last executing test programs: 56.166613147s ago: executing program 2 (id=2046): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4) 55.489025399s ago: executing program 2 (id=2051): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x9740}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x3}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x50}}, 0x0) 53.352096842s ago: executing program 2 (id=2059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 52.639519839s ago: executing program 4 (id=2062): io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x2a7}) r0 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 52.556895121s ago: executing program 2 (id=2063): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) prlimit64(0x0, 0x6, 0x0, &(0x7f0000000080)) 52.354664952s ago: executing program 4 (id=2065): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfefffd7b}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1, 0x0, 0x0) 52.202652784s ago: executing program 2 (id=2066): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) 51.975439457s ago: executing program 4 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}}, 0x40) 51.890352966s ago: executing program 2 (id=2071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0f0400000000000000000a00fffd0900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000208000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 51.66742507s ago: executing program 4 (id=2072): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv2(r0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1, 0x3, 0x1000, 0x1) 48.855245999s ago: executing program 4 (id=2079): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 48.533372627s ago: executing program 4 (id=2082): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x1000000, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 36.403492489s ago: executing program 32 (id=2071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0f0400000000000000000a00fffd0900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000208000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 34.175620967s ago: executing program 1 (id=2099): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 34.084764745s ago: executing program 1 (id=2100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 34.00978382s ago: executing program 1 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200), 0x7fff, r0}, 0x38) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0404"], 0xd) 33.913602778s ago: executing program 1 (id=2102): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0x38) 33.864968082s ago: executing program 1 (id=2103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000cc0)={@cgroup=r0, r0, 0x2f, 0x8, 0x4, @void, @value=r0}, 0x20) 32.908880412s ago: executing program 33 (id=2082): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x1000000, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 20.837941422s ago: executing program 1 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080003400000001408000240000000020900010073797a30000000000900020073797a320000000414000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 20.642446595s ago: executing program 3 (id=2121): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19.941711639s ago: executing program 3 (id=2124): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x8000001e, 0x0, 0x1, 0x5}, 0x54) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 19.554320079s ago: executing program 3 (id=2126): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f00000027c0)="6186b9e4cf830d0f7ebf626bf1ea9032b240557edb8c14103cadd4ae2ed8febb8b4dfb5d52059b31846c0c36", 0x2c}], 0x1) readv(r0, &(0x7f0000006c80)=[{&(0x7f0000005a00)=""/4058, 0xfda}, {0x0}], 0x2) 19.172271969s ago: executing program 3 (id=2128): mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 18.395429458s ago: executing program 3 (id=2130): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, 'vlan0\x00', {}, 0xc}) 17.992619675s ago: executing program 3 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0xf}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fff}]}, 0x28}}, 0x42094) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 17.256762826s ago: executing program 0 (id=2135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002}, 0x844) 17.075974048s ago: executing program 0 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf02}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 16.892951636s ago: executing program 0 (id=2137): request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 16.712241429s ago: executing program 0 (id=2138): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) 16.55975792s ago: executing program 0 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) 16.400943508s ago: executing program 0 (id=2140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d00000000140000001100", @ANYBLOB='\t'], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000004"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) 5.392897403s ago: executing program 34 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080003400000001408000240000000020900010073797a30000000000900020073797a320000000414000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 223.11453ms ago: executing program 35 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0xf}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fff}]}, 0x28}}, 0x42094) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 36 (id=2140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d00000000140000001100", @ANYBLOB='\t'], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000004"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) kernel console output (not intermixed with test programs): 131.591813][ T6507] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 131.741145][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 131.741700][ T6512] nbd: socks must be embedded in a SOCK_ITEM attr [ 132.019798][ T6521] capability: warning: `syz.1.264' uses 32-bit capabilities (legacy support in use) [ 132.311965][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.271'. [ 132.883439][ T6550] tipc: Started in network mode [ 132.883474][ T6550] tipc: Node identity 92813d525b42, cluster identity 4711 [ 132.883901][ T6550] tipc: Enabled bearer , priority 10 [ 133.589651][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 133.664255][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 133.996481][ T6025] tipc: Node number set to 3385015634 [ 134.223213][ T6595] gretap0: entered promiscuous mode [ 134.223373][ T6595] vlan2: entered promiscuous mode [ 134.804534][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.969471][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 134.972394][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 134.972449][ T5922] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 134.972474][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.992765][ T5922] usb 2-1: config 0 descriptor?? [ 135.360947][ T6633] ALSA: seq fatal error: cannot create timer (-22) [ 135.675269][ T5894] usb 2-1: USB disconnect, device number 5 [ 136.532574][ T6665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.334'. [ 136.532795][ T6665] Zero length message leads to an empty skb [ 136.820103][ T6675] netlink: 88 bytes leftover after parsing attributes in process `syz.3.339'. [ 137.024868][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.177562][ T5894] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.177597][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.202119][ T5894] usb 3-1: config 0 descriptor?? [ 137.211174][ T5894] cp210x 3-1:0.0: cp210x converter detected [ 137.451302][ T6695] pim6reg527: entered allmulticast mode [ 137.828937][ T5894] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 137.828970][ T5894] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 137.867052][ T5894] usb 3-1: cp210x converter now attached to ttyUSB0 [ 137.897449][ T5894] usb 3-1: USB disconnect, device number 4 [ 137.936610][ T6706] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 137.936639][ T6706] CIFS mount error: No usable UNC path provided in device string! [ 137.936639][ T6706] [ 137.936857][ T6706] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 137.943271][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.943949][ T5894] cp210x 3-1:0.0: device disconnected [ 138.216277][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.216406][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.407902][ T6719] netlink: 'syz.1.360': attribute type 18 has an invalid length. [ 138.442877][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.449183][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.449589][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.449629][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.774613][ T991] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.879254][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 138.879756][ T6735] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 138.879795][ T6735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.954579][ T991] usb 3-1: Using ep0 maxpacket: 8 [ 138.968617][ T991] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 138.968645][ T991] usb 3-1: config 2 has no interface number 0 [ 138.968693][ T991] usb 3-1: config 2 interface 31 has no altsetting 0 [ 138.979410][ T991] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 138.979440][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.979459][ T991] usb 3-1: Product: syz [ 138.979472][ T991] usb 3-1: Manufacturer: syz [ 138.979485][ T991] usb 3-1: SerialNumber: syz [ 139.654966][ T991] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 139.683426][ T991] usb 3-1: USB disconnect, device number 5 [ 140.062282][ T6764] netlink: 'syz.4.382': attribute type 1 has an invalid length. [ 140.062309][ T6764] netlink: 212 bytes leftover after parsing attributes in process `syz.4.382'. [ 140.062325][ T6764] netlink: 'syz.4.382': attribute type 1 has an invalid length. [ 141.124227][ T6797] syz.4.395 (6797) used greatest stack depth: 18904 bytes left [ 141.320865][ T991] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 141.497162][ T991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.497192][ T991] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.499016][ T991] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.499045][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.499065][ T991] usb 3-1: SerialNumber: syz [ 141.733930][ T991] usb 3-1: 0:2 : does not exist [ 141.873689][ T991] usb 3-1: USB disconnect, device number 6 [ 142.537582][ T6829] program syz.4.413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.676927][ T6833] warning: `syz.2.414' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.565197][ T6865] program syz.1.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.150247][ T6887] netlink: 794 bytes leftover after parsing attributes in process `syz.4.441'. [ 144.391607][ T6025] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.534472][ T6025] usb 3-1: Using ep0 maxpacket: 8 [ 144.537709][ T6025] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.537745][ T6025] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.537792][ T6025] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 144.537817][ T6025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.588586][ T6025] usb 3-1: config 0 descriptor?? [ 145.041747][ T6025] uclogic 0003:5543:0042.0005: unbalanced delimiter at end of report description [ 145.042676][ T6025] uclogic 0003:5543:0042.0005: parse failed [ 145.042804][ T6025] uclogic 0003:5543:0042.0005: probe with driver uclogic failed with error -22 [ 145.226407][ T6025] usb 3-1: USB disconnect, device number 7 [ 146.002612][ T6929] autofs: Bad value for 'fd' [ 150.895369][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 152.810576][ T7000] tipc: Started in network mode [ 152.810614][ T7000] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 152.812193][ T7000] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 152.903499][ T7000] tipc: Enabled bearer , priority 10 [ 153.447616][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 153.447637][ T37] audit: type=1326 audit(1757116476.454:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f2414f35ba7 code=0x0 [ 153.645229][ T5914] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.797267][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 153.838161][ T5914] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 153.838196][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 153.838218][ T5914] usb 3-1: Product: syz [ 153.838233][ T5914] usb 3-1: Manufacturer: syz [ 153.838249][ T5914] usb 3-1: SerialNumber: syz [ 153.910943][ T5914] usb 3-1: config 0 descriptor?? [ 153.936709][ T5822] tipc: Node number set to 1 [ 154.027762][ T6025] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 154.181118][ T6025] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 154.181151][ T6025] usb 1-1: config 0 has no interface number 0 [ 154.181187][ T6025] usb 1-1: config 0 interface 46 has no altsetting 0 [ 154.181224][ T6025] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 154.181249][ T6025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.279612][ T6025] usb 1-1: config 0 descriptor?? [ 154.300760][ T6025] usb-storage 1-1:0.46: USB Mass Storage device detected [ 154.386786][ T6025] usb-storage 1-1:0.46: Quirks match for vid 0781 pid 0100: 1 [ 154.411445][ T5914] usb 3-1: USB disconnect, device number 8 [ 154.471068][ T7030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.106117][ T7039] Bluetooth: MGMT ver 1.23 [ 155.359457][ T7043] netlink: 44 bytes leftover after parsing attributes in process `syz.3.512'. [ 155.359491][ T7043] netlink: 'syz.3.512': attribute type 6 has an invalid length. [ 155.359505][ T7043] netlink: 'syz.3.512': attribute type 5 has an invalid length. [ 155.359519][ T7043] netlink: 'syz.3.512': attribute type 4 has an invalid length. [ 155.497769][ T7045] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.828670][ T6025] usb 1-1: USB disconnect, device number 2 [ 156.774723][ T5822] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.941704][ T5822] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 156.941738][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.941760][ T5822] usb 3-1: Product: syz [ 156.941775][ T5822] usb 3-1: Manufacturer: syz [ 156.941790][ T5822] usb 3-1: SerialNumber: syz [ 156.954345][ C0] sched: DL replenish lagged too much [ 156.991306][ T6025] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.019222][ T5822] usb 3-1: config 0 descriptor?? [ 157.047756][ T5822] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 157.181541][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 157.181677][ T6025] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 157.181704][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.330258][ T6025] usb 5-1: config 0 descriptor?? [ 157.752787][ T5822] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 157.753046][ T5822] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 157.826097][ T5822] usb 3-1: USB disconnect, device number 9 [ 157.832119][ T6025] logitech 0003:046D:CA03.0006: unbalanced delimiter at end of report description [ 157.833109][ T6025] logitech 0003:046D:CA03.0006: parse failed [ 157.833231][ T6025] logitech 0003:046D:CA03.0006: probe with driver logitech failed with error -22 [ 158.005445][ T5914] usb 5-1: USB disconnect, device number 2 [ 158.894008][ T37] audit: type=1326 audit(1757116481.894:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 158.926506][ T37] audit: type=1326 audit(1757116481.894:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 158.961525][ T37] audit: type=1326 audit(1757116481.964:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 158.992046][ T37] audit: type=1326 audit(1757116481.964:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 158.992396][ T37] audit: type=1326 audit(1757116481.994:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 159.044506][ T37] audit: type=1326 audit(1757116481.994:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 159.090492][ T37] audit: type=1326 audit(1757116482.064:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7077 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 160.287078][ T5152] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 160.287222][ T5152] Bluetooth: hci1: Injecting HCI hardware error event [ 160.288983][ T5152] Bluetooth: hci1: hardware error 0x00 [ 161.415762][ T7107] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.950531][ T7125] xfs: Unexpected value for 'discard' [ 163.890544][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 166.307798][ T7144] Bluetooth: MGMT ver 1.23 [ 166.425368][ T7148] ======================================================= [ 166.425368][ T7148] WARNING: The mand mount option has been deprecated and [ 166.425368][ T7148] and is ignored by this kernel. Remove the mand [ 166.425368][ T7148] option from the mount to silence this warning. [ 166.425368][ T7148] ======================================================= [ 166.425753][ T7148] 9pnet_rdma: rdma_create_trans (7148): problem binding to privport: 13 [ 166.564652][ T6025] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.747859][ T6025] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 166.747890][ T6025] usb 2-1: config 0 has no interface number 0 [ 166.747926][ T6025] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 166.747972][ T6025] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.748000][ T6025] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.748023][ T6025] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 166.748069][ T6025] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 166.748095][ T6025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.878344][ T6025] usb 2-1: config 0 descriptor?? [ 167.469993][ T6025] wacom 0003:056A:0084.0007: unknown main item tag 0x0 [ 167.470037][ T6025] wacom 0003:056A:0084.0007: unknown main item tag 0x0 [ 167.535793][ T6025] wacom 0003:056A:0084.0007: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.1-1/input2 [ 167.567760][ T37] audit: type=1326 audit(1757116490.574:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7155 comm="syz.2.565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b92d3ebe9 code=0x0 [ 167.679490][ T6025] usb 2-1: USB disconnect, device number 6 [ 167.724528][ T5152] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 169.415343][ T6025] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 169.579296][ T6025] usb 2-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 169.583656][ T6025] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.583691][ T6025] usb 2-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 169.583720][ T6025] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.583759][ T6025] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 169.583784][ T6025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.701131][ T6025] usb 2-1: config 0 descriptor?? [ 170.201078][ T6025] nzxt-kraken2 0003:1E71:170E.0008: unknown main item tag 0x0 [ 170.201124][ T6025] nzxt-kraken2 0003:1E71:170E.0008: unknown main item tag 0x0 [ 170.201150][ T6025] nzxt-kraken2 0003:1E71:170E.0008: unknown main item tag 0x0 [ 170.201176][ T6025] nzxt-kraken2 0003:1E71:170E.0008: unknown main item tag 0x0 [ 170.201201][ T6025] nzxt-kraken2 0003:1E71:170E.0008: unknown main item tag 0x0 [ 170.265208][ T6025] nzxt-kraken2 0003:1E71:170E.0008: hidraw0: USB HID v8.00 Device [HID 1e71:170e] on usb-dummy_hcd.1-1/input0 [ 170.427967][ T6025] usb 2-1: USB disconnect, device number 7 [ 171.119880][ T7177] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 171.119913][ T7177] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.212000][ T7182] syz.3.575 uses obsolete (PF_INET,SOCK_PACKET) [ 171.234813][ T7177] vhci_hcd vhci_hcd.0: Device attached [ 171.438619][ T5914] vhci_hcd: vhci_device speed not set [ 171.474486][ T6025] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 171.494472][ T5914] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 171.650674][ T6025] usb 5-1: config 0 has no interfaces? [ 171.650718][ T6025] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.650744][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.726739][ T6025] usb 5-1: config 0 descriptor?? [ 172.008352][ T6025] usb 5-1: USB disconnect, device number 3 [ 172.040654][ T7178] vhci_hcd: unknown pdu 2 [ 172.082166][ T13] vhci_hcd: stop threads [ 172.083446][ T13] vhci_hcd: release socket [ 172.119433][ T13] vhci_hcd: disconnect device [ 172.188773][ T5914] vhci_hcd: vhci_device speed not set [ 173.240975][ T7204] binder: 7203:7204 ioctl 541b 0 returned -22 [ 173.359202][ T7206] binder: 7205:7206 ioctl 4018620d 0 returned -22 [ 173.378461][ T7206] binder: 7205:7206 ioctl c0306201 200000000240 returned -11 [ 177.879455][ T7236] trusted_key: encrypted_key: key user:syz not found [ 178.094940][ T7239] ptrace attach of "./syz-executor exec"[5847] was attempted by ""[7239] [ 178.784047][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 179.455518][ T7258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.610'. [ 179.458094][ T7256] netlink: 60 bytes leftover after parsing attributes in process `syz.0.610'. [ 181.896472][ T5914] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.008139][ T7281] team_slave_0: entered promiscuous mode [ 182.008196][ T7281] team_slave_1: entered promiscuous mode [ 182.008806][ T7280] team_slave_0: left promiscuous mode [ 182.008900][ T7280] team_slave_1: left promiscuous mode [ 182.049410][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.049440][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.051716][ T5914] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.051746][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.051767][ T5914] usb 2-1: SerialNumber: syz [ 182.375450][ T5914] usb 2-1: 0:2 : does not exist [ 182.433541][ T5914] usb 2-1: USB disconnect, device number 8 [ 183.284038][ T7296] CIFS: Unable to determine destination address [ 183.535610][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 183.535643][ T7302] netlink: 48 bytes leftover after parsing attributes in process `syz.3.629'. [ 185.548485][ T5822] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.700311][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 185.700368][ T5822] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 185.700394][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.828303][ T5822] usb 5-1: config 0 descriptor?? [ 186.413453][ T5822] aquacomputer_d5next 0003:0C70:F0BD.0009: unknown main item tag 0x0 [ 186.463853][ T5822] aquacomputer_d5next 0003:0C70:F0BD.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0 [ 186.642914][ T5822] usb 5-1: USB disconnect, device number 4 [ 186.775761][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.924667][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 186.928227][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.928261][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.928284][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.928331][ T5921] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 186.928357][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.023409][ T5921] usb 1-1: config 0 descriptor?? [ 187.629553][ T5921] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 187.781691][ T5921] usb 1-1: USB disconnect, device number 3 [ 188.834752][ T5822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 189.007153][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.007190][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.007214][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.007261][ T5822] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 189.007285][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.091550][ T5822] usb 4-1: config 0 descriptor?? [ 189.623019][ T5822] chicony 0003:04F2:1236.000B: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.3-1/input0 [ 189.788420][ T7373] bond_slave_0: entered promiscuous mode [ 189.788511][ T7373] bond_slave_1: entered promiscuous mode [ 189.789112][ T7373] macsec1: entered promiscuous mode [ 189.789130][ T7373] bond0: entered promiscuous mode [ 189.844035][ T5822] usb 4-1: USB disconnect, device number 3 [ 190.483057][ T7373] bond0: left promiscuous mode [ 190.515083][ T7373] bond_slave_0: left promiscuous mode [ 190.515180][ T7373] bond_slave_1: left promiscuous mode [ 191.325625][ T7400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.673'. [ 191.916336][ T7413] netlink: 188 bytes leftover after parsing attributes in process `syz.4.679'. [ 192.041100][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 192.041141][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'. [ 195.567455][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 195.567481][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 195.567507][ T7485] netlink: 'syz.2.713': attribute type 12 has an invalid length. [ 199.669792][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.669884][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.943203][ T7500] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 200.943249][ T7500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.116479][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.275448][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 202.278677][ T5921] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 202.278708][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.314604][ T5822] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 202.326915][ T5921] usb 1-1: config 0 descriptor?? [ 202.469696][ T5822] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 202.469728][ T5822] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 202.469817][ T5822] usb 5-1: config 0 has no interface number 0 [ 202.469871][ T5822] usb 5-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.469900][ T5822] usb 5-1: config 0 interface 30 has no altsetting 0 [ 202.470006][ T5822] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 202.470143][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.693955][ T5822] usb 5-1: config 0 descriptor?? [ 202.828166][ T5822] usb 5-1: unknown interface protocol 0x41, assuming v1 [ 202.828195][ T5822] usb 5-1: 30:2 : does not exist [ 202.941785][ T5921] magicmouse 0003:05AC:0269.000C: unknown main item tag 0x0 [ 202.941829][ T5921] magicmouse 0003:05AC:0269.000C: unknown main item tag 0x0 [ 202.941855][ T5921] magicmouse 0003:05AC:0269.000C: unknown main item tag 0x0 [ 202.941881][ T5921] magicmouse 0003:05AC:0269.000C: unknown main item tag 0x0 [ 202.941907][ T5921] magicmouse 0003:05AC:0269.000C: unknown main item tag 0x0 [ 203.037685][ T5921] magicmouse 0003:05AC:0269.000C: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 203.112681][ T5921] usb 1-1: USB disconnect, device number 4 [ 203.200546][ T5822] usb 5-1: USB disconnect, device number 5 [ 205.154504][ T5822] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 205.327138][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.327195][ T5822] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 205.327219][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.454566][ T5822] usb 4-1: config 0 descriptor?? [ 206.177205][ T5822] steelseries 0003:1038:12B6.000D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 206.283155][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 206.283182][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 206.306143][ T7552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.670319][ T5822] steelseries 0003:1038:12B6.000D: hid_hw_raw_request() failed with -71 [ 206.767616][ T5822] usb 4-1: USB disconnect, device number 4 [ 207.513868][ T7562] can0: slcan on ttynull. [ 210.125249][ T5822] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 210.376529][ T5822] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 210.376560][ T5822] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 210.376579][ T5822] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 210.376598][ T5822] usb 4-1: config 8 has no interface number 0 [ 210.376654][ T5822] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 210.376682][ T5822] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.584046][ T5822] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 210.584081][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.584105][ T5822] usb 4-1: Product: syz [ 210.584121][ T5822] usb 4-1: Manufacturer: syz [ 210.584136][ T5822] usb 4-1: SerialNumber: syz [ 211.167287][ T5822] usb 4-1: USB disconnect, device number 5 [ 211.306913][ T7561] can0 (unregistered): slcan off ttynull. [ 215.268875][ T7639] netlink: 'syz.4.783': attribute type 5 has an invalid length. [ 217.254437][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 217.255989][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 217.256093][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 217.824487][ T5822] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 217.978719][ T5822] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.978751][ T5822] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.978771][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.978844][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 217.978872][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 217.983280][ T5822] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.983312][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.983334][ T5822] usb 3-1: Product: syz [ 217.983349][ T5822] usb 3-1: Manufacturer: syz [ 218.160823][ T5822] cdc_wdm 3-1:1.0: skipping garbage [ 218.160847][ T5822] cdc_wdm 3-1:1.0: skipping garbage [ 218.192114][ T37] audit: type=1326 audit(1757116541.184:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7666 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 218.192180][ T37] audit: type=1326 audit(1757116541.184:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7666 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 218.287775][ T5822] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 218.287798][ T5822] cdc_wdm 3-1:1.0: Unknown control protocol [ 218.340911][ T5822] usb 3-1: USB disconnect, device number 10 [ 218.428966][ T37] audit: type=1326 audit(1757116541.434:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7666 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 218.429027][ T37] audit: type=1326 audit(1757116541.434:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7666 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 218.429076][ T37] audit: type=1326 audit(1757116541.434:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7666 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 218.669138][ T7653] syz.4.789 (7653): drop_caches: 2 [ 224.522462][ T7712] netlink: 128 bytes leftover after parsing attributes in process `syz.0.814'. [ 224.522533][ T7712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.814'. [ 225.164607][ T5921] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 225.321625][ T5921] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.321659][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.379001][ T5921] usb 5-1: config 0 descriptor?? [ 225.451290][ T5921] cp210x 5-1:0.0: cp210x converter detected [ 226.115276][ T5921] usb 5-1: cp210x converter now attached to ttyUSB0 [ 226.295574][ T6024] usb 5-1: USB disconnect, device number 6 [ 226.347542][ T6024] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 229.372417][ T6024] cp210x 5-1:0.0: device disconnected [ 229.904542][ T6024] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 230.094464][ T6024] usb 1-1: Using ep0 maxpacket: 8 [ 230.097451][ T6024] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 230.126772][ T6024] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 230.126804][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.126826][ T6024] usb 1-1: Product: syz [ 230.126841][ T6024] usb 1-1: Manufacturer: syz [ 230.126856][ T6024] usb 1-1: SerialNumber: syz [ 230.228584][ T6024] usb 1-1: config 0 descriptor?? [ 230.238502][ T6024] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 230.238565][ T6024] usb 1-1: setting power ON [ 230.275772][ T6024] dvb-usb: bulk message failed: -22 (2/0) [ 230.363952][ T6024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.398541][ T6024] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 230.398613][ T6024] usb 1-1: media controller created [ 230.566597][ T7755] dvb-usb: bulk message failed: -22 (4/0) [ 230.566626][ T7755] cxusb: i2c read failed [ 230.660926][ T6024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.840902][ T6024] usb 1-1: selecting invalid altsetting 6 [ 230.840927][ T6024] usb 1-1: digital interface selection failed (-22) [ 230.840944][ T6024] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 230.882196][ T6024] usb 1-1: setting power OFF [ 230.882358][ T6024] dvb-usb: bulk message failed: -22 (2/0) [ 230.882380][ T6024] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 230.882393][ T6024] (NULL device *): no alternate interface [ 231.100609][ T7692] syz.3.808 (7692): drop_caches: 1 [ 231.248431][ T6024] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 231.311591][ T6024] usb 1-1: USB disconnect, device number 5 [ 235.024996][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'. [ 237.011083][ T7769] veth1_macvtap: left promiscuous mode [ 237.011119][ T7769] macsec0: entered allmulticast mode [ 237.104535][ T7771] veth1_macvtap: entered promiscuous mode [ 237.104566][ T7771] veth1_macvtap: entered allmulticast mode [ 237.108058][ T7771] macsec0: left allmulticast mode [ 237.108082][ T7771] veth1_macvtap: left allmulticast mode [ 237.624688][ T5822] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 237.787387][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.787423][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.787466][ T5822] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 237.787490][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.857535][ T5822] usb 1-1: config 0 descriptor?? [ 238.503710][ T5822] hid_mf 0003:0079:1846.000E: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 238.503750][ T5822] hid_mf 0003:0079:1846.000E: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 238.683603][ T5822] usb 1-1: USB disconnect, device number 6 [ 238.903472][ T7818] tmpfs: Cannot change global quota limit on remount [ 240.058670][ T7833] netlink: 'syz.3.870': attribute type 2 has an invalid length. [ 240.096818][ T5822] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.245752][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 240.269491][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.269529][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.269573][ T5822] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 240.269598][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.349876][ T5822] usb 5-1: config 0 descriptor?? [ 240.982935][ T5822] magicmouse 0003:05AC:0324.000F: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.4-1/input0 [ 241.175178][ T6024] usb 5-1: USB disconnect, device number 7 [ 242.334542][ T5822] IPVS: starting estimator thread 0... [ 244.087251][ T7868] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 244.139772][ T7862] IPVS: using max 5 ests per chain, 12000 per kthread [ 246.674827][ T5822] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 246.724519][ T6024] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 246.832499][ T5822] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 246.832532][ T5822] usb 4-1: config 0 has no interface number 0 [ 246.832569][ T5822] usb 4-1: config 0 interface 98 has no altsetting 0 [ 246.894898][ T6024] usb 5-1: Using ep0 maxpacket: 32 [ 246.917631][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.917667][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.917711][ T6024] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 246.918786][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.053511][ T5822] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 247.053546][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.053567][ T5822] usb 4-1: Product: syz [ 247.053582][ T5822] usb 4-1: Manufacturer: syz [ 247.053598][ T5822] usb 4-1: SerialNumber: syz [ 247.123625][ T5822] usb 4-1: config 0 descriptor?? [ 247.133233][ T6024] usb 5-1: config 0 descriptor?? [ 247.505209][ T5822] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 247.658813][ T6024] kye 0003:0458:0087.0010: unknown main item tag 0x0 [ 247.658852][ T6024] kye 0003:0458:0087.0010: unknown main item tag 0x0 [ 247.701007][ T6024] kye 0003:0458:0087.0010: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 247.865984][ T5921] usb 5-1: USB disconnect, device number 8 [ 248.004693][ T6024] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 248.042881][ T5822] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 248.157572][ T6024] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.157610][ T6024] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 248.157639][ T6024] usb 2-1: config 0 interface 0 has no altsetting 0 [ 248.157676][ T6024] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 248.157701][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.235581][ T6024] usb 2-1: config 0 descriptor?? [ 248.237087][ T7901] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 248.576305][ T5822] usb 4-1: failed to restore interface 98 altsetting 4 (error=-71) [ 248.610182][ T5822] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 248.627942][ T5822] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 248.758538][ T5822] usb 4-1: USB disconnect, device number 6 [ 248.799395][ T6024] uclogic 0003:28BD:0074.0011: interface is invalid, ignoring [ 248.866327][ T5914] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 248.866358][ T5914] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 248.994238][ T6024] usb 2-1: USB disconnect, device number 9 [ 251.299011][ T5921] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 251.478777][ T5921] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 251.478809][ T5921] usb 2-1: config 1 has no interface number 0 [ 251.479078][ T5921] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 251.479107][ T5921] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 251.479135][ T5921] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.483447][ T5921] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 251.483477][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.483498][ T5921] usb 2-1: Product: syz [ 251.483604][ T5921] usb 2-1: Manufacturer: syz [ 251.483621][ T5921] usb 2-1: SerialNumber: syz [ 251.612806][ T7925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.855836][ T7925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.427016][ T1167] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.427121][ T7947] netlink: 'syz.4.922': attribute type 29 has an invalid length. [ 255.428384][ T1167] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.428466][ T7947] netlink: 'syz.4.922': attribute type 29 has an invalid length. [ 255.429762][ T1167] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.429813][ T1167] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.513642][ T5921] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 255.582147][ T5921] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 255.582181][ T5921] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 255.606223][ T5921] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 255.606392][ T5921] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 256.234498][ T5921] usb 2-1: USB disconnect, device number 10 [ 256.260780][ T5921] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 257.083018][ T7963] tipc: Enabling of bearer rejected, failed to enable media [ 257.186996][ T7965] IPVS: Error connecting to the multicast addr [ 257.656605][ T6024] sierra_net 2-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 257.656782][ T6024] sierra_net 2-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 257.756862][ T5921] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 259.944573][ T6024] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 260.109363][ T6024] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 260.109398][ T6024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.142268][ T6024] usb 4-1: config 0 descriptor?? [ 260.687563][ T6024] elecom 0003:056E:00E6.0012: unknown main item tag 0x0 [ 260.687603][ T6024] elecom 0003:056E:00E6.0012: unknown main item tag 0x0 [ 260.687629][ T6024] elecom 0003:056E:00E6.0012: unknown main item tag 0x0 [ 260.687668][ T6024] elecom 0003:056E:00E6.0012: unknown main item tag 0x0 [ 260.687693][ T6024] elecom 0003:056E:00E6.0012: unknown main item tag 0x0 [ 260.693655][ T6024] elecom 0003:056E:00E6.0012: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.3-1/input0 [ 260.891467][ T6024] usb 4-1: USB disconnect, device number 7 [ 261.104190][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.111205][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.363060][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 267.363263][ T8018] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 267.363296][ T8018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.289023][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 269.186971][ T8045] Bluetooth: MGMT ver 1.23 [ 269.561640][ T8052] program syz.0.971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.055630][ T46] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 271.220285][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.220317][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 271.220490][ T46] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 271.220517][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.310729][ T46] usb 3-1: config 0 descriptor?? [ 271.396669][ T46] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 271.396979][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 271.537891][ T46] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 271.557478][ T46] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 271.557554][ T46] usb 3-1: media controller created [ 271.635185][ T8063] dvb-usb: bulk message failed: -22 (2/0) [ 271.650116][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.763725][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 271.763914][ T46] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 271.823923][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 271.949574][ T46] dvb-usb: schedule remote query interval to 150 msecs. [ 271.949599][ T46] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 272.015117][ T46] usb 3-1: USB disconnect, device number 11 [ 272.385934][ T8077] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.599158][ T8079] sctp: failed to load transform for md5: -4 [ 275.023516][ T8113] tipc: Started in network mode [ 275.023553][ T8113] tipc: Node identity ac141441, cluster identity 4711 [ 275.063582][ T8113] tipc: Enabled bearer , priority 10 [ 275.274511][ T5822] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 275.471848][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.471902][ T5822] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 275.471928][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.512964][ T46] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 275.572065][ T5822] usb 1-1: config 0 descriptor?? [ 275.984874][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 276.176201][ T6024] tipc: Node number set to 2886997057 [ 276.556634][ T5822] kye 0003:0458:500F.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 276.557999][ T5822] kye 0003:0458:500F.0013: unknown main item tag 0x3 [ 276.615473][ T5822] kye 0003:0458:500F.0013: hidraw0: USB HID v0.01 Device [HID 0458:500f] on usb-dummy_hcd.0-1/input0 [ 276.615511][ T5822] kye 0003:0458:500F.0013: tablet-enabling feature report not found [ 276.615526][ T5822] kye 0003:0458:500F.0013: tablet enabling failed [ 276.722585][ T5822] usb 1-1: USB disconnect, device number 7 [ 277.738181][ T8132] tmpfs: Cannot disable swap on remount [ 280.315385][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 281.116921][ T37] audit: type=1400 audit(1757116604.124:51): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8159 comm="syz.4.1020" src=1 dest=20000 netif=wpan0 [ 284.236076][ T8186] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 284.753949][ T8192] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.305859][ T37] audit: type=1326 audit(1757116608.314:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b92d3ebe9 code=0x7ffc0000 [ 285.307322][ T37] audit: type=1326 audit(1757116608.314:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b92d3ebe9 code=0x7ffc0000 [ 285.311091][ T8201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.395096][ T37] audit: type=1326 audit(1757116608.394:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6b92d3ebe9 code=0x7ffc0000 [ 285.398511][ T37] audit: type=1326 audit(1757116608.404:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b92d3ebe9 code=0x7ffc0000 [ 285.404976][ T37] audit: type=1326 audit(1757116608.404:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b92d3ebe9 code=0x7ffc0000 [ 285.405033][ T37] audit: type=1326 audit(1757116608.404:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f6b92d3ebe9 code=0x7ffc0000 [ 285.411413][ T37] audit: type=1326 audit(1757116608.414:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b92d35ba7 code=0x7ffc0000 [ 285.412246][ T37] audit: type=1326 audit(1757116608.414:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b92cdadb9 code=0x7ffc0000 [ 285.416534][ T37] audit: type=1326 audit(1757116608.414:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b92d3ebe9 code=0x7ffc0000 [ 286.085626][ T46] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 286.215599][ T5822] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 286.237523][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.237642][ T46] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 286.237668][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.274537][ T46] usb 1-1: config 0 descriptor?? [ 286.375508][ T5822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.380525][ T5822] usb 5-1: config 3 has an invalid interface number: 8 but max is 3 [ 286.380557][ T5822] usb 5-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 286.380643][ T5822] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 286.380666][ T5822] usb 5-1: config 3 has no interface number 0 [ 286.380720][ T5822] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 286.380815][ T5822] usb 5-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 286.380843][ T5822] usb 5-1: config 3 interface 8 has no altsetting 0 [ 286.460377][ T5822] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 286.460477][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.460500][ T5822] usb 5-1: Product: syz [ 286.460515][ T5822] usb 5-1: Manufacturer: syz [ 286.460540][ T5822] usb 5-1: SerialNumber: syz [ 286.805689][ T5822] appledisplay 5-1:3.8: Error while getting initial brightness: -71 [ 286.832094][ T46] nintendo 0003:057E:200E.0014: unbalanced delimiter at end of report description [ 286.833027][ T46] nintendo 0003:057E:200E.0014: HID parse failed [ 286.854855][ T5822] appledisplay 5-1:3.8: probe with driver appledisplay failed with error -71 [ 286.881832][ T5822] usbhid 5-1:3.8: can't add hid device: -22 [ 286.881983][ T5822] usbhid 5-1:3.8: probe with driver usbhid failed with error -22 [ 286.900786][ T46] nintendo 0003:057E:200E.0014: probe - fail = -22 [ 286.900938][ T46] nintendo 0003:057E:200E.0014: probe with driver nintendo failed with error -22 [ 286.951087][ T46] usb 1-1: USB disconnect, device number 8 [ 286.960904][ T5822] usb 5-1: USB disconnect, device number 9 [ 287.584430][ T7007] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 287.748063][ T7007] usb 4-1: Using ep0 maxpacket: 32 [ 287.766376][ T7007] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 287.770546][ T7007] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 287.770579][ T7007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.770601][ T7007] usb 4-1: Product: syz [ 287.770616][ T7007] usb 4-1: Manufacturer: syz [ 287.770631][ T7007] usb 4-1: SerialNumber: syz [ 287.797723][ T7007] usb 4-1: config 0 descriptor?? [ 287.798952][ T8240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 287.813155][ T7007] hub 4-1:0.0: bad descriptor, ignoring hub [ 287.813197][ T7007] hub 4-1:0.0: probe with driver hub failed with error -5 [ 287.854515][ T7007] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 287.980953][ T8254] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1062'. [ 288.152239][ T8240] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 288.152270][ T8240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 288.188054][ T8240] vhci_hcd vhci_hcd.0: Device attached [ 288.191573][ T8259] vhci_hcd: connection closed [ 288.209607][ T5822] usb 4-1: USB disconnect, device number 8 [ 288.209678][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 288.279084][ T3596] vhci_hcd: stop threads [ 288.279106][ T3596] vhci_hcd: release socket [ 288.279145][ T3596] vhci_hcd: disconnect device [ 288.368239][ T8264] bridge0: port 3(syz_tun) entered blocking state [ 288.372875][ T8264] bridge0: port 3(syz_tun) entered disabled state [ 288.373370][ T8264] syz_tun: entered allmulticast mode [ 288.408619][ T8264] syz_tun: entered promiscuous mode [ 288.421236][ T8264] bridge0: port 3(syz_tun) entered blocking state [ 288.423492][ T8264] bridge0: port 3(syz_tun) entered forwarding state [ 288.744620][ T7007] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 288.919855][ T7007] usb 1-1: Using ep0 maxpacket: 32 [ 288.922939][ T7007] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 288.922970][ T7007] usb 1-1: config 0 has no interface number 0 [ 288.927007][ T7007] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 288.927039][ T7007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.927061][ T7007] usb 1-1: Product: syz [ 288.927076][ T7007] usb 1-1: Manufacturer: syz [ 288.927090][ T7007] usb 1-1: SerialNumber: syz [ 288.968739][ T7007] usb 1-1: config 0 descriptor?? [ 288.995659][ T7007] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 289.260080][ T7007] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 289.305164][ T7007] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 289.652396][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 289.662077][ T5822] usb 1-1: USB disconnect, device number 9 [ 289.714181][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 289.753368][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 289.767229][ T5822] quatech2 1-1:0.51: device disconnected [ 289.781376][ T8305] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 289.799511][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 289.935887][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1087'. [ 290.267357][ T5822] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 290.414466][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 290.422798][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.422855][ T5822] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 290.422881][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.486860][ T5822] usb 2-1: config 0 descriptor?? [ 290.982627][ T5822] waltop 0003:172F:0501.0015: unknown main item tag 0x0 [ 290.982667][ T5822] waltop 0003:172F:0501.0015: unknown main item tag 0x0 [ 290.982693][ T5822] waltop 0003:172F:0501.0015: unknown main item tag 0x0 [ 290.982719][ T5822] waltop 0003:172F:0501.0015: unknown main item tag 0x0 [ 290.982746][ T5822] waltop 0003:172F:0501.0015: unknown main item tag 0x0 [ 291.031971][ T5822] waltop 0003:172F:0501.0015: hidraw0: USB HID v0.08 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 291.177475][ T5822] usb 2-1: USB disconnect, device number 11 [ 291.514485][ T7007] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 291.690320][ T7007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.690359][ T7007] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.690406][ T7007] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 291.690431][ T7007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.699820][ T7007] usb 5-1: config 0 descriptor?? [ 291.874568][ T7218] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 292.024473][ T7218] usb 1-1: Using ep0 maxpacket: 32 [ 292.028662][ T7218] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 292.028691][ T7218] usb 1-1: config 0 has no interface number 0 [ 292.028820][ T7218] usb 1-1: config 0 interface 12 has no altsetting 0 [ 292.071559][ T7218] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 292.071606][ T7218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.071628][ T7218] usb 1-1: Product: syz [ 292.071711][ T7218] usb 1-1: Manufacturer: syz [ 292.071727][ T7218] usb 1-1: SerialNumber: syz [ 292.109761][ T7218] usb 1-1: config 0 descriptor?? [ 292.265864][ T7007] mcp2200 0003:04D8:00DF.0016: item fetching failed at offset 5/7 [ 292.276305][ T7007] mcp2200 0003:04D8:00DF.0016: can't parse reports [ 292.277134][ T7007] mcp2200 0003:04D8:00DF.0016: probe with driver mcp2200 failed with error -22 [ 292.408655][ T7007] usb 5-1: USB disconnect, device number 10 [ 292.802436][ T7218] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 292.802501][ T7218] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 292.802519][ T7218] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 292.802647][ T7218] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 292.820958][ T7218] usb 1-1: USB disconnect, device number 10 [ 292.984469][ T5822] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 293.022878][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 293.136153][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 293.143958][ T5822] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 293.143991][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.144013][ T5822] usb 3-1: Product: syz [ 293.144028][ T5822] usb 3-1: Manufacturer: syz [ 293.144043][ T5822] usb 3-1: SerialNumber: syz [ 293.204984][ T5822] usb 3-1: config 0 descriptor?? [ 293.212773][ T5822] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 293.457099][ T8404] netlink: 'syz.4.1133': attribute type 6 has an invalid length. [ 293.849617][ T5822] gspca_stk1135: reg_w 0x3 err -71 [ 293.850660][ T5822] gspca_stk1135: serial bus timeout: status=0x00 [ 293.850673][ T5822] gspca_stk1135: Sensor write failed [ 293.850700][ T5822] gspca_stk1135: serial bus timeout: status=0x00 [ 293.850709][ T5822] gspca_stk1135: Sensor write failed [ 293.850736][ T5822] gspca_stk1135: serial bus timeout: status=0x00 [ 293.850745][ T5822] gspca_stk1135: Sensor read failed [ 293.850770][ T5822] gspca_stk1135: serial bus timeout: status=0x00 [ 293.850779][ T5822] gspca_stk1135: Sensor read failed [ 293.850785][ T5822] gspca_stk1135: Detected sensor type unknown (0x0) [ 293.850819][ T5822] gspca_stk1135: serial bus timeout: status=0x00 [ 293.850828][ T5822] gspca_stk1135: Sensor read failed [ 293.850855][ T5822] gspca_stk1135: serial bus timeout: status=0x00 [ 293.850864][ T5822] gspca_stk1135: Sensor read failed [ 293.850892][ T5822] gspca_stk1135: serial bus timeout: status=0x00 [ 293.850900][ T5822] gspca_stk1135: Sensor write failed [ 293.850927][ T5822] gspca_stk1135: serial bus timeout: status=0x00 [ 293.850936][ T5822] gspca_stk1135: Sensor write failed [ 293.851033][ T5822] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 293.995231][ T5822] usb 3-1: USB disconnect, device number 13 [ 294.137885][ T37] audit: type=1800 audit(1757116617.104:61): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1140" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 294.170148][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1143'. [ 294.359415][ T8431] veth0_to_bond: entered allmulticast mode [ 294.860555][ T8448] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1154'. [ 295.407690][ T8469] program syz.3.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.514453][ T7007] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 295.637289][ T8475] hugetlbfs: Bad value '%' for mount option 'size' [ 295.637289][ T8475] [ 295.664494][ T7007] usb 2-1: Using ep0 maxpacket: 8 [ 295.684498][ T7007] usb 2-1: config 12 has an invalid interface number: 212 but max is 0 [ 295.684530][ T7007] usb 2-1: config 12 has no interface number 0 [ 295.687745][ T7007] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 295.687776][ T7007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.687798][ T7007] usb 2-1: Product: syz [ 295.687813][ T7007] usb 2-1: Manufacturer: syz [ 295.687828][ T7007] usb 2-1: SerialNumber: syz [ 295.763883][ T7007] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 295.763948][ T7007] dvb-usb: bulk message failed: -22 (2/0) [ 295.783422][ T7007] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.789395][ T7007] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 295.789545][ T7007] usb 2-1: media controller created [ 295.964546][ T8466] dvb-usb: bulk message failed: -22 (3/0) [ 295.985808][ T7007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.084021][ T7007] cxusb: set interface failed [ 296.084041][ T7007] dvb-usb: bulk message failed: -22 (1/0) [ 296.084063][ T7007] dvb-usb: bulk message failed: -22 (3/0) [ 296.084082][ T7007] usb 2-1: bluebird_gpio_write failed. [ 296.104520][ T7007] dvb-usb: bulk message failed: -22 (3/0) [ 296.104549][ T7007] usb 2-1: bluebird_gpio_write failed. [ 296.193651][ T7007] DVB: Unable to find symbol dib7000p_attach() [ 296.193669][ T7007] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 296.334512][ T7007] rc_core: IR keymap rc-dvico-mce not found [ 296.334537][ T7007] Registered IR keymap rc-empty [ 296.348693][ T7007] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 296.387183][ T7007] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input11 [ 296.408513][ T7007] dvb-usb: schedule remote query interval to 100 msecs. [ 296.408540][ T7007] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 296.428783][ T7007] usb 2-1: USB disconnect, device number 12 [ 296.626467][ T8498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.807821][ T7007] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 297.119204][ T8512] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.1186'. [ 297.462195][ T8524] random: crng reseeded on system resumption [ 298.114459][ T7063] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 298.195655][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 298.246189][ T8541] dummy0: entered promiscuous mode [ 298.284760][ T7063] usb 3-1: Using ep0 maxpacket: 16 [ 298.287957][ T7063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.287993][ T7063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.288016][ T7063] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.288063][ T7063] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 298.288087][ T7063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.309994][ T8541] dummy0: left promiscuous mode [ 298.316116][ T7063] usb 3-1: config 0 descriptor?? [ 298.700456][ T8555] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1206'. [ 298.746144][ T7063] ryos 0003:1E7D:31CE.0017: global environment stack underflow [ 298.746169][ T7063] ryos 0003:1E7D:31CE.0017: item 0 2 1 11 parsing failed [ 298.747100][ T7063] ryos 0003:1E7D:31CE.0017: parse failed [ 298.747179][ T7063] ryos 0003:1E7D:31CE.0017: probe with driver ryos failed with error -22 [ 298.940521][ T5822] usb 3-1: USB disconnect, device number 14 [ 299.302318][ T8574] netlink: 'syz.1.1214': attribute type 2 has an invalid length. [ 299.382283][ T8574] þ: entered promiscuous mode [ 299.431273][ T8579] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 299.739743][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 299.777313][ T37] audit: type=1326 audit(1757116622.774:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 299.777376][ T37] audit: type=1326 audit(1757116622.774:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 299.777723][ T37] audit: type=1326 audit(1757116622.784:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 299.782033][ T37] audit: type=1326 audit(1757116622.784:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 299.803198][ T37] audit: type=1326 audit(1757116622.804:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 299.803250][ T37] audit: type=1326 audit(1757116622.804:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 299.803291][ T37] audit: type=1326 audit(1757116622.804:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 299.803332][ T37] audit: type=1326 audit(1757116622.804:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 300.033587][ T37] audit: type=1326 audit(1757116623.034:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8599 comm="syz.3.1228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2414f3ebe9 code=0x0 [ 300.187785][ T8606] program syz.2.1230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.579202][ T5822] kernel write not supported for file /dsp1 (pid: 5822 comm: kworker/1:2) [ 301.544524][ T5822] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 301.719984][ T5822] usb 4-1: string descriptor 0 read error: -22 [ 301.720182][ T5822] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 301.720278][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.751458][ T5822] usb 4-1: config 0 descriptor?? [ 301.770390][ T5822] usbtest 4-1:0.0: FX2 device [ 301.770413][ T5822] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 302.005527][ T5822] usb 4-1: USB disconnect, device number 9 [ 302.701730][ T8681] QAT: Invalid ioctl 1075883590 [ 302.701873][ T8681] QAT: Invalid ioctl 1075883590 [ 302.701980][ T8681] QAT: Invalid ioctl 1075883590 [ 302.702078][ T8681] QAT: Invalid ioctl 1075883590 [ 302.702178][ T8681] QAT: Invalid ioctl 1075883590 [ 302.702295][ T8681] QAT: Invalid ioctl 1075883590 [ 302.702519][ T8681] QAT: Invalid ioctl 1075883590 [ 302.702619][ T8681] QAT: Invalid ioctl 1075883590 [ 302.702719][ T8681] QAT: Invalid ioctl 1075883590 [ 302.702822][ T8681] QAT: Invalid ioctl 1075883590 [ 303.434453][ T5822] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 303.597145][ T5822] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.597180][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.597217][ T5822] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 303.597241][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.665364][ T5822] usb 1-1: config 0 descriptor?? [ 303.936290][ T37] audit: type=1326 audit(1757116626.944:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8706 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547821ebe9 code=0x7ffc0000 [ 304.100149][ T5822] aquacomputer_d5next 0003:0C70:F003.0018: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.0-1/input0 [ 304.291671][ T7063] usb 1-1: USB disconnect, device number 11 [ 304.433566][ T8717] atomic_op ffff88803b940a18 conn xmit_atomic 0000000000000000 [ 304.641357][ T8724] vivid-004: disconnect [ 304.643771][ T8723] vivid-004: reconnect [ 305.913291][ T5822] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 306.050546][ T8759] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1300'. [ 306.050572][ T8759] tc_dump_action: action bad kind [ 306.083926][ T5822] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.083962][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.083984][ T5822] usb 2-1: Product: syz [ 306.083999][ T5822] usb 2-1: Manufacturer: syz [ 306.084013][ T5822] usb 2-1: SerialNumber: syz [ 306.131362][ T5822] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 306.222543][ T5921] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.747373][ T5894] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 306.914382][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 306.918835][ T5894] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 306.923811][ T5894] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 306.923843][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.923864][ T5894] usb 4-1: Product: syz [ 306.923879][ T5894] usb 4-1: Manufacturer: syz [ 306.923893][ T5894] usb 4-1: SerialNumber: syz [ 307.047357][ T5894] usb 4-1: config 0 descriptor?? [ 307.073845][ T5894] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 307.073908][ T5894] usb 4-1: setting power ON [ 307.073929][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 307.133945][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.168959][ T5894] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 307.169029][ T5894] usb 4-1: media controller created [ 307.304094][ T8767] dvb-usb: bulk message failed: -22 (3/0) [ 307.367402][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.486809][ T5894] usb 4-1: selecting invalid altsetting 6 [ 307.486834][ T5894] usb 4-1: digital interface selection failed (-22) [ 307.486850][ T5894] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 307.495090][ T5894] usb 4-1: setting power OFF [ 307.495117][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 307.495137][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 307.495150][ T5894] (NULL device *): no alternate interface [ 307.826381][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 307.868006][ T5921] usb 2-1: Service connection timeout for: 256 [ 307.868033][ T5921] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 307.904514][ T5894] usb 4-1: USB disconnect, device number 10 [ 308.764793][ T5894] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 308.930955][ T5894] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.930994][ T5894] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.931037][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.931063][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.009514][ T8801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 309.070151][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.507862][ T5894] usb 3-1: USB disconnect, device number 15 [ 309.878180][ T6024] usb 2-1: USB disconnect, device number 13 [ 309.904545][ T5921] ath9k_htc: Failed to initialize the device [ 309.911065][ T6024] usb 2-1: ath9k_htc: USB layer deinitialized [ 310.244419][ T6024] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 310.423604][ T6024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.428650][ T6024] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 310.428754][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.428774][ T6024] usb 2-1: Product: syz [ 310.428787][ T6024] usb 2-1: Manufacturer: syz [ 310.428800][ T6024] usb 2-1: SerialNumber: syz [ 310.437574][ T6024] usb 2-1: config 0 descriptor?? [ 310.517265][ T6024] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 310.519359][ T6024] dvb-usb: bulk message failed: -22 (3/0) [ 310.613418][ T6024] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 310.616877][ T6024] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 310.616938][ T6024] usb 2-1: media controller created [ 310.631658][ T6024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.722204][ T8809] dvb-usb: bulk message failed: -22 (2/0) [ 310.735317][ T6024] dvb-usb: bulk message failed: -22 (6/0) [ 310.735421][ T6024] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 310.750771][ T6024] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 310.814891][ T6024] dvb-usb: schedule remote query interval to 150 msecs. [ 310.814969][ T6024] dvb-usb: bulk message failed: -22 (3/0) [ 310.834768][ T6024] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 310.854580][ T6024] usb 2-1: USB disconnect, device number 14 [ 311.062700][ T6024] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 311.099556][ T8839] loop6: detected capacity change from 0 to 524288000 [ 311.485930][ T8848] netlink: 'syz.1.1343': attribute type 2 has an invalid length. [ 312.237435][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 312.297935][ T5914] usb 4-1: [UEAGLE-ATM] firmware is not available [ 312.584431][ T7007] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 312.734402][ T7007] usb 5-1: Using ep0 maxpacket: 16 [ 312.738536][ T7007] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.738564][ T7007] usb 5-1: config 0 has no interface number 0 [ 312.741973][ T7007] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 312.742004][ T7007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.742025][ T7007] usb 5-1: Product: syz [ 312.742041][ T7007] usb 5-1: Manufacturer: syz [ 312.742056][ T7007] usb 5-1: SerialNumber: syz [ 312.815315][ T7007] usb 5-1: config 0 descriptor?? [ 312.833721][ T7007] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 313.459345][ T7007] gspca_spca1528: reg_w err -71 [ 313.474513][ T7007] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 313.480877][ T7007] usb 5-1: USB disconnect, device number 11 [ 313.732195][ T8908] sp0: Synchronizing with TNC [ 314.399738][ T8929] netlink: 'syz.3.1381': attribute type 2 has an invalid length. [ 314.409761][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1380'. [ 314.904863][ T8950] delete_channel: no stack [ 316.619393][ T7007] IPVS: starting estimator thread 0... [ 316.705424][ T9010] IPVS: using max 6 ests per chain, 14400 per kthread [ 316.769131][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1420'. [ 316.944469][ T5914] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 317.104619][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 317.107186][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.107221][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.107261][ T5914] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 317.107284][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.119997][ T5914] usb 1-1: config 0 descriptor?? [ 317.587353][ T5914] corsair 0003:1B1C:1B02.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 317.755329][ T5914] corsair 0003:1B1C:1B02.0019: Failed to get K90 initial state (error -71). [ 317.783738][ T5914] usb 1-1: USB disconnect, device number 12 [ 318.224442][ T7218] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 318.398928][ T7218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.398984][ T7218] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 318.399009][ T7218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.407060][ T7218] usb 4-1: config 0 descriptor?? [ 318.902871][ T9066] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 318.928427][ T7218] macally 0003:060B:0001.001A: item fetching failed at offset 0/2 [ 318.929400][ T7218] macally 0003:060B:0001.001A: probe with driver macally failed with error -22 [ 319.091105][ T7007] usb 4-1: USB disconnect, device number 11 [ 319.538343][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 319.858561][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 319.858582][ T37] audit: type=1326 audit(1757116642.864:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 319.858634][ T37] audit: type=1326 audit(1757116642.864:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 319.872736][ T37] audit: type=1326 audit(1757116642.874:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 319.873264][ T37] audit: type=1326 audit(1757116642.874:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 319.874021][ T37] audit: type=1326 audit(1757116642.874:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 319.875028][ T37] audit: type=1326 audit(1757116642.884:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 319.875083][ T37] audit: type=1326 audit(1757116642.884:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 319.875132][ T37] audit: type=1326 audit(1757116642.884:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7abebe9 code=0x7ffc0000 [ 321.347090][ T9141] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 322.534164][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.534772][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.398627][ T9208] 9p: Unknown access argument 18446744073709551615: -34 [ 323.687465][ T9217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.912120][ T9224] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1521'. [ 323.949089][ T9226] netlink: 'syz.1.1522': attribute type 3 has an invalid length. [ 324.262167][ T9236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.393967][ T9240] program syz.2.1528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.589094][ T7218] IPVS: starting estimator thread 0... [ 324.692048][ T9246] IPVS: using max 6 ests per chain, 14400 per kthread [ 325.321872][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1544'. [ 325.321899][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1544'. [ 325.424990][ T7102] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 325.484578][ T7007] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 325.570061][ T9279] [U]  [ 325.570119][ T9279] [U] K{‘ [ 325.570703][ T9279] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 325.584488][ T7102] usb 3-1: Using ep0 maxpacket: 16 [ 325.595479][ T7102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.595515][ T7102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.595555][ T9279] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 325.595558][ T7102] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 325.595582][ T7102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.596630][ T9279] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 325.603319][ T7102] usb 3-1: config 0 descriptor?? [ 325.615838][ T9279] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 325.642671][ T9279] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 325.644075][ T9279] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 325.654746][ T9279] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 325.669694][ T9279] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 325.710390][ T9279] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 325.711878][ T9279] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 325.719946][ T9279] [U] 22½“Æ©ÐÛ©X?0;3U± [ 325.730691][ T9279] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 325.734864][ T9279] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 325.747559][ T9279] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 325.748023][ T9279] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 325.758439][ T9279] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 325.758508][ T9279] [U] ¹ EC [ 325.765731][ T9279] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 325.793591][ T9278] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 325.884550][ T7007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 325.884607][ T7007] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 325.884632][ T7007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.026803][ T7007] usb 5-1: config 0 descriptor?? [ 326.308407][ T7102] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 326.438154][ T7102] corsair 0003:1B1C:1B02.001B: Failed to get K90 initial state (error -71). [ 326.478496][ T7007] logitech 0003:046D:C626.001C: nested delimiters [ 326.478519][ T7007] logitech 0003:046D:C626.001C: item 0 4 2 10 parsing failed [ 326.479456][ T7007] logitech 0003:046D:C626.001C: parse failed [ 326.479576][ T7007] logitech 0003:046D:C626.001C: probe with driver logitech failed with error -22 [ 326.514805][ T7102] usb 3-1: USB disconnect, device number 16 [ 326.677502][ T5914] usb 5-1: USB disconnect, device number 12 [ 327.574441][ T7102] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 327.730390][ T7102] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 327.730427][ T7102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.730450][ T7102] usb 5-1: Product: syz [ 327.730465][ T7102] usb 5-1: Manufacturer: syz [ 327.730480][ T7102] usb 5-1: SerialNumber: syz [ 327.769403][ T7102] usb 5-1: config 0 descriptor?? [ 327.834462][ T9336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.036404][ T5914] usb 5-1: USB disconnect, device number 13 [ 328.144503][ T6024] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 328.305512][ T5921] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 328.310496][ T6024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 328.310624][ T6024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8192, setting to 1024 [ 328.310674][ T6024] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 328.310699][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.340355][ T6024] usb 1-1: config 0 descriptor?? [ 328.474512][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 328.482224][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 328.482280][ T5921] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 328.482296][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.494475][ T5921] usb 2-1: config 0 descriptor?? [ 328.625341][ T7102] usb 1-1: USB disconnect, device number 13 [ 328.953336][ T5921] uclogic 0003:28BD:0055.001D: interface is invalid, ignoring [ 329.145768][ T7102] usb 2-1: USB disconnect, device number 15 [ 331.322502][ T37] audit: type=1326 audit(1757116654.324:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.2.1614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b92d3ebe9 code=0x0 [ 331.599596][ T9431] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1619'. [ 331.599627][ T9431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1619'. [ 332.414443][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 332.569477][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.569533][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 332.569558][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.626255][ T5914] usb 4-1: config 0 descriptor?? [ 332.654993][ T5894] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 332.864451][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 332.884668][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.891170][ T5894] usb 1-1: config 9 has an invalid interface number: 48 but max is 0 [ 332.891200][ T5894] usb 1-1: config 9 has no interface number 0 [ 332.891237][ T5894] usb 1-1: config 9 interface 48 has no altsetting 0 [ 332.923426][ T5894] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 332.923458][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.923479][ T5894] usb 1-1: Product: syz [ 332.923492][ T5894] usb 1-1: Manufacturer: syz [ 332.923506][ T5894] usb 1-1: SerialNumber: syz [ 333.150261][ T5914] logitech-djreceiver 0003:046D:C71F.001E: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 333.273823][ T5894] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 333.405283][ T7102] usb 4-1: USB disconnect, device number 12 [ 333.621294][ T5894] gspca_vc032x: reg_w err -71 [ 333.621318][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621329][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621340][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621349][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621359][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621368][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621378][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621387][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621397][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621407][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621416][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621426][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621435][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621445][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621454][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621464][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621473][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621483][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621491][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.621501][ T5894] gspca_vc032x: Unknown sensor... [ 333.621602][ T5894] vc032x 1-1:9.48: probe with driver vc032x failed with error -22 [ 333.639929][ T5894] usb 1-1: USB disconnect, device number 14 [ 333.655890][ T9466] program syz.4.1636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.834479][ T5914] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 333.989918][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.989958][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.989983][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.990031][ T5914] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.990058][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.070523][ T5914] usb 2-1: config 0 descriptor?? [ 334.315834][ T9480] tipc: Started in network mode [ 334.315877][ T9480] tipc: Node identity 070000000000000007, cluster identity 4711 [ 334.585141][ T5914] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 334.774500][ T7102] usb 2-1: USB disconnect, device number 16 [ 334.833076][ T9495] netlink: 'syz.4.1650': attribute type 10 has an invalid length. [ 335.289327][ T9495] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 335.323832][ T9494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.024421][ T7102] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 336.191928][ T7102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.191965][ T7102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.192008][ T7102] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 336.192035][ T7102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.211233][ T7102] usb 3-1: config 0 descriptor?? [ 336.717233][ T7102] kone 0003:1E7D:2CED.0020: unknown main item tag 0x4 [ 336.732590][ T7102] kone 0003:1E7D:2CED.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 336.938692][ T5921] usb 3-1: USB disconnect, device number 17 [ 337.204502][ T6024] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 337.333302][ T9554] fuse: Invalid rootmode [ 337.357504][ T6024] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 337.357572][ T6024] usb 2-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.357621][ T6024] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 337.357647][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.272876][ T5921] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 338.389535][ T5921] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 338.405641][ T6024] usb 2-1: string descriptor 0 read error: -71 [ 338.447915][ T6024] usb 2-1: USB disconnect, device number 17 [ 340.879334][ T9634] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1715'. [ 340.991910][ T9638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1717'. [ 341.044454][ T7102] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 341.200909][ T7102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.200941][ T7102] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.200987][ T7102] usb 4-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 341.201012][ T7102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.241750][ T7102] usb 4-1: config 0 descriptor?? [ 341.337453][ T9646] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 341.337480][ T9646] UDF-fs: Scanning with blocksize 512 failed [ 341.361715][ T9646] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 341.361740][ T9646] UDF-fs: Scanning with blocksize 1024 failed [ 341.389329][ T9646] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 341.389354][ T9646] UDF-fs: Scanning with blocksize 2048 failed [ 341.391964][ T9646] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 341.391987][ T9646] UDF-fs: Scanning with blocksize 4096 failed [ 341.714916][ T7102] wacom 0003:056A:0336.0022: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.3-1/input0 [ 341.924533][ T5921] usb 4-1: USB disconnect, device number 13 [ 342.568671][ T9673] process 'syz.4.1734' launched '/dev/fd/3' with NULL argv: empty string added [ 343.274883][ T5914] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 343.333245][ T9697] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 343.333310][ T9697] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 343.333424][ T9697] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 343.333580][ T9697] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 343.333637][ T9697] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 343.333694][ T9697] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 343.333849][ T9697] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 343.333905][ T9697] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 343.333960][ T9697] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 343.334015][ T9697] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 343.334071][ T9697] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 343.335797][ T9697] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 343.489015][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.489073][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 343.489098][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.527299][ T5914] usb 5-1: config 0 descriptor?? [ 343.963523][ T5914] logitech 0003:046D:C50C.0023: unbalanced delimiter at end of report description [ 344.004887][ T5914] logitech 0003:046D:C50C.0023: parse failed [ 344.005015][ T5914] logitech 0003:046D:C50C.0023: probe with driver logitech failed with error -22 [ 344.233467][ T5914] usb 5-1: USB disconnect, device number 14 [ 344.823676][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.902158][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 344.902186][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1763'. [ 344.902202][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 344.902218][ T9734] netlink: 'syz.0.1763': attribute type 5 has an invalid length. [ 345.436278][ T9740] syz.0.1765 (9740) used greatest stack depth: 18696 bytes left [ 346.369356][ T9768] syz.2.1778 (9768): /proc/9764/oom_adj is deprecated, please use /proc/9764/oom_score_adj instead. [ 346.460766][ T9771] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 347.387041][ T9794] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1791'. [ 348.224892][ T9817] netlink: 'syz.4.1802': attribute type 1 has an invalid length. [ 348.224921][ T9817] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 348.561538][ T37] audit: type=1326 audit(1757116671.564:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.4.1808" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f547821ebe9 code=0x0 [ 348.694028][ T9837] program syz.3.1811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.761179][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 348.824536][ T5914] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 348.955044][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 348.974401][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 348.994788][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.994827][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.002089][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.002123][ T5914] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 349.002145][ T5914] usb 3-1: Manufacturer: syz [ 349.064928][ T5914] usb 3-1: config 0 descriptor?? [ 349.070591][ T5914] hub 3-1:0.0: USB hub found [ 349.269571][ T5914] hub 3-1:0.0: 1 port detected [ 349.444367][ T7102] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 349.470084][ T5914] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 349.470117][ T5914] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 349.503705][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 349.503849][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 349.549986][ T5914] usb 3-1: USB disconnect, device number 18 [ 349.602019][ T7102] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.602058][ T7102] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 349.602088][ T7102] usb 4-1: config 0 interface 0 has no altsetting 0 [ 349.602126][ T7102] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 349.602152][ T7102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.624047][ T7102] usb 4-1: config 0 descriptor?? [ 349.628997][ T9854] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 349.944522][ T5921] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 350.069148][ T7102] logitech 0003:046D:C24F.0024: unbalanced collection at end of report description [ 350.070112][ T7102] logitech 0003:046D:C24F.0024: parse failed [ 350.070231][ T7102] logitech 0003:046D:C24F.0024: probe with driver logitech failed with error -22 [ 350.103725][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.103777][ T5921] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 350.103803][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.150460][ T5921] usb 2-1: config 0 descriptor?? [ 350.264642][ T7007] usb 4-1: USB disconnect, device number 14 [ 350.619265][ T5921] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 350.619422][ T5921] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 350.619450][ T5921] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 350.619473][ T5921] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 350.619497][ T5921] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 350.650781][ T5921] lenovo 0003:17EF:6047.0025: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 350.812103][ T5921] lenovo 0003:17EF:6047.0025: Failed to switch F7/9/11 mode: -71 [ 350.814720][ T5921] lenovo 0003:17EF:6047.0025: Failed to switch middle button: -71 [ 350.815273][ T5921] lenovo 0003:17EF:6047.0025: Fn-lock setting failed: -71 [ 350.818238][ T5921] lenovo 0003:17EF:6047.0025: Sensitivity setting failed: -71 [ 350.861322][ T5921] usb 2-1: USB disconnect, device number 18 [ 351.113889][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 351.499320][ T9904] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 351.500192][ T9904] team0: Device ipvlan2 is already an upper device of the team interface [ 351.795531][ T9911] sp0: Synchronizing with TNC [ 352.094863][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 352.795819][ T37] audit: type=1326 audit(1757116675.804:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9947 comm="syz.1.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd63ebe9 code=0x7ffc0000 [ 352.795879][ T37] audit: type=1326 audit(1757116675.804:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9947 comm="syz.1.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd63ebe9 code=0x7ffc0000 [ 352.817309][ T37] audit: type=1326 audit(1757116675.824:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9947 comm="syz.1.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cbd63ebe9 code=0x7ffc0000 [ 352.818358][ T37] audit: type=1326 audit(1757116675.824:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9947 comm="syz.1.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd63ebe9 code=0x7ffc0000 [ 352.822603][ T37] audit: type=1326 audit(1757116675.824:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9947 comm="syz.1.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7cbd63ebe9 code=0x7ffc0000 [ 352.823610][ T37] audit: type=1326 audit(1757116675.824:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9947 comm="syz.1.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd63ebe9 code=0x7ffc0000 [ 353.314497][ T7007] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 353.483292][ T7007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.483332][ T7007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.483373][ T7007] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 353.483398][ T7007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.525245][ T7007] usb 3-1: config 0 descriptor?? [ 353.956660][ T7007] samsung 0003:0419:0600.0026: item fetching failed at offset 5/7 [ 353.957642][ T7007] samsung 0003:0419:0600.0026: parse failed [ 353.957723][ T7007] samsung 0003:0419:0600.0026: probe with driver samsung failed with error -22 [ 354.166224][ T6024] usb 3-1: USB disconnect, device number 19 [ 354.772728][T10005] netlink: 'syz.3.1892': attribute type 4 has an invalid length. [ 354.884501][ T7218] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 355.038062][ T7218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.038117][ T7218] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 355.038143][ T7218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.058713][ T7218] usb 5-1: config 0 descriptor?? [ 355.110962][T10017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1897'. [ 355.110994][T10017] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1897'. [ 355.111009][T10017] netlink: 'syz.2.1897': attribute type 6 has an invalid length. [ 355.111024][T10017] netlink: 'syz.2.1897': attribute type 5 has an invalid length. [ 355.111039][T10017] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1897'. [ 355.814477][ T7218] usb 5-1: USB disconnect, device number 15 [ 356.494486][T10052] sd 0:0:1:0: device reset [ 356.832164][T10067] sp0: Synchronizing with TNC [ 356.837813][T10067] sp0: Found TNC [ 356.847181][T10065] [U] è` [ 356.991197][ T7007] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 357.199748][ T7007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.199789][ T7007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 357.199839][ T7007] usb 1-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 357.199863][ T7007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.207780][ T7007] usb 1-1: config 0 descriptor?? [ 357.208942][T10062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 357.678386][ T7007] lenovo 0003:17EF:60FE.0028: unknown main item tag 0x0 [ 357.683089][ T7007] lenovo 0003:17EF:60FE.0028: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.0-1/input0 [ 357.864453][ T7007] usb 1-1: USB disconnect, device number 15 [ 358.236171][ T5894] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 358.413996][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.414035][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.414078][ T5894] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 358.414103][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.440747][ T5894] usb 2-1: config 0 descriptor?? [ 358.928473][ T5894] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 358.928517][ T5894] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 358.928543][ T5894] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 358.928568][ T5894] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 358.928594][ T5894] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 358.928619][ T5894] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 358.928645][ T5894] arvo 0003:1E7D:30D4.0029: unknown main item tag 0x0 [ 358.944669][ T5894] arvo 0003:1E7D:30D4.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 359.117238][ T5894] arvo 0003:1E7D:30D4.0029: couldn't init struct arvo_device [ 359.117305][ T5894] arvo 0003:1E7D:30D4.0029: couldn't install keyboard [ 359.139597][ T5894] arvo 0003:1E7D:30D4.0029: probe with driver arvo failed with error -71 [ 359.177566][ T5894] usb 2-1: USB disconnect, device number 19 [ 359.200850][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1951'. [ 360.630781][T10184] iso9660: Bad value for 'gid' [ 360.630804][T10184] iso9660: Bad value for 'gid' [ 360.784429][ T6024] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 360.984978][ T6024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.985037][ T6024] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 360.985064][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.030696][ T6024] usb 2-1: config 0 descriptor?? [ 361.351163][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 361.370719][T10209] ucma_write: process 780 (syz.2.1988) changed security contexts after opening file descriptor, this is not allowed. [ 361.394503][ T5914] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 361.479468][ T6024] zeroplus 0003:0C12:0005.002A: report_id 0 is invalid [ 361.479495][ T6024] zeroplus 0003:0C12:0005.002A: item 0 0 1 8 parsing failed [ 361.480402][ T6024] zeroplus 0003:0C12:0005.002A: parse failed [ 361.480482][ T6024] zeroplus 0003:0C12:0005.002A: probe with driver zeroplus failed with error -22 [ 361.549266][ T5914] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.549302][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 361.549340][ T5914] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 361.549365][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.600311][ T5914] usb 1-1: config 0 descriptor?? [ 361.695877][ T7007] usb 2-1: USB disconnect, device number 20 [ 362.053961][ T5914] apple 0003:05AC:027A.002B: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 362.252797][ T6024] usb 1-1: USB disconnect, device number 16 [ 362.690010][T10247] CIFS mount error: No usable UNC path provided in device string! [ 362.690010][T10247] [ 362.690037][T10247] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 364.102758][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.149225][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.200558][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.249150][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.301796][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.351023][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.379286][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.428534][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.506160][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.554892][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.582694][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.636437][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.681645][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.757613][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.783995][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.829754][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.876797][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.928005][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.977414][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.011812][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.174618][ T5894] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 365.326942][ T5894] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 365.326976][ T5894] usb 3-1: config 0 has no interface number 0 [ 365.327031][ T5894] usb 3-1: config 0 interface 176 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.327060][ T5894] usb 3-1: config 0 interface 176 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.327102][ T5894] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 365.327127][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.416785][ T5894] usb 3-1: config 0 descriptor?? [ 365.945165][ T5894] uclogic 0003:256C:006D.002C: interface is invalid, ignoring [ 366.097177][ T5894] usb 3-1: USB disconnect, device number 20 [ 367.975177][ T7007] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 368.147604][ T7007] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 368.147639][ T7007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.198382][ T7007] usb 1-1: config 0 descriptor?? [ 368.219325][ T7007] cp210x 1-1:0.0: cp210x converter detected [ 368.697859][ T7007] usb 1-1: cp210x converter now attached to ttyUSB0 [ 368.883165][ T5894] usb 1-1: USB disconnect, device number 17 [ 368.929534][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 369.066050][ T5894] cp210x 1-1:0.0: device disconnected [ 369.754695][ T5894] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 369.944394][ T5894] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 369.944429][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.984774][ T5894] usb 1-1: config 0 descriptor?? [ 370.045640][ T5894] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 370.691566][ T5894] gspca_cpia1: usb_control_msg 01, error -71 [ 370.691591][ T5894] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 370.696475][ T5894] usb 1-1: USB disconnect, device number 18 [ 371.667281][T10385] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 371.667310][T10385] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 372.174567][ T5894] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 372.324476][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 372.349669][ T5894] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 372.365592][ T5894] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 372.365626][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.365648][ T5894] usb 5-1: Product: syz [ 372.365663][ T5894] usb 5-1: Manufacturer: syz [ 372.365678][ T5894] usb 5-1: SerialNumber: syz [ 372.373997][ T5894] usb 5-1: config 0 descriptor?? [ 372.423553][ T5894] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 372.423636][ T5894] usb 5-1: setting power ON [ 372.423659][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 372.456508][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.457705][ T5894] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 372.457776][ T5894] usb 5-1: media controller created [ 372.547018][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.587090][ T5894] usb 5-1: selecting invalid altsetting 6 [ 372.587116][ T5894] usb 5-1: digital interface selection failed (-22) [ 372.587132][ T5894] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 372.588925][ T5894] usb 5-1: setting power OFF [ 372.588957][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 372.588976][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 372.588990][ T5894] (NULL device *): no alternate interface [ 372.720380][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 373.846257][ T46] usb 5-1: USB disconnect, device number 16 [ 374.755577][ T46] kernel write not supported for file /sg0 (pid: 46 comm: kworker/1:1) [ 381.728100][ T5914] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 381.884500][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 381.888324][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 381.890039][ T5914] usb 4-1: config 4 interface 0 has no altsetting 0 [ 381.916098][ T5914] usb 4-1: string descriptor 0 read error: -22 [ 381.916285][ T5914] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 381.916312][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.998332][ T5914] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 382.013787][ T5914] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 382.033108][ T5914] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 382.033177][ T5914] usb 4-1: media controller created [ 382.152966][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.205888][T10437] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 382.231814][ T5914] zl10353_read_register: readreg error (reg=127, ret==0) [ 382.365395][ T5914] usb 4-1: USB disconnect, device number 15 [ 383.990272][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.990380][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.946931][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.633046][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.667454][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.674096][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.695498][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.158796][ T5152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 391.185190][ T5152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 391.186743][ T5152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 391.188136][ T5152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 391.189112][ T5152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 391.485261][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 391.724612][ T5842] Bluetooth: hci5: command tx timeout [ 393.338241][ T5842] Bluetooth: hci6: command tx timeout [ 393.806452][ T5842] Bluetooth: hci5: command tx timeout [ 393.866517][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 395.406167][ T5842] Bluetooth: hci6: command tx timeout [ 395.884426][ T5842] Bluetooth: hci5: command tx timeout [ 397.484890][ T5842] Bluetooth: hci6: command tx timeout [ 397.964614][ T5842] Bluetooth: hci5: command tx timeout [ 399.564621][ T5842] Bluetooth: hci6: command tx timeout [ 405.159841][T10460] chnl_net:caif_netlink_parms(): no params data found [ 407.186013][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'. [ 419.340024][ T5152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 419.361754][ T5152] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 419.388478][ T5152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 419.390465][ T5152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 419.392121][ T5152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 421.494555][ T5842] Bluetooth: hci7: command tx timeout [ 423.565055][ T5842] Bluetooth: hci7: command tx timeout [ 424.956192][ T5152] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 424.991079][ T5152] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 424.993479][ T5152] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 425.020217][ T5152] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 425.021166][ T5152] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 425.192520][ T5842] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 425.218915][ T5842] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 425.221777][ T5842] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 425.223735][ T5842] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 425.249742][ T5842] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 425.644581][ T5842] Bluetooth: hci7: command tx timeout [ 427.084675][ T5842] Bluetooth: hci8: command tx timeout [ 427.334295][ T5842] Bluetooth: hci9: command tx timeout [ 427.724766][ T5842] Bluetooth: hci7: command tx timeout [ 429.174716][ T5842] Bluetooth: hci8: command tx timeout [ 429.404904][ T5842] Bluetooth: hci9: command tx timeout [ 431.254567][ T5842] Bluetooth: hci8: command tx timeout [ 431.487952][ T5842] Bluetooth: hci9: command tx timeout [ 433.324557][ T5842] Bluetooth: hci8: command tx timeout [ 433.564581][ T5842] Bluetooth: hci9: command tx timeout [ 445.423244][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.423336][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.293562][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.324143][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.367041][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.368957][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.369844][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.562454][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 452.595918][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 452.602223][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.614741][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.630995][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.684657][ T5842] Bluetooth: hci3: command tx timeout [ 453.778033][T10389] bridge0: port 3(syz_tun) entered disabled state [ 454.774504][ T5842] Bluetooth: hci3: command tx timeout [ 456.851600][ T5842] Bluetooth: hci3: command tx timeout [ 458.924444][ T5842] Bluetooth: hci3: command tx timeout [ 462.454912][ T5152] Bluetooth: hci1: command tx timeout [ 464.524531][ T5152] Bluetooth: hci1: command tx timeout [ 466.614240][ T5152] Bluetooth: hci1: command tx timeout [ 468.694591][ T5152] Bluetooth: hci1: command tx timeout [ 479.682741][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.713032][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.724960][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.726684][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.727890][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.804733][ T5842] Bluetooth: hci0: command tx timeout [ 483.894491][ T5842] Bluetooth: hci0: command tx timeout [ 484.370693][T10389] syz_tun (unregistering): left allmulticast mode [ 484.370732][T10389] syz_tun (unregistering): left promiscuous mode [ 484.370883][T10389] bridge0: port 3(syz_tun) entered disabled state [ 485.135867][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.167075][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.168678][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.170050][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.171542][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 485.294501][ T5842] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 485.315592][ T5842] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 485.319637][ T5842] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 485.321459][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 485.323053][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 485.964448][ T5152] Bluetooth: hci0: command tx timeout [ 487.244794][ T5152] Bluetooth: hci4: command tx timeout [ 487.420027][ T5152] Bluetooth: hci10: command tx timeout [ 488.044505][ T5152] Bluetooth: hci0: command tx timeout [ 489.324694][ T5152] Bluetooth: hci4: command tx timeout [ 489.494548][ T5152] Bluetooth: hci10: command tx timeout [ 491.404499][ T5152] Bluetooth: hci4: command tx timeout [ 491.565030][ T5152] Bluetooth: hci10: command tx timeout [ 493.485405][ T5152] Bluetooth: hci4: command tx timeout [ 493.654597][ T5152] Bluetooth: hci10: command tx timeout [ 506.851396][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.851487][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.910085][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 509.932508][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 509.934097][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 509.961366][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 509.963214][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 512.045064][ T5842] Bluetooth: hci11: command tx timeout [ 512.698867][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 512.718784][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 512.723222][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 512.747361][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 512.769142][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 514.124749][ T59] Bluetooth: hci11: command tx timeout [ 514.705640][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 514.705691][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 514.854624][ T5835] Bluetooth: hci12: command tx timeout [ 516.214654][ T5835] Bluetooth: hci11: command tx timeout [ 516.490117][T10460] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 516.934761][ T5835] Bluetooth: hci12: command tx timeout [ 518.284665][ T5835] Bluetooth: hci11: command tx timeout [ 519.036187][ T5835] Bluetooth: hci12: command tx timeout [ 519.644703][ T38] INFO: task syz.4.2082:10412 blocked for more than 143 seconds. [ 519.644732][ T38] Not tainted syzkaller #0 [ 519.644744][ T38] Blocked by coredump. [ 519.644751][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.644762][ T38] task:syz.4.2082 state:D stack:23688 pid:10412 tgid:10410 ppid:5837 task_flags:0x40044c flags:0x00004000 [ 519.644831][ T38] Call Trace: [ 519.644839][ T38] [ 519.644865][ T38] __schedule+0x16f3/0x4c20 [ 519.644933][ T38] ? __lock_acquire+0xab9/0xd20 [ 519.644967][ T38] ? __pfx___schedule+0x10/0x10 [ 519.645018][ T38] ? schedule+0x91/0x360 [ 519.645053][ T38] schedule+0x165/0x360 [ 519.645087][ T38] schedule_timeout+0x9a/0x270 [ 519.645117][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 519.645163][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.645196][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.645226][ T38] ? wait_for_completion+0x267/0x5d0 [ 519.645260][ T38] wait_for_completion+0x2bf/0x5d0 [ 519.645310][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 519.645361][ T38] exit_aio+0x2f1/0x3b0 [ 519.645399][ T38] ? __pfx_exit_aio+0x10/0x10 [ 519.645445][ T38] ? uprobe_clear_state+0x280/0x2a0 [ 519.645468][ T38] ? mm_update_next_owner+0xa7/0x870 [ 519.645495][ T38] __mmput+0x68/0x3d0 [ 519.645526][ T38] exit_mm+0x1da/0x2c0 [ 519.645551][ T38] ? __pfx_exit_mm+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 519.645576][ T38] ? rcu_is_watching+0x15/0xb0 [ 519.645615][ T38] do_exit+0x648/0x2300 [ 519.645635][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 519.645675][ T38] ? __lock_acquire+0xab9/0xd20 [ 519.645707][ T38] ? __pfx_do_exit+0x10/0x10 [ 519.645725][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 519.645756][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 519.645795][ T38] do_group_exit+0x21c/0x2d0 [ 519.645831][ T38] get_signal+0x125e/0x1310 [ 519.645900][ [ 519.645900][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 519.645936][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 519.645983][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 519.646018][ T38] exit_to_user_mode_loop+0x75/0x110 [ 519.646048][ T38] do_syscall_64+0x2bd/0x3b0 [ 519.646068][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.646099][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.646122][ T38] ? clear_bhb_loop+0x60/0xb0 [ 519.646149][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.646172][ T38] RIP: 0033:0x7f547821ebe9 [ 519.646193][ T38] RSP: 002b:00007f54764860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 519.646217][ T38] RAX: fffffffffffffe00 RBX: 00007f5478455fa8 RCX: 00007f547821ebe9 [ 519.646234][ T38] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5478455fa8 [ 519.646249][ T38] RBP: 00007f5478455fa0 R08: 0000000000000000 R09: 0000000000000000 [ 519.646264][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.646278][ T38] R13: 00007f5478456038 R14: 00007fff7d015c50 R15: 00007fff7d015d38 [ 519.646316][ T38] [ 519.646339][ T38] [ 519.646339][ T38] Showing all locks held in the system: [ 519.646349][ T38] 2 locks held by rcuc/1/28: [ 519.646362][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.646420][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.646477][ T38] 8 locks held by ktimers/1/29: [ 519.646490][ T38] 2 locks held by ksoftirqd/1/30: [ 519.646502][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.646556][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.646613][ T38] 1 lock held by khungtaskd/38: [ 519.646625][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 519.646677][ T38] 4 locks held by kworker/1:1/46: [ 519.646690][ T38] #0: ffff88805cb19d38 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.646752][ T38] #1: ffffc90000b77bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.646809][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.646872][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.646936][ T38] 3 locks held by kworker/u8:6/1069: [ 519.646950][ T38] #0: ffff88814d209138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.647005][ T38] #1: ffffc900049d7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.647064][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 519.647132][ T38] 7 locks held by kworker/u8:10/3596: [ 519.647144][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.647198][ T38] #1: ffffc9000d7cfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.647256][ T38] #2: ffff88801ab70300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 519.647324][ T38] #3: ffff88804a235520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 519.647385][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 519.647438][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.647491][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.647546][ T38] 5 locks held by kworker/u9:1/5152: [ 519.647558][ T38] #0: ffff888027618138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.647612][ T38] #1: ffffc9000ff77bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.647668][ T38] #2: ffff888036df8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 519.647718][ T38] #3: ffff888036df80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 519.647778][ T38] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 519.647839][ T38] 2 locks held by getty/5590: [ 519.647859][ T38] #0: ffff88823bf660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 519.647920][ T38] #1: ffffc90003e732e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 519.647975][ T38] 4 locks held by kworker/1:2/5822: [ 519.647987][ T38] #0: ffff88805ce6a538 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.648049][ T38] #1: ffffc90004937bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.648122][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.648176][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.648232][ T38] 4 locks held by kworker/1:3/5836: [ 519.648244][ T38] #0: ffff888039d8b538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.648304][ T38] #1: ffffc90004ba7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.648360][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.648415][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.648472][ T38] 6 locks held by kworker/u9:5/5842: [ 519.648484][ T38] #0: ffff88804643c138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.648539][ T38] #1: ffffc90004c47bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.648595][ T38] #2: ffff8880600e0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 519.648644][ T38] #3: ffff8880600e00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 519.648703][ T38] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 519.648762][ T38] #5: ffff88805f9f4b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 519.648832][ T38] 3 locks held by kworker/0:3/5894: [ 519.648844][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.648906][ T38] #1: ffffc90004ef7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.648961][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 519.649015][ T38] 4 locks held by kworker/1:4/5914: [ 519.649027][ T38] #0: ffff88805ceeb938 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.649088][ T38] #1: ffffc900050e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.649161][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.649215][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.649271][ T38] 4 locks held by kworker/1:5/5921: [ 519.649283][ T38] #0: ffff88805cb19d38 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.649341][ T38] #1: ffffc90005167bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.649415][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.649469][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.649525][ T38] 4 locks held by kworker/1:7/6025: [ 519.649539][ T38] 1 lock held by syz.2.2071/10389: [ 519.649552][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 519.649603][ T38] 4 locks held by kworker/1:9/10485: [ 519.649615][ T38] #0: ffff88805ce6a138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.649675][ T38] #1: ffffc9001d027bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.649749][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.649803][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.649866][ T38] 1 lock held by syz.1.2120/10498: [ 519.649878][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 519.649939][ T38] 1 lock held by syz.3.2132/10534: [ 519.649950][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 519.650009][ T38] 4 locks held by kworker/1:10/10544: [ 519.650021][ T38] #0: ffff88805c71c538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.650080][ T38] #1: ffffc9001ca0fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.650154][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.650209][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.650264][ T38] 4 locks held by kworker/1:11/10545: [ 519.650276][ T38] #0: ffff88805ce81138 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.650337][ T38] #1: ffffc9001c96fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.650411][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.650465][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.650518][ T38] 4 locks held by kworker/1:13/10547: [ 519.650529][ T38] #0: ffff88805cb07138 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.650584][ T38] #1: ffffc9001c8cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.650657][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 519.650712][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 519.650769][ T38] 1 lock held by syz.0.2140/10558: [ 519.650780][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 519.650839][ T38] 1 lock held by syz-executor/10573: [ 519.650860][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.650912][ T38] 1 lock held by syz-executor/10576: [ 519.650924][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.650977][ T38] 1 lock held by syz-executor/10580: [ 519.650989][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.651040][ T38] 1 lock held by syz-executor/10582: [ 519.651052][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.651102][ T38] 1 lock held by syz-executor/10585: [ 519.651113][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.651163][ T38] 1 lock held by syz-executor/10588: [ 519.651175][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.651225][ T38] [ 519.651231][ T38] ============================================= [ 519.651231][ T38] [ 519.651240][ T38] NMI backtrace for cpu 0 [ 519.651257][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 519.651281][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.651293][ T38] Call Trace: [ 519.651301][ T38] [ 519.651311][ T38] dump_stack_lvl+0x189/0x250 [ 519.651347][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.651379][ T38] ? __pfx__printk+0x10/0x10 [ 519.651417][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 519.651448][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 519.651478][ T38] ? __pfx__printk+0x10/0x10 [ 519.651508][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.651537][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 519.651568][ T38] watchdog+0xf93/0xfe0 [ 519.651602][ T38] ? watchdog+0x1de/0xfe0 [ 519.651635][ T38] kthread+0x70e/0x8a0 [ 519.651691][ T38] ? __pfx_watchdog+0x10/0x10 [ 519.651729][ T38] ? __pfx_kthread+0x10/0x10 [ 519.651766][ T38] ? __pfx_kthread+0x10/0x10 [ 519.651800][ T38] ret_from_fork+0x3f9/0x770 [ 519.651832][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 519.651876][ T38] ? __switch_to_asm+0x39/0x70 [ 519.651896][ T38] ? __switch_to_asm+0x33/0x70 [ 519.651915][ T38] ? __pfx_kthread+0x10/0x10 [ 519.651949][ T38] ret_from_fork_asm+0x1a/0x30 [ 519.651989][ T38] [ 519.651997][ T38] Sending NMI from CPU 0 to CPUs 1: [ 519.652027][ C1] NMI backtrace for cpu 1 [ 519.652044][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 519.652064][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.652074][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 519.652098][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 2b ae 38 f6 cc [ 519.652113][ C1] RSP: 0018:ffffc90000a3e8f0 EFLAGS: 00000082 [ 519.652129][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: 7fe37de0b6fa0000 [ 519.652142][ C1] RDX: 0000000000000001 RSI: ffffffff8b620fe0 RDI: ffffffff8b620fa0 [ 519.652154][ C1] RBP: ffffc90000a3ea10 R08: 0000000000000003 R09: 0000000000000004 [ 519.652173][ C1] R10: dffffc0000000000 R11: fffff52000147d20 R12: dffffc0000000000 [ 519.652185][ C1] R13: ffffffff8af91823 R14: ffff8880b8941368 R15: 1ffff92000147d30 [ 519.652197][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 519.652211][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.652223][ C1] CR2: 00007f82d2e27e46 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 519.652241][ C1] Call Trace: [ 519.652247][ C1] [ 519.652254][ C1] rcu_is_watching+0x15/0xb0 [ 519.652279][ C1] lock_release+0x4b/0x3e0 [ 519.652304][ C1] _raw_spin_unlock_irqrestore+0x70/0x110 [ 519.652328][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 519.652357][ C1] rt_mutex_slowunlock+0x493/0x8a0 [ 519.652377][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 519.652402][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 519.652424][ C1] ? rt_spin_unlock+0x65/0x80 [ 519.652445][ C1] ___slab_alloc+0x4d2/0xdc0 [ 519.652471][ C1] ? fill_pool+0x100/0x570 [ 519.652495][ C1] ? fill_pool+0x100/0x570 [ 519.652514][ C1] kmem_cache_alloc_noprof+0xe6/0x310 [ 519.652539][ C1] fill_pool+0x100/0x570 [ 519.652560][ C1] ? debug_objects_fill_pool+0xdf/0x120 [ 519.652582][ C1] ? __pfx_fill_pool+0x10/0x10 [ 519.652616][ C1] ? debug_objects_fill_pool+0xdf/0x120 [ 519.652636][ C1] ? debug_objects_fill_pool+0xdf/0x120 [ 519.652657][ C1] debug_objects_fill_pool+0x107/0x120 [ 519.652678][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 519.652705][ C1] debug_object_activate+0x6c/0x3a0 [ 519.652729][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 519.652747][ C1] call_rcu+0xaa/0x9c0 [ 519.652766][ C1] ? rcuref_put+0x1b7/0x210 [ 519.652783][ C1] ? __pfx_call_rcu+0x10/0x10 [ 519.652799][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 519.652823][ C1] ? dst_release+0x126/0x1b0 [ 519.652840][ C1] skb_release_head_state+0x71/0x250 [ 519.652867][ C1] consume_skb+0x60/0xf0 [ 519.652889][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 519.652910][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 519.652929][ C1] ? nf_ip_checksum+0x13c/0x510 [ 519.652948][ C1] nft_synproxy_do_eval+0x345/0x570 [ 519.652968][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 519.652986][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 519.653013][ C1] nft_do_chain+0x409/0x1920 [ 519.653037][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 519.653067][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 519.653092][ C1] nft_do_chain_inet+0x25d/0x340 [ 519.653108][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 519.653125][ C1] ? __lock_acquire+0xab9/0xd20 [ 519.653151][ C1] ? NF_HOOK+0x9a/0x3a0 [ 519.653172][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 519.653189][ C1] nf_hook_slow+0xc2/0x220 [ 519.653214][ C1] NF_HOOK+0x206/0x3a0 [ 519.653236][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 519.653257][ C1] ? NF_HOOK+0x9a/0x3a0 [ 519.653277][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 519.653296][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 519.653319][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 519.653342][ C1] ? skb_dst+0x4f/0xd0 [ 519.653362][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 519.653393][ C1] NF_HOOK+0x30c/0x3a0 [ 519.653415][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 519.653435][ C1] ? NF_HOOK+0x9a/0x3a0 [ 519.653455][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 519.653477][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 519.653503][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 519.653523][ C1] __netif_receive_skb+0x143/0x380 [ 519.653542][ C1] ? rt_spin_unlock+0x65/0x80 [ 519.653563][ C1] ? process_backlog+0x27b/0x900 [ 519.653583][ C1] process_backlog+0x31e/0x900 [ 519.653616][ C1] __napi_poll+0xb3/0x540 [ 519.653638][ C1] net_rx_action+0x707/0xe00 [ 519.653658][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.653690][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 519.653727][ C1] handle_softirqs+0x22f/0x710 [ 519.653752][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 519.653777][ C1] run_ktimerd+0xcf/0x190 [ 519.653798][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 519.653821][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 519.653849][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 519.653869][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 519.653888][ C1] smpboot_thread_fn+0x53f/0xa60 [ 519.653908][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 519.653932][ C1] kthread+0x70e/0x8a0 [ 519.653956][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 519.653976][ C1] ? __pfx_kthread+0x10/0x10 [ 519.654002][ C1] ? __pfx_kthread+0x10/0x10 [ 519.654025][ C1] ret_from_fork+0x3f9/0x770 [ 519.654047][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 519.654071][ C1] ? __switch_to_asm+0x39/0x70 [ 519.654085][ C1] ? __switch_to_asm+0x33/0x70 [ 519.654100][ C1] ? __pfx_kthread+0x10/0x10 [ 519.654123][ C1] ret_from_fork_asm+0x1a/0x30 [ 519.654152][ C1] [ 519.864840][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 519.864873][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 519.864900][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.864913][ T38] Call Trace: [ 519.864922][ T38] [ 519.864932][ T38] dump_stack_lvl+0x99/0x250 [ 519.864971][ T38] ? __asan_memcpy+0x40/0x70 [ 519.864996][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.865028][ T38] ? __pfx__printk+0x10/0x10 [ 519.865067][ T38] vpanic+0x281/0x750 [ 519.865103][ T38] ? __pfx_vpanic+0x10/0x10 [ 519.865134][ T38] ? preempt_schedule+0xae/0xc0 [ 519.865167][ T38] ? preempt_schedule_common+0x83/0xd0 [ 519.865204][ T38] panic+0xb9/0xc0 [ 519.865235][ T38] ? __pfx_panic+0x10/0x10 [ 519.865268][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 519.865302][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 519.865333][ T38] watchdog+0xfd2/0xfe0 [ 519.865366][ T38] ? watchdog+0x1de/0xfe0 [ 519.865400][ T38] kthread+0x70e/0x8a0 [ 519.865438][ T38] ? __pfx_watchdog+0x10/0x10 [ 519.865466][ T38] ? __pfx_kthread+0x10/0x10 [ 519.865504][ T38] ? __pfx_kthread+0x10/0x10 [ 519.865539][ T38] ret_from_fork+0x3f9/0x770 [ 519.865572][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 519.865605][ T38] ? __switch_to_asm+0x39/0x70 [ 519.865625][ T38] ? __switch_to_asm+0x33/0x70 [ 519.865644][ T38] ? __pfx_kthread+0x10/0x10 [ 519.865678][ T38] ret_from_fork_asm+0x1a/0x30 [ 519.865717][ T38] [ 519.865998][ T38] Kernel Offset: disabled