last executing test programs: 4m14.672809899s ago: executing program 3 (id=784): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 4m14.417491759s ago: executing program 3 (id=787): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x880) 4m14.196263259s ago: executing program 3 (id=790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 4m13.913518565s ago: executing program 3 (id=794): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x40000c1) 4m13.737718606s ago: executing program 3 (id=795): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 4m13.501791457s ago: executing program 3 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x38, 0x301, 0x70bd25, 0x25dfdbfe, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) 3m58.114463836s ago: executing program 32 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x38, 0x301, 0x70bd25, 0x25dfdbfe, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) 1m18.769376246s ago: executing program 4 (id=2930): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setreuid(0xffffffffffffffff, 0xee00) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'nicvf0\x00', {0x2, 0x4e22, @multicast1}}) 1m18.599459143s ago: executing program 4 (id=2933): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 1m18.223791547s ago: executing program 4 (id=2939): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f29, 0x7, 0x400, 0x4, 0x5, 0xe1b, 0x4, 0x7, 0x54c6cff1, 0xfd, 0x2, 0x1, 0x4, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x4, 0xfffffff8]}) 1m17.863382122s ago: executing program 4 (id=2946): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0xfffe}, 0x90) 1m16.87450815s ago: executing program 4 (id=2961): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00U'], 0x0}, 0x0) 1m15.023788s ago: executing program 4 (id=2975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000002800)={0x6, 0xdddd1000, 0x2, 0xffffffffffffffff, 0x8d9879915c3d6d02}) 1m13.224016197s ago: executing program 1 (id=2981): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 1m13.050222729s ago: executing program 1 (id=2982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 1m12.846648796s ago: executing program 1 (id=2984): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) 1m12.592772998s ago: executing program 1 (id=2985): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 1m12.592054883s ago: executing program 5 (id=2986): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) fstat(0xffffffffffffffff, 0x0) 1m12.202653837s ago: executing program 5 (id=2987): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000800000000000000040000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5121b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe91bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6c597eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86660079f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab2127cd472a2e4a7f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="dbc9923ebd01e7bb6c3bc4bf44", 0xd}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="af0e7367f111e070", 0x8}], 0x1) 1m12.095695825s ago: executing program 1 (id=2988): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 1m11.942948137s ago: executing program 5 (id=2989): unshare(0x2a020400) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x2000000) 1m11.87870976s ago: executing program 1 (id=2990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) 1m7.907537782s ago: executing program 5 (id=2999): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000016c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 1m7.664393945s ago: executing program 5 (id=3001): setreuid(0x0, 0xee01) shmget(0x0, 0x4000, 0x602, &(0x7f0000ff9000/0x4000)=nil) shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil) 1m7.436702865s ago: executing program 5 (id=3003): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0xfb, 0x2}) 59.581507908s ago: executing program 33 (id=2975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000002800)={0x6, 0xdddd1000, 0x2, 0xffffffffffffffff, 0x8d9879915c3d6d02}) 55.806247438s ago: executing program 34 (id=2990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) 52.06864235s ago: executing program 35 (id=3003): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0xfb, 0x2}) 33.921594303s ago: executing program 2 (id=3042): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 33.769657636s ago: executing program 2 (id=3043): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) 33.467165048s ago: executing program 2 (id=3044): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0xc, r0, 0x0, 0x0, 0x3}]) 32.080661349s ago: executing program 0 (id=3046): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540), 0x181f80, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000240)=0x6) 31.980075134s ago: executing program 0 (id=3047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000500)) 31.876220166s ago: executing program 0 (id=3048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) 26.474186276s ago: executing program 2 (id=3049): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0) 26.222147461s ago: executing program 2 (id=3050): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) syncfs(r0) 26.055547744s ago: executing program 2 (id=3051): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000a40)=""/211, 0xd3}], 0x8}, 0x0) 22.605218765s ago: executing program 0 (id=3052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 22.410668303s ago: executing program 0 (id=3053): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 15.472917494s ago: executing program 0 (id=3054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 10.480799675s ago: executing program 36 (id=3051): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000a40)=""/211, 0xd3}], 0x8}, 0x0) 0s ago: executing program 37 (id=3054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) kernel console output (not intermixed with test programs): 04056][ T5916] usb 5-1: Manufacturer: syz [ 178.504069][ T5916] usb 5-1: SerialNumber: syz [ 178.511486][ T5916] usb 5-1: config 0 descriptor?? [ 178.602517][ T5916] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 178.628685][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.643600][ T5916] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 178.643656][ T5916] usb 5-1: media controller created [ 178.763026][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.030031][ T8042] netlink: 'syz.2.978': attribute type 2 has an invalid length. [ 179.083610][ T5916] DVB: Unable to find symbol mt352_attach() [ 179.174645][ T8043] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 179.174704][ T8043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.248112][ T5916] DVB: Unable to find symbol nxt6000_attach() [ 179.248128][ T5916] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 179.264679][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 179.271179][ T5916] dvb-usb: schedule remote query interval to 1000 msecs. [ 179.271197][ T5916] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 179.271301][ T5916] dvb-usb: bulk message failed: -22 (7/0) [ 179.271316][ T5916] dvb-usb: bulk message failed: -22 (7/0) [ 179.332057][ T5916] usb 5-1: USB disconnect, device number 10 [ 179.426790][ T5841] Bluetooth: hci5: command tx timeout [ 179.614047][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 179.614069][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 179.714746][ T8058] new mount options do not match the existing superblock, will be ignored [ 179.740014][ T4203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.743500][ T8058] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 179.807615][ T5916] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 179.808398][ T981] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.978504][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 179.980922][ T981] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.980948][ T981] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 179.980973][ T981] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.981005][ T981] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 179.981027][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.986169][ T981] usb 2-1: config 0 descriptor?? [ 180.398099][ T4203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.486590][ T981] betop 0003:20BC:5500.0012: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0 [ 180.486631][ T981] betop 0003:20BC:5500.0012: no inputs found [ 180.616378][ T8065] sp0: Synchronizing with TNC [ 180.676743][ T6015] usb 2-1: USB disconnect, device number 15 [ 180.863320][ T8073] fido_id[8073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 181.205616][ T8081] random: crng reseeded on system resumption [ 181.263452][ T8081] Restarting kernel threads ... [ 181.264868][ T8081] Done restarting kernel threads. [ 181.495692][ T5841] Bluetooth: hci5: command tx timeout [ 181.675956][ T4203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.958596][ T6015] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.144151][ T6015] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.144184][ T6015] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.144225][ T6015] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.144247][ T6015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.229881][ T6015] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.230922][ T6015] usb 1-1: invalid MIDI out EP 0 [ 182.237813][ T4203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.357800][ T8002] chnl_net:caif_netlink_parms(): no params data found [ 182.768748][ T981] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 182.875986][ T6015] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 182.908956][ T6015] usb 1-1: USB disconnect, device number 11 [ 182.937014][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.937046][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.937083][ T981] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 182.937104][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.117693][ T981] usb 3-1: config 0 descriptor?? [ 183.564169][ T981] hid_parser_main: 1 callbacks suppressed [ 183.564191][ T981] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x2 [ 183.568808][ T5841] Bluetooth: hci5: command tx timeout [ 183.598970][ T981] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 183.678347][ T5964] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 183.756869][ T981] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 183.756921][ T981] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 183.774931][ T981] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71 [ 183.798774][ T981] usb 3-1: USB disconnect, device number 12 [ 183.828364][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 183.828900][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.829031][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.829254][ T8002] bridge_slave_0: entered allmulticast mode [ 183.832265][ T5964] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 183.832287][ T5964] usb 2-1: config 0 has no interface number 0 [ 183.832333][ T5964] usb 2-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.832357][ T5964] usb 2-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.832379][ T5964] usb 2-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.832404][ T5964] usb 2-1: config 0 interface 63 has no altsetting 0 [ 183.832437][ T5964] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 183.832458][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.837748][ T5964] usb 2-1: config 0 descriptor?? [ 183.846974][ T8002] bridge_slave_0: entered promiscuous mode [ 183.887196][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.887330][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.887565][ T8002] bridge_slave_1: entered allmulticast mode [ 183.911152][ T8002] bridge_slave_1: entered promiscuous mode [ 184.055657][ T8132] fido_id[8132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 184.294755][ T8136] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 184.326541][ T5964] uclogic 0003:28BD:0909.0014: interface is invalid, ignoring [ 184.553375][ T5964] usb 2-1: USB disconnect, device number 16 [ 184.566886][ T8138] tipc: Enabling of bearer rejected, failed to enable media [ 184.640703][ T8002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.719213][ T8002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.091530][ T4203] bridge_slave_1: left allmulticast mode [ 185.092076][ T4203] bridge_slave_1: left promiscuous mode [ 185.095816][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.204529][ T4203] bridge_slave_0: left allmulticast mode [ 185.204561][ T4203] bridge_slave_0: left promiscuous mode [ 185.205944][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.651930][ T5841] Bluetooth: hci5: command tx timeout [ 186.048519][ T5908] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 186.198341][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 186.201893][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.201921][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.201959][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 186.201980][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.253252][ T5908] usb 3-1: config 0 descriptor?? [ 186.270041][ T5908] hub 3-1:0.0: USB hub found [ 186.466311][ T5908] hub 3-1:0.0: 29 ports detected [ 186.466910][ T5908] hub 3-1:0.0: insufficient power available to use all downstream ports [ 186.912075][ T5908] usb 3-1: USB disconnect, device number 13 [ 188.433743][ T4203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.527395][ T4203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.567685][ T4203] bond0 (unregistering): Released all slaves [ 188.610440][ T8157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1026'. [ 188.737971][ T8002] team0: Port device team_slave_0 added [ 188.785405][ T5900] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 188.806275][ T8002] team0: Port device team_slave_1 added [ 188.930778][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.930811][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.930833][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 188.930873][ T5900] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 188.930895][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.992198][ T5900] usb 3-1: config 0 descriptor?? [ 189.427514][ T5900] sony 0003:12BA:0100.0015: unknown main item tag 0x0 [ 189.471490][ T5900] sony 0003:12BA:0100.0015: hidraw0: USB HID v0.00 Device [HID 12ba:0100] on usb-dummy_hcd.2-1/input0 [ 189.471522][ T5900] sony 0003:12BA:0100.0015: failed to claim input [ 189.578762][ T5964] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 189.624180][ T5916] usb 3-1: USB disconnect, device number 14 [ 189.686262][ T8215] fido_id[8215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 189.744741][ T5964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.744767][ T5964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.753163][ T5964] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.753190][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.753208][ T5964] usb 1-1: Product: syz [ 189.753221][ T5964] usb 1-1: Manufacturer: syz [ 189.753234][ T5964] usb 1-1: SerialNumber: syz [ 190.038163][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.040957][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.040986][ T8002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.117808][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.117825][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.117848][ T8002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.226189][ T5964] usb 1-1: cannot find UAC_HEADER [ 190.489172][ T5964] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 190.518455][ T5964] usb 1-1: USB disconnect, device number 12 [ 190.704063][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.988421][ T8247] comedi comedi3: comedi_test: 20263 microvolt, 31 microsecond waveform attached [ 191.587901][ T37] audit: type=1400 audit(1759086671.705:16): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8264 comm="syz.1.1077" src=1 dest=20000 netif=wpan0 [ 191.712932][ T8002] hsr_slave_0: entered promiscuous mode [ 191.714203][ T8002] hsr_slave_1: entered promiscuous mode [ 191.715037][ T8002] debugfs: 'hsr0' already exists in 'hsr' [ 191.715059][ T8002] Cannot create hsr debugfs directory [ 192.076970][ T4203] hsr_slave_0: left promiscuous mode [ 192.145465][ T4203] hsr_slave_1: left promiscuous mode [ 192.147857][ T4203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.147948][ T4203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.245419][ T4203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.245450][ T4203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.825017][ T4203] veth1_macvtap: left promiscuous mode [ 192.825296][ T4203] veth0_macvtap: left promiscuous mode [ 192.825613][ T4203] veth1_vlan: left promiscuous mode [ 192.826324][ T4203] veth0_vlan: left promiscuous mode [ 193.555589][ T8318] netlink: 'syz.2.1095': attribute type 10 has an invalid length. [ 194.227701][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.227776][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369961][ T8317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.488813][ T4203] team0 (unregistering): Port device team_slave_1 removed [ 195.690895][ T4203] team0 (unregistering): Port device team_slave_0 removed [ 198.134065][ T8318] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 198.907740][ T8348] netlink: 'syz.1.1109': attribute type 9 has an invalid length. [ 199.630813][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 200.013414][ T8002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.129919][ T8002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.314580][ T8002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.429297][ T8002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.454272][ T4203] IPVS: stop unused estimator thread 0... [ 201.232668][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.289329][ T8414] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1129'. [ 201.289352][ T8414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1129'. [ 201.308498][ T5964] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.460965][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.461004][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.461042][ T5964] usb 5-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 201.461063][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.545803][ T5964] usb 5-1: config 0 descriptor?? [ 201.766244][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.778623][ T5916] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 201.851074][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.851222][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.930635][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 201.933239][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.933262][ T5916] usb 2-1: config 0 has no interface number 0 [ 201.933313][ T5916] usb 2-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.933338][ T5916] usb 2-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.933368][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 201.933399][ T5916] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 201.933424][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.000335][ T5964] hid (null): usage index exceeded [ 202.034800][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.034950][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.036853][ T5964] wacom 0003:056A:00F4.0016: ignoring exceeding usage max [ 202.038077][ T5964] wacom 0003:056A:00F4.0016: ignoring exceeding usage max [ 202.038093][ T5964] wacom 0003:056A:00F4.0016: usage index exceeded [ 202.038105][ T5964] wacom 0003:056A:00F4.0016: item 0 1 2 2 parsing failed [ 202.052291][ T5964] wacom 0003:056A:00F4.0016: parse failed [ 202.052396][ T5964] wacom 0003:056A:00F4.0016: probe with driver wacom failed with error -22 [ 202.096562][ T5916] usb 2-1: config 0 descriptor?? [ 202.264860][ T5964] usb 5-1: USB disconnect, device number 11 [ 202.581008][ T5916] chicony 0003:04F2:0418.0017: item fetching failed at offset 0/4 [ 202.581823][ T5916] chicony 0003:04F2:0418.0017: Chicony hid parse failed: -22 [ 202.581895][ T5916] chicony 0003:04F2:0418.0017: probe with driver chicony failed with error -22 [ 202.784995][ T6015] usb 2-1: USB disconnect, device number 17 [ 203.519986][ T8454] genirq: Flags mismatch irq 10. 00202000 (das16m1) vs. 00202080 (virtio2) [ 203.811130][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.211480][ T5841] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 204.211590][ T5841] Bluetooth: hci3: Injecting HCI hardware error event [ 204.213669][ T5841] Bluetooth: hci3: hardware error 0x00 [ 204.854104][ T8501] tipc: Enabled bearer , priority 10 [ 204.980428][ T37] audit: type=1326 audit(1759086685.095:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 204.980476][ T37] audit: type=1326 audit(1759086685.105:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 205.042244][ T37] audit: type=1326 audit(1759086685.165:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 205.042296][ T37] audit: type=1326 audit(1759086685.165:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 205.042336][ T37] audit: type=1326 audit(1759086685.165:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 205.051219][ T37] audit: type=1326 audit(1759086685.175:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 205.051267][ T37] audit: type=1326 audit(1759086685.175:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 205.053449][ T37] audit: type=1326 audit(1759086685.175:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 205.087683][ T8002] veth0_vlan: entered promiscuous mode [ 205.244138][ T8002] veth1_vlan: entered promiscuous mode [ 205.532233][ T8002] veth0_macvtap: entered promiscuous mode [ 205.546223][ T8002] veth1_macvtap: entered promiscuous mode [ 205.662265][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.676607][ T37] audit: type=1326 audit(1759086685.795:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ea5eec9 code=0x7ffc0000 [ 205.680890][ T37] audit: type=1326 audit(1759086685.795:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8519 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406ea5eec9 code=0x7ffc0000 [ 205.748386][ T5900] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 205.769944][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.793838][ T1129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.848306][ T1434] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.857196][ T1434] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.900467][ T1434] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.901706][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.901736][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 205.901760][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 205.901798][ T5900] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 205.901819][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.968459][ T5964] tipc: Node number set to 754974784 [ 205.987058][ T5900] usb 1-1: config 0 descriptor?? [ 205.988652][ T8516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.099840][ T8531] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 206.099897][ T8531] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 206.099946][ T8531] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 206.099994][ T8531] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 206.100042][ T8531] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 206.100152][ T8531] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 206.100199][ T8531] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 206.100245][ T8531] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 206.407932][ T5900] aureal 0003:0755:2626.0018: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 206.438971][ T5900] aureal 0003:0755:2626.0018: unknown main item tag 0x6 [ 206.439006][ T5900] aureal 0003:0755:2626.0018: report_id 29495 is invalid [ 206.439021][ T5900] aureal 0003:0755:2626.0018: item 0 2 1 8 parsing failed [ 206.439889][ T5900] aureal 0003:0755:2626.0018: probe with driver aureal failed with error -22 [ 206.533277][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 206.533314][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 206.533390][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 206.609146][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.609165][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.663595][ T5908] usb 1-1: USB disconnect, device number 13 [ 206.888588][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.888604][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.384029][ T8555] program syz.2.1174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.998422][ T5964] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 209.148315][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 209.160810][ T5964] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 209.160837][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.160855][ T5964] usb 1-1: Product: syz [ 209.160868][ T5964] usb 1-1: Manufacturer: syz [ 209.160881][ T5964] usb 1-1: SerialNumber: syz [ 209.185296][ T5964] usb 1-1: config 0 descriptor?? [ 209.548371][ T5900] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.663340][ T5964] airspy 1-1:0.0: Board ID: 00 [ 209.663361][ T5964] airspy 1-1:0.0: Firmware version: [ 209.701086][ T5900] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.701117][ T5900] usb 6-1: config 0 interface 0 has no altsetting 0 [ 209.701149][ T5900] usb 6-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 209.701171][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.757071][ T5900] usb 6-1: config 0 descriptor?? [ 209.876873][ T5964] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 209.916411][ T5964] airspy 1-1:0.0: Registered as swradio24 [ 209.916432][ T5964] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 209.938853][ T5964] usb 1-1: USB disconnect, device number 14 [ 209.977390][ T8631] netlink: 'syz.1.1206': attribute type 4 has an invalid length. [ 210.207507][ T5900] asus 0003:0B05:1822.0019: unknown main item tag 0x0 [ 210.207544][ T5900] asus 0003:0B05:1822.0019: unknown main item tag 0x0 [ 210.232822][ T5900] asus 0003:0B05:1822.0019: hidraw0: USB HID v0.04 Device [HID 0b05:1822] on usb-dummy_hcd.5-1/input0 [ 210.232855][ T5900] asus 0003:0B05:1822.0019: Asus input not registered [ 210.265311][ T5900] asus 0003:0B05:1822.0019: probe with driver asus failed with error -12 [ 210.457870][ T5900] usb 6-1: USB disconnect, device number 2 [ 210.671739][ T8644] fido_id[8644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 212.568647][ T5964] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 212.731602][ T5964] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 212.731631][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.731650][ T5964] usb 3-1: Product: syz [ 212.731663][ T5964] usb 3-1: Manufacturer: syz [ 212.731676][ T5964] usb 3-1: SerialNumber: syz [ 212.760443][ T5964] usb 3-1: config 0 descriptor?? [ 212.767236][ T5964] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 212.919497][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 212.980194][ T8722] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 213.068561][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 213.071988][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.075882][ T5901] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 213.075964][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.075984][ T5901] usb 5-1: Product: syz [ 213.075997][ T5901] usb 5-1: Manufacturer: syz [ 213.076011][ T5901] usb 5-1: SerialNumber: syz [ 213.109543][ T5901] usb 5-1: config 0 descriptor?? [ 213.331160][ T8729] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 213.331182][ T8729] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1251'. [ 213.379477][ T5900] usb 3-1: USB disconnect, device number 15 [ 213.556097][ T5901] gs_usb 5-1:0.0: Configuring for 16 interfaces [ 213.556130][ T5901] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 213.556166][ T5901] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 213.782643][ T5901] usb 5-1: USB disconnect, device number 12 [ 214.137019][ T8751] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.137479][ T8751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.137492][ T8751] IPv6: NLM_F_CREATE should be set when creating new route [ 214.137577][ T8751] IPv6: NLM_F_CREATE should be set when creating new route [ 214.138174][ T8751] IPv6: NLM_F_CREATE should be set when creating new route [ 214.178904][ T8751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.993906][ T8779] netlink: 'syz.2.1272': attribute type 29 has an invalid length. [ 215.014673][ T8779] netlink: 'syz.2.1272': attribute type 29 has an invalid length. [ 215.058300][ T5964] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 215.210694][ T5964] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 215.210725][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.221041][ T5964] usb 6-1: config 0 descriptor?? [ 215.430570][ T5964] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 215.646167][ T5964] [drm:udl_init] *ERROR* Selecting channel failed [ 215.751914][ T5964] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 215.751941][ T5964] [drm] Initialized udl on minor 2 [ 215.817420][ T5964] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 215.840087][ T5964] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 215.879170][ T981] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 215.879773][ T981] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 215.930804][ T5964] usb 6-1: USB disconnect, device number 3 [ 216.222233][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 216.222250][ T37] audit: type=1326 audit(1759086696.335:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.2.1289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f406ea5eec9 code=0x0 [ 216.887861][ T8840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1301'. [ 217.178433][ T5900] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 217.329953][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 217.333088][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.334603][ T5900] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 217.334627][ T5900] usb 2-1: config 4 has no interface number 0 [ 217.334660][ T5900] usb 2-1: config 4 interface 30 has no altsetting 0 [ 217.349727][ T5900] usb 2-1: string descriptor 0 read error: -22 [ 217.349873][ T5900] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 217.349896][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.379324][ T5900] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 217.379370][ T5900] dw2102: su3000_power_ctrl: 1, initialized 0 [ 217.379388][ T5900] dvb-usb: bulk message failed: -22 (2/0) [ 217.393784][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.394784][ T5900] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 217.394835][ T5900] usb 2-1: media controller created [ 217.394860][ T5900] dvb-usb: bulk message failed: -22 (6/0) [ 217.394874][ T5900] dw2102: i2c transfer failed. [ 217.394890][ T5900] dvb-usb: bulk message failed: -22 (6/0) [ 217.394903][ T5900] dw2102: i2c transfer failed. [ 217.396952][ T5900] dvb-usb: bulk message failed: -22 (6/0) [ 217.396969][ T5900] dw2102: i2c transfer failed. [ 217.396991][ T5900] dvb-usb: bulk message failed: -22 (6/0) [ 217.397004][ T5900] dw2102: i2c transfer failed. [ 217.397020][ T5900] dvb-usb: bulk message failed: -22 (6/0) [ 217.397032][ T5900] dw2102: i2c transfer failed. [ 217.397048][ T5900] dvb-usb: bulk message failed: -22 (6/0) [ 217.397061][ T5900] dw2102: i2c transfer failed. [ 217.397071][ T5900] dvb-usb: MAC address: 02:02:02:02:02:02 [ 217.458322][ T6015] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 217.503960][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.624878][ T6015] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.624910][ T6015] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.624933][ T6015] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.624973][ T6015] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 217.624996][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.642005][ T6015] usb 6-1: config 0 descriptor?? [ 217.733411][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 217.733433][ T5900] dw2102: command 0x0e transfer failed. [ 217.733443][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 217.733455][ T5900] dw2102: command 0x0e transfer failed. [ 218.038461][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 218.038484][ T5900] dw2102: command 0x0e transfer failed. [ 218.038494][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 218.038507][ T5900] dw2102: command 0x0e transfer failed. [ 218.038515][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 218.038529][ T5900] dw2102: command 0x51 transfer failed. [ 218.038537][ T5900] dvb-usb: bulk message failed: -22 (5/0) [ 218.040671][ T5900] dw2102: i2c probe for address 0x68 failed. [ 218.040700][ T5900] dvb-usb: bulk message failed: -22 (5/0) [ 218.040715][ T5900] dw2102: i2c probe for address 0x69 failed. [ 218.040726][ T5900] dvb-usb: bulk message failed: -22 (5/0) [ 218.040738][ T5900] dw2102: i2c probe for address 0x6a failed. [ 218.040748][ T5900] dw2102: probing for demodulator failed. Is the external power switched on? [ 218.040758][ T5900] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 218.126824][ T6015] elo 0003:04E7:0030.001A: reserved main item tag 0xe [ 218.126862][ T6015] elo 0003:04E7:0030.001A: item fetching failed at offset 8/9 [ 218.127621][ T6015] elo 0003:04E7:0030.001A: parse failed [ 218.127725][ T6015] elo 0003:04E7:0030.001A: probe with driver elo failed with error -22 [ 218.328172][ T5900] rc_core: IR keymap rc-tt-1500 not found [ 218.328592][ T5900] Registered IR keymap rc-empty [ 218.330244][ T5900] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 218.333380][ T5900] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input16 [ 218.365448][ T6015] usb 6-1: USB disconnect, device number 4 [ 218.408871][ T5900] dvb-usb: schedule remote query interval to 250 msecs. [ 218.408892][ T5900] dw2102: su3000_power_ctrl: 0, initialized 1 [ 218.408905][ T5900] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 218.497163][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1319'. [ 218.512054][ T5900] usb 2-1: USB disconnect, device number 18 [ 218.816529][ T5900] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 219.121649][ T8900] sd 0:0:1:0: device reset [ 220.008873][ T6015] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 220.193978][ T6015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.194011][ T6015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.194047][ T6015] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 220.194069][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.207757][ T6015] usb 3-1: config 0 descriptor?? [ 220.633120][ T37] audit: type=1326 audit(1759086700.755:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.633169][ T37] audit: type=1326 audit(1759086700.755:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.633207][ T37] audit: type=1326 audit(1759086700.755:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.633247][ T37] audit: type=1326 audit(1759086700.755:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.633286][ T37] audit: type=1326 audit(1759086700.755:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.633325][ T37] audit: type=1326 audit(1759086700.755:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.633364][ T37] audit: type=1326 audit(1759086700.755:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.633403][ T37] audit: type=1326 audit(1759086700.755:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.639965][ T37] audit: type=1326 audit(1759086700.755:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7565aeec9 code=0x7fc00000 [ 220.773681][ T6015] samsung 0003:0419:0001.001B: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 220.875309][ T6015] usb 3-1: USB disconnect, device number 16 [ 220.890154][ T8955] netdevsim netdevsim5: Direct firmware load for . [ 220.890154][ T8955] failed with error -2 [ 220.890180][ T8955] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 220.890180][ T8955] [ 221.005715][ T8956] fido_id[8956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 221.528895][ T8976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.122118][ T8997] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 222.991795][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 223.200563][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 223.200720][ T9040] openvswitch: netlink: Unknown nsh attribute 0 [ 223.200748][ T9040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.989076][ T9061] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 224.257406][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 225.282251][ T9112] CIFS mount error: No usable UNC path provided in device string! [ 225.282251][ T9112] [ 225.282273][ T9112] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 225.562478][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1413'. [ 226.072174][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 226.087959][ T5964] Process accounting resumed [ 226.147527][ T9139] vlan4: entered promiscuous mode [ 226.949440][ T9167] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 226.950157][ T5901] kernel write not supported for file task/620/attr/keycreate (pid: 5901 comm: kworker/1:3) [ 229.540321][ T9257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1473'. [ 229.540349][ T9257] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1473'. [ 229.540365][ T9257] netlink: 'syz.1.1473': attribute type 5 has an invalid length. [ 229.540378][ T9257] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1473'. [ 230.279575][ T9285] syz_tun: entered promiscuous mode [ 230.279972][ T9284] syz_tun: left promiscuous mode [ 230.699787][ T9299] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1492'. [ 231.402126][ T9328] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1506'. [ 231.402259][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1506'. [ 231.411848][ T9330] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 231.411901][ T9330] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 231.411947][ T9330] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 231.411993][ T9330] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 231.412038][ T9330] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 231.412084][ T9330] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 231.412129][ T9330] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 231.412175][ T9330] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 231.412220][ T9330] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 231.412270][ T9330] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 231.412316][ T9330] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 231.412369][ T9330] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 231.412414][ T9330] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 231.412458][ T9330] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 231.412542][ T9330] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 231.412587][ T9330] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 231.412636][ T9330] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 231.412684][ T9330] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 231.412808][ T9330] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 233.115562][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1532'. [ 233.115675][ T9386] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1532'. [ 233.528759][ T5901] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 233.678860][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 233.681375][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 233.684416][ T5901] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 233.684442][ T5901] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 233.684462][ T5901] usb 3-1: Product: syz [ 233.684476][ T5901] usb 3-1: Manufacturer: syz [ 233.684490][ T5901] usb 3-1: SerialNumber: syz [ 233.956276][ T5901] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 233.956300][ T5901] usb 3-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 233.956318][ T5901] usb 3-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 233.956336][ T5901] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 234.161715][ T5901] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 234.176613][ T5901] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 234.204428][ T5901] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 234.248701][ T981] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 234.315923][ T9417] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 234.315977][ T9417] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 234.316072][ T9417] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 234.316212][ T9417] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 234.316261][ T9417] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 234.316312][ T9417] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 234.316437][ T9417] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 234.316484][ T9417] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 234.316531][ T9417] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 234.316578][ T9417] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 234.316629][ T9417] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 234.316675][ T9417] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 234.409365][ T6015] usb 3-1: USB disconnect, device number 17 [ 234.411180][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 234.413820][ T981] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 234.413842][ T981] usb 5-1: config 0 has no interface number 0 [ 234.425324][ T981] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 234.425352][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.425371][ T981] usb 5-1: Product: syz [ 234.425384][ T981] usb 5-1: Manufacturer: syz [ 234.425397][ T981] usb 5-1: SerialNumber: syz [ 234.481090][ T6015] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 234.514798][ T981] usb 5-1: config 0 descriptor?? [ 234.550343][ T6015] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 234.552147][ T6015] visor 3-1:1.0: device disconnected [ 234.555807][ T981] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 234.555866][ T981] dvb-usb: bulk message failed: -22 (2/0) [ 234.587493][ T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.605499][ T981] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 234.605557][ T981] usb 5-1: media controller created [ 234.688576][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 234.688835][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 234.772545][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.880316][ T981] cxusb: set interface failed [ 234.880334][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 235.025606][ T981] DVB: Unable to find symbol lgdt330x_attach() [ 235.025622][ T981] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 235.053425][ T6015] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 235.190601][ T981] rc_core: IR keymap rc-dvico-portable not found [ 235.190621][ T981] Registered IR keymap rc-empty [ 235.192427][ T981] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 235.195627][ T981] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input17 [ 235.198552][ T6015] usb 2-1: Using ep0 maxpacket: 8 [ 235.223370][ T981] dvb-usb: schedule remote query interval to 100 msecs. [ 235.223391][ T981] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 235.249801][ T981] usb 5-1: USB disconnect, device number 13 [ 235.253252][ T6015] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.270021][ T6015] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 31 [ 235.270052][ T6015] usb 2-1: config 8 interface 0 has no altsetting 0 [ 235.300506][ T6015] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 235.300533][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.300551][ T6015] usb 2-1: Product: syz [ 235.300564][ T6015] usb 2-1: Manufacturer: syz [ 235.300577][ T6015] usb 2-1: SerialNumber: syz [ 235.364241][ T9425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.724781][ T6015] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.724843][ T6015] usb 2-1: selecting invalid altsetting 0 [ 235.731208][ T981] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 235.980675][ T6015] usb 2-1: USB disconnect, device number 19 [ 236.073136][ T8618] udevd[8618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.317064][ T9556] bridge1: entered promiscuous mode [ 239.317094][ T9556] bridge1: entered allmulticast mode [ 239.387022][ T9556] team0: Port device bridge1 added [ 240.323983][ T9583] veth3: entered promiscuous mode [ 240.521577][ T9603] delete_channel: no stack [ 240.531686][ T9599] delete_channel: no stack [ 242.358715][ T44] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 242.548391][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.548439][ T44] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 242.548461][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.553968][ T44] usb 3-1: config 0 descriptor?? [ 242.997734][ T44] asus 0003:0B05:17E0.001C: item fetching failed at offset 2/5 [ 243.008892][ T9689] netlink: 'syz.5.1659': attribute type 4 has an invalid length. [ 243.013551][ T44] asus 0003:0B05:17E0.001C: Asus hid parse failed: -22 [ 243.013662][ T44] asus 0003:0B05:17E0.001C: probe with driver asus failed with error -22 [ 243.199351][ T5900] usb 3-1: USB disconnect, device number 18 [ 243.858385][ T5901] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 244.019051][ T5901] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 244.019079][ T5901] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 244.019098][ T5901] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 244.019116][ T5901] usb 6-1: config 220 has no interface number 2 [ 244.019193][ T5901] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 244.019220][ T5901] usb 6-1: config 220 interface 0 has no altsetting 0 [ 244.019237][ T5901] usb 6-1: config 220 interface 76 has no altsetting 0 [ 244.019255][ T5901] usb 6-1: config 220 interface 1 has no altsetting 0 [ 244.033289][ T5901] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 244.033317][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.033336][ T5901] usb 6-1: Product: syz [ 244.033349][ T5901] usb 6-1: Manufacturer: syz [ 244.033363][ T5901] usb 6-1: SerialNumber: syz [ 244.316242][ T5901] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 244.316283][ T5901] usb 6-1: No valid video chain found. [ 244.316353][ T5901] usb 6-1: selecting invalid altsetting 0 [ 244.418431][ T5901] usb 6-1: selecting invalid altsetting 0 [ 244.418470][ T5901] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 244.463840][ T5901] usb 6-1: USB disconnect, device number 5 [ 245.880168][ T9762] pimreg: entered allmulticast mode [ 248.567942][ T9850] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1718'. [ 249.045342][ T9857] [U] [ 250.396860][ T9899] nbd: must specify a device to reconfigure [ 252.169891][ T9962] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 252.188328][ T5900] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 252.354361][ T5900] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 252.354390][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.354409][ T5900] usb 3-1: Product: syz [ 252.354422][ T5900] usb 3-1: Manufacturer: syz [ 252.354435][ T5900] usb 3-1: SerialNumber: syz [ 252.403087][ T5900] usb 3-1: config 0 descriptor?? [ 252.418675][ T5900] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 252.439967][ T9970] netlink: 'syz.5.1770': attribute type 1 has an invalid length. [ 252.782276][ T9974] can0: slcan on ttynull. [ 252.846907][ T5900] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 253.046728][ T5900] usb 3-1: USB disconnect, device number 19 [ 253.096638][ T9973] can0 (unregistered): slcan off ttynull. [ 255.579970][T10073] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 255.669896][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.669969][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.807621][T10083] usb usb1: check_ctrlrecip: process 10083 (syz.4.1814) requesting ep 01 but needs 81 [ 255.940791][T10084] pim6reg: entered allmulticast mode [ 256.098406][ T5901] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 256.260621][ T5901] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 256.260649][ T5901] usb 3-1: config 0 has no interface number 0 [ 256.260682][ T5901] usb 3-1: config 0 interface 128 has no altsetting 0 [ 256.268312][ T5901] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 256.268339][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.268357][ T5901] usb 3-1: Product: syz [ 256.268371][ T5901] usb 3-1: Manufacturer: syz [ 256.268392][ T5901] usb 3-1: SerialNumber: syz [ 256.295413][ T5901] usb 3-1: config 0 descriptor?? [ 256.321686][ T5901] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 256.321770][ T5901] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 256.322256][ T5901] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 256.543575][ T5964] usb 3-1: USB disconnect, device number 20 [ 256.764618][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 256.764635][ T37] audit: type=1326 audit(1759086736.875:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10114 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 256.764692][ T37] audit: type=1326 audit(1759086736.885:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10114 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 256.782180][T10118] netlink: 'syz.4.1826': attribute type 5 has an invalid length. [ 256.798098][ T37] audit: type=1326 audit(1759086736.915:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10114 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 256.802797][ T37] audit: type=1326 audit(1759086736.925:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10114 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 256.806172][ T37] audit: type=1326 audit(1759086736.925:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10114 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 256.806220][ T37] audit: type=1326 audit(1759086736.925:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10114 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 256.806258][ T37] audit: type=1326 audit(1759086736.925:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10114 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 257.222172][T10131] xt_l2tp: missing protocol rule (udp|l2tpip) [ 257.228731][ T5964] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 257.383192][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.383222][ T5964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.383265][ T5964] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 257.383288][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.407331][ T5964] usb 5-1: config 0 descriptor?? [ 257.869613][ T5964] koneplus 0003:1E7D:2D51.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 258.062500][ T5964] usb 5-1: USB disconnect, device number 14 [ 258.739050][T10178] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 259.678161][T10205] [U] [ 259.721473][ T1249] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 259.871115][ T1249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.871151][ T1249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.871194][ T1249] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 259.871217][ T1249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.885562][ T1249] usb 2-1: config 0 descriptor?? [ 260.314883][ T1249] kone 0003:1E7D:2CED.001E: unknown main item tag 0x4 [ 260.335197][ T1249] kone 0003:1E7D:2CED.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 260.528609][ T1249] usb 2-1: USB disconnect, device number 20 [ 260.598093][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1876'. [ 260.598155][T10222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1876'. [ 260.664263][T10220] fido_id[10220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 261.264687][T10240] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1885'. [ 261.428307][ T5900] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 261.517802][T10250] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.1890'. [ 261.517825][T10250] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 261.517841][T10250] openvswitch: netlink: Message has 6332 unknown bytes. [ 261.578677][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 261.581438][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 261.581485][ T5900] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 261.581508][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.600821][ T5900] usb 3-1: config 0 descriptor?? [ 262.040329][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.040367][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.040393][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.040420][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.040448][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.040474][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.040501][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.040528][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.040555][ T5900] corsair 0003:1B1C:1B09.001F: unknown main item tag 0x0 [ 262.046548][ T5900] corsair 0003:1B1C:1B09.001F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.2-1/input0 [ 262.193129][T10269] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 262.193161][T10269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 262.193256][T10269] vhci_hcd vhci_hcd.0: Device attached [ 262.236454][ T1249] usb 3-1: USB disconnect, device number 21 [ 262.284064][T10275] fido_id[10275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 262.409273][ T9] vhci_hcd: vhci_device speed not set [ 262.468562][ T9] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 262.468853][ T5900] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 262.602909][T10285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.631037][ T5900] usb 2-1: config 0 has no interfaces? [ 262.631073][ T5900] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.631094][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.645249][ T5900] usb 2-1: config 0 descriptor?? [ 262.840269][T10292] netlink: 'syz.5.1910': attribute type 8 has an invalid length. [ 262.860017][T10271] vhci_hcd: unknown pdu 2 [ 262.866641][ T5900] usb 2-1: USB disconnect, device number 21 [ 262.870325][ T1043] vhci_hcd: stop threads [ 262.870342][ T1043] vhci_hcd: release socket [ 262.871213][ T1043] vhci_hcd: disconnect device [ 262.933836][ T9] vhci_hcd: vhci_device speed not set [ 263.004215][T10295] xt_l2tp: missing protocol rule (udp|l2tpip) [ 263.830863][T10324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.027494][ T5901] kernel write not supported for file /sg0 (pid: 5901 comm: kworker/1:3) [ 264.233844][ T5964] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 264.383088][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 264.385711][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.385754][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.385791][ T5964] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 264.385821][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.444245][ T5964] usb 6-1: config 0 descriptor?? [ 264.827345][T10351] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 264.827370][T10351] netlink: 'syz.2.1938': attribute type 2 has an invalid length. [ 264.846627][T10351] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 264.846645][T10351] netlink: 'syz.2.1938': attribute type 2 has an invalid length. [ 264.908333][ T5964] logitech 0003:046D:C20E.0020: rdesc size test failed for formula gp [ 264.909956][ T5964] logitech 0003:046D:C20E.0020: item fetching failed at offset 8/11 [ 264.911189][ T5964] logitech 0003:046D:C20E.0020: parse failed [ 264.911289][ T5964] logitech 0003:046D:C20E.0020: probe with driver logitech failed with error -22 [ 265.107774][ T5964] usb 6-1: USB disconnect, device number 6 [ 265.298729][T10364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.565290][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 265.565454][T10373] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 265.565480][T10373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.958459][ T5964] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 266.110917][ T5964] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.110953][ T5964] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 266.110982][ T5964] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.111015][ T5964] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 266.111038][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.169844][ T5964] usb 2-1: config 0 descriptor?? [ 266.174714][T10381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.199106][T10396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 266.613727][T10400] bridge0: entered promiscuous mode [ 266.614163][T10400] macsec1: entered promiscuous mode [ 266.614538][ T5964] hid-u2fzero 0003:10C4:8ACF.0021: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 266.697643][ T5964] hid-u2fzero 0003:10C4:8ACF.0021: U2F Zero LED initialised [ 266.698017][ T5964] hid-u2fzero 0003:10C4:8ACF.0021: U2F Zero RNG initialised [ 266.837211][ T5964] usb 2-1: USB disconnect, device number 22 [ 267.112660][T10410] fido_id[10410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 267.258633][T10417] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 267.258653][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'. [ 267.723375][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 267.723396][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 267.723423][T10431] netlink: 'syz.0.1975': attribute type 11 has an invalid length. [ 267.809613][ T5900] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 267.962802][ T5900] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 267.962836][ T5900] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.962870][ T5900] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 267.962892][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.983452][ T5900] usb 3-1: config 0 descriptor?? [ 267.984415][T10425] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.024089][T10441] vivid-002: disconnect [ 268.042973][T10440] vivid-002: reconnect [ 268.197261][T10442] vlan4: entered allmulticast mode [ 268.492361][ T5900] uclogic 0003:28BD:0078.0022: interface is invalid, ignoring [ 268.644046][ T5964] usb 3-1: USB disconnect, device number 22 [ 268.881677][T10471] bridge_slave_0: default FDB implementation only supports local addresses [ 268.882421][T10470] program syz.5.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.399743][T10516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.317466][T10542] syz.0.2030 (10542) used greatest stack depth: 17800 bytes left [ 273.063722][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2059'. [ 273.063748][T10605] tipc: Started in network mode [ 273.063770][T10605] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 273.063821][T10605] tipc: Enabling of bearer rejected, failed to enable media [ 273.081975][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 273.081998][T10607] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2060'. [ 273.101502][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 273.626402][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2068'. [ 274.158906][T10640] 9pnet_rdma: rdma_create_trans (10640): problem binding to privport: 13 [ 274.816912][T10659] mkiss: ax0: crc mode is auto. [ 275.443114][ T37] audit: type=1800 audit(1759086755.565:87): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2093" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 275.963572][T10698] netlink: 'syz.1.2103': attribute type 6 has an invalid length. [ 276.021866][T10700] GUP no longer grows the stack in syz.2.2104 (10700): 200000005000-200000008000 (200000004000) [ 276.021923][T10700] CPU: 1 UID: 0 PID: 10700 Comm: syz.2.2104 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 276.021946][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.021961][T10700] Call Trace: [ 276.021970][T10700] [ 276.021978][T10700] dump_stack_lvl+0x189/0x250 [ 276.022014][T10700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.022041][T10700] ? __pfx__printk+0x10/0x10 [ 276.022068][T10700] ? find_vma+0xe7/0x160 [ 276.022110][T10700] fixup_user_fault+0x661/0x720 [ 276.022144][T10700] fault_in_user_writeable+0x72/0xe0 [ 276.022167][T10700] futex_lock_pi+0x765/0xa70 [ 276.022201][T10700] ? __pfx_futex_lock_pi+0x10/0x10 [ 276.022256][T10700] ? __pfx_futex_wake_mark+0x10/0x10 [ 276.022299][T10700] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 276.022333][T10700] do_futex+0x292/0x420 [ 276.022362][T10700] ? __pfx_do_futex+0x10/0x10 [ 276.022384][T10700] ? __vm_munmap+0x301/0x3d0 [ 276.022414][T10700] __se_sys_futex+0x36f/0x400 [ 276.022444][T10700] ? __pfx___se_sys_futex+0x10/0x10 [ 276.022467][T10700] ? rcu_is_watching+0x15/0xb0 [ 276.022502][T10700] ? __x64_sys_futex+0x21/0xf0 [ 276.022527][T10700] do_syscall_64+0xfa/0x3b0 [ 276.022547][T10700] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.022575][T10700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.022594][T10700] ? clear_bhb_loop+0x60/0xb0 [ 276.022618][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.022637][T10700] RIP: 0033:0x7f406ea5eec9 [ 276.022660][T10700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.022678][T10700] RSP: 002b:00007f406ccc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 276.022708][T10700] RAX: ffffffffffffffda RBX: 00007f406ecb5fa0 RCX: 00007f406ea5eec9 [ 276.022723][T10700] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 276.022737][T10700] RBP: 00007f406eae1f91 R08: 0000000000000000 R09: 0000000000000000 [ 276.022751][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.022763][T10700] R13: 00007f406ecb6038 R14: 00007f406ecb5fa0 R15: 00007ffde5cc61a8 [ 276.022796][T10700] [ 276.405131][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2110'. [ 276.707120][T10722] binder: 10721:10722 ioctl c0306201 200000000680 returned -14 [ 277.028468][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 277.178623][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 277.182324][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.182355][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.182392][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 277.182414][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.243487][ T9] usb 6-1: config 0 descriptor?? [ 277.689846][ T9] logitech 0003:046D:C20E.0023: rdesc size test failed for formula gp [ 277.691017][ T9] logitech 0003:046D:C20E.0023: unbalanced collection at end of report description [ 277.691887][ T9] logitech 0003:046D:C20E.0023: parse failed [ 277.691994][ T9] logitech 0003:046D:C20E.0023: probe with driver logitech failed with error -22 [ 277.873214][ T981] usb 6-1: USB disconnect, device number 7 [ 279.004082][T10789] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 279.315275][T10804] program syz.2.2148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.709880][T10817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2157'. [ 279.832537][T10821] netlink: 'syz.1.2158': attribute type 10 has an invalid length. [ 279.906774][T10825] netlink: 'syz.1.2158': attribute type 10 has an invalid length. [ 279.973649][T10821] team0: Port device dummy0 added [ 280.019343][T10825] team0: Port device dummy0 removed [ 280.044189][T10825] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 280.423224][T10840] bridge0: port 4(syz_tun) entered blocking state [ 280.432088][T10840] bridge0: port 4(syz_tun) entered disabled state [ 280.432613][T10840] syz_tun: entered allmulticast mode [ 280.435915][T10840] syz_tun: entered promiscuous mode [ 280.437102][T10840] bridge0: port 4(syz_tun) entered blocking state [ 280.437257][T10840] bridge0: port 4(syz_tun) entered forwarding state [ 281.528448][T10877] tipc: Enabling of bearer rejected, media not registered [ 281.964101][T10889] netlink: 'syz.4.2191': attribute type 3 has an invalid length. [ 282.517886][T10862] syz.2.2178 (10862): drop_caches: 2 [ 282.801567][T10915] vlan4: entered promiscuous mode [ 283.058363][ T5964] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 283.226020][ T5964] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 283.226052][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 283.226077][ T5964] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 283.233187][ T5964] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 283.233213][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.233241][ T5964] usb 3-1: Product: syz [ 283.233254][ T5964] usb 3-1: Manufacturer: syz [ 283.233267][ T5964] usb 3-1: SerialNumber: syz [ 283.285997][ T5964] usb 3-1: config 0 descriptor?? [ 283.290151][T10919] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 283.290353][T10919] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 283.292553][ T5964] usb 3-1: ucan: probing device on interface #0 [ 283.900245][ T5964] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 283.978431][ T5964] usb 3-1: USB disconnect, device number 23 [ 284.368633][ T1249] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 284.518628][ T1249] usb 2-1: Using ep0 maxpacket: 16 [ 284.522586][ T1249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.522617][ T1249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.522639][ T1249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.522681][ T1249] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 284.522703][ T1249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.528038][ T1249] usb 2-1: config 0 descriptor?? [ 284.956341][T10975] futex_wake_op: syz.0.2230 tries to shift op by -1; fix this program [ 285.045175][ T1249] microsoft 0003:045E:07DA.0024: report is too long [ 285.045209][ T1249] microsoft 0003:045E:07DA.0024: item 0 4 0 8 parsing failed [ 285.046072][ T1249] microsoft 0003:045E:07DA.0024: parse failed [ 285.046180][ T1249] microsoft 0003:045E:07DA.0024: probe with driver microsoft failed with error -22 [ 285.245290][ T5964] usb 2-1: USB disconnect, device number 23 [ 287.119867][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2262'. [ 289.118352][ T5964] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 289.158601][ T5901] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 289.270577][ T5964] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.270604][ T5964] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.273823][ T5964] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.273848][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.273867][ T5964] usb 3-1: SerialNumber: syz [ 289.343697][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.343728][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.343820][ T5901] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 289.343842][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.423787][ T5901] usb 2-1: config 0 descriptor?? [ 289.542907][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 289.584681][ T5964] usb 3-1: 0:2 : does not exist [ 289.676116][ T5964] usb 3-1: USB disconnect, device number 24 [ 289.695809][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.695833][ T9] usb 6-1: config 0 has no interface number 0 [ 289.695873][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 289.695895][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.763519][ T9] usb 6-1: config 0 descriptor?? [ 289.783905][ T9] usb 6-1: selecting invalid altsetting 1 [ 289.784833][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 289.784849][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 289.870021][ T5901] hid_parser_main: 2 callbacks suppressed [ 289.870045][ T5901] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 289.870077][ T5901] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 289.870104][ T5901] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 289.870130][ T5901] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 289.870157][ T5901] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 289.870183][ T5901] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 289.870209][ T5901] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 289.972667][ T5901] arvo 0003:1E7D:30D4.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 290.055715][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.074464][ T5901] arvo 0003:1E7D:30D4.0025: couldn't init struct arvo_device [ 290.074518][ T5901] arvo 0003:1E7D:30D4.0025: couldn't install keyboard [ 290.091123][ T5901] arvo 0003:1E7D:30D4.0025: probe with driver arvo failed with error -71 [ 290.120845][ T5901] usb 2-1: USB disconnect, device number 24 [ 290.283337][ T9] DVB: Unable to find symbol cx22700_attach() [ 290.419789][T11122] fido_id[11122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 290.429128][ T9] DVB: Unable to find symbol tda10046_attach() [ 290.429141][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 290.463802][ T9] usb 6-1: USB disconnect, device number 8 [ 290.571253][ T5916] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 290.724671][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 290.724706][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 290.724828][ T5916] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 290.724851][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.736938][ T5916] usb 5-1: config 0 descriptor?? [ 290.739540][T11121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 291.088346][ T5901] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 291.207693][ T5916] waltop 0003:172F:0500.0026: unknown main item tag 0x0 [ 291.207731][ T5916] waltop 0003:172F:0500.0026: unknown main item tag 0x0 [ 291.207758][ T5916] waltop 0003:172F:0500.0026: unknown main item tag 0x0 [ 291.219856][ T5916] waltop 0003:172F:0500.0026: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.4-1/input0 [ 291.258786][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 291.261354][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.261383][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.261420][ T5901] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 291.261442][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.316477][ T5901] usb 2-1: config 0 descriptor?? [ 291.395568][ T5916] usb 5-1: USB disconnect, device number 15 [ 291.614785][T11148] fido_id[11148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 291.753172][ T5901] koneplus 0003:1E7D:2D51.0027: item fetching failed at offset 1/5 [ 291.753961][ T5901] koneplus 0003:1E7D:2D51.0027: parse failed [ 291.754030][ T5901] koneplus 0003:1E7D:2D51.0027: probe with driver koneplus failed with error -22 [ 291.976578][ T5901] usb 2-1: USB disconnect, device number 25 [ 292.695900][T11180] random: crng reseeded on system resumption [ 293.255358][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 293.772768][T11211] use of bytesused == 0 is deprecated and will be removed in the future, [ 293.772784][T11211] use the actual size instead. [ 294.108407][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 294.155940][T11225] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2350'. [ 294.168603][ T5916] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 294.281659][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 294.286557][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 294.286584][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.307276][ T9] usb 3-1: config 0 descriptor?? [ 294.337710][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 294.341366][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.341470][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 294.341493][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.404066][ T5916] usb 2-1: config 0 descriptor?? [ 294.950142][ T5916] logitech-djreceiver 0003:046D:C71F.0028: item fetching failed at offset 3/7 [ 294.951426][ T5916] logitech-djreceiver 0003:046D:C71F.0028: logi_dj_probe: parse failed [ 294.951498][ T5916] logitech-djreceiver 0003:046D:C71F.0028: probe with driver logitech-djreceiver failed with error -22 [ 295.054592][ T5901] usb 3-1: USB disconnect, device number 25 [ 295.163372][ T5916] usb 2-1: USB disconnect, device number 26 [ 295.601695][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 296.566702][ T37] audit: type=1326 audit(1759086776.685:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11270 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 296.583218][ T37] audit: type=1326 audit(1759086776.705:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11270 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d6a19d710 code=0x7ffc0000 [ 296.583269][ T37] audit: type=1326 audit(1759086776.705:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11270 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 296.583309][ T37] audit: type=1326 audit(1759086776.705:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11270 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 296.586254][ T37] audit: type=1326 audit(1759086776.705:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11270 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 296.586300][ T37] audit: type=1326 audit(1759086776.705:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11270 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 296.586338][ T37] audit: type=1326 audit(1759086776.705:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11270 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 296.841033][ T5900] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.988327][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 296.994100][ T5900] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 296.994128][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.994147][ T5900] usb 5-1: Product: syz [ 296.994160][ T5900] usb 5-1: Manufacturer: syz [ 296.994174][ T5900] usb 5-1: SerialNumber: syz [ 297.018219][ T5900] usb 5-1: config 0 descriptor?? [ 297.234156][ T5900] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 297.644368][ T5900] usb write operation failed. (-71) [ 297.663442][ T5900] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.664105][ T5900] dvbdev: DVB: registering new adapter (Terratec H7) [ 297.664157][ T5900] usb 5-1: media controller created [ 297.675814][ T5900] usb read operation failed. (-71) [ 297.676378][ T5900] usb write operation failed. (-71) [ 297.703073][ T5900] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 297.728697][ T5900] usb 5-1: USB disconnect, device number 16 [ 297.935174][ T37] audit: type=1326 audit(1759086778.055:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11300 comm="syz.0.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 297.936534][ T37] audit: type=1326 audit(1759086778.055:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11300 comm="syz.0.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 297.982042][ T37] audit: type=1326 audit(1759086778.105:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11300 comm="syz.0.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2d6a19eec9 code=0x7ffc0000 [ 299.623826][T11353] gtp0: entered promiscuous mode [ 300.329514][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 300.474691][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2418'. [ 300.624263][T11393] tmpfs: Bad value for 'mpol' [ 301.271781][T11416] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 301.271891][T11416] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 301.271944][T11416] ALSA: mixer_oss: invalid OSS volume 'GJJ³ 0xffff: 1114112 [ 334.018356][ T5916] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 334.182046][ T5916] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 334.182073][ T5916] usb 3-1: config 0 has no interface number 0 [ 334.185272][ T5916] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 334.185298][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.185317][ T5916] usb 3-1: Product: syz [ 334.185331][ T5916] usb 3-1: Manufacturer: syz [ 334.185344][ T5916] usb 3-1: SerialNumber: syz [ 334.221223][ T5916] usb 3-1: config 0 descriptor?? [ 334.226248][ T5916] hub 3-1:0.217: bad descriptor, ignoring hub [ 334.226282][ T5916] hub 3-1:0.217: probe with driver hub failed with error -5 [ 334.248543][ T5901] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 334.398617][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 334.401501][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 334.403247][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 334.403276][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 334.403302][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 334.403325][ T5901] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 334.403349][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 334.403370][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.403390][ T5901] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 334.408001][ T5901] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 334.408026][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.408045][ T5901] usb 2-1: Product: syz [ 334.408059][ T5901] usb 2-1: Manufacturer: syz [ 334.408072][ T5901] usb 2-1: SerialNumber: syz [ 334.449154][ T5916] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 334.465192][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.473208][ T5916] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 334.473268][ T5916] usb 3-1: media controller created [ 334.570559][ T5901] usb 2-1: config 0 descriptor?? [ 334.571564][T12450] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 334.595554][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.609344][ T5901] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.758737][ T5916] DVB: Unable to find symbol dib7000p_attach() [ 334.758752][ T5916] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 334.806583][ T5901] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 334.874865][ T9] usb 2-1: USB disconnect, device number 29 [ 334.888888][ T5916] rc_core: IR keymap rc-dib0700-rc5 not found [ 334.888906][ T5916] Registered IR keymap rc-empty [ 334.889335][ T5916] dvb-usb: could not initialize remote control. [ 334.889345][ T5916] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 334.938550][ T5916] usb 3-1: USB disconnect, device number 30 [ 335.061243][ T8368] udevd[8368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.141116][ T5916] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 335.697612][T12496] netlink: 'syz.2.2935': attribute type 1 has an invalid length. [ 336.465471][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2945'. [ 336.886584][T12538] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2954'. [ 337.648400][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 337.802652][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.802691][ T9] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 337.802713][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.807730][ T9] usb 5-1: config 0 descriptor?? [ 338.375956][ T9] nintendo 0003:057E:200E.002F: unknown main item tag 0x0 [ 338.375992][ T9] nintendo 0003:057E:200E.002F: unknown main item tag 0x0 [ 338.376019][ T9] nintendo 0003:057E:200E.002F: unknown main item tag 0x0 [ 338.376046][ T9] nintendo 0003:057E:200E.002F: unknown main item tag 0x0 [ 338.376073][ T9] nintendo 0003:057E:200E.002F: unknown main item tag 0x0 [ 338.442963][ T9] nintendo 0003:057E:200E.002F: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 338.499557][ T9] nintendo 0003:057E:200E.002F: Failed charging grip handshake [ 338.499586][ T9] nintendo 0003:057E:200E.002F: Failed to initialize controller; ret=-110 [ 338.546653][ T9] nintendo 0003:057E:200E.002F: probe - fail = -110 [ 338.546798][ T9] nintendo 0003:057E:200E.002F: probe with driver nintendo failed with error -110 [ 338.617772][ T9] usb 5-1: USB disconnect, device number 19 [ 338.972370][T12578] fido_id[12578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 339.638696][ T5916] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 339.696073][ T5156] Bluetooth: hci5: command 0x0405 tx timeout [ 339.798438][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 339.801893][ T5916] usb 6-1: config 0 interface 0 has no altsetting 0 [ 339.801931][ T5916] usb 6-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 339.801953][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.841287][ T5916] usb 6-1: config 0 descriptor?? [ 340.333301][ T5916] apple 0003:05AC:0250.0030: unknown main item tag 0x0 [ 340.333337][ T5916] apple 0003:05AC:0250.0030: unknown main item tag 0x0 [ 340.333365][ T5916] apple 0003:05AC:0250.0030: unknown main item tag 0x0 [ 340.333392][ T5916] apple 0003:05AC:0250.0030: unknown main item tag 0x0 [ 340.333419][ T5916] apple 0003:05AC:0250.0030: unknown main item tag 0x0 [ 340.334129][ T5916] apple 0003:05AC:0250.0030: reserved main item tag 0xe [ 340.334157][ T5916] apple 0003:05AC:0250.0030: ignoring exceeding usage max [ 340.335755][ T5916] apple 0003:05AC:0250.0030: unknown global tag 0xe [ 340.335772][ T5916] apple 0003:05AC:0250.0030: item 0 2 1 14 parsing failed [ 340.336601][ T5916] apple 0003:05AC:0250.0030: parse failed [ 340.336711][ T5916] apple 0003:05AC:0250.0030: probe with driver apple failed with error -22 [ 340.609539][ T5916] usb 6-1: USB disconnect, device number 13 [ 341.728235][ T37] audit: type=1326 audit(1759086822.850:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12607 comm="syz.5.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb34f3eec9 code=0x7ffc0000 [ 341.728287][ T37] audit: type=1326 audit(1759086822.850:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12607 comm="syz.5.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb34f3eec9 code=0x7ffc0000 [ 341.728328][ T37] audit: type=1326 audit(1759086822.850:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12607 comm="syz.5.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7feb34f3eec9 code=0x7ffc0000 [ 341.728368][ T37] audit: type=1326 audit(1759086822.850:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12607 comm="syz.5.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb34f3eec9 code=0x7ffc0000 [ 341.728408][ T37] audit: type=1326 audit(1759086822.850:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12607 comm="syz.5.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb34f3eec9 code=0x7ffc0000 [ 343.997211][ C1] sched: DL replenish lagged too much [ 353.445432][ T5916] IPVS: starting estimator thread 0... [ 353.558698][T12651] IPVS: using max 7 ests per chain, 16800 per kthread [ 355.396923][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.415131][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.416503][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.417659][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.440540][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.489087][ T5156] Bluetooth: hci2: command tx timeout [ 358.759252][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 358.911414][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.911461][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 358.911484][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.965947][ T9] usb 3-1: config 0 descriptor?? [ 359.460121][ T9] kye 0003:0458:5017.0031: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 359.461314][ T9] hid_parser_main: 57 callbacks suppressed [ 359.461331][ T9] kye 0003:0458:5017.0031: unknown main item tag 0x0 [ 359.461359][ T9] kye 0003:0458:5017.0031: unknown main item tag 0x0 [ 359.461386][ T9] kye 0003:0458:5017.0031: unknown main item tag 0x0 [ 359.461412][ T9] kye 0003:0458:5017.0031: unknown main item tag 0x0 [ 359.461439][ T9] kye 0003:0458:5017.0031: unknown main item tag 0x0 [ 359.556223][ T9] kye 0003:0458:5017.0031: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 359.556259][ T9] kye 0003:0458:5017.0031: tablet-enabling feature report not found [ 359.556273][ T9] kye 0003:0458:5017.0031: tablet enabling failed [ 359.579170][ T5156] Bluetooth: hci2: command tx timeout [ 359.696468][ T9] usb 3-1: USB disconnect, device number 31 [ 359.950700][T12671] fido_id[12671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 360.055664][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.067867][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.080696][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.108851][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.110371][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.648743][ T5156] Bluetooth: hci2: command tx timeout [ 362.213676][ T5156] Bluetooth: hci6: command tx timeout [ 362.979819][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.013251][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.015480][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.034342][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.035610][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.728490][ T5156] Bluetooth: hci2: command tx timeout [ 364.290176][ T5156] Bluetooth: hci6: command tx timeout [ 365.088899][ T5156] Bluetooth: hci7: command tx timeout [ 366.369041][ T5849] Bluetooth: hci6: command tx timeout [ 367.168364][ T5849] Bluetooth: hci7: command tx timeout [ 368.450286][ T5849] Bluetooth: hci6: command tx timeout [ 369.248862][ T5849] Bluetooth: hci7: command tx timeout [ 369.670323][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3033'. [ 369.853618][T12722] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 369.853618][T12722] [ 371.332226][ T5849] Bluetooth: hci7: command tx timeout [ 372.756107][T12662] chnl_net:caif_netlink_parms(): no params data found [ 378.559695][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.559772][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.306769][T12741] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3036'. [ 382.253377][T12764] binder: 12763:12764 ioctl c00c620f 200000000500 returned -22 [ 384.434909][T12673] chnl_net:caif_netlink_parms(): no params data found [ 385.691914][T12686] chnl_net:caif_netlink_parms(): no params data found [ 403.644428][T12776] netlink: 'syz.2.3051': attribute type 29 has an invalid length. [ 404.666890][ T5156] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 404.687860][ T5156] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 404.708524][ T5156] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 404.712394][ T5156] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 404.713224][ T5156] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 406.768618][ T5849] Bluetooth: hci8: command tx timeout [ 408.849280][ T5849] Bluetooth: hci8: command tx timeout [ 410.934501][ T5849] Bluetooth: hci8: command tx timeout [ 413.008772][ T5849] Bluetooth: hci8: command tx timeout [ 415.120252][ T5156] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 415.142053][ T5156] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 415.143611][ T5156] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 415.145056][ T5156] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 415.145923][ T5156] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 416.080680][ T5156] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 416.106257][ T5156] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 416.128891][ T5156] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 416.137195][ T5156] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 416.138061][ T5156] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 417.248827][ T5156] Bluetooth: hci9: command tx timeout [ 418.208793][ T5156] Bluetooth: hci10: command tx timeout [ 419.328940][ T5156] Bluetooth: hci9: command tx timeout [ 419.543235][ T5849] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 419.562031][ T5849] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 419.563381][ T5849] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 419.564559][ T5849] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 419.565337][ T5849] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 420.298890][ T5156] Bluetooth: hci10: command tx timeout [ 421.408628][ T5156] Bluetooth: hci9: command tx timeout [ 421.648594][ T5156] Bluetooth: hci11: command tx timeout [ 422.368875][ T5156] Bluetooth: hci10: command tx timeout [ 423.494609][ T5156] Bluetooth: hci9: command tx timeout [ 423.705447][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 423.729188][ T5841] Bluetooth: hci11: command tx timeout [ 423.752272][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 423.753569][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 423.754757][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 423.755546][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.448461][ T5156] Bluetooth: hci10: command tx timeout [ 425.888927][ T5156] Bluetooth: hci4: command tx timeout [ 426.212821][ T5156] Bluetooth: hci11: command tx timeout [ 427.555548][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.555693][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.557076][T12662] bridge_slave_0: entered allmulticast mode [ 427.595133][T12662] bridge_slave_0: entered promiscuous mode [ 427.605983][T12673] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 427.975585][ T5156] Bluetooth: hci4: command tx timeout [ 428.288372][ T5156] Bluetooth: hci11: command tx timeout [ 430.048389][ T5156] Bluetooth: hci4: command tx timeout [ 432.130459][ T5156] Bluetooth: hci4: command tx timeout [ 442.022532][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.022632][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.007560][ T9373] team0: Port device syz_tun removed [ 465.240738][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 465.263607][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 465.264968][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 465.266642][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 465.267483][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 469.339386][ T5156] Bluetooth: hci7: command tx timeout [ 471.408724][ T5156] Bluetooth: hci7: command tx timeout [ 473.502612][ T5156] Bluetooth: hci7: command tx timeout [ 475.573142][ T5156] Bluetooth: hci7: command tx timeout [ 475.674283][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.705163][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.706552][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.707783][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.753194][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.699869][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 476.725679][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 476.741075][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 476.743128][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 476.743921][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 480.310984][ T5849] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 480.330288][ T5849] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 480.331620][ T5849] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 480.332791][ T5849] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 480.333554][ T5849] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 480.379539][ T5849] Bluetooth: hci6: command tx timeout [ 480.380000][ T5849] Bluetooth: hci2: command tx timeout [ 482.449287][ T5156] Bluetooth: hci12: command tx timeout [ 482.449929][ T5156] Bluetooth: hci2: command tx timeout [ 482.449955][ T5156] Bluetooth: hci6: command tx timeout [ 484.021837][ T5156] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 484.040860][ T5156] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 484.042133][ T5156] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 484.043280][ T5156] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 484.044059][ T5156] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 484.530562][ T5849] Bluetooth: hci12: command tx timeout [ 484.530587][ T59] Bluetooth: hci6: command tx timeout [ 484.532033][ T5156] Bluetooth: hci2: command tx timeout [ 486.608767][ T5156] Bluetooth: hci2: command tx timeout [ 486.608800][ T5156] Bluetooth: hci12: command tx timeout [ 486.690465][ T38] INFO: task syz.4.2975:12585 blocked for more than 143 seconds. [ 486.690490][ T38] Not tainted syzkaller #0 [ 486.690500][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.690509][ T38] task:syz.4.2975 state:D stack:25128 pid:12585 tgid:12585 ppid:5846 task_flags:0x400040 flags:0x00004006 [ 486.690568][ T38] Call Trace: [ 486.690575][ T38] [ 486.690588][ T38] __schedule+0x16f3/0x4c20 [ 486.690627][ T38] ? trace_sched_exit_tp+0x36/0x110 [ 486.690665][ T38] ? __lock_acquire+0xab9/0xd20 [ 486.690688][ T38] ? __pfx___schedule+0x10/0x10 [ 486.690729][ T38] ? schedule+0x91/0x360 [ 486.690756][ T38] schedule+0x165/0x360 [ 486.690781][ T38] schedule_timeout+0x9a/0x270 [ 486.690805][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 486.690841][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.690864][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.690886][ T38] ? wait_for_completion+0x267/0x5d0 [ 486.690913][ T38] wait_for_completion+0x2bf/0x5d0 [ 486.690951][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 486.690976][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 486.691006][ T38] rcu_barrier+0x463/0x570 [ 486.691037][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 486.691057][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 486.691082][ T38] kvm_put_kvm+0xf8e/0x1670 [ 486.691111][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 486.691134][ T38] kvm_vm_release+0x46/0x50 [ 486.691155][ T38] __fput+0x45b/0xa80 [ 486.691184][ T38] task_work_run+0x1d1/0x260 [ 486.691202][ T38] ? __pfx_task_work_run+0x10/0x10 [ 486.691226][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 486.691253][ T38] exit_to_user_mode_loop+0xec/0x110 [ 486.691276][ T38] do_syscall_64+0x2bd/0x3b0 [ 486.691293][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.691316][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.691334][ T38] ? clear_bhb_loop+0x60/0xb0 [ 486.691372][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.691395][ T38] RIP: 0033:0x7ff7565aeec9 [ 486.691412][ T38] RSP: 002b:00007ffdb6b0a438 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 486.691437][ T38] RAX: 0000000000000000 RBX: 0000000000052cb7 RCX: 00007ff7565aeec9 [ 486.691450][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 486.691465][ T38] RBP: 00007ff756807da0 R08: 0000000000000001 R09: 00000003b6b0a72f [ 486.691482][ T38] R10: 0000001b30a20000 R11: 0000000000000246 R12: 00007ff756805fac [ 486.691495][ T38] R13: 00007ff756805fa0 R14: ffffffffffffffff R15: 00007ffdb6b0a550 [ 486.691531][ T38] [ 486.691560][ T38] [ 486.691560][ T38] Showing all locks held in the system: [ 486.691569][ T38] 3 locks held by kworker/u8:0/12: [ 486.691579][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 486.691633][ T38] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 486.691678][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 486.691726][ T38] 6 locks held by rcuc/1/28: [ 486.691737][ T38] 2 locks held by ksoftirqd/1/30: [ 486.691748][ T38] 1 lock held by khungtaskd/38: [ 486.691757][ T38] #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 486.691802][ T38] 5 locks held by kworker/u8:4/67: [ 486.691818][ T38] 3 locks held by kworker/u8:6/1043: [ 486.691828][ T38] #0: ffff88802fb69938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 486.691873][ T38] #1: ffffc9000462fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 486.691919][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 486.691966][ T38] 3 locks held by kworker/0:2/1249: [ 486.691976][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 486.692020][ T38] #1: ffffc90004b2fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 486.692064][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 486.692109][ T38] 2 locks held by kworker/u8:11/1434: [ 486.692119][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 486.692164][ T38] #1: ffffc9000509fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 486.692219][ T38] 2 locks held by kworker/u8:13/4203: [ 486.692231][ T38] 2 locks held by getty/5597: [ 486.692241][ T38] #0: ffff88823bf2a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 486.692282][ T38] #1: ffffc9000418c2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 486.692327][ T38] 4 locks held by kworker/u9:3/5841: [ 486.692338][ T38] #0: ffff88806c945138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 486.692386][ T38] #1: ffffc90004c9fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 486.692437][ T38] #2: ffff88806fd1c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 486.692483][ T38] #3: ffffffff8ee3b358 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 486.692534][ T38] 1 lock held by syz.2.1526/9373: [ 486.692544][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 486.692586][ T38] 1 lock held by syz.4.2975/12585: [ 486.692596][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 486.692638][ T38] 1 lock held by syz.1.2990/12616: [ 486.692648][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 486.692690][ T38] 1 lock held by syz.5.3003/12643: [ 486.692700][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 486.692743][ T38] 1 lock held by syz-executor/12662: [ 486.692753][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 486.692799][ T38] 1 lock held by syz-executor/12673: [ 486.692810][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 486.692855][ T38] 1 lock held by syz-executor/12686: [ 486.692865][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 486.692913][ T38] 1 lock held by syz.0.3054/12783: [ 486.692923][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 486.692964][ T38] 4 locks held by syz-executor/12789: [ 486.692974][ T38] #0: ffff88802b8d4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 486.693017][ T38] #1: ffff88802b8d40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 486.693064][ T38] #2: ffffffff8ee3b358 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 486.693106][ T38] #3: ffff888028aef358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 486.693151][ T38] 1 lock held by syz-executor/12796: [ 486.693161][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 486.693202][ T38] 1 lock held by syz-executor/12801: [ 486.693211][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 486.693254][ T38] 1 lock held by syz-executor/12804: [ 486.693264][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 486.693306][ T38] 1 lock held by syz-executor/12811: [ 486.693316][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 486.693367][ T38] 1 lock held by syz-executor/12824: [ 486.693377][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 486.693420][ T38] 1 lock held by syz-executor/12830: [ 486.693436][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 486.693478][ T38] 1 lock held by syz-executor/12835: [ 486.693488][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 486.693530][ T38] 1 lock held by syz-executor/12838: [ 486.693541][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 486.693583][ T38] 1 lock held by syz-executor/12842: [ 486.693594][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 486.693636][ T38] [ 486.693640][ T38] ============================================= [ 486.693640][ T38] [ 486.693654][ T38] NMI backtrace for cpu 0 [ 486.693678][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 486.693726][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.693750][ T38] Call Trace: [ 486.693763][ T38] [ 486.693770][ T38] dump_stack_lvl+0x189/0x250 [ 486.693797][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.693819][ T38] ? __pfx__printk+0x10/0x10 [ 486.693851][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 486.693875][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 486.693899][ T38] ? __pfx__printk+0x10/0x10 [ 486.693923][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 486.693945][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 486.693970][ T38] watchdog+0xf93/0xfe0 [ 486.693995][ T38] ? watchdog+0x1de/0xfe0 [ 486.694021][ T38] kthread+0x711/0x8a0 [ 486.694047][ T38] ? __pfx_watchdog+0x10/0x10 [ 486.694067][ T38] ? __pfx_kthread+0x10/0x10 [ 486.694095][ T38] ? __pfx_kthread+0x10/0x10 [ 486.694119][ T38] ret_from_fork+0x436/0x7d0 [ 486.694143][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 486.694169][ T38] ? __switch_to_asm+0x39/0x70 [ 486.694184][ T38] ? __switch_to_asm+0x33/0x70 [ 486.694199][ T38] ? __pfx_kthread+0x10/0x10 [ 486.694223][ T38] ret_from_fork_asm+0x1a/0x30 [ 486.694255][ T38] [ 486.694261][ T38] Sending NMI from CPU 0 to CPUs 1: [ 486.694286][ C1] NMI backtrace for cpu 1 [ 486.694302][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 486.694344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.694365][ C1] RIP: 0010:__lock_acquire+0x7f9/0xd20 [ 486.694394][ C1] Code: 29 48 ff c3 48 63 87 18 0b 00 00 49 83 c5 28 48 39 c3 7c d2 e9 c4 00 00 00 48 c7 c7 90 98 87 8d 48 89 de e8 c9 50 53 03 eb c2 <44> 89 e0 25 ff 1f 00 00 41 c1 ec 03 41 81 e4 00 60 00 00 41 09 c4 [ 486.694407][ C1] RSP: 0018:ffffc90000a2df88 EFLAGS: 00000046 [ 486.694420][ C1] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000000 [ 486.694431][ C1] RDX: 0000000000000000 RSI: ffff88801cac0c10 RDI: ffff88801cac0000 [ 486.694442][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 486.694451][ C1] R10: ffffc90000a2e1d8 R11: ffffffff81aaf080 R12: 000000000002000b [ 486.694463][ C1] R13: ffff88801cac0b20 R14: ffff88801cac0c10 R15: 402ca304a0aa584e [ 486.694475][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 486.694488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.694499][ C1] CR2: 00007f2d6a3f7dac CR3: 0000000036414000 CR4: 00000000003526f0 [ 486.694513][ C1] Call Trace: [ 486.694519][ C1] [ 486.694528][ C1] ? unwind_next_frame+0xa5/0x2390 [ 486.694547][ C1] lock_acquire+0x120/0x360 [ 486.694563][ C1] ? unwind_next_frame+0xa5/0x2390 [ 486.694584][ C1] ? unwind_next_frame+0xa5/0x2390 [ 486.694602][ C1] ? smpboot_thread_fn+0x542/0xa60 [ 486.694618][ C1] ? unwind_next_frame+0xa5/0x2390 [ 486.694636][ C1] unwind_next_frame+0xc2/0x2390 [ 486.694653][ C1] ? unwind_next_frame+0xa5/0x2390 [ 486.694673][ C1] ? unwind_next_frame+0xa5/0x2390 [ 486.694690][ C1] ? rcu_cpu_kthread+0xc3d/0x1b50 [ 486.694711][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 486.694728][ C1] arch_stack_walk+0x11c/0x150 [ 486.694750][ C1] ? smpboot_thread_fn+0x542/0xa60 [ 486.694767][ C1] stack_trace_save+0x9c/0xe0 [ 486.694782][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 486.694796][ C1] ? do_raw_spin_lock+0x121/0x290 [ 486.694816][ C1] kasan_save_track+0x3e/0x80 [ 486.694831][ C1] ? kasan_save_track+0x3e/0x80 [ 486.694846][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 486.694861][ C1] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 486.694879][ C1] ? ref_tracker_alloc+0x13b/0x450 [ 486.694896][ C1] ? dst_init+0xd9/0x450 [ 486.694909][ C1] ? dst_alloc+0x12a/0x170 [ 486.694923][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 486.694939][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 486.694954][ C1] ? ip_route_output_flow+0x2a/0x150 [ 486.694967][ C1] ? ip_route_me_harder+0x6d2/0x1030 [ 486.694982][ C1] ? synproxy_send_tcp+0x359/0x6c0 [ 486.695001][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 486.695020][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 486.695035][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 486.695049][ C1] ? nft_do_chain+0x40c/0x1920 [ 486.695062][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 486.695076][ C1] ? nf_hook_slow+0xc2/0x220 [ 486.695093][ C1] ? NF_HOOK+0x206/0x3a0 [ 486.695110][ C1] ? NF_HOOK+0x30c/0x3a0 [ 486.695130][ C1] ? __netif_receive_skb+0x143/0x380 [ 486.695146][ C1] ? process_backlog+0x31e/0x900 [ 486.695162][ C1] ? __napi_poll+0xb3/0x540 [ 486.695182][ C1] ? net_rx_action+0x707/0xe00 [ 486.695198][ C1] ? handle_softirqs+0x22c/0x710 [ 486.695214][ C1] ? __local_bh_enable_ip+0x179/0x270 [ 486.695230][ C1] ? rcu_cpu_kthread+0xc3d/0x1b50 [ 486.695246][ C1] ? smpboot_thread_fn+0x542/0xa60 [ 486.695273][ C1] ? ref_tracker_alloc+0x13b/0x450 [ 486.695292][ C1] __kasan_kmalloc+0x93/0xb0 [ 486.695309][ C1] __kmalloc_cache_noprof+0x1a8/0x320 [ 486.695326][ C1] ? ref_tracker_alloc+0x13b/0x450 [ 486.695347][ C1] ref_tracker_alloc+0x13b/0x450 [ 486.695367][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 486.695391][ C1] ? dst_alloc+0x105/0x170 [ 486.695405][ C1] ? dst_alloc+0x105/0x170 [ 486.695420][ C1] dst_init+0xd9/0x450 [ 486.695436][ C1] dst_alloc+0x12a/0x170 [ 486.695452][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 486.695471][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 486.695487][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 486.695503][ C1] ? __lock_acquire+0xab9/0xd20 [ 486.695520][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 486.695538][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 486.695557][ C1] ip_route_output_flow+0x2a/0x150 [ 486.695570][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 486.695587][ C1] ip_route_me_harder+0x6d2/0x1030 [ 486.695608][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 486.695635][ C1] synproxy_send_tcp+0x359/0x6c0 [ 486.695657][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 486.695681][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 486.695700][ C1] ? nft_synproxy_do_eval+0x218/0x570 [ 486.695716][ C1] ? synproxy_pernet+0x45/0x270 [ 486.695733][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 486.695750][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 486.695767][ C1] ? nf_ip_checksum+0x13c/0x510 [ 486.695783][ C1] nft_synproxy_do_eval+0x345/0x570 [ 486.695801][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 486.695823][ C1] nft_do_chain+0x40c/0x1920 [ 486.695836][ C1] ? rcu_is_watching+0x15/0xb0 [ 486.695861][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 486.695877][ C1] ? rcu_is_watching+0x15/0xb0 [ 486.695907][ C1] nft_do_chain_inet+0x25d/0x340 [ 486.695922][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 486.695937][ C1] ? __lock_acquire+0xab9/0xd20 [ 486.695958][ C1] ? NF_HOOK+0x9a/0x3a0 [ 486.695975][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 486.695990][ C1] nf_hook_slow+0xc2/0x220 [ 486.696010][ C1] NF_HOOK+0x206/0x3a0 [ 486.696027][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 486.696045][ C1] ? NF_HOOK+0x9a/0x3a0 [ 486.696062][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 486.696078][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 486.696097][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 486.696116][ C1] ? skb_dst+0x4f/0xd0 [ 486.696133][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 486.696152][ C1] NF_HOOK+0x30c/0x3a0 [ 486.696169][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 486.696195][ C1] ? NF_HOOK+0x9a/0x3a0 [ 486.696216][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 486.696234][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 486.696255][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 486.696272][ C1] __netif_receive_skb+0x143/0x380 [ 486.696288][ C1] ? rt_spin_unlock+0x65/0x80 [ 486.696306][ C1] ? process_backlog+0x27b/0x900 [ 486.696323][ C1] process_backlog+0x31e/0x900 [ 486.696344][ C1] __napi_poll+0xb3/0x540 [ 486.696363][ C1] net_rx_action+0x707/0xe00 [ 486.696379][ C1] ? arch_stack_walk+0x11c/0x150 [ 486.696399][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 486.696417][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 486.696436][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 486.696458][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 486.696478][ C1] handle_softirqs+0x22c/0x710 [ 486.696498][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 486.696519][ C1] __local_bh_enable_ip+0x179/0x270 [ 486.696535][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 486.696556][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 486.696574][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 486.696592][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 486.696613][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 486.696635][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 486.696655][ C1] ? __lock_acquire+0xab9/0xd20 [ 486.696671][ C1] ? __pfx___schedule+0x10/0x10 [ 486.696695][ C1] ? schedule+0x91/0x360 [ 486.696716][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 486.696731][ C1] smpboot_thread_fn+0x542/0xa60 [ 486.696748][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 486.696767][ C1] kthread+0x711/0x8a0 [ 486.696787][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 486.696803][ C1] ? __pfx_kthread+0x10/0x10 [ 486.696823][ C1] ? __pfx_kthread+0x10/0x10 [ 486.696842][ C1] ret_from_fork+0x436/0x7d0 [ 486.696859][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 486.696878][ C1] ? __switch_to_asm+0x39/0x70 [ 486.696891][ C1] ? __switch_to_asm+0x33/0x70 [ 486.696904][ C1] ? __pfx_kthread+0x10/0x10 [ 486.696923][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.696942][ C1] [ 486.697717][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 486.697732][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 486.697754][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.697765][ T38] Call Trace: [ 486.697772][ T38] [ 486.697780][ T38] dump_stack_lvl+0x99/0x250 [ 486.697805][ T38] ? __asan_memcpy+0x40/0x70 [ 486.697823][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.697849][ T38] ? __pfx__printk+0x10/0x10 [ 486.697880][ T38] vpanic+0x281/0x750 [ 486.697906][ T38] ? __pfx_vpanic+0x10/0x10 [ 486.697927][ T38] ? irqentry_exit+0x74/0x90 [ 486.697942][ T38] ? preempt_schedule+0xae/0xc0 [ 486.697967][ T38] ? preempt_schedule_common+0x83/0xd0 [ 486.697997][ T38] panic+0xb9/0xc0 [ 486.698019][ T38] ? __pfx_panic+0x10/0x10 [ 486.698043][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 486.698069][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 486.698093][ T38] watchdog+0xfd2/0xfe0 [ 486.698118][ T38] ? watchdog+0x1de/0xfe0 [ 486.698145][ T38] kthread+0x711/0x8a0 [ 486.698171][ T38] ? __pfx_watchdog+0x10/0x10 [ 486.698193][ T38] ? __pfx_kthread+0x10/0x10 [ 486.698219][ T38] ? __pfx_kthread+0x10/0x10 [ 486.698242][ T38] ret_from_fork+0x436/0x7d0 [ 486.698266][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 486.698293][ T38] ? __switch_to_asm+0x39/0x70 [ 486.698308][ T38] ? __switch_to_asm+0x33/0x70 [ 486.698327][ T38] ? __pfx_kthread+0x10/0x10 [ 486.698355][ T38] ret_from_fork_asm+0x1a/0x30 [ 486.698387][ T38] [ 486.698644][ T38] Kernel Offset: disabled