vlan: left promiscuous mode [ 411.131889][ T6096] macvlan0 (unregistering): left allmulticast mode [ 411.337136][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 411.369481][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 411.590128][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.640375][T14310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.645034][T14310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.660626][T14310] team0: Port device team_slave_0 added [ 411.663930][T14310] team0: Port device team_slave_1 added [ 411.676121][ T5940] Bluetooth: hci3: command tx timeout [ 411.678642][T14310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.681079][T14310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.689519][T14310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.695155][T14310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.697717][T14310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.706422][T14310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.736535][T14310] hsr_slave_0: entered promiscuous mode [ 411.738911][T14310] hsr_slave_1: entered promiscuous mode [ 411.741123][T14310] debugfs: 'hsr0' already exists in 'hsr' [ 411.743160][T14310] Cannot create hsr debugfs directory [ 411.746545][ T5940] Bluetooth: hci2: command tx timeout [ 411.824818][T14289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.827393][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.853489][T14289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.865265][T14289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.879930][T14289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.922397][T14310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.972691][T14289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.992316][T14310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.001351][T14289] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.009010][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.011958][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.024546][T10116] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.027237][T10116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.053922][ T6096] IPVS: stop unused estimator thread 0... [ 412.129263][T14310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.168708][T14289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.207805][T14310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.214492][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 412.219724][T14371] veth1_macvtap: left promiscuous mode [ 412.221590][T14373] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 412.272367][T14289] veth0_vlan: entered promiscuous mode [ 412.281669][T14289] veth1_vlan: entered promiscuous mode [ 412.301753][ T6096] bridge_slave_1: left allmulticast mode [ 412.304035][ T6096] bridge_slave_1: left promiscuous mode [ 412.306496][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.314148][ T6096] bridge_slave_0: left allmulticast mode [ 412.317839][ T6096] bridge_slave_0: left promiscuous mode [ 412.320530][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.380123][T14381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.383156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.387807][T14381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.393776][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.407643][T14381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.556566][ T5940] Bluetooth: hci0: command tx timeout [ 412.587952][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.592210][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.595741][ T6096] bond0 (unregistering): Released all slaves [ 412.601322][T14289] veth0_macvtap: entered promiscuous mode [ 412.622955][T14289] veth1_macvtap: entered promiscuous mode [ 412.658936][T14289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.663325][T14289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.674613][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.680441][T14310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.689029][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.692876][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.702895][T14310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 412.709256][T14310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.720026][T14310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.726127][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.852456][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.855299][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.866300][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.883983][ T6546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.887569][ T6546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.925551][ T6096] hsr_slave_0: left promiscuous mode [ 412.928715][ T6096] hsr_slave_1: left promiscuous mode [ 412.931179][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.933858][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.940511][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.945809][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.961770][ T6096] veth1_macvtap: left promiscuous mode [ 412.964097][ T6096] veth0_macvtap: left promiscuous mode [ 412.966238][ T6096] veth1_vlan: left promiscuous mode [ 412.969539][ T6096] veth0_vlan: left promiscuous mode [ 413.085732][ T6023] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 413.255698][ T6023] usb 9-1: Using ep0 maxpacket: 32 [ 413.259418][ T6023] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 413.262628][ T6023] usb 9-1: config 0 has no interface number 0 [ 413.266147][ T6023] usb 9-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 413.272439][ T6023] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 413.275440][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.278762][ T6023] usb 9-1: Product: syz [ 413.280134][ T6023] usb 9-1: Manufacturer: syz [ 413.281744][ T6023] usb 9-1: SerialNumber: syz [ 413.284503][ T6023] usb 9-1: config 0 descriptor?? [ 413.289353][ T6023] smsc95xx v2.0.0 [ 413.290614][ T6023] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 413.294175][ T6023] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 413.391366][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 413.395691][ T6386] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 413.421421][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 413.555656][ T6386] usb 5-1: Using ep0 maxpacket: 8 [ 413.574535][ T6386] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.578104][ T6386] usb 5-1: config 0 has no interfaces? [ 413.586673][ T6386] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 413.589806][ T6386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.592407][ T6386] usb 5-1: Product: syz [ 413.593856][ T6386] usb 5-1: Manufacturer: syz [ 413.595411][ T6386] usb 5-1: SerialNumber: syz [ 413.610765][ T6386] usb 5-1: config 0 descriptor?? [ 413.698002][T14310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.719352][T14310] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.752027][T10116] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.754762][T10116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.758245][ T5940] Bluetooth: hci3: command tx timeout [ 413.762362][T10116] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.765531][T10116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.820045][ T6386] kernel read not supported for file /vcs (pid: 6386 comm: kworker/3:6) [ 413.824065][ T6386] usb 5-1: USB disconnect, device number 46 [ 413.826385][ T5940] Bluetooth: hci2: command tx timeout [ 413.917900][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.953246][T14310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.984641][T14310] veth0_vlan: entered promiscuous mode [ 413.991353][T14310] veth1_vlan: entered promiscuous mode [ 414.010561][T14310] veth0_macvtap: entered promiscuous mode [ 414.020054][T14310] veth1_macvtap: entered promiscuous mode [ 414.033189][T14310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.040614][T14310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.048169][T10116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.052483][T10116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.056348][T10116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.061875][T10116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.100772][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.103753][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.118315][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.121064][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.626832][ T5940] Bluetooth: hci0: command tx timeout [ 415.485766][ T6023] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 415.580424][T14540] tipc: Started in network mode [ 415.582214][T14540] tipc: Node identity ac14140f, cluster identity 4711 [ 415.585020][T14540] tipc: New replicast peer: 255.255.255.255 [ 415.588078][T14540] tipc: Enabled bearer , priority 10 [ 415.635921][ T6023] usb 5-1: Using ep0 maxpacket: 16 [ 415.639527][ T6023] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 415.642784][ T6023] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.647786][ T6023] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.651672][T14544] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2562'. [ 415.653065][ T6023] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.659215][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.662094][ T6023] usb 5-1: Product: syz [ 415.663873][ T6023] usb 5-1: Manufacturer: syz [ 415.668528][ T6023] usb 5-1: SerialNumber: syz [ 415.786604][ T6446] usb 9-1: USB disconnect, device number 35 [ 415.812845][ T5940] Bluetooth: hci4: connection err: -111 [ 415.835839][ T5944] Bluetooth: hci3: command tx timeout [ 415.905819][ T5944] Bluetooth: hci2: command tx timeout [ 415.945745][ T53] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 415.986549][ T5936] net_ratelimit: 2 callbacks suppressed [ 415.986561][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.086659][ T6023] usb 5-1: 0:2 : does not exist [ 416.095674][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 416.098959][ T53] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 416.105830][ T53] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 416.109275][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 416.112265][ T53] usb 6-1: config 0 has no interface number 0 [ 416.114336][ T53] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 416.117741][ T53] usb 6-1: config 0 interface 104 has no altsetting 1 [ 416.122028][ T53] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 416.125206][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.131206][ T53] usb 6-1: Product: syz [ 416.132653][ T53] usb 6-1: Manufacturer: syz [ 416.134261][ T53] usb 6-1: SerialNumber: syz [ 416.137462][ T53] usb 6-1: config 0 descriptor?? [ 416.141149][ T53] asix 6-1:0.104: probe with driver asix failed with error -22 [ 416.185813][ T6446] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 416.337763][ T6446] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.344137][ T6446] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 416.344279][ T6386] usb 6-1: USB disconnect, device number 32 [ 416.354248][ T6446] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.358424][ T6446] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.361602][ T6446] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 416.373399][ T6446] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.380118][ T6446] hub 9-1:1.0: bad descriptor, ignoring hub [ 416.382148][ T6446] hub 9-1:1.0: probe with driver hub failed with error -5 [ 416.385174][ T6446] cdc_wdm 9-1:1.0: skipping garbage [ 416.387587][ T6446] cdc_wdm 9-1:1.0: skipping garbage [ 416.391150][ T6446] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 416.393150][ T6446] cdc_wdm 9-1:1.0: Unknown control protocol [ 416.655698][ T6446] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 416.685885][ T53] usb 9-1: USB disconnect, device number 36 [ 416.705749][ T5944] Bluetooth: hci0: command tx timeout [ 416.708032][ T5936] tipc: Node number set to 2886997007 [ 416.805676][ T6446] usb 7-1: Using ep0 maxpacket: 8 [ 416.808838][ T6446] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.812369][ T6446] usb 7-1: config 0 has no interfaces? [ 416.815944][ T6446] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 416.818976][ T6446] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.821611][ T6446] usb 7-1: Product: syz [ 416.823294][ T6446] usb 7-1: Manufacturer: syz [ 416.824877][ T6446] usb 7-1: SerialNumber: syz [ 416.828230][ T6446] usb 7-1: config 0 descriptor?? [ 417.026167][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.038781][ T6446] kernel read not supported for file /vcs (pid: 6446 comm: kworker/2:5) [ 417.042782][ T6032] usb 7-1: USB disconnect, device number 33 [ 417.098885][ T6023] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 417.113855][ T6023] usb 5-1: USB disconnect, device number 47 [ 417.413988][T14588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.419958][T14588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.423495][T14588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.426498][T14588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.430046][T14588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.432852][T14588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.435711][T14588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.438582][T14588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.775711][ T6032] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 417.815947][ T5936] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 417.925675][ T6032] usb 9-1: Using ep0 maxpacket: 8 [ 417.928629][ T6032] usb 9-1: config 6 has an invalid interface number: 2 but max is 0 [ 417.931412][ T6032] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 417.934758][ T6032] usb 9-1: config 6 has no interface number 0 [ 417.937222][ T6032] usb 9-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 417.940435][ T6032] usb 9-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.946951][ T6032] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 417.949934][ T6032] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.952623][ T6032] usb 9-1: Product: syz [ 417.954229][ T6032] usb 9-1: Manufacturer: syz [ 417.956054][ T6032] usb 9-1: SerialNumber: syz [ 417.959872][ T6032] hso 9-1:6.2: Failed to find INT IN ep [ 417.967391][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.970819][ T5936] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 417.974020][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.978843][ T5936] usb 7-1: config 0 descriptor?? [ 417.985741][ T5944] Bluetooth: hci2: command tx timeout [ 418.075708][ T5955] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 418.166632][ T6032] usb 9-1: USB disconnect, device number 37 [ 418.227275][ T5955] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 418.230727][ T5955] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 418.234382][ T5955] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 418.238787][ T5955] usb 6-1: config 220 has no interface number 2 [ 418.241276][ T5955] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 418.246425][ T5955] usb 6-1: config 220 interface 0 has no altsetting 0 [ 418.249195][ T5955] usb 6-1: config 220 interface 76 has no altsetting 0 [ 418.252029][ T5955] usb 6-1: config 220 interface 1 has no altsetting 0 [ 418.256668][ T5955] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 418.260389][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.263714][ T5955] usb 6-1: Product: syz [ 418.265371][ T5955] usb 6-1: Manufacturer: syz [ 418.267145][ T5955] usb 6-1: SerialNumber: syz [ 418.387176][ T5936] lenovo 0003:17EF:6047.0013: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 418.475916][ T5955] usb 6-1: selecting invalid altsetting 0 [ 418.478569][ T5955] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 418.482115][ T5955] uvcvideo 6-1:220.0: No valid video chain found. [ 418.487770][ T5955] usb 6-1: selecting invalid altsetting 0 [ 418.490082][ T5955] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 418.494317][ T5955] usb 6-1: USB disconnect, device number 33 [ 418.564481][T14611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2591'. [ 418.587455][ T5936] lenovo 0003:17EF:6047.0013: Failed to switch F7/9/11 mode: -71 [ 418.590632][ T5936] lenovo 0003:17EF:6047.0013: Failed to switch middle button: -71 [ 418.593530][ T5936] lenovo 0003:17EF:6047.0013: Fn-lock setting failed: -71 [ 418.596335][ T5936] lenovo 0003:17EF:6047.0013: Sensitivity setting failed: -71 [ 418.600961][ T5936] usb 7-1: USB disconnect, device number 34 [ 418.785918][ T5944] Bluetooth: hci0: command tx timeout [ 418.895757][ T5955] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 419.067297][ T5955] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 419.075627][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.078637][ T5955] usb 5-1: config 0 has no interface number 0 [ 419.080484][ T5955] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 419.083414][ T5955] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.089601][ T5955] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 419.092286][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.095061][ T5955] usb 5-1: Product: syz [ 419.096644][ T5955] usb 5-1: Manufacturer: syz [ 419.098159][ T5955] usb 5-1: SerialNumber: syz [ 419.100862][ T5955] usb 5-1: config 0 descriptor?? [ 419.108112][T14638] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.372314][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 419.375546][T14652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2609'. [ 419.441391][T14656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2611'. [ 419.506924][ T5955] usb 5-1: USB disconnect, device number 48 [ 419.891763][T14672] serio: Serial port ptm0 [ 421.025881][ T5944] Bluetooth: hci4: command 0x0405 tx timeout [ 421.185817][ T5936] net_ratelimit: 14 callbacks suppressed [ 421.185834][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.185751][ T53] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 422.299040][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.335728][ T53] usb 9-1: Using ep0 maxpacket: 32 [ 422.339470][ T53] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 422.342314][ T53] usb 9-1: config 0 has no interface number 0 [ 422.344441][ T53] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 422.350986][ T53] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 422.354182][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.357713][ T53] usb 9-1: Product: syz [ 422.359701][ T53] usb 9-1: Manufacturer: syz [ 422.361809][ T53] usb 9-1: SerialNumber: syz [ 422.366123][ T53] usb 9-1: config 0 descriptor?? [ 422.369200][T14751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 422.582337][T14751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 423.193215][ T53] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 423.197431][ T53] asix 9-1:0.188: probe with driver asix failed with error -71 [ 423.201905][ T53] usb 9-1: USB disconnect, device number 38 [ 423.346463][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.535736][ T5936] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 423.535761][ T6386] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 423.705630][ T6386] usb 5-1: Using ep0 maxpacket: 8 [ 423.707294][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 423.709470][ T6386] usb 5-1: config 0 has no interfaces? [ 423.712552][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 423.712571][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 423.712583][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.714619][ T6386] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.718616][ T5936] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.721877][ T6386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.726236][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.727984][ T5936] usb 7-1: config 0 descriptor?? [ 423.741402][ T6386] usb 5-1: config 0 descriptor?? [ 423.820226][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.948949][ T6032] usb 5-1: USB disconnect, device number 49 [ 424.150125][ T5936] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 424.164495][ T5936] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 424.349262][ T9] usb 7-1: USB disconnect, device number 35 [ 424.396187][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.658054][ T5940] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 424.995886][ T6386] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 425.155673][ T6386] usb 5-1: Using ep0 maxpacket: 8 [ 425.159243][ T6386] usb 5-1: config 0 has no interfaces? [ 425.161060][ T6386] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.164047][ T6386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.167893][ T6386] usb 5-1: config 0 descriptor?? [ 425.279323][T14851] netlink: 'syz.4.2690': attribute type 72 has an invalid length. [ 425.377253][ T6023] usb 5-1: USB disconnect, device number 50 [ 425.426647][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.908483][T14867] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 426.030619][T14875] netlink: 'syz.2.2700': attribute type 72 has an invalid length. [ 426.264603][T14890] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 426.371255][T14902] overlayfs: invalid origin (0000007900000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 426.466864][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.897797][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.506459][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.608452][T14952] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2733'. [ 428.547144][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.267200][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.596272][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.615960][ T5940] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 429.905679][ T5940] Bluetooth: hci1: command 0xfc11 tx timeout [ 429.905823][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.908929][ T5944] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 429.996094][ T6032] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 430.146225][ T6032] usb 7-1: Using ep0 maxpacket: 8 [ 430.151583][ T6032] usb 7-1: config 0 has no interfaces? [ 430.154741][ T6032] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 430.159435][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.165696][ T6032] usb 7-1: config 0 descriptor?? [ 430.370816][ T6032] usb 7-1: USB disconnect, device number 36 [ 430.625807][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.667103][T15061] bridge_slave_1: default FDB implementation only supports local addresses [ 430.806726][T15061] nbd1: detected capacity change from 0 to 63 [ 430.809156][T15062] block nbd1: NBD_DISCONNECT [ 430.811756][T15062] block nbd1: Disconnected due to user request. [ 430.814742][T15062] block nbd1: shutting down sockets [ 431.278756][T15099] Bluetooth: MGMT ver 1.23 [ 431.283232][T15099] Bluetooth: hci0: unsupported parameter 255 [ 431.285474][T15099] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 431.667732][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.675695][ T6386] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 431.835953][ T6386] usb 5-1: Using ep0 maxpacket: 32 [ 431.840129][ T6386] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.842915][ T6386] usb 5-1: config 0 has no interface number 0 [ 431.845340][ T6386] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.849004][ T6386] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.852243][ T6386] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 431.855262][ T6386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.859382][ T6386] usb 5-1: config 0 descriptor?? [ 432.215728][ T6021] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 432.290543][T15125] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 432.365730][ T6021] usb 9-1: Using ep0 maxpacket: 8 [ 432.369185][ T6021] usb 9-1: config 0 has no interfaces? [ 432.371111][ T6021] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.374052][ T6021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.378107][ T6021] usb 9-1: config 0 descriptor?? [ 432.466917][ T6386] uclogic 0003:28BD:0094.0015: pen parameters not found [ 432.469721][ T6386] uclogic 0003:28BD:0094.0015: interface is invalid, ignoring [ 432.473577][ T6386] usb 5-1: USB disconnect, device number 51 [ 432.576180][ T5940] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 432.588047][ T5936] usb 9-1: USB disconnect, device number 39 [ 432.706159][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.835706][ T6032] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 432.956061][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.985894][ T6032] usb 7-1: Using ep0 maxpacket: 16 [ 432.990499][ T6032] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 432.993570][ T6032] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.996122][ T6032] usb 7-1: Product: syz [ 432.997487][ T6032] usb 7-1: Manufacturer: syz [ 432.999013][ T6032] usb 7-1: SerialNumber: syz [ 433.002606][ T6032] r8152-cfgselector 7-1: Unknown version 0x0000 [ 433.004785][ T6032] r8152-cfgselector 7-1: config 0 descriptor?? [ 433.305924][ T6022] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 433.413280][ T6386] r8152-cfgselector 7-1: USB disconnect, device number 37 [ 433.456949][ T6022] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 433.461596][ T6022] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.468806][ T6022] usb 5-1: config 0 has no interface number 0 [ 433.472054][ T6022] usb 5-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 433.482004][ T6022] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 433.483562][ T40] audit: type=1326 audit(37723344.332:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.485005][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.485021][ T6022] usb 5-1: Product: syz [ 433.485030][ T6022] usb 5-1: Manufacturer: syz [ 433.485038][ T6022] usb 5-1: SerialNumber: syz [ 433.486362][ T6022] usb 5-1: config 0 descriptor?? [ 433.494096][ T40] audit: type=1326 audit(37723344.332:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.511087][ T40] audit: type=1326 audit(37723344.332:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.519137][ T40] audit: type=1326 audit(37723344.332:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.526488][ T40] audit: type=1326 audit(37723344.332:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.534067][ T40] audit: type=1326 audit(37723344.342:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.541682][ T40] audit: type=1326 audit(37723344.342:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.549018][ T40] audit: type=1326 audit(37723344.342:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.556208][ T40] audit: type=1326 audit(37723344.352:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.563402][ T40] audit: type=1326 audit(37723344.352:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.1.2826" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 433.700889][ T6022] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.704014][ T6022] usb 5-1: MIDIStreaming interface descriptor not found [ 433.718021][ T6022] usb 5-1: USB disconnect, device number 52 [ 433.745892][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.109069][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 434.363261][T15202] bridge_slave_1: default FDB implementation only supports local addresses [ 434.446864][T15202] nbd0: detected capacity change from 0 to 63 [ 434.455870][T15203] block nbd0: NBD_DISCONNECT [ 434.457998][T15203] block nbd0: Disconnected due to user request. [ 434.460673][T15203] block nbd0: shutting down sockets [ 434.786298][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.005883][ T6022] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 435.165630][ T6022] usb 5-1: Using ep0 maxpacket: 8 [ 435.170808][ T6022] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.174110][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.177218][ T6022] usb 5-1: Product: syz [ 435.179929][ T6022] usb 5-1: Manufacturer: syz [ 435.181567][ T6022] usb 5-1: SerialNumber: syz [ 435.186855][ T6022] usb 5-1: config 0 descriptor?? [ 435.328588][T15238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2860'. [ 435.331924][T15237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2860'. [ 435.393365][ T6022] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.826773][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.986369][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.145716][ T5940] Bluetooth: hci1: command 0xfc11 tx timeout [ 436.145794][ T5944] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 436.867270][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.028019][T15276] vivid-000: ================= START STATUS ================= [ 437.031518][T15276] vivid-000: Test Pattern: 75% Colorbar [ 437.034243][T15276] vivid-000: Fill Percentage of Frame: 100 [ 437.036927][T15276] vivid-000: Horizontal Movement: No Movement [ 437.039641][T15276] vivid-000: Vertical Movement: Move Down Slow [ 437.042348][T15276] vivid-000: OSD Text Mode: All [ 437.044487][T15276] vivid-000: Show Border: false [ 437.046772][T15276] vivid-000: Show Square: false [ 437.048891][T15276] vivid-000: Sensor Flipped Horizontally: false [ 437.051625][T15276] vivid-000: Sensor Flipped Vertically: false [ 437.054399][T15276] vivid-000: Insert SAV Code in Image: false [ 437.057302][T15276] vivid-000: Insert EAV Code in Image: false [ 437.060007][T15276] vivid-000: Insert Video Guard Band: false [ 437.062596][T15276] vivid-000: Reduced Framerate: false [ 437.065025][T15276] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 437.068456][T15276] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 437.071826][T15276] vivid-000: Enable Capture Cropping: true grabbed [ 437.074561][T15276] vivid-000: Enable Capture Composing: true grabbed [ 437.077510][T15276] vivid-000: Enable Capture Scaler: true grabbed [ 437.080292][T15276] vivid-000: Timestamp Source: End of Frame [ 437.082778][T15276] vivid-000: Colorspace: sRGB [ 437.084313][T15276] vivid-000: Transfer Function: Default [ 437.087515][T15276] vivid-000: Y'CbCr Encoding: Default [ 437.089300][T15276] vivid-000: HSV Encoding: Hue 0-179 [ 437.091069][T15276] vivid-000: Quantization: Default [ 437.092773][T15276] vivid-000: Apply Alpha To Red Only: false [ 437.094727][T15276] vivid-000: Standard Aspect Ratio: 4x3 [ 437.096694][T15276] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 437.099235][T15276] vivid-000: DV Timings: 640x480p59 inactive [ 437.101372][T15276] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 437.103842][T15276] vivid-000: Maximum EDID Blocks: 2 [ 437.105664][T15276] vivid-000: Limited RGB Range (16-235): false [ 437.107731][T15276] vivid-000: Rx RGB Quantization Range: Automatic [ 437.112020][T15276] vivid-000: Power Present: 0x00000001 [ 437.114005][T15276] tpg source WxH: 3840x2160 (Y'CbCr) [ 437.116028][T15276] tpg field: 1 [ 437.117154][T15276] tpg crop: (0,0)/3840x2160 [ 437.118625][T15276] tpg compose: (0,0)/3840x2160 [ 437.120170][T15276] tpg colorspace: 8 [ 437.121428][T15276] tpg transfer function: 0/2 [ 437.122977][T15276] tpg Y'CbCr encoding: 0/1 [ 437.124433][T15276] tpg quantization: 0/2 [ 437.125855][T15276] tpg RGB range: 0/2 [ 437.127136][T15276] vivid-000: ================== END STATUS ================== [ 437.210330][ T6022] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 437.216428][ T6022] usb 5-1: USB disconnect, device number 53 [ 437.326966][T15284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2881'. [ 437.705685][ T6022] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 437.906134][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.909893][ T6022] usb 7-1: Using ep0 maxpacket: 16 [ 437.914190][ T6022] usb 7-1: unable to get BOS descriptor or descriptor too short [ 437.918914][ T6022] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 437.927002][ T6022] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 437.933757][ T6022] usb 7-1: config 1 has no interface number 1 [ 437.938453][ T6022] usb 7-1: too many endpoints for config 1 interface 2 altsetting 80: 58, using maximum allowed: 30 [ 437.945503][ T6022] usb 7-1: config 1 interface 2 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 437.954964][ T6022] usb 7-1: config 1 interface 2 has no altsetting 0 [ 437.961961][ T6022] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.975626][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.979225][ T6022] usb 7-1: Product: syz [ 437.981086][ T6022] usb 7-1: Manufacturer: syz [ 437.983296][ T6022] usb 7-1: SerialNumber: syz [ 438.241731][ T6022] usb 7-1: USB disconnect, device number 38 [ 438.579832][ T5944] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 438.838552][T15337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.841632][T15337] batadv_slave_0: entered promiscuous mode [ 438.866434][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.875004][T15345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2905'. [ 438.903879][T15349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2910'. [ 438.914067][T15348] netlink: 'syz.4.2909': attribute type 3 has an invalid length. [ 438.919008][T15348] netlink: 'syz.4.2909': attribute type 1 has an invalid length. [ 438.922285][T15348] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2909'. [ 438.947561][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.951755][T15348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.956129][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.021722][T15358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.028285][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.031489][T15358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.037044][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.169538][T15370] ucma_write: process 306 (syz.1.2920) changed security contexts after opening file descriptor, this is not allowed. [ 439.176954][ T6022] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 439.263199][T15376] netlink: 'syz.1.2923': attribute type 3 has an invalid length. [ 439.267878][T15376] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 439.270801][T15376] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2923'. [ 439.346689][ T6022] usb 5-1: Using ep0 maxpacket: 16 [ 439.355931][ T6022] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.362186][ T6022] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 439.368284][ T6022] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 439.373344][ T6022] usb 5-1: config 1 has no interface number 1 [ 439.376878][ T6022] usb 5-1: too many endpoints for config 1 interface 2 altsetting 80: 58, using maximum allowed: 30 [ 439.383024][ T6022] usb 5-1: config 1 interface 2 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 439.390157][ T6022] usb 5-1: config 1 interface 2 has no altsetting 0 [ 439.399011][ T6022] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.402955][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.408165][ T6022] usb 5-1: Product: syz [ 439.410721][ T6022] usb 5-1: Manufacturer: syz [ 439.413394][ T6022] usb 5-1: SerialNumber: syz [ 439.739072][ T6022] usb 5-1: USB disconnect, device number 54 [ 439.797317][ T5944] Bluetooth: hci3: Malformed LE Event: 0x02 [ 439.841831][T15398] @: renamed from vlan0 (while UP) [ 439.850914][T15400] netlink: 'syz.2.2933': attribute type 3 has an invalid length. [ 439.853686][T15400] netlink: 'syz.2.2933': attribute type 1 has an invalid length. [ 439.856515][T15400] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2933'. [ 440.796558][ T6023] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 440.965737][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 441.067220][ T6023] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 441.073845][ T6023] usb 5-1: config 0 has no interface number 0 [ 441.083923][ T6023] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 441.088732][ T6023] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 441.092997][ T6023] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 441.096676][ T6023] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 441.099977][ T6023] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 441.103558][ T6023] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.109944][ T6023] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 441.112874][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.115516][ T6023] usb 5-1: Product: syz [ 441.117111][ T6023] usb 5-1: Manufacturer: syz [ 441.118642][ T6023] usb 5-1: SerialNumber: syz [ 441.121752][ T6023] usb 5-1: config 0 descriptor?? [ 441.124223][T15435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.126858][T15435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.335483][ T6023] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 441.534405][ T6023] etas_es58x 5-1:0.219: could not parse product info: 'ëµ›' [ 441.551081][T15470] sp0: Synchronizing with TNC [ 441.735214][ T6023] usb 5-1: USB disconnect, device number 55 [ 441.747206][ T6023] etas_es58x 5-1:0.219: Disconnecting syz syz [ 442.066924][ T6023] net_ratelimit: 2 callbacks suppressed [ 442.066937][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.071377][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.135425][T15499] Invalid ELF header magic: != ELF [ 442.503072][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 442.506579][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 442.597482][T15547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2995'. [ 442.698293][T15557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2999'. [ 442.825671][ T5936] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 442.886056][ T6021] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 442.933732][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3005'. [ 442.988220][ T5936] usb 9-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 442.992015][ T5936] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 57983, setting to 64 [ 442.995816][ T5936] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 442.998885][ T5936] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 443.001884][ T5936] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.004679][ T5936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.011523][ T5936] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.029018][ T5936] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 443.035673][ T6021] usb 6-1: Using ep0 maxpacket: 16 [ 443.038852][ T6021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.045656][ T6021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.048880][ T6021] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.053059][ T6021] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 443.056501][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.060311][ T6021] usb 6-1: config 0 descriptor?? [ 443.061074][ T5944] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 443.068582][T15578] sg_write: data in/out 1417444139/52 bytes for SCSI command 0xd8-- guessing data in; [ 443.068582][T15578] program syz.0.3008 not setting count and/or reply_len properly [ 443.107359][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.218054][ T5936] usb 9-1: USB disconnect, device number 40 [ 443.472255][ T6021] microsoft 0003:045E:07DA.0016: invalid report_count -1237519042 [ 443.480233][ T6021] microsoft 0003:045E:07DA.0016: item 0 4 1 9 parsing failed [ 443.485973][ T6021] microsoft 0003:045E:07DA.0016: parse failed [ 443.487969][ T6021] microsoft 0003:045E:07DA.0016: probe with driver microsoft failed with error -22 [ 443.671668][ T6021] usb 6-1: USB disconnect, device number 34 [ 443.885525][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.889369][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.892659][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.896543][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.900102][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.903576][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.907233][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.144631][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 444.630989][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.121160][T15680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3053'. [ 445.265257][T15682] input: syz1 as /devices/virtual/input/input26 [ 445.274091][T15693] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3059'. [ 445.324353][T15699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3062'. [ 445.918578][T15735] serio: Serial port ptm0 [ 446.585734][ T6021] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 446.632468][ T5944] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 446.735726][ T6021] usb 5-1: Using ep0 maxpacket: 16 [ 446.739460][ T6021] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 446.744062][ T6021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.747584][ T6021] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 446.751600][ T6021] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 446.755066][ T6021] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 446.758776][ T6021] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 446.764568][ T6021] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.768156][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 446.771015][ T6021] usb 5-1: SerialNumber: syz [ 446.774806][T15748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.779202][ T6021] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 446.782723][ T6021] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 446.995917][ T6021] usb 5-1: USB disconnect, device number 56 [ 447.186042][ T5936] net_ratelimit: 1116 callbacks suppressed [ 447.186061][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.976746][T15804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3107'. [ 448.145902][ T6446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.226076][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.466086][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.542532][T15811] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3109'. [ 448.546868][T15811] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3109'. [ 449.032977][T15826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3116'. [ 449.165912][ T5936] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 449.265844][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.315863][ T5936] usb 9-1: Using ep0 maxpacket: 32 [ 449.319092][ T5936] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 449.321929][ T5936] usb 9-1: config 0 has no interface number 0 [ 449.324012][ T5936] usb 9-1: config 0 interface 12 has no altsetting 0 [ 449.327771][ T5936] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 449.330723][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.333481][ T5936] usb 9-1: Product: syz [ 449.334877][ T5936] usb 9-1: Manufacturer: syz [ 449.336483][ T5936] usb 9-1: SerialNumber: syz [ 449.339203][ T5936] usb 9-1: config 0 descriptor?? [ 449.949227][ T5936] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 449.952010][ T5936] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 449.954437][ T5936] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 449.957062][ T5936] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 449.961350][ T5936] usb 9-1: USB disconnect, device number 41 [ 450.309380][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.649384][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.652175][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.654907][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.657668][ T5936] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 450.660587][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.707404][ T5944] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 450.711044][ T5944] Bluetooth: hci3: Injecting HCI hardware error event [ 450.714583][ T5944] Bluetooth: hci3: hardware error 0x00 [ 450.805688][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 450.808771][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.813108][ T5936] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 450.816293][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.820830][ T5936] usb 5-1: config 0 descriptor?? [ 450.985864][ T5955] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 451.135770][ T5955] usb 9-1: Using ep0 maxpacket: 8 [ 451.140164][ T5955] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.144399][ T5955] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.148965][ T5955] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 451.154674][ T5955] usb 9-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 451.160772][ T5955] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.167521][ T5955] usb 9-1: config 0 descriptor?? [ 451.232753][ T5936] kye 0003:0458:5016.0017: control desc unexpectedly large [ 451.237443][ T5936] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0017/input/input27 [ 451.243572][ T5936] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0017/input/input28 [ 451.312225][ T5936] kye 0003:0458:5016.0017: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 451.415650][ T6031] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 451.436691][ T5936] usb 5-1: USB disconnect, device number 57 [ 451.582786][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.585237][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.587799][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.590562][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.593067][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.595495][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.597856][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.600242][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.603463][ T6031] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 451.607687][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.610022][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.612331][ T5955] logitech 0003:046D:C293.0018: unknown main item tag 0x0 [ 451.614791][ T6031] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 451.617798][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.622055][ T5955] logitech 0003:046D:C293.0018: hidraw1: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input0 [ 451.626121][ T6031] usb 6-1: config 0 descriptor?? [ 451.627871][ T5955] logitech 0003:046D:C293.0018: no inputs found [ 451.791547][ T5955] usb 9-1: USB disconnect, device number 42 [ 452.042254][ T6031] kovaplus 0003:1E7D:2D50.0019: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 452.240825][ T6031] kovaplus 0003:1E7D:2D50.0019: couldn't init struct kovaplus_device [ 452.244415][ T6031] kovaplus 0003:1E7D:2D50.0019: couldn't install mouse [ 452.251045][ T6031] kovaplus 0003:1E7D:2D50.0019: probe with driver kovaplus failed with error -71 [ 452.256265][ T6031] usb 6-1: USB disconnect, device number 35 [ 452.284778][ T5940] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 452.463765][ T5940] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 452.464647][T15935] sg_write: data in/out 1417444139/52 bytes for SCSI command 0xd8-- guessing data in; [ 452.464647][T15935] program syz.4.3167 not setting count and/or reply_len properly [ 452.785817][ T5944] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 452.795988][ T6032] net_ratelimit: 1022 callbacks suppressed [ 452.796002][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.873444][ T5944] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 452.875150][T15959] sg_write: data in/out 1417444139/52 bytes for SCSI command 0xd8-- guessing data in; [ 452.875150][T15959] program syz.4.3177 not setting count and/or reply_len properly [ 452.919595][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.923399][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.926683][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.929665][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.932512][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.936425][T15963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.173632][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 453.189297][T15990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.194329][T15990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.200791][T15990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.240444][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 453.240455][ T40] audit: type=1326 audit(37723364.092:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.3194" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d579 code=0x0 [ 453.795970][ T6032] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 453.948535][ T6032] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 453.952588][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.957942][ T6032] usb 5-1: config 0 descriptor?? [ 454.176952][T16027] input: syz0 as /devices/virtual/input/input29 [ 454.372634][ T6032] aquacomputer_d5next 0003:0C70:F010.001A: item fetching failed at offset 2/5 [ 454.405998][ T6032] aquacomputer_d5next 0003:0C70:F010.001A: probe with driver aquacomputer_d5next failed with error -22 [ 454.452213][T16038] 9p: Bad value for 'rfdno' [ 454.571449][ T6023] usb 5-1: USB disconnect, device number 58 [ 454.611499][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.619191][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.622985][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.631564][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.635231][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.997378][T16043] chnl_net:caif_netlink_parms(): no params data found [ 455.067814][T16043] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.070257][T16043] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.072776][T16043] bridge_slave_0: entered allmulticast mode [ 455.076851][T16043] bridge_slave_0: entered promiscuous mode [ 455.100105][ T1163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.109315][T16043] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.112585][T16043] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.115247][T16043] bridge_slave_1: entered allmulticast mode [ 455.118366][T16043] bridge_slave_1: entered promiscuous mode [ 455.141400][T16043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.147726][T16043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.163233][T16043] team0: Port device team_slave_0 added [ 455.167627][T16043] team0: Port device team_slave_1 added [ 455.182236][T16043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.184669][T16043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.194960][T16043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.214229][ T1163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.226822][T16043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.229598][T16043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.240009][T16043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.264406][T16043] hsr_slave_0: entered promiscuous mode [ 455.268138][T16043] hsr_slave_1: entered promiscuous mode [ 455.270624][T16043] debugfs: 'hsr0' already exists in 'hsr' [ 455.272667][T16043] Cannot create hsr debugfs directory [ 455.313808][ T1163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.429068][ T1163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.671906][T16076] sg_write: data in/out 1417444139/52 bytes for SCSI command 0xd8-- guessing data in; [ 455.671906][T16076] program syz.2.3220 not setting count and/or reply_len properly [ 455.736700][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.741108][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.744769][ T1163] bond0 (unregistering): Released all slaves [ 455.820508][ T1163] tipc: Left network mode [ 456.066891][ T6021] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 456.096906][ T1163] hsr_slave_0: left promiscuous mode [ 456.099118][ T1163] hsr_slave_1: left promiscuous mode [ 456.101314][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.103754][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.107932][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.110432][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.120856][ T1163] veth0_macvtap: left promiscuous mode [ 456.123846][ T1163] veth1_vlan: left promiscuous mode [ 456.126895][ T1163] veth0_vlan: left promiscuous mode [ 456.225913][ T6021] usb 7-1: Using ep0 maxpacket: 32 [ 456.230746][ T6021] usb 7-1: config 0 interface 0 has no altsetting 0 [ 456.235344][ T6021] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 456.239714][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.243086][ T6021] usb 7-1: Product: syz [ 456.244904][ T6021] usb 7-1: Manufacturer: syz [ 456.246966][ T6021] usb 7-1: SerialNumber: syz [ 456.250923][ T6021] usb 7-1: config 0 descriptor?? [ 456.256393][ T5936] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 456.405738][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 456.407955][ T5936] usb 6-1: no configurations [ 456.409867][ T5936] usb 6-1: can't read configurations, error -22 [ 456.458937][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 456.495382][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 456.535681][ T5936] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 456.661742][ T6021] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 456.709313][ T5944] Bluetooth: hci1: command tx timeout [ 456.709314][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 456.711647][ T5936] usb 6-1: no configurations [ 456.721737][ T5936] usb 6-1: can't read configurations, error -22 [ 456.724101][ T5936] usb usb6-port1: attempt power cycle [ 456.904252][T16043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.920380][T16043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.924630][T16043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.929072][T16043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.987109][T16043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.997242][T16043] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.002639][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.005152][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.015793][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.018320][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.066994][ T6021] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 457.070346][ T6021] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 457.075511][ T6021] usb 7-1: USB disconnect, device number 39 [ 457.076145][ T5936] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 457.096453][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 457.099231][ T5936] usb 6-1: no configurations [ 457.106034][ T5936] usb 6-1: can't read configurations, error -22 [ 457.107984][ T1163] IPVS: stop unused estimator thread 0... [ 457.186022][T16043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.245910][ T5936] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 457.269017][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 457.271747][ T5936] usb 6-1: no configurations [ 457.273672][ T5936] usb 6-1: can't read configurations, error -22 [ 457.276825][ T5936] usb usb6-port1: unable to enumerate USB device [ 457.362541][T16043] veth0_vlan: entered promiscuous mode [ 457.369404][T16043] veth1_vlan: entered promiscuous mode [ 457.385244][T16043] veth0_macvtap: entered promiscuous mode [ 457.389836][T16043] veth1_macvtap: entered promiscuous mode [ 457.400155][T16043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.410811][T16043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.417620][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.420659][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.424303][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.427467][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.509299][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.515746][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.531017][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.533736][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.725236][T16138] netlink: 'syz.4.3239': attribute type 24 has an invalid length. [ 458.180127][ T6023] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 458.349595][ T6023] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 458.352561][ T6023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.355244][ T6023] usb 9-1: Product: syz [ 458.356881][ T6023] usb 9-1: Manufacturer: syz [ 458.358425][ T6023] usb 9-1: SerialNumber: syz [ 458.362503][ T6023] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 458.378738][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 458.383184][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 458.388997][ T6023] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 458.665850][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 458.785729][ T5944] Bluetooth: hci1: command tx timeout [ 458.817157][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 458.824406][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 458.828099][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.831009][ T9] usb 7-1: Product: syz [ 458.832487][ T9] usb 7-1: Manufacturer: syz [ 458.834158][ T9] usb 7-1: SerialNumber: syz [ 458.837157][ T9] usb 7-1: config 0 descriptor?? [ 458.998176][ T6072] usb 9-1: USB disconnect, device number 43 [ 459.007284][ T5944] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 459.008584][T16179] sg_write: data in/out 1417444139/52 bytes for SCSI command 0xd8-- guessing data in; [ 459.008584][T16179] program syz.1.3259 not setting count and/or reply_len properly [ 459.042858][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 459.388399][T16189] bond0: entered promiscuous mode [ 459.390214][T16189] bond_slave_0: entered promiscuous mode [ 459.392275][T16189] bond_slave_1: entered promiscuous mode [ 459.425721][ T6023] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 459.429070][ T6023] ath9k_htc: Failed to initialize the device [ 459.432790][ T6072] usb 9-1: ath9k_htc: USB layer deinitialized [ 459.445216][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 459.449680][ T9] usb 7-1: USB disconnect, device number 40 [ 459.576026][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3266'. [ 459.579029][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3266'. [ 459.649580][ T5944] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 459.652483][T16201] sg_write: data in/out 1417444139/52 bytes for SCSI command 0xd8-- guessing data in; [ 459.652483][T16201] program syz.4.3268 not setting count and/or reply_len properly [ 459.725773][ T5955] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 459.885752][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 459.896113][ T5955] usb 5-1: unable to get BOS descriptor or descriptor too short [ 459.900417][ T5955] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 459.903290][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.914838][ T5955] usb 5-1: config 0 has no interface number 0 [ 459.922167][ T5955] usb 5-1: config 0 interface 3 altsetting 142 bulk endpoint 0x5 has invalid maxpacket 32 [ 459.926543][ T5955] usb 5-1: config 0 interface 3 altsetting 142 endpoint 0xB has an invalid bInterval 36, changing to 9 [ 459.931022][ T5955] usb 5-1: config 0 interface 3 altsetting 142 has an invalid descriptor for endpoint zero, skipping [ 459.935336][ T5955] usb 5-1: config 0 interface 3 altsetting 142 has a duplicate endpoint with address 0xB, skipping [ 459.939797][ T5955] usb 5-1: config 0 interface 3 altsetting 142 endpoint 0x6 has invalid wMaxPacketSize 0 [ 459.943880][ T5955] usb 5-1: config 0 interface 3 altsetting 142 bulk endpoint 0x6 has invalid maxpacket 0 [ 459.945993][ T9] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 459.947858][ T5955] usb 5-1: config 0 interface 3 altsetting 142 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 459.957034][ T5955] usb 5-1: config 0 interface 3 has no altsetting 0 [ 459.961466][ T5955] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=4e.46 [ 459.964835][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.968164][ T5955] usb 5-1: Product: syz [ 459.969812][ T5955] usb 5-1: Manufacturer: syz [ 459.971580][ T5955] usb 5-1: SerialNumber: syz [ 459.974610][ T5955] usb 5-1: config 0 descriptor?? [ 459.978484][T16193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 460.137473][ T9] usb 9-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=b6.97 [ 460.140664][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.186786][ T5955] kvaser_usb 5-1:0.3: error -ENODEV: Cannot get usb endpoint(s) [ 460.199181][ T5955] usb 5-1: USB disconnect, device number 59 [ 460.295665][ T6006] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 460.308200][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3276'. [ 460.310997][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3276'. [ 460.355641][ T9] usb 9-1: string descriptor 0 read error: -71 [ 460.359979][ T9] cdc_subset 9-1:138.0: probe with driver cdc_subset failed with error -71 [ 460.364366][ T9] usb 9-1: USB disconnect, device number 44 [ 460.476584][ T6006] usb 7-1: Using ep0 maxpacket: 32 [ 460.481153][ T6006] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 460.484132][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.487087][ T6006] usb 7-1: Product: syz [ 460.488492][ T6006] usb 7-1: Manufacturer: syz [ 460.490102][ T6006] usb 7-1: SerialNumber: syz [ 460.492980][ T6006] usb 7-1: config 0 descriptor?? [ 460.721807][T16231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3281'. [ 460.823610][T16237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3284'. [ 460.865774][ T5944] Bluetooth: hci1: command tx timeout [ 460.867028][T16239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3285'. [ 461.107441][ T6006] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 461.110598][ T6006] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 461.113207][ T6006] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 461.157772][ T6006] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 461.274178][T16278] netlink: 'syz.4.3303': attribute type 25 has an invalid length. [ 461.308172][ T9] usb 7-1: USB disconnect, device number 41 [ 461.391376][T16293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3311'. [ 461.438104][T16300] netlink: 'syz.0.3314': attribute type 25 has an invalid length. [ 461.543661][T16318] loop6: detected capacity change from 0 to 7 [ 461.546546][T16318] Dev loop6: unable to read RDB block 7 [ 461.548535][T16318] loop6: unable to read partition table [ 461.550679][T16318] loop6: partition table beyond EOD, truncated [ 461.553180][T16318] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 461.670516][T16330] netlink: 'syz.1.3329': attribute type 25 has an invalid length. [ 461.766327][ T6006] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 461.903695][T16353] netlink: 'syz.2.3339': attribute type 25 has an invalid length. [ 461.938560][T16357] sg_write: data in/out 1417444139/52 bytes for SCSI command 0xd8-- guessing data in; [ 461.938560][T16357] program syz.2.3341 not setting count and/or reply_len properly [ 461.947972][ T6006] usb 9-1: unable to get BOS descriptor or descriptor too short [ 461.957805][ T6006] usb 9-1: config 64 has an invalid interface number: 16 but max is 0 [ 461.960507][ T6006] usb 9-1: config 64 has no interface number 0 [ 461.962815][ T6006] usb 9-1: config 64 interface 16 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.967850][ T6006] usb 9-1: config 64 interface 16 altsetting 6 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.971534][ T6006] usb 9-1: config 64 interface 16 altsetting 6 endpoint 0x8F has invalid wMaxPacketSize 0 [ 461.974935][ T6006] usb 9-1: config 64 interface 16 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 461.979719][ T6006] usb 9-1: config 64 interface 16 has no altsetting 0 [ 461.983528][ T6006] usb 9-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=3c.11 [ 461.986585][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.989171][ T6006] usb 9-1: Product: syz [ 461.990640][ T6006] usb 9-1: Manufacturer: syz [ 461.992276][ T6006] usb 9-1: SerialNumber: syz [ 462.002633][T16363] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 462.033224][T16365] netlink: 'syz.2.3345': attribute type 16 has an invalid length. [ 462.035993][T16365] netlink: 'syz.2.3345': attribute type 17 has an invalid length. [ 462.203363][ T6006] xbox_remote_probe: endpoint_in message size==0? [ 462.208953][ T6006] usb 9-1: USB disconnect, device number 45 [ 462.934318][T16394] netlink: 'syz.1.3358': attribute type 25 has an invalid length. [ 462.956595][ T5944] Bluetooth: hci1: command tx timeout [ 463.275678][ T34] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 463.445752][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 463.450243][ T34] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 463.453234][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.465907][ T34] usb 7-1: Product: syz [ 463.477226][ T34] usb 7-1: Manufacturer: syz [ 463.478942][ T34] usb 7-1: SerialNumber: syz [ 463.506269][ T34] usb 7-1: config 0 descriptor?? [ 463.517066][ T34] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 463.787754][T16421] __nla_validate_parse: 3 callbacks suppressed [ 463.787771][T16421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3367'. [ 463.788875][T16420] netlink: 'syz.4.3368': attribute type 25 has an invalid length. [ 464.017296][T16438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3377'. [ 464.127573][ T34] gspca_ov534_9: reg_w failed -71 [ 464.219477][T16461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3388'. [ 464.455742][ T34] gspca_ov534_9: Unknown sensor 0000 [ 464.455818][ T34] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 464.461716][ T34] usb 7-1: USB disconnect, device number 42 [ 464.668136][T16499] hugetlbfs: Bad value for 'size' [ 465.195744][ T53] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 465.345816][ T53] usb 9-1: Using ep0 maxpacket: 32 [ 465.348782][ T53] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 465.351838][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.355640][ T53] usb 9-1: config 0 descriptor?? [ 465.358949][ T53] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 465.605695][ T5955] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 465.614233][T16522] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3416'. [ 465.755681][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 465.759711][ T5955] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 465.763588][ T5955] usb 6-1: config 0 has no interface number 0 [ 465.770568][ T5955] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 465.774723][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.778361][ T5955] usb 6-1: Product: syz [ 465.780211][ T5955] usb 6-1: Manufacturer: syz [ 465.781869][ T5955] usb 6-1: SerialNumber: syz [ 465.785509][ T5955] usb 6-1: config 0 descriptor?? [ 465.790759][ T5955] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 465.994908][ T5955] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 465.999967][ T5955] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 466.155730][ T6032] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 466.308554][ T6032] usb 7-1: unable to get BOS descriptor or descriptor too short [ 466.311867][ T6032] usb 7-1: config 174 has an invalid interface number: 178 but max is 0 [ 466.314630][ T6032] usb 7-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 466.318109][ T6032] usb 7-1: config 174 has no interface number 0 [ 466.320159][ T6032] usb 7-1: config 174 interface 178 has no altsetting 0 [ 466.323861][ T6032] usb 7-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 466.327071][ T6032] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.329731][ T6032] usb 7-1: Product: syz [ 466.331113][ T6032] usb 7-1: Manufacturer: syz [ 466.332661][ T6032] usb 7-1: SerialNumber: syz [ 466.363419][ T53] gspca_nw80x: reg_w err -71 [ 466.365016][ T53] nw80x 9-1:0.0: probe with driver nw80x failed with error -71 [ 466.368413][ T53] usb 9-1: USB disconnect, device number 46 [ 466.394287][ C3] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 466.398105][ T5955] usb 6-1: USB disconnect, device number 40 [ 466.403565][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 466.408414][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 466.412213][ T5955] quatech2 6-1:0.51: device disconnected [ 466.540827][ T6032] usb 7-1: bad CDC descriptors [ 466.542859][ T6032] usb 7-1: unsupported MDLM descriptors [ 466.546786][ T6032] usb 7-1: USB disconnect, device number 43 [ 466.952427][ T5944] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 467.110698][T16572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3440'. [ 467.170530][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3444'. [ 467.415786][ T53] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 467.459090][T16596] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3452'. [ 467.555772][ T6446] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 467.575665][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 467.578668][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 467.582438][ T53] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 467.585825][ T53] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 467.590531][ T53] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.593687][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.596353][ T53] usb 9-1: Product: syz [ 467.597753][ T53] usb 9-1: Manufacturer: syz [ 467.599335][ T53] usb 9-1: SerialNumber: syz [ 467.725699][ T6446] usb 7-1: Using ep0 maxpacket: 32 [ 467.729078][ T6446] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 467.731736][ T6446] usb 7-1: config 0 has no interface number 0 [ 467.733862][ T6446] usb 7-1: config 0 interface 49 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 467.739750][ T6446] usb 7-1: config 0 interface 49 altsetting 0 endpoint 0x88 has invalid maxpacket 96, setting to 64 [ 467.743416][ T6446] usb 7-1: config 0 interface 49 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 467.749772][ T6446] usb 7-1: New USB device found, idVendor=0f3d, idProduct=0112, bcdDevice=17.16 [ 467.752914][ T6446] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.756886][ T6446] usb 7-1: Product: syz [ 467.758452][ T6446] usb 7-1: Manufacturer: syz [ 467.760472][ T6446] usb 7-1: SerialNumber: syz [ 467.763804][ T6446] usb 7-1: config 0 descriptor?? [ 467.766489][T16588] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 467.770453][ T6446] sierra 7-1:0.49: Sierra USB modem converter detected [ 467.815824][ T53] cdc_ncm 9-1:1.0: bind() failure [ 467.820924][ T53] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 467.823287][ T53] cdc_ncm 9-1:1.1: bind() failure [ 467.827539][ T53] usb 9-1: USB disconnect, device number 47 [ 467.942312][T16628] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3468'. [ 467.974623][ T6446] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 467.979186][ T6446] usb 7-1: Sierra USB modem converter now attached to ttyUSB1 [ 467.985022][ T6446] usb 7-1: USB disconnect, device number 44 [ 467.989964][ T6446] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 467.993961][ T6446] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 467.997515][ T6446] sierra 7-1:0.49: device disconnected [ 468.139156][T16648] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3478'. [ 468.142273][T16648] net_ratelimit: 6 callbacks suppressed [ 468.142284][T16648] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 468.379501][T16675] netlink: 'syz.4.3491': attribute type 25 has an invalid length. [ 468.815824][ T6446] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 468.967764][ T6446] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 468.970790][ T6446] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.974627][ T6446] usb 9-1: config 0 descriptor?? [ 469.188621][ T6446] ath6kl: Failed to submit usb control message: -71 [ 469.193159][ T6446] ath6kl: unable to send the bmi data to the device: -71 [ 469.196870][ T6446] ath6kl: Unable to send get target info: -71 [ 469.203799][ T6446] ath6kl: Failed to init ath6kl core: -71 [ 469.208886][ T6446] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 469.214323][ T6446] usb 9-1: USB disconnect, device number 48 [ 469.858047][T16740] fuse: Bad value for 'fd' [ 470.115940][T16761] netlink: 'syz.4.3530': attribute type 25 has an invalid length. [ 470.354159][T16779] netlink: 'syz.4.3538': attribute type 1 has an invalid length. [ 470.955684][ T6446] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 471.095683][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 471.105690][ T6446] usb 9-1: Using ep0 maxpacket: 32 [ 471.109579][ T6446] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.113617][ T6446] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.118210][ T6446] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 471.121664][ T6446] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 471.124805][ T6446] usb 9-1: Product: syz [ 471.126352][ T6446] usb 9-1: Manufacturer: syz [ 471.130330][ T6446] hub 9-1:4.0: USB hub found [ 471.245697][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 471.249481][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 471.252906][ T9] usb 7-1: config 0 has no interface number 0 [ 471.255442][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 471.259938][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 471.264655][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 471.268464][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 471.272676][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 471.275697][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.279924][ T9] usb 7-1: config 0 descriptor?? [ 471.283679][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 471.315649][ T6023] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 471.335450][ T6446] hub 9-1:4.0: 2 ports detected [ 471.475722][ T6023] usb 6-1: Using ep0 maxpacket: 16 [ 471.479129][ T6023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.482936][ T6023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.486203][ T6023] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.487673][ T9] usb 7-1: USB disconnect, device number 45 [ 471.490573][ T6023] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.496536][ T6023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.503347][ T6023] usb 6-1: config 0 descriptor?? [ 471.507029][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 471.537455][ T6446] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 471.539866][ T6446] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 471.575919][ T6446] usb 9-1: USB disconnect, device number 49 [ 471.918359][ T6023] microsoft 0003:045E:07DA.001B: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 471.922428][ T6023] microsoft 0003:045E:07DA.001B: no inputs found [ 471.924599][ T6023] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 472.060473][T16826] netlink: 'syz.2.3558': attribute type 25 has an invalid length. [ 472.118213][ T9] usb 6-1: USB disconnect, device number 41 [ 472.177075][ T40] audit: type=1326 audit(37723383.032:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.187573][ T40] audit: type=1326 audit(37723383.032:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.196827][ T40] audit: type=1326 audit(37723383.032:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.205739][ T40] audit: type=1326 audit(37723383.032:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.215366][ T40] audit: type=1326 audit(37723383.032:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.223719][T16840] vivid-008: disconnect [ 472.224895][ T40] audit: type=1326 audit(37723383.032:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.228551][T16839] vivid-008: reconnect [ 472.236664][ T40] audit: type=1326 audit(37723383.032:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.236710][ T40] audit: type=1326 audit(37723383.032:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.236777][ T40] audit: type=1326 audit(37723383.032:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.236844][ T40] audit: type=1326 audit(37723383.032:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16835 comm="syz.2.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 472.267530][T16844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3567'. [ 472.372830][T16851] 9p: Bad value for 'wfdno' [ 472.636377][ T9] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 472.807155][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 472.811005][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 472.814446][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 472.818006][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.827240][T16851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 472.831417][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.352277][T16897] Bluetooth: hci4: Frame reassembly failed (-84) [ 473.733921][T16921] netlink: 'syz.1.3603': attribute type 24 has an invalid length. [ 474.397644][T16961] fuse: Bad value for 'fd' [ 475.362628][ T6446] usb 7-1: USB disconnect, device number 46 [ 475.412216][T16981] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3629'. [ 475.425723][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 475.426765][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 475.429524][T16985] netlink: 'syz.1.3630': attribute type 25 has an invalid length. [ 475.621560][T17011] netlink: 'syz.2.3643': attribute type 24 has an invalid length. [ 475.622685][T17013] sp0: Synchronizing with TNC [ 475.861663][T17035] netlink: 'syz.1.3654': attribute type 24 has an invalid length. [ 476.074920][T17058] netlink: 'syz.4.3665': attribute type 24 has an invalid length. [ 476.112985][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3667'. [ 476.295730][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 476.458263][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 476.464750][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 476.468996][ T9] usb 6-1: config 0 has no interface number 0 [ 476.471639][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.475280][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 476.485360][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.490344][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 476.494736][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 476.500604][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 476.504566][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.509632][ T9] usb 6-1: config 0 descriptor?? [ 476.513690][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 476.715017][ T9] usb 6-1: USB disconnect, device number 42 [ 476.719993][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 476.926135][ T5955] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 477.087277][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.090819][ T5955] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 477.094188][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.100420][ T5955] usb 7-1: config 0 descriptor?? [ 477.162307][T17105] syz.4.3686 (17105): drop_caches: 2 [ 477.290236][T17111] netlink: 'syz.1.3689': attribute type 25 has an invalid length. [ 477.516493][ T5955] lenovo 0003:17EF:6047.001C: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 477.641333][T17139] netlink: 'syz.1.3701': attribute type 25 has an invalid length. [ 477.915859][ T5955] lenovo 0003:17EF:6047.001C: Failed to switch middle button: -71 [ 477.918869][ T5955] lenovo 0003:17EF:6047.001C: Fn-lock setting failed: -71 [ 477.921536][ T5955] lenovo 0003:17EF:6047.001C: Sensitivity setting failed: -71 [ 477.925216][ T5955] usb 7-1: USB disconnect, device number 47 [ 478.357034][T17172] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3717'. [ 478.360322][T17172] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3717'. [ 478.363549][T17172] netlink: 584 bytes leftover after parsing attributes in process `syz.0.3717'. [ 478.694961][T17178] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3719'. [ 478.965891][ T5955] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 479.125614][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 479.128765][ T5955] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 479.131448][ T5955] usb 6-1: config 0 has no interface number 0 [ 479.133563][ T5955] usb 6-1: config 0 interface 184 has no altsetting 0 [ 479.137633][ T5955] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 479.140617][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.143394][ T5955] usb 6-1: Product: syz [ 479.144786][ T5955] usb 6-1: Manufacturer: syz [ 479.146426][ T5955] usb 6-1: SerialNumber: syz [ 479.149128][ T5955] usb 6-1: config 0 descriptor?? [ 479.153187][ T5955] smsc75xx v1.0.0 [ 479.393109][ T5944] Bluetooth: hci0: link tx timeout [ 479.396404][ T5944] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 479.402646][ T5944] Bluetooth: hci0: link tx timeout [ 479.404551][ T5944] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 479.561770][T17204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3730'. [ 479.760446][ T5955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 479.764431][ T5955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 479.772854][ T5955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 479.776564][ T5955] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 479.780708][ T5955] usb 6-1: USB disconnect, device number 43 [ 480.198656][T17243] ip6erspan0: entered promiscuous mode [ 480.204215][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3744'. [ 480.315200][T17249] netlink: 'syz.4.3747': attribute type 25 has an invalid length. [ 480.508894][T17275] netlink: 'syz.1.3760': attribute type 25 has an invalid length. [ 480.525719][T17277] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.3761'. [ 480.900158][T17303] netlink: 'syz.4.3773': attribute type 25 has an invalid length. [ 480.905791][ T6446] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 480.978984][T17306] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.3774'. [ 481.056952][ T6446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.061565][ T6446] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 481.064524][ T6446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.071387][ T6446] usb 7-1: config 0 descriptor?? [ 481.425779][ T5944] Bluetooth: hci0: command 0x0406 tx timeout [ 481.438556][ T5940] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 481.443689][ T5940] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 481.447248][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: kworker/u33:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.452009][ T5940] Tainted: [L]=SOFTLOCKUP [ 481.453873][ T5940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 481.457998][ T5940] Workqueue: hci0 hci_cmd_sync_work [ 481.460238][ T5940] RIP: 0010:klist_put+0x4d/0x1b0 [ 481.462387][ T5940] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 26 0d [ 481.470094][ T5940] RSP: 0018:ffffc90004397860 EFLAGS: 00010202 [ 481.472616][ T5940] RAX: dffffc0000000000 RBX: ffff88802acc2c60 RCX: 0000000000000000 [ 481.475679][ T5940] RDX: 000000000000000b RSI: ffffffff8b6b1b05 RDI: 0000000000000058 [ 481.479373][ T5940] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20d863c [ 481.482429][ T5940] R10: ffffffff906c31e3 R11: 0000000000002ba1 R12: 0000000000000000 [ 481.485841][ T5940] R13: 0000000000000001 R14: 1ffff92000872f14 R15: ffffffff906c31a0 [ 481.488991][ T5940] FS: 0000000000000000(0000) GS:ffff8880977fc000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 481.492764][ T5940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.495595][ T5940] CR2: 000000002ef22ff8 CR3: 0000000074d7b000 CR4: 0000000000352ef0 [ 481.498693][ T5940] Call Trace: [ 481.500162][ T5940] [ 481.501477][ T5940] klist_remove+0x13f/0x2e0 [ 481.503478][ T5940] ? __pfx_klist_remove+0x10/0x10 [ 481.505510][ T5940] ? kobject_move+0x15d/0x260 [ 481.507680][ T5940] ? __pfx_kobject_move+0x10/0x10 [ 481.509874][ T5940] ? get_device_parent+0x1ed/0x4e0 [ 481.511865][ T5940] device_move+0x12d/0x1160 [ 481.513703][ T5940] hci_conn_del_sysfs+0xaa/0x1a0 [ 481.515850][ T5940] hci_conn_del+0x680/0x11d0 [ 481.517872][ T5940] hci_abort_conn_sync+0x76a/0xb20 [ 481.519852][ T5940] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 481.522161][ T5940] ? find_held_lock+0x2b/0x80 [ 481.524211][ T5940] ? abort_conn_sync+0x14d/0x360 [ 481.526344][ T5940] abort_conn_sync+0x197/0x360 [ 481.528062][ T5940] hci_cmd_sync_work+0x1ab/0x470 [ 481.530181][ T5940] process_one_work+0x9ba/0x1b20 [ 481.532348][ T5940] ? __pfx_process_one_work+0x10/0x10 [ 481.534598][ T5940] ? assign_work+0x1a0/0x250 [ 481.536322][ T5940] worker_thread+0x6c8/0xf10 [ 481.538339][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 481.540594][ T5940] kthread+0x3c5/0x780 [ 481.542036][ T5940] ? __pfx_kthread+0x10/0x10 [ 481.544151][ T5940] ? rcu_is_watching+0x12/0xc0 [ 481.546283][ T5940] ? __pfx_kthread+0x10/0x10 [ 481.548573][ T5940] ret_from_fork+0x983/0xb10 [ 481.550637][ T5940] ? __pfx_ret_from_fork+0x10/0x10 [ 481.552491][ T5940] ? __switch_to+0x7af/0x10d0 [ 481.554619][ T5940] ? __pfx_kthread+0x10/0x10 [ 481.556651][ T5940] ret_from_fork_asm+0x1a/0x30 [ 481.558746][ T5940] [ 481.559915][ T5940] Modules linked in: [ 481.562226][ T5940] ---[ end trace 0000000000000000 ]--- [ 481.567302][ T5940] RIP: 0010:klist_put+0x4d/0x1b0 [ 481.569631][ T5940] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 26 0d [ 481.578595][ T5940] RSP: 0018:ffffc90004397860 EFLAGS: 00010202 [ 481.580844][ T5940] RAX: dffffc0000000000 RBX: ffff88802acc2c60 RCX: 0000000000000000 [ 481.584724][ T5940] RDX: 000000000000000b RSI: ffffffff8b6b1b05 RDI: 0000000000000058 [ 481.588510][ T5940] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20d863c [ 481.591352][ T5940] R10: ffffffff906c31e3 R11: 0000000000002ba1 R12: 0000000000000000 [ 481.593977][ T5940] R13: 0000000000000001 R14: 1ffff92000872f14 R15: ffffffff906c31a0 [ 481.596569][ T5940] FS: 0000000000000000(0000) GS:ffff8880977fc000(0000) knlGS:0000000000000000 [ 481.599499][ T5940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.601671][ T5940] CR2: 00000000f7496288 CR3: 000000005956f000 CR4: 0000000000352ef0 [ 481.604265][ T5940] Kernel panic - not syncing: Fatal exception [ 481.607029][ T5940] Kernel Offset: disabled [ 481.608465][ T5940] Rebooting in 86400 seconds..