last executing test programs: 6.266632577s ago: executing program 3 (id=268): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x6000001d}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) 6.051564741s ago: executing program 3 (id=269): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x6) 5.902479013s ago: executing program 3 (id=270): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, 0x0, 0x8000, 0x4}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 4.493640897s ago: executing program 0 (id=278): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffc, {0x3}, {0x7}, @raw32={[0x2, 0x0, 0x800]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfc, 0x4}, {}, @control={0x7, 0x8, 0x3}}, {0x6, 0x3, 0x9, 0x3, @time={0x2, 0x7}, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}], 0x54) close_range(r0, 0xffffffffffffffff, 0x0) 4.250242995s ago: executing program 0 (id=280): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a000002"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.808798996s ago: executing program 1 (id=283): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x7, 0x257f, 0x5}, 'syz0\x00', 0x36}) ioctl$UI_DEV_CREATE(r0, 0x5501) clock_gettime(0x4, &(0x7f0000000200)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000180)={{r1, r2/1000+60000}, 0x3, 0x200, 0x9}, 0x18) 3.772456094s ago: executing program 0 (id=284): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) r2 = socket$igmp6(0xa, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000300)={0x10000000}) 3.357082685s ago: executing program 0 (id=286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x304, 0x38}, "9127757f8bfee017", "00000c70423a000000000000ffff00", "ec69d337", "f16b2caff88d87e0"}, 0x28) 3.328081819s ago: executing program 1 (id=287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x1f, 0x0}) 2.966473499s ago: executing program 2 (id=288): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000780)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r2}, &(0x7f0000000000)=0x8) 2.920481574s ago: executing program 1 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 2.694690793s ago: executing program 2 (id=290): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x4111, 0x0, 0x88, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000b40)='environ\x00') 2.641973143s ago: executing program 1 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @msi={0xf0dd, 0x1, 0xffffffff, 0x815e}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000480)={0x3, 0x48b}) 2.431384898s ago: executing program 0 (id=292): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0xec3, 0xfdffffffffffb5b2, 0x3a8e5b6e, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x78) 2.284235639s ago: executing program 1 (id=293): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 2.276144439s ago: executing program 2 (id=294): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 1.348272497s ago: executing program 2 (id=295): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x1, 0x7, 0x1, r2}, 0x10) 965.910289ms ago: executing program 2 (id=296): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 622.011484ms ago: executing program 2 (id=297): ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000180)={{@my=0x1, 0x9}, 0x9, 0xff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 0s ago: executing program 1 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14, 0xffff}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @private=0xa010101, {0x16, 0x4, 0x2, 0x10, 0x2, 0x68, 0xff, 0x7, 0x2f, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0x5, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x1}]}, @generic={0x80, 0xe, "1025c07c16c61c92654dbef6"}, @rr={0x7, 0x13, 0xcd, [@broadcast, @loopback, @rand_addr=0x4, @broadcast]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @ssrr={0x89, 0x7, 0xdb, [@local]}]}}}}}, 0x82) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 102.227272][ T9] cfg80211: failed to load regulatory.db [ 107.432458][ T5807] cgroup: Unknown subsys name 'net' [ 107.575645][ T5807] cgroup: Unknown subsys name 'cpuset' [ 107.587056][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 109.929222][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.848774][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.862048][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.870023][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.889957][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.898851][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.915067][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.925122][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.934823][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.943228][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.953840][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.960815][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.966052][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.973410][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.981581][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.994557][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.004892][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.006669][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.018230][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.028051][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.047412][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.002754][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 115.088131][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 115.215668][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 115.337530][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 115.603950][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.618930][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.629188][ T5831] bridge_slave_0: entered allmulticast mode [ 115.640974][ T5831] bridge_slave_0: entered promiscuous mode [ 115.690596][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.705280][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.717332][ T5821] bridge_slave_0: entered allmulticast mode [ 115.728999][ T5821] bridge_slave_0: entered promiscuous mode [ 115.751009][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.765468][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.778773][ T5831] bridge_slave_1: entered allmulticast mode [ 115.793796][ T5831] bridge_slave_1: entered promiscuous mode [ 115.814298][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.822294][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.833541][ T5822] bridge_slave_0: entered allmulticast mode [ 115.844682][ T5822] bridge_slave_0: entered promiscuous mode [ 115.860976][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.872127][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.883054][ T5822] bridge_slave_1: entered allmulticast mode [ 115.897226][ T5822] bridge_slave_1: entered promiscuous mode [ 115.911889][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.923873][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.933084][ T5821] bridge_slave_1: entered allmulticast mode [ 115.944291][ T5821] bridge_slave_1: entered promiscuous mode [ 116.062635][ T5826] Bluetooth: hci1: command tx timeout [ 116.076905][ T5832] Bluetooth: hci2: command tx timeout [ 116.142619][ T5826] Bluetooth: hci3: command tx timeout [ 116.153126][ T5832] Bluetooth: hci0: command tx timeout [ 116.185964][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.210771][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.225532][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.235201][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.250993][ T5827] bridge_slave_0: entered allmulticast mode [ 116.265078][ T5827] bridge_slave_0: entered promiscuous mode [ 116.325045][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.389399][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.400768][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.411540][ T5827] bridge_slave_1: entered allmulticast mode [ 116.429204][ T5827] bridge_slave_1: entered promiscuous mode [ 116.451059][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.484055][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.582732][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.599402][ T5831] team0: Port device team_slave_0 added [ 116.665959][ T5831] team0: Port device team_slave_1 added [ 116.679392][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.701764][ T5822] team0: Port device team_slave_0 added [ 116.758116][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.796446][ T5822] team0: Port device team_slave_1 added [ 116.809080][ T5821] team0: Port device team_slave_0 added [ 116.823194][ T5821] team0: Port device team_slave_1 added [ 116.922520][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.934177][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.981434][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.001631][ T5827] team0: Port device team_slave_0 added [ 117.047943][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.057222][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.090988][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.109241][ T5827] team0: Port device team_slave_1 added [ 117.154035][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.164728][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.197093][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.219468][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.229699][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.266968][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.319365][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.330137][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.371336][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.403218][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.411640][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.460469][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.485584][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.501443][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.542948][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.567400][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.575674][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.614247][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.767279][ T5822] hsr_slave_0: entered promiscuous mode [ 117.776651][ T5822] hsr_slave_1: entered promiscuous mode [ 117.868778][ T5831] hsr_slave_0: entered promiscuous mode [ 117.878605][ T5831] hsr_slave_1: entered promiscuous mode [ 117.888788][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 117.898195][ T5831] Cannot create hsr debugfs directory [ 117.937253][ T5821] hsr_slave_0: entered promiscuous mode [ 117.952388][ T5821] hsr_slave_1: entered promiscuous mode [ 117.962957][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 117.971325][ T5821] Cannot create hsr debugfs directory [ 118.141474][ T5832] Bluetooth: hci2: command tx timeout [ 118.148797][ T5832] Bluetooth: hci1: command tx timeout [ 118.164555][ T5827] hsr_slave_0: entered promiscuous mode [ 118.179158][ T5827] hsr_slave_1: entered promiscuous mode [ 118.189374][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 118.197572][ T5827] Cannot create hsr debugfs directory [ 118.221629][ T5826] Bluetooth: hci3: command tx timeout [ 118.227986][ T5832] Bluetooth: hci0: command tx timeout [ 119.180717][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.212806][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.234524][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.281580][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.378331][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.402611][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.432817][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.449199][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.612754][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.632142][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.648730][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.660979][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.916904][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.956482][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.974842][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.996637][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.212422][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.221907][ T5826] Bluetooth: hci2: command tx timeout [ 120.232033][ T5832] Bluetooth: hci1: command tx timeout [ 120.245877][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.302045][ T5832] Bluetooth: hci0: command tx timeout [ 120.307000][ T5826] Bluetooth: hci3: command tx timeout [ 120.340163][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.379904][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.399915][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.409820][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.458798][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.467435][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.481841][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.493945][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.564867][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.575381][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.605069][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.726209][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.756531][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.817400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.829325][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.897366][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.905911][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.976327][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.079142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.091373][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.154375][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.166404][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.515228][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.736864][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.825197][ T5822] veth0_vlan: entered promiscuous mode [ 121.926378][ T5822] veth1_vlan: entered promiscuous mode [ 122.201773][ T5831] veth0_vlan: entered promiscuous mode [ 122.243484][ T5822] veth0_macvtap: entered promiscuous mode [ 122.283142][ T5831] veth1_vlan: entered promiscuous mode [ 122.311697][ T5826] Bluetooth: hci1: command tx timeout [ 122.314840][ T5832] Bluetooth: hci2: command tx timeout [ 122.354007][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.380384][ T5822] veth1_macvtap: entered promiscuous mode [ 122.389395][ T5832] Bluetooth: hci3: command tx timeout [ 122.390673][ T5826] Bluetooth: hci0: command tx timeout [ 122.468082][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.494702][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.549338][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.599847][ T5831] veth0_macvtap: entered promiscuous mode [ 122.634744][ T1014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.652722][ T1014] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.668897][ T5831] veth1_macvtap: entered promiscuous mode [ 122.689797][ T1014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.702443][ T1014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.865315][ T5827] veth0_vlan: entered promiscuous mode [ 122.896852][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.959229][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.973279][ T5821] veth0_vlan: entered promiscuous mode [ 123.019226][ T5827] veth1_vlan: entered promiscuous mode [ 123.059529][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.072766][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.086204][ T5821] veth1_vlan: entered promiscuous mode [ 123.112906][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.130519][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.147959][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.166828][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.241668][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.259798][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.347399][ T5827] veth0_macvtap: entered promiscuous mode [ 123.418607][ T5827] veth1_macvtap: entered promiscuous mode [ 123.449681][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 123.634087][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.710419][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.721299][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.725243][ T5821] veth0_macvtap: entered promiscuous mode [ 123.762669][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.813218][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.830818][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.844412][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.882095][ T5821] veth1_macvtap: entered promiscuous mode [ 123.894750][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.927726][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.952019][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.087355][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.133620][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.263342][ T977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.280230][ T977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.327117][ T977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.347355][ T977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.387165][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.421015][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.465729][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.493129][ T29] audit: type=1326 audit(1772458063.633:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954bb9c799 code=0x7fc00000 [ 124.667919][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.729098][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.948147][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.998440][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.209080][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.251463][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.529151][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 126.000762][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.072034][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.171958][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 126.196089][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.223429][ T5889] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.280254][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.290024][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 126.309489][ T5889] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 126.329141][ T10] usb 3-1: config 0 has no interfaces? [ 126.339156][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.354897][ T10] usb 3-1: config 0 has no interfaces? [ 126.373489][ T5889] usb 2-1: Product: syz [ 126.373737][ T10] usb 3-1: config 0 has no interfaces? [ 126.398604][ T5889] usb 2-1: Manufacturer: syz [ 126.411671][ T5889] usb 2-1: SerialNumber: syz [ 126.420806][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.442394][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.458706][ T5889] usb 2-1: config 0 descriptor?? [ 126.481844][ T10] usb 3-1: Product: syz [ 126.489715][ T10] usb 3-1: Manufacturer: syz [ 126.517311][ T10] usb 3-1: SerialNumber: syz [ 126.564649][ T10] usb 3-1: config 0 descriptor?? [ 126.844865][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.882692][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.933236][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.984201][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.015432][ T5889] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 127.023814][ T5899] usb 3-1: USB disconnect, device number 2 [ 127.161304][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.346082][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 127.354311][ T5907] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 127.367892][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.409935][ T5907] pvrusb2: Hardware description: Terratec Grabster AV400 [ 127.421861][ T5889] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 127.441371][ T5907] pvrusb2: ********** [ 127.457558][ T5907] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 127.482267][ T5889] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 127.511265][ T5882] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 127.518392][ T5907] pvrusb2: Important functionality might not be entirely working. [ 127.538069][ T5907] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 127.558496][ T5889] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 127.577303][ T5907] pvrusb2: ********** [ 127.597007][ T5889] usb 2-1: USB disconnect, device number 2 [ 127.614845][ T2347] pvrusb2: Invalid write control endpoint [ 127.747480][ T5882] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 127.772646][ T5882] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 127.810320][ T5882] usb 3-1: config 0 has no interface number 1 [ 127.830478][ T5882] usb 3-1: config 0 has no interface number 2 [ 127.839636][ T5882] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=29.ac [ 127.854477][ T2347] pvrusb2: Invalid write control endpoint [ 127.861642][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.883871][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.898171][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.910878][ T5882] usb 3-1: config 0 descriptor?? [ 127.918258][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.949832][ T5882] imon 3-1:0.6: inconsistent driver matching [ 127.962157][ T5882] imon 3-1:0.6: unable to register, err -22 [ 127.970867][ T5882] imon 3-1:0.6: probe with driver imon failed with error -22 [ 127.985207][ T2347] pvrusb2: Device being rendered inoperable [ 128.010821][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 128.025940][ T5889] usb 4-1: USB disconnect, device number 2 [ 128.026340][ T5882] imon 3-1:0.176: inconsistent driver matching [ 128.042439][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 128.060847][ T2347] pvrusb2: Attached sub-driver cx25840 [ 128.080620][ T5882] imon 3-1:0.176: unable to register, err -22 [ 128.089422][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 128.105225][ T5882] imon 3-1:0.176: probe with driver imon failed with error -22 [ 128.128867][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 128.179886][ T5882] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 128.195734][ T5882] imon 3-1:0.0: unable to initialize intf0, err -19 [ 128.211896][ T5882] imon:imon_probe: failed to initialize context! [ 128.251752][ T5882] imon 3-1:0.0: unable to register, err -19 [ 128.265719][ T5882] usb 3-1: USB disconnect, device number 3 [ 128.362108][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.541318][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 128.564874][ T42] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 128.588988][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.613160][ T42] usb 1-1: Product: syz [ 128.618492][ T42] usb 1-1: Manufacturer: syz [ 128.631617][ T42] usb 1-1: SerialNumber: syz [ 128.646371][ T5977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.661737][ T42] usb 1-1: config 0 descriptor?? [ 128.875246][ T42] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 128.945443][ T42] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 129.006325][ T42] usb 1-1: USB disconnect, device number 2 [ 129.153782][ T5907] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.196277][ T5987] loop5: detected capacity change from 0 to 2967 [ 129.236544][ T5987] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.265586][ T5946] Buffer I/O error on dev loop5, logical block 370, async page read [ 129.313894][ T5946] Buffer I/O error on dev loop5, logical block 370, async page read [ 129.334958][ T5907] usb 4-1: config 0 has no interfaces? [ 129.352263][ T5907] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.370416][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.383729][ T5907] usb 4-1: SerialNumber: syz [ 129.396616][ T5907] usb 4-1: config 0 descriptor?? [ 129.800594][ T5950] usb 4-1: USB disconnect, device number 3 [ 130.782566][ T5950] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.954740][ T6013] syzkaller1: entered promiscuous mode [ 130.970929][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.975947][ T6013] syzkaller1: entered allmulticast mode [ 131.035254][ T5950] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.081773][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.110527][ T5950] usb 3-1: config 0 descriptor?? [ 131.387910][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 131.404644][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 131.448066][ T5950] usb 3-1: USB disconnect, device number 4 [ 131.473895][ T6020] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 131.701258][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.864904][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 131.922802][ T5889] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 131.937240][ T5950] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.965179][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.002304][ T5889] usb 4-1: Product: syz [ 132.007448][ T5889] usb 4-1: Manufacturer: syz [ 132.031813][ T5889] usb 4-1: SerialNumber: syz [ 132.056800][ T5889] usb 4-1: config 0 descriptor?? [ 132.112932][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 132.126845][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.144818][ T5950] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 132.163754][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.200783][ T5950] usb 3-1: config 0 descriptor?? [ 132.242310][ T5950] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.336282][ T5950] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 132.494994][ T5889] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 132.520056][ T5889] usb 4-1: USB disconnect, device number 4 [ 132.692289][ T55] usb 3-1: USB disconnect, device number 5 [ 132.711892][ T5950] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 132.731791][ T55] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 132.893537][ T5950] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 132.903718][ T5950] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 132.918620][ T5950] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.931966][ T5950] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.957090][ T5950] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.974416][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.000344][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.012643][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.032189][ T5950] usbtmc 2-1:16.0: bulk endpoints not found [ 133.247871][ T42] usb 2-1: USB disconnect, device number 3 [ 133.481018][ T6052] capability: warning: `syz.3.56' uses deprecated v2 capabilities in a way that may be insecure [ 133.596283][ T6054] process 'syz.2.57' launched './file0' with NULL argv: empty string added [ 133.771176][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.951190][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 133.980759][ T42] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 133.996981][ T42] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 134.012940][ T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.032347][ T42] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.048534][ T42] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=61.23 [ 134.081239][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.118493][ T42] usbtmc 2-1:16.0: bulk endpoints not found [ 134.138713][ T42] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 134.159838][ T42] imon 2-1:16.0: unable to initialize intf0, err -19 [ 134.171514][ T5950] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.181034][ T42] imon:imon_probe: failed to initialize context! [ 134.235665][ T42] imon 2-1:16.0: unable to register, err -19 [ 134.338657][ T5950] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.372241][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.390688][ T5950] usb 1-1: Product: syz [ 134.399771][ T5950] usb 1-1: Manufacturer: syz [ 134.410883][ T5950] usb 1-1: SerialNumber: syz [ 134.558221][ T5907] usb 2-1: USB disconnect, device number 4 [ 135.470781][ T5950] cdc_ncm 1-1:1.0: failed to get mac address [ 135.551424][ T5950] cdc_ncm 1-1:1.0: bind() failure [ 135.603878][ T5950] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 135.629511][ T5950] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 135.681277][ T5950] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 135.734393][ T5950] usb 1-1: USB disconnect, device number 3 [ 135.905113][ T6091] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 135.935816][ T6091] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.807927][ T5950] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 137.996509][ T5950] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 138.049050][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.112231][ T5950] usb 2-1: config 0 descriptor?? [ 138.290950][ T6130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.384368][ T5950] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 138.595063][ T5950] [drm:udl_init] *ERROR* Selecting channel failed [ 138.736107][ T5950] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 138.786162][ T5950] [drm] Initialized udl on minor 2 [ 138.836803][ T5950] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.879492][ T5950] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 138.939636][ T55] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 138.961813][ T5950] usb 2-1: USB disconnect, device number 5 [ 138.993981][ T55] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 139.292334][ T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.490345][ T6150] syzkaller1: entered promiscuous mode [ 139.501755][ T55] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 139.533803][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.539415][ T6150] syzkaller1: entered allmulticast mode [ 139.585683][ T55] usb 4-1: Product: syz [ 139.597133][ T55] usb 4-1: Manufacturer: syz [ 139.611200][ T55] usb 4-1: SerialNumber: syz [ 139.640508][ T55] usb 4-1: config 0 descriptor?? [ 139.667901][ T55] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 139.962086][ T6161] Bluetooth: MGMT ver 1.23 [ 140.701820][ T55] gspca_sunplus: reg_w_riv err -71 [ 140.722489][ T55] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 140.754772][ T55] usb 4-1: USB disconnect, device number 5 [ 140.857899][ T6186] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 141.452793][ T6198] warning: `syz.2.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.766938][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.951222][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 141.980241][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 142.011177][ T24] usb 1-1: config 0 has no interface number 0 [ 142.030295][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 142.043024][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.056059][ T24] usb 1-1: Product: syz [ 142.063356][ T24] usb 1-1: Manufacturer: syz [ 142.072079][ T24] usb 1-1: SerialNumber: syz [ 142.087223][ T24] usb 1-1: config 0 descriptor?? [ 142.104251][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 142.158389][ T6218] syzkaller1: entered promiscuous mode [ 142.170927][ T6218] syzkaller1: entered allmulticast mode [ 142.377984][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 142.446478][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 142.569680][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.612649][ T6228] loop5: detected capacity change from 0 to 7 [ 142.625289][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.640224][ T6228] Dev loop5: unable to read RDB block 7 [ 142.654616][ T6228] loop5: unable to read partition table [ 142.667200][ T6228] loop5: partition table beyond EOD, truncated [ 142.687694][ T6230] loop2: detected capacity change from 0 to 7 [ 142.708913][ T6228] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.751932][ T6230] Dev loop2: unable to read RDB block 7 [ 142.801351][ T6230] loop2: unable to read partition table [ 142.831994][ T6230] loop2: partition table beyond EOD, truncated [ 142.867920][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 142.877930][ T55] usb 1-1: USB disconnect, device number 4 [ 142.886634][ T6230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.938191][ T55] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 142.963805][ T5191] Dev loop2: unable to read RDB block 7 [ 142.978498][ T5191] loop2: unable to read partition table [ 142.992077][ T55] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 143.002400][ T5191] loop2: partition table beyond EOD, truncated [ 143.027141][ T55] quatech2 1-1:0.51: device disconnected [ 143.498751][ T6244] loop5: detected capacity change from 0 to 7 [ 143.524172][ T6244] Dev loop5: unable to read RDB block 7 [ 143.551686][ T6244] loop5: AHDI p1 p3 p4 [ 143.562807][ T6244] loop5: partition table partially beyond EOD, truncated [ 143.594509][ T6244] loop5: p1 start 4194304 is beyond EOD, truncated [ 143.614267][ T6244] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 143.630786][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 143.798710][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 143.813307][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 143.903466][ T6252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.117183][ T6255] Bluetooth: MGMT ver 1.23 [ 145.611442][ T797] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.679518][ T6301] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 145.781206][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 145.798023][ T797] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 145.828027][ T797] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.858650][ T797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.868475][ T6304] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 145.876626][ T6304] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 145.883505][ T6304] syzkaller0: owner set to 0 [ 145.884491][ T797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.901764][ T797] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.916953][ T797] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.928544][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.140244][ T6312] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.176717][ T797] usb 1-1: usb_control_msg returned -32 [ 146.187561][ T797] usbtmc 1-1:16.0: can't read capabilities [ 146.351321][ T6316] syzkaller1: entered promiscuous mode [ 146.357054][ T6316] syzkaller1: entered allmulticast mode [ 146.400192][ T6318] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.544806][ T6322] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 146.756773][ T797] usb 1-1: USB disconnect, device number 5 [ 146.957760][ T6334] vcan0: tx drop: invalid sa for name 0x0000000000001000 [ 147.416225][ T6342] syzkaller1: entered promiscuous mode [ 147.436233][ T6342] syzkaller1: entered allmulticast mode [ 148.249510][ T6371] binder: 6370:6371 ioctl c0306201 200000000480 returned -14 [ 148.425263][ T6373] mmap: syz.3.202 (6373) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.446263][ T55] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.613758][ T55] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.639023][ T55] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.658992][ T55] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.674748][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.700167][ T6369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.745289][ T55] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.023394][ T55] usb 1-1: USB disconnect, device number 6 [ 150.431682][ T6422] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 150.762424][ T6427] block nbd1: NBD_DISCONNECT [ 151.916184][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.096039][ T42] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 152.116203][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.137037][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.154524][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 152.176592][ T42] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 152.205655][ T42] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 152.255849][ T42] usb 1-1: Manufacturer: syz [ 152.297658][ T42] usb 1-1: config 0 descriptor?? [ 152.770026][ T42] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 152.832673][ T42] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 153.045112][ T55] usb 1-1: USB disconnect, device number 7 [ 153.149585][ T6480] fido_id[6480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.314799][ T6488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.763571][ T6500] ======================================================= [ 153.763571][ T6500] WARNING: The mand mount option has been deprecated and [ 153.763571][ T6500] and is ignored by this kernel. Remove the mand [ 153.763571][ T6500] option from the mount to silence this warning. [ 153.763571][ T6500] ======================================================= [ 153.938825][ T6500] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 153.981213][ T6500] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 154.541797][ T42] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 154.713888][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.727211][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.734985][ T55] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.750443][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 154.773116][ T42] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 154.811182][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.849452][ T6512] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.896426][ T42] hub 2-1:1.0: bad descriptor, ignoring hub [ 154.916055][ T42] hub 2-1:1.0: probe with driver hub failed with error -5 [ 154.931983][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 154.953136][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 154.971392][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 154.985800][ T55] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 155.002167][ T42] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 155.029284][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.041349][ T42] cdc_wdm 2-1:1.0: Unknown control protocol [ 155.129108][ T55] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 155.311201][ T5950] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.512981][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 155.536490][ T5950] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.555497][ T5950] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.572860][ T5950] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 155.593567][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.783480][ T6512] usb 2-1: reset low-speed USB device number 6 using dummy_hcd [ 156.054861][ T5950] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 156.107359][ T6525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.130600][ T55] gspca_nw80x: reg_w err -71 [ 156.151297][ T55] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 156.191492][ T55] usb 1-1: USB disconnect, device number 8 [ 156.200905][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.208525][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.216691][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.225703][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.233228][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.244693][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.256151][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.263765][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.273347][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.281546][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.291630][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.300095][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.309011][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.319058][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.326707][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.343029][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.357559][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.367622][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.375615][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 156.385136][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 156.393813][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 156.447778][ T5950] usb 3-1: USB disconnect, device number 6 [ 156.573727][ T42] usb 2-1: USB disconnect, device number 6 [ 156.752081][ T1014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.890283][ T1014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.062431][ T1014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.322785][ T1014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.450534][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.482743][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.501506][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.531284][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.565717][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.692587][ T6549] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 157.754447][ T6551] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.280'. [ 158.157053][ T6557] input: syz0 as /devices/virtual/input/input5 [ 158.209260][ T1014] bridge_slave_1: left allmulticast mode [ 158.272054][ T1014] bridge_slave_1: left promiscuous mode [ 158.314340][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.404119][ T1014] bridge_slave_0: left allmulticast mode [ 158.463202][ T1014] bridge_slave_0: left promiscuous mode [ 158.495428][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.625110][ T6566] binder: 6565:6566 ioctl c0306201 2000000001c0 returned -22 [ 159.333906][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.353845][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.400646][ T1014] bond0 (unregistering): Released all slaves [ 159.658370][ T6588] loop8: detected capacity change from 0 to 7 [ 159.673006][ T5826] Bluetooth: hci2: command tx timeout [ 159.691166][ T6588] Dev loop8: unable to read RDB block 7 [ 159.697326][ T6588] loop8: AHDI p1 p2 p3 [ 159.713641][ T6588] loop8: partition table partially beyond EOD, truncated [ 159.791806][ T6588] loop8: p1 start 1601398130 is beyond EOD, truncated [ 159.826843][ T6588] loop8: p2 start 1702059890 is beyond EOD, truncated [ 159.862491][ T5946] Dev loop8: unable to read RDB block 7 [ 159.870168][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.883593][ T5946] loop8: AHDI p1 p2 p3 [ 159.889916][ T5946] loop8: partition table partially beyond EOD, truncated [ 159.918992][ T5946] loop8: p1 start 1601398130 is beyond EOD, truncated [ 159.951774][ T5946] loop8: p2 start 1702059890 is beyond EOD, truncated [ 159.988892][ T6591] Dev loop8: unable to read RDB block 7 [ 160.014464][ T6591] loop8: AHDI p1 p2 p3 [ 160.019157][ T6591] loop8: partition table partially beyond EOD, truncated [ 160.057239][ T6591] loop8: p1 start 1601398130 is beyond EOD, truncated [ 160.067029][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 160.083306][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 160.095799][ T6591] loop8: p2 start 1702059890 is beyond EOD, truncated [ 160.121697][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.179664][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.257472][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.300097][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.401495][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.428195][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.721378][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 160.727333][ T24] usbtmc 2-1:16.0: can't read capabilities [ 160.859412][ T1014] hsr_slave_0: left promiscuous mode [ 160.888642][ T1014] hsr_slave_1: left promiscuous mode [ 160.905775][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.927399][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.946626][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.960163][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.974505][ T5950] usb 2-1: USB disconnect, device number 7 [ 161.009201][ T1014] veth1_macvtap: left promiscuous mode [ 161.016813][ T1014] veth0_macvtap: left promiscuous mode [ 161.044728][ T1014] veth1_vlan: left promiscuous mode [ 161.072993][ T1014] veth0_vlan: left promiscuous mode [ 161.265736][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 161.626154][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 161.654713][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 161.741184][ T5826] Bluetooth: hci2: command tx timeout [ 162.031605][ C0] list_del corruption, ffff888033ecb490->next is NULL [ 162.040783][ C0] ------------[ cut here ]------------ [ 162.048933][ C0] kernel BUG at lib/list_debug.c:53! [ 162.054779][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 162.065441][ C0] CPU: 0 UID: 0 PID: 1014 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.078501][ C0] Tainted: [L]=SOFTLOCKUP [ 162.083625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.100410][ C0] Workqueue: netns cleanup_net [ 162.109538][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 162.119983][ C0] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 a0 fc 29 8c 48 89 de e8 42 ee 63 fc 90 <0f> 0b 48 c7 c7 00 fd 29 8c 48 89 de e8 30 ee 63 fc 90 0f 0b 4c 89 [ 162.150761][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00010046 [ 162.158325][ C0] RAX: 0000000000000033 RBX: ffff888033ecb490 RCX: 1fea47a65074d800 [ 162.166767][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 162.177522][ C0] RBP: 0000000000000203 R08: ffffc90000007ae7 R09: 1ffff92000000f5c [ 162.186975][ C0] R10: dffffc0000000000 R11: fffff52000000f5d R12: 1ffff110067d9692 [ 162.197741][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.206126][ C0] FS: 0000000000000000(0000) GS:ffff888125002000(0000) knlGS:0000000000000000 [ 162.217077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.226489][ C0] CR2: 0000001b30c1dff8 CR3: 00000000762de000 CR4: 00000000003526f0 [ 162.240319][ C0] Call Trace: [ 162.245006][ C0] [ 162.248862][ C0] dst_destroy+0x202/0x5a0 [ 162.255598][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 162.262287][ C0] ? rcu_core+0x751/0x1070 [ 162.268041][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 162.275189][ C0] rcu_core+0x7cd/0x1070 [ 162.280529][ C0] ? __pfx_rcu_core+0x10/0x10 [ 162.287505][ C0] ? sched_clock_cpu+0x74/0x440 [ 162.293683][ C0] handle_softirqs+0x22a/0x870 [ 162.300486][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 162.307633][ C0] __irq_exit_rcu+0x5f/0x150 [ 162.313413][ C0] irq_exit_rcu+0x9/0x30 [ 162.317874][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 162.324480][ C0] [ 162.329101][ C0] [ 162.333621][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.341616][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 162.348812][ C0] Code: f7 e8 3d f7 e5 f5 f7 c3 00 02 00 00 74 05 e8 20 4e 11 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 a9 d7 f5 65 8b 05 6d 51 85 07 85 c0 74 18 5b 41 5e e9 91 48 [ 162.375997][ C0] RSP: 0018:ffffc90004697568 EFLAGS: 00000206 [ 162.382878][ C0] RAX: 0000000000000006 RBX: 0000000000000286 RCX: 0000000080000001 [ 162.392749][ C0] RDX: 0000000000000007 RSI: ffffffff8e019f95 RDI: 0000000000000001 [ 162.404297][ C0] RBP: ffffc90004697688 R08: ffffffff9033edb7 R09: 1ffffffff2067db6 [ 162.415978][ C0] R10: dffffc0000000000 R11: fffffbfff2067db7 R12: ffff888035210690 [ 162.428868][ C0] R13: ffff888035210680 R14: ffff888035210630 R15: 1ffff11006b89338 [ 162.437749][ C0] ref_tracker_dir_exit+0x4e6/0x660 [ 162.445972][ C0] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 162.452579][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 162.459866][ C0] ? kfree+0x1c1/0x630 [ 162.466130][ C0] ? dev_addr_flush+0x18f/0x210 [ 162.472406][ C0] free_netdev+0x459/0x8e0 [ 162.478476][ C0] ? kfree+0x1c1/0x630 [ 162.484974][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 162.491437][ C0] netdev_run_todo+0xf8d/0x1130 [ 162.498335][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 162.504417][ C0] ? unregister_netdevice_queue+0x19b/0x360 [ 162.513925][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 162.526009][ C0] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 162.533576][ C0] default_device_exit_batch+0x986/0xa00 [ 162.540460][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 162.548051][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 162.555388][ C0] ops_undo_list+0x52b/0x940 [ 162.562566][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 162.571605][ C0] ? idr_destroy+0x218/0x290 [ 162.579715][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 162.586297][ C0] cleanup_net+0x56b/0x800 [ 162.591455][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 162.598611][ C0] ? process_one_work+0x87c/0x1650 [ 162.605899][ C0] process_one_work+0x949/0x1650 [ 162.611603][ C0] ? __pfx_process_one_work+0x10/0x10 [ 162.618064][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.624750][ C0] worker_thread+0xb46/0x1140 [ 162.630056][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 162.638286][ C0] kthread+0x388/0x470 [ 162.644268][ C0] ? __pfx_worker_thread+0x10/0x10 [ 162.651405][ C0] ? __pfx_kthread+0x10/0x10 [ 162.656920][ C0] ret_from_fork+0x51e/0xb90 [ 162.665536][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 162.675001][ C0] ? __switch_to+0xc7d/0x1450 [ 162.681921][ C0] ? __pfx_kthread+0x10/0x10 [ 162.687250][ C0] ret_from_fork_asm+0x1a/0x30 [ 162.695174][ C0] [ 162.698751][ C0] Modules linked in: [ 162.706115][ C0] ---[ end trace 0000000000000000 ]--- [ 162.713521][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 162.722422][ C0] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 a0 fc 29 8c 48 89 de e8 42 ee 63 fc 90 <0f> 0b 48 c7 c7 00 fd 29 8c 48 89 de e8 30 ee 63 fc 90 0f 0b 4c 89 [ 162.745311][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00010046 [ 162.752162][ C0] RAX: 0000000000000033 RBX: ffff888033ecb490 RCX: 1fea47a65074d800 [ 162.761058][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 162.772211][ C0] RBP: 0000000000000203 R08: ffffc90000007ae7 R09: 1ffff92000000f5c [ 162.783965][ C0] R10: dffffc0000000000 R11: fffff52000000f5d R12: 1ffff110067d9692 [ 162.796523][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.808149][ C0] FS: 0000000000000000(0000) GS:ffff888125002000(0000) knlGS:0000000000000000 [ 162.819363][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.828913][ C0] CR2: 0000001b30c1dff8 CR3: 00000000762de000 CR4: 00000000003526f0 [ 162.840505][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 164.251077][ C0] Shutting down cpus with NMI [ 164.260167][ C0] Kernel Offset: disabled [ 164.265495][ C0] Rebooting in 86400 seconds..