last executing test programs: 1m54.973888169s ago: executing program 3 (id=542): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000013}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={'sha384\x00'}}) 1m54.685919881s ago: executing program 3 (id=545): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x3c, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1m54.500160714s ago: executing program 3 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m54.373877259s ago: executing program 3 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000500)='./file0/../file0\x00', 0x1) 1m54.230966805s ago: executing program 3 (id=551): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000015}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x4, 0x0, 0x0) 1m52.941551669s ago: executing program 3 (id=568): timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_settime(r0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 1m52.579871468s ago: executing program 32 (id=568): timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_settime(r0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 1m32.023352684s ago: executing program 0 (id=712): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 1m31.577705015s ago: executing program 0 (id=716): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa26}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m31.346934115s ago: executing program 0 (id=717): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m30.513033462s ago: executing program 0 (id=723): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f4ec65195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x404c051, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x14) 1m30.304574268s ago: executing program 0 (id=726): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fcntl$setstatus(r0, 0x4, 0x400) 1m30.077481423s ago: executing program 0 (id=729): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) setns(r1, 0x16000000) 1m14.956980219s ago: executing program 33 (id=729): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) setns(r1, 0x16000000) 5.964700535s ago: executing program 1 (id=1453): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0\x00') 5.864300156s ago: executing program 1 (id=1454): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000001180)={0x20, 0xf, 0xba, "9e6fc776d8c78dd36ac335450fa9ea28866c597f0e4b94b3853616c1fa001445c88a08b28a3d8fcfab7ef8805b06ca91b763812697be7df4f36976d6ba2d2b1ad75148412d2a7846f0fe582da273d921247eedd2321c589bc42fc5148c032170db10a0db4d5f3181e416fb026a0b25c54c35b507f7e54cda096e9646dfe63d7465744f5f75aa8cf492e8218baa7ddc1732cf6c3222286804f63efbcba07e57ee4409ab417e25b503f16e40c78b74799b35d15ef3850c4f03b9ae"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x4) 4.578253164s ago: executing program 2 (id=1459): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 4.493573347s ago: executing program 4 (id=1461): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x1ff, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x6}}, 0xb8}}, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 4.444454645s ago: executing program 2 (id=1462): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 4.174491665s ago: executing program 4 (id=1464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.932912307s ago: executing program 4 (id=1465): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 3.702867794s ago: executing program 2 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x147842, 0x126) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0xff, 0xc) 3.611416875s ago: executing program 4 (id=1468): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) 3.366558578s ago: executing program 4 (id=1469): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="59bc", 0x2) 3.303494892s ago: executing program 2 (id=1471): r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, 0x0, 0x1000) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000a, 0x31, 0xffffffffffffffff, 0x8871b000) 3.100699493s ago: executing program 1 (id=1473): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 2.473246575s ago: executing program 5 (id=1476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 2.248482794s ago: executing program 6 (id=1478): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r1}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 2.05397159s ago: executing program 6 (id=1479): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x404c885, &(0x7f0000000200)={0xa, 0x4e31, 0x5, @mcast2}, 0x5a) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) 1.86950136s ago: executing program 5 (id=1480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf", 0x35}, {&(0x7f0000000540)}, {0x0}, {0x0}], 0x4}}, {{&(0x7f0000001000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31", 0x2}, {0x0}], 0x2, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x38}}], 0x2, 0x4000000) 1.869325127s ago: executing program 1 (id=1481): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) getresuid(0x0, 0x0, 0x0) 1.824655s ago: executing program 2 (id=1482): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.791141915s ago: executing program 6 (id=1483): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) rename(0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.740742421s ago: executing program 5 (id=1484): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be", 0x9}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa", 0x32}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d10", 0x25}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x42000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.641850874s ago: executing program 1 (id=1485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3502, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.603221639s ago: executing program 5 (id=1486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0xd, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0x47, 0x2, 0x0, 0x0, {{0x3, 0x4, 0xb}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) 1.601891719s ago: executing program 6 (id=1487): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)=""/248, 0xf8}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) 1.391036587s ago: executing program 2 (id=1488): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) 1.281662853s ago: executing program 1 (id=1489): syz_80211_inject_frame(0x0, 0x0, 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 1.108941243s ago: executing program 4 (id=1490): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 486.622226ms ago: executing program 6 (id=1491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x6}, 0x1c) 313.405074ms ago: executing program 6 (id=1492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 213.725225ms ago: executing program 5 (id=1493): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5875, @mcast1, 0x4}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x8000005, @mcast1, 0x5}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xf1, 0x9) 0s ago: executing program 5 (id=1494): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): dge_slave_0: entered promiscuous mode [ 77.499503][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.501296][ T5793] team0: Port device team_slave_0 added [ 77.528030][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.528163][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.528323][ T5806] bridge_slave_1: entered allmulticast mode [ 77.530057][ T5806] bridge_slave_1: entered promiscuous mode [ 77.579308][ T5793] team0: Port device team_slave_1 added [ 77.583411][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.833885][ T5797] team0: Port device team_slave_0 added [ 77.862297][ T5798] Bluetooth: hci1: command tx timeout [ 77.862409][ T5798] Bluetooth: hci0: command tx timeout [ 77.867686][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.894335][ T5797] team0: Port device team_slave_1 added [ 77.895735][ T5801] team0: Port device team_slave_0 added [ 77.932025][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.941702][ T5115] Bluetooth: hci2: command tx timeout [ 77.958617][ T5801] team0: Port device team_slave_1 added [ 77.959456][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.959465][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.959478][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.983676][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.021900][ T5802] team0: Port device team_slave_0 added [ 78.039115][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.039129][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.039142][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.092374][ T5115] Bluetooth: hci3: command tx timeout [ 78.096694][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.096708][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.096732][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.098791][ T5802] team0: Port device team_slave_1 added [ 78.102280][ T5115] Bluetooth: hci4: command tx timeout [ 78.116681][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.116696][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.116720][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.118133][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.118145][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.118168][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.157293][ T5806] team0: Port device team_slave_0 added [ 78.170225][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.170241][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.170264][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.196271][ T5806] team0: Port device team_slave_1 added [ 78.214960][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.214977][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.215008][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.273775][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.273792][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.273815][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.346905][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.346922][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.346952][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.361382][ T5793] hsr_slave_0: entered promiscuous mode [ 78.365307][ T5793] hsr_slave_1: entered promiscuous mode [ 78.386576][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.386591][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.386614][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.396973][ T5797] hsr_slave_0: entered promiscuous mode [ 78.398139][ T5797] hsr_slave_1: entered promiscuous mode [ 78.399117][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 78.399228][ T5797] Cannot create hsr debugfs directory [ 78.468023][ T5801] hsr_slave_0: entered promiscuous mode [ 78.469474][ T5801] hsr_slave_1: entered promiscuous mode [ 78.470368][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 78.470390][ T5801] Cannot create hsr debugfs directory [ 78.554871][ T5802] hsr_slave_0: entered promiscuous mode [ 78.555624][ T5802] hsr_slave_1: entered promiscuous mode [ 78.556081][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 78.556095][ T5802] Cannot create hsr debugfs directory [ 78.622558][ T5806] hsr_slave_0: entered promiscuous mode [ 78.623289][ T5806] hsr_slave_1: entered promiscuous mode [ 78.623821][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 78.623839][ T5806] Cannot create hsr debugfs directory [ 79.528765][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.579355][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.596701][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.647556][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.746299][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.778668][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.798154][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.847388][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.932499][ T5798] Bluetooth: hci1: command tx timeout [ 79.932584][ T5115] Bluetooth: hci0: command tx timeout [ 79.963315][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.008980][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.011777][ T5115] Bluetooth: hci2: command tx timeout [ 80.048811][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.079728][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.172393][ T5798] Bluetooth: hci3: command tx timeout [ 80.172475][ T5115] Bluetooth: hci4: command tx timeout [ 80.197255][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.240671][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.281622][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.330086][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.434777][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.479257][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.523988][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.525242][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.569890][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.669064][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.687824][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.710055][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.711154][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.745319][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.745540][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.784418][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.816451][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.816524][ T4046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.821144][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.857727][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.857800][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.918787][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.924648][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.959965][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.960173][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.017747][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.017958][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.049818][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.107058][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.109266][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.109679][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.173420][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.173550][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.284952][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.334420][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.334617][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.379904][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.380126][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.425155][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.537467][ T10] cfg80211: failed to load regulatory.db [ 81.719056][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.766761][ T5793] veth0_vlan: entered promiscuous mode [ 81.891296][ T5793] veth1_vlan: entered promiscuous mode [ 81.993919][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.022331][ T5115] Bluetooth: hci0: command tx timeout [ 82.022362][ T5115] Bluetooth: hci1: command tx timeout [ 82.092275][ T5798] Bluetooth: hci2: command tx timeout [ 82.124153][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.129760][ T5797] veth0_vlan: entered promiscuous mode [ 82.175021][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.245519][ T5793] veth0_macvtap: entered promiscuous mode [ 82.251849][ T5798] Bluetooth: hci4: command tx timeout [ 82.251879][ T5798] Bluetooth: hci3: command tx timeout [ 82.277401][ T5797] veth1_vlan: entered promiscuous mode [ 82.290803][ T5793] veth1_macvtap: entered promiscuous mode [ 82.403857][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.457970][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.470972][ T5801] veth0_vlan: entered promiscuous mode [ 82.488825][ T5797] veth0_macvtap: entered promiscuous mode [ 82.505543][ T5806] veth0_vlan: entered promiscuous mode [ 82.507643][ T1286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.517272][ T1286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.520430][ T5797] veth1_macvtap: entered promiscuous mode [ 82.526836][ T1286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.535687][ T1286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.536234][ T5801] veth1_vlan: entered promiscuous mode [ 82.565882][ T5806] veth1_vlan: entered promiscuous mode [ 82.688018][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.762378][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.788038][ T5802] veth0_vlan: entered promiscuous mode [ 82.805475][ T178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.829940][ T178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.835869][ T178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.860374][ T5801] veth0_macvtap: entered promiscuous mode [ 82.868065][ T178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.886702][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.886724][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.906577][ T5802] veth1_vlan: entered promiscuous mode [ 82.916019][ T5801] veth1_macvtap: entered promiscuous mode [ 82.941179][ T5806] veth0_macvtap: entered promiscuous mode [ 83.001419][ T5806] veth1_macvtap: entered promiscuous mode [ 83.084529][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.084547][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.128314][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.194527][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.196280][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.229478][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.229498][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.254356][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.274420][ T178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.280599][ T178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.286015][ T5802] veth0_macvtap: entered promiscuous mode [ 83.292534][ T178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.307357][ T178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.310262][ T178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.315045][ T178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.320588][ T178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.321086][ T5802] veth1_macvtap: entered promiscuous mode [ 83.367358][ T178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.518961][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.518979][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.731747][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.766162][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.856977][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.863183][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.917336][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.930703][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.957191][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.957205][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.091996][ T5798] Bluetooth: hci0: command tx timeout [ 84.092040][ T5115] Bluetooth: hci1: command tx timeout [ 84.182981][ T5115] Bluetooth: hci2: command tx timeout [ 84.298498][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.298519][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.332473][ T5115] Bluetooth: hci3: command tx timeout [ 84.332506][ T5115] Bluetooth: hci4: command tx timeout [ 84.453870][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.453890][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.582143][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.582160][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.826382][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.826399][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.035900][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.035921][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.144255][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.251885][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.472403][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 85.489060][ T5875] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.489089][ T5875] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.517133][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 85.517163][ T5875] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 85.517182][ T5875] usb 4-1: Product: syz [ 85.517196][ T5875] usb 4-1: Manufacturer: syz [ 85.520883][ T5948] process 'syz.1.17' launched '/dev/fd/3' with NULL argv: empty string added [ 85.657745][ T5875] hub 4-1:4.0: USB hub found [ 85.912700][ T5875] hub 4-1:4.0: 2 ports detected [ 86.551243][ T5875] usb 4-1: USB disconnect, device number 2 [ 87.876846][ T6005] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.067592][ T6008] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure [ 88.474898][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 88.639646][ T6023] veth1_macvtap: left promiscuous mode [ 88.654141][ T6025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.778298][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 89.199720][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.244864][ T6042] warning: `syz.2.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.381643][ T5878] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.545120][ T5878] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 89.545150][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.606833][ T5878] usb 4-1: config 0 descriptor?? [ 89.823707][ T5878] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 90.090754][ T5878] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 90.090779][ T5878] [drm] Initialized udl on minor 2 [ 90.432276][ T5878] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 90.439397][ T5878] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 90.459830][ T6031] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 90.499240][ T5878] usb 4-1: USB disconnect, device number 3 [ 90.501401][ T6031] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 90.502623][ T6031] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 90.920717][ T6079] input: syz0 as /devices/virtual/input/input5 [ 91.137613][ T5878] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.288748][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 91.292882][ T5878] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 91.292941][ T5878] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.292961][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.292983][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.293002][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.293037][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.293058][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.580533][ T5878] usb 2-1: GET_CAPABILITIES returned 0 [ 91.580580][ T5878] usbtmc 2-1:16.0: can't read capabilities [ 91.832900][ T5877] usb 2-1: USB disconnect, device number 2 [ 92.005509][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 92.005535][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.85'. [ 92.202704][ T6117] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 92.778900][ T6140] capability: warning: `syz.4.99' uses 32-bit capabilities (legacy support in use) [ 92.790095][ T6140] program syz.4.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.152292][ T6152] program syz.2.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.207871][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.107'. [ 93.374134][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 93.898972][ T6181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.933871][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 94.057678][ T6186] netlink: 88 bytes leftover after parsing attributes in process `syz.4.122'. [ 94.059563][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.4.122'. [ 94.094304][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.094329][ T10] usb 4-1: config 0 has no interface number 0 [ 94.094371][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 94.094392][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.114147][ T10] usb 4-1: config 0 descriptor?? [ 94.163501][ T10] usb 4-1: selecting invalid altsetting 1 [ 94.164039][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 94.164169][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 94.462938][ T10] DVB: Unable to find symbol cx22700_attach() [ 94.505408][ T37] audit: type=1326 audit(1769435969.324:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18412aeb9 code=0x7ffc0000 [ 94.505457][ T37] audit: type=1326 audit(1769435969.324:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18412aeb9 code=0x7ffc0000 [ 94.505497][ T37] audit: type=1326 audit(1769435969.344:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff18412aeb9 code=0x7ffc0000 [ 94.505537][ T37] audit: type=1326 audit(1769435969.344:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18412aeb9 code=0x7ffc0000 [ 94.505575][ T37] audit: type=1326 audit(1769435969.344:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18412aeb9 code=0x7ffc0000 [ 94.505615][ T37] audit: type=1326 audit(1769435969.344:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7ff18412aeb9 code=0x7ffc0000 [ 94.505654][ T37] audit: type=1326 audit(1769435969.344:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18412aeb9 code=0x7ffc0000 [ 94.746955][ T10] DVB: Unable to find symbol tda10046_attach() [ 94.746968][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 94.752029][ T10] usb 4-1: USB disconnect, device number 4 [ 95.074038][ T6213] binder: 6212:6213 ioctl 4018620d 0 returned -22 [ 95.261719][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 95.701893][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 95.728015][ T6233] ======================================================= [ 95.728015][ T6233] WARNING: The mand mount option has been deprecated and [ 95.728015][ T6233] and is ignored by this kernel. Remove the mand [ 95.728015][ T6233] option from the mount to silence this warning. [ 95.728015][ T6233] ======================================================= [ 95.887105][ T6238] Bluetooth: MGMT ver 1.23 [ 96.223971][ T6252] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 96.351635][ T5878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.501598][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 96.523547][ T5878] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 96.523585][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.523603][ T5878] usb 5-1: Product: syz [ 96.523615][ T5878] usb 5-1: Manufacturer: syz [ 96.523628][ T5878] usb 5-1: SerialNumber: syz [ 96.589060][ T5878] r8152-cfgselector 5-1: Unknown version 0x0000 [ 96.589086][ T5878] r8152-cfgselector 5-1: config 0 descriptor?? [ 96.801915][ T5878] r8152-cfgselector 5-1: Needed 2 retries to read version [ 96.801965][ T5878] r8152-cfgselector 5-1: Unknown version 0x0000 [ 96.802788][ T5878] r8152-cfgselector 5-1: bad CDC descriptors [ 96.924040][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.037119][ T5878] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 98.188857][ T6315] program syz.3.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.561947][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 98.561966][ T6329] netlink: 120 bytes leftover after parsing attributes in process `syz.0.184'. [ 98.561984][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 98.656536][ T6330] loop9: detected capacity change from 0 to 7 [ 98.744395][ T6330] Dev loop9: unable to read RDB block 7 [ 98.744431][ T6330] loop9: unable to read partition table [ 98.744553][ T6330] loop9: partition table beyond EOD, truncated [ 98.744581][ T6330] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 100.323107][ T6381] program syz.0.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.752561][ T5877] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.798340][ T6397] sock: sock_timestamping_bind_phc: sock not bind to device [ 100.872976][ T5841] kernel write not supported for file /sg0 (pid: 5841 comm: kworker/1:3) [ 100.921433][ T5877] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 100.921461][ T5877] usb 1-1: config 0 has no interface number 0 [ 100.923552][ T5877] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.952906][ T5877] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 100.952934][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 100.952953][ T5877] usb 1-1: Manufacturer: syz [ 100.952967][ T5877] usb 1-1: SerialNumber: syz [ 100.958713][ T5877] usb 1-1: config 0 descriptor?? [ 101.223339][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 101.384382][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.389405][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 101.390731][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.390755][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.424923][ T10] usb 3-1: string descriptor 0 read error: -22 [ 101.425076][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.425168][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.518809][ T10] usb 3-1: 0:2 : does not exist [ 101.595164][ T5877] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input6 [ 101.824686][ T5841] usb 1-1: USB disconnect, device number 2 [ 102.316795][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 102.334438][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 102.346220][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 102.507289][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 102.573979][ T10] usb 3-1: USB disconnect, device number 2 [ 102.985767][ T6431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.149814][ T6437] bond0: entered promiscuous mode [ 103.149836][ T6437] bond_slave_0: entered promiscuous mode [ 103.153599][ T6437] bond_slave_1: entered promiscuous mode [ 103.168680][ T6437] batadv_slave_0: entered promiscuous mode [ 103.188597][ T6437] batadv_slave_0: left promiscuous mode [ 103.221259][ T6437] bond0: left promiscuous mode [ 103.221280][ T6437] bond_slave_0: left promiscuous mode [ 103.221749][ T6437] bond_slave_1: left promiscuous mode [ 103.591408][ T6454] netlink: 128 bytes leftover after parsing attributes in process `syz.4.245'. [ 103.863112][ T6464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.248'. [ 104.478829][ C1] sd 0:0:1:0: [sda] tag#1700 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 104.478897][ C1] sd 0:0:1:0: [sda] tag#1700 CDB: Read(6) 08 00 00 00 03 44 [ 104.871460][ T6506] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 105.541788][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.702303][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 105.704632][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 105.704658][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.738615][ T10] usb 2-1: config 0 descriptor?? [ 105.804497][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 106.219922][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 106.369610][ T10] gspca_vc032x: reg_w err -71 [ 106.369636][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369646][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369654][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369662][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369670][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369678][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369686][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369695][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369702][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369710][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369717][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369725][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369733][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369740][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369747][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369755][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369763][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369769][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.369781][ T10] gspca_vc032x: Unknown sensor... [ 106.369866][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 106.412947][ T10] usb 2-1: USB disconnect, device number 3 [ 106.611266][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 106.969217][ T4254] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.993719][ T6568] Zero length message leads to an empty skb [ 106.999385][ T4254] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.999437][ T4254] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.999472][ T4254] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.686309][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 109.011755][ T6031] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.162572][ T6031] usb 1-1: Using ep0 maxpacket: 16 [ 109.164839][ T6031] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.164862][ T6031] usb 1-1: config 0 has no interface number 0 [ 109.164905][ T6031] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.164929][ T6031] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.164963][ T6031] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 109.164983][ T6031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.175746][ T6031] usb 1-1: config 0 descriptor?? [ 109.571229][ T6634] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 109.722613][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 109.899679][ T6031] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0001/input/input7 [ 109.929458][ T5854] kernel write not supported for file /uinput (pid: 5854 comm: kworker/1:4) [ 109.997213][ T6031] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0001/input/input8 [ 110.109063][ T6031] uclogic 0003:28BD:0071.0001: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.0-1/input1 [ 110.112816][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.329'. [ 110.240736][ T6031] usb 1-1: USB disconnect, device number 3 [ 110.559616][ T6649] fido_id[6649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 111.421308][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'. [ 111.478032][ T6692] program syz.1.351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.377162][ T6720] netem: change failed [ 112.681623][ T5855] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.846033][ T5855] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 112.846898][ T5855] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.846928][ T5855] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 112.846949][ T5855] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.846989][ T5855] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.847011][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.888262][ T5855] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.912642][ T5855] usb 5-1: invalid MIDI out EP 0 [ 113.427780][ T5855] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 113.478709][ T5855] usb 5-1: USB disconnect, device number 3 [ 114.138890][ T6767] 9p: Unknown uid 00000000004294967295 [ 114.339815][ T6776] overlayfs: missing 'workdir' [ 115.992261][ T6830] kvm: kvm [6829]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 116.313732][ T5855] kernel read not supported for file /vcsa (pid: 5855 comm: kworker/0:4) [ 116.528323][ T6857] autofs4:pid:6857:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1986356271.1668575791), cmd(0xc018937e) [ 116.528354][ T6857] autofs4:pid:6857:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 116.714196][ T6862] netlink: 774 bytes leftover after parsing attributes in process `syz.3.430'. [ 116.714227][ T6862] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 116.762872][ T6866] netlink: 'syz.1.431': attribute type 6 has an invalid length. [ 116.770676][ T6866] netlink: 'syz.1.431': attribute type 6 has an invalid length. [ 117.442212][ T5855] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.595315][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 117.597411][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.597435][ T5855] usb 4-1: config 0 has no interfaces? [ 117.600171][ T5855] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 117.600198][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 117.600217][ T5855] usb 4-1: Product: syz [ 117.600230][ T5855] usb 4-1: Manufacturer: syz [ 117.600243][ T5855] usb 4-1: SerialNumber: syz [ 117.632814][ T5855] usb 4-1: config 0 descriptor?? [ 117.713137][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.861623][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 117.865063][ T5875] usb 4-1: USB disconnect, device number 5 [ 117.865678][ T5878] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 117.865700][ T5878] usb 1-1: config 0 has no interface number 0 [ 117.865742][ T5878] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.865775][ T5878] usb 1-1: config 0 interface 85 has no altsetting 0 [ 117.868501][ T5878] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 117.868528][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.868547][ T5878] usb 1-1: Product: syz [ 117.868560][ T5878] usb 1-1: Manufacturer: syz [ 117.868573][ T5878] usb 1-1: SerialNumber: syz [ 117.950536][ T5878] usb 1-1: config 0 descriptor?? [ 118.011045][ T6910] ucma_write: process 168 (syz.2.448) changed security contexts after opening file descriptor, this is not allowed. [ 118.381658][ T6031] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 118.534549][ T6031] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.534603][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 118.534846][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.534866][ T6031] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 118.537679][ T6031] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 118.537705][ T6031] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 118.538105][ T6031] usb 2-1: Manufacturer: syz [ 118.573535][ T6031] usb 2-1: config 0 descriptor?? [ 118.604063][ T5878] appletouch 1-1:0.85: Geyser mode initialized. [ 118.612242][ T5878] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9 [ 118.851632][ T5878] usb 1-1: USB disconnect, device number 4 [ 118.851643][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 118.941830][ T6031] rc_core: IR keymap rc-hauppauge not found [ 118.941850][ T6031] Registered IR keymap rc-empty [ 118.942459][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.962633][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.995118][ T6031] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 119.009592][ T6031] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 119.138579][ T5878] appletouch 1-1:0.85: input: appletouch disconnected [ 119.149338][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.163420][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.181867][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.201647][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.225358][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.241699][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.261773][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.282445][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.301717][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.321698][ T6031] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 119.418896][ T6937] tipc: Started in network mode [ 119.418926][ T6937] tipc: Node identity ac14140f, cluster identity 4711 [ 119.420166][ T6937] tipc: New replicast peer: 255.255.255.255 [ 119.430221][ T6031] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 119.430243][ T6031] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 119.459838][ T6937] tipc: Enabled bearer , priority 10 [ 119.465560][ T6031] usb 2-1: USB disconnect, device number 4 [ 119.503651][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 119.503674][ T6937] tipc: Disabling bearer [ 119.881681][ T5878] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.900577][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 120.031807][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 120.038164][ T5878] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.038185][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.038195][ T5878] usb 3-1: Product: syz [ 120.038202][ T5878] usb 3-1: Manufacturer: syz [ 120.038209][ T5878] usb 3-1: SerialNumber: syz [ 120.070979][ T5878] usb 3-1: config 0 descriptor?? [ 120.130636][ T6958] netlink: 'syz.1.472': attribute type 3 has an invalid length. [ 120.298386][ T5878] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 120.371692][ T5854] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.523493][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 120.525992][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.526021][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.526063][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.526103][ T5854] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.526125][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.593820][ T5854] usb 4-1: config 0 descriptor?? [ 120.709826][ T5878] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 120.746884][ T5878] usb 3-1: USB disconnect, device number 3 [ 121.030281][ T5854] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 121.034171][ T5854] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 121.035440][ T5854] microsoft 0003:045E:07DA.0002: collection stack underflow [ 121.035466][ T5854] microsoft 0003:045E:07DA.0002: item 0 4 0 12 parsing failed [ 121.036552][ T5854] microsoft 0003:045E:07DA.0002: parse failed [ 121.036651][ T5854] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 121.169044][ T6987] pimreg: tun_chr_ioctl cmd 1074025675 [ 121.169067][ T6987] pimreg: persist disabled [ 121.220510][ T6960] futex_wake_op: syz.3.473 tries to shift op by -1; fix this program [ 121.238583][ T5855] usb 4-1: USB disconnect, device number 6 [ 122.396357][ T5854] kernel write not supported for file /video8 (pid: 5854 comm: kworker/1:4) [ 122.611648][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.633011][ T7040] sg_write: process 262 (syz.1.509) changed security contexts after opening file descriptor, this is not allowed. [ 122.764913][ T5878] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 122.764942][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.792505][ T5878] usb 1-1: config 0 descriptor?? [ 122.798116][ T5878] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 122.999007][ T5878] gp8psk: usb in 128 operation failed. [ 123.000348][ T5878] gp8psk: usb in 137 operation failed. [ 123.000380][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.022446][ T5878] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 123.022504][ T5878] usb 1-1: media controller created [ 123.060858][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.100793][ T5878] gp8psk_fe: Frontend attached [ 123.109621][ T5878] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 123.122857][ T5878] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 123.482616][ T5878] gp8psk: usb in 137 operation failed. [ 123.482635][ T5878] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 123.482646][ T5878] gp8psk: found Genpix USB device pID = 203 (hex) [ 123.519556][ T7061] binder: 7059:7061 ioctl c0306201 0 returned -14 [ 123.532674][ T5878] usb 1-1: USB disconnect, device number 5 [ 123.828367][ T37] audit: type=1326 audit(1769436254.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7068 comm="syz.1.522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c7417aeb9 code=0x0 [ 123.859305][ T5878] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 125.001658][ T5854] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.181784][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 125.184006][ T5854] usb 2-1: config 232 has an invalid interface number: 126 but max is 0 [ 125.184030][ T5854] usb 2-1: config 232 has no interface number 0 [ 125.184071][ T5854] usb 2-1: config 232 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 125.184095][ T5854] usb 2-1: config 232 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.184115][ T5854] usb 2-1: config 232 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 125.184136][ T5854] usb 2-1: config 232 interface 126 has no altsetting 0 [ 125.190523][ T5854] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 125.190550][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.190568][ T5854] usb 2-1: Product: syz [ 125.190581][ T5854] usb 2-1: Manufacturer: syz [ 125.190594][ T5854] usb 2-1: SerialNumber: syz [ 125.241035][ T7086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.748053][ T5854] ir_usb 2-1:232.126: IR Dongle converter detected [ 125.939985][ T5854] usb 2-1: IRDA class descriptor not found, device not bound [ 126.151268][ T5841] usb 2-1: USB disconnect, device number 5 [ 126.301636][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.374363][ T7129] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 126.454001][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.454033][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.454069][ T5878] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 126.454090][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.519076][ T5878] usb 3-1: config 0 descriptor?? [ 126.885330][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'. [ 126.885415][ T7139] bridge_slave_1: left allmulticast mode [ 126.885439][ T7139] bridge_slave_1: left promiscuous mode [ 126.885823][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.990557][ T7139] bridge_slave_0: left allmulticast mode [ 126.990587][ T7139] bridge_slave_0: left promiscuous mode [ 127.004178][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.079365][ T7145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.090967][ T7145] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 127.139420][ T5878] usb 3-1: language id specifier not provided by device, defaulting to English [ 127.349020][ T5878] uclogic 0003:5543:0081.0003: failed retrieving Huion firmware version: -71 [ 127.349078][ T5878] uclogic 0003:5543:0081.0003: failed probing parameters: -71 [ 127.349178][ T5878] uclogic 0003:5543:0081.0003: probe with driver uclogic failed with error -71 [ 127.378527][ T7151] comedi comedi0: comedi_config --init_data is deprecated [ 127.393179][ T5878] usb 3-1: USB disconnect, device number 4 [ 128.597353][ T4064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.597387][ T4064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.730175][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.744026][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.745159][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.750591][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.755891][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.936317][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 129.184757][ T4064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.184793][ T4064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.772210][ T5855] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.844853][ T4064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.844875][ T4064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.941822][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 129.943619][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.943647][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.943668][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.943707][ T5855] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.943729][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.948308][ T5855] usb 5-1: config 0 descriptor?? [ 130.383570][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.383609][ T5855] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 130.386052][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.386083][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.386109][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.386136][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.386162][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.386188][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.386214][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.386238][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.386262][ T5855] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.390976][ T4064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.391008][ T4064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.602250][ T5855] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 130.602282][ T5855] microsoft 0003:045E:07DA.0004: no inputs found [ 130.602302][ T5855] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 130.633524][ T5855] usb 5-1: USB disconnect, device number 4 [ 130.892225][ T5115] Bluetooth: hci2: command tx timeout [ 130.945588][ T7252] fido_id[7252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 131.421302][ T7192] chnl_net:caif_netlink_parms(): no params data found [ 131.466704][ T4064] bridge_slave_1: left allmulticast mode [ 131.466800][ T4064] bridge_slave_1: left promiscuous mode [ 131.468688][ T4064] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.644802][ T4064] bridge_slave_0: left allmulticast mode [ 131.644830][ T4064] bridge_slave_0: left promiscuous mode [ 131.645595][ T4064] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.320945][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.617'. [ 132.320974][ T7290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.617'. [ 132.737692][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.737760][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.927177][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.625'. [ 132.972008][ T5115] Bluetooth: hci2: command tx timeout [ 133.702440][ T4064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.762183][ T4064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.803661][ T4064] bond0 (unregistering): Released all slaves [ 133.830168][ T7302] batadv_slave_0: entered promiscuous mode [ 134.282586][ T7307] batadv_slave_0: left promiscuous mode [ 135.054143][ T5115] Bluetooth: hci2: command tx timeout [ 135.635276][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.635400][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.635588][ T5841] IPVS: starting estimator thread 0... [ 135.635622][ T7192] bridge_slave_0: entered allmulticast mode [ 135.638079][ T7356] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.688430][ T7192] bridge_slave_0: entered promiscuous mode [ 135.711766][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.711888][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.712145][ T7192] bridge_slave_1: entered allmulticast mode [ 135.727856][ T7192] bridge_slave_1: entered promiscuous mode [ 135.731941][ T7358] IPVS: using max 15 ests per chain, 36000 per kthread [ 136.056662][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.084253][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.354146][ T4064] hsr_slave_0: left promiscuous mode [ 136.393535][ T4064] hsr_slave_1: left promiscuous mode [ 136.394730][ T4064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.394880][ T4064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.611825][ T4064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.611854][ T4064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.834937][ T4064] veth1_macvtap: left promiscuous mode [ 136.835227][ T4064] veth0_macvtap: left promiscuous mode [ 136.835510][ T4064] veth1_vlan: left promiscuous mode [ 136.835869][ T4064] veth0_vlan: left promiscuous mode [ 137.131969][ T5115] Bluetooth: hci2: command tx timeout [ 137.742845][ T5841] kernel write not supported for file /274/oom_score_adj (pid: 5841 comm: kworker/1:3) [ 138.121717][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.271649][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 138.283186][ T5878] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 138.283241][ T5878] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 138.283266][ T5878] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.283291][ T5878] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 138.285673][ T5878] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 138.285699][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.285718][ T5878] usb 2-1: Product: syz [ 138.285731][ T5878] usb 2-1: Manufacturer: syz [ 138.285745][ T5878] usb 2-1: SerialNumber: syz [ 138.388352][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 138.436755][ T5878] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input11 [ 138.605044][ T5878] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 138.605064][ T5878] (id 0x00) [ 138.679872][ T5878] rc_core: IR keymap rc-imon-pad not found [ 138.679894][ T5878] Registered IR keymap rc-empty [ 138.679979][ T5878] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 138.679996][ T5878] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 138.801161][ T5878] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 138.841787][ T5878] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input12 [ 138.875848][ T5878] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:6> initialized [ 139.026148][ T7413] imon:vfd_write: invalid payload size [ 139.033657][ T5875] usb 2-1: USB disconnect, device number 6 [ 139.862151][ T5878] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.031735][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 140.034455][ T5878] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 140.034513][ T5878] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.034525][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.034537][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.034548][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.034571][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.034582][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.247182][ T5878] usb 2-1: usb_control_msg returned -32 [ 140.247211][ T5878] usbtmc 2-1:16.0: can't read capabilities [ 140.572913][ T4064] team0 (unregistering): Port device team_slave_1 removed [ 140.620526][ T7425] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 140.773994][ T4064] team0 (unregistering): Port device team_slave_0 removed [ 140.823627][ T5878] usb 2-1: USB disconnect, device number 7 [ 143.161449][ T7192] team0: Port device team_slave_0 added [ 143.227535][ T7192] team0: Port device team_slave_1 added [ 143.465068][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.465085][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.465109][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.494728][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.494744][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.494769][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.019778][ T7192] hsr_slave_0: entered promiscuous mode [ 144.021071][ T7192] hsr_slave_1: entered promiscuous mode [ 144.051449][ T7192] debugfs: 'hsr0' already exists in 'hsr' [ 144.051475][ T7192] Cannot create hsr debugfs directory [ 144.439703][ T7471] batadv_slave_1: entered promiscuous mode [ 144.440234][ T7471] batadv_slave_1: left promiscuous mode [ 144.443095][ T5878] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 144.605695][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 144.638776][ T5878] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 144.638838][ T5878] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.638859][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.638882][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.638904][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.638943][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.638965][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.981612][ T5878] usb 2-1: GET_CAPABILITIES returned 0 [ 144.981652][ T5878] usbtmc 2-1:16.0: can't read capabilities [ 145.131443][ T7192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.291740][ T7467] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 145.301689][ T5878] usb 2-1: USB disconnect, device number 8 [ 145.356353][ T7192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.496350][ T7192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.559407][ T7192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.601626][ T5875] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.779928][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.779968][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.779993][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.780014][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.780052][ T5875] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.780073][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.800573][ T5875] usb 5-1: config 0 descriptor?? [ 146.154170][ T5877] kernel write not supported for file /snd/seq (pid: 5877 comm: kworker/1:6) [ 146.247446][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.385783][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.392616][ T5875] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 146.429146][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.439689][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.499344][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.499533][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.580467][ T7530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.069008][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.161937][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 148.161972][ T7542] netlink: 'syz.1.705': attribute type 30 has an invalid length. [ 148.231234][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 148.231269][ T7542] netlink: 'syz.1.705': attribute type 30 has an invalid length. [ 148.231718][ T5841] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 148.250520][ T1286] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.297442][ T1286] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.300758][ T1286] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.316848][ T1286] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.391102][ T7546] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 148.447285][ T5841] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 148.447315][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.447333][ T5841] usb 3-1: Product: syz [ 148.447346][ T5841] usb 3-1: Manufacturer: syz [ 148.447360][ T5841] usb 3-1: SerialNumber: syz [ 148.471207][ T5841] usb 3-1: config 0 descriptor?? [ 148.562342][ T5875] usb 5-1: USB disconnect, device number 5 [ 148.751727][ T5841] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 149.321337][ T7572] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 149.554833][ T5841] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 149.631595][ T5841] usb 3-1: USB disconnect, device number 5 [ 149.863860][ T7192] veth0_vlan: entered promiscuous mode [ 149.899935][ T7192] veth1_vlan: entered promiscuous mode [ 150.035045][ T7192] veth0_macvtap: entered promiscuous mode [ 150.039904][ T7192] veth1_macvtap: entered promiscuous mode [ 150.148504][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.239409][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.269289][ T178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.330872][ T178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.334026][ T178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.335257][ T178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.824472][ T4013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.824492][ T4013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.932678][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.932691][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.989086][ T7653] syz.2.741 (7653) used greatest stack depth: 16640 bytes left [ 154.054023][ T6031] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.217508][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.217541][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.217564][ T6031] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.217603][ T6031] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.217623][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.236956][ T6031] usb 5-1: config 0 descriptor?? [ 154.726968][ T6031] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 154.931490][ T5841] usb 5-1: USB disconnect, device number 6 [ 154.968645][ T7709] fido_id[7709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 155.310761][ T7724] lo: entered allmulticast mode [ 155.317228][ T7724] lo: left allmulticast mode [ 155.833271][ T5841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.988881][ T5841] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 155.988910][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.988929][ T5841] usb 5-1: Product: syz [ 155.988942][ T5841] usb 5-1: Manufacturer: syz [ 155.988956][ T5841] usb 5-1: SerialNumber: syz [ 156.403771][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 156.493421][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 156.493496][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 156.572644][ T7750] syz.2.783 uses obsolete (PF_INET,SOCK_PACKET) [ 156.915731][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 156.915790][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 156.917376][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 156.990388][ T5841] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 157.041738][ T5841] usb 5-1: USB disconnect, device number 7 [ 158.244432][ T7793] netlink: 'syz.1.800': attribute type 6 has an invalid length. [ 158.703740][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 158.903084][ T7815] netlink: 'syz.4.809': attribute type 12 has an invalid length. [ 159.011619][ T5841] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 159.061973][ T5875] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.176860][ T5841] usb 6-1: config 1 has an invalid interface number: 53 but max is 2 [ 159.176888][ T5841] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.176905][ T5841] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.176925][ T5841] usb 6-1: config 1 has no interface number 0 [ 159.176939][ T5841] usb 6-1: config 1 has no interface number 1 [ 159.176982][ T5841] usb 6-1: config 1 interface 53 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 159.177019][ T5841] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.179446][ T5841] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.179472][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.179490][ T5841] usb 6-1: Product: syz [ 159.179504][ T5841] usb 6-1: Manufacturer: syz [ 159.179517][ T5841] usb 6-1: SerialNumber: syz [ 159.188574][ T7824] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 159.188574][ T7824] The task syz.4.812 (7824) triggered the difference, watch for misbehavior. [ 159.251890][ T5875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.251916][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.292677][ T5875] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.292708][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.292726][ T5875] usb 3-1: SerialNumber: syz [ 159.629761][ T5875] usb 3-1: 0:2 : does not exist [ 159.629848][ T5875] usb 3-1: unit 1 not found! [ 159.663580][ T5841] usb 6-1: USB disconnect, device number 2 [ 159.688023][ T5875] usb 3-1: USB disconnect, device number 6 [ 159.741063][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.53/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.857928][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 160.010560][ T7828] TCP: TCP_TX_DELAY enabled [ 160.522075][ T6031] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 160.678076][ T6031] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.678106][ T6031] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 160.678145][ T6031] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 160.678171][ T6031] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 160.729199][ T6031] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.729228][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.729247][ T6031] usb 5-1: Product: syz [ 160.729260][ T6031] usb 5-1: Manufacturer: syz [ 160.729273][ T6031] usb 5-1: SerialNumber: syz [ 160.784337][ T7840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.827010][ T6031] cdc_mbim 5-1:1.0: skipping garbage [ 161.032972][ T7840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.033093][ T7840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.636558][ T7840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.636681][ T7840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.637114][ T6031] cdc_mbim 5-1:1.0: setting rx_max = 16384 [ 161.839814][ T6031] cdc_mbim 5-1:1.0: setting tx_max = 60 [ 161.856050][ T6031] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 161.938084][ T6031] wwan wwan0: port wwan0mbim0 attached [ 162.045664][ T6031] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 12:f3:22:7a:10:a5 [ 162.116845][ T6031] usb 5-1: USB disconnect, device number 8 [ 162.118898][ T6031] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 162.502978][ T6031] wwan wwan0: port wwan0mbim0 disconnected [ 163.521620][ T5855] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.676578][ T5855] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.676607][ T5855] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.676625][ T5855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.676672][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 163.676697][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 163.723298][ T5855] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.723327][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.723345][ T5855] usb 2-1: Product: syz [ 163.723357][ T5855] usb 2-1: Manufacturer: syz [ 163.763834][ T5855] cdc_wdm 2-1:1.0: skipping garbage [ 163.763853][ T5855] cdc_wdm 2-1:1.0: skipping garbage [ 163.803538][ T5855] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 163.803558][ T5855] cdc_wdm 2-1:1.0: Unknown control protocol [ 164.156694][ T7934] pim6reg1: entered promiscuous mode [ 164.156718][ T7934] pim6reg1: entered allmulticast mode [ 164.349223][ T5841] IPVS: starting estimator thread 0... [ 164.349757][ T7939] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 164.450778][ T5878] usb 2-1: USB disconnect, device number 9 [ 164.461655][ T7943] IPVS: using max 9 ests per chain, 21600 per kthread [ 165.151372][ T7966] binder: 7964:7966 ioctl c0306201 2000000003c0 returned -14 [ 166.334974][ T5798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.350473][ T5798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.359057][ T5798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.368233][ T5798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.374153][ T5798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.011286][ T8004] chnl_net:caif_netlink_parms(): no params data found [ 167.212456][ T8034] netlink: 'syz.4.884': attribute type 7 has an invalid length. [ 167.212478][ T8034] netlink: 'syz.4.884': attribute type 8 has an invalid length. [ 167.212493][ T8034] netlink: 'syz.4.884': attribute type 7 has an invalid length. [ 167.212505][ T8034] netlink: 208740 bytes leftover after parsing attributes in process `syz.4.884'. [ 167.404049][ T5841] hid_parser_main: 1 callbacks suppressed [ 167.404070][ T5841] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 167.447147][ T5841] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.997205][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.997607][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.997792][ T8004] bridge_slave_0: entered allmulticast mode [ 168.000184][ T8004] bridge_slave_0: entered promiscuous mode [ 168.032640][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.032778][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.032995][ T8004] bridge_slave_1: entered allmulticast mode [ 168.076776][ T8004] bridge_slave_1: entered promiscuous mode [ 168.412101][ T5115] Bluetooth: hci5: command tx timeout [ 168.457098][ T8004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.486333][ T8004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.747641][ T8004] team0: Port device team_slave_0 added [ 168.751058][ T8004] team0: Port device team_slave_1 added [ 168.851628][ T31] IPVS: starting estimator thread 0... [ 168.858645][ T8082] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.961835][ T8088] IPVS: using max 11 ests per chain, 26400 per kthread [ 169.153422][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.153439][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.153460][ T8004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.156312][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.156325][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.156351][ T8004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.272959][ T8004] hsr_slave_0: entered promiscuous mode [ 169.277889][ T8004] hsr_slave_1: entered promiscuous mode [ 169.278797][ T8004] debugfs: 'hsr0' already exists in 'hsr' [ 169.278819][ T8004] Cannot create hsr debugfs directory [ 169.812731][ T8004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.845389][ T8004] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 170.038713][ T8004] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 170.166676][ T8004] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.478123][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.494320][ T5115] Bluetooth: hci5: command tx timeout [ 170.556392][ T8004] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.579734][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.579936][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.622090][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.624886][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.228559][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.673887][ T8004] veth0_vlan: entered promiscuous mode [ 171.708476][ T8004] veth1_vlan: entered promiscuous mode [ 172.006782][ T8004] veth0_macvtap: entered promiscuous mode [ 172.024364][ T8004] veth1_macvtap: entered promiscuous mode [ 172.158857][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.171326][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.218018][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.219319][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.219361][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.219394][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.572432][ T5115] Bluetooth: hci5: command tx timeout [ 172.799324][ T4064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.799344][ T4064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.000399][ T4064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.000417][ T4064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.682669][ T8223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.874359][ T8230] veth1_to_batadv: entered allmulticast mode [ 173.907954][ T8230] pim6reg: entered allmulticast mode [ 174.303865][ T5854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.461793][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 174.469736][ T5854] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 174.469791][ T5854] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.469812][ T5854] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.469834][ T5854] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.469855][ T5854] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.469893][ T5854] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.469914][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.651717][ T5115] Bluetooth: hci5: command tx timeout [ 174.759936][ T5854] usb 6-1: usb_control_msg returned -32 [ 174.759980][ T5854] usbtmc 6-1:16.0: can't read capabilities [ 175.112530][ T8278] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 175.317571][ T6031] usb 6-1: USB disconnect, device number 3 [ 175.381746][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 175.556671][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 175.556716][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.556740][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.556759][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 175.558895][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 175.558920][ T31] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 175.558939][ T31] usb 5-1: Manufacturer: syz [ 175.562722][ T31] usb 5-1: config 0 descriptor?? [ 176.026753][ T31] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 176.045010][ T31] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 176.299195][ T6031] usb 5-1: USB disconnect, device number 9 [ 177.202953][ T6031] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 177.351638][ T6031] usb 5-1: Using ep0 maxpacket: 8 [ 177.354660][ T6031] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 177.354714][ T6031] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.354736][ T6031] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.354759][ T6031] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.354781][ T6031] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.354819][ T6031] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.354841][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.791693][ T5841] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.948206][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.948237][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.948257][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.948296][ T5841] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.948317][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.963659][ T5841] usb 2-1: config 0 descriptor?? [ 178.435711][ T5855] usb 5-1: USB disconnect, device number 10 [ 178.511056][ T5841] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 178.662155][ T5854] usb 2-1: USB disconnect, device number 10 [ 178.732594][ T8335] fido_id[8335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 179.551797][ T8353] netlink: 'syz.6.983': attribute type 1 has an invalid length. [ 179.551961][ T8353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.551973][ T8353] IPv6: NLM_F_CREATE should be set when creating new route [ 180.175841][ T5807] kernel read not supported for file /video9 (pid: 5807 comm: kworker/0:3) [ 181.216359][ T8399] vlan4: entered allmulticast mode [ 181.216379][ T8399] geneve1: entered allmulticast mode [ 184.791631][ T5807] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.874587][ T8490] netlink: 'syz.5.1045': attribute type 16 has an invalid length. [ 184.874607][ T8490] netlink: 'syz.5.1045': attribute type 2 has an invalid length. [ 184.874620][ T8490] netlink: 64086 bytes leftover after parsing attributes in process `syz.5.1045'. [ 184.952420][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.952451][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.952487][ T5807] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 184.952509][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.012948][ T5807] usb 2-1: config 0 descriptor?? [ 185.428335][ T5807] playstation 0003:054C:0BA0.000A: unknown main item tag 0x0 [ 185.445622][ T5807] playstation 0003:054C:0BA0.000A: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 185.625894][ T5807] playstation 0003:054C:0BA0.000A: Invalid byte count transferred, expected 16 got 0 [ 185.625920][ T5807] playstation 0003:054C:0BA0.000A: Failed to retrieve DualShock4 pairing info: -22 [ 185.625970][ T5807] playstation 0003:054C:0BA0.000A: Failed to get MAC address from DualShock4 [ 185.625990][ T5807] playstation 0003:054C:0BA0.000A: Failed to create dualshock4. [ 185.629130][ T5807] playstation 0003:054C:0BA0.000A: probe with driver playstation failed with error -22 [ 185.851983][ T31] usb 2-1: USB disconnect, device number 11 [ 186.096774][ T8519] pim6reg: left allmulticast mode [ 186.097028][ T8519] veth1_to_batadv: left allmulticast mode [ 186.540854][ T8535] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.766807][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 186.935187][ T8546] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 187.163638][ T8554] TCP: tcp_parse_options: Illegal window scaling value 193 > 14 received [ 187.331635][ T5855] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 187.484228][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 187.490838][ T5855] usb 7-1: config 0 interface 0 has no altsetting 0 [ 187.490877][ T5855] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 187.490898][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.499523][ T8556] can0: slcan on ttyS3. [ 187.550864][ T5855] usb 7-1: config 0 descriptor?? [ 187.770891][ T8555] can0 (unregistered): slcan off ttyS3. [ 187.833007][ T8572] netlink: 'syz.5.1081': attribute type 10 has an invalid length. [ 187.916392][ T8574] loop8: detected capacity change from 0 to 7 [ 187.967835][ T8572] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.968202][ T8574] Dev loop8: unable to read RDB block 7 [ 187.968250][ T8574] loop8: unable to read partition table [ 187.968466][ T8574] loop8: partition table beyond EOD, truncated [ 187.968495][ T8574] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 188.025046][ T5855] hid (null): unknown global tag 0xd [ 188.025068][ T5855] hid (null): invalid report_count -1415457648 [ 188.025083][ T5855] hid (null): usage index exceeded [ 188.223077][ T5875] usb 7-1: USB disconnect, device number 2 [ 189.064854][ T5875] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 189.214244][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.214276][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.214314][ T5875] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 189.214336][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.263312][ T5875] usb 7-1: config 0 descriptor?? [ 189.697429][ T5875] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 189.697555][ T5875] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 189.779998][ T5875] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.000C/input/input15 [ 189.866886][ T5875] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 189.903723][ T8631] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 189.903742][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 189.971381][ T31] usb 7-1: USB disconnect, device number 3 [ 190.040967][ T8632] fido_id[8632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 190.041691][ T5875] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 190.193844][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.193877][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.193912][ T5875] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 190.193933][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.208057][ T5875] usb 2-1: config 0 descriptor?? [ 190.664888][ T5875] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 190.664924][ T5875] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 190.664950][ T5875] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 190.664984][ T5875] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 190.665009][ T5875] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 190.665991][ T5875] elan 0003:04F3:0755.000D: failed to start in urb: -90 [ 190.695485][ T5875] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 190.867674][ T5855] usb 2-1: USB disconnect, device number 12 [ 190.964761][ T8644] fido_id[8644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 191.122415][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1118'. [ 192.497146][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.512591][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.516268][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.525862][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.542570][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.834090][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.248873][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.504495][ T37] audit: type=1326 audit(1769436324.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8712 comm="syz.1.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7417aeb9 code=0x7ffc0000 [ 193.505069][ T37] audit: type=1326 audit(1769436324.340:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8712 comm="syz.1.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7417aeb9 code=0x7ffc0000 [ 193.603486][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.701742][ T5875] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 193.851933][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 193.853882][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.853923][ T5875] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 193.853954][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.897761][ T5875] usb 7-1: config 0 descriptor?? [ 194.018664][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.076767][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 194.182336][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.182429][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.325282][ T5875] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 194.571727][ T5115] Bluetooth: hci0: command tx timeout [ 194.871810][ T5875] usb 7-1: USB disconnect, device number 4 [ 195.185136][ T8747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.352019][ T8681] chnl_net:caif_netlink_parms(): no params data found [ 195.459741][ T8753] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 195.519123][ T8760] netlink: 63 bytes leftover after parsing attributes in process `syz.5.1162'. [ 195.995526][ T8776] input: syz0 as /devices/virtual/input/input16 [ 196.112019][ T13] bridge_slave_1: left allmulticast mode [ 196.112047][ T13] bridge_slave_1: left promiscuous mode [ 196.112346][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.199115][ T13] bridge_slave_0: left allmulticast mode [ 196.199142][ T13] bridge_slave_0: left promiscuous mode [ 196.199414][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.651827][ T5115] Bluetooth: hci0: command tx timeout [ 196.771679][ T31] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 196.954384][ T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.954414][ T31] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.954452][ T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.954474][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.186872][ T31] usb 6-1: usb_control_msg returned -32 [ 197.186900][ T31] usbtmc 6-1:16.0: can't read capabilities [ 198.505934][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.562774][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.606903][ T13] bond0 (unregistering): Released all slaves [ 198.731785][ T5115] Bluetooth: hci0: command tx timeout [ 198.734271][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.734390][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.734608][ T8681] bridge_slave_0: entered allmulticast mode [ 198.756152][ T8681] bridge_slave_0: entered promiscuous mode [ 198.791857][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.791976][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.792194][ T8681] bridge_slave_1: entered allmulticast mode [ 198.800188][ T8681] bridge_slave_1: entered promiscuous mode [ 198.912948][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.916001][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.021714][ T5875] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.186825][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 199.199650][ T5875] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 199.199679][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.199696][ T5875] usb 2-1: Product: syz [ 199.199708][ T5875] usb 2-1: Manufacturer: syz [ 199.199721][ T5875] usb 2-1: SerialNumber: syz [ 199.414290][ T8681] team0: Port device team_slave_0 added [ 199.437538][ T8681] team0: Port device team_slave_1 added [ 199.512320][ T5875] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.567905][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.567922][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.567946][ T8681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.570253][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.570265][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.570289][ T8681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.655959][ T5875] usb 6-1: USB disconnect, device number 4 [ 200.215841][ T5878] usb 2-1: USB disconnect, device number 13 [ 200.273827][ T5878] usblp1: removed [ 200.784340][ T8681] hsr_slave_0: entered promiscuous mode [ 200.785641][ T8681] hsr_slave_1: entered promiscuous mode [ 200.804914][ T8681] debugfs: 'hsr0' already exists in 'hsr' [ 200.804939][ T8681] Cannot create hsr debugfs directory [ 200.812053][ T5798] Bluetooth: hci0: command tx timeout [ 201.015184][ T8910] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 201.252007][ T13] hsr_slave_0: left promiscuous mode [ 201.297618][ T13] hsr_slave_1: left promiscuous mode [ 201.298311][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.298328][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.332475][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.332496][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.371768][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 201.371812][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 201.519505][ T13] veth1_macvtap: left promiscuous mode [ 201.519609][ T13] veth0_macvtap: left promiscuous mode [ 201.519857][ T13] veth1_vlan: left promiscuous mode [ 201.520023][ T13] veth0_vlan: left promiscuous mode [ 201.568649][ T8922] binder: 8921:8922 ioctl c0306201 0 returned -14 [ 201.657925][ T8926] mmap: syz.6.1227 (8926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.592182][ T5878] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 202.781688][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 202.783781][ T5878] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 202.783830][ T5878] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.783851][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.280031][ T8952] netlink: 75 bytes leftover after parsing attributes in process `syz.1.1238'. [ 204.962975][ T13] team0 (unregistering): Port device team_slave_1 removed [ 205.162312][ T13] team0 (unregistering): Port device team_slave_0 removed [ 205.362577][ T5855] usb 6-1: USB disconnect, device number 5 [ 206.913009][ T8969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.340749][ T8978] loop2: detected capacity change from 0 to 7 [ 207.351276][ T8978] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 207.362374][ T8978] loop2: p1 start 3909398222 is beyond EOD, truncated [ 207.362400][ T8978] loop2: p2 start 3343657203 is beyond EOD, truncated [ 207.362415][ T8978] loop2: p3 start 1602108098 is beyond EOD, truncated [ 207.362431][ T8978] loop2: p4 start 884671223 is beyond EOD, truncated [ 207.362445][ T8978] loop2: p5 start 2750369483 is beyond EOD, truncated [ 207.362459][ T8978] loop2: p6 start 3125209029 is beyond EOD, truncated [ 207.362473][ T8978] loop2: p7 start 3407020032 is beyond EOD, truncated [ 209.306846][ T37] audit: type=1800 audit(1769436340.090:12): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1275" name="bus" dev="tmpfs" ino=411 res=0 errno=0 [ 209.763160][ T5875] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 209.870184][ T13] IPVS: stop unused estimator thread 0... [ 209.926036][ T5875] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 209.926064][ T5875] usb 6-1: config 7 has no interface number 0 [ 209.954157][ T5875] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 209.954188][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.954206][ T5875] usb 6-1: Product: syz [ 209.954227][ T5875] usb 6-1: Manufacturer: syz [ 209.954241][ T5875] usb 6-1: SerialNumber: syz [ 210.611437][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.613155][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.893018][ T5875] as10x_usb: device has been detected [ 210.894107][ T5875] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 210.952542][ T5875] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 211.277360][ T5875] as10x_usb: error during firmware upload part1 [ 211.278021][ T5875] Registered device Elgato EyeTV DTT Deluxe [ 211.342955][ T5875] usb 6-1: USB disconnect, device number 6 [ 211.404582][ T5875] Unregistered device Elgato EyeTV DTT Deluxe [ 211.460568][ T5875] as10x_usb: device has been disconnected [ 211.513132][ T8681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.684313][ T8681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.867124][ T8681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.936439][ T8681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.425610][ T31] kernel write not supported for file bpf-map (pid: 31 comm: kworker/1:0) [ 212.536105][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.647357][ T8681] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.681640][ T6031] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 212.690531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.690670][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.753245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.753324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.852013][ T6031] usb 7-1: Using ep0 maxpacket: 32 [ 212.854429][ T6031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.854458][ T6031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.854492][ T6031] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 212.854514][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.865849][ T6031] usb 7-1: config 0 descriptor?? [ 213.075336][ T5807] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 213.248404][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.248438][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.248475][ T5807] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 213.248497][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.347789][ T5807] usb 2-1: config 0 descriptor?? [ 213.402244][ T6031] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 213.583821][ T6031] usb 7-1: USB disconnect, device number 5 [ 213.590300][ T5807] usbhid 2-1:0.0: can't add hid device: -71 [ 213.590433][ T5807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 213.747799][ T5807] usb 2-1: USB disconnect, device number 14 [ 214.248963][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.358058][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.461644][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 214.616238][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 221, using maximum allowed: 30 [ 214.616295][ T31] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 221 [ 214.616321][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.616349][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 214.616370][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.691096][ T31] usb 2-1: config 0 descriptor?? [ 214.946790][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.156666][ T31] apple 0003:05AC:024B.0010: global environment stack underflow [ 215.156689][ T31] apple 0003:05AC:024B.0010: item 0 4 1 11 parsing failed [ 215.157559][ T31] apple 0003:05AC:024B.0010: parse failed [ 215.157672][ T31] apple 0003:05AC:024B.0010: probe with driver apple failed with error -22 [ 215.329538][ T31] usb 2-1: USB disconnect, device number 15 [ 215.560870][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.123479][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.505200][ T8681] veth0_vlan: entered promiscuous mode [ 217.276678][ T8681] veth1_vlan: entered promiscuous mode [ 217.322839][ T9222] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 217.717003][ T8681] veth0_macvtap: entered promiscuous mode [ 217.803445][ T8681] veth1_macvtap: entered promiscuous mode [ 217.812000][ T43] bridge_slave_1: left allmulticast mode [ 217.812023][ T43] bridge_slave_1: left promiscuous mode [ 217.812243][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.964743][ T43] bridge_slave_0: left allmulticast mode [ 217.964772][ T43] bridge_slave_0: left promiscuous mode [ 217.965019][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.309878][ T5875] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 218.492075][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 218.495788][ T5875] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.495819][ T5875] usb 7-1: config 0 interface 0 has no altsetting 0 [ 218.495851][ T5875] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 218.495873][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.503694][ T5875] usb 7-1: config 0 descriptor?? [ 218.553563][ T5878] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 218.703986][ T5878] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.704017][ T5878] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.704058][ T5878] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.704079][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.928222][ T5878] usb 6-1: usb_control_msg returned -32 [ 218.928267][ T5878] usbtmc 6-1:16.0: can't read capabilities [ 218.963071][ T5875] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 219.346366][ T5875] usb 7-1: USB disconnect, device number 6 [ 219.548158][ T5875] usb 6-1: USB disconnect, device number 7 [ 220.330030][ T9276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1349'. [ 220.917667][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.006869][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.076694][ T43] bond0 (unregistering): Released all slaves [ 221.488819][ T43] tipc: Left network mode [ 221.556139][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.630420][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.725081][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.750949][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.891640][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.904730][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.321631][ T5875] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 222.471643][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 222.473986][ T5875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.474036][ T5875] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.474061][ T5875] usb 6-1: config 0 interface 0 has no altsetting 0 [ 222.474092][ T5875] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 222.474112][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.535973][ T5875] usb 6-1: config 0 descriptor?? [ 222.571022][ T5875] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 222.781012][ T9320] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1363'. [ 222.789438][ T31] usb 6-1: USB disconnect, device number 8 [ 222.832961][ T5875] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 222.985566][ T43] hsr_slave_0: left promiscuous mode [ 222.988527][ T5875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.988566][ T5875] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.990836][ T5875] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.990860][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.990870][ T5875] usb 3-1: Product: syz [ 222.990877][ T5875] usb 3-1: Manufacturer: syz [ 222.990884][ T5875] usb 3-1: SerialNumber: syz [ 223.022722][ T9333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 223.071702][ T43] hsr_slave_1: left promiscuous mode [ 223.072686][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.072709][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.142764][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.142792][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.250536][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.250951][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.315686][ T5875] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 223.331166][ T5875] usb 3-1: USB disconnect, device number 7 [ 223.387392][ T43] veth1_macvtap: left promiscuous mode [ 223.387452][ T43] veth0_macvtap: left promiscuous mode [ 223.387583][ T43] veth1_vlan: left promiscuous mode [ 223.387673][ T43] veth0_vlan: left promiscuous mode [ 223.481645][ T5878] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 223.633401][ T5878] usb 7-1: Using ep0 maxpacket: 16 [ 223.635632][ T5878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.635655][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.641201][ T5878] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 223.641229][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.641247][ T5878] usb 7-1: Product: syz [ 223.641260][ T5878] usb 7-1: Manufacturer: syz [ 223.641273][ T5878] usb 7-1: SerialNumber: syz [ 223.701705][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 223.793638][ T5841] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 223.850372][ T5875] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 223.871667][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 223.876890][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.876916][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.876953][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1153, setting to 1024 [ 223.876978][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 223.877000][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.877040][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.877051][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.987035][ T5878] usb 7-1: skipping empty audio interface (v1) [ 223.992783][ T5841] usb 6-1: Using ep0 maxpacket: 16 [ 224.004972][ T5841] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 224.004995][ T5841] usb 6-1: config 1 has no interface number 0 [ 224.005031][ T5841] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 224.005093][ T5841] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 224.005111][ T5841] usb 6-1: config 1 interface 105 has no altsetting 0 [ 224.018197][ T5875] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 224.018223][ T5875] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 224.018328][ T5875] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.018350][ T5875] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 224.018374][ T5875] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26222, setting to 64 [ 224.018411][ T5875] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.018486][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.058970][ T5841] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 224.058999][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.059225][ T5841] usb 6-1: Product: syz [ 224.059239][ T5841] usb 6-1: Manufacturer: syz [ 224.059252][ T5841] usb 6-1: SerialNumber: syz [ 224.065040][ T9333] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 224.123707][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 224.123751][ T31] usbtmc 2-1:16.0: can't read capabilities [ 224.240331][ T9347] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 224.240467][ T9347] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 224.241117][ T5878] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 224.273428][ T5875] usb 3-1: usb_control_msg returned -71 [ 224.273476][ T5875] usbtmc 3-1:16.0: can't read capabilities [ 224.316961][ T5878] usb 7-1: USB disconnect, device number 7 [ 224.344586][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.353762][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.358129][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.360740][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.360811][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.367569][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.370052][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.370120][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.371446][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.371553][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.377584][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.381818][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.387037][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.387110][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.400142][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.400217][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 224.518405][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.519902][ T31] usb 2-1: USB disconnect, device number 16 [ 224.638616][ T5875] usb 3-1: USB disconnect, device number 8 [ 224.654536][ T9347] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 224.654716][ T9347] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 224.812752][ T5878] kernel write not supported for file bpf-prog (pid: 5878 comm: kworker/0:5) [ 225.058464][ T5841] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 225.095644][ T9357] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.1378'. [ 225.260056][ T5841] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 225.306533][ T9362] input: syz1 as /devices/virtual/input/input17 [ 228.105886][ T43] team0 (unregistering): Port device team_slave_1 removed [ 228.177708][ T6031] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.331860][ T6031] usb 3-1: Using ep0 maxpacket: 8 [ 228.333694][ T6031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.333738][ T6031] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.333760][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.338994][ T43] team0 (unregistering): Port device team_slave_0 removed [ 228.350976][ T6031] usb 3-1: config 0 descriptor?? [ 228.596323][ T6031] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 229.075018][ T5855] usb 3-1: USB disconnect, device number 9 [ 230.297526][ T9442] netlink: 'syz.6.1415': attribute type 1 has an invalid length. [ 231.313804][ T9442] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.317446][ T9444] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.322229][ T5841] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 62:ca:e9:eb:19:3d [ 231.452094][ T5841] usb 6-1: USB disconnect, device number 9 [ 231.455477][ T5841] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 231.688740][ T5841] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 231.688882][ T5841] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 231.689018][ T5841] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 231.717443][ T6743] udevd[6743]: setting mode of /dev/bus/usb/006/009 to 020664 failed: No such file or directory [ 231.717623][ T6743] udevd[6743]: setting owner of /dev/bus/usb/006/009 to uid=0, gid=0 failed: No such file or directory [ 231.801801][ T4013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.801881][ T4013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.027607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.027629][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.620731][ T9546] fuse: Bad value for 'fd' [ 234.870984][ T9554] overlayfs: failed lookup in lower (newroot/340, name='file1', err=-40): overlapping layers [ 235.318073][ T9537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.318199][ T9537] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 235.435939][ T9537] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.436040][ T9537] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 235.515355][ T9537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.515460][ T9537] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 235.606022][ T9537] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 235.696179][ T9537] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 235.699804][ T9537] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 235.775547][ T9537] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 235.835100][ T9537] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.835919][ T9537] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 235.923376][ T9537] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 236.272255][ T5854] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 236.434145][ T5854] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 236.434175][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.451695][ T5854] usb 2-1: config 0 descriptor?? [ 236.812017][ T5115] Bluetooth: hci1: command 0x0406 tx timeout [ 236.876094][ T5854] hackrf 2-1:0.0: Board ID: 00 [ 236.876116][ T5854] hackrf 2-1:0.0: Firmware version: ovǍj5E(lYK [ 237.019497][ T5854] hackrf 2-1:0.0: Registered as swradio24 [ 237.019526][ T5854] videodev: could not get a free minor [ 237.019536][ T5854] hackrf 2-1:0.0: Failed to register as video device (-23) [ 237.102562][ T5854] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 237.131019][ T5854] usb 2-1: USB disconnect, device number 17 [ 237.452066][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 237.532459][ T5115] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.772050][ T5115] Bluetooth: hci5: command 0x0c1a tx timeout [ 237.851654][ T5115] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.891691][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 238.087636][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.087664][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.088844][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.088870][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.088889][ T31] usb 3-1: SerialNumber: syz [ 238.361646][ T31] usb 3-1: 0:2 : does not exist [ 238.539862][ T31] usb 3-1: USB disconnect, device number 10 [ 238.755465][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.901739][ T5115] Bluetooth: hci1: command 0x0406 tx timeout [ 239.531708][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 239.611713][ T5115] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.772086][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 239.861612][ T5115] Bluetooth: hci5: command 0x0c1a tx timeout [ 239.933961][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.934016][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 239.934038][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.996394][ T31] usb 3-1: config 0 descriptor?? [ 240.007282][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 240.267071][ T9706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.432522][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 240.433583][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 240.434228][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 240.636476][ T31] pwc: recv_control_msg error -71 req 04 val 1300 [ 240.636951][ T31] pwc: recv_control_msg error -71 req 04 val 1400 [ 240.637631][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 240.638204][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 240.638660][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 240.640935][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 240.641408][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 240.642082][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.642528][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.643085][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.653456][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.666200][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 240.707286][ T31] pwc: Registered as video103. [ 240.710290][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 240.836621][ T31] 1024-page vmalloc region starting at 0xffffc90005bb9000 allocated at kcov_ioctl+0x58/0x640 [ 240.836668][ T31] list_add corruption. next->prev should be prev (ffffffff8dc23a40), but was 0000000000000000. (next=ffffc90005bb9000). [ 240.837130][ T31] ------------[ cut here ]------------ [ 240.837141][ T31] kernel BUG at lib/list_debug.c:31! [ 240.837189][ T31] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 240.837227][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 240.837254][ T31] Tainted: [L]=SOFTLOCKUP [ 240.837260][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 240.837274][ T31] Workqueue: usb_hub_wq hub_event [ 240.837295][ T31] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 240.837327][ T31] Code: 5d 6c fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 f3 42 8d fd 48 8b 53 08 48 c7 c7 e0 e9 85 8b 4c 89 f6 48 89 d9 e8 1d 04 8d fc 90 <0f> 0b 4c 89 f7 e8 32 5d 6c fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 c3 [ 240.837344][ T31] RSP: 0018:ffffc90000a5f710 EFLAGS: 00010246 [ 240.837360][ T31] RAX: 0000000000000075 RBX: ffffc90005bb9000 RCX: e5a0b86f28c18e00 [ 240.837374][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.837385][ T31] RBP: 1ffff92000b77201 R08: 0000000000000000 R09: 0000000000000000 [ 240.837398][ T31] R10: dffffc0000000000 R11: ffffed1017124923 R12: ffffc90005bb9008 [ 240.837411][ T31] R13: dffffc0000000000 R14: ffffffff8dc23a40 R15: ffffc9000dde2000 [ 240.837426][ T31] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 240.837442][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.837456][ T31] CR2: 00007fffee17dda8 CR3: 0000000032bba000 CR4: 00000000003526f0 [ 240.837472][ T31] Call Trace: [ 240.837480][ T31] [ 240.837495][ T31] kcov_remote_stop+0x457/0x680 [ 240.837524][ T31] hub_event+0x49d8/0x4f60 [ 240.837559][ T31] ? __pfx_hub_event+0x10/0x10 [ 240.837576][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 240.837609][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 240.837636][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 240.837665][ T31] process_scheduled_works+0xaec/0x17a0 [ 240.837704][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 240.837731][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 240.837760][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.837786][ T31] ? schedule+0x90/0x360 [ 240.837818][ T31] worker_thread+0xda6/0x1360 [ 240.837846][ T31] kthread+0x726/0x8b0 [ 240.837869][ T31] ? __pfx_worker_thread+0x10/0x10 [ 240.837887][ T31] ? __pfx_kthread+0x10/0x10 [ 240.837906][ T31] ? rt_spin_unlock+0x14f/0x200 [ 240.837924][ T31] ? rt_spin_unlock+0x160/0x200 [ 240.837939][ T31] ? __pfx_kthread+0x10/0x10 [ 240.837959][ T31] ret_from_fork+0x51b/0xa40 [ 240.837979][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 240.837997][ T31] ? __switch_to+0xc82/0x1410 [ 240.838026][ T31] ? __pfx_kthread+0x10/0x10 [ 240.838048][ T31] ret_from_fork_asm+0x1a/0x30 [ 240.838081][ T31] [ 240.838088][ T31] Modules linked in: [ 240.838107][ T31] ---[ end trace 0000000000000000 ]--- [ 240.838121][ T31] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 240.838152][ T31] Code: 5d 6c fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 f3 42 8d fd 48 8b 53 08 48 c7 c7 e0 e9 85 8b 4c 89 f6 48 89 d9 e8 1d 04 8d fc 90 <0f> 0b 4c 89 f7 e8 32 5d 6c fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 c3 [ 240.838169][ T31] RSP: 0018:ffffc90000a5f710 EFLAGS: 00010246 [ 240.838185][ T31] RAX: 0000000000000075 RBX: ffffc90005bb9000 RCX: e5a0b86f28c18e00 [ 240.838200][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.838211][ T31] RBP: 1ffff92000b77201 R08: 0000000000000000 R09: 0000000000000000 [ 240.838224][ T31] R10: dffffc0000000000 R11: ffffed1017124923 R12: ffffc90005bb9008 [ 240.838237][ T31] R13: dffffc0000000000 R14: ffffffff8dc23a40 R15: ffffc9000dde2000 [ 240.838251][ T31] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 240.838266][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.838279][ T31] CR2: 00007fffee17dda8 CR3: 0000000032bba000 CR4: 00000000003526f0 [ 240.838298][ T31] Kernel panic - not syncing: Fatal exception [ 240.838707][ T31] Kernel Offset: disabled