last executing test programs: 4m13.10469511s ago: executing program 3 (id=1083): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040) 4m12.520197766s ago: executing program 3 (id=1089): r0 = gettid() tkill(r0, 0x15) 4m12.336080366s ago: executing program 3 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000d042abd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="c070040040000000340012800c0001006d6163766c616e002400028008000900fdffffff080001000200000008000700090000000800030000000043"], 0x68}, 0x1, 0x0, 0x0, 0x24060080}, 0x8000) 4m12.047536885s ago: executing program 3 (id=1098): timer_create(0x8, &(0x7f00000026c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002700)=0x0) timer_gettime(r0, &(0x7f0000000140)) 4m11.842856011s ago: executing program 3 (id=1103): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 4m11.637852371s ago: executing program 3 (id=1107): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x1a) 3m56.505472713s ago: executing program 32 (id=1107): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x1a) 2m50.096594416s ago: executing program 5 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) 2m49.777082606s ago: executing program 5 (id=2109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r0, r1, 0x26}, 0x10) 2m49.555137977s ago: executing program 5 (id=2113): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 2m49.293111237s ago: executing program 5 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x20000010) 2m49.084340431s ago: executing program 5 (id=2121): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m48.826308055s ago: executing program 5 (id=2126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000067c0)={0x0, 0x0, &(0x7f0000006780)={&(0x7f0000006680)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x6000000) 2m33.592447542s ago: executing program 33 (id=2126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000067c0)={0x0, 0x0, &(0x7f0000006780)={&(0x7f0000006680)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x6000000) 1m19.290001734s ago: executing program 4 (id=3044): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 1m18.963824945s ago: executing program 4 (id=3050): r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m18.544750472s ago: executing program 4 (id=3054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r1, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) 1m18.291533909s ago: executing program 4 (id=3055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 1m17.824357249s ago: executing program 4 (id=3058): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m10.553350488s ago: executing program 4 (id=3079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x80000000}) 1m5.942176092s ago: executing program 0 (id=3098): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f0000004180)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 1m5.182306157s ago: executing program 0 (id=3101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e26}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x24000848) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000090605000000000000000004060000000900020073797a30000000000c000780060004404e2000000500010007000000cc8a5400431504b3888f0ede3882a358685e78b19b416d30d9d177ce04c1ae248f22474fff1c7c43ee27e097c0cdc47ab18c1fc1edfc327f82b62eaa947a36e69fac6939784843ad3f7c89eca80a29a369a4e0ffbea514155992"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1m4.885207073s ago: executing program 0 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x40000, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0xa9, 0x0, 0x0, 0x8, 0x12}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) 1m2.917910667s ago: executing program 0 (id=3108): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m2.79035112s ago: executing program 1 (id=3109): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xee00, 0x0, 0xee00) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m2.469483471s ago: executing program 0 (id=3112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x40, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m2.314005133s ago: executing program 1 (id=3113): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x145) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 58.749710368s ago: executing program 0 (id=3119): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 58.74910971s ago: executing program 1 (id=3120): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 58.342174306s ago: executing program 1 (id=3122): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYRESOCT=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25ecba6a2de2d0a7}, 0x94) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) 57.991609159s ago: executing program 1 (id=3125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a32"], 0xb8}}, 0x40880) 55.309605362s ago: executing program 34 (id=3079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x80000000}) 51.954786429s ago: executing program 2 (id=3132): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000001080)) 50.649922844s ago: executing program 2 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007"], 0xd0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 50.649799171s ago: executing program 2 (id=3136): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "ddbd7b17"}, @main=@item_4={0x3, 0x0, 0x8, "8574582c"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) 49.83944819s ago: executing program 1 (id=3137): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 49.165271991s ago: executing program 2 (id=3138): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x2}}, 0x18) 49.056617863s ago: executing program 2 (id=3139): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c) 48.900986531s ago: executing program 2 (id=3140): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x29f1, 0x4, 0x4, 0x4, 0x1, 0x0, 0x8, 0xcc97bc8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) 43.241331233s ago: executing program 35 (id=3119): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 34.775943559s ago: executing program 36 (id=3137): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 33.68419429s ago: executing program 37 (id=3140): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x29f1, 0x4, 0x4, 0x4, 0x1, 0x0, 0x8, 0xcc97bc8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) 5.679261096s ago: executing program 6 (id=3181): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) 5.309218989s ago: executing program 6 (id=3182): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.991550025s ago: executing program 6 (id=3183): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x7, 0x4800, 0x0, 0x0}, {0x5, 0x6000, 0x0, 0x0}], 0x2}) 1.316112498s ago: executing program 6 (id=3184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.306913886s ago: executing program 6 (id=3185): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x145481) 0s ago: executing program 6 (id=3186): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) ioctl$FIONREAD(r0, 0x541b, 0x0) kernel console output (not intermixed with test programs): 0 ses=4294967295 subj=_ pid=10514 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 240.461709][T10520] vlan0: entered promiscuous mode [ 241.041917][T10550] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 241.477081][T10573] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 241.477102][T10573] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1773'. [ 241.500932][T10575] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1775'. [ 241.500957][T10575] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1775'. [ 241.868269][T10593] overlayfs: overlapping lowerdir path [ 242.200825][T10611] __vm_enough_memory: pid: 10611, comm: syz.2.1784, bytes: 4503599627366400 not enough memory for the allocation [ 242.610801][ T975] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.763592][ T975] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 242.763625][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.811610][ T975] usb 1-1: config 0 descriptor?? [ 243.063502][ T975] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 243.283051][ T975] [drm:udl_init] *ERROR* Selecting channel failed [ 243.473970][ T975] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 243.473998][ T975] [drm] Initialized udl on minor 2 [ 243.552116][ T975] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 243.589112][ T975] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 243.646515][ T975] usb 1-1: USB disconnect, device number 13 [ 243.660909][ T50] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 243.661728][ T50] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 243.881095][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1805'. [ 244.139643][T10710] netlink: 'syz.1.1808': attribute type 5 has an invalid length. [ 244.154302][T10712] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1810'. [ 244.210126][T10710] ip6erspan0: entered promiscuous mode [ 245.180985][T10768] syz.5.1829 (10768): drop_caches: 0 [ 246.286559][T10831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.462399][T10838] openvswitch: netlink: IP tunnel dst address not specified [ 246.896765][T10865] CIFS: VFS: Malformed UNC in devname [ 247.256838][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1862'. [ 247.256876][T10884] netlink: 'syz.5.1862': attribute type 5 has an invalid length. [ 247.256892][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1862'. [ 247.384850][T10884] geneve2: entered promiscuous mode [ 247.384880][T10884] geneve2: entered allmulticast mode [ 247.440733][ T3680] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 247.442278][ T3680] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 247.447326][ T1121] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 247.449010][ T1121] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 247.586674][T10894] netlink: 'syz.0.1864': attribute type 7 has an invalid length. [ 247.586698][T10894] netlink: 'syz.0.1864': attribute type 8 has an invalid length. [ 247.752708][ T9813] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 247.753029][ T9813] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 247.781026][ T5923] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 247.860961][ T5923] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 247.890889][ T975] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.041030][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 248.045605][ T975] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 248.045631][ T975] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 248.045650][ T975] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 248.045667][ T975] usb 5-1: config 1 has no interface number 0 [ 248.045706][ T975] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.045725][ T975] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 248.045761][ T975] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 248.045780][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.272856][ T975] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 248.393133][T10936] IPv6: NLM_F_REPLACE set, but no existing node found! [ 248.394611][ T5923] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 248.463439][ T975] snd_usb_pod 5-1:1.1: invalid control EP [ 248.463461][ T975] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 248.463969][ T975] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 248.464733][ T975] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 248.686308][ T10] usb 5-1: USB disconnect, device number 10 [ 250.790730][T11060] 9pnet_fd: Insufficient options for proto=fd [ 251.188005][T11084] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1915'. [ 251.188031][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1915'. [ 251.188046][T11084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1915'. [ 251.831367][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 252.602789][T11145] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1932'. [ 252.674739][ T37] audit: type=1326 audit(2000000113.410:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11155 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 252.674793][ T37] audit: type=1326 audit(2000000113.410:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11155 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 252.763657][ T37] audit: type=1326 audit(2000000113.490:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11155 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 252.821009][T11159] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1938'. [ 253.025806][ T37] audit: type=1326 audit(2000000113.750:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11155 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 253.025857][ T37] audit: type=1326 audit(2000000113.760:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11155 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 253.071941][T11172] netlink: 'syz.1.1941': attribute type 10 has an invalid length. [ 253.108424][ T37] audit: type=1326 audit(2000000113.840:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11173 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 253.108483][ T37] audit: type=1326 audit(2000000113.840:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11173 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 253.123308][ T37] audit: type=1326 audit(2000000113.860:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11173 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 253.123627][ T37] audit: type=1326 audit(2000000113.860:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11173 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 253.123886][ T37] audit: type=1326 audit(2000000113.860:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11173 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 253.167883][T11178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1944'. [ 253.167909][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 254.233900][T11217] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1957'. [ 254.871796][ T5909] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 254.954142][T11251] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 255.020943][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 255.028375][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 255.028423][ T5909] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 255.028445][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.076463][ T5909] usb 3-1: config 0 descriptor?? [ 255.346475][T11265] netlink: 'syz.1.1968': attribute type 21 has an invalid length. [ 255.527475][ T5909] corsair 0003:1B1C:1B09.0001: unbalanced collection at end of report description [ 255.528434][ T5909] corsair 0003:1B1C:1B09.0001: parse failed [ 255.528539][ T5909] corsair 0003:1B1C:1B09.0001: probe with driver corsair failed with error -22 [ 255.707698][ T975] usb 3-1: USB disconnect, device number 11 [ 255.891652][T11299] syz.4.1975 (11299): drop_caches: 0 [ 256.328314][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.328428][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.521114][ T975] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 257.684755][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.684787][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.684809][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 257.684848][ T975] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 257.684869][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.735302][ T50] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 257.755660][ T975] usb 3-1: config 0 descriptor?? [ 257.910481][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 257.921185][ T50] usb 5-1: not running at top speed; connect to a high speed hub [ 257.922869][ T50] usb 5-1: config 12 has an invalid interface number: 187 but max is 0 [ 257.922897][ T50] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 257.922917][ T50] usb 5-1: config 12 has no interface number 0 [ 257.923038][ T50] usb 5-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 257.923062][ T50] usb 5-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.923090][ T50] usb 5-1: config 12 interface 187 has no altsetting 0 [ 257.924524][ T50] usb 5-1: config 12 has an invalid interface number: 187 but max is 0 [ 257.924549][ T50] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 257.924569][ T50] usb 5-1: config 12 has no interface number 0 [ 257.924615][ T50] usb 5-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 257.924695][ T50] usb 5-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.924722][ T50] usb 5-1: config 12 interface 187 has no altsetting 0 [ 257.928518][ T50] usb 5-1: config 12 has an invalid interface number: 187 but max is 0 [ 257.928545][ T50] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 257.928563][ T50] usb 5-1: config 12 has no interface number 0 [ 257.928669][ T50] usb 5-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 257.928693][ T50] usb 5-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.928720][ T50] usb 5-1: config 12 interface 187 has no altsetting 0 [ 257.991397][ T50] usb 5-1: config 12 has an invalid interface number: 187 but max is 0 [ 257.991428][ T50] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 257.991448][ T50] usb 5-1: config 12 has no interface number 0 [ 257.991499][ T50] usb 5-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 257.991521][ T50] usb 5-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.991548][ T50] usb 5-1: config 12 interface 187 has no altsetting 0 [ 258.040778][ T50] usb 5-1: config 12 has an invalid interface number: 187 but max is 0 [ 258.040808][ T50] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 258.040828][ T50] usb 5-1: config 12 has no interface number 0 [ 258.040880][ T50] usb 5-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 258.040902][ T50] usb 5-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.040935][ T50] usb 5-1: config 12 interface 187 has no altsetting 0 [ 258.090746][ T50] usb 5-1: config 12 has an invalid interface number: 187 but max is 0 [ 258.090774][ T50] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 258.090791][ T50] usb 5-1: config 12 has no interface number 0 [ 258.090845][ T50] usb 5-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 258.090868][ T50] usb 5-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.090898][ T50] usb 5-1: config 12 interface 187 has no altsetting 0 [ 258.136711][ T50] usb 5-1: config 12 has an invalid interface number: 187 but max is 0 [ 258.136739][ T50] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 258.136755][ T50] usb 5-1: config 12 has no interface number 0 [ 258.136846][ T50] usb 5-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 258.136870][ T50] usb 5-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.136897][ T50] usb 5-1: config 12 interface 187 has no altsetting 0 [ 258.249230][ T50] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 258.249263][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.249282][ T50] usb 5-1: Product: syz [ 258.249296][ T50] usb 5-1: Manufacturer: syz [ 258.249309][ T50] usb 5-1: SerialNumber: syz [ 258.418666][ T975] sony 0003:12BA:0100.0002: unknown main item tag 0x0 [ 258.524800][ T975] sony 0003:12BA:0100.0002: hidraw0: USB HID v0.00 Device [HID 12ba:0100] on usb-dummy_hcd.2-1/input0 [ 258.525049][ T975] sony 0003:12BA:0100.0002: failed to claim input [ 258.622842][ T975] usb 3-1: USB disconnect, device number 12 [ 258.682673][ T50] ti_usb_3410_5052 5-1:12.187: TI USB 3410 1 port adapter converter detected [ 258.682873][ T50] ti_usb_3410_5052 5-1:12.187: missing endpoints [ 258.766033][ T50] usb 5-1: USB disconnect, device number 11 [ 259.054965][T11449] fido_id[11449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 259.256097][T11464] syz.0.2019 (11464) used greatest stack depth: 18040 bytes left [ 259.825434][T11496] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 259.825490][T11496] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 259.825539][T11496] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 259.825587][T11496] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 259.825641][T11496] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 259.825686][T11496] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 259.825734][T11496] comedi comedi3: 8255: I/O port conflict (0x11,4) [ 259.825781][T11496] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 259.825826][T11496] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 259.825876][T11496] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 259.834790][T11496] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 259.834852][T11496] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 259.834899][T11496] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 259.834945][T11496] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 259.835050][T11496] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 259.835099][T11496] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 259.835145][T11496] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 259.835193][T11496] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 259.835338][T11496] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 259.835429][T11496] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 259.835496][T11496] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 259.835580][T11496] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 259.835626][T11496] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 259.909019][T11499] capability: warning: `syz.1.2031' uses 32-bit capabilities (legacy support in use) [ 260.151327][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 260.269508][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 260.269525][ T37] audit: type=1326 audit(2000000121.000:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11514 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9a2ec29 code=0x7ffc0000 [ 260.269569][ T37] audit: type=1326 audit(2000000121.000:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11514 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9a2ec29 code=0x7ffc0000 [ 260.298232][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2035'. [ 260.300175][ T37] audit: type=1326 audit(2000000121.030:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11514 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5e9a2ec29 code=0x7ffc0000 [ 260.300222][ T37] audit: type=1326 audit(2000000121.030:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11514 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9a2ec29 code=0x7ffc0000 [ 260.301951][ T37] audit: type=1326 audit(2000000121.040:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11514 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9a2ec29 code=0x7ffc0000 [ 260.310224][ T37] audit: type=1326 audit(2000000121.040:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11514 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fe5e9a2ec29 code=0x7ffc0000 [ 260.310273][ T37] audit: type=1326 audit(2000000121.040:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11514 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9a2ec29 code=0x7ffc0000 [ 260.310312][ T37] audit: type=1326 audit(2000000121.040:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11514 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e9a2ec29 code=0x7ffc0000 [ 262.280794][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 262.434622][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 262.437226][ T10] usb 6-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.437258][ T10] usb 6-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.437284][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.437326][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 262.437348][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.483287][ T10] usb 6-1: config 0 descriptor?? [ 262.663284][ T50] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 262.810801][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 262.815396][ T50] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 262.815424][ T50] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 262.815443][ T50] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 262.815464][ T50] usb 1-1: config 1 has no interface number 0 [ 262.815523][ T50] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.815556][ T50] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 262.815603][ T50] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 262.815626][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.930205][ T10] redragon 0003:0C45:760B.0003: item fetching failed at offset 5/7 [ 262.958785][ T50] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 262.968998][ T10] redragon 0003:0C45:760B.0003: probe with driver redragon failed with error -22 [ 263.170197][ T10] usb 6-1: USB disconnect, device number 3 [ 263.242185][T11672] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 263.290792][ T975] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 263.333531][T11672] block nbd2: Attempted send on invalid socket [ 263.334454][T11672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.397537][ T50] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 263.449955][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.450045][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.450069][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.450114][ T975] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 263.450136][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.564692][ T975] usb 2-1: config 0 descriptor?? [ 263.626793][ T5909] usb 1-1: USB disconnect, device number 14 [ 263.667542][ T5909] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 264.034036][ T975] dragonrise 0003:0079:0011.0004: invalid report_count -326368751 [ 264.034060][ T975] dragonrise 0003:0079:0011.0004: item 0 4 1 9 parsing failed [ 264.068304][ T975] dragonrise 0003:0079:0011.0004: parse failed [ 264.068379][ T975] dragonrise 0003:0079:0011.0004: probe with driver dragonrise failed with error -22 [ 264.227968][T11715] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.236857][ T5909] usb 2-1: USB disconnect, device number 10 [ 264.572648][T10820] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 264.741701][T10820] usb 3-1: Using ep0 maxpacket: 32 [ 264.748508][T10820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.748543][T10820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.748582][T10820] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 264.748604][T10820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.772963][T10820] usb 3-1: config 0 descriptor?? [ 265.216484][T10820] ft260 0003:0403:6030.0005: unbalanced collection at end of report description [ 265.217277][T10820] ft260 0003:0403:6030.0005: failed to parse HID [ 265.217444][T10820] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -22 [ 265.410099][ T50] usb 3-1: USB disconnect, device number 13 [ 265.682992][T11800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.331070][ T50] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 266.484960][ T50] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 266.484988][ T50] usb 2-1: config 0 has no interface number 0 [ 266.485039][ T50] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.485066][ T50] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.486610][ T50] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=22.00 [ 266.486637][ T50] usb 2-1: New USB device strings: Mfr=17, Product=0, SerialNumber=0 [ 266.486657][ T50] usb 2-1: Manufacturer: syz [ 266.556426][ T50] usb 2-1: config 0 descriptor?? [ 266.664317][T11848] pimreg3: entered allmulticast mode [ 267.017160][ T50] uclogic 0003:5543:0522.0006: unbalanced delimiter at end of report description [ 267.017984][ T50] uclogic 0003:5543:0522.0006: parse failed [ 267.018089][ T50] uclogic 0003:5543:0522.0006: probe with driver uclogic failed with error -22 [ 267.233577][ T50] usb 2-1: USB disconnect, device number 11 [ 267.259709][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 267.740737][ T50] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 267.906942][ T50] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 267.906978][ T50] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.907006][ T50] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.907041][ T50] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 267.907064][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.971809][ T50] usb 1-1: config 0 descriptor?? [ 268.119264][T11918] vlan2: entered allmulticast mode [ 268.119288][T11918] bond0: entered allmulticast mode [ 268.119302][T11918] bond_slave_0: entered allmulticast mode [ 268.119327][T11918] bond_slave_1: entered allmulticast mode [ 268.393047][ T50] pantherlord 0003:0810:0002.0007: item fetching failed at offset 5/7 [ 268.393862][ T50] pantherlord 0003:0810:0002.0007: parse failed [ 268.393932][ T50] pantherlord 0003:0810:0002.0007: probe with driver pantherlord failed with error -22 [ 268.608456][ T50] usb 1-1: USB disconnect, device number 15 [ 268.860926][T10820] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 268.868417][ T50] IPVS: starting estimator thread 0... [ 268.984228][T11961] IPVS: using max 7 ests per chain, 16800 per kthread [ 269.045396][T10820] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 269.045432][T10820] usb 3-1: config 4 has no interface number 0 [ 269.069751][T10820] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 269.069779][T10820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.069798][T10820] usb 3-1: Product: syz [ 269.069811][T10820] usb 3-1: Manufacturer: syz [ 269.069824][T10820] usb 3-1: SerialNumber: syz [ 269.193918][T10820] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 269.588729][T10820] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 269.588775][T10820] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 269.800895][T10820] usb 3-1: USB disconnect, device number 14 [ 269.883933][T11986] sp0: Synchronizing with TNC [ 269.925980][T11985] [U] è [ 271.086739][T12043] tipc: Started in network mode [ 271.086774][T12043] tipc: Node identity ac14140f, cluster identity 4711 [ 271.089556][T12043] tipc: Enabled bearer , priority 10 [ 272.204154][ T974] tipc: Node number set to 2886997007 [ 272.609888][ T974] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 272.774795][ T974] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 272.774857][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.776401][ T974] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 272.776426][ T974] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 272.776446][ T974] usb 2-1: Manufacturer: syz [ 272.832885][ T974] usb 2-1: config 0 descriptor?? [ 273.120774][ T974] rc_core: IR keymap rc-hauppauge not found [ 273.120793][ T974] Registered IR keymap rc-empty [ 273.125665][ T974] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 273.165470][ T974] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 273.609444][ T10] usb 2-1: USB disconnect, device number 12 [ 273.870767][ T5922] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 274.026550][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.026602][ T5922] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 274.026625][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.082942][ T5922] usb 1-1: config 0 descriptor?? [ 274.519660][ T5922] steelseries 0003:1038:12B6.0008: unknown main item tag 0x2 [ 274.519698][ T5922] steelseries 0003:1038:12B6.0008: item fetching failed at offset 6/7 [ 274.520577][ T5922] steelseries 0003:1038:12B6.0008: probe with driver steelseries failed with error -22 [ 274.761710][ T10] usb 1-1: USB disconnect, device number 16 [ 275.287317][T12210] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2213'. [ 275.399098][T12214] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2214'. [ 275.399577][T12212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2214'. [ 275.784149][T12230] tipc: Started in network mode [ 275.784179][T12230] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711 [ 275.784235][T12230] tipc: Enabling of bearer rejected, failed to enable media [ 275.980755][ T5922] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.131191][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 276.134068][ T5922] usb 3-1: config 0 has no interfaces? [ 276.146564][ T5922] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 276.146593][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 276.146612][ T5922] usb 3-1: Product: syz [ 276.146629][ T5922] usb 3-1: Manufacturer: syz [ 276.146643][ T5922] usb 3-1: SerialNumber: syz [ 276.157446][ T5922] usb 3-1: config 0 descriptor?? [ 276.270889][ T50] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 276.320865][ T974] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 276.374469][ T975] usb 3-1: USB disconnect, device number 15 [ 276.420742][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 276.423273][ T50] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.423299][ T50] usb 1-1: config 0 has no interface number 0 [ 276.448439][ T50] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 276.448470][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.448489][ T50] usb 1-1: Product: syz [ 276.448503][ T50] usb 1-1: Manufacturer: syz [ 276.448516][ T50] usb 1-1: SerialNumber: syz [ 276.490142][ T50] usb 1-1: config 0 descriptor?? [ 276.493112][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 276.507610][ T50] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 276.507641][ T50] usb 1-1: selecting invalid altsetting 1 [ 276.507656][ T50] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 276.513441][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.513474][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.513512][ T974] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 276.513534][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.555097][ T974] usb 2-1: config 0 descriptor?? [ 276.606228][ T50] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 276.607366][ T50] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 276.607641][ T50] usb 1-1: media controller created [ 276.790837][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 276.799864][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.805441][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 276.805471][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2226'. [ 276.805485][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 276.805556][T12275] netlink: 'syz.4.2226': attribute type 5 has an invalid length. [ 277.108876][ T974] koneplus 0003:1E7D:2D51.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 277.207837][ T974] koneplus 0003:1E7D:2D51.0009: couldn't init struct koneplus_device [ 277.207892][ T974] koneplus 0003:1E7D:2D51.0009: couldn't install mouse [ 277.236449][ T974] koneplus 0003:1E7D:2D51.0009: probe with driver koneplus failed with error -71 [ 277.283200][ T974] usb 2-1: USB disconnect, device number 13 [ 277.468250][T12292] fido_id[12292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 277.831236][T12242] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 277.920271][ T50] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 277.920335][ T50] zl10353_read_register: readreg error (reg=127, ret==-71) [ 277.923948][ T50] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 277.942939][T12314] Bluetooth: MGMT ver 1.23 [ 278.221166][ T50] usb 1-1: USB disconnect, device number 17 [ 278.611987][T12345] netlink: 'syz.0.2238': attribute type 5 has an invalid length. [ 279.030765][ T975] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 279.104269][T12363] mmap: syz.0.2244 (12363): VmData 37474304 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 279.186279][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 279.191806][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 279.194392][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.194425][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.194463][ T975] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 279.194485][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.226692][ T975] usb 3-1: config 0 descriptor?? [ 279.639324][T12375] usb usb1: check_ctrlrecip: process 12375 (syz.0.2246) requesting ep 01 but needs 81 [ 279.690057][ T975] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 279.699180][ T975] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 279.699223][ T975] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 279.699251][ T975] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 279.829040][ T975] konepure 0003:1E7D:2DB4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 280.039943][ T975] usb 3-1: USB disconnect, device number 16 [ 282.480796][T10820] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 282.627121][T12496] vivid-004: disconnect [ 282.629588][T12491] vivid-004: reconnect [ 282.640856][T10820] usb 5-1: Using ep0 maxpacket: 8 [ 282.643175][T10820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.643199][T10820] usb 5-1: config 0 has no interfaces? [ 282.650171][T10820] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 282.650200][T10820] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 282.650218][T10820] usb 5-1: Product: syz [ 282.650231][T10820] usb 5-1: Manufacturer: syz [ 282.650245][T10820] usb 5-1: SerialNumber: syz [ 282.683121][T10820] usb 5-1: config 0 descriptor?? [ 282.813925][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.819315][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.820587][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.856214][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.875036][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.938937][ T975] usb 5-1: USB disconnect, device number 12 [ 283.176622][T12501] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.585067][T12607] program syz.0.2295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.950904][ T5846] Bluetooth: hci4: command tx timeout [ 285.088520][ T9815] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.088554][ T9815] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 285.332924][T12644] sctp: [Deprecated]: syz.1.2305 (pid 12644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.332924][T12644] Use struct sctp_sack_info instead [ 285.714916][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2309'. [ 285.853929][ T9815] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.853962][ T9815] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 286.332662][ T9815] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.332695][ T9815] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 286.543753][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 286.543779][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 286.815782][ T9815] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.815814][ T9815] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 287.042972][ T5846] Bluetooth: hci4: command tx timeout [ 287.697199][T12501] chnl_net:caif_netlink_parms(): no params data found [ 288.417726][ T9815] bridge_slave_1: left allmulticast mode [ 288.417759][ T9815] bridge_slave_1: left promiscuous mode [ 288.418703][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.658871][ T9815] bridge_slave_0: left allmulticast mode [ 288.658904][ T9815] bridge_slave_0: left promiscuous mode [ 288.659206][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.110760][ T5844] Bluetooth: hci4: command tx timeout [ 289.121592][T12922] hugetlbfs: Bad value '%' for mount option 'size' [ 289.121592][T12922] [ 291.200855][ T5844] Bluetooth: hci4: command tx timeout [ 291.653900][ T9815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.741417][ T9815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.764537][ T9815] bond0 (unregistering): Released all slaves [ 292.824164][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2375'. [ 292.856134][T12501] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.856278][T12501] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.856523][T12501] bridge_slave_0: entered allmulticast mode [ 292.867825][T12501] bridge_slave_0: entered promiscuous mode [ 292.910532][T13030] vlan0: entered promiscuous mode [ 292.910556][T13030] bridge0: entered promiscuous mode [ 292.925717][T12501] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.933515][T12501] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.933771][T12501] bridge_slave_1: entered allmulticast mode [ 292.949392][T12501] bridge_slave_1: entered promiscuous mode [ 293.840336][T12501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.015371][T13088] netlink: 'syz.2.2382': attribute type 322 has an invalid length. [ 294.024674][T12501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.178913][T13107] autofs: Bad value for 'fd' [ 294.494437][T13119] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2387'. [ 294.810780][ T9815] hsr_slave_0: left promiscuous mode [ 294.865802][ T9815] hsr_slave_1: left promiscuous mode [ 294.866780][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.866809][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.920795][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 294.929529][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.929560][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.070862][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 295.076859][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.076890][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.076912][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.076952][ T10] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 295.076973][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.077027][ T9815] veth1_macvtap: left promiscuous mode [ 295.079082][ T9815] veth0_macvtap: left promiscuous mode [ 295.079404][ T9815] veth1_vlan: left promiscuous mode [ 295.102214][ T10] usb 3-1: config 0 descriptor?? [ 295.582699][ T10] hid-multitouch 0003:0457:07DA.000B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 295.646752][ T37] audit: type=1326 audit(2000000010.990:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 295.677719][ T37] audit: type=1326 audit(2000000010.990:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 295.677772][ T37] audit: type=1326 audit(2000000011.020:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 295.678767][ T37] audit: type=1326 audit(2000000011.020:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 295.678810][ T37] audit: type=1326 audit(2000000011.020:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 295.678849][ T37] audit: type=1326 audit(2000000011.020:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 295.678886][ T37] audit: type=1326 audit(2000000011.020:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 295.678924][ T37] audit: type=1326 audit(2000000011.020:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.0.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408778ec29 code=0x7ffc0000 [ 295.791441][ T10] usb 3-1: USB disconnect, device number 17 [ 295.902597][T13180] fido_id[13180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 295.941146][T13193] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2399'. [ 296.132736][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2400'. [ 299.062834][ T9815] team0 (unregistering): Port device team_slave_1 removed [ 299.334317][ T9815] team0 (unregistering): Port device team_slave_0 removed [ 299.997907][ T9596] udevd[9596]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 301.539402][T12501] team0: Port device team_slave_0 added [ 301.558130][T12501] team0: Port device team_slave_1 added [ 301.952249][T12501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.952266][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.952289][T12501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.972718][T12501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.972735][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.972760][T12501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.340743][ T975] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 303.490872][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 303.493558][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.493591][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.493630][ T975] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 303.493651][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.549206][ T975] usb 3-1: config 0 descriptor?? [ 303.989538][ T975] hid-multitouch 0003:1FD2:6007.000C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 304.189935][T13395] mkiss: ax0: crc mode is auto. [ 304.250031][T12501] hsr_slave_0: entered promiscuous mode [ 304.271841][T12501] hsr_slave_1: entered promiscuous mode [ 304.272749][T12501] debugfs: 'hsr0' already exists in 'hsr' [ 304.272772][T12501] Cannot create hsr debugfs directory [ 304.277752][ T5909] usb 3-1: USB disconnect, device number 18 [ 304.981600][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2455'. [ 305.332223][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2460'. [ 305.332263][T13514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.952112][T13562] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2467'. [ 306.054065][T12501] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.087636][T12501] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.189583][T12501] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.237469][T12501] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.687245][T12501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.788030][T12501] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.849738][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.849918][ T9815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.957159][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.957967][ T9815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.295806][T13625] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 307.295806][T13625] program syz.0.2481 not setting count and/or reply_len properly [ 308.558361][T12501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.806746][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 309.464398][ T37] audit: type=1326 audit(2000000024.810:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13688 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 309.464453][ T37] audit: type=1326 audit(2000000024.810:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13688 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 309.464764][ T37] audit: type=1326 audit(2000000024.810:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13688 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 309.465128][ T37] audit: type=1326 audit(2000000024.810:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13688 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 309.465402][ T37] audit: type=1326 audit(2000000024.810:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13688 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 309.465934][ T37] audit: type=1326 audit(2000000024.810:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13688 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 309.466470][ T37] audit: type=1326 audit(2000000024.810:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13688 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 309.466726][ T37] audit: type=1326 audit(2000000024.810:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13688 comm="syz.4.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 309.801489][T12501] veth0_vlan: entered promiscuous mode [ 309.833345][T12501] veth1_vlan: entered promiscuous mode [ 309.981405][T12501] veth0_macvtap: entered promiscuous mode [ 310.014947][T12501] veth1_macvtap: entered promiscuous mode [ 310.073843][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 310.269396][T12501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.348291][T12501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.436895][ T3425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.452644][ T3425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.466826][ T3425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.489599][ T3425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.019959][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.019982][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.321540][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.321561][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.891963][ T37] audit: type=1326 audit(2000000027.240:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 311.892222][ T37] audit: type=1326 audit(2000000027.240:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 312.691212][T13816] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 312.961707][ T50] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 313.115192][ T50] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.115220][ T50] usb 3-1: config 0 has no interface number 0 [ 313.115274][ T50] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 313.115301][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.134862][ T50] usb 3-1: config 0 descriptor?? [ 313.144686][ T50] usb 3-1: selecting invalid altsetting 1 [ 313.146016][ T50] dvb_ttusb_budget: ttusb_init_controller: error [ 313.146034][ T50] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 313.230900][ T5909] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 313.404244][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.404295][ T5909] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 313.404319][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.467433][ T5909] usb 5-1: config 0 descriptor?? [ 313.487628][ T50] DVB: Unable to find symbol cx22700_attach() [ 313.754271][ T50] DVB: Unable to find symbol tda10046_attach() [ 313.754287][ T50] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 313.757608][ T50] usb 3-1: USB disconnect, device number 19 [ 313.933323][ T5909] hid-alps 0003:044E:121E.000D: unknown main item tag 0x0 [ 313.933360][ T5909] hid-alps 0003:044E:121E.000D: unknown main item tag 0x0 [ 313.933383][ T5909] hid-alps 0003:044E:121E.000D: unknown main item tag 0x0 [ 313.933403][ T5909] hid-alps 0003:044E:121E.000D: unknown main item tag 0x0 [ 313.933426][ T5909] hid-alps 0003:044E:121E.000D: unknown main item tag 0x0 [ 313.933472][ T5909] hid-alps 0003:044E:121E.000D: unknown main item tag 0x0 [ 313.933495][ T5909] hid-alps 0003:044E:121E.000D: unknown main item tag 0x0 [ 314.020359][ T5909] hid-alps 0003:044E:121E.000D: hidraw0: USB HID v0.05 Device [HID 044e:121e] on usb-dummy_hcd.4-1/input0 [ 314.155476][ T5909] usb 5-1: USB disconnect, device number 13 [ 314.213684][T13900] tipc: Started in network mode [ 314.213708][T13900] tipc: Node identity 4, cluster identity 4711 [ 314.213720][T13900] tipc: Node number set to 4 [ 314.494911][T13911] fido_id[13911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 314.840805][ T5924] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 314.991203][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 314.995087][ T5924] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 314.995119][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 314.995145][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 314.995166][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 314.995189][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 315.066278][ T5924] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 315.066308][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.066327][ T5924] usb 7-1: Product: syz [ 315.066347][ T5924] usb 7-1: Manufacturer: syz [ 315.066361][ T5924] usb 7-1: SerialNumber: syz [ 315.109185][ T5924] usb 7-1: config 0 descriptor?? [ 315.558425][ T5924] input input17: Device does not respond to id packet M [ 315.767197][ T5924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 315.767245][ T5924] input input17: Device does not respond to id packet P [ 315.768569][ T5924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 315.768610][ T5924] input input17: Device does not respond to id packet B [ 315.802988][ T5924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 315.803040][ T5924] input input17: Device does not respond to id packet N [ 315.807971][ T5924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 315.808567][ T5924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 315.809032][ T5924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 315.809518][ T5924] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 315.873894][ T5924] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17 [ 315.923000][ T5924] usb 7-1: USB disconnect, device number 2 [ 316.376960][T13988] netlink: 'syz.4.2561': attribute type 3 has an invalid length. [ 316.513302][T13994] vlan1: entered allmulticast mode [ 316.526065][ T975] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 316.703351][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 316.705685][ T975] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 316.705711][ T975] usb 2-1: config 0 has no interface number 0 [ 316.709939][ T975] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 316.709970][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.709989][ T975] usb 2-1: Product: syz [ 316.710001][ T975] usb 2-1: Manufacturer: syz [ 316.710015][ T975] usb 2-1: SerialNumber: syz [ 316.737071][T14008] netlink: 'syz.6.2567': attribute type 10 has an invalid length. [ 316.817829][ T975] usb 2-1: config 0 descriptor?? [ 316.843337][ T975] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 317.067931][ T975] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 317.084614][T14008] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 317.089009][T14010] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2568'. [ 317.116259][T14007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.135110][ T975] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 317.240797][ T5909] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 317.412581][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 317.417038][ T5909] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.417065][ T5909] usb 5-1: config 0 has no interface number 0 [ 317.422217][ T5909] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 317.422247][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.422282][ T5909] usb 5-1: Product: syz [ 317.422296][ T5909] usb 5-1: Manufacturer: syz [ 317.422310][ T5909] usb 5-1: SerialNumber: syz [ 317.483509][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 317.486016][ T5924] usb 2-1: USB disconnect, device number 14 [ 317.530287][ T5909] usb 5-1: config 0 descriptor?? [ 317.543042][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.607427][ T5909] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 317.607455][ T5909] usb 5-1: selecting invalid altsetting 1 [ 317.607470][ T5909] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 317.650903][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.651958][ T5924] quatech2 2-1:0.51: device disconnected [ 317.659427][ T5909] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 317.659841][ T5909] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 317.659891][ T5909] usb 5-1: media controller created [ 317.744067][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.761185][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.761261][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.868184][T14062] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2576'. [ 318.270395][T14084] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 318.273589][ T975] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 318.436633][ T975] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 318.437081][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.439895][ T975] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 318.440457][ T975] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 318.440480][ T975] usb 3-1: Manufacturer: syz [ 318.504208][ T975] usb 3-1: config 0 descriptor?? [ 318.615751][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 318.680186][T14096] vlan2: entered allmulticast mode [ 318.680209][T14096] macsec0: entered allmulticast mode [ 318.680223][T14096] veth1_macvtap: entered allmulticast mode [ 318.722172][ T975] rc_core: IR keymap rc-hauppauge not found [ 318.722194][ T975] Registered IR keymap rc-empty [ 318.730187][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2583'. [ 318.862663][ T975] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 318.872542][T14019] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 318.898987][ T975] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 318.901262][ T5909] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 318.901316][ T5909] zl10353_read_register: readreg error (reg=127, ret==-71) [ 318.901779][ T5909] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 319.106886][ T5909] usb 5-1: USB disconnect, device number 14 [ 319.316395][ T5882] usb 3-1: USB disconnect, device number 20 [ 320.659805][T14207] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 320.659864][T14207] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 320.659965][T14207] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 320.660095][T14207] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 320.660150][T14207] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 320.660198][T14207] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 320.660328][T14207] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 320.660376][T14207] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 320.660425][T14207] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 320.660473][T14207] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 320.660518][T14207] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 320.660564][T14207] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 321.185966][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2611'. [ 321.354787][T14226] bridge_slave_0: invalid flags given to default FDB implementation [ 322.071760][T14268] netlink: 79 bytes leftover after parsing attributes in process `syz.1.2624'. [ 322.071855][T14268] netlink: 79 bytes leftover after parsing attributes in process `syz.1.2624'. [ 323.424636][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2643'. [ 324.654008][T14404] syz.2.2660 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 324.810780][ T50] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 324.857875][T14414] trusted_key: encrypted_key: master key parameter '' is invalid [ 324.964609][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.964650][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.964689][ T50] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 324.964711][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.040214][ T50] usb 5-1: config 0 descriptor?? [ 325.061767][T14419] netlink: 'syz.6.2664': attribute type 1 has an invalid length. [ 325.061789][T14419] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2664'. [ 325.061874][T14419] nbd: illegal input index 65544 [ 325.484434][ T50] samsung 0003:0419:0600.000E: unknown main item tag 0x0 [ 325.484471][ T50] samsung 0003:0419:0600.000E: unknown main item tag 0x0 [ 325.511898][ T50] samsung 0003:0419:0600.000E: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 325.704492][ T5882] usb 5-1: USB disconnect, device number 15 [ 326.023938][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 326.177014][ T50] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.195941][ T50] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 326.195973][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.195993][ T50] usb 7-1: Product: syz [ 326.196007][ T50] usb 7-1: Manufacturer: syz [ 326.196021][ T50] usb 7-1: SerialNumber: syz [ 326.209914][ T50] usb 7-1: config 0 descriptor?? [ 326.411306][T14487] autofs: Bad value for 'fd' [ 326.467372][ T50] usb 7-1: USB disconnect, device number 3 [ 326.931434][ T5882] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 327.098674][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 327.112830][T14519] binder: 14518:14519 ioctl c00c620f 200000000500 returned -22 [ 327.115061][ T5882] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 327.115088][ T5882] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 327.115109][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.115128][ T5882] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 327.115148][ T5882] usb 5-1: config 0 has no interface number 0 [ 327.115209][ T5882] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.115236][ T5882] usb 5-1: config 0 interface 150 has no altsetting 0 [ 327.115270][ T5882] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 327.115292][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.218158][ T5882] usb 5-1: config 0 descriptor?? [ 327.682599][ T5924] usb 5-1: USB disconnect, device number 16 [ 327.827368][ T9596] udevd[9596]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.224076][ T5882] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 328.384040][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.384078][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 328.384120][ T5882] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 328.384143][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.463951][ T5882] usb 2-1: config 0 descriptor?? [ 328.467628][T14573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.750993][ T5909] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 328.942256][ T5882] lenovo 0003:17EF:60FE.000F: unknown main item tag 0x0 [ 328.945321][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 328.955239][T14617] netlink: 'syz.0.2700': attribute type 29 has an invalid length. [ 328.962585][ T5909] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.962617][ T5909] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.962637][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 328.962672][ T5909] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 328.962696][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.968793][T14617] netlink: 'syz.0.2700': attribute type 29 has an invalid length. [ 329.047178][ T5909] usb 5-1: config 0 descriptor?? [ 329.056462][ T5882] lenovo 0003:17EF:60FE.000F: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.1-1/input0 [ 329.146847][ T975] usb 2-1: USB disconnect, device number 15 [ 329.542276][T14644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2705'. [ 329.542303][T14644] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2705'. [ 329.582314][ T5909] nzxt-smart2 0003:1E71:2009.0010: item fetching failed at offset 2/5 [ 329.583216][ T5909] nzxt-smart2 0003:1E71:2009.0010: probe with driver nzxt-smart2 failed with error -22 [ 329.633444][T14640] fido_id[14640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 329.736046][ T5924] usb 5-1: USB disconnect, device number 17 [ 330.549471][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2719'. [ 330.554856][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 330.554913][T14698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2720'. [ 330.679081][T14705] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2722'. [ 330.875632][T14714] xt_l2tp: v2 tid > 0xffff: 1114244 [ 331.162858][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 331.162876][ T37] audit: type=1326 audit(2000000046.510:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14736 comm="syz.2.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 331.162923][ T37] audit: type=1326 audit(2000000046.510:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14736 comm="syz.2.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 331.235711][ T37] audit: type=1326 audit(2000000046.580:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14736 comm="syz.2.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 331.235760][ T37] audit: type=1326 audit(2000000046.580:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14736 comm="syz.2.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 331.235794][ T37] audit: type=1326 audit(2000000046.580:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14736 comm="syz.2.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 331.292483][ T37] audit: type=1326 audit(2000000046.640:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14736 comm="syz.2.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 331.292537][ T37] audit: type=1326 audit(2000000046.640:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14736 comm="syz.2.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 331.292577][ T37] audit: type=1326 audit(2000000046.640:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14736 comm="syz.2.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb74ec29 code=0x7ffc0000 [ 331.300849][ T50] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 331.453269][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 331.455863][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.455896][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.455936][ T50] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 331.455958][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.524674][ T50] usb 5-1: config 0 descriptor?? [ 331.680995][ T5924] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 331.761909][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 331.762029][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 331.781359][ T50] usb 5-1: USB disconnect, device number 18 [ 331.855132][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.855165][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.855203][ T5924] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 331.855229][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.889871][T14770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.920100][ T5924] usb 3-1: config 0 descriptor?? [ 332.230874][ T50] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 332.385772][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 332.388909][ T50] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 332.388939][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 256 [ 332.388961][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.388980][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.394787][ T50] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 332.394827][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 332.394846][ T50] usb 5-1: SerialNumber: syz [ 332.422917][ T50] usb 5-1: config 0 descriptor?? [ 332.454122][ T50] hso 5-1:0.0: Can't find BULK OUT endpoint [ 332.510488][ T5924] cp2112 0003:10C4:EA90.0011: item fetching failed at offset 5/7 [ 332.542940][ T5924] cp2112 0003:10C4:EA90.0011: parse failed [ 332.543084][ T5924] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -22 [ 332.632791][ T5922] usb 5-1: USB disconnect, device number 19 [ 332.744828][ T5882] usb 3-1: USB disconnect, device number 21 [ 333.578547][T14870] xt_l2tp: wrong L2TP version: 1 [ 333.588741][ T50] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 333.721112][ T5922] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 333.743416][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.743469][ T50] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 333.743493][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.758906][ T50] usb 7-1: config 0 descriptor?? [ 333.880025][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.880129][ T5922] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 333.880154][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.933869][ T5922] usb 5-1: config 0 descriptor?? [ 334.041325][T14884] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2765'. [ 334.312948][ T50] greenasia 0003:0E8F:0012.0012: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.6-1/input0 [ 334.312986][ T50] greenasia 0003:0E8F:0012.0012: no inputs found [ 334.331235][ T975] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 334.363139][ T5922] kye 0003:0458:500F.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 334.364424][ T5922] kye 0003:0458:500F.0013: unknown main item tag 0x3 [ 334.395877][ T5922] kye 0003:0458:500F.0013: hidraw1: USB HID v0.01 Device [HID 0458:500f] on usb-dummy_hcd.4-1/input0 [ 334.395913][ T5922] kye 0003:0458:500F.0013: tablet-enabling feature report not found [ 334.395927][ T5922] kye 0003:0458:500F.0013: tablet enabling failed [ 334.454149][ T50] usb 7-1: USB disconnect, device number 4 [ 334.500830][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 334.503237][ T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 334.506723][ T975] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 334.506753][ T975] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 334.506772][ T975] usb 2-1: Product: syz [ 334.506787][ T975] usb 2-1: Manufacturer: syz [ 334.506802][ T975] usb 2-1: SerialNumber: syz [ 334.592002][ T5924] usb 5-1: USB disconnect, device number 20 [ 334.809494][ T975] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 334.809517][ T975] usb 2-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 334.809536][ T975] usb 2-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 334.809553][ T975] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 334.859173][T14939] netlink: 'syz.0.2771': attribute type 2 has an invalid length. [ 334.878092][T14920] fido_id[14920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 334.941927][T14929] fido_id[14929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 335.020912][ T975] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 335.046133][ T975] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 335.069089][ T975] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 335.261460][ T975] usb 2-1: USB disconnect, device number 16 [ 335.296195][ T975] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 335.333052][ T975] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 335.336249][ T975] visor 2-1:1.0: device disconnected [ 336.040787][ T5922] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 336.078562][T15009] mmap: syz.2.2785 (15009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 336.190722][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 336.193253][ T5922] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 336.193279][ T5922] usb 7-1: config 1 has no interface number 0 [ 336.193330][ T5922] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 336.193353][ T5922] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 336.193377][ T5922] usb 7-1: config 1 interface 105 has no altsetting 0 [ 336.195979][ T5922] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 336.196008][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.196028][ T5922] usb 7-1: Product: syz [ 336.196042][ T5922] usb 7-1: Manufacturer: syz [ 336.196056][ T5922] usb 7-1: SerialNumber: syz [ 336.285383][T14992] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 336.285612][T14992] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 336.712888][T14992] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 336.713083][T14992] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 336.852796][ T5882] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 336.915992][ T5922] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 336.916193][T15035] wireguard: wg2: Could not create IPv4 socket [ 336.916290][ T5922] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 336.959026][ T5922] usb 7-1: USB disconnect, device number 5 [ 337.014540][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 337.017237][ T5882] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 337.020531][ T5882] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 337.020560][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.020580][ T5882] usb 2-1: Product: syz [ 337.026364][ T5882] usb 2-1: Manufacturer: syz [ 337.026384][ T5882] usb 2-1: SerialNumber: syz [ 337.055336][ T5882] usb 2-1: config 0 descriptor?? [ 337.075547][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 337.075608][ T5882] usb 2-1: setting power ON [ 337.098814][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 337.185036][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.194487][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 337.194546][ T5882] usb 2-1: media controller created [ 337.258219][T15052] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2797'. [ 337.276353][T15028] dvb-usb: bulk message failed: -22 (3/0) [ 337.276378][T15028] cxusb: i2c wr: len=80 is too big! [ 337.276378][T15028] [ 337.394005][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.492811][ T5882] usb 2-1: selecting invalid altsetting 6 [ 337.492835][ T5882] usb 2-1: digital interface selection failed (-22) [ 337.492863][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 337.494877][T15064] process 'syz.2.2799' launched '/dev/fd/3' with NULL argv: empty string added [ 337.497255][ T5882] usb 2-1: setting power OFF [ 337.497608][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 337.497625][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 337.497636][ T5882] (NULL device *): no alternate interface [ 337.751243][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 337.778966][ T5882] usb 2-1: USB disconnect, device number 17 [ 338.510859][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 338.606131][T15119] netlink: 'syz.4.2816': attribute type 2 has an invalid length. [ 338.606153][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2816'. [ 338.664901][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.664950][ T10] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 338.664971][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.701275][ T10] usb 7-1: config 0 descriptor?? [ 339.137620][ T10] aquacomputer_d5next 0003:0C70:F00B.0014: unknown main item tag 0x1 [ 339.137660][ T10] aquacomputer_d5next 0003:0C70:F00B.0014: unknown main item tag 0x0 [ 339.137687][ T10] aquacomputer_d5next 0003:0C70:F00B.0014: unknown main item tag 0x0 [ 339.151784][ T10] aquacomputer_d5next 0003:0C70:F00B.0014: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.6-1/input0 [ 339.446135][ T10] usb 7-1: USB disconnect, device number 6 [ 339.619670][T15144] fido_id[15144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 340.296122][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 340.443395][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 340.445908][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.445966][ T10] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 340.445989][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.456946][ T10] usb 2-1: config 0 descriptor?? [ 340.468753][ T10] dvb-usb: found a 'TeVii S662' in warm state. [ 340.468805][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 340.468825][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 340.488279][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.492322][ T10] dvbdev: DVB: registering new adapter (TeVii S662) [ 340.492382][ T10] usb 2-1: media controller created [ 340.492737][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 340.492753][ T10] dw2102: i2c transfer failed. [ 340.492771][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 340.492785][ T10] dw2102: i2c transfer failed. [ 340.492801][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 340.492813][ T10] dw2102: i2c transfer failed. [ 340.492830][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 340.492843][ T10] dw2102: i2c transfer failed. [ 340.492860][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 340.492874][ T10] dw2102: i2c transfer failed. [ 340.492889][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 340.492903][ T10] dw2102: i2c transfer failed. [ 340.492912][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 340.667280][ T37] audit: type=1326 audit(2000000056.010:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15208 comm="syz.4.2837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x0 [ 340.692703][ T975] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 340.705776][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.733755][T15180] dvb-usb: bulk message failed: -22 (4/0) [ 340.733779][T15180] dw2102: i2c transfer failed. [ 340.828705][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 340.828732][ T10] dw2102: command 0x0e transfer failed. [ 340.828742][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 340.828760][ T10] dw2102: command 0x0e transfer failed. [ 340.858798][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 340.858858][ T975] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 340.858881][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.900308][ T975] usb 7-1: config 0 descriptor?? [ 340.903798][T15197] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 340.956634][T15225] tmpfs: Cannot disable swap on remount [ 341.131106][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 341.131231][ T10] dw2102: command 0x0e transfer failed. [ 341.131242][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 341.131256][ T10] dw2102: command 0x0e transfer failed. [ 341.131265][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 341.131278][ T10] dw2102: command 0x51 transfer failed. [ 341.131287][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 341.131299][ T10] dw2102: i2c probe for address 0x68 failed. [ 341.131310][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 341.131322][ T10] dw2102: i2c probe for address 0x69 failed. [ 341.131340][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 341.131352][ T10] dw2102: i2c probe for address 0x6a failed. [ 341.131363][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 341.131373][ T10] dvb-usb: no frontend was attached by 'TeVii S662' [ 341.335461][ T975] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 341.335499][ T975] elan 0003:04F3:0755.0015: item fetching failed at offset 3/5 [ 341.336579][ T975] elan 0003:04F3:0755.0015: Hid Parse failed [ 341.336686][ T975] elan 0003:04F3:0755.0015: probe with driver elan failed with error -22 [ 341.341053][ T10] rc_core: IR keymap rc-tt-1500 not found [ 341.341072][ T10] Registered IR keymap rc-empty [ 341.342771][ T10] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 341.346071][ T10] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input19 [ 341.487086][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 341.487111][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 341.487124][ T10] dvb-usb: TeVii S662 successfully initialized and connected. [ 341.504735][ T10] usb 2-1: USB disconnect, device number 18 [ 341.565553][ T5909] usb 7-1: USB disconnect, device number 7 [ 341.977903][ T10] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 342.010918][ T975] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 342.054114][T15282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2850'. [ 342.160791][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 342.165559][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.165609][ T975] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 342.165631][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.216624][ T975] usb 3-1: config 0 descriptor?? [ 342.706479][ T975] cypress 0003:04B4:07B1.0016: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.2-1/input0 [ 342.905975][ T5882] usb 3-1: USB disconnect, device number 22 [ 342.947732][T15316] fido_id[15316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 343.423204][ T5923] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 343.584480][ T5923] usb 7-1: unable to get BOS descriptor or descriptor too short [ 343.588913][ T5923] usb 7-1: not running at top speed; connect to a high speed hub [ 343.609265][ T5923] usb 7-1: config 3 has an invalid interface number: 106 but max is 0 [ 343.609292][ T5923] usb 7-1: config 3 has no interface number 0 [ 343.609339][ T5923] usb 7-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 343.609366][ T5923] usb 7-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 343.609392][ T5923] usb 7-1: config 3 interface 106 has no altsetting 0 [ 343.648916][ T5923] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 343.648946][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.648964][ T5923] usb 7-1: Product: syz [ 343.648977][ T5923] usb 7-1: Manufacturer: syz [ 343.648989][ T5923] usb 7-1: SerialNumber: syz [ 343.709239][T15345] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 343.709365][T15345] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 343.942697][ T5923] kobil_sct 7-1:3.106: KOBIL USB smart card terminal converter detected [ 343.968789][ T5923] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 343.998405][ T5923] usb 7-1: USB disconnect, device number 8 [ 344.022502][ T5923] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 344.023435][ T5923] kobil_sct 7-1:3.106: device disconnected [ 344.210810][T10820] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 344.319285][ T5923] kernel write not supported for file /dsp1 (pid: 5923 comm: kworker/1:5) [ 344.372762][T10820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.372857][T10820] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.372922][T10820] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.372943][T10820] usb 3-1: config 1 interface 1 has no altsetting 0 [ 344.378055][T10820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.378084][T10820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.378103][T10820] usb 3-1: Product: syz [ 344.378117][T10820] usb 3-1: Manufacturer: syz [ 344.378131][T10820] usb 3-1: SerialNumber: syz [ 344.409270][T10820] cdc_ncm 3-1:1.0: skipping garbage [ 344.409292][T10820] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 344.409331][T10820] cdc_ncm 3-1:1.0: bind() failure [ 344.654936][T15383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.711044][T15420] autofs4:pid:15420:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 344.897163][T10820] usb 3-1: USB disconnect, device number 23 [ 345.396755][T15468] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 345.408254][ T5923] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 345.553358][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.553392][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.553433][ T5923] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 345.553456][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.604671][ T5923] usb 5-1: config 0 descriptor?? [ 345.846860][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 346.074213][ T5923] aquacomputer_d5next 0003:0C70:F00D.0017: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0 [ 346.277920][ T5923] usb 5-1: USB disconnect, device number 21 [ 346.492576][T15514] fido_id[15514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 348.096920][T15601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.444829][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2939'. [ 348.498110][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2942'. [ 348.636386][T15624] vlan3: entered promiscuous mode [ 348.636407][T15624] gretap0: entered promiscuous mode [ 348.670906][ T10] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 348.824398][ T10] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 348.824425][ T10] usb 7-1: config 0 has no interface number 0 [ 348.827478][ T10] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 348.827508][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.827527][ T10] usb 7-1: Product: syz [ 348.827541][ T10] usb 7-1: Manufacturer: syz [ 348.827555][ T10] usb 7-1: SerialNumber: syz [ 348.848003][ T10] usb 7-1: config 0 descriptor?? [ 348.998176][ T37] audit: type=1326 audit(2000000064.340:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15656 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 348.999043][ T37] audit: type=1326 audit(2000000064.340:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15656 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 349.056490][ T37] audit: type=1326 audit(2000000064.400:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15656 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 349.057225][ T37] audit: type=1326 audit(2000000064.400:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15656 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 349.057500][ T37] audit: type=1326 audit(2000000064.400:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15656 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 349.058932][ T37] audit: type=1326 audit(2000000064.400:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15656 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 349.149567][ T37] audit: type=1326 audit(2000000064.400:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15656 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1126f9ec29 code=0x7ffc0000 [ 349.569635][T15670] NILFS (nullb0): couldn't find nilfs on the device [ 349.583628][ T10] usb 7-1: Firmware version (0.0) predates our first public release. [ 349.583653][ T10] usb 7-1: Please update to version 0.2 or newer [ 349.699555][ T10] usb 7-1: USB disconnect, device number 9 [ 349.861118][ T5882] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 350.067798][ T5882] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 350.067825][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.067874][ T5882] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.071523][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.071551][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.071570][ T5882] usb 3-1: Product: syz [ 350.071583][ T5882] usb 3-1: Manufacturer: syz [ 350.071597][ T5882] usb 3-1: SerialNumber: syz [ 350.127588][ T5882] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 350.127634][ T5882] cdc_ncm 3-1:1.0: bind() failure [ 350.161487][T15713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2961'. [ 350.204824][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.399600][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2966'. [ 350.611665][T15740] netlink: 'syz.4.2968': attribute type 3 has an invalid length. [ 350.611686][T15740] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 350.611699][T15740] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2968'. [ 350.827098][T15758] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 350.940843][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 351.092873][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 351.095305][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.095343][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.095380][ T10] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 351.095401][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.106258][ T10] usb 7-1: config 0 descriptor?? [ 351.559607][ T10] corsair 0003:1B1C:1B02.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 351.765550][ T10] corsair 0003:1B1C:1B02.0018: Failed to get K90 initial state (error -71). [ 351.782447][ T10] usb 7-1: USB disconnect, device number 10 [ 352.139000][ T5844] Bluetooth: hci4: link tx timeout [ 352.140096][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.144851][ T5846] Bluetooth: hci4: link tx timeout [ 352.144867][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.521763][T15835] tmpfs: Cannot change global quota limit on remount [ 352.569043][ T5923] usb 3-1: USB disconnect, device number 24 [ 352.613428][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 352.760960][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 352.763455][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 352.763493][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.773192][ T10] usb 5-1: config 0 descriptor?? [ 352.793144][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 353.180770][ T5923] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 353.344524][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.344570][ T5923] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 353.344593][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.386382][ T5923] usb 3-1: config 0 descriptor?? [ 353.445158][ T10] gspca_nw80x: reg_w err -71 [ 353.445269][ T10] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 353.484278][ T10] usb 5-1: USB disconnect, device number 22 [ 353.826870][ T5923] itetech 0003:258A:6A88.0019: unbalanced collection at end of report description [ 353.827756][ T5923] itetech 0003:258A:6A88.0019: probe with driver itetech failed with error -22 [ 354.036994][ T5923] usb 3-1: USB disconnect, device number 25 [ 354.235631][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 354.952770][T15957] netlink: 'syz.4.3023': attribute type 29 has an invalid length. [ 354.954463][T15957] netlink: 'syz.4.3023': attribute type 29 has an invalid length. [ 355.162818][T15973] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 355.162818][T15973] The task syz.2.3025 (15973) triggered the difference, watch for misbehavior. [ 356.081814][T16016] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3043'. [ 356.487708][ T37] audit: type=1800 audit(2000000071.770:171): pid=16036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3050" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 356.580805][ T5882] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 356.715909][T16045] xt_HMARK: spi-set and port-set can't be combined [ 356.741012][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 356.744355][ T5882] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 356.744384][ T5882] usb 3-1: config 0 has no interface number 0 [ 356.744432][ T5882] usb 3-1: config 0 interface 224 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.744461][ T5882] usb 3-1: config 0 interface 224 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 356.744488][ T5882] usb 3-1: config 0 interface 224 has no altsetting 0 [ 356.744522][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 356.744546][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.756366][ T5882] usb 3-1: config 0 descriptor?? [ 357.498314][ T5882] usb 3-1: USB disconnect, device number 26 [ 359.694101][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3068'. [ 363.742308][T10820] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 363.930758][T10820] usb 7-1: Using ep0 maxpacket: 16 [ 363.935001][T10820] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 363.935054][T10820] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 363.935109][T10820] usb 7-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 363.935131][T10820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.008487][T10820] usb 7-1: config 0 descriptor?? [ 364.614388][T10820] kye 0003:0458:5019.001B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 364.616404][T10820] kye 0003:0458:5019.001B: unexpected long global item [ 364.617348][T10820] kye 0003:0458:5019.001B: parse failed [ 364.617418][T10820] kye 0003:0458:5019.001B: probe with driver kye failed with error -22 [ 364.764271][ T5882] usb 7-1: USB disconnect, device number 11 [ 366.668686][T16189] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3090'. [ 366.668712][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3090'. [ 366.668728][T16189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3090'. [ 366.830961][T10820] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 366.987042][T10820] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 366.987071][T10820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.987090][T10820] usb 2-1: config 0 has no interface number 0 [ 366.987139][T10820] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 366.987161][T10820] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.070106][T10820] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 367.070137][T10820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.070156][T10820] usb 2-1: Product: syz [ 367.070170][T10820] usb 2-1: Manufacturer: syz [ 367.070184][T10820] usb 2-1: SerialNumber: syz [ 367.147667][T10820] usb 2-1: config 0 descriptor?? [ 367.421101][ T5882] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 367.530331][ C1] sched: DL replenish lagged too much [ 367.571290][ T5882] usb 7-1: Using ep0 maxpacket: 16 [ 367.645079][ T5882] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 367.648989][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 367.649555][ T5882] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 367.649580][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.817703][ T5882] usb 7-1: config 0 descriptor?? [ 367.936452][T10820] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 368.050234][T10820] usb 2-1: USB disconnect, device number 19 [ 368.567220][ T5882] saitek 0003:06A3:0621.001C: unknown main item tag 0x0 [ 368.567258][ T5882] saitek 0003:06A3:0621.001C: unknown main item tag 0x0 [ 368.567284][ T5882] saitek 0003:06A3:0621.001C: unknown main item tag 0x0 [ 368.567310][ T5882] saitek 0003:06A3:0621.001C: unknown main item tag 0x0 [ 368.567336][ T5882] saitek 0003:06A3:0621.001C: unknown main item tag 0x0 [ 368.711919][ T5882] saitek 0003:06A3:0621.001C: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.6-1/input0 [ 368.811264][ T5882] usb 7-1: USB disconnect, device number 12 [ 369.402712][T16227] fido_id[16227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 370.500980][ T5909] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 370.691865][ T5909] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 370.691893][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.691911][ T5909] usb 2-1: config 0 has no interface number 0 [ 370.691968][ T5909] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 370.691990][ T5909] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.697301][ T5909] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 370.697330][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.697351][ T5909] usb 2-1: Product: syz [ 370.697365][ T5909] usb 2-1: Manufacturer: syz [ 370.697380][ T5909] usb 2-1: SerialNumber: syz [ 370.805082][ T5909] usb 2-1: config 0 descriptor?? [ 371.211648][ T5909] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 371.300537][ T5909] usb 2-1: USB disconnect, device number 20 [ 371.940082][T16254] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3102'. [ 371.940105][T16254] tc_dump_action: action bad kind [ 373.356369][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 376.562439][T16312] udevd[16312]: failed to send result of seq 16946 to main daemon: Connection refused [ 376.773151][T16318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3119'. [ 379.240133][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.240212][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.577519][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.614198][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.617502][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.619123][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.619942][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.238871][T16335] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.518435][T16335] chnl_net:caif_netlink_parms(): no params data found [ 382.718268][ T5844] Bluetooth: hci5: command tx timeout [ 384.159752][T16479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.531160][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 384.699445][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.699478][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.699518][ T10] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 384.699540][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.755548][ T10] usb 3-1: config 0 descriptor?? [ 384.791033][ T5844] Bluetooth: hci5: command tx timeout [ 385.259074][ T10] hid_mf 0003:0079:1846.001D: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 385.259126][ T10] hid_mf 0003:0079:1846.001D: Invalid report, this should never happen! [ 385.259142][ T10] hid_mf 0003:0079:1846.001D: Force feedback init failed. [ 385.478429][ T10] usb 3-1: USB disconnect, device number 27 [ 386.871262][ T5844] Bluetooth: hci5: command tx timeout [ 387.934267][T16512] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 387.934267][T16512] program syz.6.3141 not setting count and/or reply_len properly [ 388.545328][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3144'. [ 388.951010][ T5844] Bluetooth: hci5: command tx timeout [ 393.110488][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.175042][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.194163][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.221377][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.222409][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 395.271245][ T5844] Bluetooth: hci6: command tx timeout [ 397.350932][ T5844] Bluetooth: hci6: command tx timeout [ 399.431177][ T5844] Bluetooth: hci6: command tx timeout [ 401.391029][ T5882] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 401.511486][ T5844] Bluetooth: hci6: command tx timeout [ 401.596978][ T5882] usb 7-1: unable to get BOS descriptor or descriptor too short [ 401.598664][ T5882] usb 7-1: config 3 has an invalid interface number: 8 but max is 3 [ 401.598690][ T5882] usb 7-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 401.598711][ T5882] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 401.598731][ T5882] usb 7-1: config 3 has no interface number 0 [ 401.598785][ T5882] usb 7-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 401.598812][ T5882] usb 7-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 401.598838][ T5882] usb 7-1: config 3 interface 8 has no altsetting 0 [ 401.742178][ T5882] usb 7-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 401.742209][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.742228][ T5882] usb 7-1: Product: syz [ 401.742243][ T5882] usb 7-1: Manufacturer: syz [ 401.742256][ T5882] usb 7-1: SerialNumber: syz [ 402.398275][ T5882] appledisplay 7-1:3.8: Error while getting initial brightness: -71 [ 402.442789][ T5882] appledisplay 7-1:3.8: probe with driver appledisplay failed with error -71 [ 402.468392][ T5882] usbhid 7-1:3.8: can't add hid device: -22 [ 402.468522][ T5882] usbhid 7-1:3.8: probe with driver usbhid failed with error -22 [ 402.527803][ T5882] usb 7-1: USB disconnect, device number 13 [ 402.546917][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.579264][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 402.590044][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 402.608255][ T5846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 402.609136][ T5846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 403.200803][ T5882] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 403.350815][ T5882] usb 7-1: Using ep0 maxpacket: 16 [ 403.353894][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.353955][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.353982][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.354003][ T5882] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.354025][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.355636][ T5882] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.355664][ T5882] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.355683][ T5882] usb 7-1: Manufacturer: syz [ 403.463652][ T5882] usb 7-1: config 0 descriptor?? [ 403.796324][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 403.822770][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 403.825810][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 403.827912][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 403.828791][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 404.031096][ T5882] rc_core: IR keymap rc-hauppauge not found [ 404.031119][ T5882] Registered IR keymap rc-empty [ 404.031331][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.062210][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.086448][ T5882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 404.112188][ T5882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 404.117733][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.162703][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.181281][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.200910][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.411836][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.435179][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.451133][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.476805][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.492399][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.515373][ T5882] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 404.539342][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.565966][ T5882] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 404.565992][ T5882] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.625100][ T5882] usb 7-1: USB disconnect, device number 14 [ 404.710880][ T5844] Bluetooth: hci7: command tx timeout [ 405.507324][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.910920][ T5844] Bluetooth: hci8: command tx timeout [ 406.790931][ T5844] Bluetooth: hci7: command tx timeout [ 407.991519][ T5844] Bluetooth: hci8: command tx timeout [ 408.871183][ T5844] Bluetooth: hci7: command tx timeout [ 410.074173][ T5844] Bluetooth: hci8: command tx timeout [ 410.150844][ T5882] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 410.417574][ T5882] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 410.417604][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.417624][ T5882] usb 7-1: Product: syz [ 410.417637][ T5882] usb 7-1: Manufacturer: syz [ 410.417652][ T5882] usb 7-1: SerialNumber: syz [ 410.476584][ T5882] usb 7-1: config 0 descriptor?? [ 410.768289][ T5882] usb 7-1: USB disconnect, device number 15 [ 410.950863][ T5844] Bluetooth: hci7: command tx timeout [ 411.448022][T16677] [U] : [ 411.448065][T16677] [U] [ 411.448100][T16677] [U] [ 411.448134][T16677] [U] [ 411.448169][T16677] [U] [ 411.448203][T16677] [U] [ 411.448238][T16677] [U] [ 411.448272][T16677] [U] [ 411.448366][T16677] [U] [ 411.448402][T16677] [U] [ 411.448436][T16677] [U] [ 411.448470][T16677] [U] [ 411.448505][T16677] [U] [ 411.448539][T16677] [U] [ 411.448573][T16677] [U] [ 411.448607][T16677] [U] [ 411.448680][T16677] [U] [ 411.448711][T16677] [U] [ 411.448743][T16677] [U] [ 411.448776][T16677] [U] [ 411.448810][T16677] [U] [ 411.448841][T16677] [U] [ 411.448874][T16677] [U] [ 411.448908][T16677] [U] [ 411.448981][T16677] [U] [ 411.449014][T16677] [U] [ 411.449047][T16677] [U] [ 411.449080][T16677] [U] [ 411.449114][T16677] [U] [ 411.449147][T16677] [U] [ 411.449181][T16677] [U] [ 411.561056][T16677] [U] [ 411.574966][T16677] [U] [ 411.575017][T16677] [U] [ 411.575051][T16677] [U] [ 411.575092][T16677] [U] [ 411.575127][T16677] [U] [ 411.575162][T16677] [U] [ 411.575195][T16677] [U] [ 411.575229][T16677] [U] [ 411.575468][T16677] [U] [ 411.575556][T16677] [U] [ 411.575593][T16677] [U] [ 411.575627][T16677] [U] [ 411.575662][T16677] [U] [ 411.575693][T16677] [U] [ 411.575726][T16677] [U] [ 411.575759][T16677] [U] [ 411.575833][T16677] [U] [ 411.575868][T16677] [U] [ 411.575902][T16677] [U] [ 411.575936][T16677] [U] [ 411.575970][T16677] [U] [ 411.576004][T16677] [U] [ 411.576037][T16677] [U] [ 411.576071][T16677] [U] [ 411.576142][T16677] [U] [ 411.576176][T16677] [U] [ 411.576211][T16677] [U] [ 411.576245][T16677] [U] [ 411.576278][T16677] [U] [ 411.576319][T16677] [U] [ 411.576350][T16677] [U] [ 411.576385][T16677] [U] [ 411.576460][T16677] [U] [ 411.576494][T16677] [U] [ 411.576535][T16677] [U] [ 411.576569][T16677] [U] [ 411.576603][T16677] [U] [ 411.576638][T16677] [U] [ 411.576674][T16677] [U] [ 411.576708][T16677] [U] [ 411.576780][T16677] [U] [ 411.576813][T16677] [U] [ 411.576848][T16677] [U] [ 411.576882][T16677] [U] [ 411.576915][T16677] [U] [ 411.576949][T16677] [U] [ 411.576983][T16677] [U] [ 411.577017][T16677] [U] [ 411.577090][T16677] [U] [ 411.577124][T16677] [U] [ 411.577160][T16677] [U] [ 411.577194][T16677] [U] [ 411.577227][T16677] [U] [ 411.577260][T16677] [U] [ 411.577295][T16677] [U] [ 411.577327][T16677] [U] [ 411.577397][T16677] [U] [ 411.577430][T16677] [U] [ 411.577465][T16677] [U] [ 411.577498][T16677] [U] [ 411.577538][T16677] [U] [ 411.577571][T16677] [U] [ 411.577606][T16677] [U] [ 411.577641][T16677] [U] [ 411.577712][T16677] [U] [ 411.577745][T16677] [U] [ 411.577780][T16677] [U] [ 411.577812][T16677] [U] [ 411.577845][T16677] [U] [ 411.577879][T16677] [U] [ 411.577913][T16677] [U] [ 411.577947][T16677] [U] [ 411.578017][T16677] [U] [ 411.578051][T16677] [U] [ 411.578085][T16677] [U] [ 411.578120][T16677] [U] [ 411.578154][T16677] [U] [ 411.578188][T16677] [U] [ 411.578221][T16677] [U] [ 411.578255][T16677] [U] [ 411.578323][T16677] [U] [ 411.578357][T16677] [U] [ 411.578396][T16677] [U] [ 411.578428][T16677] [U] [ 411.578463][T16677] [U] [ 411.578498][T16677] [U] [ 411.578539][T16677] [U] [ 411.578574][T16677] [U] [ 411.578654][T16677] [U] [ 411.578690][T16677] [U] [ 411.578724][T16677] [U] [ 411.578759][T16677] [U] [ 411.578791][T16677] [U] [ 411.578825][T16677] [U] [ 411.578859][T16677] [U] [ 411.870301][T16676] [U] [ 412.112822][T16680] devtmpfs: Too few inodes for current use [ 412.159509][ T5844] Bluetooth: hci8: command tx timeout [ 414.715592][T16701] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 414.715650][T16701] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 414.715700][T16701] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 414.715817][T16701] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 414.715866][T16701] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 414.715957][T16701] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 414.716006][T16701] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 414.716053][T16701] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 414.716188][T16701] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 414.716235][T16701] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 414.716291][T16701] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 414.716381][T16701] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 418.942410][ T37] audit: type=1800 audit(2000000134.270:172): pid=16714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3173" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 431.531001][ T5924] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 431.694416][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 431.697329][ T5924] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.697356][ T5924] usb 7-1: config 0 has no interface number 0 [ 431.721549][ T5924] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 431.721591][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.721610][ T5924] usb 7-1: Product: syz [ 431.721623][ T5924] usb 7-1: Manufacturer: syz [ 431.721638][ T5924] usb 7-1: SerialNumber: syz [ 431.798090][ T5924] usb 7-1: config 0 descriptor?? [ 431.820420][ T5924] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 431.820449][ T5924] usb 7-1: selecting invalid altsetting 1 [ 431.820483][ T5924] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 431.866354][ T5924] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 431.866774][ T5924] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 431.866826][ T5924] usb 7-1: media controller created [ 431.964454][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.036043][ T5924] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 433.036122][ T5924] zl10353_read_register: readreg error (reg=127, ret==-110) [ 433.064975][T16736] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 433.189041][ T5924] usb 7-1: USB disconnect, device number 16 [ 434.133076][ T5909] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 434.294489][ T5909] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 434.294523][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 434.299815][ T5909] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 434.299843][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 434.299863][ T5909] usb 7-1: Product: syz [ 434.299877][ T5909] usb 7-1: Manufacturer: syz [ 434.299891][ T5909] usb 7-1: SerialNumber: syz [ 434.396542][ T5909] usb 7-1: config 0 descriptor?? [ 434.441131][ T5909] usb 7-1: selecting invalid altsetting 0 [ 434.688585][ T5909] usb 7-1: USB disconnect, device number 17 [ 437.325541][T16335] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.349387][T16335] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.349658][T16335] bridge_slave_0: entered allmulticast mode [ 437.433655][T16335] bridge_slave_0: entered promiscuous mode [ 437.456106][T16538] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.488373][T16335] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.488537][T16335] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.488794][T16335] bridge_slave_1: entered allmulticast mode [ 437.525818][T16335] bridge_slave_1: entered promiscuous mode [ 437.583536][T16583] virt_wifi0 speed is unknown, defaulting to 1000 [ 440.651366][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.651483][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.255363][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 441.306628][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 441.334035][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 441.335362][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 441.336193][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.671027][ T5844] Bluetooth: hci1: command tx timeout [ 445.755434][ T5844] Bluetooth: hci1: command tx timeout [ 446.377191][T16560] virt_wifi0 speed is unknown, defaulting to 1000 [ 446.938602][T16811] virt_wifi0 speed is unknown, defaulting to 1000 [ 447.831808][ T5844] Bluetooth: hci1: command tx timeout [ 448.502196][T16538] chnl_net:caif_netlink_parms(): no params data found [ 448.660511][T16583] chnl_net:caif_netlink_parms(): no params data found [ 449.910990][ T5844] Bluetooth: hci1: command tx timeout [ 452.746016][T16560] chnl_net:caif_netlink_parms(): no params data found [ 453.346657][ T5846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 453.368517][ T5846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 453.403309][ T5846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 453.431492][ T5846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 453.439135][ T5846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 455.511620][ T5844] Bluetooth: hci9: command tx timeout [ 457.590971][ T5844] Bluetooth: hci9: command tx timeout [ 459.671010][ T5844] Bluetooth: hci9: command tx timeout [ 461.751501][ T5844] Bluetooth: hci9: command tx timeout [ 462.028208][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 462.057185][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 462.058599][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 462.059889][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 462.098348][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 463.037990][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 463.078116][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 463.089642][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 463.104962][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 463.105882][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 463.435640][T16811] chnl_net:caif_netlink_parms(): no params data found [ 466.185949][ T5846] Bluetooth: hci11: command tx timeout [ 468.230937][ T5846] Bluetooth: hci11: command tx timeout [ 468.231484][ T5846] Bluetooth: hci10: command tx timeout [ 470.311066][ T59] Bluetooth: hci10: command tx timeout [ 470.311102][ T59] Bluetooth: hci11: command tx timeout [ 472.391146][ T5846] Bluetooth: hci11: command tx timeout [ 472.391179][ T5846] Bluetooth: hci10: command tx timeout [ 474.473707][ T59] Bluetooth: hci10: command tx timeout [ 478.562170][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 498.526008][T17268] virt_wifi0 speed is unknown, defaulting to 1000 [ 502.080246][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.080325][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.118072][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.146596][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.148485][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 502.150493][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 502.175842][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.231120][ T5846] Bluetooth: hci5: command tx timeout [ 506.312459][ T5846] Bluetooth: hci5: command tx timeout [ 508.391584][ T5846] Bluetooth: hci5: command tx timeout [ 510.471797][ T5846] Bluetooth: hci5: command tx timeout [ 513.563457][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 513.597823][ T38] INFO: task syz.4.3079:16141 blocked for more than 143 seconds. [ 513.597854][ T38] Not tainted syzkaller #0 [ 513.597864][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.597877][ T38] task:syz.4.3079 state:D stack:25128 pid:16141 tgid:16141 ppid:5841 task_flags:0x400040 flags:0x00004004 [ 513.597945][ T38] Call Trace: [ 513.597952][ T38] [ 513.597966][ T38] __schedule+0x16f3/0x4c20 [ 513.598020][ T38] ? __lock_acquire+0xab9/0xd20 [ 513.598045][ T38] ? __pfx___schedule+0x10/0x10 [ 513.598086][ T38] ? schedule+0x91/0x360 [ 513.598114][ T38] schedule+0x165/0x360 [ 513.598144][ T38] schedule_timeout+0x9a/0x270 [ 513.598167][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 513.598203][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.598227][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.598249][ T38] ? wait_for_completion+0x267/0x5d0 [ 513.598275][ T38] wait_for_completion+0x2bf/0x5d0 [ 513.598313][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 513.598338][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 513.598369][ T38] rcu_barrier+0x463/0x570 [ 513.598400][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 513.598419][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 513.598445][ T38] kvm_put_kvm+0xf8e/0x1670 [ 513.598494][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 513.598517][ T38] kvm_vm_release+0x46/0x50 [ 513.598538][ T38] __fput+0x458/0xa80 [ 513.598569][ T38] task_work_run+0x1d4/0x260 [ 513.598592][ T38] ? __pfx_task_work_run+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.598617][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 513.598648][ T38] exit_to_user_mode_loop+0xec/0x110 [ 513.598672][ T38] do_syscall_64+0x2bd/0x3b0 [ 513.598689][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.598712][ T38] ? entry_SYSCALL_64_after[ 513.598712][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.598730][ T38] ? clear_bhb_loop+0x60/0xb0 [ 513.598753][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.598776][ T38] RIP: 0033:0x7f1126f9ec29 [ 513.598802][ T38] RSP: 002b:00007ffea16e2ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 513.598821][ T38] RAX: 0000000000000000 RBX: 00007f11271e7da0 RCX: 00007f1126f9ec29 [ 513.598835][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 513.598846][ T38] RBP: 00007f11271e7da0 R08: 0000000000000efc R09: 00000003a16e32ef [ 513.598859][ T38] R10: 00000000005fc574 R11: 0000000000000246 R12: 00000000000592c0 [ 513.598871][ T38] R13: 00007f11271e6090 R14: ffffffffffffffff R15: 00007ffea16e3110 [ 513.598903][ T38] [ 513.598931][ T38] [ 513.598931][ T38] Showing all locks held in the system: [ 513.598941][ T38] 3 locks held by kworker/u8:1/13: [ 513.598952][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.599000][ T38] #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.599045][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 513.599089][ T38] 2 locks held by rcuc/1/28: [ 513.599099][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 513.599145][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 513.599189][ T38] 10 locks held by ktimers/1/29: [ 513.599200][ T38] 2 locks held by kworker/1:0/31: [ 513.599212][ T38] 1 lock held by khungtaskd/38: [ 513.599222][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 513.599266][ T38] 2 locks held by kworker/1:1/50: [ 513.599277][ T38] 2 locks held by kworker/u9:0/59: [ 513.599292][ T38] 3 locks held by kworker/u8:5/144: [ 513.599302][ T38] #0: ffff88814d378938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.599347][ T38] #1: ffffc90003a27bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.599393][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 513.599447][ T38] 2 locks held by kworker/1:2/974: [ 513.599458][ T38] 2 locks held by kworker/1:3/975: [ 513.599470][ T38] 2 locks held by kworker/u8:7/1110: [ 513.599495][ T38] 2 locks held by getty/5592: [ 513.599506][ T38] #0: ffff88823bf748a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 513.599556][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 513.599602][ T38] 4 locks held by kworker/u9:6/5846: [ 513.599617][ T38] 2 locks held by kworker/1:4/5922: [ 513.599628][ T38] 4 locks held by kworker/1:8/6040: [ 513.599642][ T38] 1 lock held by syz.4.3079/16141: [ 513.599653][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 513.599697][ T38] 2 locks held by syz.0.3119/16318: [ 513.599707][ T38] #0: ffffffff8f1f3c30 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 513.599758][ T38] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 513.599807][ T38] 1 lock held by syz-executor/16335: [ 513.599818][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 513.599857][ T38] 2 locks held by syz.1.3137/16504: [ 513.599868][ T38] #0: ffffffff8ecb7d58 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5f1/0x790 [ 513.599911][ T38] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 513.599953][ T38] 1 lock held by syz.2.3140/16510: [ 513.599964][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 513.600010][ T38] 1 lock held by syz-executor/16538: [ 513.600021][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 513.600068][ T38] 1 lock held by syz-executor/16560: [ 513.600078][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 513.600122][ T38] 1 lock held by syz-executor/16583: [ 513.600131][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 513.600176][ T38] 2 locks held by syz-executor/16811: [ 513.600185][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 513.600234][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 513.600278][ T38] 4 locks held by syz-executor/17250: [ 513.600288][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 513.600332][ T38] #1: ffffffff8ea22e60 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 513.600376][ T38] #2: ffffffff8ea230a0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 513.600419][ T38] #3: ffff88803d881118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 513.600464][ T38] 5 locks held by syz-executor/17262: [ 513.600474][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 513.600518][ T38] #1: ffffffff8ea22e60 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 513.600561][ T38] #2: ffffffff8ea230a0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 513.801066][ T38] #3: ffff88803d881118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 513.801126][ T38] #4: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 513.801178][ T38] 2 locks held by syz-executor/17268: [ 513.801190][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 513.801235][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 513.801282][ T38] 1 lock held by syz-executor/17331: [ 513.801293][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 513.801336][ T38] 1 lock held by dhcpcd/17337: [ 513.801346][ T38] #0: ffff88804945f538 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 513.801396][ T38] 1 lock held by dhcpcd/17338: [ 513.801406][ T38] #0: ffff88803d7c9d78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 513.801454][ T38] 1 lock held by dhcpcd/17339: [ 513.801464][ T38] #0: ffff88803d7cee78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 513.801511][ T38] 1 lock held by dhcpcd/17340: [ 513.801522][ T38] #0: ffff88803d7cbf38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 513.801572][ T38] [ 513.801584][ T38] ============================================= [ 513.801584][ T38] [ 513.801606][ T38] NMI backtrace for cpu 0 [ 513.801635][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 513.801662][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.801673][ T38] Call Trace: [ 513.801680][ T38] [ 513.801688][ T38] dump_stack_lvl+0x189/0x250 [ 513.801717][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.801755][ T38] ? __pfx__printk+0x10/0x10 [ 513.801786][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 513.801812][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 513.801835][ T38] ? __pfx__printk+0x10/0x10 [ 513.801858][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 513.801886][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 513.801910][ T38] watchdog+0xf93/0xfe0 [ 513.801937][ T38] ? watchdog+0x1de/0xfe0 [ 513.801963][ T38] kthread+0x70e/0x8a0 [ 513.801990][ T38] ? __pfx_watchdog+0x10/0x10 [ 513.802010][ T38] ? __pfx_kthread+0x10/0x10 [ 513.802035][ T38] ? __pfx_kthread+0x10/0x10 [ 513.802059][ T38] ret_from_fork+0x436/0x7d0 [ 513.802083][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 513.802110][ T38] ? __switch_to_asm+0x39/0x70 [ 513.802126][ T38] ? __switch_to_asm+0x33/0x70 [ 513.802141][ T38] ? __pfx_kthread+0x10/0x10 [ 513.802165][ T38] ret_from_fork_asm+0x1a/0x30 [ 513.802198][ T38] [ 513.802205][ T38] Sending NMI from CPU 0 to CPUs 1: [ 513.802231][ C1] NMI backtrace for cpu 1 [ 513.802245][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 513.802263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.802271][ C1] RIP: 0010:__asan_memset+0xd/0x50 [ 513.802290][ C1] Code: ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 89 f5 <49> 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 [ 513.802303][ C1] RSP: 0018:ffffc90000a3f060 EFLAGS: 00000246 [ 513.802317][ C1] RAX: ffffffff8942f5ff RBX: 0000000000000010 RCX: ffff88801caf1dc0 [ 513.802329][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000a3f0e0 [ 513.802339][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 513.802349][ C1] R10: ffffc90000a3f370 R11: ffffffff8942f180 R12: ffffc90000a3f260 [ 513.802360][ C1] R13: 1ffff92000147e18 R14: ffffc90000a3f450 R15: dffffc0000000000 [ 513.802373][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 513.802386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.802397][ C1] CR2: 00007f4dd67585e0 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 513.802411][ C1] Call Trace: [ 513.802417][ C1] [ 513.802425][ C1] nft_synproxy_do_eval+0x9e/0x570 [ 513.802441][ C1] ? unwind_next_frame+0xa5/0x2390 [ 513.802462][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 513.802486][ C1] nft_do_chain+0x409/0x1920 [ 513.802509][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 513.802538][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 513.802559][ C1] nft_do_chain_inet+0x25d/0x340 [ 513.802575][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 513.802590][ C1] ? __lock_acquire+0xab9/0xd20 [ 513.802613][ C1] ? NF_HOOK+0x9a/0x3a0 [ 513.802631][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 513.802646][ C1] nf_hook_slow+0xc2/0x220 [ 513.802667][ C1] NF_HOOK+0x206/0x3a0 [ 513.802686][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 513.802703][ C1] ? NF_HOOK+0x9a/0x3a0 [ 513.802719][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 513.802735][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 513.802755][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 513.802773][ C1] ? skb_dst+0x4f/0xd0 [ 513.802791][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 513.802810][ C1] NF_HOOK+0x30c/0x3a0 [ 513.802835][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 513.802852][ C1] ? NF_HOOK+0x9a/0x3a0 [ 513.802868][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 513.802888][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 513.802910][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 513.802926][ C1] __netif_receive_skb+0x143/0x380 [ 513.802943][ C1] ? rt_spin_unlock+0x65/0x80 [ 513.802961][ C1] ? process_backlog+0x27b/0x900 [ 513.802978][ C1] process_backlog+0x31e/0x900 [ 513.803001][ C1] __napi_poll+0xb6/0x540 [ 513.803020][ C1] net_rx_action+0x707/0xe00 [ 513.803047][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 513.803082][ C1] handle_softirqs+0x22f/0x710 [ 513.803104][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 513.803126][ C1] run_ktimerd+0xcf/0x190 [ 513.803144][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 513.803160][ C1] ? schedule+0x91/0x360 [ 513.803182][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 513.803197][ C1] smpboot_thread_fn+0x53f/0xa60 [ 513.803215][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 513.803236][ C1] kthread+0x70e/0x8a0 [ 513.803255][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 513.803271][ C1] ? __pfx_kthread+0x10/0x10 [ 513.803292][ C1] ? __pfx_kthread+0x10/0x10 [ 513.803311][ C1] ret_from_fork+0x436/0x7d0 [ 513.803329][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 513.803349][ C1] ? __switch_to_asm+0x39/0x70 [ 513.803362][ C1] ? __switch_to_asm+0x33/0x70 [ 513.803379][ C1] ? __pfx_kthread+0x10/0x10 [ 513.803398][ C1] ret_from_fork_asm+0x1a/0x30 [ 513.803420][ C1] [ 513.804234][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 513.804247][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 513.804268][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.804279][ T38] Call Trace: [ 513.804286][ T38] [ 513.804293][ T38] dump_stack_lvl+0x99/0x250 [ 513.804317][ T38] ? __asan_memcpy+0x40/0x70 [ 513.804336][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.804359][ T38] ? __pfx__printk+0x10/0x10 [ 513.804390][ T38] vpanic+0x281/0x750 [ 513.804417][ T38] ? __pfx_vpanic+0x10/0x10 [ 513.804436][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 513.804459][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.804493][ T38] panic+0xb9/0xc0 [ 513.804515][ T38] ? __pfx_panic+0x10/0x10 [ 513.804540][ T38] ? irq_work_queue+0xc3/0x140 [ 513.804565][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 513.804595][ T38] watchdog+0xfd2/0xfe0 [ 513.804621][ T38] ? watchdog+0x1de/0xfe0 [ 513.804648][ T38] kthread+0x70e/0x8a0 [ 513.804674][ T38] ? __pfx_watchdog+0x10/0x10 [ 513.804694][ T38] ? __pfx_kthread+0x10/0x10 [ 513.804723][ T38] ? __pfx_kthread+0x10/0x10 [ 513.804747][ T38] ret_from_fork+0x436/0x7d0 [ 513.804771][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 513.804799][ T38] ? __switch_to_asm+0x39/0x70 [ 513.804814][ T38] ? __switch_to_asm+0x33/0x70 [ 513.804829][ T38] ? __pfx_kthread+0x10/0x10 [ 513.804853][ T38] ret_from_fork_asm+0x1a/0x30 [ 513.804885][ T38] [ 513.805204][ T38] Kernel Offset: disabled