last executing test programs: 35.570262938s ago: executing program 0 (id=1394): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x2}}, 0x18) 35.232100889s ago: executing program 0 (id=1398): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x11, 0x0) 34.957405193s ago: executing program 0 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 33.417943765s ago: executing program 2 (id=1406): r0 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002122, 0x0, {0xfffe}}) io_uring_enter(r0, 0x44fd, 0x3, 0x1, 0x0, 0x0) 33.136188591s ago: executing program 2 (id=1408): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x2, "950d"}, @main=@item_012={0x1, 0x0, 0xa, "b0"}]}}, 0x0}, 0x0) 30.400893177s ago: executing program 2 (id=1413): syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 29.703028625s ago: executing program 4 (id=1424): r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x1}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 29.425822208s ago: executing program 1 (id=1426): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x9}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1a}, 0x20) 29.39441878s ago: executing program 4 (id=1428): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.152413312s ago: executing program 1 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, r1, 0x48212b8952c3aff5, 0x70bd24}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 29.017481609s ago: executing program 4 (id=1431): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r1) 28.874750938s ago: executing program 3 (id=1432): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15}) 28.827293878s ago: executing program 1 (id=1433): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10) 28.779305054s ago: executing program 4 (id=1434): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff010000000000000000000000000001140004000000000000012d7000000000000000010c00028005000100000000003c000180"], 0x1e8}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 28.618797434s ago: executing program 3 (id=1435): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244) setresuid(0x0, 0xee01, 0xffffffffffffffff) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 28.457059665s ago: executing program 4 (id=1436): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="001004000000fa572da9"], 0x0, 0x0, 0x0, 0x0}) 28.082854309s ago: executing program 3 (id=1437): getgroups(0x7, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) setregid(r0, 0xffffffffffffffff) setregid(0x0, 0x0) 28.003054052s ago: executing program 0 (id=1438): r0 = socket$netlink(0x10, 0x3, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}}, 0x20}}, 0x4000) 27.076223886s ago: executing program 3 (id=1439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) 27.076028878s ago: executing program 0 (id=1440): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}}, 0x0) 27.075838997s ago: executing program 1 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0xf79, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 27.075170484s ago: executing program 3 (id=1442): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27071c00160014000200", 0xa}, {0x0}], 0x2}, 0x24000008) 26.357767555s ago: executing program 4 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020022000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000008080002400000001b0900020073797a320000000005000740"], 0x84}}, 0x0) 26.35182396s ago: executing program 1 (id=1444): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000100)="40d20f554dc79b885d6843cd7f524eef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) 26.182917518s ago: executing program 1 (id=1445): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x2, r0, 0x0, 0x0, 0x5}]) 23.74616874s ago: executing program 2 (id=1446): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000009200000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100800400009500000000000000bf91000000000000b70200001f00000085000000ae000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff5}, 0x94) 23.633837356s ago: executing program 2 (id=1447): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'adq12b\x00', [0x2f00, 0x5, 0xd09a, 0xfff7ffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x4, 0xffff, 0x6, 0x1000005, 0x40000009, 0x830, 0x30000, 0x10003, 0x2, 0x800, 0xe2df, 0x2, 0xd, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) 22.060518626s ago: executing program 2 (id=1448): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) 15.865399776s ago: executing program 3 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) 15.855776459s ago: executing program 0 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r1, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 11.037061138s ago: executing program 32 (id=1445): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x2, r0, 0x0, 0x0, 0x5}]) 10.910489869s ago: executing program 33 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020022000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000008080002400000001b0900020073797a320000000005000740"], 0x84}}, 0x0) 6.571120918s ago: executing program 34 (id=1448): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) 287.024943ms ago: executing program 35 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r1, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 0s ago: executing program 36 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 4: unexpected cc 0x1001 length: 249 > 9 [ 84.806049][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.806773][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.550195][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.619740][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 85.677337][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 85.990906][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 85.995564][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 86.474242][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.475240][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.475803][ T5836] bridge_slave_0: entered allmulticast mode [ 86.477382][ T5836] bridge_slave_0: entered promiscuous mode [ 86.624968][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.625043][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.625146][ T5836] bridge_slave_1: entered allmulticast mode [ 86.626588][ T5836] bridge_slave_1: entered promiscuous mode [ 86.627506][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.628167][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.628571][ T5838] bridge_slave_0: entered allmulticast mode [ 86.632423][ T5838] bridge_slave_0: entered promiscuous mode [ 86.701338][ T59] Bluetooth: hci1: command tx timeout [ 86.701585][ T5154] Bluetooth: hci0: command tx timeout [ 86.780229][ T59] Bluetooth: hci2: command tx timeout [ 86.780455][ T5154] Bluetooth: hci3: command tx timeout [ 86.812285][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.812482][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.813047][ T5838] bridge_slave_1: entered allmulticast mode [ 86.815463][ T5838] bridge_slave_1: entered promiscuous mode [ 86.817838][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.817938][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.818046][ T5844] bridge_slave_0: entered allmulticast mode [ 86.819488][ T5844] bridge_slave_0: entered promiscuous mode [ 86.870945][ T5154] Bluetooth: hci4: command tx timeout [ 87.041602][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.041790][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.041956][ T5844] bridge_slave_1: entered allmulticast mode [ 87.045352][ T5844] bridge_slave_1: entered promiscuous mode [ 87.224485][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.467386][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.471090][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.543007][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.543187][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.543374][ T5845] bridge_slave_0: entered allmulticast mode [ 87.546139][ T5845] bridge_slave_0: entered promiscuous mode [ 87.547977][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.548107][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.548274][ T5847] bridge_slave_0: entered allmulticast mode [ 87.555987][ T5847] bridge_slave_0: entered promiscuous mode [ 87.674509][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.677588][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.677974][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.678105][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.678269][ T5845] bridge_slave_1: entered allmulticast mode [ 87.681644][ T5845] bridge_slave_1: entered promiscuous mode [ 87.683112][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.683276][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.683427][ T5847] bridge_slave_1: entered allmulticast mode [ 87.686103][ T5847] bridge_slave_1: entered promiscuous mode [ 87.925717][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.103608][ T5836] team0: Port device team_slave_0 added [ 88.412546][ T5836] team0: Port device team_slave_1 added [ 88.414323][ T5838] team0: Port device team_slave_0 added [ 88.503107][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.508847][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.613630][ T5838] team0: Port device team_slave_1 added [ 88.616784][ T5844] team0: Port device team_slave_0 added [ 88.623110][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.626180][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.773617][ T5844] team0: Port device team_slave_1 added [ 88.781032][ T5154] Bluetooth: hci0: command tx timeout [ 88.781061][ T5154] Bluetooth: hci1: command tx timeout [ 88.860243][ T5154] Bluetooth: hci2: command tx timeout [ 88.860332][ T59] Bluetooth: hci3: command tx timeout [ 88.940278][ T59] Bluetooth: hci4: command tx timeout [ 89.148570][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.148589][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.148602][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.411828][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.411839][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.411852][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.412782][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.412791][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.412803][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.512477][ T5845] team0: Port device team_slave_0 added [ 89.514474][ T5847] team0: Port device team_slave_0 added [ 89.530197][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.530211][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.530235][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.532936][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.532947][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.532969][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.541223][ T5845] team0: Port device team_slave_1 added [ 89.544862][ T5847] team0: Port device team_slave_1 added [ 89.568861][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.568876][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.568900][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.933798][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.933813][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.933835][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.021640][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.021655][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.021677][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.115734][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.115745][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.115758][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.218124][ T5836] hsr_slave_0: entered promiscuous mode [ 90.219027][ T5836] hsr_slave_1: entered promiscuous mode [ 90.221862][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.221874][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.221896][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.446535][ T5838] hsr_slave_0: entered promiscuous mode [ 90.447267][ T5838] hsr_slave_1: entered promiscuous mode [ 90.447907][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 90.447987][ T5838] Cannot create hsr debugfs directory [ 90.552912][ T5844] hsr_slave_0: entered promiscuous mode [ 90.554307][ T5844] hsr_slave_1: entered promiscuous mode [ 90.555235][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 90.555258][ T5844] Cannot create hsr debugfs directory [ 90.860357][ T59] Bluetooth: hci1: command tx timeout [ 90.860388][ T59] Bluetooth: hci0: command tx timeout [ 90.940108][ T59] Bluetooth: hci3: command tx timeout [ 90.940138][ T59] Bluetooth: hci2: command tx timeout [ 91.020295][ T5154] Bluetooth: hci4: command tx timeout [ 91.253783][ T5845] hsr_slave_0: entered promiscuous mode [ 91.254553][ T5845] hsr_slave_1: entered promiscuous mode [ 91.255042][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 91.255061][ T5845] Cannot create hsr debugfs directory [ 91.292197][ T5847] hsr_slave_0: entered promiscuous mode [ 91.293378][ T5847] hsr_slave_1: entered promiscuous mode [ 91.294342][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 91.294364][ T5847] Cannot create hsr debugfs directory [ 92.744956][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.788964][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.826771][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.884740][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.940132][ T5154] Bluetooth: hci0: command tx timeout [ 92.950253][ T5154] Bluetooth: hci1: command tx timeout [ 93.001434][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.020446][ T5154] Bluetooth: hci2: command tx timeout [ 93.020472][ T5154] Bluetooth: hci3: command tx timeout [ 93.055616][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.089333][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.100123][ T59] Bluetooth: hci4: command tx timeout [ 93.130576][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.282232][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.332992][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.368888][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.407499][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.580615][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.621946][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.658932][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.716388][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.840737][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.895001][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.927386][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.962563][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.007816][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.068508][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.119627][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.120615][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.152502][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.185548][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.185653][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.291465][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.323943][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.344450][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.344573][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.402241][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.402389][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.468701][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.507898][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.521984][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.522188][ T1490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.593800][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.594035][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.704303][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.771876][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.772086][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.808859][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.849732][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.849883][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.965990][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.014859][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.015089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.062054][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.102049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.102196][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.347428][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.461732][ T5836] veth0_vlan: entered promiscuous mode [ 95.527086][ T5836] veth1_vlan: entered promiscuous mode [ 95.573388][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.704542][ T5838] veth0_vlan: entered promiscuous mode [ 95.770868][ T5838] veth1_vlan: entered promiscuous mode [ 95.826785][ T5836] veth0_macvtap: entered promiscuous mode [ 95.849056][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.874520][ T5836] veth1_macvtap: entered promiscuous mode [ 95.957429][ T5844] veth0_vlan: entered promiscuous mode [ 95.975269][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.029186][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.064756][ T5844] veth1_vlan: entered promiscuous mode [ 96.082644][ T5838] veth0_macvtap: entered promiscuous mode [ 96.089527][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.129476][ T5838] veth1_macvtap: entered promiscuous mode [ 96.163137][ T1118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.182660][ T1118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.204248][ T1118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.226401][ T1118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.341825][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.412318][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.508076][ T5844] veth0_macvtap: entered promiscuous mode [ 96.517364][ T5847] veth0_vlan: entered promiscuous mode [ 96.539721][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.561994][ T5844] veth1_macvtap: entered promiscuous mode [ 96.563498][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.600174][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.625591][ T1112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.643858][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.643880][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.645254][ T5847] veth1_vlan: entered promiscuous mode [ 96.838034][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.904498][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.904517][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.936318][ T5845] veth0_vlan: entered promiscuous mode [ 96.942224][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.019032][ T4515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.036471][ T4515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.036553][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.036566][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.067010][ T4515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.067855][ T5845] veth1_vlan: entered promiscuous mode [ 97.092841][ T4515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.196713][ T5847] veth0_macvtap: entered promiscuous mode [ 97.227826][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.227844][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.291327][ T5847] veth1_macvtap: entered promiscuous mode [ 97.487152][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.586303][ T5845] veth0_macvtap: entered promiscuous mode [ 97.621855][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.643173][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.643191][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.672525][ T5845] veth1_macvtap: entered promiscuous mode [ 97.692652][ T1490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.724996][ T1490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.826987][ T1490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.854651][ T1118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.987931][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.987951][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.019828][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.173826][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.297164][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.298967][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.327704][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.343499][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.714198][ T1490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.714217][ T1490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.889072][ T5967] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 98.890311][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.931407][ T5968] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 99.031412][ T5967] team0: Port device netdevsim0 added [ 99.071923][ T5926] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 99.071949][ T5926] usb 3-1: config 0 has no interface number 0 [ 99.078546][ T5926] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 99.078573][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.078592][ T5926] usb 3-1: Product: syz [ 99.078605][ T5926] usb 3-1: Manufacturer: syz [ 99.078619][ T5926] usb 3-1: SerialNumber: syz [ 99.133133][ T5926] usb 3-1: config 0 descriptor?? [ 99.179106][ T5926] hub 3-1:0.217: bad descriptor, ignoring hub [ 99.179147][ T5926] hub 3-1:0.217: probe with driver hub failed with error -5 [ 99.212216][ T5968] team0: Port device netdevsim0 removed [ 99.226249][ T5968] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 99.326515][ T1362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.326533][ T1362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.441242][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.441259][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.560231][ T5926] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 99.625093][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.625111][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.631472][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.641086][ T5926] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 99.641171][ T5926] usb 3-1: media controller created [ 99.782534][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.098534][ T5926] DVB: Unable to find symbol dib7000p_attach() [ 100.098553][ T5926] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 100.240087][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.406551][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 100.406580][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.441921][ T10] usb 1-1: config 0 descriptor?? [ 100.485903][ T5926] rc_core: IR keymap rc-dib0700-rc5 not found [ 100.485922][ T5926] Registered IR keymap rc-empty [ 100.486495][ T5926] dvb-usb: could not initialize remote control. [ 100.486505][ T5926] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 100.661694][ T5926] usb 3-1: USB disconnect, device number 2 [ 101.069392][ T10] ath6kl: Failed to read usb control message: -71 [ 101.069442][ T10] ath6kl: Unable to read the bmi data from the device: -71 [ 101.069456][ T10] ath6kl: unable to read target info byte count: -71 [ 101.093969][ T10] ath6kl: Failed to init ath6kl core: -71 [ 101.094596][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 101.125058][ T10] usb 1-1: USB disconnect, device number 2 [ 101.290674][ T5926] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 101.641640][ T5900] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.810699][ T5900] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 101.810729][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.816133][ T5900] usb 4-1: config 0 descriptor?? [ 101.932805][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 102.071336][ T5900] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 102.271743][ T5900] [drm:udl_init] *ERROR* Selecting channel failed [ 102.367860][ T5900] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 102.367884][ T5900] [drm] Initialized udl on minor 2 [ 102.395041][ T5900] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 102.397218][ T5900] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 102.403590][ T5995] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 102.475033][ T5995] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 102.475373][ T5995] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 102.492177][ T5900] usb 4-1: USB disconnect, device number 2 [ 102.878874][ T6043] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22) [ 103.123244][ T6050] overlayfs: workdir and upperdir must be separate subtrees [ 103.232037][ T6052] pimreg3: entered allmulticast mode [ 103.320107][ T989] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.505575][ T989] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.507125][ T989] usb 1-1: config 3 has an invalid interface number: 8 but max is 3 [ 103.507151][ T989] usb 1-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 103.507169][ T989] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 103.507195][ T989] usb 1-1: config 3 has no interface number 0 [ 103.507242][ T989] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 103.507269][ T989] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 103.507294][ T989] usb 1-1: config 3 interface 8 has no altsetting 0 [ 103.594373][ T989] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 103.594402][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.594419][ T989] usb 1-1: Product: syz [ 103.594432][ T989] usb 1-1: Manufacturer: syz [ 103.594445][ T989] usb 1-1: SerialNumber: syz [ 103.680235][ T991] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.844607][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.844639][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.844677][ T991] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 103.844699][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.887294][ T991] usb 2-1: config 0 descriptor?? [ 103.951902][ T989] appledisplay 1-1:3.8: Error while getting initial brightness: -71 [ 103.952556][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 103.954893][ T989] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -71 [ 103.985893][ T989] usbhid 1-1:3.8: can't add hid device: -22 [ 103.986011][ T989] usbhid 1-1:3.8: probe with driver usbhid failed with error -22 [ 104.011002][ T989] usb 1-1: USB disconnect, device number 3 [ 104.030150][ T5900] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 104.183748][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 104.184187][ T5900] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 104.184211][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.225633][ T5900] usb 4-1: config 0 descriptor?? [ 104.233303][ T6068] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 104.606705][ T991] aquacomputer_d5next 0003:0C70:F00D.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 104.685427][ T5900] belkin 0003:050D:3201.0002: unbalanced collection at end of report description [ 104.694938][ T5900] belkin 0003:050D:3201.0002: parse failed [ 104.695008][ T5900] belkin 0003:050D:3201.0002: probe with driver belkin failed with error -22 [ 104.876835][ T991] usb 2-1: USB disconnect, device number 2 [ 104.886537][ T6084] bridge0: entered promiscuous mode [ 104.887035][ T6084] macsec1: entered promiscuous mode [ 104.950186][ T5995] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.957060][ T9] usb 4-1: USB disconnect, device number 3 [ 104.962039][ T6088] fido_id[6088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 105.100554][ T5995] usb 3-1: Using ep0 maxpacket: 8 [ 105.103079][ T5995] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 105.103124][ T5995] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 105.103146][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.143006][ T5995] usb 3-1: config 0 descriptor?? [ 105.679788][ T5995] corsair 0003:1B1C:1B09.0003: unbalanced delimiter at end of report description [ 105.691003][ T5995] corsair 0003:1B1C:1B09.0003: parse failed [ 105.691116][ T5995] corsair 0003:1B1C:1B09.0003: probe with driver corsair failed with error -22 [ 105.758471][ T6096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.878508][ T5995] usb 3-1: USB disconnect, device number 3 [ 106.093493][ T6110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.70'. [ 106.225496][ T6115] capability: warning: `syz.1.71' uses deprecated v2 capabilities in a way that may be insecure [ 106.261850][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 106.300736][ T991] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.360164][ T6118] netlink: 164 bytes leftover after parsing attributes in process `syz.0.73'. [ 106.455554][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 106.464939][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.464989][ T991] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 106.465011][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.493224][ T991] usb 5-1: config 0 descriptor?? [ 106.750272][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 106.750293][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 106.750317][ T6128] netlink: 'syz.1.78': attribute type 5 has an invalid length. [ 106.750330][ T6128] netlink: 'syz.1.78': attribute type 6 has an invalid length. [ 106.963352][ T991] kye 0003:0458:5010.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 106.964873][ T991] kye 0003:0458:5010.0004: unknown main item tag 0x0 [ 106.964906][ T991] kye 0003:0458:5010.0004: unknown main item tag 0x0 [ 106.964931][ T991] kye 0003:0458:5010.0004: unknown main item tag 0x0 [ 106.985967][ T991] kye 0003:0458:5010.0004: hidraw0: USB HID v0.08 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 106.985997][ T991] kye 0003:0458:5010.0004: tablet-enabling feature report not found [ 106.986011][ T991] kye 0003:0458:5010.0004: tablet enabling failed [ 107.102663][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 107.156742][ T5995] usb 5-1: USB disconnect, device number 2 [ 107.237918][ T6135] fido_id[6135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 107.868915][ T6158] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 108.230150][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 108.527567][ T37] audit: type=1326 audit(1758592069.538:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.527618][ T37] audit: type=1326 audit(1758592069.538:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.527657][ T37] audit: type=1326 audit(1758592069.538:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.527695][ T37] audit: type=1326 audit(1758592069.538:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.527733][ T37] audit: type=1326 audit(1758592069.538:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.527771][ T37] audit: type=1326 audit(1758592069.538:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.527807][ T37] audit: type=1326 audit(1758592069.538:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.527929][ T37] audit: type=1326 audit(1758592069.538:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.527969][ T37] audit: type=1326 audit(1758592069.538:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.528007][ T37] audit: type=1326 audit(1758592069.538:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7fc00000 [ 108.952082][ T991] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 109.113788][ T991] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 109.113813][ T991] usb 5-1: config 0 has no interface number 0 [ 109.113858][ T991] usb 5-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.113883][ T991] usb 5-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.115712][ T991] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=22.00 [ 109.115739][ T991] usb 5-1: New USB device strings: Mfr=17, Product=0, SerialNumber=0 [ 109.115759][ T991] usb 5-1: Manufacturer: syz [ 109.116528][ T6186] process 'syz.0.105' launched '/dev/fd/3' with NULL argv: empty string added [ 109.172306][ T991] usb 5-1: config 0 descriptor?? [ 109.610534][ T6198] capability: warning: `syz.0.111' uses 32-bit capabilities (legacy support in use) [ 109.625515][ T991] uclogic 0003:5543:0522.0005: unbalanced delimiter at end of report description [ 109.626281][ T991] uclogic 0003:5543:0522.0005: parse failed [ 109.626376][ T991] uclogic 0003:5543:0522.0005: probe with driver uclogic failed with error -22 [ 109.824670][ T6202] Bluetooth: MGMT ver 1.23 [ 109.849123][ T991] usb 5-1: USB disconnect, device number 3 [ 110.060952][ T6211] sp0: Synchronizing with TNC [ 110.126530][ T6210] [U] [ 110.183133][ T6216] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.520605][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.687329][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.687377][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 111.687400][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.710267][ T10] usb 1-1: config 0 descriptor?? [ 111.716390][ T6263] netlink: 'syz.4.141': attribute type 2 has an invalid length. [ 111.716407][ T6263] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.141'. [ 112.183641][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 112.183677][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 112.183703][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 112.183729][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 112.183756][ T10] elecom 0003:056E:00FC.0006: unknown main item tag 0x0 [ 112.213548][ T10] elecom 0003:056E:00FC.0006: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.0-1/input0 [ 112.415844][ T991] usb 1-1: USB disconnect, device number 4 [ 112.585249][ T6281] sp0: Synchronizing with TNC [ 112.613448][ T6278] fido_id[6278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 112.808118][ T6291] xt_HMARK: spi-set and port-set can't be combined [ 113.780156][ T5981] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.952742][ T5981] usb 1-1: Using ep0 maxpacket: 16 [ 113.955355][ T5981] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 113.955380][ T5981] usb 1-1: config 0 has no interface number 0 [ 113.955424][ T5981] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.955448][ T5981] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 113.958913][ T5981] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 113.958937][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 113.958956][ T5981] usb 1-1: Product: syz [ 113.958970][ T5981] usb 1-1: SerialNumber: syz [ 114.035449][ T5981] usb 1-1: config 0 descriptor?? [ 114.072530][ T5981] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 114.076055][ T5981] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 114.317659][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.321193][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.321306][ T10] usb 1-1: USB disconnect, device number 5 [ 114.321450][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.321473][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 114.327159][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 114.327173][ T37] audit: type=1326 audit(1758592075.328:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 114.333587][ T37] audit: type=1326 audit(1758592075.348:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 114.342240][ T37] audit: type=1326 audit(1758592075.358:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 114.342285][ T37] audit: type=1326 audit(1758592075.358:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 114.342321][ T37] audit: type=1326 audit(1758592075.358:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 114.342856][ T37] audit: type=1326 audit(1758592075.358:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 114.363638][ T37] audit: type=1326 audit(1758592075.378:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6327 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 114.413191][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 114.665579][ T10] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 115.313591][ T6348] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 115.330642][ T6350] delete_channel: no stack [ 115.337336][ T6349] delete_channel: no stack [ 115.351084][ T6351] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 115.447901][ T6356] netlink: 260 bytes leftover after parsing attributes in process `syz.1.184'. [ 115.516962][ T6348] team0: Port device netdevsim0 added [ 115.665357][ T6351] team0: Port device netdevsim0 removed [ 115.687362][ T6351] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 116.275628][ T6383] netlink: 'syz.1.195': attribute type 322 has an invalid length. [ 116.433476][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.196'. [ 116.519472][ T6394] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 116.519472][ T6394] program syz.1.200 not setting count and/or reply_len properly [ 117.082880][ T6409] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.437941][ T6424] netlink: 'syz.3.213': attribute type 29 has an invalid length. [ 117.736962][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 118.264198][ T37] audit: type=1326 audit(1758592079.268:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6451 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 118.264246][ T37] audit: type=1326 audit(1758592079.278:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6451 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 118.316057][ T37] audit: type=1326 audit(1758592079.328:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6451 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b56e7eec9 code=0x7ffc0000 [ 119.502625][ T6496] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.332468][ T6519] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 120.332548][ T6519] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 120.332639][ T6519] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.332770][ T6519] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 120.332827][ T6519] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 120.332874][ T6519] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 120.332922][ T6519] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 120.333010][ T6519] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.333056][ T6519] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.333104][ T6519] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 120.837672][ T6529] netlink: 56 bytes leftover after parsing attributes in process `syz.1.263'. [ 120.840296][ T6529] netlink: 56 bytes leftover after parsing attributes in process `syz.1.263'. [ 121.147327][ T6542] mmap: syz.1.269 (6542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.632809][ T6554] tmpfs: User quota inode hardlimit too large. [ 123.830060][ T5825] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.993896][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.993928][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.993966][ T5825] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 123.993988][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.039456][ T6638] Bluetooth: MGMT ver 1.23 [ 124.063138][ T5825] usb 2-1: config 0 descriptor?? [ 124.556127][ T5825] stadia 0003:18D1:9400.0007: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0 [ 124.556159][ T5825] stadia 0003:18D1:9400.0007: no inputs found [ 124.556172][ T5825] stadia 0003:18D1:9400.0007: force feedback init failed [ 124.660063][ T989] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.723616][ T5825] usb 2-1: USB disconnect, device number 3 [ 124.788700][ T6657] fido_id[6657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 124.819272][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.819302][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.819338][ T989] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 124.819359][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.868039][ T989] usb 4-1: config 0 descriptor?? [ 125.345488][ T989] cypress 0003:04B4:DE61.0008: item fetching failed at offset 5/7 [ 125.350886][ T989] cypress 0003:04B4:DE61.0008: parse failed [ 125.350957][ T989] cypress 0003:04B4:DE61.0008: probe with driver cypress failed with error -22 [ 125.560596][ T989] usb 4-1: USB disconnect, device number 4 [ 125.992136][ T6690] warning: `syz.2.337' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.073888][ T6692] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 126.114453][ T6692] batman_adv: batadv0: Adding interface: team0 [ 126.114468][ T6692] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.114494][ T6692] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 126.117833][ T6692] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 126.117851][ T6692] netlink: 2 bytes leftover after parsing attributes in process `syz.0.335'. [ 126.118007][ T6692] team0: entered promiscuous mode [ 126.118021][ T6692] team_slave_0: entered promiscuous mode [ 126.118244][ T6692] team_slave_1: entered promiscuous mode [ 126.217024][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.217460][ T6692] batman_adv: batadv0: Interface activated: team0 [ 126.217501][ T6692] batman_adv: batadv0: Interface deactivated: team0 [ 126.217521][ T6692] batman_adv: batadv0: Removing interface: team0 [ 126.259613][ T6692] bridge0: port 3(team0) entered blocking state [ 126.260163][ T6692] bridge0: port 3(team0) entered disabled state [ 126.260349][ T6692] team0: entered allmulticast mode [ 126.260364][ T6692] team_slave_0: entered allmulticast mode [ 126.260385][ T6692] team_slave_1: entered allmulticast mode [ 126.300910][ T6692] bridge0: port 3(team0) entered blocking state [ 126.302475][ T6692] bridge0: port 3(team0) entered forwarding state [ 126.605224][ T6702] program syz.0.342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.660956][ T5995] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.761330][ T6704] ======================================================= [ 126.761330][ T6704] WARNING: The mand mount option has been deprecated and [ 126.761330][ T6704] and is ignored by this kernel. Remove the mand [ 126.761330][ T6704] option from the mount to silence this warning. [ 126.761330][ T6704] ======================================================= [ 126.762244][ T989] kernel write not supported for file /binder/state (pid: 989 comm: kworker/1:2) [ 126.816249][ T5995] usb 4-1: Using ep0 maxpacket: 32 [ 126.826360][ T5995] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 126.826385][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.826404][ T5995] usb 4-1: Product: syz [ 126.826416][ T5995] usb 4-1: Manufacturer: syz [ 126.826429][ T5995] usb 4-1: SerialNumber: syz [ 126.871493][ T5995] usb 4-1: config 0 descriptor?? [ 127.307434][ T5995] airspy 4-1:0.0: Board ID: 00 [ 127.307447][ T5995] airspy 4-1:0.0: Firmware version: [ 127.514290][ T5995] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 127.636133][ T5995] airspy 4-1:0.0: Registered as swradio24 [ 127.636154][ T5995] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 127.711584][ T5995] usb 4-1: USB disconnect, device number 5 [ 127.951099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.730745][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 128.730761][ T37] audit: type=1326 audit(1758592089.728:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 128.730803][ T37] audit: type=1326 audit(1758592089.738:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 128.730841][ T37] audit: type=1326 audit(1758592089.738:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 128.730879][ T37] audit: type=1326 audit(1758592089.738:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 128.730917][ T37] audit: type=1326 audit(1758592089.738:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 128.730954][ T37] audit: type=1326 audit(1758592089.738:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 128.730990][ T37] audit: type=1326 audit(1758592089.738:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 128.731028][ T37] audit: type=1326 audit(1758592089.738:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 128.750114][ T37] audit: type=1326 audit(1758592089.748:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7fc00000 [ 129.274965][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.362'. [ 129.279940][ T37] audit: type=1326 audit(1758592090.288:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6739 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 129.880275][ T5825] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.043973][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.044020][ T5825] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 130.044042][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.072287][ T5825] usb 4-1: config 0 descriptor?? [ 130.526068][ T5825] hid_mf 0003:0079:1846.0009: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 130.526101][ T5825] hid_mf 0003:0079:1846.0009: Invalid report, this should never happen! [ 130.526115][ T5825] hid_mf 0003:0079:1846.0009: Force feedback init failed. [ 130.619260][ T6774] netlink: 'syz.0.375': attribute type 2 has an invalid length. [ 130.711579][ T5825] usb 4-1: USB disconnect, device number 6 [ 130.938320][ T6779] tipc: Started in network mode [ 130.938344][ T6779] tipc: Node identity ac14140f, cluster identity 4711 [ 130.961976][ T6779] tipc: Enabled bearer , priority 10 [ 130.998081][ T6775] fido_id[6775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 131.300231][ T6788] tipc: Enabling not permitted [ 131.300264][ T6788] tipc: Enabling of bearer rejected, failed to enable media [ 131.881440][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 131.881462][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 131.881486][ T6810] netlink: 'syz.4.392': attribute type 11 has an invalid length. [ 131.881499][ T6810] netlink: 'syz.4.392': attribute type 13 has an invalid length. [ 132.084614][ T991] tipc: Node number set to 2886997007 [ 132.103733][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 132.174161][ T6821] autofs: Bad value for 'fd' [ 132.249821][ T6820] macsec2: entered promiscuous mode [ 132.249851][ T6820] macsec2: entered allmulticast mode [ 132.792162][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.792241][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.960410][ T991] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 135.116009][ T991] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.116042][ T991] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 135.116067][ T991] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 135.116092][ T991] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.116125][ T991] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 135.116147][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.194898][ T991] usb 4-1: config 0 descriptor?? [ 135.198344][ T6895] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.616773][ T991] vrc2 0003:07C0:1125.000A: fixing up VRC-2 report descriptor [ 135.670393][ T991] input: HID 07c0:1125 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:07C0:1125.000A/input/input7 [ 135.822711][ T991] vrc2 0003:07C0:1125.000A: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.3-1/input0 [ 135.871381][ T991] usb 4-1: USB disconnect, device number 7 [ 135.901046][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 136.266200][ T6929] fido_id[6929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 136.356743][ T6937] netlink: 'syz.4.452': attribute type 21 has an invalid length. [ 136.370140][ T6937] netlink: 'syz.4.452': attribute type 21 has an invalid length. [ 136.370159][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 136.600133][ T989] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.780740][ T989] usb 2-1: Using ep0 maxpacket: 8 [ 136.783377][ T989] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.783405][ T989] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.783426][ T989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 136.783457][ T989] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 136.783486][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.805703][ T989] usb 2-1: config 0 descriptor?? [ 136.910678][ T6954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.462'. [ 137.279085][ T989] a4tech 0003:09DA:000A.000B: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.1-1/input0 [ 137.472866][ T5995] usb 2-1: USB disconnect, device number 4 [ 137.491518][ T6966] fido_id[6966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 137.585462][ T6970] futex_wake_op: syz.3.468 tries to shift op by -1; fix this program [ 138.712831][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 139.096326][ T7009] gretap0: entered promiscuous mode [ 139.608709][ T7015] ALSA: seq fatal error: cannot create timer (-19) [ 140.274396][ T7049] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 140.274423][ T7049] CIFS mount error: No usable UNC path provided in device string! [ 140.274423][ T7049] [ 140.274606][ T7049] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 141.156339][ T9] IPVS: starting estimator thread 0... [ 141.240388][ T7083] IPVS: using max 8 ests per chain, 19200 per kthread [ 143.075552][ T7141] netlink: 'syz.4.530': attribute type 83 has an invalid length. [ 143.625648][ T7156] netlink: 64 bytes leftover after parsing attributes in process `syz.0.537'. [ 143.770272][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.914200][ T7166] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.540'. [ 143.945198][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 143.945229][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.945250][ T9] usb 2-1: Product: syz [ 143.945264][ T9] usb 2-1: Manufacturer: syz [ 143.945340][ T9] usb 2-1: SerialNumber: syz [ 144.015353][ T9] usb 2-1: config 0 descriptor?? [ 144.016678][ T7164] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 144.138533][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 144.663162][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 144.663257][ T9] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 144.691394][ T9] usb 2-1: USB disconnect, device number 5 [ 145.811406][ T7224] netlink: 277 bytes leftover after parsing attributes in process `syz.3.562'. [ 146.137769][ T7232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.567'. [ 146.514238][ T7247] CIFS: Unable to determine destination address [ 147.378675][ T7276] pimreg: entered allmulticast mode [ 147.600534][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 147.600551][ T37] audit: type=1326 audit(1758592108.608:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7279 comm="syz.0.586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f568918eec9 code=0x0 [ 148.299362][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 148.530127][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.630393][ T7309] netlink: 'syz.2.598': attribute type 7 has an invalid length. [ 148.630411][ T7309] netlink: 'syz.2.598': attribute type 8 has an invalid length. [ 148.680079][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 148.684481][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.684521][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.684544][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.684586][ T9] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 148.684606][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.747669][ T9] usb 4-1: config 0 descriptor?? [ 149.255762][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.255798][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.255824][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.255851][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.255877][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.255903][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.255929][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.255954][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.255979][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.256005][ T9] hid-multitouch 0003:0457:07DA.000C: unknown main item tag 0x0 [ 149.271551][ T5981] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.368095][ T9] hid-multitouch 0003:0457:07DA.000C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 149.420160][ T5981] usb 3-1: Using ep0 maxpacket: 8 [ 149.424481][ T5981] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 149.424530][ T5981] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 149.424556][ T5981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.424589][ T5981] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 149.424612][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.448935][ T5981] usb 3-1: config 0 descriptor?? [ 149.491501][ T5825] usb 4-1: USB disconnect, device number 8 [ 149.679210][ T7330] bad cache= option: no%e [ 149.679210][ T7330] [ 149.703706][ T7330] CIFS: VFS: bad cache= option: no%e [ 149.774673][ T7325] fido_id[7325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 149.950671][ T5981] elecom 0003:056E:011C.000D: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 150.137385][ T5995] usb 3-1: USB disconnect, device number 4 [ 150.460431][ T7352] netlink: 'syz.3.612': attribute type 15 has an invalid length. [ 151.118948][ T7368] fido_id[7368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 151.205989][ T7379] netlink: 72 bytes leftover after parsing attributes in process `syz.0.624'. [ 151.708247][ T7400] netlink: 348 bytes leftover after parsing attributes in process `syz.3.632'. [ 151.887642][ T7407] lo: entered promiscuous mode [ 151.889152][ T7404] lo: left promiscuous mode [ 152.630082][ T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.635475][ T7433] program syz.0.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.635755][ T7433] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 152.787006][ T44] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.787036][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.830993][ T44] usb 4-1: config 0 descriptor?? [ 152.837110][ T44] cp210x 4-1:0.0: cp210x converter detected [ 153.481220][ T7459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 153.481914][ T44] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 153.481969][ T44] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 153.521139][ T44] usb 4-1: cp210x converter now attached to ttyUSB0 [ 153.541423][ T44] usb 4-1: USB disconnect, device number 9 [ 153.561482][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.562448][ T44] cp210x 4-1:0.0: device disconnected [ 153.748370][ T7466] netlink: 76 bytes leftover after parsing attributes in process `syz.2.663'. [ 154.950137][ T5825] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.110193][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 155.112532][ T5825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.115568][ T5825] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 155.115594][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.115614][ T5825] usb 4-1: Product: syz [ 155.115627][ T5825] usb 4-1: Manufacturer: syz [ 155.115641][ T5825] usb 4-1: SerialNumber: syz [ 155.167052][ T5825] usb 4-1: config 0 descriptor?? [ 155.290117][ T5981] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 155.346562][ T7513] syz.2.686 (7513) used greatest stack depth: 17720 bytes left [ 155.452849][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.452953][ T5981] usb 2-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 155.452977][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.493429][ T5981] usb 2-1: config 0 descriptor?? [ 155.588748][ T5825] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 155.588790][ T5825] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 155.831245][ T5920] usb 4-1: USB disconnect, device number 10 [ 155.955144][ T5981] lenovo 0003:04B3:3100.000E: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.1-1/input0 [ 156.130251][ T991] usb 2-1: USB disconnect, device number 6 [ 156.187996][ T7527] fido_id[7527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 156.650335][ T991] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 156.818250][ T991] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.818277][ T991] usb 4-1: config 0 has no interface number 0 [ 156.818324][ T991] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 156.818347][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.828343][ T991] usb 4-1: config 0 descriptor?? [ 156.870767][ T991] usb 4-1: selecting invalid altsetting 1 [ 156.871848][ T991] dvb_ttusb_budget: ttusb_init_controller: error [ 156.871863][ T991] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 157.135646][ T991] DVB: Unable to find symbol cx22700_attach() [ 157.291465][ T991] DVB: Unable to find symbol tda10046_attach() [ 157.291480][ T991] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 157.297007][ T991] usb 4-1: USB disconnect, device number 11 [ 157.730100][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.912257][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.912289][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.912310][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.912351][ T9] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 157.912374][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.932774][ T9] usb 2-1: config 0 descriptor?? [ 158.253051][ T991] kernel write not supported for file /sg0 (pid: 991 comm: kworker/0:2) [ 158.404437][ T9] elo 0003:04E7:0030.000F: reserved main item tag 0xe [ 158.404474][ T9] elo 0003:04E7:0030.000F: item fetching failed at offset 8/9 [ 158.405274][ T9] elo 0003:04E7:0030.000F: parse failed [ 158.405377][ T9] elo 0003:04E7:0030.000F: probe with driver elo failed with error -22 [ 158.615061][ T9] usb 2-1: USB disconnect, device number 7 [ 160.000101][ T5920] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.159626][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.159674][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.10 [ 160.159697][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.206357][ T5920] usb 5-1: config 0 descriptor?? [ 160.240938][ T991] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 160.346888][ T7640] tipc: Started in network mode [ 160.346909][ T7640] tipc: Node identity 4, cluster identity 4711 [ 160.346920][ T7640] tipc: Node number set to 4 [ 160.393206][ T991] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.393234][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.433479][ T991] usb 3-1: config 0 descriptor?? [ 160.447115][ T991] cp210x 3-1:0.0: cp210x converter detected [ 160.642591][ T5920] logitech 0003:046D:C626.0010: ignoring exceeding usage max [ 160.643862][ T5920] logitech 0003:046D:C626.0010: unbalanced delimiter at end of report description [ 160.644683][ T5920] logitech 0003:046D:C626.0010: parse failed [ 160.644781][ T5920] logitech 0003:046D:C626.0010: probe with driver logitech failed with error -22 [ 160.902609][ T5920] usb 5-1: USB disconnect, device number 4 [ 160.981773][ T991] usb 3-1: cp210x converter now attached to ttyUSB0 [ 161.128015][ T9] usb 3-1: USB disconnect, device number 5 [ 161.167636][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.205668][ T991] IPVS: starting estimator thread 0... [ 161.320768][ T9] cp210x 3-1:0.0: device disconnected [ 161.323992][ T7650] IPVS: using max 7 ests per chain, 16800 per kthread [ 161.460077][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.612566][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.612597][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.612634][ T5920] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 161.612656][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.672429][ T5920] usb 2-1: config 0 descriptor?? [ 162.093250][ T5920] hid_parser_main: 17 callbacks suppressed [ 162.093272][ T5920] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 162.093303][ T5920] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 162.124813][ T5920] samsung 0003:0419:0600.0011: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 162.288728][ T5920] usb 2-1: USB disconnect, device number 8 [ 162.493456][ T7683] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.763'. [ 162.665967][ T7679] fido_id[7679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 162.717667][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 164.070111][ T5825] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.195056][ T37] audit: type=1326 audit(1758592125.208:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7722 comm="syz.0.781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f568918eec9 code=0x0 [ 164.231878][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.231925][ T5825] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 164.231947][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.269651][ T5825] usb 5-1: config 0 descriptor?? [ 164.729120][ T5825] lua 0003:1E7D:2C2E.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 164.955576][ T5920] usb 5-1: USB disconnect, device number 5 [ 165.253416][ T7747] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 165.560842][ T7757] macsec1: entered promiscuous mode [ 165.967482][ T7772] pim6reg527: entered allmulticast mode [ 166.180073][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 166.333694][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.333721][ T9] usb 4-1: config 0 has no interface number 0 [ 166.333768][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.333792][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.333830][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 166.333851][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.396136][ T9] usb 4-1: config 0 descriptor?? [ 166.650130][ T5920] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 166.823356][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.823424][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.823470][ T5920] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.823491][ T5920] usb 5-1: config 1 interface 1 has no altsetting 0 [ 166.827992][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.828021][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.828040][ T5920] usb 5-1: Product: syz [ 166.828060][ T5920] usb 5-1: Manufacturer: syz [ 166.828073][ T5920] usb 5-1: SerialNumber: syz [ 166.912653][ T9] prodikeys 0003:041E:2801.0013: unknown main item tag 0x1 [ 166.939151][ T5920] cdc_ncm 5-1:1.0: skipping garbage [ 166.939175][ T5920] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 166.939217][ T5920] cdc_ncm 5-1:1.0: bind() failure [ 166.966322][ T9] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 166.968051][ T9] hid_prodikeys: hid-prodikeys: failed to find output report [ 166.968051][ T9] [ 167.099937][ T9] usb 4-1: USB disconnect, device number 12 [ 167.134519][ T7787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.349537][ T989] usb 5-1: USB disconnect, device number 6 [ 167.421578][ T7799] fido_id[7799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 167.460121][ T5995] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 167.480133][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.612693][ T5995] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.612727][ T5995] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 167.612754][ T5995] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.612787][ T5995] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 167.612809][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.640097][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 167.675998][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.676042][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 167.676063][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.720261][ T5995] usb 2-1: config 0 descriptor?? [ 167.726011][ T10] usb 3-1: config 0 descriptor?? [ 167.739280][ T7801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.042571][ T37] audit: type=1326 audit(1758592129.058:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 168.042620][ T37] audit: type=1326 audit(1758592129.058:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 168.087551][ T37] audit: type=1326 audit(1758592129.098:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 168.089176][ T37] audit: type=1326 audit(1758592129.098:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 168.091052][ T37] audit: type=1326 audit(1758592129.108:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 168.091326][ T37] audit: type=1326 audit(1758592129.108:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 168.186133][ T10] kye 0003:0458:4018.0014: unbalanced collection at end of report description [ 168.186970][ T10] kye 0003:0458:4018.0014: parse failed [ 168.187039][ T10] kye 0003:0458:4018.0014: probe with driver kye failed with error -22 [ 168.225268][ T5995] uclogic 0003:28BD:0074.0015: interface is invalid, ignoring [ 168.274508][ T5920] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 168.276529][ T37] audit: type=1326 audit(1758592129.288:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 168.276575][ T37] audit: type=1326 audit(1758592129.288:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568918eec9 code=0x7ffc0000 [ 168.405765][ T989] usb 2-1: USB disconnect, device number 9 [ 168.408920][ T5825] usb 3-1: USB disconnect, device number 6 [ 168.430195][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 168.432458][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 168.432501][ T5920] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 168.432523][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.475354][ T5920] usb 4-1: config 0 descriptor?? [ 168.969264][ T5920] corsair 0003:1B1C:1B09.0016: unbalanced collection at end of report description [ 168.980452][ T5920] corsair 0003:1B1C:1B09.0016: parse failed [ 168.980559][ T5920] corsair 0003:1B1C:1B09.0016: probe with driver corsair failed with error -22 [ 169.124234][ T7835] netlink: 'syz.2.837': attribute type 2 has an invalid length. [ 169.159729][ T5920] usb 4-1: USB disconnect, device number 13 [ 170.340120][ T5920] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.504456][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.504506][ T5920] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 170.504528][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.531102][ T5920] usb 3-1: config 0 descriptor?? [ 170.994792][ T5920] macally 0003:060B:0001.0017: item fetching failed at offset 0/2 [ 170.995648][ T5920] macally 0003:060B:0001.0017: probe with driver macally failed with error -22 [ 171.205890][ T5995] usb 3-1: USB disconnect, device number 7 [ 171.923074][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 173.847678][ T7972] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 173.847707][ T7972] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.895199][ T7976] netlink: 277 bytes leftover after parsing attributes in process `syz.0.901'. [ 173.909343][ T7972] vhci_hcd vhci_hcd.0: Device attached [ 174.106019][ T989] vhci_hcd: vhci_device speed not set [ 174.160179][ T5920] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 174.163364][ T989] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 174.326638][ T5920] usb 4-1: config 0 has no interfaces? [ 174.326675][ T5920] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.326697][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.335070][ T5920] usb 4-1: config 0 descriptor?? [ 174.582197][ T5825] usb 4-1: USB disconnect, device number 14 [ 174.600121][ T7973] vhci_hcd: unknown pdu 1 [ 174.642830][ T1490] vhci_hcd: stop threads [ 174.643529][ T1490] vhci_hcd: release socket [ 174.647602][ T1490] vhci_hcd: disconnect device [ 174.650311][ T989] vhci_hcd: vhci_device speed not set [ 175.359475][ T8007] netlink: 44 bytes leftover after parsing attributes in process `syz.2.915'. [ 175.359503][ T8007] netlink: 'syz.2.915': attribute type 6 has an invalid length. [ 175.359516][ T8007] netlink: 'syz.2.915': attribute type 5 has an invalid length. [ 175.359528][ T8007] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 175.518311][ T8011] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 175.518484][ T8011] macsec1: entered allmulticast mode [ 175.518504][ T8011] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 176.013455][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 176.156619][ T8031] vlan2: entered allmulticast mode [ 176.156641][ T8031] bond0: entered allmulticast mode [ 176.156654][ T8031] bond_slave_0: entered allmulticast mode [ 176.156674][ T8031] bond_slave_1: entered allmulticast mode [ 176.156695][ T8031] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 176.240233][ T5825] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 176.384603][ T8041] Zero length message leads to an empty skb [ 176.395237][ T5825] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 176.410823][ T5825] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 176.410850][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.410868][ T5825] usb 3-1: Product: syz [ 176.410881][ T5825] usb 3-1: Manufacturer: syz [ 176.410892][ T5825] usb 3-1: SerialNumber: syz [ 176.446463][ T5825] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 177.112856][ T5825] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 177.115540][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.158477][ T5825] usb 3-1: USB disconnect, device number 8 [ 177.270139][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 177.275591][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.275623][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.275644][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.275684][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.275706][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.289006][ T9] usb 5-1: config 0 descriptor?? [ 177.807381][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0018/input/input10 [ 177.993910][ T9] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 178.047481][ T9] usb 5-1: USB disconnect, device number 7 [ 178.457702][ T8079] fido_id[8079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 180.287664][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.970'. [ 181.186961][ T37] audit: type=1800 audit(1758592142.198:73): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.981" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 181.896631][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 181.966000][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 183.026037][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'. [ 183.049919][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 183.076625][ T8188] vlan3: entered promiscuous mode [ 183.076645][ T8188] bridge0: entered promiscuous mode [ 183.138167][ T8194] netlink: 'syz.3.996': attribute type 16 has an invalid length. [ 183.250159][ T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 183.319365][ T8198] kAFS: unable to lookup cell 'sէKyy [ 183.319365][ T8198] [ 183.319365][ T8198] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 183.430057][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 183.441539][ T44] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.441564][ T44] usb 2-1: config 0 has no interface number 0 [ 183.448576][ T44] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 183.448604][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.448623][ T44] usb 2-1: Product: syz [ 183.448637][ T44] usb 2-1: Manufacturer: syz [ 183.448649][ T44] usb 2-1: SerialNumber: syz [ 183.481981][ T44] usb 2-1: config 0 descriptor?? [ 183.489953][ T44] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 183.530256][ T44] usb 2-1: selecting invalid altsetting 1 [ 183.530277][ T44] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 183.552925][ T44] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.553330][ T44] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 183.553380][ T44] usb 2-1: media controller created [ 183.728713][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.515154][ T8218] xt_socket: unknown flags 0x40 [ 184.782236][ T8190] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 184.822571][ T44] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 184.822634][ T44] zl10353_read_register: readreg error (reg=127, ret==-71) [ 184.827935][ T44] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 185.025380][ T44] usb 2-1: USB disconnect, device number 10 [ 185.373543][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 185.374188][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 185.392755][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 185.392974][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 185.531389][ T8236] tmpfs: Bad value for 'mpol' [ 185.653261][ T44] libceph: connect (1)[c::]:6789 error -101 [ 185.653480][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 186.041574][ T8228] ceph: No mds server is up or the cluster is laggy [ 186.160574][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 186.160784][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 186.218122][ T8260] CUSE: unknown device info "" [ 186.218137][ T8260] CUSE: zero length info key specified [ 186.501665][ T44] IPVS: starting estimator thread 0... [ 186.590820][ T8271] IPVS: using max 8 ests per chain, 19200 per kthread [ 186.717798][ T8274] overlayfs: failed to resolve './file1': -2 [ 187.360142][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 187.521576][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.521627][ T44] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 187.521756][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.532938][ T44] usb 3-1: config 0 descriptor?? [ 187.613677][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 187.613712][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 187.613777][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x3 [ 187.613802][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 187.613826][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 187.613851][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 187.613874][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 187.613898][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 187.690423][ T9] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 187.985359][ T44] smartjoyplus 0003:0925:8866.001A: unknown main item tag 0x5 [ 188.030525][ T44] smartjoyplus 0003:0925:8866.001A: hidraw0: USB HID v80.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0 [ 188.030558][ T44] smartjoyplus 0003:0925:8866.001A: no output reports found [ 188.179460][ T44] usb 3-1: USB disconnect, device number 9 [ 188.220322][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.260928][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 188.382124][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 188.384867][ T9] usb 2-1: config 0 has an invalid interface number: 24 but max is 0 [ 188.384892][ T9] usb 2-1: config 0 has no interface number 0 [ 188.384938][ T9] usb 2-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.384963][ T9] usb 2-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.384999][ T9] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 188.385021][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.448993][ T9] usb 2-1: config 0 descriptor?? [ 188.780232][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.940095][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 188.942049][ T44] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 188.943515][ T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 188.943537][ T44] usb 5-1: config 0 has no interface number 0 [ 188.944763][ T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 188.944785][ T44] usb 5-1: config 0 has no interface number 0 [ 188.945972][ T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 188.945993][ T44] usb 5-1: config 0 has no interface number 0 [ 188.947138][ T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 188.947160][ T44] usb 5-1: config 0 has no interface number 0 [ 188.948310][ T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 188.948332][ T44] usb 5-1: config 0 has no interface number 0 [ 188.949538][ T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 188.949559][ T44] usb 5-1: config 0 has no interface number 0 [ 189.053088][ T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 189.053114][ T44] usb 5-1: config 0 has no interface number 0 [ 189.077344][ T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 189.077369][ T44] usb 5-1: config 0 has no interface number 0 [ 189.102895][ T5981] usb 2-1: USB disconnect, device number 11 [ 189.103443][ T44] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 189.103467][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.103486][ T44] usb 5-1: Product: syz [ 189.103499][ T44] usb 5-1: Manufacturer: syz [ 189.103513][ T44] usb 5-1: SerialNumber: syz [ 189.142031][ T44] usb 5-1: config 0 descriptor?? [ 189.149021][ T44] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 189.750331][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 189.903179][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 189.903207][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 189.903225][ T9] usb 3-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 189.903243][ T9] usb 3-1: config 220 has no interface number 2 [ 189.903327][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.903353][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 189.903369][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 189.903386][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 189.906600][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 189.906627][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.906646][ T9] usb 3-1: Product: syz [ 189.906659][ T9] usb 3-1: Manufacturer: syz [ 189.906672][ T9] usb 3-1: SerialNumber: syz [ 190.261753][ T9] usb 3-1: selecting invalid altsetting 0 [ 190.294162][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 190.294205][ T9] usb 3-1: No valid video chain found. [ 190.335607][ T9] usb 3-1: selecting invalid altsetting 0 [ 190.335643][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 190.357820][ T9] usb 3-1: USB disconnect, device number 10 [ 191.614686][ T44] etas_es58x 5-1:0.2: could not retrieve the product info string [ 191.631675][ T8393] devtmpfs: Too few inodes for current use [ 191.795829][ T37] audit: type=1326 audit(1758592152.808:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8396 comm="syz.4.1090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3514525d67 code=0x0 [ 191.860451][ T44] usb 5-1: USB disconnect, device number 8 [ 191.864984][ T44] etas_es58x 5-1:0.2: Disconnecting syz syz [ 191.975390][ T8408] delete_channel: no stack [ 191.975798][ T8405] delete_channel: no stack [ 192.325906][ T37] audit: type=1326 audit(1758592153.338:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a520b5d67 code=0x7ffc0000 [ 192.325954][ T37] audit: type=1326 audit(1758592153.338:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a5205af79 code=0x7ffc0000 [ 192.325993][ T37] audit: type=1326 audit(1758592153.338:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a520b5d67 code=0x7ffc0000 [ 192.326037][ T37] audit: type=1326 audit(1758592153.338:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a5205af79 code=0x7ffc0000 [ 192.328166][ T37] audit: type=1326 audit(1758592153.338:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7ffc0000 [ 192.329032][ T37] audit: type=1326 audit(1758592153.338:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7ffc0000 [ 192.335165][ T37] audit: type=1326 audit(1758592153.348:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0a520beec9 code=0x7ffc0000 [ 192.335210][ T37] audit: type=1326 audit(1758592153.348:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7ffc0000 [ 192.335250][ T37] audit: type=1326 audit(1758592153.348:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8419 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a520beec9 code=0x7ffc0000 [ 193.040902][ T5920] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 193.192728][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.192762][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.192801][ T5920] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 193.192823][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.201565][ T5920] usb 4-1: config 0 descriptor?? [ 193.288055][ T8452] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1117'. [ 193.288078][ T8452] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1117'. [ 193.288126][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'. [ 193.601796][ T989] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.656557][ T5920] petalynx 0003:18B1:0037.001C: item fetching failed at offset 2/5 [ 193.657378][ T5920] petalynx 0003:18B1:0037.001C: parse failed [ 193.657446][ T5920] petalynx 0003:18B1:0037.001C: probe with driver petalynx failed with error -22 [ 193.750689][ T989] usb 2-1: Using ep0 maxpacket: 32 [ 193.752629][ T989] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 193.752653][ T989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.752670][ T989] usb 2-1: config 0 has no interface number 0 [ 193.752715][ T989] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 193.752847][ T989] usb 2-1: config 0 interface 8 has no altsetting 0 [ 193.756206][ T989] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 193.756231][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.756250][ T989] usb 2-1: Product: syz [ 193.756262][ T989] usb 2-1: Manufacturer: syz [ 193.756275][ T989] usb 2-1: SerialNumber: syz [ 193.788173][ T989] usb 2-1: config 0 descriptor?? [ 193.874512][ T10] usb 4-1: USB disconnect, device number 15 [ 194.032067][ T989] ath6kl: Failed to submit usb control message: -71 [ 194.032117][ T989] ath6kl: unable to send the bmi data to the device: -71 [ 194.032130][ T989] ath6kl: Unable to send get target info: -71 [ 194.034285][ T989] ath6kl: Failed to init ath6kl core: -71 [ 194.035731][ T989] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 194.092754][ T989] usb 2-1: USB disconnect, device number 12 [ 194.226268][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'. [ 194.234604][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271742][ T8464] trusted_key: encrypted_key: key trusted:syz not found [ 194.314630][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 194.394348][ T8466] veth0_macvtap: left promiscuous mode [ 194.593918][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 194.742565][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.742627][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 194.742655][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 194.742679][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 194.744341][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.744365][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.744384][ T9] usb 3-1: Manufacturer: syz [ 194.818484][ T9] usb 3-1: config 0 descriptor?? [ 195.170458][ T9] rc_core: IR keymap rc-hauppauge not found [ 195.170478][ T9] Registered IR keymap rc-empty [ 195.176175][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.200489][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.224096][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 195.256652][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 195.280865][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.300669][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.321315][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.340600][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.366149][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.380967][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.400612][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.420839][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.440817][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.460591][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 195.483466][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 195.483488][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 195.522009][ T9] usb 3-1: USB disconnect, device number 11 [ 196.505919][ T8550] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1161'. [ 196.505943][ T8550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1161'. [ 196.676436][ T8559] syz.3.1165 uses old SIOCAX25GETINFO [ 196.730116][ T5825] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 196.900226][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 196.903203][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.904754][ T5825] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 196.904775][ T5825] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 196.904793][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.905120][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1170'. [ 196.907509][ T5825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.907534][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.907553][ T5825] usb 2-1: Product: syz [ 196.907568][ T5825] usb 2-1: Manufacturer: syz [ 196.907582][ T5825] usb 2-1: SerialNumber: syz [ 197.168244][ T8580] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 197.168305][ T8580] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 197.168422][ T8580] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 197.168549][ T8580] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 197.168604][ T8580] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 197.168653][ T8580] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 197.168783][ T8580] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 197.168830][ T8580] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 197.168877][ T8580] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 197.168970][ T8580] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 197.169018][ T8580] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 197.169066][ T8580] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 197.169153][ T8580] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 197.169202][ T8580] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 197.169250][ T8580] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 197.169296][ T8580] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 197.169345][ T8580] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 197.169390][ T8580] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 197.555972][ T5825] usb 2-1: 0:2 : does not exist [ 197.736249][ T5825] usb 2-1: USB disconnect, device number 13 [ 198.090576][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.261471][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.261504][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.261542][ T44] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 198.261564][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.282553][ T44] usb 4-1: config 0 descriptor?? [ 198.706375][ T44] samsung 0003:0419:0600.001D: item fetching failed at offset 5/7 [ 198.707210][ T44] samsung 0003:0419:0600.001D: parse failed [ 198.707279][ T44] samsung 0003:0419:0600.001D: probe with driver samsung failed with error -22 [ 198.830464][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 198.841645][ T5825] kernel write not supported for file /sequencer (pid: 5825 comm: kworker/1:3) [ 198.910724][ T5900] usb 4-1: USB disconnect, device number 16 [ 198.984625][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 198.984657][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 198.984682][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 198.987979][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 198.988007][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.988026][ T9] usb 3-1: Product: syz [ 198.988040][ T9] usb 3-1: Manufacturer: syz [ 198.988053][ T9] usb 3-1: SerialNumber: syz [ 199.059852][ T9] usb 3-1: config 0 descriptor?? [ 199.083399][ T8604] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 199.083684][ T8604] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 199.085892][ T9] usb 3-1: ucan: probing device on interface #0 [ 199.510196][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 199.669035][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.669298][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 199.669322][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.708358][ T9] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 199.730644][ T10] usb 5-1: config 0 descriptor?? [ 199.748914][ T9] usb 3-1: USB disconnect, device number 12 [ 200.359721][ T10] usb 5-1: USB disconnect, device number 9 [ 200.396859][ T8656] netlink: 'syz.2.1214': attribute type 2 has an invalid length. [ 200.437112][ T8656] bridge: entered promiscuous mode [ 200.690134][ T5825] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 200.850062][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 200.856537][ T5825] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 200.856564][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.856592][ T5825] usb 4-1: Product: syz [ 200.856605][ T5825] usb 4-1: Manufacturer: syz [ 200.856618][ T5825] usb 4-1: SerialNumber: syz [ 200.912114][ T5825] usb 4-1: config 0 descriptor?? [ 200.918346][ T5825] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 201.140338][ T5825] usb 4-1: USB disconnect, device number 17 [ 201.563859][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 201.663251][ T8696] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.820728][ T8702] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 202.069572][ T8716] vivid-006: disconnect [ 202.072869][ T8715] vivid-006: reconnect [ 202.133663][ T8705] veth3: entered promiscuous mode [ 202.298519][ T8724] vivid-001: disconnect [ 202.339927][ T8719] vivid-001: reconnect [ 202.963338][ T8753] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1260' resets device [ 204.539417][ T8817] loop6: detected capacity change from 0 to 524287999 [ 205.815075][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 205.967664][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1315'. [ 206.612000][ T5825] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 206.760114][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 206.766700][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.766731][ T5825] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.771906][ T5825] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 206.771932][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 206.771951][ T5825] usb 2-1: Product: syz [ 206.771965][ T5825] usb 2-1: Manufacturer: syz [ 206.771978][ T5825] usb 2-1: SerialNumber: syz [ 206.856697][ T5825] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input12 [ 207.075648][ T5825] usb 2-1: USB disconnect, device number 14 [ 207.163776][ T5825] appletouch 2-1:1.0: input: appletouch disconnected [ 207.169609][ T989] kernel read not supported for file /bus/input/devices (pid: 989 comm: kworker/1:2) [ 207.620229][ T5825] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 207.770208][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 207.790932][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 207.790965][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 207.790989][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 207.791011][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 207.791035][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 207.857926][ T5825] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 207.857955][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.857975][ T5825] usb 4-1: Product: syz [ 207.857988][ T5825] usb 4-1: Manufacturer: syz [ 207.858001][ T5825] usb 4-1: SerialNumber: syz [ 207.898588][ T5825] usb 4-1: config 0 descriptor?? [ 208.328785][ T5825] input input13: Device does not respond to id packet M [ 208.488930][ T8920] sp0: Synchronizing with TNC [ 208.492755][ T8920] sp0: Found TNC [ 208.530140][ T5825] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 208.530183][ T5825] input input13: Device does not respond to id packet P [ 208.530596][ T5825] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 208.530641][ T5825] input input13: Device does not respond to id packet B [ 208.531687][ T5825] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 208.531742][ T5825] input input13: Device does not respond to id packet N [ 208.532789][ T5825] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 208.533251][ T5825] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 208.540210][ T5825] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 208.540693][ T5825] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 208.615003][ T5825] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 208.640533][ T5825] usb 4-1: USB disconnect, device number 18 [ 209.413770][ T8959] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 209.413827][ T8959] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 209.413924][ T8959] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 209.414052][ T8959] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 209.414105][ T8959] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 209.414152][ T8959] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 209.414282][ T8959] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 209.414333][ T8959] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 209.414380][ T8959] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 209.414467][ T8959] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 209.414514][ T8959] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 209.414565][ T8959] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 209.414651][ T8959] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 209.414699][ T8959] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 209.450206][ T989] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 209.632507][ T989] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 209.632536][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.632555][ T989] usb 4-1: Product: syz [ 209.632569][ T989] usb 4-1: Manufacturer: syz [ 209.632583][ T989] usb 4-1: SerialNumber: syz [ 209.707257][ T989] usb 4-1: config 0 descriptor?? [ 209.719712][ T989] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 209.735292][ T8962] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 210.361752][ T10] usb 4-1: USB disconnect, device number 19 [ 210.526649][ T8997] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1377'. [ 211.112066][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 211.272941][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.272967][ T10] usb 2-1: config 0 has no interface number 0 [ 211.273022][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.273047][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.273088][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 211.273113][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.356977][ T10] usb 2-1: config 0 descriptor?? [ 211.667625][ T8962] Bluetooth: hci2: command 0x0406 tx timeout [ 211.668566][ T8962] Bluetooth: hci3: command 0x0406 tx timeout [ 211.669456][ T8962] Bluetooth: hci4: command 0x0406 tx timeout [ 211.873764][ T10] prodikeys 0003:041E:2801.001F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 211.878900][ T10] hid_prodikeys: hid-prodikeys: failed to find output report [ 211.878900][ T10] [ 212.102190][ T10] usb 2-1: USB disconnect, device number 15 [ 213.757699][ T5843] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 213.759177][ T5843] Bluetooth: hci1: Injecting HCI hardware error event [ 215.394175][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 215.608229][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 215.608260][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 215.633144][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 215.633171][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.633190][ T9] usb 4-1: Product: syz [ 215.633204][ T9] usb 4-1: Manufacturer: syz [ 215.633217][ T9] usb 4-1: SerialNumber: syz [ 215.715273][ T9] usb 4-1: config 0 descriptor?? [ 215.757280][ T9] usb 4-1: selecting invalid altsetting 0 [ 216.043200][ T9] usb 4-1: USB disconnect, device number 20 [ 216.840543][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 216.992945][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.992994][ T9] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 216.993016][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.040420][ T9] usb 3-1: config 0 descriptor?? [ 217.090235][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 217.321744][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 217.325288][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.325384][ T10] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 217.325407][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.388245][ T10] usb 4-1: config 0 descriptor?? [ 217.574823][ T9] holtek 0003:1241:5015.0020: unbalanced collection at end of report description [ 217.577666][ T9] holtek 0003:1241:5015.0020: parse failed [ 217.578007][ T9] holtek 0003:1241:5015.0020: probe with driver holtek failed with error -22 [ 217.797114][ T9] usb 3-1: USB disconnect, device number 13 [ 217.907935][ T10] waltop 0003:172F:0037.0021: unknown main item tag 0x0 [ 217.907973][ T10] waltop 0003:172F:0037.0021: unknown main item tag 0x0 [ 217.907998][ T10] waltop 0003:172F:0037.0021: item fetching failed at offset 4/5 [ 217.908872][ T10] waltop 0003:172F:0037.0021: probe with driver waltop failed with error -22 [ 218.057893][ T10] usb 4-1: USB disconnect, device number 21 [ 218.804291][ T9078] tipc: Started in network mode [ 218.804311][ T9078] tipc: Node identity a2a7, cluster identity 4711 [ 218.804323][ T9078] tipc: Node number set to 41639 [ 218.804669][ T9078] tipc: Cannot configure node identity twice [ 220.159990][ C1] sched: DL replenish lagged too much [ 221.314516][ T9123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.423225][ T5843] Bluetooth: hci1: hardware error 0x00 [ 221.540492][ T991] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.690466][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 221.707564][ T991] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 221.707590][ T991] usb 5-1: config 0 has no interface number 0 [ 221.729260][ T991] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 221.729287][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.729306][ T991] usb 5-1: Product: syz [ 221.729320][ T991] usb 5-1: Manufacturer: syz [ 221.729334][ T991] usb 5-1: SerialNumber: syz [ 221.796241][ T991] usb 5-1: config 0 descriptor?? [ 221.838020][ T991] smsc95xx v2.0.0 [ 222.443912][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 222.529719][ T991] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 222.529749][ T991] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 222.530797][ T991] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 222.531109][ T991] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 222.607093][ T991] usb 5-1: USB disconnect, device number 10 [ 239.869712][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.896897][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.898127][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.920297][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.921213][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.029117][ T8962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.047248][ T8962] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.048554][ T8962] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.049833][ T8962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.078488][ T8962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.895521][ T8962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.920640][ T8962] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.922525][ T8962] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.923788][ T8962] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.924624][ T8962] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.940512][ T8962] Bluetooth: hci7: command tx timeout [ 250.941070][ T8962] Bluetooth: hci5: command tx timeout [ 250.941301][ T8962] Bluetooth: hci6: command tx timeout [ 251.451590][ T8962] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 251.471603][ T8962] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 251.487872][ T8962] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 251.489096][ T8962] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 251.508523][ T8962] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 251.621090][ T5839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 251.641028][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 251.642540][ T5839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 251.643832][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 251.645396][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 252.070527][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 253.020574][ T5842] Bluetooth: hci7: command tx timeout [ 253.022476][ T5154] Bluetooth: hci5: command tx timeout [ 253.027897][ T8962] Bluetooth: hci6: command tx timeout [ 253.580494][ T5843] Bluetooth: hci8: command tx timeout [ 253.750278][ T5843] Bluetooth: hci9: command tx timeout [ 255.100206][ T5843] Bluetooth: hci6: command tx timeout [ 255.100238][ T5843] Bluetooth: hci5: command tx timeout [ 255.100258][ T5843] Bluetooth: hci7: command tx timeout [ 255.661027][ T5843] Bluetooth: hci8: command tx timeout [ 255.714792][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.820293][ T5843] Bluetooth: hci9: command tx timeout [ 257.180537][ T5839] Bluetooth: hci7: command tx timeout [ 257.180569][ T5839] Bluetooth: hci6: command tx timeout [ 257.180621][ T5843] Bluetooth: hci5: command tx timeout [ 257.740473][ T5843] Bluetooth: hci8: command tx timeout [ 257.900453][ T5843] Bluetooth: hci9: command tx timeout [ 258.149705][ T9161] chnl_net:caif_netlink_parms(): no params data found [ 258.214203][ T9164] chnl_net:caif_netlink_parms(): no params data found [ 259.820751][ T5843] Bluetooth: hci8: command tx timeout [ 259.980353][ T5843] Bluetooth: hci9: command tx timeout [ 300.993924][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.015657][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.017171][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.018376][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.019234][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.243283][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.272015][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.274730][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.275937][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.277452][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.180458][ T59] Bluetooth: hci0: command tx timeout [ 303.340976][ T59] Bluetooth: hci1: command tx timeout [ 304.406445][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.430878][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.433881][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.435286][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.436216][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.262099][ T5843] Bluetooth: hci0: command tx timeout [ 305.420434][ T5843] Bluetooth: hci1: command tx timeout [ 306.540426][ T5843] Bluetooth: hci3: command tx timeout [ 307.340385][ T5843] Bluetooth: hci0: command tx timeout [ 307.502389][ T5843] Bluetooth: hci1: command tx timeout [ 308.620575][ T5843] Bluetooth: hci3: command tx timeout [ 309.420603][ T59] Bluetooth: hci0: command tx timeout [ 309.585392][ T5843] Bluetooth: hci1: command tx timeout [ 310.603259][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.630564][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.631854][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.687255][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.688092][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.709378][ T5843] Bluetooth: hci3: command tx timeout [ 311.241715][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 311.259355][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 311.272367][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 311.273681][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 311.304983][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 312.780261][ T5843] Bluetooth: hci4: command tx timeout [ 312.782179][ T59] Bluetooth: hci3: command tx timeout [ 313.340203][ T59] Bluetooth: hci10: command tx timeout [ 314.860601][ T59] Bluetooth: hci4: command tx timeout [ 315.420194][ T59] Bluetooth: hci10: command tx timeout [ 316.940333][ T59] Bluetooth: hci4: command tx timeout [ 317.115858][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.508321][ T59] Bluetooth: hci10: command tx timeout [ 319.020468][ T59] Bluetooth: hci4: command tx timeout [ 319.580238][ T59] Bluetooth: hci10: command tx timeout [ 359.660243][ T9159] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 360.892712][ T5843] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 360.923894][ T5843] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 360.928720][ T5843] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 360.929881][ T5843] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 360.959079][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 361.872885][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 361.893229][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 361.894790][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 361.895988][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 361.896777][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 363.020372][ T5843] Bluetooth: hci11: command tx timeout [ 363.990272][ T5843] Bluetooth: hci12: command tx timeout [ 365.100348][ T5843] Bluetooth: hci11: command tx timeout [ 365.239762][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 365.261591][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 365.262912][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 365.264111][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 365.265130][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 366.060256][ T59] Bluetooth: hci12: command tx timeout [ 366.380619][ T38] INFO: task kworker/u8:3:57 blocked for more than 143 seconds. [ 366.380647][ T38] Not tainted syzkaller #0 [ 366.380658][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 366.380670][ T38] task:kworker/u8:3 state:D stack:19504 pid:57 tgid:57 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 366.380720][ T38] Workqueue: events_unbound free_mem_alloc_deferred [ 366.380756][ T38] Call Trace: [ 366.380762][ T38] [ 366.380775][ T38] __schedule+0x16f3/0x4c20 [ 366.380825][ T38] ? __lock_acquire+0xab9/0xd20 [ 366.380849][ T38] ? __pfx___schedule+0x10/0x10 [ 366.380889][ T38] ? schedule+0x91/0x360 [ 366.380915][ T38] schedule+0x165/0x360 [ 366.380940][ T38] schedule_timeout+0x9a/0x270 [ 366.380963][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 366.381000][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.381023][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.381045][ T38] ? wait_for_completion+0x267/0x5d0 [ 366.381071][ T38] wait_for_completion+0x2bf/0x5d0 [ 366.381108][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 366.381133][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 366.381163][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 366.381191][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 366.381216][ T38] rcu_barrier+0x463/0x570 [ 366.381247][ T38] free_mem_alloc_deferred+0x16/0x30 [ 366.381266][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 366.381287][ T38] process_scheduled_works+0xade/0x17b0 [ 366.381339][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 366.381379][ T38] worker_thread+0x8a0/0xda0 [ 366.381428][ T38] kthread+0x70e/0x8a0 [ 366.381456][ T38] ? __pfx_worker_thread+0x10/0x10 [ 366.381476][ T38] ? __pfx_kthread+0x10/0x10 [ 366.381506][ T38] ? __pfx_kthread+0x10/0x10 [ 366.381530][ T38] ret_from_fork+0x436/0x7d0 [ 366.381556][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 366.381584][ T38] ? __switch_to_asm+0x39/0x70 [ 366.381601][ T38] ? __switch_to_asm+0x33/0x70 [ 366.381616][ T38] ? __pfx_kthread+0x10/0x10 [ 366.381642][ T38] ret_from_fork_asm+0x1a/0x30 [ 366.381676][ T38] [ 366.381810][ T38] [ 366.381810][ T38] Showing all locks held in the system: [ 366.381819][ T38] 3 locks held by kworker/0:0/9: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 366.381829][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 366.381877][ T38] #1: ffffc900000e7bc0 (deferred_process_w[ 366.381877][ T38] #1: ffffc900000e7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 366.381921][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 366.381966][ T38] 2 locks held by rcuc/1/28: [ 366.381977][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 366.382022][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 366.382065][ T38] 2 locks held by ksoftirqd/1/30: [ 366.382075][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 366.382119][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 366.382170][ T38] 1 lock held by khungtaskd/38: [ 366.382181][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 366.382225][ T38] 3 locks held by kworker/u8:3/57: [ 366.382235][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 366.382280][ T38] #1: ffffc9000123fbc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 366.382325][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 366.382368][ T38] 3 locks held by kworker/u8:4/69: [ 366.382378][ T38] #0: ffff88814d334938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 366.382423][ T38] #1: ffffc9000154fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 366.382469][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 366.382514][ T38] 3 locks held by kworker/u8:5/86: [ 366.382524][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 366.382569][ T38] #1: ffffc900015efbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 366.382613][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 366.382666][ T38] 2 locks held by kworker/u8:6/1112: [ 366.382690][ T38] 2 locks held by getty/5596: [ 366.382701][ T38] #0: ffff88823bf2c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 366.382750][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 366.382796][ T38] 1 lock held by syz-executor/5836: [ 366.382806][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 366.382848][ T38] 4 locks held by kworker/u9:4/5843: [ 366.382858][ T38] #0: ffff88805b8e4938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 366.382919][ T38] #1: ffffc90004b3fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 366.382963][ T38] #2: ffff8880846100a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 366.383009][ T38] #3: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 366.383057][ T38] 2 locks held by kworker/0:3/5900: [ 366.383067][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 366.383116][ T38] #1: ffffc90004eefbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 366.383167][ T38] 2 locks held by kworker/1:4/5920: [ 366.383178][ T38] 2 locks held by kworker/1:5/5921: [ 366.383189][ T38] 3 locks held by kworker/u8:12/6556: [ 366.383199][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 366.383243][ T38] #1: ffffc9000c387bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 366.383287][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 366.383328][ T38] 1 lock held by syz.3.1047/8311: [ 366.383338][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 366.383386][ T38] 2 locks held by kworker/1:7/9010: [ 366.383396][ T38] 4 locks held by kworker/1:8/9067: [ 366.383406][ T38] #0: ffff88805be3bd38 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 366.383455][ T38] #1: ffffc900050ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 366.383512][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 366.383556][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 366.383602][ T38] 1 lock held by syz.4.1443/9140: [ 366.383612][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 366.383654][ T38] 1 lock held by syz.1.1445/9143: [ 366.383664][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 366.383706][ T38] 1 lock held by syz.2.1448/9150: [ 366.383716][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 366.383757][ T38] 3 locks held by syz-executor/9159: [ 366.383767][ T38] #0: ffff88806a834e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 366.383812][ T38] #1: ffff88806a8340a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 366.383858][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 366.383900][ T38] 3 locks held by syz-executor/9161: [ 366.383911][ T38] #0: ffff888063770e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 366.383954][ T38] #1: ffff8880637700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 366.384000][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 366.384042][ T38] 4 locks held by syz-executor/9164: [ 366.384053][ T38] #0: ffff88805e9ace80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 366.384096][ T38] #1: ffff88805e9ac0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 366.384142][ T38] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 366.384189][ T38] #3: ffff88806e9ee358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 366.384234][ T38] 2 locks held by syz-executor/9177: [ 366.384245][ T38] #0: ffffffff8ecc6a20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 366.384291][ T38] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 366.384336][ T38] 2 locks held by syz-executor/9180: [ 366.384346][ T38] #0: ffffffff8ecc6a20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 366.384391][ T38] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 366.384435][ T38] 7 locks held by kworker/1:11/9186: [ 366.384445][ T38] 1 lock held by syz-executor/9190: [ 366.384456][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 366.384499][ T38] 1 lock held by syz-executor/9192: [ 366.384509][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 366.384551][ T38] 1 lock held by syz-executor/9195: [ 366.384562][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 366.384605][ T38] 1 lock held by syz-executor/9202: [ 366.384615][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 366.384657][ T38] 1 lock held by syz-executor/9206: [ 366.384668][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 366.384710][ T38] 1 lock held by syz-executor/9213: [ 366.384720][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 366.384763][ T38] 1 lock held by syz-executor/9216: [ 366.384773][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 366.384815][ T38] 1 lock held by syz-executor/9219: [ 366.384825][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 366.384868][ T38] [ 366.384872][ T38] ============================================= [ 366.384872][ T38] [ 366.384889][ T38] NMI backtrace for cpu 0 [ 366.384910][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 366.384931][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.384941][ T38] Call Trace: [ 366.384949][ T38] [ 366.384956][ T38] dump_stack_lvl+0x189/0x250 [ 366.384983][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.385006][ T38] ? __pfx__printk+0x10/0x10 [ 366.385037][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 366.385062][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 366.385086][ T38] ? __pfx__printk+0x10/0x10 [ 366.385109][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 366.385132][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 366.385163][ T38] watchdog+0xf93/0xfe0 [ 366.385190][ T38] ? watchdog+0x1de/0xfe0 [ 366.385216][ T38] kthread+0x70e/0x8a0 [ 366.385242][ T38] ? __pfx_watchdog+0x10/0x10 [ 366.385262][ T38] ? __pfx_kthread+0x10/0x10 [ 366.385290][ T38] ? __pfx_kthread+0x10/0x10 [ 366.385314][ T38] ret_from_fork+0x436/0x7d0 [ 366.385338][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 366.385366][ T38] ? __switch_to_asm+0x39/0x70 [ 366.385381][ T38] ? __switch_to_asm+0x33/0x70 [ 366.385396][ T38] ? __pfx_kthread+0x10/0x10 [ 366.385421][ T38] ret_from_fork_asm+0x1a/0x30 [ 366.385453][ T38] [ 366.385459][ T38] Sending NMI from CPU 0 to CPUs 1: [ 366.385484][ C1] NMI backtrace for cpu 1 [ 366.385497][ C1] CPU: 1 UID: 0 PID: 9186 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 366.385515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.385525][ C1] Workqueue: events_long defense_work_handler [ 366.385546][ C1] RIP: 0010:debug_smp_processor_id+0xb/0x20 [ 366.385563][ C1] Code: f8 f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 20 16 62 8b <48> c7 c6 60 16 62 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 366.385575][ C1] RSP: 0018:ffffc90003d562b0 EFLAGS: 00000282 [ 366.385589][ C1] RAX: 0000000000000001 RBX: ffffffff88d876d1 RCX: ffff88801ebb8000 [ 366.385600][ C1] RDX: 0000000000000000 RSI: ffffffff8d21af85 RDI: ffffffff8b621620 [ 366.385611][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 366.385622][ C1] R10: ffffc90003d563f8 R11: ffffffff81aaf310 R12: 1ffff920007aac75 [ 366.385634][ C1] R13: ffffc90003d563e0 R14: ffffc90003d563a8 R15: ffffffff8172c165 [ 366.385646][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 366.385658][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.385669][ C1] CR2: 00007f56873edf98 CR3: 000000003f454000 CR4: 00000000003526f0 [ 366.385682][ C1] Call Trace: [ 366.385688][ C1] [ 366.385694][ C1] rcu_is_watching+0x15/0xb0 [ 366.385713][ C1] ? skb_release_head_state+0x71/0x250 [ 366.385733][ C1] ? unwind_next_frame+0xa5/0x2390 [ 366.385750][ C1] unwind_next_frame+0xd4/0x2390 [ 366.385771][ C1] ? unwind_next_frame+0xa5/0x2390 [ 366.385789][ C1] ? call_rcu+0xaa/0x9c0 [ 366.385804][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 366.385820][ C1] arch_stack_walk+0x11c/0x150 [ 366.385841][ C1] ? skb_release_head_state+0x71/0x250 [ 366.385863][ C1] stack_trace_save+0x9c/0xe0 [ 366.385877][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 366.385891][ C1] ? do_raw_spin_lock+0x121/0x290 [ 366.385918][ C1] kasan_save_track+0x3e/0x80 [ 366.385935][ C1] ? kasan_save_track+0x3e/0x80 [ 366.385949][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 366.385964][ C1] ? kmem_cache_alloc_noprof+0x143/0x310 [ 366.385982][ C1] ? fill_pool+0x100/0x570 [ 366.385999][ C1] ? debug_objects_fill_pool+0x107/0x120 [ 366.386015][ C1] ? debug_object_activate+0x6c/0x3a0 [ 366.386032][ C1] ? call_rcu+0xaa/0x9c0 [ 366.386044][ C1] ? skb_release_head_state+0x71/0x250 [ 366.386084][ C1] ? fill_pool+0x100/0x570 [ 366.386102][ C1] __kasan_slab_alloc+0x6c/0x80 [ 366.386118][ C1] ? fill_pool+0x100/0x570 [ 366.386134][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 366.386154][ C1] fill_pool+0x100/0x570 [ 366.386173][ C1] ? debug_objects_fill_pool+0xdf/0x120 [ 366.386190][ C1] ? __pfx_fill_pool+0x10/0x10 [ 366.386210][ C1] ? debug_objects_fill_pool+0xdf/0x120 [ 366.386226][ C1] ? debug_objects_fill_pool+0xdf/0x120 [ 366.386244][ C1] debug_objects_fill_pool+0x107/0x120 [ 366.386262][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 366.386285][ C1] debug_object_activate+0x6c/0x3a0 [ 366.386306][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 366.386321][ C1] call_rcu+0xaa/0x9c0 [ 366.386339][ C1] ? rcuref_put+0x1b7/0x210 [ 366.386353][ C1] ? __pfx_call_rcu+0x10/0x10 [ 366.386367][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 366.386388][ C1] ? dst_release+0x126/0x1b0 [ 366.386404][ C1] skb_release_head_state+0x71/0x250 [ 366.386426][ C1] consume_skb+0x60/0xf0 [ 366.386444][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 366.386463][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 366.386480][ C1] ? nf_ip_checksum+0x13c/0x510 [ 366.386497][ C1] nft_synproxy_do_eval+0x345/0x570 [ 366.386516][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 366.386539][ C1] nft_do_chain+0x40c/0x1920 [ 366.386554][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 366.386571][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 366.386590][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 366.386608][ C1] ? nft_do_chain+0x169f/0x1920 [ 366.386636][ C1] nft_do_chain_inet+0x25d/0x340 [ 366.386651][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 366.386665][ C1] ? __lock_acquire+0xab9/0xd20 [ 366.386687][ C1] ? NF_HOOK+0x9a/0x3a0 [ 366.386705][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 366.386721][ C1] nf_hook_slow+0xc2/0x220 [ 366.386741][ C1] NF_HOOK+0x206/0x3a0 [ 366.386759][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 366.386777][ C1] ? NF_HOOK+0x9a/0x3a0 [ 366.386793][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 366.386809][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 366.386828][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 366.386847][ C1] ? skb_dst+0x4f/0xd0 [ 366.386864][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 366.386884][ C1] NF_HOOK+0x30c/0x3a0 [ 366.386901][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 366.386923][ C1] ? NF_HOOK+0x9a/0x3a0 [ 366.386939][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 366.386957][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 366.386980][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 366.386997][ C1] __netif_receive_skb+0x143/0x380 [ 366.387013][ C1] ? rt_spin_unlock+0x65/0x80 [ 366.387032][ C1] ? process_backlog+0x27b/0x900 [ 366.387048][ C1] process_backlog+0x31e/0x900 [ 366.387071][ C1] __napi_poll+0xb3/0x540 [ 366.387090][ C1] net_rx_action+0x707/0xe00 [ 366.387116][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 366.387135][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 366.387157][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 366.387179][ C1] handle_softirqs+0x22f/0x710 [ 366.387201][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 366.387222][ C1] __local_bh_enable_ip+0x179/0x270 [ 366.387239][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 366.387256][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 366.387278][ C1] ? update_defense_level+0xec/0xd80 [ 366.387292][ C1] update_defense_level+0x8d2/0xd80 [ 366.387308][ C1] ? update_defense_level+0xec/0xd80 [ 366.387323][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 366.387343][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 366.387365][ C1] defense_work_handler+0x2d/0xd0 [ 366.387379][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 366.387396][ C1] process_scheduled_works+0xade/0x17b0 [ 366.387426][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 366.387450][ C1] worker_thread+0x8a0/0xda0 [ 366.387468][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 366.387491][ C1] ? __kthread_parkme+0x7b/0x200 [ 366.387513][ C1] kthread+0x70e/0x8a0 [ 366.387533][ C1] ? __pfx_worker_thread+0x10/0x10 [ 366.387549][ C1] ? __pfx_kthread+0x10/0x10 [ 366.387570][ C1] ? __pfx_kthread+0x10/0x10 [ 366.387589][ C1] ret_from_fork+0x436/0x7d0 [ 366.387607][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 366.387627][ C1] ? __switch_to_asm+0x39/0x70 [ 366.387640][ C1] ? __switch_to_asm+0x33/0x70 [ 366.387653][ C1] ? __pfx_kthread+0x10/0x10 [ 366.387672][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.387693][ C1] [ 366.676286][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 366.676307][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 366.676329][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.676340][ T38] Call Trace: [ 366.676348][ T38] [ 366.676356][ T38] dump_stack_lvl+0x99/0x250 [ 366.676385][ T38] ? __asan_memcpy+0x40/0x70 [ 366.676405][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.676428][ T38] ? __pfx__printk+0x10/0x10 [ 366.676459][ T38] vpanic+0x281/0x750 [ 366.676485][ T38] ? __pfx_vpanic+0x10/0x10 [ 366.676507][ T38] ? preempt_schedule+0xae/0xc0 [ 366.676532][ T38] ? preempt_schedule_common+0x83/0xd0 [ 366.676562][ T38] panic+0xb9/0xc0 [ 366.676583][ T38] ? __pfx_panic+0x10/0x10 [ 366.676606][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 366.676633][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 366.676658][ T38] watchdog+0xfd2/0xfe0 [ 366.676684][ T38] ? watchdog+0x1de/0xfe0 [ 366.676710][ T38] kthread+0x70e/0x8a0 [ 366.676736][ T38] ? __pfx_watchdog+0x10/0x10 [ 366.676757][ T38] ? __pfx_kthread+0x10/0x10 [ 366.676786][ T38] ? __pfx_kthread+0x10/0x10 [ 366.676809][ T38] ret_from_fork+0x436/0x7d0 [ 366.676834][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 366.676861][ T38] ? __switch_to_asm+0x39/0x70 [ 366.676883][ T38] ? __switch_to_asm+0x33/0x70 [ 366.676898][ T38] ? __pfx_kthread+0x10/0x10 [ 366.676923][ T38] ret_from_fork_asm+0x1a/0x30 [ 366.676955][ T38] [ 366.677214][ T38] Kernel Offset: disabled