last executing test programs: 3m24.848807837s ago: executing program 2 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m24.536976105s ago: executing program 2 (id=379): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)={0x20, r0, 0x1, 0x70bd2b, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4000000) 3m24.46214229s ago: executing program 2 (id=382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x34}}, 0x880) 3m24.147699705s ago: executing program 2 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3m23.910257308s ago: executing program 2 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r0, 0x13, 0x0, @val=@iter={0x0}}, 0x20) 3m22.629104305s ago: executing program 2 (id=402): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@jmp={0x5, 0x0, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x2e}, 0x94) 3m21.613252869s ago: executing program 32 (id=402): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@jmp={0x5, 0x0, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x2e}, 0x94) 2m11.179948953s ago: executing program 5 (id=986): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8480, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 2m10.893198635s ago: executing program 5 (id=989): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2m10.538343682s ago: executing program 5 (id=993): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) 2m10.152626808s ago: executing program 5 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m9.229738626s ago: executing program 5 (id=1001): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 2m8.824761617s ago: executing program 5 (id=1004): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0xff03, 0x0) 1m59.845750671s ago: executing program 0 (id=1094): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x8, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0x38, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 1m59.625355914s ago: executing program 0 (id=1097): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_destroy(r0) 1m59.221817369s ago: executing program 0 (id=1102): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) 1m58.861304214s ago: executing program 0 (id=1106): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001880)={0xc, {"a2e3ad21ed0d52f91b23090987f70e06d038e7ff7fc6e5539b3264078b089b0c08384d090890e0878f0e1ac6e7049b3b4a959b4b9a240a5b67f3988f7ef3195a0100ffe8d178708c523c921b1b5b31310d075d1836cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe2c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f88915dfa6056080572286522449df466c63d36770243f989cce3803f465e41e610c20d88421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1008892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928900d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b03000000cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c113d12a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571ebff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc018c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4804afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594eb8a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02ddb18e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a3581fd8ee98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa34046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d789364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c220300002107b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be1daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000ebffffffffffffff00", 0x1000}}, 0x1006) 1m58.066008652s ago: executing program 0 (id=1115): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x4d, 0x2, 0x7, 0x71, 0x8, 0x8, 0x0, 0x12, 0x1, 0x1, 0xd3, 0x8, 0x2}, 0xe) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1m57.710313298s ago: executing program 0 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xc048aec8, &(0x7f0000000000)={0x40006}) 1m52.438225497s ago: executing program 33 (id=1004): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0xff03, 0x0) 1m39.638202323s ago: executing program 34 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xc048aec8, &(0x7f0000000000)={0x40006}) 1m39.638108993s ago: executing program 4 (id=1144): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000080)) 1m39.58195107s ago: executing program 4 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m39.581685233s ago: executing program 4 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m39.581445525s ago: executing program 4 (id=1147): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 1m39.562704057s ago: executing program 4 (id=1149): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000f40)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1m39.537288522s ago: executing program 4 (id=1151): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffe}]) 1m23.444083699s ago: executing program 35 (id=1151): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffe}]) 1m21.010604408s ago: executing program 3 (id=1172): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1m20.817061953s ago: executing program 3 (id=1173): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000001540)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000005300)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}], 0x1, 0x8054) 1m20.565333455s ago: executing program 3 (id=1174): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x13, 0x8, 0x100, 0x0}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2284, &(0x7f0000000040)) 1m20.236838583s ago: executing program 3 (id=1175): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc36}, 0x90) 1m18.391095247s ago: executing program 3 (id=1177): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x4a}]}]}, 0x28}], 0x1}, 0x0) 1m17.876447377s ago: executing program 3 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x8050) 1m2.196292632s ago: executing program 36 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x8050) 17.325451329s ago: executing program 1 (id=1219): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x4}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x4000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) 17.325313836s ago: executing program 1 (id=1220): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r0, r1}) 17.325192223s ago: executing program 1 (id=1221): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x719e, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) 17.302820703s ago: executing program 1 (id=1222): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/24) 15.830922749s ago: executing program 1 (id=1223): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r0, r1, 0x26, 0x0, @void}, 0x10) 15.633261511s ago: executing program 1 (id=1224): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 0s ago: executing program 37 (id=1224): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) kernel console output (not intermixed with test programs): 845] Bluetooth: hci4: command tx timeout [ 103.356940][ T5853] Bluetooth: hci0: command tx timeout [ 103.356946][ T5845] Bluetooth: hci1: command tx timeout [ 103.356969][ T5853] Bluetooth: hci2: command tx timeout [ 103.357146][ T5838] Bluetooth: hci3: command tx timeout [ 103.471572][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.471590][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.471616][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.510932][ T5836] hsr_slave_0: entered promiscuous mode [ 103.512607][ T5836] hsr_slave_1: entered promiscuous mode [ 103.517249][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.517264][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.517287][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.567063][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.567082][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.567110][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.166351][ T5832] hsr_slave_0: entered promiscuous mode [ 104.174458][ T5832] hsr_slave_1: entered promiscuous mode [ 104.175380][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 104.175451][ T5832] Cannot create hsr debugfs directory [ 104.198757][ T5833] hsr_slave_0: entered promiscuous mode [ 104.199766][ T5833] hsr_slave_1: entered promiscuous mode [ 104.200365][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 104.200384][ T5833] Cannot create hsr debugfs directory [ 104.454153][ T5837] hsr_slave_0: entered promiscuous mode [ 104.455068][ T5837] hsr_slave_1: entered promiscuous mode [ 104.455690][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 104.455707][ T5837] Cannot create hsr debugfs directory [ 104.573488][ T5835] hsr_slave_0: entered promiscuous mode [ 104.575103][ T5835] hsr_slave_1: entered promiscuous mode [ 104.576152][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 104.576179][ T5835] Cannot create hsr debugfs directory [ 105.436702][ T5855] Bluetooth: hci2: command tx timeout [ 105.436757][ T5855] Bluetooth: hci0: command tx timeout [ 105.436815][ T5838] Bluetooth: hci3: command tx timeout [ 105.454924][ T5838] Bluetooth: hci1: command tx timeout [ 105.454956][ T5838] Bluetooth: hci4: command tx timeout [ 106.362189][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.390214][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.428269][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.465589][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.628044][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.664468][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.714034][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.765482][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.946337][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.991284][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.035379][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.103377][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.335085][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.384111][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.445481][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.491775][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.671328][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.698733][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.759578][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.795165][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.841300][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.950084][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.016136][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.017154][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.065724][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.101025][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.102058][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.223468][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.294880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.295132][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.311809][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.367918][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.368094][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.464708][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.519939][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.520188][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.532712][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.619051][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.619236][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.756323][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.777236][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.862280][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.866701][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.963985][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.964279][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.022098][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.084986][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.085200][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.201914][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.203276][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.225791][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.568877][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.654637][ T5836] veth0_vlan: entered promiscuous mode [ 109.748032][ T5836] veth1_vlan: entered promiscuous mode [ 109.847797][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.979375][ T5832] veth0_vlan: entered promiscuous mode [ 110.025003][ T5836] veth0_macvtap: entered promiscuous mode [ 110.078036][ T5836] veth1_macvtap: entered promiscuous mode [ 110.086072][ T5832] veth1_vlan: entered promiscuous mode [ 110.188385][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.212862][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.235236][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.275988][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.372774][ T1137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.401740][ T1137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.420411][ T1137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.458293][ T1137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.461460][ T5832] veth0_macvtap: entered promiscuous mode [ 110.572825][ T5832] veth1_macvtap: entered promiscuous mode [ 110.801766][ T5833] veth0_vlan: entered promiscuous mode [ 110.889416][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.923482][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.923504][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.941339][ T5835] veth0_vlan: entered promiscuous mode [ 110.961694][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.964812][ T5833] veth1_vlan: entered promiscuous mode [ 111.078875][ T1099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.083068][ T5835] veth1_vlan: entered promiscuous mode [ 111.094060][ T1099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.095434][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.095454][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.119878][ T1099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.154109][ T5837] veth0_vlan: entered promiscuous mode [ 111.154760][ T1099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.338640][ T5837] veth1_vlan: entered promiscuous mode [ 111.487242][ T5833] veth0_macvtap: entered promiscuous mode [ 111.613993][ T5833] veth1_macvtap: entered promiscuous mode [ 111.628978][ T5835] veth0_macvtap: entered promiscuous mode [ 111.644237][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.644257][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.695646][ T5835] veth1_macvtap: entered promiscuous mode [ 111.840071][ T5962] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 111.840151][ T5962] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6'. [ 111.921715][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.946860][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.946883][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.951627][ T5837] veth0_macvtap: entered promiscuous mode [ 111.985207][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.005553][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.038930][ T5837] veth1_macvtap: entered promiscuous mode [ 112.065100][ T2141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.089878][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.091197][ T2141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.124773][ T1137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.134181][ T1137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.223138][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.252917][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.269068][ T1137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.285820][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.306703][ T1137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.469084][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.513405][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 112.653594][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.691676][ T1099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.718857][ T1099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.792980][ T1099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.980491][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.980513][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.202429][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.202446][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.343103][ T2141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.343126][ T2141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.698886][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.700184][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.858329][ T2141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.858354][ T2141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.136143][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.136165][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.238747][ T5996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.361175][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.559856][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 115.578203][ T5930] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 115.578234][ T5930] usb 1-1: config 0 has no interface number 0 [ 115.622426][ T5930] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 115.622459][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.622479][ T5930] usb 1-1: Product: syz [ 115.622494][ T5930] usb 1-1: Manufacturer: syz [ 115.622508][ T5930] usb 1-1: SerialNumber: syz [ 115.832684][ T5930] usb 1-1: config 0 descriptor?? [ 115.893676][ T5930] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 116.249572][ T5930] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 116.481854][ T5930] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 116.601215][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 116.677237][ T5930] usb 1-1: USB disconnect, device number 2 [ 116.763276][ T5930] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 116.845555][ T5930] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 116.856455][ T5930] quatech2 1-1:0.51: device disconnected [ 116.980889][ T6021] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 116.980889][ T6021] program syz.2.26 not setting count and/or reply_len properly [ 118.086693][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.127305][ T6034] netlink: 168 bytes leftover after parsing attributes in process `syz.2.33'. [ 118.127395][ T6034] tipc: Started in network mode [ 118.127420][ T6034] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 118.127484][ T6034] tipc: Enabling of bearer rejected, failed to enable media [ 118.246751][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 118.255721][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.255749][ T9] usb 4-1: config 0 has no interface number 0 [ 118.279340][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 118.279374][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.279394][ T9] usb 4-1: Product: syz [ 118.279408][ T9] usb 4-1: Manufacturer: syz [ 118.279423][ T9] usb 4-1: SerialNumber: syz [ 118.348780][ T9] usb 4-1: config 0 descriptor?? [ 118.386000][ T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 118.386026][ T9] usb 4-1: selecting invalid altsetting 1 [ 118.386039][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 118.468875][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.469698][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 118.469785][ T9] usb 4-1: media controller created [ 118.580702][ T6032] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 118.597742][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.679111][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 118.679174][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 118.683989][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 118.814560][ T9] usb 4-1: USB disconnect, device number 2 [ 119.758539][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.866581][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.912043][ T31] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 119.912075][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.961241][ T31] usb 2-1: config 0 descriptor?? [ 120.022921][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 120.026027][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 120.026081][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.026110][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 120.026134][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.026155][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 120.026178][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 120.053997][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.054030][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.054048][ T9] usb 3-1: SerialNumber: syz [ 120.208322][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 120.209122][ T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 120.517893][ T5934] usb 3-1: USB disconnect, device number 2 [ 120.532910][ T31] hid-alps 0003:044E:120C.0001: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 120.770479][ T31] usb 2-1: USB disconnect, device number 2 [ 121.018678][ T6074] fido_id[6074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 121.149534][ T5164] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.279484][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.310975][ T5164] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.311012][ T5164] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.311055][ T5164] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.311078][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.325686][ T6077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.343945][ T5164] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.449185][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 121.453613][ T45] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 121.469751][ T45] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 121.469779][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.469796][ T45] usb 1-1: Product: syz [ 121.469808][ T45] usb 1-1: Manufacturer: syz [ 121.469820][ T45] usb 1-1: SerialNumber: syz [ 121.491931][ T45] usb 1-1: config 0 descriptor?? [ 121.566551][ T5922] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.588882][ T6086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.591890][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 121.591951][ T45] usb 1-1: setting power ON [ 121.592407][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 121.746717][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 121.759616][ T5922] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.759642][ T5922] usb 3-1: config 0 has no interface number 0 [ 121.770730][ T5922] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 121.770759][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.770776][ T5922] usb 3-1: Product: syz [ 121.770789][ T5922] usb 3-1: Manufacturer: syz [ 121.770802][ T5922] usb 3-1: SerialNumber: syz [ 121.774839][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.782227][ T6079] dvb-usb: bulk message failed: -22 (3/0) [ 121.786054][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 121.786112][ T45] usb 1-1: media controller created [ 121.833121][ T5922] usb 3-1: config 0 descriptor?? [ 121.866675][ T5922] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.866704][ T5922] usb 3-1: selecting invalid altsetting 1 [ 121.866720][ T5922] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.962197][ T5922] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.079674][ T6081] dvb-usb: bulk message failed: -22 (3/0) [ 122.079701][ T6081] dvb-usb: bulk message failed: -22 (3/0) [ 122.090251][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.141681][ T5922] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 122.141763][ T5922] usb 3-1: media controller created [ 122.267111][ T5164] usb 5-1: USB disconnect, device number 2 [ 122.277388][ T45] usb 1-1: selecting invalid altsetting 6 [ 122.277411][ T45] usb 1-1: digital interface selection failed (-22) [ 122.277426][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 122.278505][ T45] usb 1-1: setting power OFF [ 122.278614][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 122.278630][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 122.278641][ T45] (NULL device *): no alternate interface [ 122.328381][ T6091] gretap0: entered promiscuous mode [ 122.328577][ T6091] vlan2: entered promiscuous mode [ 122.353152][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.557046][ T5922] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 122.557118][ T5922] zl10353_read_register: readreg error (reg=127, ret==-71) [ 122.558224][ T5922] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 122.642106][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 122.746913][ T45] usb 1-1: USB disconnect, device number 3 [ 123.034567][ T5922] usb 3-1: USB disconnect, device number 3 [ 123.325827][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 123.325872][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 123.325942][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 123.397854][ T9] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 123.882417][ T6114] team0: entered allmulticast mode [ 123.882441][ T6114] team_slave_0: entered allmulticast mode [ 123.882465][ T6114] team_slave_1: entered allmulticast mode [ 123.968591][ T6114] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 124.028860][ T6112] fido_id[6112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.358074][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.516034][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.516088][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 125.516111][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.541595][ T31] usb 2-1: config 0 descriptor?? [ 126.020776][ T31] lenovo 0003:17EF:6062.0003: unknown main item tag 0x1 [ 126.079030][ T31] lenovo 0003:17EF:6062.0003: hidraw0: USB HID v0.04 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 126.224952][ T9] usb 2-1: USB disconnect, device number 3 [ 126.308428][ T6149] fido_id[6149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 127.171810][ T6174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.93'. [ 127.198553][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 128.048247][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.104'. [ 128.304468][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'. [ 128.642019][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 128.710816][ T6215] vlan2: entered promiscuous mode [ 128.710842][ T6215] bridge0: entered promiscuous mode [ 128.916681][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.069130][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.069184][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 129.069208][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.096764][ T45] usb 1-1: config 0 descriptor?? [ 129.122035][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 129.467108][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.558070][ T991] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.574316][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 129.574353][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 129.574379][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 129.586625][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 129.586666][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 129.586689][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 129.586713][ T45] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 129.610665][ T45] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 129.669464][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 129.684449][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 129.684483][ T31] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 129.684503][ T31] usb 3-1: Product: syz [ 129.684517][ T31] usb 3-1: SerialNumber: syz [ 129.700720][ T31] usb 3-1: config 0 descriptor?? [ 129.736583][ T991] usb 2-1: Using ep0 maxpacket: 8 [ 129.739594][ T991] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 129.739623][ T991] usb 2-1: config 0 has no interface number 0 [ 129.739674][ T991] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.739697][ T991] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 129.739723][ T991] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.739749][ T991] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.739792][ T991] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 129.739815][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.762364][ T31] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 129.764837][ T31] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 129.876739][ T31] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 129.876856][ T31] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 129.885636][ T5164] usb 1-1: USB disconnect, device number 4 [ 129.916746][ T991] usb 2-1: config 0 descriptor?? [ 130.122287][ T31] usb 3-1: USB disconnect, device number 4 [ 130.193083][ T991] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 130.387403][ T991] usb 2-1: USB disconnect, device number 4 [ 130.439976][ T991] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 130.844720][ T6248] netlink: 80 bytes leftover after parsing attributes in process `syz.2.127'. [ 130.844880][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.127'. [ 130.844893][ T6248] tipc: MTU too low for tipc bearer [ 131.470524][ T6268] [U]  [ 131.470581][ T6268] [U] K{‘ [ 131.471222][ T6268] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 131.474238][ T6268] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 131.475257][ T6268] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 131.522740][ T37] audit: type=1400 audit(1757622820.155:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6269 comm="syz.3.137" netif=wpan0 [ 131.548791][ T6268] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 131.581374][ T6268] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 131.592512][ T6268] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 131.593694][ T6268] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 131.629746][ T6268] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 131.688186][ T6268] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 131.693633][ T6268] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 131.693837][ T6268] [U] 22½“Æ©ÐÛ©X?0;3U± [ 131.731417][ T6268] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 131.734688][ T6268] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 131.744604][ T6268] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 131.745047][ T6268] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 131.755322][ T6268] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 131.755389][ T6268] [U] ¹ EC [ 131.761206][ T6268] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 131.831116][ T6266] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 133.207505][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.208510][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.386509][ T5164] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.565208][ T6313] syz.2.157 (6313) used greatest stack depth: 18968 bytes left [ 133.566559][ T5164] usb 4-1: Using ep0 maxpacket: 32 [ 133.569545][ T5164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.569576][ T5164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.569617][ T5164] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.569640][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.638630][ T5164] usb 4-1: config 0 descriptor?? [ 133.666610][ T5164] hub 4-1:0.0: USB hub found [ 133.904433][ T5164] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 134.111605][ T5164] usbhid 4-1:0.0: can't add hid device: -71 [ 134.111750][ T5164] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.205398][ T6328] netlink: 277 bytes leftover after parsing attributes in process `syz.4.164'. [ 134.220018][ T5164] usb 4-1: USB disconnect, device number 3 [ 134.452860][ T991] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 134.609592][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 134.609631][ T991] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.609684][ T991] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 134.609709][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.618908][ T991] usb 1-1: config 0 descriptor?? [ 134.619986][ T6327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.971314][ T5164] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.116629][ T5164] usb 2-1: Using ep0 maxpacket: 8 [ 135.119657][ T5164] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 135.119709][ T5164] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 135.119732][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.172883][ T5164] usb 2-1: config 0 descriptor?? [ 135.295746][ T991] usb 1-1: string descriptor 0 read error: -71 [ 135.311730][ T991] uclogic 0003:5543:0047.0005: failed retrieving string descriptor #200: -71 [ 135.311794][ T991] uclogic 0003:5543:0047.0005: failed retrieving pen parameters: -71 [ 135.311811][ T991] uclogic 0003:5543:0047.0005: failed probing pen v2 parameters: -71 [ 135.311869][ T991] uclogic 0003:5543:0047.0005: failed probing parameters: -71 [ 135.311998][ T991] uclogic 0003:5543:0047.0005: probe with driver uclogic failed with error -71 [ 135.467246][ T991] usb 1-1: USB disconnect, device number 5 [ 135.628667][ T5164] corsair 0003:1B1C:1B09.0006: unbalanced collection at end of report description [ 135.629803][ T5164] corsair 0003:1B1C:1B09.0006: parse failed [ 135.629922][ T5164] corsair 0003:1B1C:1B09.0006: probe with driver corsair failed with error -22 [ 135.811338][ T5164] usb 2-1: USB disconnect, device number 5 [ 136.219925][ T6359] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 136.219994][ T6359] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 136.220921][ T6359] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 136.221101][ T6359] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 136.221158][ T6359] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 136.221213][ T6359] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 136.221367][ T6359] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 136.221422][ T6359] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 136.221481][ T6359] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 136.221593][ T6359] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 136.221647][ T6359] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 136.221700][ T6359] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 136.221800][ T6359] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 136.221853][ T6359] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 136.221908][ T6359] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 136.221961][ T6359] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 136.222016][ T6359] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 136.222070][ T6359] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 138.181373][ T6411] netlink: 'syz.0.204': attribute type 23 has an invalid length. [ 138.306576][ T5930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.431995][ T6416] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.471602][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 138.474110][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.474143][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.474177][ T5930] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 138.474199][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.570966][ T5930] usb 3-1: config 0 descriptor?? [ 139.046892][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 139.046935][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 139.046961][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 139.046986][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 139.047011][ T5930] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 139.053316][ T5930] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 139.146641][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 139.263442][ T5934] usb 3-1: USB disconnect, device number 5 [ 139.299154][ T9] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 139.299181][ T9] usb 4-1: config 0 has no interface number 0 [ 139.326769][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 139.326804][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.326824][ T9] usb 4-1: Product: syz [ 139.326838][ T9] usb 4-1: Manufacturer: syz [ 139.326851][ T9] usb 4-1: SerialNumber: syz [ 139.378221][ T9] usb 4-1: config 0 descriptor?? [ 139.384460][ T6433] fido_id[6433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 139.652151][ T9] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 139.684101][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 139.684780][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 139.685627][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 139.813780][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 140.046541][ T5934] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.082316][ T9] usb 4-1: USB disconnect, device number 4 [ 140.086726][ T5930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.182728][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 140.183906][ T9] keyspan 4-1:0.133: device disconnected [ 140.196549][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 140.231228][ T5934] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 140.231260][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.231279][ T5934] usb 2-1: Product: syz [ 140.231292][ T5934] usb 2-1: Manufacturer: syz [ 140.231306][ T5934] usb 2-1: SerialNumber: syz [ 140.261548][ T5934] usb 2-1: config 0 descriptor?? [ 140.272418][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 140.275539][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.275590][ T5930] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 140.275613][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.322506][ T5930] usb 5-1: config 0 descriptor?? [ 140.779071][ T5930] kye 0003:0458:4018.0008: unbalanced collection at end of report description [ 140.779291][ T5934] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 140.779313][ T5934] airspy 2-1:0.0: Could not detect board [ 140.779450][ T5934] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 140.780048][ T5930] kye 0003:0458:4018.0008: parse failed [ 140.780123][ T5930] kye 0003:0458:4018.0008: probe with driver kye failed with error -22 [ 140.812543][ T5934] usb 2-1: USB disconnect, device number 6 [ 140.972273][ T31] usb 5-1: USB disconnect, device number 3 [ 141.052814][ T6457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.423024][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.590747][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.590785][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.590824][ T45] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 141.590848][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.641609][ T45] usb 1-1: config 0 descriptor?? [ 142.280367][ T45] hid-led 0003:0FC5:B080.0009: probe with driver hid-led failed with error -71 [ 142.320389][ T45] usb 1-1: USB disconnect, device number 6 [ 142.376662][ T5930] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.540229][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.540265][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.540305][ T5930] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 142.540328][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.563050][ T6488] ======================================================= [ 142.563050][ T6488] WARNING: The mand mount option has been deprecated and [ 142.563050][ T6488] and is ignored by this kernel. Remove the mand [ 142.563050][ T6488] option from the mount to silence this warning. [ 142.563050][ T6488] ======================================================= [ 142.625011][ T5930] usb 3-1: config 0 descriptor?? [ 142.785912][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 143.025915][ T6492] capability: warning: `syz.3.241' uses deprecated v2 capabilities in a way that may be insecure [ 143.110519][ T5930] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x2 [ 143.128019][ T5930] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 143.327636][ T5930] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 143.327699][ T5930] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 143.353928][ T5930] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 143.416519][ T5930] usb 3-1: USB disconnect, device number 6 [ 143.520950][ T37] audit: type=1800 audit(1757622832.135:3): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.246" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 143.642873][ T6500] fido_id[6500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 143.716572][ T5922] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 143.879717][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.879773][ T5922] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 143.879797][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.907227][ T5922] usb 2-1: config 0 descriptor?? [ 144.409970][ T5922] waltop 0003:172F:0502.000B: unknown main item tag 0x2 [ 144.410011][ T5922] waltop 0003:172F:0502.000B: item fetching failed at offset 4/5 [ 144.411010][ T5922] waltop 0003:172F:0502.000B: probe with driver waltop failed with error -22 [ 144.563171][ T6524] netlink: 56 bytes leftover after parsing attributes in process `syz.0.256'. [ 144.563337][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 144.618179][ T991] usb 2-1: USB disconnect, device number 7 [ 145.536638][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.699338][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.699375][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.699413][ T31] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 145.699436][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.708618][ T31] usb 1-1: config 0 descriptor?? [ 145.742353][ T6549] Bluetooth: MGMT ver 1.23 [ 146.127165][ T37] audit: type=1326 audit(1757622834.755:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 146.127228][ T37] audit: type=1326 audit(1757622834.765:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 146.150473][ T37] audit: type=1326 audit(1757622834.785:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 146.150856][ T37] audit: type=1326 audit(1757622834.795:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 146.160583][ T37] audit: type=1326 audit(1757622834.805:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 146.160632][ T37] audit: type=1326 audit(1757622834.805:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 146.178225][ T31] stadia 0003:18D1:9400.000C: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 146.178257][ T31] stadia 0003:18D1:9400.000C: no inputs found [ 146.178268][ T31] stadia 0003:18D1:9400.000C: force feedback init failed [ 146.362139][ T31] usb 1-1: USB disconnect, device number 7 [ 146.503314][ T6557] capability: warning: `syz.2.271' uses 32-bit capabilities (legacy support in use) [ 146.599963][ T6559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.697167][ T6555] fido_id[6555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 147.178833][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.276'. [ 147.545825][ T6582] netlink: 152 bytes leftover after parsing attributes in process `syz.4.281'. [ 147.772516][ T6588] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 148.068639][ T6592] sctp: [Deprecated]: syz.1.287 (pid 6592) Use of int in max_burst socket option. [ 148.068639][ T6592] Use struct sctp_assoc_value instead [ 148.109850][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.173513][ T6596] sp0: Synchronizing with TNC [ 148.196828][ T6596] sp0: Found TNC [ 148.200378][ T6595] [U] è` [ 148.288228][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.288266][ T31] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.288309][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.288331][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.398304][ T6590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.479251][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.662259][ T6604] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.346864][ T45] usb 1-1: USB disconnect, device number 8 [ 149.599972][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 149.688449][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.008042][ T6628] program syz.2.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.572692][ T6639] bridge0: entered promiscuous mode [ 150.573294][ T6639] macsec1: entered promiscuous mode [ 150.992576][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 153.146599][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.306579][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 153.319255][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 153.319283][ T31] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 153.319301][ T31] usb 4-1: Product: syz [ 153.319314][ T31] usb 4-1: SerialNumber: syz [ 153.332012][ T31] usb 4-1: config 0 descriptor?? [ 153.383971][ T31] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 153.414995][ T31] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 153.415682][ T31] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 153.415792][ T31] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 153.597497][ T31] usb 4-1: USB disconnect, device number 5 [ 154.007161][ T991] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.160259][ T991] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.160287][ T991] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.164680][ T991] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.164728][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.164748][ T991] usb 1-1: SerialNumber: syz [ 154.501404][ T991] usb 1-1: 0:2 : does not exist [ 154.570870][ T991] usb 1-1: USB disconnect, device number 9 [ 154.897469][ T6740] sp0: Synchronizing with TNC [ 154.979588][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.164219][ T6769] bridge0: entered promiscuous mode [ 156.188779][ T6769] bridge0: port 3(macsec1) entered blocking state [ 156.194044][ T6769] bridge0: port 3(macsec1) entered disabled state [ 156.194305][ T6769] macsec1: entered allmulticast mode [ 156.194322][ T6769] bridge0: entered allmulticast mode [ 156.258568][ T6769] macsec1: left allmulticast mode [ 156.258595][ T6769] bridge0: left allmulticast mode [ 156.289739][ T6769] bridge0: left promiscuous mode [ 156.930252][ T37] audit: type=1326 audit(1757622845.575:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6786 comm="syz.4.377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0343e3eba9 code=0x0 [ 156.958262][ T6789] xt_l2tp: invalid flags combination: 8 [ 157.210845][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 157.779982][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.387'. [ 158.467157][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.493987][ T6831] devtmpfs: Too few inodes for current use [ 158.616985][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 158.620942][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.622933][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 158.648510][ T9] usb 4-1: string descriptor 0 read error: -22 [ 158.648690][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 158.648831][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.717082][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 158.738566][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.739038][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 158.739095][ T9] usb 4-1: media controller created [ 158.844799][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.020052][ T5853] Bluetooth: Wrong link type (-71) [ 159.645572][ T1099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.918600][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 160.092855][ T9] usb 4-1: USB disconnect, device number 6 [ 160.195813][ T1099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.522305][ T37] audit: type=1326 audit(1757622849.165:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6851 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 160.522364][ T37] audit: type=1326 audit(1757622849.165:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6851 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 160.549313][ T37] audit: type=1326 audit(1757622849.195:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6851 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 160.549366][ T37] audit: type=1326 audit(1757622849.195:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6851 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 160.549405][ T37] audit: type=1326 audit(1757622849.195:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6851 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 160.676069][ T6854] futex_wake_op: syz.0.410 tries to shift op by -1; fix this program [ 161.005998][ T1099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.048043][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.053909][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.056008][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.097816][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.098968][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.161841][ T6865] tipc: Failed to obtain node identity [ 161.161878][ T6865] tipc: Enabling of bearer rejected, failed to enable media [ 161.207689][ T6858] syz.3.412 (6858) used greatest stack depth: 16696 bytes left [ 161.281031][ T6869] mmap: syz.3.416 (6869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.655331][ T37] audit: type=1400 audit(1757622850.285:16): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6874 comm="syz.1.419" src=1 dest=20000 netif=wpan0 [ 161.783647][ T1099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.916925][ T6883] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.421'. [ 161.918471][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.423'. [ 162.896222][ T6905] sctp: [Deprecated]: syz.1.430 (pid 6905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.896222][ T6905] Use struct sctp_sack_info instead [ 163.212219][ T5853] Bluetooth: hci2: command tx timeout [ 163.496618][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.512854][ T1099] bridge_slave_1: left allmulticast mode [ 163.513303][ T1099] bridge_slave_1: left promiscuous mode [ 163.516185][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.646577][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 163.653113][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.653142][ T45] usb 2-1: config 0 has no interface number 0 [ 163.667188][ T45] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 163.667217][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.667234][ T45] usb 2-1: Product: syz [ 163.667246][ T45] usb 2-1: Manufacturer: syz [ 163.667259][ T45] usb 2-1: SerialNumber: syz [ 163.675158][ T1099] bridge_slave_0: left allmulticast mode [ 163.675189][ T1099] bridge_slave_0: left promiscuous mode [ 163.675468][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.688652][ T45] usb 2-1: config 0 descriptor?? [ 163.725286][ T45] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 163.725311][ T45] usb 2-1: selecting invalid altsetting 1 [ 163.725325][ T45] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 163.749742][ T45] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.750239][ T45] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 163.750289][ T45] usb 2-1: media controller created [ 163.826250][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.010648][ T45] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 164.010712][ T45] zl10353_read_register: readreg error (reg=127, ret==-71) [ 164.011228][ T45] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 164.121683][ T45] usb 2-1: USB disconnect, device number 8 [ 164.237093][ T5841] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 164.390490][ T5841] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 164.390521][ T5841] usb 4-1: config 0 has no interface number 0 [ 164.394802][ T5841] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 164.394829][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.394846][ T5841] usb 4-1: Product: syz [ 164.394859][ T5841] usb 4-1: Manufacturer: syz [ 164.394873][ T5841] usb 4-1: SerialNumber: syz [ 164.408175][ T5841] usb 4-1: config 0 descriptor?? [ 164.448109][ T6920] Falling back ldisc for ptm0. [ 164.682310][ T5841] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 164.682491][ T5841] usb 4-1: No valid video chain found. [ 164.693332][ T5841] usb 4-1: USB disconnect, device number 7 [ 164.862888][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 165.286510][ T5853] Bluetooth: hci2: command tx timeout [ 165.461278][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.451'. [ 165.461303][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'. [ 165.461322][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.451'. [ 165.461381][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.451'. [ 165.719577][ T6952] delete_channel: no stack [ 165.721302][ T6951] delete_channel: no stack [ 165.834890][ T37] audit: type=1326 audit(1757622854.475:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 165.835213][ T37] audit: type=1326 audit(1757622854.475:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 165.867982][ T37] audit: type=1326 audit(1757622854.505:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 165.868036][ T37] audit: type=1326 audit(1757622854.505:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 165.868076][ T37] audit: type=1326 audit(1757622854.505:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 165.868114][ T37] audit: type=1326 audit(1757622854.505:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 165.923471][ T37] audit: type=1326 audit(1757622854.565:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 165.923522][ T37] audit: type=1326 audit(1757622854.565:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6956 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0343e3eba9 code=0x7ffc0000 [ 167.016582][ T991] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.181261][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.181295][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.181336][ T991] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 167.181360][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.192604][ T991] usb 4-1: config 0 descriptor?? [ 167.356597][ T5853] Bluetooth: hci2: command tx timeout [ 167.399363][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.511678][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.552226][ T1099] bond0 (unregistering): Released all slaves [ 167.642921][ T991] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 167.642962][ T991] cypress 0003:04B4:DE61.000D: unknown main item tag 0x0 [ 167.663898][ T991] cypress 0003:04B4:DE61.000D: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 167.720499][ T6930] bridge0: entered promiscuous mode [ 167.720754][ T6930] macvlan2: entered promiscuous mode [ 167.872787][ T5164] usb 4-1: USB disconnect, device number 8 [ 167.932333][ T6955] bridge0: port 3(macsec1) entered blocking state [ 167.932497][ T6955] bridge0: port 3(macsec1) entered disabled state [ 167.932701][ T6955] macsec1: entered allmulticast mode [ 167.932716][ T6955] bridge0: entered allmulticast mode [ 167.965051][ T6991] fido_id[6991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 168.080799][ T6955] macsec1: left allmulticast mode [ 168.080823][ T6955] bridge0: left allmulticast mode [ 168.116739][ T6995] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 168.116769][ T6995] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.176242][ T6995] vhci_hcd vhci_hcd.0: Device attached [ 168.276723][ T1099] tipc: Left network mode [ 168.293619][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 168.327392][ T5922] vhci_hcd: vhci_device speed not set [ 168.386577][ T45] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 168.388769][ T5922] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 168.559848][ T45] usb 1-1: config 0 has no interfaces? [ 168.559890][ T45] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.559915][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.612598][ T45] usb 1-1: config 0 descriptor?? [ 168.831869][ T6997] vhci_hcd: unknown pdu 1 [ 168.836336][ T45] usb 1-1: USB disconnect, device number 10 [ 168.863355][ T1584] vhci_hcd: stop threads [ 168.880502][ T1584] vhci_hcd: release socket [ 168.896748][ T1584] vhci_hcd: disconnect device [ 168.911443][ T5922] vhci_hcd: vhci_device speed not set [ 169.067370][ T37] audit: type=1400 audit(1757622857.705:25): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7009 comm="syz.4.478" src=1 dest=20000 netif=wpan0 [ 169.216678][ T991] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 169.374570][ T991] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.374600][ T991] usb 2-1: config 0 has no interface number 0 [ 169.374653][ T991] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 169.374677][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.396637][ T991] usb 2-1: config 0 descriptor?? [ 169.411893][ T991] usb 2-1: selecting invalid altsetting 1 [ 169.424398][ T991] dvb_ttusb_budget: ttusb_init_controller: error [ 169.424419][ T991] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 169.436656][ T5853] Bluetooth: hci2: command tx timeout [ 169.670423][ T7015] mkiss: ax0: crc mode is auto. [ 169.828835][ T991] DVB: Unable to find symbol cx22700_attach() [ 169.909709][ T991] DVB: Unable to find symbol tda10046_attach() [ 169.909726][ T991] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 169.959225][ T991] usb 2-1: USB disconnect, device number 9 [ 171.830036][ T991] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.989409][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 171.989466][ T991] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 171.989489][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.004259][ T991] usb 5-1: config 0 descriptor?? [ 172.211942][ T1099] hsr_slave_0: left promiscuous mode [ 172.255340][ T1099] hsr_slave_1: left promiscuous mode [ 172.263219][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.264174][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.307113][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.307149][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.464081][ T991] logitech 0003:046D:C626.000E: nested delimiters [ 172.464104][ T991] logitech 0003:046D:C626.000E: item 0 4 2 10 parsing failed [ 172.468260][ T991] logitech 0003:046D:C626.000E: parse failed [ 172.468471][ T991] logitech 0003:046D:C626.000E: probe with driver logitech failed with error -22 [ 172.526078][ T1099] veth1_macvtap: left promiscuous mode [ 172.526304][ T1099] veth0_macvtap: left promiscuous mode [ 172.539790][ T1099] veth1_vlan: left promiscuous mode [ 172.539906][ T1099] veth0_vlan: left promiscuous mode [ 172.646583][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.652440][ T31] usb 5-1: USB disconnect, device number 4 [ 172.800127][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.800181][ T45] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 172.800205][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.839232][ T45] usb 4-1: config 0 descriptor?? [ 173.321427][ T45] steelseries 0003:1038:12B6.000F: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 173.608542][ T45] steelseries 0003:1038:12B6.000F: hid_hw_raw_request() failed with -71 [ 173.701995][ T45] usb 4-1: USB disconnect, device number 9 [ 174.149342][ T7099] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.508'. [ 176.048797][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 176.248938][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 178.670109][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.675952][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.676341][ T6862] bridge_slave_0: entered allmulticast mode [ 178.700918][ T6862] bridge_slave_0: entered promiscuous mode [ 178.989911][ T7097] kthread_run failed with err -4 [ 179.012251][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.012425][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.012767][ T6862] bridge_slave_1: entered allmulticast mode [ 179.046816][ T6862] bridge_slave_1: entered promiscuous mode [ 179.596951][ T5841] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 179.631351][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.655923][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.761794][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.761841][ T5841] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 179.761854][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.797017][ T5841] usb 4-1: config 0 descriptor?? [ 180.279971][ T5841] hid-corsair-void 0003:1B1C:0A0F.0010: item fetching failed at offset 0/3 [ 180.280882][ T5841] hid-corsair-void 0003:1B1C:0A0F.0010: parse failed (reason: -22) [ 180.280996][ T5841] hid-corsair-void 0003:1B1C:0A0F.0010: probe with driver hid-corsair-void failed with error -22 [ 180.416258][ T7148] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 180.437324][ T5841] usb 4-1: USB disconnect, device number 10 [ 180.487821][ T6862] team0: Port device team_slave_0 added [ 180.505879][ T6862] team0: Port device team_slave_1 added [ 180.877604][ T7159] sctp: [Deprecated]: syz.0.533 (pid 7159) Use of int in maxseg socket option. [ 180.877604][ T7159] Use struct sctp_assoc_value instead [ 181.014648][ T7161] tipc: Started in network mode [ 181.014681][ T7161] tipc: Node identity ac141441, cluster identity 4711 [ 181.044330][ T7161] tipc: Enabled bearer , priority 1 [ 181.046046][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.046061][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.046088][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.187960][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.187991][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.188018][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.841874][ T6862] hsr_slave_0: entered promiscuous mode [ 181.857810][ T6862] hsr_slave_1: entered promiscuous mode [ 181.866712][ T6862] debugfs: 'hsr0' already exists in 'hsr' [ 181.866741][ T6862] Cannot create hsr debugfs directory [ 181.896596][ T9] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 182.059306][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 182.059370][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 182.059397][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.059423][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 182.059449][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 182.063859][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 182.063919][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 182.063945][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.063971][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 182.063997][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 182.116550][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 182.116614][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 182.116641][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.116664][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 182.116690][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 182.139417][ T31] tipc: Node number set to 2886997057 [ 182.245268][ T9] usb 5-1: string descriptor 0 read error: -22 [ 182.245457][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 182.245481][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.305884][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 182.599113][ T991] usb 5-1: USB disconnect, device number 5 [ 183.169621][ T7213] program syz.3.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.170002][ T7213] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 183.919398][ T7231] Illegal XDP return value 65535 on prog (id 46) dev N/A, expect packet loss! [ 183.966733][ T7235] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 184.174460][ T6862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.275093][ T6862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.333432][ T6862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.446681][ T991] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.467325][ T6862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.626632][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 184.629897][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.629929][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.629971][ T991] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.629995][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.713576][ T991] usb 4-1: config 0 descriptor?? [ 184.721326][ T991] hub 4-1:0.0: USB hub found [ 185.010714][ T991] hub 4-1:0.0: 1 port detected [ 185.215918][ T991] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 185.215946][ T991] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 185.234074][ T991] usbhid 4-1:0.0: can't add hid device: -71 [ 185.234222][ T991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 185.269395][ T991] usb 4-1: USB disconnect, device number 11 [ 185.548197][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.629037][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.652655][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.652881][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.702047][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.702197][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.102449][ T7276] can0: slcan on ptm0. [ 186.375991][ T7273] can0 (unregistered): slcan off ptm0. [ 187.392097][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.779140][ T7326] random: crng reseeded on system resumption [ 188.623778][ T6862] veth0_vlan: entered promiscuous mode [ 188.681842][ T6862] veth1_vlan: entered promiscuous mode [ 188.929287][ T6862] veth0_macvtap: entered promiscuous mode [ 188.945156][ T6862] veth1_macvtap: entered promiscuous mode [ 189.071303][ T5164] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.124211][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.208032][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.216636][ T5164] usb 1-1: Using ep0 maxpacket: 32 [ 189.230933][ T5164] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 189.230963][ T5164] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 189.230982][ T5164] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 189.231004][ T5164] usb 1-1: config 1 has no interface number 0 [ 189.231056][ T5164] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.231083][ T5164] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 189.231128][ T5164] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 189.231151][ T5164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.286511][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.286769][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.287369][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.287858][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.394723][ T5164] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 189.650654][ T5164] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 190.152765][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.152799][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.341614][ T5922] usb 1-1: USB disconnect, device number 11 [ 190.372661][ T5922] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 190.728827][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.728853][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.247320][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.419116][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.419146][ T31] usb 5-1: config 0 has no interface number 0 [ 191.440662][ T5922] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.454357][ T31] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 191.454389][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.454409][ T31] usb 5-1: Product: syz [ 191.454426][ T31] usb 5-1: Manufacturer: syz [ 191.454441][ T31] usb 5-1: SerialNumber: syz [ 191.545541][ T31] usb 5-1: config 0 descriptor?? [ 191.628191][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 191.631652][ T5922] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 191.631682][ T5922] usb 2-1: config 0 has no interface number 0 [ 191.634849][ T5922] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 191.634877][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 191.634897][ T5922] usb 2-1: Product: syz [ 191.634911][ T5922] usb 2-1: Manufacturer: syz [ 191.745873][ T5922] usb 2-1: config 0 descriptor?? [ 191.786312][ T31] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 191.872945][ T31] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.873408][ T31] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 191.873463][ T31] usb 5-1: media controller created [ 192.039932][ T5934] usb 2-1: USB disconnect, device number 10 [ 192.102668][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.193524][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193563][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193594][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193792][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193819][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193843][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193868][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193893][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193919][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.193944][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 192.239244][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.620'. [ 192.331203][ T9] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.00 Device [syz0] on syz1 [ 192.641174][ T7417] fido_id[7417]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.643013][ T7420] openvswitch: netlink: nsh attribute has 65533 unknown bytes. [ 192.643053][ T7420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.828373][ T31] usb 5-1: USB disconnect, device number 6 [ 193.931986][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'. [ 193.956563][ T5844] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.111213][ T5844] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.111249][ T5844] usb 6-1: config 0 interface 0 has no altsetting 0 [ 194.111286][ T5844] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 194.111309][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.175220][ T5844] usb 6-1: config 0 descriptor?? [ 194.631552][ T5844] lenovo 0003:17EF:6067.0012: item fetching failed at offset 0/2 [ 194.632534][ T5844] lenovo 0003:17EF:6067.0012: hid_parse failed [ 194.632613][ T5844] lenovo 0003:17EF:6067.0012: probe with driver lenovo failed with error -22 [ 194.661605][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.661695][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.859729][ T9] usb 6-1: USB disconnect, device number 2 [ 195.012292][ T7487] IPVS: Error connecting to the multicast addr [ 195.526703][ T991] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 195.597019][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 195.682650][ T991] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 195.682679][ T991] usb 4-1: config 0 has no interface number 0 [ 195.692003][ T991] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 195.692032][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.692049][ T991] usb 4-1: Product: syz [ 195.692062][ T991] usb 4-1: Manufacturer: syz [ 195.692075][ T991] usb 4-1: SerialNumber: syz [ 195.722887][ T991] usb 4-1: config 0 descriptor?? [ 195.996681][ T991] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 196.006236][ T991] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 196.010482][ T991] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 196.010541][ T991] usb 4-1: media controller created [ 196.026325][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.188123][ T991] DVB: Unable to find symbol dib7000p_attach() [ 196.188140][ T991] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 196.188154][ T991] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 196.189419][ T991] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 196.189481][ T991] usb 4-1: media controller created [ 196.194134][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.283592][ T991] dib0700: the master dib7090 has to be initialized first [ 196.283610][ T991] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 196.401925][ T991] rc_core: IR keymap rc-dib0700-rc5 not found [ 196.401948][ T991] Registered IR keymap rc-empty [ 196.402504][ T991] dvb-usb: could not initialize remote control. [ 196.402513][ T991] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 196.696632][ T991] usb 4-1: USB disconnect, device number 12 [ 196.854005][ T991] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 197.375830][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 198.102488][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.685'. [ 198.102517][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.685'. [ 198.432644][ T7575] UBIFS error (pid: 7575): cannot open "c:::", error -22 [ 199.289706][ T37] audit: type=1400 audit(1757622887.935:26): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7602 comm="syz.4.701" src=1 dest=20000 netif=wpan0 [ 199.647121][ T991] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 199.796499][ T991] usb 1-1: Using ep0 maxpacket: 16 [ 199.815680][ T991] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 199.815724][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.815744][ T991] usb 1-1: Product: syz [ 199.815759][ T991] usb 1-1: Manufacturer: syz [ 199.815773][ T991] usb 1-1: SerialNumber: syz [ 199.869173][ T991] usb 1-1: config 0 descriptor?? [ 199.873775][ T991] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 199.910012][ T7621] netlink: 'syz.4.709': attribute type 3 has an invalid length. [ 199.910035][ T7621] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 199.910049][ T7621] netlink: 212 bytes leftover after parsing attributes in process `syz.4.709'. [ 200.355696][ T991] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 200.386575][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.537596][ T991] usb 1-1: USB disconnect, device number 12 [ 200.564762][ T9] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 200.564796][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.599416][ T991] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 200.600317][ T991] visor 1-1:0.0: device disconnected [ 200.605733][ T9] usb 6-1: config 0 descriptor?? [ 200.675201][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 200.901018][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 200.901043][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 200.946521][ T5844] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 201.067017][ T9] gspca_cpia1: usb_control_msg 03, error -32 [ 201.067371][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 201.068005][ T9] gspca_cpia1: usb_control_msg 03, error -32 [ 201.069607][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 201.070066][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 201.070079][ T9] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 201.096627][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 201.102491][ T5844] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 201.102517][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.125827][ T5844] usb 2-1: config 0 descriptor?? [ 201.146948][ T9] usb 6-1: USB disconnect, device number 3 [ 201.286657][ T991] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 201.463614][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.463669][ T991] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 201.463692][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.541644][ T991] usb 5-1: config 0 descriptor?? [ 201.660722][ T5844] hid_parser_main: 33 callbacks suppressed [ 201.660750][ T5844] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 201.660786][ T5844] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 201.660812][ T5844] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 201.660836][ T5844] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 201.660863][ T5844] magicmouse 0003:05AC:0269.0013: unknown main item tag 0x0 [ 201.679223][ T5844] magicmouse 0003:05AC:0269.0013: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 201.829742][ T5922] usb 2-1: USB disconnect, device number 11 [ 202.058292][ T991] steelseries 0003:1038:12B6.0014: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 202.246611][ T991] steelseries 0003:1038:12B6.0014: hid_hw_raw_request() failed with -71 [ 202.270425][ T991] usb 5-1: USB disconnect, device number 7 [ 202.312482][ T5841] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 202.338230][ T7661] fido_id[7661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 202.456649][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 202.461730][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.461802][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 202.461829][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.461849][ T5841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.461872][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.461915][ T5841] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 202.461938][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.551118][ T5841] usb 1-1: config 0 descriptor?? [ 202.772694][ T7671] delete_channel: no stack [ 202.879428][ T9] usb 1-1: USB disconnect, device number 13 [ 203.123608][ T7673] fido_id[7673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 204.126467][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 204.800979][ T7726] netlink: 'syz.4.748': attribute type 4 has an invalid length. [ 206.510870][ T5922] kernel write not supported for file /dsp1 (pid: 5922 comm: kworker/1:4) [ 207.252346][ T7786] netlink: 10 bytes leftover after parsing attributes in process `syz.5.774'. [ 207.256756][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.406504][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 207.415879][ T45] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 207.415911][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.415932][ T45] usb 5-1: Product: syz [ 207.415946][ T45] usb 5-1: Manufacturer: syz [ 207.415960][ T45] usb 5-1: SerialNumber: syz [ 207.443562][ T45] usb 5-1: config 0 descriptor?? [ 207.495514][ T45] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.561831][ T45] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 207.629802][ T7421] udevd[7421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.702770][ T5922] usb 5-1: USB disconnect, device number 8 [ 208.608324][ T7817] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (28928) [ 208.608355][ T7817] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 210.196582][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 210.357741][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.357803][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 210.357827][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.375386][ T31] usb 6-1: config 0 descriptor?? [ 210.556551][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 210.733223][ T45] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.733323][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.733344][ T45] usb 5-1: Product: syz [ 210.733359][ T45] usb 5-1: Manufacturer: syz [ 210.733373][ T45] usb 5-1: SerialNumber: syz [ 210.889905][ T45] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.932662][ T31] kye 0003:0458:501B.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 210.991119][ T31] kye 0003:0458:501B.0015: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.5-1/input0 [ 210.991155][ T31] kye 0003:0458:501B.0015: tablet-enabling feature report not found [ 210.991170][ T31] kye 0003:0458:501B.0015: tablet enabling failed [ 211.296188][ T5922] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 211.317149][ T31] usb 6-1: USB disconnect, device number 4 [ 211.480499][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 211.637165][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 211.637191][ T7895] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 211.758716][ T7897] fido_id[7897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 212.941211][ T5922] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 212.941636][ T5922] ath9k_htc: Failed to initialize the device [ 214.276312][ T7931] bridge_slave_0: default FDB implementation only supports local addresses [ 214.584598][ T7936] tipc: Can't bind to reserved service type 0 [ 215.587516][ T7953] Zero length message leads to an empty skb [ 215.949964][ T31] usb 5-1: USB disconnect, device number 9 [ 215.986626][ T31] usb 5-1: ath9k_htc: USB layer deinitialized [ 216.320082][ T7961] program syz.4.842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.910366][ T5930] kernel write not supported for file /vcs (pid: 5930 comm: kworker/1:5) [ 217.098030][ T5841] kernel write not supported for file /89/comm (pid: 5841 comm: kworker/0:3) [ 217.407766][ T7987] netlink: 72 bytes leftover after parsing attributes in process `syz.4.851'. [ 217.824892][ T37] audit: type=1326 audit(1757622906.465:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ef63eba9 code=0x7ffc0000 [ 217.883681][ T37] audit: type=1326 audit(1757622906.505:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ef63eba9 code=0x7ffc0000 [ 217.884450][ T37] audit: type=1326 audit(1757622906.525:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc2ef63eba9 code=0x7ffc0000 [ 217.884500][ T37] audit: type=1326 audit(1757622906.525:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ef63eba9 code=0x7ffc0000 [ 217.884555][ T37] audit: type=1326 audit(1757622906.525:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ef63eba9 code=0x7ffc0000 [ 217.888429][ T37] audit: type=1326 audit(1757622906.535:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fc2ef63eba9 code=0x7ffc0000 [ 217.888479][ T37] audit: type=1326 audit(1757622906.535:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ef63eba9 code=0x7ffc0000 [ 217.888518][ T37] audit: type=1326 audit(1757622906.535:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.3.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ef63eba9 code=0x7ffc0000 [ 218.081575][ T8005] loop4: detected capacity change from 0 to 524255232 [ 218.790965][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 218.793606][ T8025] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 218.793640][ T8025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.442308][ T8064] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 222.086553][ T991] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 222.256686][ T991] usb 6-1: Using ep0 maxpacket: 32 [ 222.261354][ T991] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 222.261384][ T991] usb 6-1: config 0 has no interface number 0 [ 222.261440][ T991] usb 6-1: config 0 interface 12 has no altsetting 0 [ 222.268758][ T991] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 222.268787][ T991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.268804][ T991] usb 6-1: Product: syz [ 222.268817][ T991] usb 6-1: Manufacturer: syz [ 222.268829][ T991] usb 6-1: SerialNumber: syz [ 222.284675][ T991] usb 6-1: config 0 descriptor?? [ 222.327210][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 222.327253][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 222.327279][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 222.327306][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 222.935570][ T31] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 222.960425][ T31] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 222.978960][ T991] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 222.979015][ T991] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 222.979029][ T991] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 222.979126][ T991] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 223.054265][ T991] usb 6-1: USB disconnect, device number 5 [ 223.443534][ T8105] fido_id[8105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.553143][ T8110] sp0: Synchronizing with TNC [ 223.670590][ T8113] futex_wake_op: syz.1.903 tries to shift op by 32; fix this program [ 227.084052][ T8195] netlink: 112 bytes leftover after parsing attributes in process `syz.4.942'. [ 227.429157][ T37] audit: type=1800 audit(1757622916.075:35): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.944" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 227.507608][ T8204] netlink: 536 bytes leftover after parsing attributes in process `syz.1.946'. [ 229.033309][ T37] audit: type=1326 audit(1757622917.675:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8249 comm="syz.1.969" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f191f10eba9 code=0x0 [ 229.340568][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 229.927432][ T8271] sp0: Synchronizing with TNC [ 230.296534][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 230.474485][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 230.474514][ T9] usb 5-1: config 1 has no interface number 0 [ 230.474570][ T9] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 230.474595][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 230.474629][ T9] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.551113][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 230.551146][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.551166][ T9] usb 5-1: Product: syz [ 230.551180][ T9] usb 5-1: Manufacturer: syz [ 230.551194][ T9] usb 5-1: SerialNumber: syz [ 230.560980][ T8290] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 230.621975][ T8279] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.908961][ T8279] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.915013][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.990'. [ 231.136647][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 231.216177][ T8305] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 231.216259][ T8305] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 231.246151][ T9] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 231.326478][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 231.330910][ T31] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.330944][ T31] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.330965][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 231.331001][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 231.331025][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.346300][ T31] usb 4-1: config 0 descriptor?? [ 231.401403][ T9] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 231.402144][ T9] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 231.403310][ T9] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 231.403333][ T9] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 231.470060][ T9] usb 5-1: USB disconnect, device number 10 [ 231.491082][ T9] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 231.822969][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823008][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823034][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823059][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823085][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823111][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823137][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823162][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823188][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.823213][ T31] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 231.846704][ T5934] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 231.880172][ T31] apple 0003:05AC:0247.0017: unexpected long global item [ 231.893909][ T9] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 231.902254][ T31] apple 0003:05AC:0247.0017: parse failed [ 231.902370][ T31] apple 0003:05AC:0247.0017: probe with driver apple failed with error -22 [ 232.019325][ T5934] usb 2-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 232.019362][ T5934] usb 2-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.019384][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 232.019419][ T5934] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 232.019442][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.085390][ T31] usb 4-1: USB disconnect, device number 13 [ 232.113175][ T5934] usb 2-1: config 0 descriptor?? [ 232.552691][ T5934] sony 0003:054C:024B.0018: unbalanced delimiter at end of report description [ 232.553640][ T5934] sony 0003:054C:024B.0018: parse failed [ 232.553756][ T5934] sony 0003:054C:024B.0018: probe with driver sony failed with error -22 [ 232.778660][ T5934] usb 2-1: USB disconnect, device number 12 [ 233.542110][ T8344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 233.981935][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 234.238149][ T8358] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1019'. [ 234.238180][ T8358] netlink: 'syz.3.1019': attribute type 6 has an invalid length. [ 234.238194][ T8358] netlink: 'syz.3.1019': attribute type 5 has an invalid length. [ 234.238206][ T8358] netlink: 'syz.3.1019': attribute type 4 has an invalid length. [ 234.967513][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 235.136488][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 235.140806][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.140841][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.140880][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 235.140904][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.149482][ T31] usb 2-1: config 0 descriptor?? [ 235.581997][ T31] koneplus 0003:1E7D:2D51.0019: item fetching failed at offset 1/5 [ 235.582897][ T31] koneplus 0003:1E7D:2D51.0019: parse failed [ 235.582969][ T31] koneplus 0003:1E7D:2D51.0019: probe with driver koneplus failed with error -22 [ 235.792172][ T5934] usb 2-1: USB disconnect, device number 13 [ 236.016156][ T8388] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1032'. [ 236.588175][ T8398] comedi: No check for data length of config insn id 3 is implemented [ 236.588193][ T8398] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 236.588205][ T8398] comedi: Assuming n=15 is correct [ 237.092445][ T5930] hid_parser_main: 839 callbacks suppressed [ 237.108320][ T5930] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 237.108366][ T5930] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 237.108391][ T5930] hid-generic 0000:0004:0000.001A: unknown main item tag 0x0 [ 237.267000][ T5930] hid-generic 0000:0004:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 237.451995][ T8415] fido_id[8415]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 237.525806][ T8419] vivid-001: disconnect [ 237.526877][ T8418] vivid-001: reconnect [ 237.817384][ T8428] process 'syz.1.1051' launched './file1' with NULL argv: empty string added [ 239.751173][ T8479] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 239.878657][ T8483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.870450][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 240.870482][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 242.618901][ T8539] warning: `syz.4.1104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 243.766539][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 243.926316][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 243.933443][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.933494][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 243.933519][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.138208][ T31] usb 5-1: config 0 descriptor?? [ 245.030939][ T31] magicmouse 0003:05AC:0265.001B: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 245.168576][ T31] usb 5-1: USB disconnect, device number 11 [ 245.225582][ T8570] random: crng reseeded on system resumption [ 245.571438][ T5844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 245.726205][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 245.744605][ T5844] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 245.744640][ T5844] usb 2-1: config 0 has no interface number 0 [ 245.782441][ T5844] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 245.782474][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.782495][ T5844] usb 2-1: Product: syz [ 245.782509][ T5844] usb 2-1: Manufacturer: syz [ 245.782523][ T5844] usb 2-1: SerialNumber: syz [ 246.030002][ T5844] usb 2-1: config 0 descriptor?? [ 246.156698][ T5844] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 246.527924][ T5844] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 246.547597][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 246.800608][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 246.873226][ T5844] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 246.923253][ T8572] fido_id[8572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 246.946653][ T5844] usb 2-1: USB disconnect, device number 14 [ 247.098798][ T5844] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 247.205560][ T5844] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 247.253414][ T5844] quatech2 2-1:0.51: device disconnected [ 250.195518][ T8596] trusted_key: encrypted_key: key trusted:syz not found [ 251.248895][ T8610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1134'. [ 251.256272][ T8608] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1134'. [ 251.481469][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.506962][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.512125][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.514414][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.516011][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.829023][ T37] audit: type=1326 audit(1757622940.435:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 251.829085][ T37] audit: type=1326 audit(1757622940.475:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 251.829133][ T37] audit: type=1326 audit(1757622940.475:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 251.829179][ T37] audit: type=1326 audit(1757622940.475:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 251.934437][ T37] audit: type=1326 audit(1757622940.575:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 251.934504][ T37] audit: type=1326 audit(1757622940.575:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 251.934552][ T37] audit: type=1326 audit(1757622940.575:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8616 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191f10eba9 code=0x7ffc0000 [ 253.436662][ T8631] xt_HMARK: spi-set and port-set can't be combined [ 253.596752][ T5853] Bluetooth: hci5: command tx timeout [ 253.916356][ C0] sched: DL replenish lagged too much [ 254.029334][ T8611] chnl_net:caif_netlink_parms(): no params data found [ 255.676609][ T5853] Bluetooth: hci5: command tx timeout [ 256.163043][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.163162][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.757251][ T5853] Bluetooth: hci5: command tx timeout [ 259.859866][ T5853] Bluetooth: hci5: command tx timeout [ 262.018370][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.061990][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.074697][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.101535][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.102692][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.237393][ T5845] Bluetooth: hci6: command tx timeout [ 266.318903][ T5845] Bluetooth: hci6: command tx timeout [ 268.397009][ T5853] Bluetooth: hci6: command tx timeout [ 270.476957][ T5853] Bluetooth: hci6: command tx timeout [ 277.876530][ T5844] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 278.036644][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 278.039582][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 278.039614][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 278.039640][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 278.039664][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 278.039691][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 278.045344][ T5844] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 278.045373][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.045403][ T5844] usb 4-1: Product: syz [ 278.045418][ T5844] usb 4-1: Manufacturer: syz [ 278.045432][ T5844] usb 4-1: SerialNumber: syz [ 278.200344][ T5844] usb 4-1: config 0 descriptor?? [ 278.780241][ T5844] input input7: Device does not respond to id packet M [ 279.130040][ T5844] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 279.130103][ T5844] input input7: Device does not respond to id packet P [ 279.130618][ T5844] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 279.130669][ T5844] input input7: Device does not respond to id packet B [ 279.131343][ T5844] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 279.131393][ T5844] input input7: Device does not respond to id packet N [ 279.132070][ T5844] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 279.132616][ T5844] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 279.133122][ T5844] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 279.209586][ T5844] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 279.303764][ T5844] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 279.557880][ T5844] usb 4-1: USB disconnect, device number 14 [ 279.884947][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.908105][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.909517][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.932960][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.965490][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 283.439993][ T5845] Bluetooth: hci7: command tx timeout [ 285.217589][ T8740] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 285.517138][ T5845] Bluetooth: hci7: command tx timeout [ 287.596534][ T5853] Bluetooth: hci7: command tx timeout [ 289.676919][ T5853] Bluetooth: hci7: command tx timeout [ 299.516100][ T8611] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.516514][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.536795][ T8611] bridge_slave_0: entered allmulticast mode [ 299.541874][ T8611] bridge_slave_0: entered promiscuous mode [ 299.639653][ T8611] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.643134][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.643406][ T8611] bridge_slave_1: entered allmulticast mode [ 299.669071][ T8611] bridge_slave_1: entered promiscuous mode [ 301.319562][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.368919][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.374524][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.409449][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.411144][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.376539][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 302.536729][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 302.540569][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.540605][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.540628][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 302.540674][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 302.540698][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.646575][ T31] usb 2-1: config 0 descriptor?? [ 303.193426][ T31] logitech 0003:046D:C293.001C: unknown main item tag 0x0 [ 303.193466][ T31] logitech 0003:046D:C293.001C: unknown main item tag 0x0 [ 303.193493][ T31] logitech 0003:046D:C293.001C: unknown main item tag 0x0 [ 303.193520][ T31] logitech 0003:046D:C293.001C: unknown main item tag 0x0 [ 303.277085][ T31] logitech 0003:046D:C293.001C: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 303.277123][ T31] logitech 0003:046D:C293.001C: no inputs found [ 303.428238][ T31] usb 2-1: USB disconnect, device number 15 [ 303.516548][ T5853] Bluetooth: hci2: command tx timeout [ 303.644805][ T8777] fido_id[8777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 305.587530][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 305.596793][ T5853] Bluetooth: hci2: command tx timeout [ 305.766551][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 305.769674][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.769707][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.769731][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 305.769777][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 305.769801][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.923659][ T31] usb 2-1: config 0 descriptor?? [ 306.810558][ T31] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 306.810597][ T31] microsoft 0003:045E:07DA.001D: no inputs found [ 306.810611][ T31] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 306.965770][ T31] usb 2-1: USB disconnect, device number 16 [ 307.146056][ T8789] fido_id[8789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 307.678510][ T5853] Bluetooth: hci2: command tx timeout [ 309.758060][ T5853] Bluetooth: hci2: command tx timeout [ 310.882453][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.921402][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.922886][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.924395][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.925422][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.406916][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.407009][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.992151][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 321.020065][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 321.023005][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 321.063675][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 321.064616][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 321.356700][ T5845] Bluetooth: hci4: command tx timeout [ 323.116588][ T5845] Bluetooth: hci8: command tx timeout [ 323.439505][ T5845] Bluetooth: hci4: command tx timeout [ 325.198387][ T5845] Bluetooth: hci8: command tx timeout [ 325.525421][ T5845] Bluetooth: hci4: command tx timeout [ 327.276579][ T5845] Bluetooth: hci8: command tx timeout [ 327.597030][ T5845] Bluetooth: hci4: command tx timeout [ 329.357206][ T5845] Bluetooth: hci8: command tx timeout [ 339.969609][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.016771][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.019470][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.023702][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.024997][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.866567][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 341.020994][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.021023][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.021089][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.086627][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.086661][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.086682][ T31] usb 2-1: Product: syz [ 341.086696][ T31] usb 2-1: Manufacturer: syz [ 341.086711][ T31] usb 2-1: SerialNumber: syz [ 341.160225][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 341.160282][ T31] cdc_ncm 2-1:1.0: bind() failure [ 341.371040][ T31] usb 2-1: USB disconnect, device number 17 [ 342.156598][ T5845] Bluetooth: hci1: command tx timeout [ 344.238576][ T5845] Bluetooth: hci1: command tx timeout [ 344.596570][ T5164] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 344.767681][ T5164] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 344.767714][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.767735][ T5164] usb 2-1: Product: syz [ 344.767749][ T5164] usb 2-1: Manufacturer: syz [ 344.767763][ T5164] usb 2-1: SerialNumber: syz [ 344.821721][ T5164] usb 2-1: config 0 descriptor?? [ 345.096272][ T5164] usb 2-1: USB disconnect, device number 18 [ 345.375030][ T8823] udevd[8823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.317155][ T5845] Bluetooth: hci1: command tx timeout [ 348.396535][ T5845] Bluetooth: hci1: command tx timeout [ 361.354966][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.386107][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.395990][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.408516][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.439823][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.625133][ T5853] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 362.656732][ T5853] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 362.658783][ T5853] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 362.660315][ T5853] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 362.664440][ T5853] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 363.516708][ T5853] Bluetooth: hci5: command tx timeout [ 364.796566][ T5853] Bluetooth: hci9: command tx timeout [ 365.596644][ T5853] Bluetooth: hci5: command tx timeout [ 366.876531][ T5853] Bluetooth: hci9: command tx timeout [ 367.676576][ T5853] Bluetooth: hci5: command tx timeout [ 368.956524][ T5853] Bluetooth: hci9: command tx timeout [ 369.756551][ T5853] Bluetooth: hci5: command tx timeout [ 371.038264][ T5853] Bluetooth: hci9: command tx timeout [ 371.828161][ T5845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 371.865783][ T5845] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 371.906561][ T5845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 371.908089][ T5845] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 371.909092][ T5845] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 373.996486][ T5853] Bluetooth: hci10: command tx timeout [ 376.076620][ T5853] Bluetooth: hci10: command tx timeout [ 378.156595][ T5853] Bluetooth: hci10: command tx timeout [ 380.240843][ T5853] Bluetooth: hci10: command tx timeout [ 381.011799][ T5845] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 381.056246][ T5845] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 381.060091][ T5845] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 381.081695][ T5845] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 381.083725][ T5845] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 383.676662][ T5853] Bluetooth: hci11: command tx timeout [ 384.103637][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.103719][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.758914][ T5853] Bluetooth: hci11: command tx timeout [ 386.171189][ T5853] Bluetooth: hci6: command 0x0406 tx timeout [ 387.836532][ T5853] Bluetooth: hci11: command tx timeout [ 389.916504][ T5853] Bluetooth: hci11: command tx timeout [ 398.166075][ T38] INFO: task syz.0.1116:8560 blocked for more than 143 seconds. [ 398.166104][ T38] Not tainted syzkaller #0 [ 398.166115][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.166125][ T38] task:syz.0.1116 state:D stack:25128 pid:8560 tgid:8560 ppid:5832 task_flags:0x400040 flags:0x00004006 [ 398.166192][ T38] Call Trace: [ 398.166200][ T38] [ 398.166217][ T38] __schedule+0x16f3/0x4c20 [ 398.216177][ T38] ? __lock_acquire+0xab9/0xd20 [ 398.216223][ T38] ? __pfx___schedule+0x10/0x10 [ 398.216488][ T38] ? schedule+0x91/0x360 [ 398.216526][ T38] schedule+0x165/0x360 [ 398.216559][ T38] schedule_timeout+0x9a/0x270 [ 398.216588][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 398.216633][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.216662][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.216691][ T38] ? wait_for_completion+0x267/0x5d0 [ 398.216724][ T38] wait_for_completion+0x2bf/0x5d0 [ 398.216770][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 398.216802][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 398.216838][ T38] rcu_barrier+0x463/0x570 [ 398.216873][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 398.216906][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 398.216936][ T38] kvm_put_kvm+0xf8e/0x1670 [ 398.216972][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 398.217001][ T38] kvm_vm_release+0x46/0x50 [ 398.217026][ T38] __fput+0x458/0xa80 [ 398.217063][ T38] task_work_run+0x1d4/0x260 [ 398.217090][ T38] ? __pfx_task_work_run+0x10/0x10 [ 398.217119][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 398.217152][ T38] exit_to_user_mode_loop+0xec/0x110 [ 398.217181][ T38] do_syscall_64+0x2bd/0x3b0 [ 398.217200][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.217230][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.217251][ T38] ? clear_bhb_loop+0x60/0xb0 [ 398.217278][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.217298][ T38] RIP: 0033:0x7fcb5b3ceba9 [ 398.217317][ T38] RSP: 002b:00007ffc775f56d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 398.217342][ T38] RAX: 0000000000000000 RBX: 00007fcb5b617da0 RCX: 00007fcb5b3ceba9 [ 398.217358][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 398.217371][ T38] RBP: 00007fcb5b617da0 R08: 0000000000004104 R09: 00000003775f59cf [ 398.217386][ T38] R10: 00000000005f9474 R11: 0000000000000246 R12: 000000000003bb38 [ 398.217400][ T38] R13: 00007fcb5b616090 R14: ffffffffffffffff R15: 00007ffc775f57f0 [ 398.217437][ T38] [ 398.217464][ T38] [ 398.217464][ T38] Showing all locks held in the system: [ 398.217474][ T38] 4 locks held by kworker/0:1/10: [ 398.217487][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 398.217544][ T38] #1: ffffc900000f7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 398.217598][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 398.217648][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 398.217689][ T38] 3 locks held by kworker/u8:0/12: [ 398.217698][ T38] #0: ffff8880304e0138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 398.217745][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 398.217800][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 398.217855][ T38] 6 locks held by rcuc/0/20: [ 398.217868][ T38] 1 lock held by khungtaskd/38: [ 398.217879][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 398.217945][ T38] 3 locks held by kworker/u8:5/978: [ 398.217957][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 398.218009][ T38] #1: ffffc900048e7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 398.218061][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 398.218125][ T38] 1 lock held by syslogd/5186: [ 398.218136][ T38] #0: ffff888025a965d8 (&ei->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0 [ 398.218187][ T38] 3 locks held by klogd/5193: [ 398.218200][ T38] 2 locks held by getty/5594: [ 398.218211][ T38] #0: ffff88814e0b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 398.218270][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 398.218323][ T38] 1 lock held by syz-executor/5833: [ 398.218335][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 398.218392][ T38] 3 locks held by kworker/1:3/5844: [ 398.218403][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 398.218457][ T38] #1: ffffc90004d07bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 398.218516][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 398.218571][ T38] 1 lock held by syz-executor/6862: [ 398.218583][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 398.218634][ T38] 1 lock held by syz.0.1116/8560: [ 398.218644][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 398.218692][ T38] 1 lock held by syz-executor/8611: [ 398.218703][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 398.218760][ T38] 2 locks held by syz-executor/8659: [ 398.218772][ T38] #0: ffffffff8ecc6680 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 398.218826][ T38] #1: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 398.218884][ T38] 1 lock held by syz.4.1151/8662: [ 398.218905][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 398.218961][ T38] 2 locks held by syz-executor/8710: [ 398.218973][ T38] #0: ffffffff8ecc6680 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 398.219025][ T38] #1: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 398.219081][ T38] 4 locks held by kworker/0:12/8758: [ 398.219092][ T38] #0: ffff888035fb0d38 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 398.219146][ T38] #1: ffffc90004c57bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 398.219214][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 398.219266][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 398.219319][ T38] 2 locks held by syz-executor/8768: [ 398.219329][ T38] #0: ffff888039968e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 398.219381][ T38] #1: ffff8880399680a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 398.219438][ T38] 1 lock held by syz-executor/8794: [ 398.219450][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 398.219500][ T38] 4 locks held by kworker/0:14/8798: [ 398.219511][ T38] #0: ffff88804a6cf138 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 398.219569][ T38] #1: ffffc900075a7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 398.219637][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 398.219686][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 398.219739][ T38] 1 lock held by syz-executor/8807: [ 398.219750][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 398.219799][ T38] 1 lock held by syz-executor/8832: [ 398.219810][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 398.219860][ T38] 1 lock held by syz.1.1224/8859: [ 398.219870][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 398.219938][ T38] 1 lock held by syz-executor/8863: [ 398.219949][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 398.219998][ T38] 1 lock held by syz-executor/8866: [ 398.220009][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 398.220058][ T38] 1 lock held by syz-executor/8869: [ 398.220069][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 398.220119][ T38] 1 lock held by syz-executor/8874: [ 398.220131][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 398.220179][ T38] 1 lock held by dhcpcd/8881: [ 398.220190][ T38] #0: ffff88803e0cb878 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 398.220247][ T38] 1 lock held by dhcpcd/8883: [ 398.220258][ T38] #0: ffff88803e0cee78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 398.220315][ T38] 1 lock held by dhcpcd/8884: [ 398.220326][ T38] #0: ffff88803e0cbf38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 398.220381][ T38] [ 398.220386][ T38] ============================================= [ 398.220386][ T38] [ 398.220396][ T38] NMI backtrace for cpu 1 [ 398.220411][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.220433][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.220444][ T38] Call Trace: [ 398.220453][ T38] [ 398.220461][ T38] dump_stack_lvl+0x189/0x250 [ 398.220495][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.220524][ T38] ? __pfx__printk+0x10/0x10 [ 398.220561][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 398.220590][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 398.220620][ T38] ? __pfx__printk+0x10/0x10 [ 398.220645][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 398.220735][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 398.220766][ T38] watchdog+0xf93/0xfe0 [ 398.220797][ T38] ? watchdog+0x1de/0xfe0 [ 398.220835][ T38] kthread+0x70e/0x8a0 [ 398.220874][ T38] ? __pfx_watchdog+0x10/0x10 [ 398.220914][ T38] ? __pfx_kthread+0x10/0x10 [ 398.220947][ T38] ? __pfx_kthread+0x10/0x10 [ 398.220978][ T38] ret_from_fork+0x439/0x7d0 [ 398.221006][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 398.221039][ T38] ? __switch_to_asm+0x39/0x70 [ 398.221059][ T38] ? __switch_to_asm+0x33/0x70 [ 398.221076][ T38] ? __pfx_kthread+0x10/0x10 [ 398.221107][ T38] ret_from_fork_asm+0x1a/0x30 [ 398.221144][ T38] [ 398.221153][ T38] Sending NMI from CPU 1 to CPUs 0: [ 398.221184][ C0] NMI backtrace for cpu 0 [ 398.221201][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.221220][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.221228][ C0] RIP: 0010:lock_release+0x44/0x3e0 [ 398.221253][ C0] Code: 8b 05 40 1c 5a 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 43 1c 5a 10 83 f8 08 0f 83 9a 02 00 00 89 c0 48 0f a3 05 2c 4b 81 0d <73> 16 e8 a5 03 09 00 84 c0 75 0d f6 05 29 53 6b 0d 01 0f 84 ad 02 [ 398.221267][ C0] RSP: 0018:ffffc90000196a98 EFLAGS: 00000093 [ 398.221284][ C0] RAX: 0000000000000000 RBX: 0000000000000a06 RCX: dffffc0000000001 [ 398.221297][ C0] RDX: 0000000000000001 RSI: ffffffff84c02061 RDI: ffffffff993559c8 [ 398.221308][ C0] RBP: ffffc90000196b80 R08: 0000000000000003 R09: 0000000000000004 [ 398.221320][ C0] R10: dffffc0000000000 R11: fffff52000032d50 R12: dffffc0000000000 [ 398.221331][ C0] R13: ffffffff84c02061 R14: ffffffff993559c8 R15: 1ffff92000032d60 [ 398.221345][ C0] FS: 0000000000000000(0000) GS:ffff8881268bd000(0000) knlGS:0000000000000000 [ 398.221358][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.221370][ C0] CR2: 000055e3925754b0 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 398.221387][ C0] Call Trace: [ 398.221395][ C0] [ 398.221407][ C0] _raw_spin_unlock_irqrestore+0x70/0x110 [ 398.221433][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 398.221457][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 398.221480][ C0] debug_check_no_obj_freed+0x451/0x470 [ 398.221512][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 398.221530][ C0] kmem_cache_free+0x113/0x510 [ 398.221555][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 398.221575][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 398.221594][ C0] ? nf_ip_checksum+0x13c/0x510 [ 398.221614][ C0] nft_synproxy_do_eval+0x345/0x570 [ 398.221635][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 398.221720][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 398.221747][ C0] nft_do_chain+0x409/0x1920 [ 398.221771][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 398.221790][ C0] ? ktime_get+0x3e/0x1f0 [ 398.221807][ C0] ? ktime_get+0x3e/0x1f0 [ 398.221834][ C0] nft_do_chain_inet+0x25d/0x340 [ 398.221851][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 398.221868][ C0] ? __lock_acquire+0xab9/0xd20 [ 398.221893][ C0] ? NF_HOOK+0x9a/0x3a0 [ 398.221915][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 398.221932][ C0] nf_hook_slow+0xc2/0x220 [ 398.221957][ C0] NF_HOOK+0x206/0x3a0 [ 398.221978][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 398.222000][ C0] ? NF_HOOK+0x9a/0x3a0 [ 398.222020][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 398.222039][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 398.222062][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 398.222084][ C0] ? skb_dst+0x4f/0xd0 [ 398.222104][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 398.222127][ C0] NF_HOOK+0x30c/0x3a0 [ 398.222158][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 398.222183][ C0] ? NF_HOOK+0x9a/0x3a0 [ 398.222203][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 398.222224][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 398.222249][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 398.222268][ C0] __netif_receive_skb+0x143/0x380 [ 398.222288][ C0] ? rt_spin_unlock+0x65/0x80 [ 398.222309][ C0] ? process_backlog+0x27b/0x900 [ 398.222336][ C0] process_backlog+0x31e/0x900 [ 398.222370][ C0] __napi_poll+0xb3/0x540 [ 398.222392][ C0] net_rx_action+0x707/0xe00 [ 398.222411][ C0] ? arch_stack_walk+0x11c/0x150 [ 398.222436][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 398.222457][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 398.222479][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 398.222505][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 398.222527][ C0] handle_softirqs+0x22f/0x710 [ 398.222550][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 398.222575][ C0] __local_bh_enable_ip+0x179/0x270 [ 398.222594][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 398.222618][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 398.222640][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 398.222668][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 398.222693][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 398.222720][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 398.222743][ C0] ? __lock_acquire+0xab9/0xd20 [ 398.222771][ C0] ? __pfx___schedule+0x10/0x10 [ 398.222805][ C0] ? schedule+0x91/0x360 [ 398.222828][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 398.222848][ C0] smpboot_thread_fn+0x53f/0xa60 [ 398.222867][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 398.222889][ C0] kthread+0x70e/0x8a0 [ 398.222912][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 398.222931][ C0] ? __pfx_kthread+0x10/0x10 [ 398.222955][ C0] ? __pfx_kthread+0x10/0x10 [ 398.222978][ C0] ret_from_fork+0x439/0x7d0 [ 398.222999][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 398.223021][ C0] ? __switch_to_asm+0x39/0x70 [ 398.223037][ C0] ? __switch_to_asm+0x33/0x70 [ 398.223050][ C0] ? __pfx_kthread+0x10/0x10 [ 398.223073][ C0] ret_from_fork_asm+0x1a/0x30 [ 398.223095][ C0] [ 398.223181][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 398.223198][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.223222][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.223232][ T38] Call Trace: [ 398.223240][ T38] [ 398.223248][ T38] dump_stack_lvl+0x99/0x250 [ 398.223278][ T38] ? __asan_memcpy+0x40/0x70 [ 398.223301][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.223327][ T38] ? __pfx__printk+0x10/0x10 [ 398.223361][ T38] vpanic+0x281/0x750 [ 398.223392][ T38] ? __pfx_vpanic+0x10/0x10 [ 398.223419][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 398.223440][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.223480][ T38] panic+0xb9/0xc0 [ 398.223507][ T38] ? __pfx_panic+0x10/0x10 [ 398.223538][ T38] ? irq_work_queue+0xc3/0x140 [ 398.223569][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 398.223599][ T38] watchdog+0xfd2/0xfe0 [ 398.223629][ T38] ? watchdog+0x1de/0xfe0 [ 398.223659][ T38] kthread+0x70e/0x8a0 [ 398.223693][ T38] ? __pfx_watchdog+0x10/0x10 [ 398.223732][ T38] ? __pfx_kthread+0x10/0x10 [ 398.223767][ T38] ? __pfx_kthread+0x10/0x10 [ 398.223799][ T38] ret_from_fork+0x439/0x7d0 [ 398.223829][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 398.223863][ T38] ? __switch_to_asm+0x39/0x70 [ 398.223881][ T38] ? __switch_to_asm+0x33/0x70 [ 398.223908][ T38] ? __pfx_kthread+0x10/0x10 [ 398.223939][ T38] ret_from_fork_asm+0x1a/0x30 [ 398.223976][ T38] [ 398.224353][ T38] Kernel Offset: disabled