last executing test programs: 1m3.763461997s ago: executing program 2 (id=385): syz_emit_vhci(0x0, 0x7) 1m3.034760017s ago: executing program 2 (id=387): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000900)={'veth0_to_team\x00', @random="0600002000"}) 1m2.940009444s ago: executing program 1 (id=388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1m2.939779891s ago: executing program 3 (id=389): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x15) socket$netlink(0x10, 0x3, 0x6) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) getpgrp(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x19, 0x800000000004}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) 1m2.900645232s ago: executing program 2 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m2.623949013s ago: executing program 1 (id=391): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120127528e855067728d000000000010231207"], 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x9, 0x581) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x900) 1m2.140847647s ago: executing program 2 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m2.063528103s ago: executing program 2 (id=393): set_mempolicy(0x6006, 0x0, 0x5) 1m0.903076478s ago: executing program 2 (id=396): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x8000, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 1m0.583330287s ago: executing program 32 (id=396): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x8000, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 1m0.452216056s ago: executing program 1 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m0.250745184s ago: executing program 1 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m0.087099708s ago: executing program 1 (id=403): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) 59.861197405s ago: executing program 3 (id=404): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r1, 0x0, &(0x7f0000000100)={0x4, 0x2}, 0x0) r2 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r2, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x3, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0xc, 0x0, 0x0) write(r3, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x25, 0x0, 0x0, 0x0, 0x22}}], 0x3f, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) msgget$private(0x0, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) 59.737839713s ago: executing program 1 (id=405): openat$tun(0xffffffffffffff9c, 0x0, 0x1a1380, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000012c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x20}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) prlimit64(r0, 0xb, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_usb_connect$uac1(0x9938ee50490c877d, 0x0, 0x0, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x6, 0x80, 0x8, 0x40, 0x81}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 59.36107886s ago: executing program 33 (id=405): openat$tun(0xffffffffffffff9c, 0x0, 0x1a1380, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000012c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x20}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) prlimit64(r0, 0xb, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_usb_connect$uac1(0x9938ee50490c877d, 0x0, 0x0, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x6, 0x80, 0x8, 0x40, 0x81}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 58.555592384s ago: executing program 3 (id=410): syz_emit_vhci(0x0, 0x7) 58.411105626s ago: executing program 3 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 58.135671784s ago: executing program 3 (id=412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f0000000580)="b318"}) 56.431884304s ago: executing program 3 (id=413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 55.833696317s ago: executing program 34 (id=413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.164248229s ago: executing program 4 (id=537): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 22.405192853s ago: executing program 4 (id=540): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x8028c003, 0x0) 22.143086593s ago: executing program 5 (id=543): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)) 22.062830947s ago: executing program 5 (id=545): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x7ffd, 0xfe, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.871331486s ago: executing program 4 (id=554): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x2c, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0) 20.736197244s ago: executing program 4 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 20.702213394s ago: executing program 4 (id=556): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 20.420114545s ago: executing program 4 (id=558): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) 20.099002205s ago: executing program 35 (id=558): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) 20.093485962s ago: executing program 5 (id=562): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020700) 19.920682446s ago: executing program 5 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 19.751201729s ago: executing program 5 (id=567): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x2, &(0x7f0000000480)='\x00 ', 0x5}) 19.379050019s ago: executing program 5 (id=569): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 18.427071056s ago: executing program 36 (id=569): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 15.790125823s ago: executing program 6 (id=583): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x2, &(0x7f0000000480)='\x00 ', 0x5}) 15.651821764s ago: executing program 6 (id=586): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) listen(r0, 0x4) r5 = dup2(r4, 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x400, 0x0, 0x5]}, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 14.638271973s ago: executing program 6 (id=589): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3ca}) 14.432300912s ago: executing program 6 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 14.372768995s ago: executing program 6 (id=591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa56, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "1409ec71"}]}}, 0x0}, 0x0) 14.021545029s ago: executing program 6 (id=594): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x404489d}, 0x4180) 13.726854179s ago: executing program 37 (id=594): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x404489d}, 0x4180) 4.075003574s ago: executing program 8 (id=571): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x1}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x10001}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000180)={0x2, 0x0, [0xfff, 0x7, 0xde5, 0x1, 0x800, 0x5, 0x7f4, 0xfb4]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000200)={0x10000000, 0x7, 0x4}) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) syz_fuse_handle_req(r6, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.986420228s ago: executing program 7 (id=614): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x894b, &(0x7f0000000400)) 3.884617032s ago: executing program 7 (id=615): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)="5733d67015ad0e8124d9d40e9695f5aecfcc245af528d066f2db23e4867a53f303fd592875a42ebe92fa67e10bd9bda185aa8301f2ff331c102038e053955dcbe4ad1142812a3c25ea5b26204a788002"}) 3.761590288s ago: executing program 7 (id=616): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x8000, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 3.277952615s ago: executing program 7 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 2.611813493s ago: executing program 8 (id=620): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) 2.597132138s ago: executing program 9 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x9, 0x80dc2) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000340)) 2.42467054s ago: executing program 0 (id=621): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) readahead(0xffffffffffffffff, 0x3, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r2, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x20, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 1.584254155s ago: executing program 9 (id=622): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x894b, &(0x7f0000000400)) 1.486693375s ago: executing program 9 (id=624): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002040)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000840)=""/194, 0xc2}, 0x6}, {{&(0x7f0000000940)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/23, 0x17}, 0x101}, {{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000b00)=""/121, 0x79}, 0x4}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000b80)=""/73, 0x49}, {&(0x7f0000000c00)=""/92, 0x5c}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/96, 0x60}, {&(0x7f0000001e00)=""/132, 0x84}], 0x7, &(0x7f0000001f40)=""/195, 0xc3}, 0xff}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xfffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x4350ef72700bc7e4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020}, 0x2020) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') mq_unlink(0x0) set_mempolicy(0x2, 0x0, 0x4) sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0x14) 1.331748913s ago: executing program 7 (id=625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)="5733d67015ad0e8124d9d40e9695f5aecfcc245af528d066f2db23e4867a53f303fd592875a42ebe92fa67e10bd9bda185aa8301f2ff331c102038e053955dcbe4ad1142812a3c25ea5b26204a788002"}) 1.208240549s ago: executing program 0 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.190041057s ago: executing program 7 (id=627): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.15220342s ago: executing program 0 (id=628): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0xffffff4d) 1.072402865s ago: executing program 0 (id=629): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) lsetxattr(0x0, &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)='/proc/cpuinfo\x00', 0xe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x223}}, './file1\x00'}) 378.945015ms ago: executing program 8 (id=630): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) listen(r0, 0x4) r5 = dup2(r4, 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x400, 0x0, 0x5]}, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 295.88722ms ago: executing program 9 (id=631): r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') wait4(r0, 0x0, 0x80000000, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='net/sockstat6\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x10) 116.002983ms ago: executing program 0 (id=632): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x894b, &(0x7f0000000400)) 0s ago: executing program 0 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$ndb(0x0, 0x0, 0x4000) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) sched_rr_get_interval(0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): aaaaaaaa [ 90.876202][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 91.001363][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 91.014644][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.024009][ T24] usb 3-1: Product: syz [ 91.029788][ T24] usb 3-1: Manufacturer: syz [ 91.036186][ T24] usb 3-1: SerialNumber: syz [ 91.045488][ T24] usb 3-1: config 0 descriptor?? [ 91.057729][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 91.140045][ T803] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.212407][ T5837] pwc: recv_control_msg error -32 req 02 val 2b00 [ 91.222379][ T5837] pwc: recv_control_msg error -32 req 02 val 2700 [ 91.232772][ T5837] pwc: recv_control_msg error -32 req 02 val 2c00 [ 91.245237][ T5837] pwc: recv_control_msg error -32 req 04 val 1000 [ 91.254481][ T5837] pwc: recv_control_msg error -32 req 04 val 1300 [ 91.278451][ T5837] pwc: recv_control_msg error -32 req 04 val 1400 [ 91.292523][ T5837] pwc: recv_control_msg error -32 req 02 val 2000 [ 91.301203][ T5837] pwc: recv_control_msg error -32 req 02 val 2100 [ 91.309952][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 91.310754][ T5837] pwc: recv_control_msg error -32 req 04 val 1500 [ 91.318328][ T803] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 91.324175][ T5837] pwc: recv_control_msg error -32 req 02 val 2500 [ 91.334880][ T803] usb 1-1: config 0 has no interface number 0 [ 91.350447][ T803] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 91.354579][ T5837] pwc: recv_control_msg error -32 req 02 val 2400 [ 91.363729][ T803] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 91.371346][ T5837] pwc: recv_control_msg error -32 req 02 val 2600 [ 91.386688][ T803] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.401532][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.410258][ T803] usb 1-1: Product: syz [ 91.414511][ T803] usb 1-1: Manufacturer: syz [ 91.420022][ T803] usb 1-1: SerialNumber: syz [ 91.431698][ T803] usb 1-1: config 0 descriptor?? [ 91.442647][ T803] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 91.455488][ T803] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 91.592977][ T5837] pwc: recv_control_msg error -71 req 02 val 2800 [ 91.601840][ T5837] pwc: recv_control_msg error -71 req 04 val 1100 [ 91.609061][ T5837] pwc: recv_control_msg error -71 req 04 val 1200 [ 91.619435][ T5837] pwc: Registered as video103. [ 91.631454][ T5837] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 91.693962][ T803] usb 1-1: USB disconnect, device number 4 [ 91.700118][ T5837] usb 4-1: USB disconnect, device number 4 [ 91.858945][ T5919] usb 2-1: Cannot set autoneg [ 91.866409][ T5919] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 91.888997][ T5919] usb 2-1: USB disconnect, device number 4 [ 92.085355][ T24] gspca_stk1135: reg_w 0x7 err -71 [ 92.093481][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 92.101105][ T24] gspca_stk1135: Sensor write failed [ 92.106725][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 92.114554][ T24] gspca_stk1135: Sensor write failed [ 92.121222][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 92.128375][ T24] gspca_stk1135: Sensor read failed [ 92.134041][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 92.147374][ T24] gspca_stk1135: Sensor read failed [ 92.155410][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 92.163044][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 92.172035][ T24] gspca_stk1135: Sensor read failed [ 92.179965][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 92.186344][ T24] gspca_stk1135: Sensor read failed [ 92.194126][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 92.203856][ T24] gspca_stk1135: Sensor write failed [ 92.209398][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 92.217525][ T24] gspca_stk1135: Sensor write failed [ 92.226789][ T24] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 92.246894][ T24] usb 3-1: USB disconnect, device number 4 [ 92.409127][ T6062] capability: warning: `syz.3.49' uses deprecated v2 capabilities in a way that may be insecure [ 92.484053][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'. [ 92.489678][ T6062] 9p: Could not find request transport: tcp000000004e22 [ 92.769938][ T5900] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.819716][ T24] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 92.940443][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 92.948821][ T5900] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 92.959241][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.972189][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.972863][ T5900] usb 2-1: config 0 descriptor?? [ 92.985051][ T803] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 93.001286][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 93.005547][ T5900] gspca_main: sq930x-2.14.0 probing 041e:403c [ 93.013706][ T24] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 93.026740][ T24] usb 4-1: New USB device strings: Mfr=1, Product=122, SerialNumber=160 [ 93.035887][ T24] usb 4-1: Product: syz [ 93.040335][ T24] usb 4-1: Manufacturer: syz [ 93.045721][ T24] usb 4-1: SerialNumber: syz [ 93.057954][ T24] usb 4-1: config 0 descriptor?? [ 93.066237][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 93.079418][ T24] dvb-usb: will use the device's hardware PID filter (table count: 8). [ 93.089481][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 93.099533][ T24] usb 4-1: media controller created [ 93.106833][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.151026][ T24] DVB: Unable to find symbol tda10046_attach() [ 93.157516][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 93.167631][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 93.189927][ T803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.204023][ T803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.216617][ T803] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 93.227326][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.236997][ T803] usb 3-1: SerialNumber: syz [ 93.255159][ T803] usb 3-1: 0:2 : does not exist [ 93.501880][ T6074] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 93.550179][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.57'. [ 93.572863][ T6074] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.717879][ T803] usb 3-1: USB disconnect, device number 5 [ 93.768088][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.909914][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 93.990083][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 94.026257][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 94.026325][ T5900] gspca_sq930x: ucbus_write failed -71 [ 94.045942][ T5900] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 94.059885][ T5837] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.069492][ T5900] usb 2-1: USB disconnect, device number 5 [ 94.081203][ T24] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 94.105592][ T24] usb 4-1: USB disconnect, device number 5 [ 94.214020][ T6084] netlink: 'syz.2.59': attribute type 2 has an invalid length. [ 94.238020][ T5837] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.248156][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.258358][ T5837] usb 1-1: Product: syz [ 94.264600][ T5837] usb 1-1: Manufacturer: syz [ 94.271026][ T5837] usb 1-1: SerialNumber: syz [ 94.287369][ T5837] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.331201][ T24] IPVS: starting estimator thread 0... [ 94.364328][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 94.387899][ T5900] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.439842][ T6088] IPVS: using max 39 ests per chain, 93600 per kthread [ 94.703772][ T6098] No control pipe specified [ 94.884007][ T24] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 94.905524][ T803] usb 1-1: USB disconnect, device number 5 [ 94.986764][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 95.072884][ T24] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 95.081690][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 95.095262][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 95.109565][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 95.132543][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.161556][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.185339][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.215402][ T24] usbtmc 3-1:16.0: bulk endpoints not found [ 95.407852][ T10] usb 3-1: USB disconnect, device number 6 [ 95.419669][ T5900] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 95.433257][ T5900] ath9k_htc: Failed to initialize the device [ 95.444063][ T803] usb 1-1: ath9k_htc: USB layer deinitialized [ 95.492394][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.551532][ T5837] IPVS: starting estimator thread 0... [ 95.555221][ T6126] tipc: Started in network mode [ 95.568229][ T6126] tipc: Node identity ac1414aa, cluster identity 4711 [ 95.584698][ T6126] tipc: Enabled bearer , priority 10 [ 95.629806][ T24] usb 2-1: device descriptor read/64, error -71 [ 95.644302][ T6127] IPVS: using max 58 ests per chain, 139200 per kthread [ 95.799812][ T803] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 95.879821][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.971471][ T803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.986614][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.990061][ T803] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 96.005085][ T803] usb 1-1: New USB device strings: Mfr=1, Product=122, SerialNumber=160 [ 96.005107][ T803] usb 1-1: Product: syz [ 96.005118][ T803] usb 1-1: Manufacturer: syz [ 96.005130][ T803] usb 1-1: SerialNumber: syz [ 96.020716][ T24] usb 2-1: device descriptor read/64, error -71 [ 96.039474][ T803] usb 1-1: config 0 descriptor?? [ 96.043366][ T803] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 96.065440][ T803] dvb-usb: will use the device's hardware PID filter (table count: 8). [ 96.066204][ T803] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 96.091231][ T803] usb 1-1: media controller created [ 96.093372][ T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.151619][ T24] usb usb2-port1: attempt power cycle [ 96.165936][ T803] DVB: Unable to find symbol tda10046_attach() [ 96.207912][ T803] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 96.220065][ T803] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 96.236549][ T6138] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 96.322246][ T6142] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 96.332773][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 96.401206][ T6143] binder: 6141:6143 ioctl 5402 2000000006c0 returned -22 [ 96.531886][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 96.572424][ T24] usb 2-1: device descriptor read/8, error -71 [ 96.701966][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 96.733507][ T5837] tipc: Node number set to 2886997162 [ 96.753679][ T6153] comedi comedi3: dmm32at: I/O port conflict (0x3,16) [ 96.850198][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 96.877799][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 96.893719][ T24] usb 2-1: device descriptor read/8, error -71 [ 96.894490][ T6157] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 96.910599][ T6157] nbd: error processing sock list [ 97.010071][ T24] usb usb2-port1: unable to enumerate USB device [ 97.064022][ T803] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 97.087519][ T803] usb 1-1: USB disconnect, device number 6 [ 97.131994][ T5919] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 97.190127][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.289856][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 97.298821][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.315940][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.331331][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.346009][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.361038][ T5919] usb 3-1: Product: syz [ 97.365605][ T5919] usb 3-1: Manufacturer: syz [ 97.375362][ T5919] usb 3-1: SerialNumber: syz [ 97.384857][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 97.397361][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.409957][ T10] usb 4-1: config 0 has no interface number 0 [ 97.418736][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 97.431077][ T10] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 97.441573][ T10] usb 4-1: Manufacturer: syz [ 97.458542][ T10] usb 4-1: config 0 descriptor?? [ 97.470562][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 97.625490][ T5919] usb 3-1: 0:2 : does not exist [ 97.654831][ T5919] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 97.715952][ T6159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.86'. [ 97.751230][ T5919] usb 3-1: USB disconnect, device number 7 [ 97.805875][ T6161] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 97.816631][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 97.832164][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.896215][ T6162] binder: 6160:6162 ioctl 5402 2000000006c0 returned -22 [ 98.390531][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 98.459885][ T5919] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 98.595728][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 98.629761][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 98.640947][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 98.666110][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.682020][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.696800][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.706750][ T5919] usb 3-1: Product: syz [ 98.716170][ T5919] usb 3-1: Manufacturer: syz [ 98.725432][ T10] gspca_spca1528: reg_w err -71 [ 98.726311][ T5919] usb 3-1: SerialNumber: syz [ 98.751042][ T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 98.752465][ T5919] usb 3-1: config 0 descriptor?? [ 98.793287][ T10] usb 4-1: USB disconnect, device number 6 [ 98.798782][ T5919] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.819840][ T5919] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 99.059218][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 99.310845][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 99.393584][ T6188] capability: warning: `syz.0.97' uses 32-bit capabilities (legacy support in use) [ 99.453057][ T5919] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 99.473199][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.481394][ T5919] em28xx 3-1:0.0: Config register raw data: 0x41 [ 99.502315][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.523094][ T10] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 99.546598][ T10] usb 2-1: New USB device strings: Mfr=1, Product=122, SerialNumber=160 [ 99.558037][ T10] usb 2-1: Product: syz [ 99.565875][ T10] usb 2-1: Manufacturer: syz [ 99.572351][ T10] usb 2-1: SerialNumber: syz [ 99.595581][ T10] usb 2-1: config 0 descriptor?? [ 99.608460][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 99.629194][ T10] dvb-usb: will use the device's hardware PID filter (table count: 8). [ 99.640277][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 99.650418][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.651777][ T10] usb 2-1: media controller created [ 99.672836][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.746320][ T10] DVB: Unable to find symbol tda10046_attach() [ 99.754487][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 99.768632][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 99.849722][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 99.857689][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.869454][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.883781][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.909809][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.921644][ T24] usb 4-1: Product: syz [ 99.926962][ T24] usb 4-1: Manufacturer: syz [ 99.933101][ T24] usb 4-1: SerialNumber: syz [ 100.159971][ T24] usb 4-1: 0:2 : does not exist [ 100.172135][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 100.222052][ T24] usb 4-1: USB disconnect, device number 7 [ 100.261944][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.613382][ T10] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 100.636043][ T10] usb 2-1: USB disconnect, device number 10 [ 100.741082][ T6202] comedi comedi3: pcl711: I/O port conflict (0x8,16) [ 100.786205][ T6204] syz.3.103(6204): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 101.090082][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 101.249234][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 101.266014][ T5900] usb 3-1: USB disconnect, device number 8 [ 101.274499][ T5900] em28xx 3-1:0.0: Disconnecting em28xx [ 101.321434][ T5900] em28xx 3-1:0.0: Freeing device [ 101.520925][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.540830][ T6227] netlink: 'syz.2.112': attribute type 21 has an invalid length. [ 101.553943][ T6227] netlink: 100 bytes leftover after parsing attributes in process `syz.2.112'. [ 101.691519][ T10] usb 4-1: device descriptor read/64, error -71 [ 101.941340][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.961326][ T803] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 102.089785][ T10] usb 4-1: device descriptor read/64, error -71 [ 102.109742][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 102.152734][ T803] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.175121][ T803] usb 1-1: config 0 has no interface number 0 [ 102.185106][ T803] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 102.218550][ T803] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 102.221344][ T10] usb usb4-port1: attempt power cycle [ 102.234213][ T803] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.253701][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.281517][ T803] usb 1-1: config 0 descriptor?? [ 102.290826][ T6234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.315116][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.332865][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.351685][ T803] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 102.390341][ T24] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 102.405257][ T24] usb 3-1: New USB device strings: Mfr=1, Product=122, SerialNumber=160 [ 102.415908][ T24] usb 3-1: Product: syz [ 102.429208][ T24] usb 3-1: Manufacturer: syz [ 102.435393][ T24] usb 3-1: SerialNumber: syz [ 102.450495][ T24] usb 3-1: config 0 descriptor?? [ 102.470840][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 102.492367][ T24] dvb-usb: will use the device's hardware PID filter (table count: 8). [ 102.512750][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 102.513599][ T5837] usb 1-1: USB disconnect, device number 7 [ 102.528279][ T24] usb 3-1: media controller created [ 102.567896][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.589916][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 102.620606][ T10] usb 4-1: device descriptor read/8, error -71 [ 102.630096][ T24] DVB: Unable to find symbol tda10046_attach() [ 102.637528][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 102.656985][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 102.730106][ T5900] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 102.869780][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 102.900033][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 102.908049][ T10] usb 4-1: device descriptor read/8, error -71 [ 102.923853][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.935643][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 102.950321][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 102.963747][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 102.979863][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.998473][ T5900] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 103.008683][ T5900] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.017615][ T5900] usb 2-1: Manufacturer: syz [ 103.025336][ T10] usb usb4-port1: unable to enumerate USB device [ 103.038749][ T5900] usb 2-1: config 0 descriptor?? [ 103.262144][ T5900] usb 2-1: USB disconnect, device number 11 [ 103.289918][ T24] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 103.353431][ T24] usb 3-1: USB disconnect, device number 9 [ 104.289721][ T5900] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 104.399731][ T5837] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 104.410095][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 104.439895][ T5900] usb 2-1: device descriptor read/64, error -71 [ 104.549746][ T5837] usb 3-1: device descriptor read/64, error -71 [ 104.557148][ T6275] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 104.572235][ T6275] nbd: error processing sock list [ 104.679832][ T5900] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 104.700956][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 104.789770][ T5837] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 104.829777][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.843247][ T5900] usb 2-1: device descriptor read/64, error -71 [ 104.859860][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 104.868785][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.880751][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.897412][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.909573][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.920116][ T24] usb 4-1: Product: syz [ 104.924636][ T24] usb 4-1: Manufacturer: syz [ 104.931259][ T24] usb 4-1: SerialNumber: syz [ 104.940192][ T5837] usb 3-1: device descriptor read/64, error -71 [ 104.959982][ T5900] usb usb2-port1: attempt power cycle [ 104.968676][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 104.999734][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 105.010480][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.022069][ T10] usb 1-1: config 0 has no interface number 0 [ 105.032616][ T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 105.043768][ T10] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 105.054603][ T5837] usb usb3-port1: attempt power cycle [ 105.062572][ T10] usb 1-1: Manufacturer: syz [ 105.071657][ T10] usb 1-1: config 0 descriptor?? [ 105.080869][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 105.145575][ T24] usb 4-1: 0:2 : does not exist [ 105.159272][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 105.210663][ T24] usb 4-1: USB disconnect, device number 12 [ 105.252853][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.339931][ T5900] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 105.380558][ T5900] usb 2-1: device descriptor read/8, error -71 [ 105.419802][ T5837] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 105.440562][ T5837] usb 3-1: device descriptor read/8, error -71 [ 105.490139][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 105.649754][ T5900] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 105.680171][ T5837] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 105.688892][ T5900] usb 2-1: device descriptor read/8, error -71 [ 105.710473][ T5837] usb 3-1: device descriptor read/8, error -71 [ 105.803619][ T5900] usb usb2-port1: unable to enumerate USB device [ 105.821633][ T5837] usb usb3-port1: unable to enumerate USB device [ 105.829144][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 105.842148][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 106.254127][ T6282] tipc: Enabling of bearer rejected, failed to enable media [ 106.304271][ T10] gspca_spca1528: reg_w err -71 [ 106.312416][ T10] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 106.314499][ T6285] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 106.329777][ T10] usb 1-1: USB disconnect, device number 8 [ 106.340293][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 106.406673][ T6286] binder: 6284:6286 ioctl 5402 2000000006c0 returned -22 [ 106.553719][ T6295] ubi9: attaching mtd0 [ 106.563157][ T6295] ubi9 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 106.930285][ T5919] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 107.007861][ T6311] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 107.023276][ T6311] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 107.033525][ T6311] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 107.099783][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 107.122434][ T5919] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 107.145640][ T5919] usb 4-1: config 0 has no interface number 0 [ 107.154054][ T5919] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.168684][ T5919] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 107.183268][ T5919] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 107.197350][ T5919] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.218430][ T5919] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 107.240573][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.269248][ T5919] usb 4-1: Product: syz [ 107.279679][ T5919] usb 4-1: Manufacturer: syz [ 107.286407][ T5919] usb 4-1: SerialNumber: syz [ 107.293284][ T6316] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 107.304681][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 107.305746][ T5919] usb 4-1: config 0 descriptor?? [ 107.322903][ T6303] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.341360][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input9 [ 107.354710][ T5185] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 107.402297][ C1] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 107.413605][ T6317] binder: 6315:6317 ioctl 5402 2000000006c0 returned -22 [ 107.511690][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 107.529482][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 107.549192][ T5900] usb 4-1: USB disconnect, device number 13 [ 107.680659][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.694852][ T10] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 107.709649][ T10] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 107.728141][ T10] usb 2-1: config 63 has no interface number 0 [ 107.735657][ T10] usb 2-1: config 63 interface 66 has no altsetting 0 [ 107.749028][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 107.761286][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.773481][ T10] usb 2-1: Product: syz [ 107.778701][ T10] usb 2-1: Manufacturer: syz [ 107.784222][ T10] usb 2-1: SerialNumber: syz [ 108.025328][ T10] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8a31) [ 108.035000][ T10] uvcvideo 2-1:63.66: No valid video chain found. [ 108.057782][ T10] usb 2-1: USB disconnect, device number 16 [ 108.070869][ T5837] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 108.181971][ T6342] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 108.193201][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 108.242309][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.253176][ T5837] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.263662][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.264914][ T6343] binder: 6341:6343 ioctl 5402 2000000006c0 returned -22 [ 108.282213][ T5837] usb 3-1: config 0 descriptor?? [ 108.298940][ T5837] pwc: Askey VC010 type 2 USB webcam detected. [ 108.350533][ T5919] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 108.511541][ T5919] usb 1-1: no configurations [ 108.516831][ T5919] usb 1-1: can't read configurations, error -22 [ 108.610308][ T6358] netlink: 'syz.1.158': attribute type 142 has an invalid length. [ 108.640392][ T24] kernel read not supported for file /radio0 (pid: 24 comm: kworker/1:0) [ 108.660725][ T5919] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 108.702698][ T5837] pwc: recv_control_msg error -32 req 02 val 2b00 [ 108.720859][ T5837] pwc: recv_control_msg error -32 req 02 val 2700 [ 108.733346][ T5837] pwc: recv_control_msg error -32 req 02 val 2c00 [ 108.753423][ T5837] pwc: recv_control_msg error -32 req 04 val 1000 [ 108.770505][ T5837] pwc: recv_control_msg error -32 req 04 val 1300 [ 108.786592][ T5837] pwc: recv_control_msg error -32 req 04 val 1400 [ 108.795384][ T5837] pwc: recv_control_msg error -32 req 02 val 2000 [ 108.805846][ T5837] pwc: recv_control_msg error -32 req 02 val 2100 [ 108.817436][ T5837] pwc: recv_control_msg error -32 req 04 val 1500 [ 108.827128][ T5837] pwc: recv_control_msg error -32 req 02 val 2500 [ 108.831344][ T5919] usb 1-1: no configurations [ 108.846778][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.160'. [ 108.852336][ T5919] usb 1-1: can't read configurations, error -22 [ 108.871817][ T5919] usb usb1-port1: attempt power cycle [ 108.918632][ T6365] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 108.931062][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 109.001384][ T6368] binder: 6364:6368 ioctl 5402 2000000006c0 returned -22 [ 109.042151][ T5837] pwc: recv_control_msg error -71 req 02 val 2600 [ 109.055520][ T5837] pwc: recv_control_msg error -71 req 02 val 2900 [ 109.065740][ T5837] pwc: recv_control_msg error -71 req 02 val 2800 [ 109.076343][ T5837] pwc: recv_control_msg error -71 req 04 val 1100 [ 109.085172][ T5837] pwc: recv_control_msg error -71 req 04 val 1200 [ 109.104442][ T5837] pwc: Registered as video103. [ 109.117815][ T5837] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 109.145989][ T5837] usb 3-1: USB disconnect, device number 14 [ 109.210075][ T5919] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 109.232096][ T5834] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 109.265141][ T5919] usb 1-1: no configurations [ 109.275039][ T5919] usb 1-1: can't read configurations, error -22 [ 109.293082][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 109.399809][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 109.407358][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.422032][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.433071][ T5919] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 109.445842][ T5834] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.455540][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.464572][ T5834] usb 2-1: Product: syz [ 109.469324][ T5834] usb 2-1: Manufacturer: syz [ 109.474595][ T5834] usb 2-1: SerialNumber: syz [ 109.482093][ T5919] usb 1-1: no configurations [ 109.487343][ T5919] usb 1-1: can't read configurations, error -22 [ 109.499485][ T5919] usb usb1-port1: unable to enumerate USB device [ 109.704380][ T5834] usb 2-1: 0:2 : does not exist [ 109.719551][ T5834] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 109.778233][ T5834] usb 2-1: USB disconnect, device number 17 [ 109.831090][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.013403][ T6392] netlink: 104 bytes leftover after parsing attributes in process `syz.2.170'. [ 110.027704][ T6392] Invalid logical block size (3) [ 110.312824][ T5837] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 110.523927][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.538410][ T5837] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 110.549532][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.566929][ T5837] usb 4-1: config 0 descriptor?? [ 110.608516][ T5837] pwc: Askey VC010 type 2 USB webcam detected. [ 110.609794][ T5834] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 110.777340][ T5834] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 110.800371][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.809185][ T5834] usb 3-1: Product: syz [ 110.814839][ T5834] usb 3-1: Manufacturer: syz [ 110.821557][ T5834] usb 3-1: SerialNumber: syz [ 110.831214][ T5834] usb 3-1: config 0 descriptor?? [ 110.849107][ T5834] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 110.896659][ T6414] Zero length message leads to an empty skb [ 110.988180][ T5837] pwc: recv_control_msg error -32 req 02 val 2b00 [ 111.001246][ T5837] pwc: recv_control_msg error -32 req 02 val 2700 [ 111.014296][ T5837] pwc: recv_control_msg error -32 req 02 val 2c00 [ 111.024226][ T5837] pwc: recv_control_msg error -32 req 04 val 1000 [ 111.033491][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.063521][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.095415][ T5837] pwc: recv_control_msg error -32 req 04 val 1300 [ 111.123368][ T5837] pwc: recv_control_msg error -32 req 04 val 1400 [ 111.141739][ T5837] pwc: recv_control_msg error -32 req 02 val 2000 [ 111.152085][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 111.160217][ T5837] pwc: recv_control_msg error -32 req 02 val 2100 [ 111.190345][ T5837] pwc: recv_control_msg error -32 req 04 val 1500 [ 111.211862][ T5837] pwc: recv_control_msg error -71 req 02 val 2500 [ 111.224444][ T5837] pwc: recv_control_msg error -71 req 02 val 2400 [ 111.238670][ T5837] pwc: recv_control_msg error -71 req 02 val 2600 [ 111.248669][ T5837] pwc: recv_control_msg error -71 req 02 val 2900 [ 111.257180][ T5837] pwc: recv_control_msg error -71 req 02 val 2800 [ 111.269121][ T5837] pwc: recv_control_msg error -71 req 04 val 1100 [ 111.280537][ T5837] pwc: recv_control_msg error -71 req 04 val 1200 [ 111.312863][ T5837] pwc: Registered as video103. [ 111.331520][ T5837] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 111.383452][ T5837] usb 4-1: USB disconnect, device number 14 [ 111.483546][ T5834] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 111.526591][ T5834] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 111.574193][ T5834] usb 3-1: USB disconnect, device number 15 [ 111.631354][ T6436] FAULT_INJECTION: forcing a failure. [ 111.631354][ T6436] name failslab, interval 1, probability 0, space 0, times 1 [ 111.648722][ T6436] CPU: 0 UID: 0 PID: 6436 Comm: syz.0.185 Not tainted syzkaller #0 PREEMPT(full) [ 111.648744][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.648760][ T6436] Call Trace: [ 111.648765][ T6436] [ 111.648772][ T6436] dump_stack_lvl+0xe8/0x150 [ 111.648796][ T6436] should_fail_ex+0x412/0x560 [ 111.648817][ T6436] should_failslab+0xa8/0x100 [ 111.648840][ T6436] __kmalloc_noprof+0xe8/0x760 [ 111.648861][ T6436] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 111.648886][ T6436] tomoyo_realpath_from_path+0xe3/0x5d0 [ 111.648916][ T6436] ? tomoyo_path_number_perm+0x219/0x630 [ 111.648932][ T6436] tomoyo_path_number_perm+0x246/0x630 [ 111.648950][ T6436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.648971][ T6436] ? __lock_acquire+0x6b5/0x2cf0 [ 111.649000][ T6436] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 111.649039][ T6436] ? __fget_files+0x2a/0x420 [ 111.649060][ T6436] ? __fget_files+0x2a/0x420 [ 111.649075][ T6436] ? __fget_files+0x3a0/0x420 [ 111.649089][ T6436] ? __fget_files+0x2a/0x420 [ 111.649109][ T6436] security_file_ioctl+0xc3/0x2a0 [ 111.649128][ T6436] __se_sys_ioctl+0x47/0x170 [ 111.649152][ T6436] do_syscall_64+0x14d/0xf80 [ 111.649170][ T6436] ? trace_irq_disable+0x3b/0x150 [ 111.649186][ T6436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.649202][ T6436] ? clear_bhb_loop+0x40/0x90 [ 111.649220][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.649234][ T6436] RIP: 0033:0x7fc65ef9c799 [ 111.649256][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.649268][ T6436] RSP: 002b:00007fc65fdf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.649286][ T6436] RAX: ffffffffffffffda RBX: 00007fc65f215fa0 RCX: 00007fc65ef9c799 [ 111.649296][ T6436] RDX: 0000200000000040 RSI: 00000000c050561a RDI: 0000000000000003 [ 111.649305][ T6436] RBP: 00007fc65fdf5090 R08: 0000000000000000 R09: 0000000000000000 [ 111.649314][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.649322][ T6436] R13: 00007fc65f216038 R14: 00007fc65f215fa0 R15: 00007ffc68bbedd8 [ 111.649346][ T6436] [ 111.649353][ T6436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.779916][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 111.949117][ T5919] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 112.038133][ T6438] kvm: kvm [6437]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 112.055429][ T6438] kvm: kvm [6437]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 112.132852][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 112.143448][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.154940][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.170462][ T5919] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.181359][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.201295][ T5919] usb 2-1: Product: syz [ 112.206665][ T5919] usb 2-1: Manufacturer: syz [ 112.215643][ T5919] usb 2-1: SerialNumber: syz [ 112.234889][ T6449] FAULT_INJECTION: forcing a failure. [ 112.234889][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.251095][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.3.190 Not tainted syzkaller #0 PREEMPT(full) [ 112.251111][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.251117][ T6449] Call Trace: [ 112.251124][ T6449] [ 112.251128][ T6449] dump_stack_lvl+0xe8/0x150 [ 112.251147][ T6449] should_fail_ex+0x412/0x560 [ 112.251160][ T6449] _copy_from_user+0x2d/0xb0 [ 112.251172][ T6449] sctp_getsockopt_active_key+0xf0/0x620 [ 112.251188][ T6449] ? __pfx_sctp_getsockopt_active_key+0x10/0x10 [ 112.251197][ T6449] ? sctp_getsockopt+0x12f/0xb90 [ 112.251210][ T6449] ? __local_bh_enable_ip+0xd0/0x130 [ 112.251226][ T6449] sctp_getsockopt+0x865/0xb90 [ 112.251237][ T6449] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 112.251249][ T6449] do_sock_getsockopt+0x2d3/0x3f0 [ 112.251263][ T6449] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 112.251276][ T6449] ? __fget_files+0x3a0/0x420 [ 112.251287][ T6449] ? __fget_files+0x2a/0x420 [ 112.251301][ T6449] __x64_sys_getsockopt+0x1a4/0x240 [ 112.251318][ T6449] do_syscall_64+0x14d/0xf80 [ 112.251331][ T6449] ? trace_irq_disable+0x3b/0x150 [ 112.251342][ T6449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.251351][ T6449] ? clear_bhb_loop+0x40/0x90 [ 112.251362][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.251371][ T6449] RIP: 0033:0x7f8c7039c799 [ 112.251381][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.251389][ T6449] RSP: 002b:00007f8c711e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 112.251399][ T6449] RAX: ffffffffffffffda RBX: 00007f8c70615fa0 RCX: 00007f8c7039c799 [ 112.251406][ T6449] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 112.251411][ T6449] RBP: 00007f8c711e3090 R08: 0000200000000140 R09: 0000000000000000 [ 112.251417][ T6449] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 112.251423][ T6449] R13: 00007f8c70616038 R14: 00007f8c70615fa0 R15: 00007fffbb87a3c8 [ 112.251437][ T6449] [ 112.520277][ T5919] usb 2-1: 0:2 : does not exist [ 112.531143][ T5919] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 112.571330][ T5900] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 112.572030][ T5919] usb 2-1: USB disconnect, device number 18 [ 112.627975][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.740741][ T5900] usb 3-1: no configurations [ 112.746107][ T5900] usb 3-1: can't read configurations, error -22 [ 112.769915][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 112.879859][ T5900] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 113.053113][ T5900] usb 3-1: no configurations [ 113.069792][ T5900] usb 3-1: can't read configurations, error -22 [ 113.077866][ T5900] usb usb3-port1: attempt power cycle [ 113.153953][ T6463] FAULT_INJECTION: forcing a failure. [ 113.153953][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 113.170559][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT(full) [ 113.170580][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.170588][ T6463] Call Trace: [ 113.170594][ T6463] [ 113.170600][ T6463] dump_stack_lvl+0xe8/0x150 [ 113.170622][ T6463] should_fail_ex+0x412/0x560 [ 113.170645][ T6463] should_failslab+0xa8/0x100 [ 113.170667][ T6463] ? do_getname+0x2e/0x250 [ 113.170682][ T6463] kmem_cache_alloc_noprof+0x87/0x650 [ 113.170700][ T6463] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.170728][ T6463] do_getname+0x2e/0x250 [ 113.170742][ T6463] ? getname_uflags+0x11/0x30 [ 113.170760][ T6463] do_fchmodat+0xca/0x230 [ 113.170782][ T6463] ? __pfx_do_fchmodat+0x10/0x10 [ 113.170800][ T6463] ? __pfx_ksys_write+0x10/0x10 [ 113.170826][ T6463] __x64_sys_fchmodat+0x7d/0x90 [ 113.170843][ T6463] do_syscall_64+0x14d/0xf80 [ 113.170862][ T6463] ? trace_irq_disable+0x3b/0x150 [ 113.170875][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.170899][ T6463] ? clear_bhb_loop+0x40/0x90 [ 113.170916][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.170929][ T6463] RIP: 0033:0x7f7fc8d9c799 [ 113.170948][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.170959][ T6463] RSP: 002b:00007f7fc9b79028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 113.170976][ T6463] RAX: ffffffffffffffda RBX: 00007f7fc9015fa0 RCX: 00007f7fc8d9c799 [ 113.170985][ T6463] RDX: 00000000fffffe11 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 113.170993][ T6463] RBP: 00007f7fc9b79090 R08: 0000000000000000 R09: 0000000000000000 [ 113.170998][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.171003][ T6463] R13: 00007f7fc9016038 R14: 00007f7fc9015fa0 R15: 00007ffe54e15408 [ 113.171017][ T6463] [ 113.535082][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 113.580127][ T5900] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 113.641803][ T5900] usb 3-1: no configurations [ 113.648160][ T5900] usb 3-1: can't read configurations, error -22 [ 113.750701][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 113.820984][ T5900] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 113.853171][ T5900] usb 3-1: no configurations [ 113.860163][ T5900] usb 3-1: can't read configurations, error -22 [ 113.867706][ T5900] usb usb3-port1: unable to enumerate USB device [ 113.892951][ T5837] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 114.061945][ T5837] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.073036][ T5837] usb 2-1: config 0 has no interface number 0 [ 114.081450][ T5837] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 114.094737][ T5837] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 114.119711][ T5919] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 114.129710][ T5837] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.147360][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.173617][ T5837] usb 2-1: config 0 descriptor?? [ 114.186343][ T6468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.219474][ T5837] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 114.289852][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 114.299154][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 114.314361][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.332550][ T5919] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 114.348907][ T5919] usb 4-1: can't read configurations, error -71 [ 114.401915][ T6468] FAULT_INJECTION: forcing a failure. [ 114.401915][ T6468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.426368][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.1.196 Not tainted syzkaller #0 PREEMPT(full) [ 114.426391][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.426400][ T6468] Call Trace: [ 114.426407][ T6468] [ 114.426413][ T6468] dump_stack_lvl+0xe8/0x150 [ 114.426441][ T6468] should_fail_ex+0x412/0x560 [ 114.426462][ T6468] _copy_from_user+0x2d/0xb0 [ 114.426483][ T6468] do_sys_poll+0x2a9/0x1120 [ 114.426515][ T6468] ? __pfx_do_sys_poll+0x10/0x10 [ 114.426531][ T6468] ? __lock_acquire+0x6b5/0x2cf0 [ 114.426555][ T6468] ? is_bpf_text_address+0x26/0x2b0 [ 114.426657][ T6468] ? set_user_sigmask+0xcd/0x1c0 [ 114.426678][ T6468] ? __pfx_set_user_sigmask+0x10/0x10 [ 114.426707][ T6468] __se_sys_ppoll+0x209/0x2b0 [ 114.426724][ T6468] ? fput+0xa0/0xd0 [ 114.426753][ T6468] ? __pfx___se_sys_ppoll+0x10/0x10 [ 114.426770][ T6468] ? __pfx_ksys_write+0x10/0x10 [ 114.426796][ T6468] ? __x64_sys_ppoll+0x20/0xc0 [ 114.426814][ T6468] do_syscall_64+0x14d/0xf80 [ 114.426833][ T6468] ? trace_irq_disable+0x3b/0x150 [ 114.426850][ T6468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.426866][ T6468] ? clear_bhb_loop+0x40/0x90 [ 114.426884][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.426899][ T6468] RIP: 0033:0x7f7fc8d9c799 [ 114.426914][ T6468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.426926][ T6468] RSP: 002b:00007f7fc9b79028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 114.426942][ T6468] RAX: ffffffffffffffda RBX: 00007f7fc9015fa0 RCX: 00007f7fc8d9c799 [ 114.426953][ T6468] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 114.426963][ T6468] RBP: 00007f7fc9b79090 R08: 0000000000000000 R09: 0000000000000000 [ 114.426973][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.426982][ T6468] R13: 00007f7fc9016038 R14: 00007f7fc9015fa0 R15: 00007ffe54e15408 [ 114.427007][ T6468] [ 114.427454][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 114.690648][ T803] usb 2-1: USB disconnect, device number 19 [ 116.240915][ T5837] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 116.324930][ T6516] infiniband syz1: set active [ 116.344929][ T6516] infiniband syz1: added syz_tun [ 116.415974][ T6516] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 116.441402][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 116.463470][ T5837] usb 2-1: config 0 has no interfaces? [ 116.468758][ T6516] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 116.470640][ T5837] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 116.506078][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.525667][ T5837] usb 2-1: config 0 descriptor?? [ 116.567352][ T6516] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 116.756761][ T6516] RDS/IB: syz1: added [ 116.778533][ T6516] smc: adding ib device syz1 with port count 1 [ 116.788452][ T6531] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 116.794971][ T6516] smc: ib device syz1 port 1 has no pnetid [ 116.834463][ T6531] bond0: (slave wlan1): Opening slave failed [ 116.866224][ T5837] usb 2-1: USB disconnect, device number 20 [ 118.113963][ T6505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.597719][ T6630] netlink: 104 bytes leftover after parsing attributes in process `syz.1.234'. [ 119.640246][ T6631] block nbd3: not configured, cannot reconfigure [ 120.630382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.640769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.652078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.663271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.370239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.387236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.773460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.386909][ T6678] input: syz1 as /devices/virtual/input/input12 [ 123.465259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.652056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.896617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.055259][ T6699] syzkaller1: entered promiscuous mode [ 126.091590][ T6699] syzkaller1: entered allmulticast mode [ 126.242565][ T6706] netlink: 'syz.0.248': attribute type 4 has an invalid length. [ 126.252966][ T6706] netlink: 152 bytes leftover after parsing attributes in process `syz.0.248'. [ 126.444861][ T6705] overlayfs: empty lowerdir [ 126.650856][ T6706] .`: renamed from bond0 (while UP) [ 127.989725][ T6724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.012053][ T6721] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 128.069523][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.222026][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.248096][ T6724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.293507][ T6724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.305645][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.355636][ T6724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.412782][ T6724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.449964][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.497785][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.773666][ T6740] syz1: rxe_newlink: already configured on syz_tun [ 128.807670][ T5837] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 129.009755][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 129.054628][ T5837] usb 4-1: string descriptor 0 read error: -22 [ 129.087115][ T5837] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 129.126245][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.445674][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.453842][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.454055][ T5837] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.463989][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.518068][ T5837] usb 4-1: MIDIStreaming interface descriptor not found [ 130.737519][ T5837] usb 4-1: USB disconnect, device number 17 [ 132.177039][ T6755] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 132.177164][ T6756] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.219467][ T6756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.248267][ T6756] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.261880][ T6756] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.363074][ T6774] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 132.425321][ T6779] rdma_rxe: rxe_newlink: failed to add syz_tun [ 132.602384][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 132.741349][ T803] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 132.872612][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.885158][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.914035][ T803] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.949248][ T803] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.994548][ T803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.036187][ T803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 133.076878][ T803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 133.115517][ T803] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.139836][ T803] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.165597][ T803] usb 3-1: Product: syz [ 133.175441][ T803] usb 3-1: Manufacturer: syz [ 133.220601][ T803] cdc_wdm 3-1:1.0: skipping garbage [ 133.243087][ T803] cdc_wdm 3-1:1.0: skipping garbage [ 133.292849][ T803] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 133.319789][ T803] cdc_wdm 3-1:1.0: Unknown control protocol [ 133.564199][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 133.568169][ T5893] usb 3-1: USB disconnect, device number 20 [ 133.571869][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 133.585465][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 133.595823][ T6803] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 133.634969][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.277872][ T6806] binder: 6805:6806 ioctl c0306201 200000000180 returned -14 [ 134.299778][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.306603][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.817173][ T6824] ubi31: attaching mtd0 [ 135.844248][ T6824] ubi31: scanning is finished [ 135.849517][ T6824] ubi31: empty MTD device detected [ 136.531904][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.531969][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.541013][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.547873][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.612229][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.707484][ T6824] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 137.190660][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 137.230997][ T5837] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 137.340182][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 137.423750][ T5837] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.441675][ T5837] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 137.486875][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.501874][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 137.517655][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.534208][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 137.558631][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 137.576533][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 137.589351][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.604245][ T5837] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.615731][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.636284][ T5893] usb 4-1: config 0 descriptor?? [ 137.649818][ T5837] usb 2-1: Product: syz [ 137.668556][ T5837] usb 2-1: Manufacturer: syz [ 137.695976][ T5837] cdc_wdm 2-1:1.0: skipping garbage [ 137.717388][ T5837] cdc_wdm 2-1:1.0: skipping garbage [ 137.762207][ T5837] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 137.779725][ T5837] cdc_wdm 2-1:1.0: Unknown control protocol [ 138.047035][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.054305][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.062091][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.070038][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.081169][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.088943][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.096818][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.105946][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.117340][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.125436][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.133147][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.141148][ T5893] hid_parser_main: 4007 callbacks suppressed [ 138.141171][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.142020][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.142332][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.173337][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.181452][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.185606][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.192302][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.199109][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.201694][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 138.228595][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 138.240615][ T24] usb 2-1: USB disconnect, device number 21 [ 138.248346][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 138.321451][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.331600][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.349723][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.361043][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.369747][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.379645][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.388523][ T5893] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 138.443743][ T5893] logitech 0003:046D:CA04.0002: hidraw0: USB HID v7f.fd Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 138.471779][ T5893] logitech 0003:046D:CA04.0002: no inputs found [ 138.502408][ T5893] usb 4-1: USB disconnect, device number 18 [ 138.616470][ T6848] fido_id[6848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 138.635411][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.781294][ T6842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.825807][ T6839] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 138.851006][ T6842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.882141][ T6842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.900146][ T6842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.254102][ T6850] : entered promiscuous mode [ 139.576540][ T6863] vivid-000: disconnect [ 139.963576][ T6851] vivid-000: reconnect [ 140.036098][ T5848] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 140.710147][ T6873] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.710215][ T6877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.771402][ T6877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.792916][ T6877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.820072][ T6877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.205127][ T5893] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 141.208936][ T5848] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 141.391654][ T5893] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 141.414506][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.432332][ T5893] usb 2-1: Product: syz [ 141.449784][ T5893] usb 2-1: Manufacturer: syz [ 141.460049][ T5893] usb 2-1: SerialNumber: syz [ 141.476780][ T5893] usb 2-1: config 0 descriptor?? [ 141.889841][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 142.053323][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.076547][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.095012][ T24] usb 3-1: config 0 descriptor?? [ 142.130054][ T24] cp210x 3-1:0.0: cp210x converter detected [ 142.482904][ T6904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.500742][ T6904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.511113][ T5893] usb 2-1: unexpected transceiver, part 0xe2 version 0x1a [ 142.511955][ T6904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.538996][ T6904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.711724][ T5893] usb 2-1: Firmware version (0.0) predates our first public release. [ 142.729795][ T5893] usb 2-1: Please update to version 0.2 or newer [ 142.738033][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 142.747830][ T5893] usb 2-1: atusb_probe: initialization failed, error = -19 [ 142.769565][ T24] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 142.776094][ T5893] usb 2-1: USB disconnect, device number 22 [ 142.855705][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 142.893663][ T24] usb 3-1: USB disconnect, device number 21 [ 142.975547][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.001740][ T24] cp210x 3-1:0.0: device disconnected [ 143.350401][ T6918] fuseblk: Bad value for 'fd' [ 143.585994][ T5848] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 143.781353][ T5900] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 143.819871][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.909812][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 143.939773][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 143.951574][ T5900] usb 3-1: string descriptor 0 read error: -22 [ 143.958450][ T5900] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 143.969296][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.986985][ T5900] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.997747][ T5900] usb 3-1: MIDIStreaming interface descriptor not found [ 144.071662][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 144.084368][ T24] usb 4-1: string descriptor 0 read error: -22 [ 144.091756][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a56, bcdDevice= 0.40 [ 144.102160][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.198824][ T5900] usb 3-1: USB disconnect, device number 22 [ 144.344253][ T6925] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 144.540866][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.579979][ T6939] fuseblk: Bad value for 'fd' [ 144.608439][ T24] hid-corsair-void 0003:1B1C:0A56.0003: collection stack underflow [ 144.618195][ T24] hid-corsair-void 0003:1B1C:0A56.0003: item 0 4 0 12 parsing failed [ 144.629893][ T24] hid-corsair-void 0003:1B1C:0A56.0003: parse failed (reason: -22) [ 144.639150][ T24] hid-corsair-void 0003:1B1C:0A56.0003: probe with driver hid-corsair-void failed with error -22 [ 144.734122][ T5893] usb 4-1: USB disconnect, device number 19 [ 144.799165][ T6947] IPv6: Can't replace route, no match found [ 144.864143][ T5848] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 145.589832][ T5893] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 145.631948][ T6967] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 145.671261][ T6967] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.340892][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 146.355850][ T5893] usb 3-1: string descriptor 0 read error: -22 [ 146.368027][ T5893] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 146.383521][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.468231][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.488297][ T5893] usb 3-1: MIDIStreaming interface descriptor not found [ 147.832739][ T5893] usb 3-1: USB disconnect, device number 23 [ 148.751076][ T803] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 149.086475][ T5848] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 149.180091][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 149.189274][ T803] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.206635][ T803] usb 4-1: config 0 has no interface number 0 [ 149.219766][ T803] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.231459][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.246321][ T803] usb 4-1: Product: syz [ 149.251496][ T803] usb 4-1: Manufacturer: syz [ 149.256415][ T803] usb 4-1: SerialNumber: syz [ 149.268177][ T803] usb 4-1: config 0 descriptor?? [ 149.279535][ T803] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 149.483543][ T803] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 149.502930][ T803] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 149.685231][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.710493][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.728256][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 149.739317][ T803] usb 4-1: USB disconnect, device number 20 [ 149.755271][ T803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 149.786864][ T803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 149.804068][ T803] quatech2 4-1:0.51: device disconnected [ 149.974191][ T5848] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 150.065969][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 151.461651][ T30] audit: type=1800 audit(151.411:3): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.389" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 151.923130][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 152.273042][ T12] smc: removing ib device syz1 [ 152.283973][ T5900] syz1: Port: 1 Link DOWN [ 152.330747][ T12] smbdirect: ib_dev[syz1] removed [ 152.361311][ T803] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 152.450123][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 152.540104][ T803] usb 2-1: Using ep0 maxpacket: 32 [ 152.573862][ T803] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 152.599800][ T803] usb 2-1: config 0 has no interface number 0 [ 152.626386][ T803] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 152.657902][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.689695][ T803] usb 2-1: Product: syz [ 152.694034][ T803] usb 2-1: Manufacturer: syz [ 152.699251][ T803] usb 2-1: SerialNumber: syz [ 152.728647][ T803] usb 2-1: config 0 descriptor?? [ 152.767575][ T803] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.970558][ T803] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.016807][ T803] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 153.170343][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.216351][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.234905][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.248212][ T803] usb 2-1: USB disconnect, device number 23 [ 153.322596][ T803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.397566][ T803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 153.456338][ T803] quatech2 2-1:0.51: device disconnected [ 153.587206][ T1152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.708134][ T1152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.826001][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.842655][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.867117][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.881094][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.883733][ T1152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.904396][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.912516][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.151901][ T1152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.507400][ T7095] chnl_net:caif_netlink_parms(): no params data found [ 154.820347][ T1152] bridge_slave_1: left allmulticast mode [ 154.841482][ T1152] bridge_slave_1: left promiscuous mode [ 154.856807][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.921741][ T1152] bridge_slave_0: left allmulticast mode [ 154.935050][ T1152] bridge_slave_0: left promiscuous mode [ 154.949872][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.283061][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.306147][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.325459][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.335844][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.344077][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.543771][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.565620][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.586400][ T1152] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 155.602488][ T1152] bond0 (unregistering): Released all slaves [ 155.680822][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.718863][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.737976][ T7095] bridge_slave_0: entered allmulticast mode [ 155.771040][ T7095] bridge_slave_0: entered promiscuous mode [ 155.808741][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.827779][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.839993][ T7095] bridge_slave_1: entered allmulticast mode [ 155.861306][ T7095] bridge_slave_1: entered promiscuous mode [ 155.979783][ T5847] Bluetooth: hci1: command tx timeout [ 156.123243][ T7095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.209451][ T7095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.375768][ T7095] team0: Port device team_slave_0 added [ 156.400793][ T7095] team0: Port device team_slave_1 added [ 156.524922][ T1152] hsr_slave_0: left promiscuous mode [ 156.534769][ T1152] hsr_slave_1: left promiscuous mode [ 156.542905][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.555667][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.569210][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.587745][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.612220][ T1152] veth1_macvtap: left promiscuous mode [ 156.628069][ T1152] veth0_macvtap: left promiscuous mode [ 156.634904][ T1152] veth1_vlan: left promiscuous mode [ 156.640918][ T1152] veth0_vlan: left promiscuous mode [ 156.908789][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 156.927803][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 157.068690][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.077588][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.112447][ T7095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.161643][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.170111][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.209912][ T7095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.393209][ T7095] hsr_slave_0: entered promiscuous mode [ 157.402716][ T7095] hsr_slave_1: entered promiscuous mode [ 157.412876][ T7095] debugfs: 'hsr0' already exists in 'hsr' [ 157.419965][ T7095] Cannot create hsr debugfs directory [ 157.419965][ T5847] Bluetooth: hci2: command tx timeout [ 157.860210][ T1152] IPVS: stop unused estimator thread 0... [ 158.070174][ T5847] Bluetooth: hci1: command tx timeout [ 158.160175][ T7119] chnl_net:caif_netlink_parms(): no params data found [ 158.586493][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.605369][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.620581][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.638810][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.653067][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.744414][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.899259][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.917909][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.930352][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.942167][ T7119] bridge_slave_0: entered allmulticast mode [ 158.955113][ T7119] bridge_slave_0: entered promiscuous mode [ 158.997543][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.030705][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.042717][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.053724][ T7119] bridge_slave_1: entered allmulticast mode [ 159.065258][ T7119] bridge_slave_1: entered promiscuous mode [ 159.130599][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.223397][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.283642][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.336126][ T7095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.387852][ T7095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.431528][ T7119] team0: Port device team_slave_0 added [ 159.449483][ T7095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.482935][ T7119] team0: Port device team_slave_1 added [ 159.492151][ T7095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.510187][ T5847] Bluetooth: hci2: command tx timeout [ 159.616796][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.630279][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.665730][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.729460][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.747661][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.779094][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.940086][ T7119] hsr_slave_0: entered promiscuous mode [ 159.949821][ T7119] hsr_slave_1: entered promiscuous mode [ 159.958594][ T7119] debugfs: 'hsr0' already exists in 'hsr' [ 159.965364][ T7119] Cannot create hsr debugfs directory [ 160.034216][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.101203][ T7165] chnl_net:caif_netlink_parms(): no params data found [ 160.139792][ T5847] Bluetooth: hci1: command tx timeout [ 160.178348][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.283281][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.348650][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.357060][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.366903][ T7165] bridge_slave_0: entered allmulticast mode [ 160.375318][ T7165] bridge_slave_0: entered promiscuous mode [ 160.422090][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.433156][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.441626][ T7165] bridge_slave_1: entered allmulticast mode [ 160.449784][ T7165] bridge_slave_1: entered promiscuous mode [ 160.489942][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.559963][ T7165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.578231][ T7165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.652875][ T7165] team0: Port device team_slave_0 added [ 160.664413][ T7165] team0: Port device team_slave_1 added [ 160.699870][ T5847] Bluetooth: hci0: command tx timeout [ 160.768215][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.776302][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.816597][ T7165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.832795][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.842919][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.877022][ T7165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.054796][ T7119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.130944][ T7119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.150921][ T7119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.208514][ T7119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.273443][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.291090][ T7165] hsr_slave_0: entered promiscuous mode [ 161.299421][ T7165] hsr_slave_1: entered promiscuous mode [ 161.308985][ T7165] debugfs: 'hsr0' already exists in 'hsr' [ 161.316286][ T7165] Cannot create hsr debugfs directory [ 161.338434][ T1152] bridge_slave_1: left allmulticast mode [ 161.346908][ T1152] bridge_slave_1: left promiscuous mode [ 161.355917][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.371364][ T1152] bridge_slave_0: left allmulticast mode [ 161.377600][ T1152] bridge_slave_0: left promiscuous mode [ 161.386259][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.404524][ T1152] bridge_slave_1: left allmulticast mode [ 161.410916][ T1152] bridge_slave_1: left promiscuous mode [ 161.419539][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.433424][ T1152] bridge_slave_0: left allmulticast mode [ 161.440497][ T1152] bridge_slave_0: left promiscuous mode [ 161.446587][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.590309][ T5847] Bluetooth: hci2: command tx timeout [ 161.648358][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.662038][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.678761][ T1152] bond0 (unregistering): Released all slaves [ 161.882502][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.903896][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.926806][ T1152] bond0 (unregistering): Released all slaves [ 162.215758][ T1152] tipc: Disabling bearer [ 162.227665][ T5847] Bluetooth: hci1: command tx timeout [ 162.248672][ T1152] tipc: Left network mode [ 162.279300][ T7095] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.429911][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.438213][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.553635][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.563965][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.779778][ T5847] Bluetooth: hci0: command tx timeout [ 163.697757][ T5847] Bluetooth: hci2: command tx timeout [ 164.033199][ T1152] hsr_slave_0: left promiscuous mode [ 164.065663][ T1152] hsr_slave_1: left promiscuous mode [ 164.076665][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.091449][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.121838][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.132349][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.158295][ T1152] hsr_slave_0: left promiscuous mode [ 164.168801][ T1152] hsr_slave_1: left promiscuous mode [ 164.177136][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.185768][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.196751][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.207695][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.228581][ T1152] veth1_macvtap: left promiscuous mode [ 164.236618][ T1152] veth0_macvtap: left promiscuous mode [ 164.243038][ T1152] veth1_vlan: left promiscuous mode [ 164.250095][ T1152] veth0_vlan: left promiscuous mode [ 164.257241][ T1152] veth1_macvtap: left promiscuous mode [ 164.264794][ T1152] veth0_macvtap: left promiscuous mode [ 164.273242][ T1152] veth1_vlan: left promiscuous mode [ 164.280112][ T1152] veth0_vlan: left promiscuous mode [ 164.548566][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 164.568534][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 164.831662][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 164.847917][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 164.860197][ T5847] Bluetooth: hci0: command tx timeout [ 165.089376][ T7165] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.119238][ T7165] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.156494][ T7165] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.196516][ T7165] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.348828][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.446881][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.523820][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.532807][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.578756][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.586043][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.686063][ T7095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.915142][ T1152] IPVS: stop unused estimator thread 0... [ 165.945387][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.042316][ T7165] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.085490][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.093112][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.152803][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.162258][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.375712][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.561557][ T7095] veth0_vlan: entered promiscuous mode [ 166.618163][ T7095] veth1_vlan: entered promiscuous mode [ 166.751919][ T7095] veth0_macvtap: entered promiscuous mode [ 166.786757][ T7095] veth1_macvtap: entered promiscuous mode [ 166.866896][ T7095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.895428][ T7165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.935436][ T7095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.940090][ T5847] Bluetooth: hci0: command tx timeout [ 166.963373][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.975577][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.008926][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.041354][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.277080][ T7119] veth0_vlan: entered promiscuous mode [ 167.338557][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.363937][ T7119] veth1_vlan: entered promiscuous mode [ 167.382634][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.537410][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.565018][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.631793][ T7119] veth0_macvtap: entered promiscuous mode [ 167.676767][ T7119] veth1_macvtap: entered promiscuous mode [ 167.811900][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.831366][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.926787][ T7165] veth0_vlan: entered promiscuous mode [ 167.946682][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.970208][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.992337][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.002348][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.115791][ T7325] tipc: Started in network mode [ 168.133082][ T7325] tipc: Node identity d67ad790ed84, cluster identity 4711 [ 168.151910][ T7325] tipc: Enabled bearer , priority 0 [ 168.303041][ T7329] syzkaller0: entered promiscuous mode [ 168.317932][ T7329] syzkaller0: entered allmulticast mode [ 168.329813][ T7329] tipc: Resetting bearer [ 168.337771][ T7165] veth1_vlan: entered promiscuous mode [ 168.422176][ T7324] tipc: Resetting bearer [ 168.864080][ T7351] 9p: Bad value for 'rfdno' [ 170.948198][ T5847] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 171.318217][ T7324] tipc: Disabling bearer [ 171.335306][ T5893] tipc: Node number set to 1006557072 [ 171.493747][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.503796][ T7165] veth0_macvtap: entered promiscuous mode [ 171.517224][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.588650][ T7165] veth1_macvtap: entered promiscuous mode [ 171.631477][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.641014][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.699464][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.742638][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.786123][ T1114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.822757][ T1114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.847762][ T1114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.890611][ T1114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.251425][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.273453][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.386158][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.410978][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.214363][ T7428] tipc: Started in network mode [ 173.227669][ T7428] tipc: Node identity a62292ce1d91, cluster identity 4711 [ 173.236658][ T7428] tipc: Enabled bearer , priority 0 [ 173.317174][ T7437] netlink: 108 bytes leftover after parsing attributes in process `syz.0.458'. [ 173.409150][ T7428] syzkaller0: entered promiscuous mode [ 173.414950][ T7428] syzkaller0: entered allmulticast mode [ 173.424415][ T7428] tipc: Resetting bearer [ 173.450118][ T5893] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.565337][ T13] tipc: Resetting bearer [ 173.573668][ T7427] tipc: Resetting bearer [ 173.622585][ T5893] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 173.633062][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.652129][ T5893] usb 5-1: config 0 descriptor?? [ 173.670932][ T5893] cp210x 5-1:0.0: cp210x converter detected [ 174.424289][ T5893] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 174.526692][ T5893] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 174.625209][ T5893] usb 5-1: cp210x converter now attached to ttyUSB0 [ 174.685181][ T5893] usb 5-1: USB disconnect, device number 2 [ 174.761523][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 174.793340][ T5893] cp210x 5-1:0.0: device disconnected [ 174.839343][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 175.022207][ T5847] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 175.031374][ T5847] Bluetooth: hci3: Injecting HCI hardware error event [ 175.049085][ T5847] Bluetooth: hci3: hardware error 0x00 [ 175.230039][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 176.131546][ T5834] IPVS: starting estimator thread 0... [ 176.339949][ T7482] IPVS: using max 35 ests per chain, 84000 per kthread [ 176.939725][ T5893] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 177.069793][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 177.102350][ T5847] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 177.124986][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 177.136266][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 177.147840][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 116, changing to 4 [ 177.160298][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 29801, setting to 1023 [ 177.174648][ T5893] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 177.184913][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.193060][ T5893] usb 5-1: Product: syz [ 177.197254][ T5893] usb 5-1: Manufacturer: syz [ 177.202150][ T5893] usb 5-1: SerialNumber: syz [ 177.212217][ T5893] usb 5-1: config 0 descriptor?? [ 177.221276][ T7489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.241680][ T5893] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 177.251914][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.269890][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.298066][ T10] usb 7-1: config 0 descriptor?? [ 177.320139][ T10] cp210x 7-1:0.0: cp210x converter detected [ 177.439395][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 177.461960][ T5893] usb 5-1: USB disconnect, device number 3 [ 177.536722][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 177.736317][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 177.747198][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 177.756392][ T24] usb 7-1: USB disconnect, device number 2 [ 177.775610][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 177.789819][ T24] cp210x 7-1:0.0: device disconnected [ 180.695264][ T7427] tipc: Disabling bearer [ 180.722533][ T5886] tipc: Node number set to 3149107918 [ 181.290699][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 181.414127][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 181.429699][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 181.551451][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.595091][ T5834] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.604751][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.636640][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 181.832301][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.859072][ T5834] usb 5-1: config 0 descriptor?? [ 181.882516][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.940552][ T24] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 181.954970][ T5834] cp210x 5-1:0.0: cp210x converter detected [ 181.973194][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.082725][ T24] usb 6-1: config 0 descriptor?? [ 182.210717][ T5834] usb 5-1: cp210x converter now attached to ttyUSB0 [ 182.412498][ T5834] usb 5-1: USB disconnect, device number 4 [ 182.427134][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.437524][ T5834] cp210x 5-1:0.0: device disconnected [ 182.546472][ T24] hid_parser_main: 222 callbacks suppressed [ 182.546492][ T24] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 182.565936][ T24] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 182.582077][ T24] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 182.592722][ T24] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 182.600785][ T24] stadia 0003:18D1:9400.0004: unknown main item tag 0x0 [ 182.634030][ T24] stadia 0003:18D1:9400.0004: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.5-1/input0 [ 182.646619][ T24] stadia 0003:18D1:9400.0004: no inputs found [ 182.653479][ T24] stadia 0003:18D1:9400.0004: force feedback init failed [ 182.770199][ T24] usb 6-1: USB disconnect, device number 2 [ 184.686762][ T7637] process 'syz.0.515' launched './file0' with NULL argv: empty string added [ 186.300916][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.531224][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.553663][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.568256][ T24] usb 5-1: config 0 descriptor?? [ 186.580867][ T24] cp210x 5-1:0.0: cp210x converter detected [ 186.796866][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 186.985700][ T5886] usb 5-1: USB disconnect, device number 5 [ 187.004432][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.019092][ T5886] cp210x 5-1:0.0: device disconnected [ 187.160030][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 187.381830][ T5847] Bluetooth: hci0: unexpected subevent 0x0a length: 27 < 30 [ 188.893082][ T7702] overlayfs: failed to resolve './file0': -2 [ 189.291302][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.535'. [ 192.153386][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.329750][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 192.336618][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.348551][ T5900] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.357807][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.368498][ T5900] usb 5-1: config 0 descriptor?? [ 192.421402][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 192.489713][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 192.539773][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 192.587572][ T5900] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.652045][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 192.663198][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.677214][ T24] usb 6-1: config 0 descriptor?? [ 192.711315][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 192.718320][ T10] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 192.728997][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 192.740958][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 192.751192][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 192.762708][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 192.773294][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.797768][ T5900] usb 5-1: USB disconnect, device number 6 [ 192.806084][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.824640][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.959851][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 193.055772][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 193.066423][ T10] usbtmc 7-1:16.0: can't read capabilities [ 193.109128][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.116599][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.125425][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.134164][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.141641][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.149382][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.159007][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.169147][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.178896][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.188365][ T24] asus 0003:0C45:5112.0005: unknown main item tag 0x0 [ 193.204449][ T24] asus 0003:0C45:5112.0005: hidraw0: USB HID v7f.fd Device [HID 0c45:5112] on usb-dummy_hcd.5-1/input0 [ 193.216860][ T24] asus 0003:0C45:5112.0005: Asus input not registered [ 193.231894][ T24] asus 0003:0C45:5112.0005: probe with driver asus failed with error -12 [ 193.279136][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 193.291607][ T7745] usbtmc 7-1:16.0: Unable to send data, error -71 [ 193.305675][ T24] usb 6-1: USB disconnect, device number 3 [ 193.348553][ T7574] usb 7-1: USB disconnect, device number 3 [ 193.942584][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.131701][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.232862][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.563'. [ 194.311932][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326841][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.448247][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.521330][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.532783][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.544127][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.555892][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.564039][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.665981][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.793290][ T1159] bridge_slave_1: left allmulticast mode [ 195.807856][ T1159] bridge_slave_1: left promiscuous mode [ 195.819507][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.848074][ T1159] bridge_slave_0: left allmulticast mode [ 195.875780][ T1159] bridge_slave_0: left promiscuous mode [ 195.892180][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.039469][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.054970][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.065717][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.073796][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.086637][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.134958][ T7574] kernel read not supported for file /dsp1 (pid: 7574 comm: kworker/1:6) [ 196.388219][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.419178][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.431571][ T1159] bond0 (unregistering): Released all slaves [ 196.619808][ T5848] Bluetooth: hci1: command tx timeout [ 197.140652][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 197.155173][ T1159] tipc: Left network mode [ 198.142380][ T5848] Bluetooth: hci2: command tx timeout [ 198.272073][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.287301][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.302682][ T7792] bridge_slave_0: entered allmulticast mode [ 198.320773][ T7792] bridge_slave_0: entered promiscuous mode [ 198.391711][ T1159] hsr_slave_0: left promiscuous mode [ 198.416999][ T1159] hsr_slave_1: left promiscuous mode [ 198.426821][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.441282][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.470410][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.489801][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.522550][ T1159] veth1_macvtap: left promiscuous mode [ 198.539242][ T1159] veth0_macvtap: left promiscuous mode [ 198.553268][ T1159] veth1_vlan: left promiscuous mode [ 198.569172][ T1159] veth0_vlan: left promiscuous mode [ 198.709830][ T5848] Bluetooth: hci1: command tx timeout [ 199.024841][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 199.250290][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 199.529550][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.537170][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.545024][ T7792] bridge_slave_1: entered allmulticast mode [ 199.556752][ T7792] bridge_slave_1: entered promiscuous mode [ 199.600222][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 199.775634][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.807258][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.988849][ T7792] team0: Port device team_slave_0 added [ 200.116049][ T7792] team0: Port device team_slave_1 added [ 200.222123][ T5848] Bluetooth: hci2: command tx timeout [ 200.273328][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.593'. [ 200.291285][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.306375][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.341405][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.353162][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.362406][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.370127][ T7817] bridge_slave_0: entered allmulticast mode [ 200.378929][ T7817] bridge_slave_0: entered promiscuous mode [ 200.404585][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.427021][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.472023][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.483657][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.494918][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.502551][ T7817] bridge_slave_1: entered allmulticast mode [ 200.517227][ T7817] bridge_slave_1: entered promiscuous mode [ 200.710649][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.752267][ T7792] hsr_slave_0: entered promiscuous mode [ 200.765098][ T7792] hsr_slave_1: entered promiscuous mode [ 200.778091][ T7792] debugfs: 'hsr0' already exists in 'hsr' [ 200.785960][ T5847] Bluetooth: hci1: command tx timeout [ 200.796603][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.814204][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.826755][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.834232][ T7792] Cannot create hsr debugfs directory [ 200.841301][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.850005][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.913620][ T1159] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.941601][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.065420][ T1159] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.091607][ T7817] team0: Port device team_slave_0 added [ 201.142148][ T7817] team0: Port device team_slave_1 added [ 201.180581][ T1159] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.253149][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.260663][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.287969][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.338586][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.346834][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.375028][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.425317][ T1159] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.655039][ T7817] hsr_slave_0: entered promiscuous mode [ 201.662308][ T7817] hsr_slave_1: entered promiscuous mode [ 201.669203][ T7817] debugfs: 'hsr0' already exists in 'hsr' [ 201.675710][ T7817] Cannot create hsr debugfs directory [ 202.188194][ T1159] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.302079][ T5847] Bluetooth: hci2: command tx timeout [ 202.314499][ T7792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.344685][ T7792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.362945][ T7792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.483285][ T1159] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.507799][ T7792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.859767][ T5847] Bluetooth: hci1: command tx timeout [ 202.943002][ T5847] Bluetooth: hci0: command tx timeout [ 203.016343][ T1159] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.035258][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 203.112334][ T1159] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.441104][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.449128][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.457110][ T7922] bridge_slave_0: entered allmulticast mode [ 203.466239][ T7922] bridge_slave_0: entered promiscuous mode [ 203.477518][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.485427][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.493231][ T7922] bridge_slave_1: entered allmulticast mode [ 203.509144][ T7922] bridge_slave_1: entered promiscuous mode [ 203.614658][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.676285][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.708724][ T7817] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 203.753695][ T7922] team0: Port device team_slave_0 added [ 203.759357][ T7817] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 203.773520][ T7817] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 203.792890][ T7922] team0: Port device team_slave_1 added [ 203.830757][ T7817] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 203.958667][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.965876][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.993410][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.012977][ T1159] bridge_slave_1: left allmulticast mode [ 204.020416][ T1159] bridge_slave_1: left promiscuous mode [ 204.027513][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.039261][ T1159] bridge_slave_0: left allmulticast mode [ 204.045203][ T1159] bridge_slave_0: left promiscuous mode [ 204.053859][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.069107][ T1159] bridge_slave_1: left allmulticast mode [ 204.077775][ T1159] bridge_slave_1: left promiscuous mode [ 204.086150][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.099210][ T1159] bridge_slave_0: left allmulticast mode [ 204.108095][ T1159] bridge_slave_0: left promiscuous mode [ 204.114389][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.326285][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.336950][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.347078][ T1159] bond0 (unregistering): Released all slaves [ 204.379702][ T5847] Bluetooth: hci2: command tx timeout [ 204.498991][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.512193][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.522053][ T1159] bond0 (unregistering): Released all slaves [ 204.535021][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.545549][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.572207][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.728337][ T1159] tipc: Left network mode [ 204.874413][ T7922] hsr_slave_0: entered promiscuous mode [ 204.894703][ T7922] hsr_slave_1: entered promiscuous mode [ 204.921437][ T7922] debugfs: 'hsr0' already exists in 'hsr' [ 204.927225][ T7922] Cannot create hsr debugfs directory [ 205.020170][ T5847] Bluetooth: hci0: command tx timeout [ 205.040830][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.238727][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.326407][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.333829][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.385313][ T1159] hsr_slave_0: left promiscuous mode [ 205.392255][ T1159] hsr_slave_1: left promiscuous mode [ 205.398205][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.406016][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.414349][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.422117][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.433957][ T1159] hsr_slave_0: left promiscuous mode [ 205.440124][ T1159] hsr_slave_1: left promiscuous mode [ 205.445960][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.453573][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.461942][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.469336][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.485300][ T1159] veth1_macvtap: left promiscuous mode [ 205.490966][ T1159] veth0_macvtap: left promiscuous mode [ 205.496993][ T1159] veth1_vlan: left promiscuous mode [ 205.504227][ T1159] veth0_vlan: left promiscuous mode [ 205.512446][ T1159] veth1_macvtap: left promiscuous mode [ 205.517975][ T1159] veth0_macvtap: left promiscuous mode [ 205.524136][ T1159] veth1_vlan: left promiscuous mode [ 205.531063][ T1159] veth0_vlan: left promiscuous mode [ 205.768582][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 205.782190][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 205.995045][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 206.008483][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 206.158821][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.165992][ T7646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.377121][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.531007][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.638696][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.645927][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.673537][ T7922] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 206.710931][ T7922] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 206.772724][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.779931][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.817952][ T7922] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 206.858834][ T7922] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 207.004977][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.100984][ T5847] Bluetooth: hci0: command tx timeout [ 207.244776][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.330691][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.372240][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.379455][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.411076][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.418294][ T7646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.582290][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.606017][ T7792] veth0_vlan: entered promiscuous mode [ 207.664395][ T7792] veth1_vlan: entered promiscuous mode [ 207.771434][ T7792] veth0_macvtap: entered promiscuous mode [ 207.804292][ T7792] veth1_macvtap: entered promiscuous mode [ 207.872155][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.901284][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.938440][ T7646] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.963202][ T7646] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.976577][ T7646] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.986760][ T7646] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.145221][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.197809][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.225695][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.347004][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.370442][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.378979][ T7817] veth0_vlan: entered promiscuous mode [ 208.418718][ T7817] veth1_vlan: entered promiscuous mode [ 208.564616][ T7817] veth0_macvtap: entered promiscuous mode [ 208.600446][ T7817] veth1_macvtap: entered promiscuous mode [ 208.807551][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.868080][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.912551][ T1152] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.937887][ T1152] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.975978][ T1152] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.996850][ T1152] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.179895][ T5847] Bluetooth: hci0: command tx timeout [ 209.267407][ T7922] veth0_vlan: entered promiscuous mode [ 209.339165][ T7922] veth1_vlan: entered promiscuous mode [ 209.349463][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.361914][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.928540][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.958884][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.062635][ T7922] veth0_macvtap: entered promiscuous mode [ 210.087360][ T7922] veth1_macvtap: entered promiscuous mode [ 210.182674][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.251424][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.295917][ T399] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.335740][ T399] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.391476][ T399] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.424126][ T399] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.685288][ T8168] syzkaller1: entered promiscuous mode [ 210.701318][ T8168] syzkaller1: entered allmulticast mode [ 210.801704][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.922393][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.492597][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.501831][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.928668][ T8205] binder: 8203:8205 ioctl 4018620d 0 returned -22 [ 214.261534][ T8232] ------------[ cut here ]------------ [ 214.267362][ T8232] !valid_signal(sig) [ 214.267383][ T8232] WARNING: kernel/signal.c:2174 at do_notify_parent+0xd18/0xe30, CPU#0: syz.9.631/8232 [ 214.281105][ T8232] Modules linked in: [ 214.285278][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.9.631 Not tainted syzkaller #0 PREEMPT(full) [ 214.294466][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.304517][ T8232] RIP: 0010:do_notify_parent+0xd18/0xe30 [ 214.310152][ T8232] Code: c6 05 18 08 b2 0e 01 48 c7 c7 80 4c eb 8b be a3 08 00 00 48 c7 c2 00 4e eb 8b e8 93 6e 17 00 e9 2e fa ff ff e8 19 1e 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 08 1e 3b 00 90 0f 0b 90 e9 db [ 214.330276][ T8232] RSP: 0018:ffffc9000406fc40 EFLAGS: 00010093 [ 214.336342][ T8232] RAX: ffffffff818bc007 RBX: dffffc0000000000 RCX: ffff888029910000 [ 214.344301][ T8232] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 214.352259][ T8232] RBP: ffffc9000406fd90 R08: 0000000000000003 R09: 0000000000000004 [ 214.360223][ T8232] R10: dffffc0000000000 R11: fffff5200080dfa4 R12: ffff88803451cfd0 [ 214.368185][ T8232] R13: ffff888029910000 R14: 0000000000000080 R15: 1ffff9200080df90 [ 214.376144][ T8232] FS: 0000000000000000(0000) GS:ffff888124de6000(0000) knlGS:0000000000000000 [ 214.385062][ T8232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.391640][ T8232] CR2: 00007fc65f1e9078 CR3: 000000003317a000 CR4: 00000000003526f0 [ 214.399606][ T8232] Call Trace: [ 214.402873][ T8232] [ 214.405794][ T8232] ? __pfx_do_notify_parent+0x10/0x10 [ 214.411167][ T8232] ? do_raw_write_lock+0x11d/0x260 [ 214.416273][ T8232] ? __pfx_do_raw_write_lock+0x10/0x10 [ 214.421831][ T8232] ? kill_orphaned_pgrp+0x170/0x610 [ 214.427023][ T8232] do_exit+0x15b3/0x2580 [ 214.431259][ T8232] ? __pfx_do_exit+0x10/0x10 [ 214.435838][ T8232] ? rcu_is_watching+0x15/0xb0 [ 214.440598][ T8232] __x64_sys_exit+0x40/0x40 [ 214.445088][ T8232] x64_sys_call+0x2231/0x2240 [ 214.449747][ T8232] do_syscall_64+0x14d/0xf80 [ 214.454338][ T8232] ? trace_irq_disable+0x3b/0x150 [ 214.459362][ T8232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.465429][ T8232] ? clear_bhb_loop+0x40/0x90 [ 214.470111][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.475997][ T8232] RIP: 0033:0x7f663619c799 [ 214.480414][ T8232] Code: Unable to access opcode bytes at 0x7f663619c76f. [ 214.487419][ T8232] RSP: 002b:00007f6637095fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 214.495922][ T8232] RAX: ffffffffffffffda RBX: 00007f6636415fa0 RCX: 00007f663619c799 [ 214.504067][ T8232] RDX: 00007f66370969c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.512035][ T8232] RBP: 00007f6636232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 214.520113][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.528100][ T8232] R13: 00007f6636416038 R14: 00007f6636415fa0 R15: 00007ffdfd42f848 [ 214.536205][ T8232] [ 214.539226][ T8232] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.546490][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.9.631 Not tainted syzkaller #0 PREEMPT(full) [ 214.556204][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.566257][ T8232] Call Trace: [ 214.569531][ T8232] [ 214.572453][ T8232] vpanic+0x56c/0xa60 [ 214.576433][ T8232] ? __pfx__printk+0x10/0x10 [ 214.581014][ T8232] ? __pfx_vpanic+0x10/0x10 [ 214.585504][ T8232] ? is_bpf_text_address+0x292/0x2b0 [ 214.590782][ T8232] ? is_bpf_text_address+0x26/0x2b0 [ 214.595972][ T8232] panic+0xc5/0xd0 [ 214.599680][ T8232] ? __pfx_panic+0x10/0x10 [ 214.604088][ T8232] __warn+0x315/0x4f0 [ 214.608055][ T8232] ? do_notify_parent+0xd18/0xe30 [ 214.613163][ T8232] ? do_notify_parent+0xd18/0xe30 [ 214.618182][ T8232] __report_bug+0x29a/0x540 [ 214.622680][ T8232] ? do_notify_parent+0xd18/0xe30 [ 214.627697][ T8232] ? __pfx___report_bug+0x10/0x10 [ 214.632800][ T8232] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 214.638233][ T8232] ? __lock_acquire+0x6b5/0x2cf0 [ 214.643168][ T8232] ? do_notify_parent+0xd18/0xe30 [ 214.648203][ T8232] report_bug+0x16a/0x220 [ 214.652526][ T8232] ? do_notify_parent+0xd18/0xe30 [ 214.657542][ T8232] ? do_notify_parent+0xd1a/0xe30 [ 214.662556][ T8232] handle_bug+0x9c/0x200 [ 214.666788][ T8232] exc_invalid_op+0x1a/0x50 [ 214.671282][ T8232] asm_exc_invalid_op+0x1a/0x20 [ 214.676126][ T8232] RIP: 0010:do_notify_parent+0xd18/0xe30 [ 214.681750][ T8232] Code: c6 05 18 08 b2 0e 01 48 c7 c7 80 4c eb 8b be a3 08 00 00 48 c7 c2 00 4e eb 8b e8 93 6e 17 00 e9 2e fa ff ff e8 19 1e 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 08 1e 3b 00 90 0f 0b 90 e9 db [ 214.701345][ T8232] RSP: 0018:ffffc9000406fc40 EFLAGS: 00010093 [ 214.707398][ T8232] RAX: ffffffff818bc007 RBX: dffffc0000000000 RCX: ffff888029910000 [ 214.715351][ T8232] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 214.723308][ T8232] RBP: ffffc9000406fd90 R08: 0000000000000003 R09: 0000000000000004 [ 214.731352][ T8232] R10: dffffc0000000000 R11: fffff5200080dfa4 R12: ffff88803451cfd0 [ 214.739313][ T8232] R13: ffff888029910000 R14: 0000000000000080 R15: 1ffff9200080df90 [ 214.747277][ T8232] ? do_notify_parent+0xd17/0xe30 [ 214.752309][ T8232] ? __pfx_do_notify_parent+0x10/0x10 [ 214.757672][ T8232] ? do_raw_write_lock+0x11d/0x260 [ 214.762775][ T8232] ? __pfx_do_raw_write_lock+0x10/0x10 [ 214.768224][ T8232] ? kill_orphaned_pgrp+0x170/0x610 [ 214.773416][ T8232] do_exit+0x15b3/0x2580 [ 214.777655][ T8232] ? __pfx_do_exit+0x10/0x10 [ 214.782233][ T8232] ? rcu_is_watching+0x15/0xb0 [ 214.787061][ T8232] __x64_sys_exit+0x40/0x40 [ 214.791568][ T8232] x64_sys_call+0x2231/0x2240 [ 214.796232][ T8232] do_syscall_64+0x14d/0xf80 [ 214.800812][ T8232] ? trace_irq_disable+0x3b/0x150 [ 214.805838][ T8232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.811891][ T8232] ? clear_bhb_loop+0x40/0x90 [ 214.816555][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.822439][ T8232] RIP: 0033:0x7f663619c799 [ 214.826852][ T8232] Code: Unable to access opcode bytes at 0x7f663619c76f. [ 214.833853][ T8232] RSP: 002b:00007f6637095fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 214.842251][ T8232] RAX: ffffffffffffffda RBX: 00007f6636415fa0 RCX: 00007f663619c799 [ 214.850209][ T8232] RDX: 00007f66370969c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.858166][ T8232] RBP: 00007f6636232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 214.866125][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.874089][ T8232] R13: 00007f6636416038 R14: 00007f6636415fa0 R15: 00007ffdfd42f848 [ 214.882064][ T8232] [ 214.885621][ T8232] Kernel Offset: disabled [ 214.889975][ T8232] Rebooting in 86400 seconds..