last executing test programs: 3m15.234178052s ago: executing program 2 (id=3384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x40000) 3m14.987200857s ago: executing program 2 (id=3389): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfefff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_emit_ethernet(0xcc, &(0x7f0000000140)=ANY=[], 0x0) 3m14.681213732s ago: executing program 2 (id=3393): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) 3m14.363927339s ago: executing program 2 (id=3401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) 3m14.128255627s ago: executing program 2 (id=3404): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m13.87420847s ago: executing program 2 (id=3407): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) 2m58.782669421s ago: executing program 32 (id=3407): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) 53.571466694s ago: executing program 3 (id=5066): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106d044fc20000000000010902240001000000000904e0ff04030003000921000034012205000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \b\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 51.480545774s ago: executing program 3 (id=5091): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) semop(0x0, &(0x7f0000000200)=[{0x3, 0x2, 0x800}, {0x4, 0xa7dd, 0x3000}], 0x2) read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020) 51.086170386s ago: executing program 3 (id=5093): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001c80)="798e17a462", 0x5}, {&(0x7f00000001c0)="f046930fa55abd012495a5cfd6dadd38aefd099ef2872c528fba3a7ae77cf3e61d6b48c5316b2b89011110419e", 0xfffffff2}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="68000000000000003a0000000400000012331f3a8113e5e07fb96a48595b3351314fb24bdf97abcfe84a530ffb7d8215e5cbbf5a5154b278e958ff8532d2fc4fff64e77cb0c8bcd7663b222f3e5626bdab8b1e91264e309ecbc2bf397a79573fba00000000000000f8"], 0x160}}], 0x2, 0x20004840) 49.91564231s ago: executing program 3 (id=5105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0x40, r1, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) 49.65488482s ago: executing program 3 (id=5107): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x0, &(0x7f00000002c0)={0x0, 0x16, 0x2, "4d6fbf86d0b01d60b19e4a22db5089a968377a5aaa857f2365c8b4e95627a28d556e1409b40181294d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 48.808582992s ago: executing program 4 (id=5115): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x109a42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x80) close(r0) 48.493276805s ago: executing program 4 (id=5117): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) setresgid(0x0, 0xee00, 0x0) 48.270847676s ago: executing program 4 (id=5119): syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x4082) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) 48.01965082s ago: executing program 4 (id=5122): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000480)={0x0, 0xa, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0}, 0x0) 46.664128353s ago: executing program 3 (id=5125): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0xffffffe9) 42.929563373s ago: executing program 4 (id=5132): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xd, 0x4) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) 42.929433414s ago: executing program 4 (id=5133): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 40.599369758s ago: executing program 5 (id=5141): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) creat(&(0x7f00000000c0)='./bus\x00', 0x182) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00'], &(0x7f00000010c0), 0x200) 40.284765772s ago: executing program 5 (id=5144): unshare(0x2c020600) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004580), 0x12a082, 0x0) poll(&(0x7f0000004600)=[{r0, 0x4}], 0x1, 0xb) 31.113997601s ago: executing program 33 (id=5125): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0xffffffe9) 29.285908642s ago: executing program 34 (id=5133): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 26.256641171s ago: executing program 5 (id=5165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000180)) 25.846663892s ago: executing program 5 (id=5168): syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 25.258951279s ago: executing program 5 (id=5171): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 25.222834221s ago: executing program 0 (id=5172): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x8, 0xfffffffffffffffb, 0x80, 0x81, 0x5c, 0x46}}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) 24.818394206s ago: executing program 0 (id=5175): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x15) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) 24.790710975s ago: executing program 5 (id=5176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a300000000008000340000000200c0006"], 0x98}}, 0x0) 24.114437581s ago: executing program 0 (id=5178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}}, 0x0) 16.283420259s ago: executing program 0 (id=5181): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000200)={0x12, {"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", 0x1000}}, 0x1006) 15.816822279s ago: executing program 1 (id=5183): r0 = eventfd2(0xce77, 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) 15.758202666s ago: executing program 0 (id=5184): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000d00f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 15.670011257s ago: executing program 1 (id=5185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 15.62488625s ago: executing program 0 (id=5186): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="449d060721b9e6bb51f207000000", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 15.548369854s ago: executing program 1 (id=5187): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) acct(&(0x7f0000000200)='./file7\x00') 15.49969103s ago: executing program 1 (id=5188): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000200)) 15.391252058s ago: executing program 1 (id=5189): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffc, {0x3}, {0x7}, @raw32={[0x2, 0x0, 0x800]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfc}, {}, @control={0x7, 0x8, 0x3}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0xd0, 0x5, 0xb, @tick=0x80000001, {0x3, 0x9}, {0x2, 0x2}, @note={0xf9, 0x7, 0xb, 0x3, 0x10}}], 0x70) 15.311626799s ago: executing program 1 (id=5190): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 9.624160321s ago: executing program 35 (id=5176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a300000000008000340000000200c0006"], 0x98}}, 0x0) 139.94851ms ago: executing program 36 (id=5186): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="449d060721b9e6bb51f207000000", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 0s ago: executing program 37 (id=5190): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) kernel console output (not intermixed with test programs): tivated: batadv_slave_1 [ 332.270688][T12806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.342965][ T5849] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 332.412032][T12806] team0: Port device bridge1 removed [ 332.542872][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 332.551735][ T5849] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 332.551765][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.551784][ T5849] usb 3-1: Product: syz [ 332.551799][ T5849] usb 3-1: Manufacturer: syz [ 332.551812][ T5849] usb 3-1: SerialNumber: syz [ 332.604671][ T5849] usb 3-1: config 0 descriptor?? [ 332.828933][ T5849] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 332.900947][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'. [ 333.163640][T12843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3220'. [ 333.163669][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3220'. [ 333.163683][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 333.233377][ T5849] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 333.258707][ T5849] usb 3-1: USB disconnect, device number 23 [ 334.344446][ T6035] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 334.510837][ T6035] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.510872][ T6035] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.510908][ T6035] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 334.510929][ T6035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.520455][ T6035] usb 3-1: config 0 descriptor?? [ 334.980254][ T6035] nti 0003:0757:0A00.0016: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0 [ 335.163052][ T6035] usb 3-1: USB disconnect, device number 24 [ 335.278717][T12881] fido_id[12881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 337.381235][T12940] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 337.913803][ T6020] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 338.043202][ T5842] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 338.066592][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.066638][ T6020] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 338.066661][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.112911][ T6020] usb 2-1: config 0 descriptor?? [ 338.555854][ T6020] hid_parser_main: 155 callbacks suppressed [ 338.555879][ T6020] zydacron 0003:13EC:0006.0017: unknown main item tag 0x0 [ 338.555910][ T6020] zydacron 0003:13EC:0006.0017: unknown main item tag 0x0 [ 338.555938][ T6020] zydacron 0003:13EC:0006.0017: unknown main item tag 0x0 [ 338.555964][ T6020] zydacron 0003:13EC:0006.0017: unknown main item tag 0x0 [ 338.555990][ T6020] zydacron 0003:13EC:0006.0017: unknown main item tag 0x0 [ 338.616097][ T6020] zydacron 0003:13EC:0006.0017: hidraw0: USB HID v0.01 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 338.775056][ T10] usb 2-1: USB disconnect, device number 25 [ 339.043337][T12978] fido_id[12978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 339.392417][T12997] IPVS: Unknown mcast interface: pimreg1 [ 339.746595][T13011] binder: 13008:13011 ioctl 541b 0 returned -22 [ 339.971702][T13019] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.3299'. [ 339.975895][ T5223] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 340.123738][ T5223] usb 3-1: Using ep0 maxpacket: 32 [ 340.126105][ T5223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.129162][ T5223] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 340.129189][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.129207][ T5223] usb 3-1: Product: syz [ 340.129220][ T5223] usb 3-1: Manufacturer: syz [ 340.129233][ T5223] usb 3-1: SerialNumber: syz [ 340.192776][ T5223] usb 3-1: config 0 descriptor?? [ 340.201636][ T5223] cdc_ether 3-1:0.0: skipping garbage [ 340.201656][ T5223] usb 3-1: bad CDC descriptors [ 340.212889][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 340.227241][ T5223] usb 3-1: unsupported MDLM descriptors [ 340.363655][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 340.376550][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.376582][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.376603][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.376646][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 340.376668][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.389221][ T10] usb 2-1: config 0 descriptor?? [ 340.470277][ T6035] usb 3-1: USB disconnect, device number 25 [ 340.851238][ T10] microsoft 0003:045E:07DA.0018: report is too long [ 340.851272][ T10] microsoft 0003:045E:07DA.0018: item 0 4 0 8 parsing failed [ 340.853674][ T10] microsoft 0003:045E:07DA.0018: parse failed [ 340.853777][ T10] microsoft 0003:045E:07DA.0018: probe with driver microsoft failed with error -22 [ 341.055893][ T10] usb 2-1: USB disconnect, device number 26 [ 341.363139][ T6035] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 341.515845][ T6035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.515895][ T6035] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 341.515919][ T6035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.521638][ T6035] usb 4-1: config 0 descriptor?? [ 341.951301][ T6035] steelseries 0003:1038:12B6.0019: unknown main item tag 0x2 [ 341.951340][ T6035] steelseries 0003:1038:12B6.0019: item fetching failed at offset 6/7 [ 341.952232][ T6035] steelseries 0003:1038:12B6.0019: probe with driver steelseries failed with error -22 [ 342.143572][ T5223] usb 4-1: USB disconnect, device number 27 [ 342.591422][T13074] bridge0: port 3(syz_tun) entered blocking state [ 342.605213][T13074] bridge0: port 3(syz_tun) entered disabled state [ 342.605683][T13074] syz_tun: entered allmulticast mode [ 342.612248][T13074] syz_tun: entered promiscuous mode [ 342.634595][T13074] bridge0: port 3(syz_tun) entered blocking state [ 342.634728][T13074] bridge0: port 3(syz_tun) entered forwarding state [ 343.294557][T13098] netlink: 716 bytes leftover after parsing attributes in process `syz.3.3337'. [ 343.883086][T13121] sock: sock_set_timeout: `syz.3.3349' (pid 13121) tries to set negative timeout [ 344.006804][T13119] sp0: Synchronizing with TNC [ 344.006939][T13122] sp0: Found TNC [ 344.033670][T13118] [U] ` [ 344.197677][T13131] pim6reg: entered allmulticast mode [ 344.250075][T13137] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 344.497364][T13148] overlayfs: workdir and upperdir must be separate subtrees [ 345.594331][T13190] overlayfs: missing 'workdir' [ 345.635914][T13192] Bluetooth: MGMT ver 1.23 [ 346.159182][T13209] tipc: Started in network mode [ 346.159214][T13209] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 346.160000][T13209] tipc: Enabled bearer , priority 10 [ 346.236066][T13212] netlink: 'syz.0.3391': attribute type 4 has an invalid length. [ 347.036937][T13240] use of bytesused == 0 is deprecated and will be removed in the future, [ 347.036953][T13240] use the actual size instead. [ 347.154893][ T6035] tipc: Node number set to 10398378 [ 347.413916][T13253] tipc: Enabling of bearer rejected, failed to enable media [ 347.592736][ T5849] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 347.744148][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 347.746432][ T5849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 347.746488][ T5849] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 347.746507][ T5849] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 347.746531][ T5849] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 347.746551][ T5849] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 347.746574][ T5849] usb 4-1: config 1 interface 0 has no altsetting 0 [ 347.746608][ T5849] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 347.746631][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.844772][ T5849] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 348.104703][ T5849] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 348.133739][ T5849] usb 4-1: USB disconnect, device number 28 [ 348.652814][ T6035] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 348.820482][ T6035] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.820507][ T6035] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 348.820561][ T6035] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 348.820584][ T6035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.830254][ T6035] usb 5-1: config 0 descriptor?? [ 349.485256][ T6035] Bluetooth: Can't get version to change to load ram patch err [ 349.485275][ T6035] Bluetooth: Loading sysconfig file failed [ 349.485312][ T6035] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 349.493468][ T6035] usb 5-1: USB disconnect, device number 25 [ 350.311004][T13307] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3436'. [ 351.060539][T13321] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 351.060602][T13321] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 351.060651][T13321] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 351.060772][T13321] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 351.060821][T13321] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 351.272737][ T5849] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 351.433387][ T5849] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 351.433417][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.433437][ T5849] usb 2-1: Product: syz [ 351.433450][ T5849] usb 2-1: Manufacturer: syz [ 351.433464][ T5849] usb 2-1: SerialNumber: syz [ 351.502277][ T5849] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 351.538972][ T5223] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 352.046328][T13338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.123169][ T6035] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 352.212912][ T10] usb 2-1: USB disconnect, device number 27 [ 352.272745][ T6035] usb 4-1: Using ep0 maxpacket: 16 [ 352.288372][ T6035] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 352.288400][ T6035] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 352.288420][ T6035] usb 4-1: Product: syz [ 352.288434][ T6035] usb 4-1: Manufacturer: syz [ 352.288447][ T6035] usb 4-1: SerialNumber: syz [ 352.311889][ T6035] usb 4-1: config 0 descriptor?? [ 352.585913][ T5849] usb 4-1: USB disconnect, device number 29 [ 353.022853][ T5223] usb 2-1: Service connection timeout for: 257 [ 353.022876][ T5223] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 353.024599][ T5223] ath9k_htc: Failed to initialize the device [ 353.032717][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 353.953023][ T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 354.119822][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.119847][ T10] usb 4-1: config 0 has no interface number 0 [ 354.119895][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 354.119918][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.152778][ T49] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 354.153697][ T10] usb 4-1: config 0 descriptor?? [ 354.190006][ T10] usb 4-1: selecting invalid altsetting 1 [ 354.190999][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 354.191014][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 354.325280][ T49] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 354.325337][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.326882][ T49] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 354.326908][ T49] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 354.326927][ T49] usb 2-1: Manufacturer: syz [ 354.384930][ T49] usb 2-1: config 0 descriptor?? [ 354.483989][ T49] rc_core: IR keymap rc-hauppauge not found [ 354.484014][ T49] Registered IR keymap rc-empty [ 354.486923][ T49] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 354.490368][ T49] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 354.541431][ T10] DVB: Unable to find symbol cx22700_attach() [ 354.645958][ T10] DVB: Unable to find symbol tda10046_attach() [ 354.645973][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 354.663171][ T10] usb 4-1: USB disconnect, device number 30 [ 355.083491][ T49] usb 2-1: USB disconnect, device number 28 [ 355.519322][T13399] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3479'. [ 357.177323][ T37] audit: type=1326 audit(2000000185.580:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13448 comm="syz.4.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 357.177635][ T37] audit: type=1326 audit(2000000185.580:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13448 comm="syz.4.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 357.178593][ T37] audit: type=1326 audit(2000000185.580:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13448 comm="syz.4.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 357.178887][ T37] audit: type=1326 audit(2000000185.580:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13448 comm="syz.4.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 357.179152][ T37] audit: type=1326 audit(2000000185.580:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13448 comm="syz.4.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 357.937614][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 359.061535][T13504] xt_l2tp: missing protocol rule (udp|l2tpip) [ 359.500992][ T37] audit: type=1326 audit(2000000187.900:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13514 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 359.524597][ T37] audit: type=1326 audit(2000000187.900:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13514 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 359.573447][ T37] audit: type=1326 audit(2000000187.950:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13514 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 359.580353][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3534'. [ 359.585054][ T37] audit: type=1326 audit(2000000187.990:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13514 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 359.585102][ T37] audit: type=1326 audit(2000000187.990:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13514 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 360.003800][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3538'. [ 360.103736][T13532] /dev/nullb0: Can't open blockdev [ 360.360078][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3545'. [ 361.128789][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 361.228132][T13566] netlink: 'syz.3.3556': attribute type 10 has an invalid length. [ 361.281393][T13567] netlink: 'syz.3.3556': attribute type 10 has an invalid length. [ 361.345538][T13566] team0: Port device netdevsim0 added [ 361.512102][T13567] team0: Port device netdevsim0 removed [ 361.537020][T13567] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 361.942412][T13573] xt_l2tp: v2 sid > 0xffff: 1114112 [ 363.072485][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.084484][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.086104][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.087242][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.088001][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.272965][ T6035] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 363.389042][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3573'. [ 363.449679][ T6035] usb 2-1: Using ep0 maxpacket: 16 [ 363.456271][ T6035] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 363.456296][ T6035] usb 2-1: config 0 has no interface number 0 [ 363.456350][ T6035] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.456374][ T6035] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 363.460045][ T6035] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 363.460071][ T6035] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 363.460090][ T6035] usb 2-1: Product: syz [ 363.460104][ T6035] usb 2-1: SerialNumber: syz [ 363.478566][ T6035] usb 2-1: config 0 descriptor?? [ 363.513745][ T6035] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 363.528350][ T6035] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input26 [ 363.739946][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 363.745030][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 363.745153][ T49] usb 2-1: USB disconnect, device number 29 [ 363.745294][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 363.745317][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 363.753292][ T5912] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 363.826742][ T49] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 363.927425][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.927458][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.927497][ T5912] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 363.927521][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.936138][ T5912] usb 4-1: config 0 descriptor?? [ 364.208480][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 364.208514][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3579'. [ 364.208541][T13617] netlink: 'syz.4.3579': attribute type 12 has an invalid length. [ 364.395379][ T5912] playstation 0003:054C:0DF2.001A: unbalanced delimiter at end of report description [ 364.396178][ T5912] playstation 0003:054C:0DF2.001A: Parse failed [ 364.396246][ T5912] playstation 0003:054C:0DF2.001A: probe with driver playstation failed with error -22 [ 364.619870][ T5912] usb 4-1: USB disconnect, device number 31 [ 364.699936][ T1415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.045874][ T1415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.173155][ T5855] Bluetooth: hci5: command tx timeout [ 365.321901][T13641] netlink: 536 bytes leftover after parsing attributes in process `syz.4.3589'. [ 365.489258][ T1415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.531599][T13641] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3589'. [ 365.557255][T13599] chnl_net:caif_netlink_parms(): no params data found [ 366.010620][ T1415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.386656][ T5912] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 366.465161][T13599] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.465294][T13599] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.465530][T13599] bridge_slave_0: entered allmulticast mode [ 366.470424][T13599] bridge_slave_0: entered promiscuous mode [ 366.495896][T13599] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.498657][T13599] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.498896][T13599] bridge_slave_1: entered allmulticast mode [ 366.504630][T13599] bridge_slave_1: entered promiscuous mode [ 366.535550][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.535584][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 366.535627][ T5912] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 366.535650][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.589923][ T5912] usb 4-1: config 0 descriptor?? [ 366.590979][T13665] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 367.051886][ T5912] gembird 0003:11FF:3331.001B: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0 [ 367.106140][T13599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.221154][T13599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.239017][ T5912] usb 4-1: USB disconnect, device number 32 [ 367.257182][ T5855] Bluetooth: hci5: command tx timeout [ 367.704845][T13599] team0: Port device team_slave_0 added [ 367.741542][T13599] team0: Port device team_slave_1 added [ 368.005907][ T1415] bridge_slave_1: left allmulticast mode [ 368.006681][ T1415] bridge_slave_1: left promiscuous mode [ 368.010817][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.081960][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 368.081977][ T37] audit: type=1326 audit(2000000196.476:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13720 comm="syz.1.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 368.114060][ T37] audit: type=1326 audit(2000000196.476:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13720 comm="syz.1.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 368.117298][ T37] audit: type=1326 audit(2000000196.516:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13720 comm="syz.1.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 368.117732][ T37] audit: type=1326 audit(2000000196.516:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13720 comm="syz.1.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 368.118009][ T37] audit: type=1326 audit(2000000196.516:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13720 comm="syz.1.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 368.118238][ T37] audit: type=1326 audit(2000000196.516:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13720 comm="syz.1.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 368.252832][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 368.279526][ T1415] bridge_slave_0: left promiscuous mode [ 368.279868][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.405884][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 368.408282][ T10] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 368.408336][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.408359][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 368.408382][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 368.408403][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 368.408425][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 368.409949][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.409976][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 368.409995][ T10] usb 5-1: SerialNumber: syz [ 368.586077][ T10] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 368.591763][ T10] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 368.828938][ T6020] usb 5-1: USB disconnect, device number 26 [ 369.134310][ T5223] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 369.285177][ T5223] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 369.285207][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.314345][ T5223] usb 4-1: config 0 descriptor?? [ 369.332770][ T5855] Bluetooth: hci5: command tx timeout [ 369.763826][ T5223] waltop 0003:172F:0032.001C: item fetching failed at offset 3/5 [ 369.764731][ T5223] waltop 0003:172F:0032.001C: probe with driver waltop failed with error -22 [ 369.930251][ T5223] usb 4-1: USB disconnect, device number 33 [ 371.412907][ T5855] Bluetooth: hci5: command tx timeout [ 371.566206][ T1415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.685245][ T1415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.749453][ T1415] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 371.784751][ T1415] bond0 (unregistering): Released all slaves [ 371.917611][T13717] tipc: Enabling of bearer rejected, failed to enable media [ 372.123627][T13599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.123642][T13599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.123667][T13599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.125671][ T1415] _Z`Ԁ@: left promiscuous mode [ 372.351154][T13599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.351171][T13599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.351197][T13599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.775034][T13783] gtp0: entered promiscuous mode [ 373.292120][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3654'. [ 373.559638][T13599] hsr_slave_0: entered promiscuous mode [ 373.567729][T13599] hsr_slave_1: entered promiscuous mode [ 373.568668][T13599] debugfs: 'hsr0' already exists in 'hsr' [ 373.568693][T13599] Cannot create hsr debugfs directory [ 373.643962][T13801] xt_l2tp: invalid flags combination: 0 [ 374.693101][T13833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3668'. [ 375.003002][ T5912] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 375.167718][ T5912] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 375.167748][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.231214][ T5912] usb 2-1: config 0 descriptor?? [ 375.799542][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3678'. [ 375.799834][T13862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3678'. [ 375.859681][ T5912] ath6kl: Failed to read usb control message: -71 [ 375.859728][ T5912] ath6kl: Unable to read the bmi data from the device: -71 [ 375.859742][ T5912] ath6kl: unable to read target info byte count: -71 [ 375.886400][ T5912] ath6kl: Failed to init ath6kl core: -71 [ 375.886936][ T5912] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 375.918252][ T5912] usb 2-1: USB disconnect, device number 30 [ 376.472887][T13874] tipc: Started in network mode [ 376.472916][T13874] tipc: Node identity 070000000000000007, cluster identity 4711 [ 376.721038][ T1415] hsr_slave_0: left promiscuous mode [ 376.753582][ T1415] hsr_slave_1: left promiscuous mode [ 376.754667][ T1415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.754750][ T1415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.806966][ T1415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.806998][ T1415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.018342][ T1415] veth1_macvtap: left promiscuous mode [ 377.018629][ T1415] veth0_macvtap: left promiscuous mode [ 377.018868][ T1415] veth1_vlan: left promiscuous mode [ 377.020363][ T1415] veth0_vlan: left promiscuous mode [ 378.044752][T13915] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3702'. [ 378.145331][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.711792][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.711864][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.172908][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 379.996632][ T1415] team0 (unregistering): Port device team_slave_1 removed [ 380.243665][ T1415] team0 (unregistering): Port device team_slave_0 removed [ 383.159392][T13930] overlayfs: workdir and upperdir must be separate subtrees [ 383.359873][T13933] pimreg3: entered allmulticast mode [ 383.510860][T13599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.535195][ T37] audit: type=1326 audit(2000000211.936:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13936 comm="syz.1.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 383.535247][ T37] audit: type=1326 audit(2000000211.936:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13936 comm="syz.1.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 383.558779][ T37] audit: type=1326 audit(2000000211.956:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13936 comm="syz.1.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 383.558830][ T37] audit: type=1326 audit(2000000211.956:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13936 comm="syz.1.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 383.558870][ T37] audit: type=1326 audit(2000000211.956:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13936 comm="syz.1.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 383.564881][ T37] audit: type=1326 audit(2000000211.956:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13936 comm="syz.1.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 383.566158][ T37] audit: type=1326 audit(2000000211.966:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13936 comm="syz.1.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 383.566198][ T37] audit: type=1326 audit(2000000211.966:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13936 comm="syz.1.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 383.576371][T13599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.854897][T13599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.959314][T13599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.182789][ T49] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 384.339054][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.339078][ T49] usb 4-1: config 0 has no interface number 0 [ 384.339116][ T49] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.339138][ T49] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.339170][ T49] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 384.339188][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.429532][ T49] usb 4-1: config 0 descriptor?? [ 384.750420][T13599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.936915][T13599] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.002285][ T49] uclogic 0003:256C:006D.001D: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 385.055455][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.056286][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.183166][ T6035] usb 4-1: USB disconnect, device number 34 [ 385.204845][T13987] fido_id[13987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 385.212257][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.212482][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.918522][T14006] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22) [ 386.074901][T14011] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3731'. [ 386.074964][T14011] netlink: 'syz.4.3731': attribute type 9 has an invalid length. [ 386.074979][T14011] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3731'. [ 386.074993][T14011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3731'. [ 386.220669][T13599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.703342][T13599] veth0_vlan: entered promiscuous mode [ 387.740317][T13599] veth1_vlan: entered promiscuous mode [ 387.924807][T13599] veth0_macvtap: entered promiscuous mode [ 387.950526][T13599] veth1_macvtap: entered promiscuous mode [ 388.063886][ T6035] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 388.066708][T13599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.107070][ T5223] kernel write not supported for file /uinput (pid: 5223 comm: kworker/1:3) [ 388.124594][T13599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.207921][ T1399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.212444][ T1399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.226960][ T1399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.235853][ T6035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.235886][ T6035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.235924][ T6035] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 388.235945][ T6035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.254826][ T1399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.272371][ T6035] usb 5-1: config 0 descriptor?? [ 388.358525][T14074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3751'. [ 388.748825][T14084] [U] N{st3 )Lbo7UюNQʈ tQZ4s [ 388.926306][ T6035] aquacomputer_d5next 0003:0C70:F00D.001E: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0 [ 389.042814][ T990] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 389.202757][ T990] usb 4-1: Using ep0 maxpacket: 8 [ 389.215164][ T990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 389.215212][ T990] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 389.215234][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.236382][ T6035] usb 5-1: USB disconnect, device number 27 [ 389.252207][ T990] usb 4-1: config 0 descriptor?? [ 389.283528][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.283547][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.538113][T14092] fido_id[14092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 389.545337][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 389.545359][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'. [ 389.545384][T14097] netlink: 'syz.1.3761': attribute type 5 has an invalid length. [ 389.545396][T14097] netlink: 'syz.1.3761': attribute type 6 has an invalid length. [ 389.741461][ T990] corsair 0003:1B1C:1B09.001F: unbalanced delimiter at end of report description [ 389.742262][ T990] corsair 0003:1B1C:1B09.001F: parse failed [ 389.742362][ T990] corsair 0003:1B1C:1B09.001F: probe with driver corsair failed with error -22 [ 389.883410][ T49] usb 4-1: USB disconnect, device number 35 [ 389.945777][T14100] bridge0: entered promiscuous mode [ 389.946861][T14100] macsec1: entered promiscuous mode [ 390.020846][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.020866][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.542917][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3769'. [ 390.564162][T14119] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 391.317809][T14156] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 391.996037][T14182] delete_channel: no stack [ 392.012414][T14181] netlink: 'syz.5.3800': attribute type 2 has an invalid length. [ 392.012433][T14181] netlink: 1184 bytes leftover after parsing attributes in process `syz.5.3800'. [ 392.483081][T14191] sp0: Synchronizing with TNC [ 392.503647][T14189] [U] [ 393.145966][ T37] audit: type=1326 audit(2000000221.546:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14220 comm="syz.4.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 393.147164][ T37] audit: type=1326 audit(2000000221.546:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14220 comm="syz.4.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 393.191355][ T37] audit: type=1326 audit(2000000221.586:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14220 comm="syz.4.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 393.193046][ T37] audit: type=1326 audit(2000000221.586:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14220 comm="syz.4.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 393.194568][ T37] audit: type=1326 audit(2000000221.596:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14220 comm="syz.4.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 393.194808][ T37] audit: type=1326 audit(2000000221.596:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14220 comm="syz.4.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a987eec9 code=0x7ffc0000 [ 394.060058][ T37] audit: type=1326 audit(2000000222.446:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14243 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 394.060110][ T37] audit: type=1326 audit(2000000222.456:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14243 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 394.072520][ T37] audit: type=1326 audit(2000000222.466:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14243 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 394.072572][ T37] audit: type=1326 audit(2000000222.466:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14243 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7ffc0000 [ 395.110959][T14280] sp0: Synchronizing with TNC [ 395.403212][T14289] netlink: 'syz.0.3849': attribute type 29 has an invalid length. [ 395.702783][ T5223] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 395.725704][T14301] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 395.859006][ T5223] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 395.859035][ T5223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.859055][ T5223] usb 2-1: Product: syz [ 395.859069][ T5223] usb 2-1: Manufacturer: syz [ 395.859083][ T5223] usb 2-1: SerialNumber: syz [ 395.896374][ T5223] usb 2-1: config 0 descriptor?? [ 395.928614][ T5223] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 395.944114][ T5223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 395.949212][ T5223] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 395.949274][ T5223] usb 2-1: media controller created [ 396.001045][ T5223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.161332][ T5223] DVB: Unable to find symbol mt352_attach() [ 396.216074][ T5223] DVB: Unable to find symbol nxt6000_attach() [ 396.216092][ T5223] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 396.256422][ T5223] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 396.260713][ T5223] dvb-usb: schedule remote query interval to 1000 msecs. [ 396.260736][ T5223] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 396.260752][ T5223] dvb-usb: bulk message failed: -22 (7/0) [ 396.260768][ T5223] dvb-usb: bulk message failed: -22 (7/0) [ 396.333480][ T5223] usb 2-1: USB disconnect, device number 31 [ 396.585745][T14320] netlink: 'syz.3.3862': attribute type 322 has an invalid length. [ 396.645241][ T5223] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 397.162130][T14333] netlink: 'syz.1.3868': attribute type 10 has an invalid length. [ 397.207647][T14333] bridge0: port 3(syz_tun) entered disabled state [ 397.208143][T14333] syz_tun: left allmulticast mode [ 397.208168][T14333] syz_tun: left promiscuous mode [ 397.208455][T14333] bridge0: port 3(syz_tun) entered disabled state [ 397.239240][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3869'. [ 397.403177][T14333] team0: Port device syz_tun added [ 397.413121][ T5855] Bluetooth: hci5: command 0x0405 tx timeout [ 397.982871][ T6020] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 398.139859][ T6020] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 398.139889][ T6020] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 398.139908][ T6020] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 398.139928][ T6020] usb 4-1: config 220 has no interface number 2 [ 398.140020][ T6020] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 398.140046][ T6020] usb 4-1: config 220 interface 0 has no altsetting 0 [ 398.140064][ T6020] usb 4-1: config 220 interface 76 has no altsetting 0 [ 398.140082][ T6020] usb 4-1: config 220 interface 1 has no altsetting 0 [ 398.149899][ T6020] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 398.149929][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.149948][ T6020] usb 4-1: Product: syz [ 398.149961][ T6020] usb 4-1: Manufacturer: syz [ 398.149975][ T6020] usb 4-1: SerialNumber: syz [ 398.264940][T14359] netlink: 201872 bytes leftover after parsing attributes in process `syz.1.3879'. [ 398.265438][T14359] netlink: zone id is out of range [ 398.265477][T14359] netlink: zone id is out of range [ 398.265489][T14359] netlink: zone id is out of range [ 398.265497][T14359] netlink: zone id is out of range [ 398.265504][T14359] netlink: zone id is out of range [ 398.265511][T14359] netlink: zone id is out of range [ 398.265749][T14359] netlink: zone id is out of range [ 398.265757][T14359] netlink: zone id is out of range [ 398.265765][T14359] netlink: zone id is out of range [ 398.265771][T14359] netlink: zone id is out of range [ 398.474973][ T6020] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 398.475007][ T6020] usb 4-1: No valid video chain found. [ 398.475065][ T6020] usb 4-1: selecting invalid altsetting 0 [ 398.594347][ T6020] usb 4-1: selecting invalid altsetting 0 [ 398.594387][ T6020] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 398.636034][ T6020] usb 4-1: USB disconnect, device number 36 [ 399.480745][T14396] netlink: 'syz.5.3894': attribute type 10 has an invalid length. [ 399.494450][ T5855] Bluetooth: hci5: command 0x0405 tx timeout [ 399.536665][T14399] netlink: 'syz.5.3894': attribute type 10 has an invalid length. [ 399.663861][T14396] team0: Port device netdevsim0 added [ 399.806141][T14407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3898'. [ 399.897837][T14399] team0: Port device netdevsim0 removed [ 399.950570][T14399] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 401.573063][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 403.177385][T14541] netlink: 'syz.5.3953': attribute type 10 has an invalid length. [ 403.251035][T14543] netlink: 'syz.5.3953': attribute type 10 has an invalid length. [ 403.251058][T14543] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3953'. [ 403.256823][T14541] batman_adv: batadv0: Adding interface: team0 [ 403.256839][T14541] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.256868][T14541] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 403.267203][T14543] team0: entered promiscuous mode [ 403.267225][T14543] team_slave_0: entered promiscuous mode [ 403.267456][T14543] team_slave_1: entered promiscuous mode [ 403.336949][T14543] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.337299][T14543] batman_adv: batadv0: Interface activated: team0 [ 403.337349][T14543] batman_adv: batadv0: Interface deactivated: team0 [ 403.337370][T14543] batman_adv: batadv0: Removing interface: team0 [ 403.409089][T14543] bridge0: port 3(team0) entered blocking state [ 403.409240][T14543] bridge0: port 3(team0) entered disabled state [ 403.409422][T14543] team0: entered allmulticast mode [ 403.409437][T14543] team_slave_0: entered allmulticast mode [ 403.409460][T14543] team_slave_1: entered allmulticast mode [ 403.443371][T14543] bridge0: port 3(team0) entered blocking state [ 403.443552][T14543] bridge0: port 3(team0) entered forwarding state [ 403.642954][T14553] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3958'. [ 403.842910][T14560] syz.3.3959 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 403.938250][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 404.018322][T14568] tmpfs: User quota inode hardlimit too large. [ 404.095694][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.095745][ T9] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 404.095766][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.114309][ T9] usb 5-1: config 0 descriptor?? [ 404.638374][ T9] hid_mf 0003:0079:1846.0020: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 404.638409][ T9] hid_mf 0003:0079:1846.0020: Invalid report, this should never happen! [ 404.638425][ T9] hid_mf 0003:0079:1846.0020: Force feedback init failed. [ 404.835091][ T49] usb 5-1: USB disconnect, device number 28 [ 405.120875][T14592] fido_id[14592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 405.184531][T14600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 405.184588][T14600] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 405.184678][T14600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 405.184803][T14600] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 405.184852][T14600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 405.184900][T14600] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 405.184953][T14600] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 405.185040][T14600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 405.185088][T14600] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 405.185135][T14600] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 406.203956][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 406.203973][ T37] audit: type=1326 audit(2000000234.606:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14625 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7fc00000 [ 406.204244][ T37] audit: type=1326 audit(2000000234.606:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14625 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e0883eec9 code=0x7fc00000 [ 406.204485][ T37] audit: type=1326 audit(2000000234.606:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14625 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7fc00000 [ 406.204721][ T37] audit: type=1326 audit(2000000234.606:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14625 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7fc00000 [ 406.205905][ T37] audit: type=1326 audit(2000000234.606:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14625 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x7fc00000 [ 406.768473][T14643] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x30314247, 8, 0, 0, 0) [ 408.492769][ T37] audit: type=1326 audit(2000000236.886:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14708 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 408.492824][ T37] audit: type=1326 audit(2000000236.886:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14708 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 408.495042][ T37] audit: type=1326 audit(2000000236.896:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14708 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 408.495404][ T37] audit: type=1326 audit(2000000236.896:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14708 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 408.495646][ T37] audit: type=1326 audit(2000000236.896:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14708 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 408.801825][T14720] program syz.3.4019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.833177][ T6035] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 408.983034][ T6035] usb 2-1: Using ep0 maxpacket: 32 [ 408.985663][ T6035] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 408.985693][ T6035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.996673][ T6035] usb 2-1: config 0 descriptor?? [ 409.435643][ T6035] elecom 0003:056E:00FE.0021: unknown main item tag 0x0 [ 409.435681][ T6035] elecom 0003:056E:00FE.0021: unknown main item tag 0x0 [ 409.435706][ T6035] elecom 0003:056E:00FE.0021: unknown main item tag 0x0 [ 409.435731][ T6035] elecom 0003:056E:00FE.0021: unknown main item tag 0x0 [ 409.435757][ T6035] elecom 0003:056E:00FE.0021: unknown main item tag 0x0 [ 409.441162][T14740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4026'. [ 409.472019][ T6035] elecom 0003:056E:00FE.0021: hidraw0: USB HID v1.01 Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0 [ 409.639686][ T9] usb 2-1: USB disconnect, device number 32 [ 409.818772][T14743] fido_id[14743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 410.922999][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4042'. [ 410.923025][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4042'. [ 410.923049][T14782] netlink: 'syz.4.4042': attribute type 11 has an invalid length. [ 410.923063][T14782] netlink: 'syz.4.4042': attribute type 13 has an invalid length. [ 410.990553][T14785] ieee802154 phy0 wpan0: encryption failed: -22 [ 411.591820][T14808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4052'. [ 412.460465][T14844] autofs: Bad value for 'fd' [ 412.503118][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4070'. [ 412.960356][T14862] tipc: Enabled bearer , priority 10 [ 413.299386][T14876] tipc: Enabling not permitted [ 413.299429][T14876] tipc: Enabling of bearer rejected, failed to enable media [ 413.625535][T14888] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 413.702798][ T6020] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 413.866821][ T6020] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.866857][ T6020] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 413.866883][ T6020] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 413.866909][ T6020] usb 2-1: config 0 interface 0 has no altsetting 0 [ 413.868515][ T6020] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 413.868542][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.939554][ T6020] usb 2-1: config 0 descriptor?? [ 413.940676][T14881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 414.083113][ T9] tipc: Node number set to 117440512 [ 414.127425][T14905] futex_wake_op: syz.5.4099 tries to shift op by -1; fix this program [ 414.249726][T14908] netlink: 'syz.0.4102': attribute type 10 has an invalid length. [ 414.312070][T14908] batman_adv: batadv0: Adding interface: team0 [ 414.312087][T14908] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.312114][T14908] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 414.329300][T14908] netlink: 'syz.0.4102': attribute type 10 has an invalid length. [ 414.329324][T14908] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4102'. [ 414.329503][T14908] team0: entered promiscuous mode [ 414.329519][T14908] team_slave_0: entered promiscuous mode [ 414.329812][T14908] team_slave_1: entered promiscuous mode [ 414.342479][T14908] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.343282][T14908] batman_adv: batadv0: Interface activated: team0 [ 414.343326][T14908] batman_adv: batadv0: Interface deactivated: team0 [ 414.343347][T14908] batman_adv: batadv0: Removing interface: team0 [ 414.433796][ T6020] vrc2 0003:07C0:1125.0022: fixing up VRC-2 report descriptor [ 414.470014][ T6020] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0022/input/input28 [ 414.492431][T14908] bridge0: port 3(team0) entered blocking state [ 414.492575][T14908] bridge0: port 3(team0) entered disabled state [ 414.492962][T14908] team0: entered allmulticast mode [ 414.492979][T14908] team_slave_0: entered allmulticast mode [ 414.493001][T14908] team_slave_1: entered allmulticast mode [ 414.528439][T14908] bridge0: port 3(team0) entered blocking state [ 414.528595][T14908] bridge0: port 3(team0) entered forwarding state [ 414.591136][T14916] macsec1: entered promiscuous mode [ 414.591166][T14916] macsec1: entered allmulticast mode [ 414.668346][ T6020] vrc2 0003:07C0:1125.0022: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 414.692958][ T6020] usb 2-1: USB disconnect, device number 33 [ 414.857526][T14924] netlink: 'syz.0.4109': attribute type 2 has an invalid length. [ 414.933352][T14921] fido_id[14921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 415.164305][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 415.194952][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 415.194968][ T37] audit: type=1326 audit(2000000243.596:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14932 comm="syz.4.4112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8a987eec9 code=0x0 [ 415.344733][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 415.347761][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.347796][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.347820][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 415.347854][ T9] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 415.347878][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.372940][ T9] usb 6-1: config 0 descriptor?? [ 415.828065][ T9] a4tech 0003:09DA:000A.0023: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.5-1/input0 [ 416.008189][ T6020] usb 6-1: USB disconnect, device number 2 [ 416.046250][T14944] fido_id[14944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 416.175357][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4118'. [ 417.027141][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4133'. [ 417.027165][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4133'. [ 417.027191][T14978] netlink: 'syz.4.4133': attribute type 11 has an invalid length. [ 417.582879][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 417.747242][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.747277][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.747291][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.747312][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 417.747324][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.834428][ T9] usb 4-1: config 0 descriptor?? [ 418.232649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 418.334765][ T9] wacom 0003:056A:0010.0024: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 418.346709][ T9] wacom 0003:056A:0010.0024: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 418.380414][ T9] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0024/input/input29 [ 418.585341][ T9] usb 4-1: USB disconnect, device number 37 [ 418.821077][T15020] netlink: 'syz.4.4150': attribute type 10 has an invalid length. [ 418.822356][T15020] batman_adv: batadv0: Adding interface: team0 [ 418.822372][T15020] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.822400][T15020] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 418.835008][T15020] netlink: 'syz.4.4150': attribute type 10 has an invalid length. [ 418.835030][T15020] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4150'. [ 418.835194][T15020] team0: entered promiscuous mode [ 418.837635][T15020] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.875619][T15020] batman_adv: batadv0: Interface activated: team0 [ 418.875669][T15020] batman_adv: batadv0: Interface deactivated: team0 [ 418.875689][T15020] batman_adv: batadv0: Removing interface: team0 [ 418.943900][T15020] bridge0: port 1(team0) entered blocking state [ 418.944055][T15020] bridge0: port 1(team0) entered disabled state [ 418.944224][T15020] team0: entered allmulticast mode [ 418.989851][T15020] bridge0: port 1(team0) entered blocking state [ 418.990013][T15020] bridge0: port 1(team0) entered forwarding state [ 419.300650][T15028] CIFS mount error: No usable UNC path provided in device string! [ 419.300650][T15028] [ 419.300672][T15028] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 419.478835][T15036] program syz.5.4161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.582586][ T37] audit: type=1326 audit(2000000247.976:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15040 comm="syz.4.4164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8a987eec9 code=0x0 [ 420.346289][T15071] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1024) [ 420.346315][T15071] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 420.972477][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4182'. [ 421.128593][T15102] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4184'. [ 421.250301][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4185'. [ 421.250338][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4185'. [ 421.405604][T15111] vxcan1: entered allmulticast mode [ 421.498701][T15115] netlink: 'syz.4.4189': attribute type 11 has an invalid length. [ 421.498724][T15115] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4189'. [ 422.402563][T15151] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4204'. [ 422.661792][T15162] bridge0: port 3(team0) entered disabled state [ 422.668150][T15162] net_ratelimit: 11 callbacks suppressed [ 422.668168][T15162] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 422.827396][T15158] ALSA: seq fatal error: cannot create timer (-19) [ 422.863035][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 423.029377][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.029422][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 423.029445][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.049403][ T10] usb 2-1: config 0 descriptor?? [ 423.286438][T15179] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 423.286494][T15179] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 423.286587][T15179] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 423.286721][T15179] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 423.286769][T15179] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 423.286821][T15179] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 423.286868][T15179] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 423.286957][T15179] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 423.287004][T15179] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 423.287048][T15179] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 423.287133][T15179] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 423.287190][T15179] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 423.287237][T15179] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 423.287329][T15179] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 423.420477][T15179] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 423.420542][T15179] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 423.420585][T15179] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 423.420630][T15179] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 423.524267][T15181] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4215'. [ 423.553350][ T10] logitech-djreceiver 0003:046D:C71F.0025: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 423.743257][ T10] usb 2-1: USB disconnect, device number 34 [ 425.165521][T15231] pimreg: entered allmulticast mode [ 425.483269][T15240] 9p: Unknown access argument 18446744073709551615: -34 [ 427.007850][T15305] netlink: 'syz.3.4261': attribute type 3 has an invalid length. [ 427.067479][ T37] audit: type=1326 audit(2000000255.466:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 427.067532][ T37] audit: type=1326 audit(2000000255.466:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 427.113111][ T37] audit: type=1326 audit(2000000255.506:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 427.113164][ T37] audit: type=1326 audit(2000000255.506:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 427.113204][ T37] audit: type=1326 audit(2000000255.506:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 427.113242][ T37] audit: type=1326 audit(2000000255.506:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 427.113279][ T37] audit: type=1326 audit(2000000255.506:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 427.113318][ T37] audit: type=1326 audit(2000000255.506:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15306 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 428.424498][ T5849] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 428.576814][ T5849] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 428.576843][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.610868][ T5849] usb 5-1: config 0 descriptor?? [ 428.626800][ T5849] cp210x 5-1:0.0: cp210x converter detected [ 428.627940][T15355] netlink: 'syz.5.4280': attribute type 2 has an invalid length. [ 429.253320][ T5849] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 429.253379][ T5849] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 429.288108][ T5849] usb 5-1: cp210x converter now attached to ttyUSB0 [ 429.311718][ T5849] usb 5-1: USB disconnect, device number 29 [ 429.336639][ T5849] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 429.337371][ T5849] cp210x 5-1:0.0: device disconnected [ 429.713623][T15380] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4289'. [ 430.838282][T15425] netlink: 'syz.0.4305': attribute type 7 has an invalid length. [ 430.838301][T15425] netlink: 'syz.0.4305': attribute type 8 has an invalid length. [ 431.085877][T15436] netlink: 724 bytes leftover after parsing attributes in process `syz.3.4312'. [ 431.085906][T15436] netlink: 724 bytes leftover after parsing attributes in process `syz.3.4312'. [ 431.153012][ T990] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 431.307341][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.307373][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.307394][ T990] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.307436][ T990] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 431.307459][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.405332][ T990] usb 6-1: config 0 descriptor?? [ 431.652909][ T6020] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 431.785684][ T5849] kernel write not supported for file /dsp1 (pid: 5849 comm: kworker/1:4) [ 431.805054][ T6020] usb 2-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 431.805089][ T6020] usb 2-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.805112][ T6020] usb 2-1: config 0 interface 0 has no altsetting 0 [ 431.805145][ T6020] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 431.805167][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.862829][ T6020] usb 2-1: config 0 descriptor?? [ 431.875738][ T990] elo 0003:04E7:0030.0026: reserved main item tag 0xe [ 431.875775][ T990] elo 0003:04E7:0030.0026: item fetching failed at offset 8/9 [ 431.876534][ T990] elo 0003:04E7:0030.0026: parse failed [ 431.876631][ T990] elo 0003:04E7:0030.0026: probe with driver elo failed with error -22 [ 432.097852][ T5849] usb 6-1: USB disconnect, device number 3 [ 432.325423][ T6020] sony 0003:054C:024B.0027: unbalanced delimiter at end of report description [ 432.326244][ T6020] sony 0003:054C:024B.0027: parse failed [ 432.326348][ T6020] sony 0003:054C:024B.0027: probe with driver sony failed with error -22 [ 432.518765][ T9] usb 2-1: USB disconnect, device number 35 [ 433.062835][ T5849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 433.102218][T15490] program syz.0.4336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.103620][T15490] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 433.207915][T15494] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 433.207974][T15494] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 433.208069][T15494] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 433.208157][T15494] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 433.208207][T15494] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 433.208255][T15494] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 433.208303][T15494] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 433.208431][T15494] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 433.208480][T15494] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 433.208528][T15494] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 433.208655][T15494] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 433.208702][T15494] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 433.208749][T15494] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 433.208797][T15494] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 433.208845][T15494] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 433.208895][T15494] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 433.208945][T15494] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 433.209004][T15494] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 433.209054][T15494] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 433.209103][T15494] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 433.209147][T15494] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 433.253003][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 433.253053][ T5849] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 433.253074][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.403406][ T5849] usb 6-1: config 0 descriptor?? [ 433.638639][T15506] x_tables: ip_tables: udp match: only valid for protocol 17 [ 433.758686][T15510] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4346'. [ 433.846539][ T5849] logitech 0003:046D:C626.0028: ignoring exceeding usage max [ 433.847851][ T5849] logitech 0003:046D:C626.0028: unbalanced delimiter at end of report description [ 433.848682][ T5849] logitech 0003:046D:C626.0028: parse failed [ 433.848783][ T5849] logitech 0003:046D:C626.0028: probe with driver logitech failed with error -22 [ 434.015646][T15521] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4350'. [ 434.078380][ T990] usb 6-1: USB disconnect, device number 4 [ 435.833044][ T990] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 435.846210][ T6020] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 435.960476][T15592] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 435.960515][T15592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.982711][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 435.985169][ T990] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 435.985215][ T990] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 435.985242][ T990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.985275][ T990] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 435.985298][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.999118][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.999167][ T6020] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.10 [ 435.999190][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.021640][ T6020] usb 2-1: config 0 descriptor?? [ 436.080416][ T990] usb 5-1: config 0 descriptor?? [ 436.518531][ T6020] logitech 0003:046D:C626.0029: ignoring exceeding usage max [ 436.519856][ T6020] logitech 0003:046D:C626.0029: unbalanced delimiter at end of report description [ 436.540203][ T6020] logitech 0003:046D:C626.0029: parse failed [ 436.540303][ T6020] logitech 0003:046D:C626.0029: probe with driver logitech failed with error -22 [ 436.589641][ T990] elecom 0003:056E:011C.002A: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.4-1/input0 [ 436.722244][ T990] usb 5-1: USB disconnect, device number 30 [ 436.786554][ T6020] usb 2-1: USB disconnect, device number 36 [ 436.975058][T15613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4395'. [ 437.031281][T15607] fido_id[15607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 437.569961][T15633] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 439.559521][T15695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4435'. [ 439.718436][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4437'. [ 439.882776][ T5849] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 440.037513][ T5849] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.037539][ T5849] usb 4-1: config 0 has no interface number 0 [ 440.037587][ T5849] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 440.037611][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.080851][ T5849] usb 4-1: config 0 descriptor?? [ 440.111016][ T5849] usb 4-1: selecting invalid altsetting 1 [ 440.130689][ T5849] dvb_ttusb_budget: ttusb_init_controller: error [ 440.130710][ T5849] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 440.139061][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.283382][T15721] binder: 15720:15721 ioctl 4018620d 0 returned -22 [ 440.283951][T15721] binder: 15720:15721 ioctl c0306201 200000000240 returned -11 [ 440.382272][ T5849] DVB: Unable to find symbol cx22700_attach() [ 440.426558][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 440.529843][ T5849] DVB: Unable to find symbol tda10046_attach() [ 440.529860][ T5849] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 440.556954][ T5849] usb 4-1: USB disconnect, device number 38 [ 440.797407][ T49] IPVS: starting estimator thread 0... [ 440.882978][T15737] IPVS: using max 6 ests per chain, 14400 per kthread [ 441.712210][T15765] pimreg: entered allmulticast mode [ 444.461889][T15860] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4510'. [ 444.800053][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4516'. [ 445.340997][T15890] pim6reg527: entered allmulticast mode [ 445.733335][ T49] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 445.885785][ T49] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.885821][ T49] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 445.885847][ T49] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.885881][ T49] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 445.885903][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.905097][ T49] usb 5-1: config 0 descriptor?? [ 445.906262][T15896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 446.361701][ T49] uclogic 0003:28BD:0074.002B: interface is invalid, ignoring [ 446.564158][ T990] usb 5-1: USB disconnect, device number 31 [ 446.622863][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 446.773623][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 446.776309][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 446.790157][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 446.790186][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.790205][ T10] usb 6-1: Product: syz [ 446.790219][ T10] usb 6-1: Manufacturer: syz [ 446.790232][ T10] usb 6-1: SerialNumber: syz [ 446.805104][ T10] usb 6-1: config 0 descriptor?? [ 447.257206][ T10] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 447.257252][ T10] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 447.297541][ T37] audit: type=1326 audit(2000000275.696:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15942 comm="syz.3.4549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e0883eec9 code=0x0 [ 447.470312][ T10] usb 6-1: USB disconnect, device number 5 [ 448.123093][ T990] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 448.295966][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 448.299189][ T990] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 448.299225][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.299245][ T990] usb 5-1: Product: syz [ 448.299259][ T990] usb 5-1: Manufacturer: syz [ 448.299272][ T990] usb 5-1: SerialNumber: syz [ 448.316922][ T990] usb 5-1: config 0 descriptor?? [ 448.416467][ T6020] IPVS: starting estimator thread 0... [ 448.525819][T15969] IPVS: using max 8 ests per chain, 19200 per kthread [ 448.784677][ T49] usb 5-1: USB disconnect, device number 32 [ 448.802805][ T6020] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 448.880002][T14311] udevd[14311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.953052][ T6020] usb 4-1: Using ep0 maxpacket: 16 [ 448.957410][ T6020] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 448.957438][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.957458][ T6020] usb 4-1: Product: syz [ 448.957472][ T6020] usb 4-1: Manufacturer: syz [ 448.957486][ T6020] usb 4-1: SerialNumber: syz [ 449.000989][ T6020] usb 4-1: config 0 descriptor?? [ 449.026032][ T6020] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 449.072978][ T5223] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 449.217685][ T6020] gspca_sn9c2028: read1 error -32 [ 449.222861][ T5223] usb 6-1: Using ep0 maxpacket: 8 [ 449.236718][ T5223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.236750][ T5223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.237008][ T5223] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 449.237031][ T5223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.282139][ T5223] usb 6-1: config 0 descriptor?? [ 449.419723][ T6020] gspca_sn9c2028: read1 error -71 [ 449.419867][ T6020] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 449.447386][ T6020] usb 4-1: USB disconnect, device number 39 [ 449.720589][ T5223] logitech 0003:046D:C20E.002C: rdesc size test failed for formula gp [ 449.721768][ T5223] logitech 0003:046D:C20E.002C: unbalanced collection at end of report description [ 449.751917][ T5223] logitech 0003:046D:C20E.002C: parse failed [ 449.752034][ T5223] logitech 0003:046D:C20E.002C: probe with driver logitech failed with error -22 [ 449.927869][ T990] usb 6-1: USB disconnect, device number 6 [ 450.481447][T16015] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 450.481472][T16015] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 450.489034][T16015] vhci_hcd vhci_hcd.0: Device attached [ 450.677388][ T990] vhci_hcd: vhci_device speed not set [ 450.732775][ T990] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 450.753083][ T10] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 450.905824][ T10] usb 4-1: config 0 has no interfaces? [ 450.905863][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.905886][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.930763][ T10] usb 4-1: config 0 descriptor?? [ 451.175622][ T10] usb 4-1: USB disconnect, device number 40 [ 451.186663][T16016] vhci_hcd: unknown pdu 1 [ 451.223569][ T1454] vhci_hcd: stop threads [ 451.223586][ T1454] vhci_hcd: release socket [ 451.231446][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4589'. [ 451.231745][ T1454] vhci_hcd: disconnect device [ 451.246454][ T990] vhci_hcd: vhci_device speed not set [ 451.347976][T16035] vlan2: entered allmulticast mode [ 451.347997][T16035] bond0: entered allmulticast mode [ 451.348010][T16035] bond_slave_0: entered allmulticast mode [ 451.348032][T16035] bond_slave_1: entered allmulticast mode [ 451.547303][ T37] audit: type=1326 audit(2000000535.952:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16040 comm="syz.5.4597" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5d898eec9 code=0x0 [ 452.832080][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4614'. [ 453.076208][T16089] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4616'. [ 453.777522][ T37] audit: type=1326 audit(2000000538.152:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16106 comm="syz.1.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 453.777573][ T37] audit: type=1326 audit(2000000538.182:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16106 comm="syz.1.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 453.777613][ T37] audit: type=1326 audit(2000000538.182:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16106 comm="syz.1.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 453.777649][ T37] audit: type=1326 audit(2000000538.182:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16106 comm="syz.1.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 453.777687][ T37] audit: type=1326 audit(2000000538.182:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16106 comm="syz.1.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 453.838008][ T37] audit: type=1326 audit(2000000538.242:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16106 comm="syz.1.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 453.838649][ T37] audit: type=1326 audit(2000000538.242:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16106 comm="syz.1.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bc58eec9 code=0x7ffc0000 [ 454.063668][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4628'. [ 454.416449][T16131] netlink: 'syz.3.4635': attribute type 2 has an invalid length. [ 454.807954][T16147] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 454.808145][T16147] macsec2: entered allmulticast mode [ 454.808164][T16147] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 454.892851][ T6020] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 455.049178][ T6020] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 455.070170][ T6020] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 455.070200][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.070219][ T6020] usb 2-1: Product: syz [ 455.070233][ T6020] usb 2-1: Manufacturer: syz [ 455.070247][ T6020] usb 2-1: SerialNumber: syz [ 455.144099][ T6020] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 455.245125][T16161] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4649'. [ 455.809698][ T6020] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 455.848110][ T6020] usb 2-1: USB disconnect, device number 37 [ 455.985785][ T37] audit: type=1326 audit(2000000540.392:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16183 comm="syz.0.4660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x0 [ 456.153123][T16192] veth1_macvtap: entered promiscuous mode [ 456.153382][T16192] macsec2: entered promiscuous mode [ 456.177927][T16192] veth1_macvtap: left promiscuous mode [ 456.543291][ T990] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 456.693062][ T990] usb 6-1: Using ep0 maxpacket: 8 [ 456.696018][ T990] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 456.696068][ T990] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 456.696090][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.725529][ T990] usb 6-1: config 0 descriptor?? [ 457.151303][T16211] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4671'. [ 457.151333][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4671'. [ 457.212032][ T990] corsair 0003:1B1C:1B09.002D: unbalanced collection at end of report description [ 457.230649][ T990] corsair 0003:1B1C:1B09.002D: parse failed [ 457.230751][ T990] corsair 0003:1B1C:1B09.002D: probe with driver corsair failed with error -22 [ 457.425878][ T990] usb 6-1: USB disconnect, device number 7 [ 457.953288][T16228] netlink: 'syz.4.4679': attribute type 6 has an invalid length. [ 458.840926][T16256] program syz.0.4693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.493053][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 460.511477][T16324] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 461.234525][ T37] audit: type=1800 audit(2000000545.622:216): pid=16353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.4737" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 462.182912][ T990] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 462.268599][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4751'. [ 462.332825][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 462.333717][ T990] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 462.335184][ T990] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.335208][ T990] usb 2-1: config 0 has no interface number 0 [ 462.336660][ T990] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.336683][ T990] usb 2-1: config 0 has no interface number 0 [ 462.384915][ T990] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.384939][ T990] usb 2-1: config 0 has no interface number 0 [ 462.389774][ T990] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.389800][ T990] usb 2-1: config 0 has no interface number 0 [ 462.426101][ T990] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.426125][ T990] usb 2-1: config 0 has no interface number 0 [ 462.447847][ T990] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.447874][ T990] usb 2-1: config 0 has no interface number 0 [ 462.470287][ T990] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.470311][ T990] usb 2-1: config 0 has no interface number 0 [ 462.471454][ T990] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.471475][ T990] usb 2-1: config 0 has no interface number 0 [ 462.487461][ T990] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 462.487490][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.487509][ T990] usb 2-1: Product: syz [ 462.487524][ T990] usb 2-1: Manufacturer: syz [ 462.487537][ T990] usb 2-1: SerialNumber: syz [ 462.544801][ T990] usb 2-1: config 0 descriptor?? [ 462.570953][ T990] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 462.724897][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4758'. [ 463.439900][T16413] xt_socket: unknown flags 0x40 [ 463.763201][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 463.934190][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 463.957541][ T10] usb 5-1: config 0 has an invalid interface number: 24 but max is 0 [ 463.957569][ T10] usb 5-1: config 0 has no interface number 0 [ 463.957846][ T10] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.957872][ T10] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.957912][ T10] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 463.958494][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.030547][ T10] usb 5-1: config 0 descriptor?? [ 464.707429][ T5223] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 464.730695][ T10] usb 5-1: USB disconnect, device number 33 [ 464.852842][ T5223] usb 4-1: Using ep0 maxpacket: 8 [ 464.855965][ T5223] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.857473][ T5223] usb 4-1: config 4 interface 0 has no altsetting 0 [ 464.890000][ T5223] usb 4-1: string descriptor 0 read error: -22 [ 464.890151][ T5223] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 464.890174][ T5223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.975648][ T5223] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 465.000430][ T5223] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 465.000798][ T5223] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 465.000847][ T5223] usb 4-1: media controller created [ 465.088913][ T5223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.140289][ T990] etas_es58x 2-1:0.2: could not retrieve the product info string [ 465.291178][ T5223] zl10353_read_register: readreg error (reg=127, ret==0) [ 465.480703][ T5223] usb 4-1: USB disconnect, device number 41 [ 465.646904][ T990] usb 2-1: USB disconnect, device number 38 [ 465.656207][ T990] etas_es58x 2-1:0.2: Disconnecting syz syz [ 466.307724][T16478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4793'. [ 466.490743][T16484] tipc: Enabling of bearer rejected, failed to enable media [ 467.004576][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4803'. [ 467.279831][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4806'. [ 467.324379][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4806'. [ 468.032988][ T6035] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 468.203161][ T6035] usb 4-1: Using ep0 maxpacket: 32 [ 468.208662][ T6035] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.208688][ T6035] usb 4-1: config 0 has no interface number 0 [ 468.220854][ T6035] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 468.220882][ T6035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.220900][ T6035] usb 4-1: Product: syz [ 468.220913][ T6035] usb 4-1: Manufacturer: syz [ 468.220926][ T6035] usb 4-1: SerialNumber: syz [ 468.251728][ T6035] usb 4-1: config 0 descriptor?? [ 468.385840][ T6035] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 468.385866][ T6035] usb 4-1: selecting invalid altsetting 1 [ 468.385881][ T6035] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 468.433142][ T6035] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 468.433537][ T6035] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 468.433599][ T6035] usb 4-1: media controller created [ 468.626698][ T6035] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.655896][T16529] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 469.683234][ T6035] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 469.683286][ T6035] zl10353_read_register: readreg error (reg=127, ret==-71) [ 469.683742][ T6035] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 469.955842][ T6035] usb 4-1: USB disconnect, device number 42 [ 470.100679][ T990] kernel write not supported for file /vcs (pid: 990 comm: kworker/0:2) [ 470.770979][T16608] netlink: 536 bytes leftover after parsing attributes in process `syz.3.4842'. [ 470.900822][ T49] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x4 [ 470.900857][ T49] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x2 [ 470.900922][ T49] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x3 [ 470.900946][ T49] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x0 [ 470.900970][ T49] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x0 [ 470.900994][ T49] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x0 [ 470.901018][ T49] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x0 [ 470.901041][ T49] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x0 [ 471.102407][ T49] hid-generic 0000:3000000:0000.002F: hidraw0: HID v0.00 Device [sy] on syz0 [ 471.449206][T16621] fido_id[16621]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 471.486917][T16634] netlink: 'syz.4.4853': attribute type 1 has an invalid length. [ 471.624059][ T6035] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 471.785357][ T6035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.785391][ T6035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.785430][ T6035] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 471.785453][ T6035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.807416][ T6035] usb 4-1: config 0 descriptor?? [ 471.992808][ T990] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 472.158940][ T990] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 472.158967][ T990] usb 5-1: config 0 has no interface number 0 [ 472.159078][ T990] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.159104][ T990] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 472.159130][ T990] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 472.166511][ T990] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 472.166596][ T990] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 472.166615][ T990] usb 5-1: Product: syz [ 472.166629][ T990] usb 5-1: SerialNumber: syz [ 472.264467][ T990] usb 5-1: config 0 descriptor?? [ 472.321395][ T990] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 472.325111][ T6035] petalynx 0003:18B1:0037.0030: item fetching failed at offset 2/5 [ 472.325895][ T6035] petalynx 0003:18B1:0037.0030: parse failed [ 472.325965][ T6035] petalynx 0003:18B1:0037.0030: probe with driver petalynx failed with error -22 [ 472.403397][ T990] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input35 [ 472.529669][ T49] usb 4-1: USB disconnect, device number 43 [ 472.532100][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.532350][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.532592][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.538597][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.538892][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.539688][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.539925][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.540167][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.540398][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.540731][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 472.671461][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 472.708558][ T990] usb 5-1: USB disconnect, device number 34 [ 472.708658][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 472.776516][ T990] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 472.826789][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 472.826906][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.864103][ T9] usb 2-1: config 0 descriptor?? [ 472.881246][ T9] cp210x 2-1:0.0: cp210x converter detected [ 473.478895][ T9] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 473.478922][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 473.503533][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 473.515302][ T9] usb 2-1: USB disconnect, device number 39 [ 473.534921][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 473.535672][ T9] cp210x 2-1:0.0: device disconnected [ 473.553872][T16675] binder: 16674:16675 ioctl c0306201 2000000001c0 returned -22 [ 473.827146][ T49] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 473.962435][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4877'. [ 473.988235][T16687] vlan2: entered promiscuous mode [ 473.988257][T16687] bridge0: entered promiscuous mode [ 473.993344][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 473.993376][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 473.993418][ T49] usb 4-1: New USB device found, idVendor=056a, idProduct=0219, bcdDevice= 0.f7 [ 473.993440][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.049916][ T49] usb 4-1: config 0 descriptor?? [ 474.578099][T16701] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.4884'. [ 474.698602][ T9] usb 4-1: USB disconnect, device number 44 [ 475.121709][T16719] netlink: 'syz.5.4893': attribute type 29 has an invalid length. [ 475.128303][T16719] netlink: 'syz.5.4893': attribute type 29 has an invalid length. [ 475.246976][T16725] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4896'. [ 475.247000][T16725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4896'. [ 475.247052][T16725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4896'. [ 475.427369][T16729] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 475.427425][T16729] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 475.427520][T16729] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 475.427646][T16729] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 475.427693][T16729] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 475.427741][T16729] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 475.427869][T16729] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 475.427916][T16729] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 475.427965][T16729] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 475.428076][T16729] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 475.428124][T16729] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 475.428177][T16729] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 475.428265][T16729] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 475.428313][T16729] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 475.428363][T16729] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 475.428410][T16729] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 475.428457][T16729] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 475.428505][T16729] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 476.131911][T16753] trusted_key: encrypted_key: key trusted:syz not found [ 476.691824][T16777] binder: 16775:16777 ioctl c0306201 2000000003c0 returned -22 [ 476.727407][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4922'. [ 476.817015][T16778] veth0_macvtap: left promiscuous mode [ 477.004846][ T37] audit: type=1326 audit(2000000561.402:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16785 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 477.005128][ T37] audit: type=1326 audit(2000000561.412:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16785 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 477.005812][ T37] audit: type=1326 audit(2000000561.412:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16785 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 477.006058][ T37] audit: type=1326 audit(2000000561.412:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16785 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 477.006295][ T37] audit: type=1326 audit(2000000561.412:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16785 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 477.007867][ T37] audit: type=1326 audit(2000000561.412:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16785 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 477.008222][ T37] audit: type=1326 audit(2000000561.412:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16785 comm="syz.0.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3542b1eec9 code=0x7ffc0000 [ 477.232486][T16787] tipc: Enabled bearer , priority 17 [ 478.728581][ T9] libceph: mon0 (1)[c::]:6789 socket error on write [ 478.755625][ T9] libceph: mon0 (1)[c::]:6789 socket error on write [ 479.016248][ T9] libceph: mon0 (1)[c::]:6789 socket error on write [ 479.340431][T16827] ceph: No mds server is up or the cluster is laggy [ 479.532198][ T9] libceph: mon0 (1)[c::]:6789 socket error on write [ 480.516232][T16878] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 480.516289][T16878] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 480.516382][T16878] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 480.516511][T16878] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 480.516566][T16878] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 480.516614][T16878] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 480.516740][T16878] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 480.516909][T16878] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 480.516959][T16878] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 480.517007][T16878] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 480.517055][T16878] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 480.517102][T16878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 481.830252][T16921] vivid-001: disconnect [ 481.889615][T16917] vivid-001: reconnect [ 482.267566][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4996'. [ 482.513731][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4998'. [ 483.283171][T16964] [U] [ 484.215281][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5024'. [ 484.651989][T17007] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5032'. [ 484.652047][T17007] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5032'. [ 484.652063][T17007] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5032'. [ 485.018625][T17022] loop6: detected capacity change from 0 to 524287999 [ 485.172833][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 485.322760][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 485.325502][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 485.326645][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 485.326674][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 485.326692][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.331434][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.331460][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.331479][ T9] usb 4-1: Product: syz [ 485.331492][ T9] usb 4-1: Manufacturer: syz [ 485.331505][ T9] usb 4-1: SerialNumber: syz [ 485.463437][ T10] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 485.626931][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30 [ 485.627035][ T10] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 485.627065][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.627099][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 485.627121][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.724532][ T10] usb 2-1: config 0 descriptor?? [ 485.852909][ T49] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 486.003041][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 486.012566][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.015329][ T49] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.035998][ T49] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 486.036027][ T49] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 486.036047][ T49] usb 6-1: Product: syz [ 486.036061][ T49] usb 6-1: Manufacturer: syz [ 486.036074][ T49] usb 6-1: SerialNumber: syz [ 486.073314][ T9] usb 4-1: 0:2 : does not exist [ 486.078339][ T49] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input36 [ 486.171721][ T9] usb 4-1: USB disconnect, device number 45 [ 486.180149][ T10] kye 0003:0458:501B.0032: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 486.199813][ T10] kye 0003:0458:501B.0032: hidraw0: USB HID v8.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 486.199848][ T10] kye 0003:0458:501B.0032: tablet-enabling feature report not found [ 486.199863][ T10] kye 0003:0458:501B.0032: tablet enabling failed [ 486.307520][T13990] udevd[13990]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.343426][ T10] usb 2-1: USB disconnect, device number 40 [ 486.391252][ T49] usb 6-1: USB disconnect, device number 8 [ 486.518716][T17046] fido_id[17046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 486.543308][ T49] appletouch 6-1:1.0: input: appletouch disconnected [ 487.773026][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 487.952861][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 487.955241][ T9] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 487.955266][ T9] usb 4-1: config 0 has no interface number 0 [ 487.955313][ T9] usb 4-1: config 0 interface 224 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.955339][ T9] usb 4-1: config 0 interface 224 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 487.955366][ T9] usb 4-1: config 0 interface 224 has no altsetting 0 [ 487.955399][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 487.955420][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.048236][ T9] usb 4-1: config 0 descriptor?? [ 488.263191][T17104] tipc: Started in network mode [ 488.263233][T17104] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 488.263556][T17104] tipc: Enabled bearer , priority 10 [ 488.293276][ T5855] Bluetooth: hci5: command 0x0405 tx timeout [ 488.728767][ T49] usb 4-1: USB disconnect, device number 46 [ 488.792973][T17125] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5085'. [ 489.382898][ T49] tipc: Node number set to 10136234 [ 491.353523][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 491.522082][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 491.522110][ T10] usb 2-1: config 0 has no interface number 0 [ 491.522158][ T10] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.522183][ T10] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.522205][ T10] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 491.522246][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 491.522269][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.608127][ T10] usb 2-1: config 0 descriptor?? [ 491.733164][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 491.913883][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 491.920481][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 491.920574][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 491.920599][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 491.920621][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 491.920644][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 491.988154][ T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 491.988240][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.988262][ T9] usb 4-1: Product: syz [ 491.988276][ T9] usb 4-1: Manufacturer: syz [ 491.988290][ T9] usb 4-1: SerialNumber: syz [ 492.028070][ T10] uclogic 0003:28BD:0934.0034: Interface probing failed: -22 [ 492.028132][ T10] uclogic 0003:28BD:0934.0034: interface is invalid, ignoring [ 492.056730][ T9] usb 4-1: config 0 descriptor?? [ 492.286055][ T6020] usb 2-1: USB disconnect, device number 41 [ 492.523037][ T9] input input37: Device does not respond to id packet M [ 492.597277][T17213] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5118'. [ 492.711191][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 492.711244][ T9] input input37: Device does not respond to id packet P [ 492.711758][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 492.711802][ T9] input input37: Device does not respond to id packet B [ 492.712258][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 492.712302][ T9] input input37: Device does not respond to id packet N [ 492.732886][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 492.742853][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 492.752998][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 492.762811][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 492.783390][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 492.815445][ T9] usb 4-1: USB disconnect, device number 47 [ 493.272768][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 493.837472][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.837506][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 493.837541][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 493.837563][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.134879][ T10] usb 5-1: config 0 descriptor?? [ 494.830402][ T10] lenovo 0003:17EF:6067.0035: item fetching failed at offset 0/2 [ 494.831242][ T10] lenovo 0003:17EF:6067.0035: hid_parse failed [ 494.831313][ T10] lenovo 0003:17EF:6067.0035: probe with driver lenovo failed with error -22 [ 494.964591][T17233] sp0: Synchronizing with TNC [ 494.964639][T17236] sp0: Found TNC [ 495.053414][ T10] usb 5-1: USB disconnect, device number 35 [ 498.962657][ C1] sched: DL replenish lagged too much [ 501.023009][ T990] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 501.197007][ T990] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.197033][ T990] usb 2-1: config 0 has no interface number 0 [ 501.197085][ T990] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.197110][ T990] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.197150][ T990] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 501.197171][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.274622][ T990] usb 2-1: config 0 descriptor?? [ 501.597296][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.758116][ T990] prodikeys 0003:041E:2801.0036: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 501.765562][ T990] hid_prodikeys: hid-prodikeys: failed to find output report [ 501.765562][ T990] [ 501.951725][ T990] usb 2-1: USB disconnect, device number 42 [ 502.101849][T17279] fido_id[17279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 510.874725][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.906635][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 510.908125][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 510.910135][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 510.910921][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 512.614774][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 512.646949][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 512.648513][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 512.650189][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 512.651050][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 513.013022][ T5842] Bluetooth: hci4: command tx timeout [ 514.787805][ T5842] Bluetooth: hci6: command tx timeout [ 515.092837][ T5842] Bluetooth: hci4: command tx timeout [ 515.915349][T17346] netlink: 'syz.5.5171': attribute type 1 has an invalid length. [ 516.863359][ T5842] Bluetooth: hci6: command tx timeout [ 516.959492][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5178'. [ 517.172804][ T5842] Bluetooth: hci4: command tx timeout [ 518.933094][ T5842] Bluetooth: hci6: command tx timeout [ 519.252834][ T5842] Bluetooth: hci4: command tx timeout [ 521.013112][ T5842] Bluetooth: hci6: command tx timeout [ 532.290085][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 532.308882][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 532.331138][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 532.345984][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 532.346813][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.372797][T17396] Bluetooth: hci0: command tx timeout [ 536.457855][T17396] Bluetooth: hci0: command tx timeout [ 538.533101][T17396] Bluetooth: hci0: command tx timeout [ 540.614848][T17396] Bluetooth: hci0: command tx timeout [ 542.105069][T17396] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 542.140059][T17396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 542.142099][T17396] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 542.158245][T17396] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 542.181605][T17396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 542.391915][T17395] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 542.418830][T17395] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 542.446281][T17395] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 542.447451][T17395] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 542.467487][T17395] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 544.293277][T17395] Bluetooth: hci7: command tx timeout [ 544.613306][T17395] Bluetooth: hci8: command tx timeout [ 546.375604][T17395] Bluetooth: hci7: command tx timeout [ 546.693228][T17395] Bluetooth: hci8: command tx timeout [ 548.453342][T17395] Bluetooth: hci7: command tx timeout [ 548.773398][T17395] Bluetooth: hci8: command tx timeout [ 550.533137][T17395] Bluetooth: hci7: command tx timeout [ 550.853522][T17395] Bluetooth: hci8: command tx timeout [ 563.067267][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.997368][T17396] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 571.028901][T17396] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 571.031995][T17396] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 571.049885][T17396] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 571.068202][T17396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.629256][T17395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 572.650339][T17395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.651877][T17395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.654130][T17395] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.654985][T17395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.172896][T17395] Bluetooth: hci1: command tx timeout [ 574.773539][T17395] Bluetooth: hci5: command tx timeout [ 575.253142][T17395] Bluetooth: hci1: command tx timeout [ 576.852966][T17395] Bluetooth: hci5: command tx timeout [ 577.332960][T17395] Bluetooth: hci1: command tx timeout [ 578.933221][T17395] Bluetooth: hci5: command tx timeout [ 579.413049][T17395] Bluetooth: hci1: command tx timeout [ 581.012958][T17395] Bluetooth: hci5: command tx timeout [ 593.365580][T17396] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 593.395063][T17396] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 593.396540][T17396] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 593.398012][T17396] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 593.398808][T17396] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 595.493618][T17396] Bluetooth: hci9: command tx timeout [ 597.574704][T17396] Bluetooth: hci9: command tx timeout [ 599.653017][T17396] Bluetooth: hci9: command tx timeout [ 601.737834][T17396] Bluetooth: hci9: command tx timeout [ 602.645894][T17395] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 602.666600][T17395] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 602.669520][T17395] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 602.690385][T17395] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 602.691757][T17395] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 602.880660][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 602.913333][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 602.915558][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 602.916831][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 602.918996][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 623.918582][T17395] Bluetooth: hci11: command tx timeout [ 624.461729][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.053274][T17395] Bluetooth: hci10: command tx timeout [ 626.054005][T17395] Bluetooth: hci11: command tx timeout [ 628.132864][T17396] Bluetooth: hci11: command tx timeout [ 628.132894][T17396] Bluetooth: hci10: command tx timeout [ 630.214649][T17395] Bluetooth: hci10: command tx timeout [ 630.214683][T17395] Bluetooth: hci11: command tx timeout [ 631.205362][T17395] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 631.209549][T17395] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 631.211269][T17395] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 631.212445][T17395] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 631.248619][T17395] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 632.293030][T17395] Bluetooth: hci10: command tx timeout [ 632.756144][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 632.776920][ T5855] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 632.778346][ T5855] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 632.779913][ T5855] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 632.780718][ T5855] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 644.467411][T17395] Bluetooth: hci13: command tx timeout [ 646.532971][T17396] Bluetooth: hci13: command tx timeout [ 646.533568][T17396] Bluetooth: hci12: command tx timeout [ 648.612893][ T5855] Bluetooth: hci12: command tx timeout [ 648.612924][ T5855] Bluetooth: hci13: command tx timeout [ 650.693464][T17396] Bluetooth: hci13: command tx timeout [ 650.693495][T17396] Bluetooth: hci12: command tx timeout [ 652.772920][ T5855] Bluetooth: hci12: command tx timeout [ 653.885380][T17396] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.909108][T17396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.937200][T17396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.938530][T17396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.939510][T17396] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 654.533768][ T38] INFO: task kworker/u8:10:1415 blocked for more than 143 seconds. [ 654.533792][ T38] Not tainted syzkaller #0 [ 654.533802][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.533811][ T38] task:kworker/u8:10 state:D stack:20584 pid:1415 tgid:1415 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 654.533857][ T38] Workqueue: events_unbound free_mem_alloc_deferred [ 654.533889][ T38] Call Trace: [ 654.533896][ T38] [ 654.533910][ T38] __schedule+0x16f3/0x4c20 [ 654.533944][ T38] ? sched_clock+0x3f/0x60 [ 654.533966][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 654.533997][ T38] ? __pfx___schedule+0x10/0x10 [ 654.534045][ T38] rt_mutex_schedule+0x77/0xf0 [ 654.534064][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 654.534100][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 654.534124][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 654.534148][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 654.534170][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 654.534201][ T38] ? rcu_barrier+0x4c/0x570 [ 654.534226][ T38] ? __lock_acquire+0xab9/0xd20 [ 654.534253][ T38] ? rcu_barrier+0x4c/0x570 [ 654.534269][ T38] mutex_lock_nested+0x16a/0x1d0 [ 654.534296][ T38] rcu_barrier+0x4c/0x570 [ 654.534318][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.534346][ T38] free_mem_alloc_deferred+0x16/0x30 [ 654.534366][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 654.534386][ T38] process_scheduled_works+0xade/0x17b0 [ 654.534444][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 654.534485][ T38] worker_thread+0x8a0/0xda0 [ 654.534534][ T38] kthread+0x70e/0x8a0 [ 654.534561][ T38] ? __pfx_worker_thread+0x10/0x10 [ 654.534582][ T38] ? __pfx_kthread+0x10/0x10 [ 654.534611][ T38] ? __pfx_kthread+0x10/0x10 [ 654.534636][ T38] ret_from_fork+0x436/0x7d0 [ 654.534660][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 654.534688][ T38] ? __switch_to_asm+0x39/0x70 [ 654.534705][ T38] ? __switch_to_asm+0x33/0x70 [ 654.534721][ T38] ? __pfx_kthread+0x10/0x10 [ 654.534745][ T38] ret_from_fork_asm+0x1a/0x30 [ 654.534779][ T38] [ 654.534869][ T38] INFO: task syz.3.5125:17229 blocked for more than 143 seconds. [ 654.534883][ T38] Not tainted syzkaller #0 [ 654.534892][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.534901][ T38] task:syz.3.5125 state:D stack:25128 pid:17229 tgid:17229 ppid:5845 task_flags:0x400040 flags:0x00004006 [ 654.534944][ T38] Call Trace: [ 654.534950][ T38] [ 654.534963][ T38] __schedule+0x16f3/0x4c20 [ 654.535009][ T38] ? __lock_acquire+0xab9/0xd20 [ 654.535032][ T38] ? __pfx___schedule+0x10/0x10 [ 654.535072][ T38] ? schedule+0x91/0x360 [ 654.535099][ T38] schedule+0x165/0x360 [ 654.535124][ T38] schedule_timeout+0x9a/0x270 [ 654.535147][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 654.535182][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.535206][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.535228][ T38] ? wait_for_completion+0x267/0x5d0 [ 654.535254][ T38] wait_for_completion+0x2bf/0x5d0 [ 654.535291][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 654.535322][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 654.535347][ T38] rcu_barrier+0x463/0x570 [ 654.535377][ T38] netdev_run_todo+0x327/0xea0 [ 654.535398][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 654.535433][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 654.535450][ T38] ? unregister_netdevice_queue+0x33c/0x380 [ 654.535473][ T38] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 654.535496][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 654.535518][ T38] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 654.535544][ T38] unregister_netdev+0x52/0x60 [ 654.535563][ T38] sixpack_close+0x1d8/0x280 [ 654.535589][ T38] tty_ldisc_kill+0xa3/0x1a0 [ 654.535611][ T38] tty_ldisc_release+0x174/0x200 [ 654.535632][ T38] tty_release_struct+0x2a/0xd0 [ 654.535654][ T38] tty_release+0xcb6/0x1650 [ 654.535686][ T38] ? evm_file_release+0x10b/0x1e0 [ 654.535710][ T38] ? __pfx_tty_release+0x10/0x10 [ 654.535728][ T38] __fput+0x458/0xa80 [ 654.535759][ T38] task_work_run+0x1d4/0x260 [ 654.535781][ T38] ? __pfx_task_work_run+0x10/0x10 [ 654.535805][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 654.535832][ T38] exit_to_user_mode_loop+0xec/0x110 [ 654.535854][ T38] do_syscall_64+0x2bd/0x3b0 [ 654.535871][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.535895][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.535913][ T38] ? clear_bhb_loop+0x60/0xb0 [ 654.535935][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.535959][ T38] RIP: 0033:0x7f1e0883eec9 [ 654.535979][ T38] RSP: 002b:00007fff287e1b08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 654.535998][ T38] RAX: 0000000000000000 RBX: 00007f1e08a97da0 RCX: 00007f1e0883eec9 [ 654.536011][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 654.536023][ T38] RBP: 00007f1e08a97da0 R08: 000000000000a41c R09: 00000003287e1dff [ 654.536036][ T38] R10: 00000000005f143c R11: 0000000000000246 R12: 0000000000078f3d [ 654.536048][ T38] R13: 00007f1e08a96090 R14: ffffffffffffffff R15: 00007fff287e1c20 [ 654.536080][ T38] [ 654.536107][ T38] [ 654.536107][ T38] Showing all locks held in the system: [ 654.536116][ T38] 3 locks held by kworker/0:0/9: [ 654.536127][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 654.536174][ T38] #1: ffffc900000e7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 654.536219][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 654.536263][ T38] 3 locks held by kworker/u8:0/12: [ 654.536274][ T38] #0: ffff88814d2d9938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 654.536319][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 654.536365][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 654.536411][ T38] 3 locks held by kworker/u8:1/13: [ 654.536421][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 654.536472][ T38] #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 654.536518][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 654.536562][ T38] 2 locks held by rcuc/1/28: [ 654.536570][ T38] 2 locks held by ksoftirqd/1/30: [ 654.536580][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 654.536625][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 654.536670][ T38] 1 lock held by khungtaskd/38: [ 654.536679][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 654.536730][ T38] 3 locks held by kworker/u8:5/1102: [ 654.536741][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 654.536786][ T38] #1: ffffc90004ac7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 654.536830][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 654.536875][ T38] 3 locks held by kworker/u8:10/1415: [ 654.536885][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 654.536930][ T38] #1: ffffc90005517bc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 654.536974][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 654.537016][ T38] 2 locks held by kworker/u8:11/1430: [ 654.537027][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 654.537071][ T38] #1: ffffc90005627bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 654.537130][ T38] 2 locks held by getty/5602: [ 654.537141][ T38] #0: ffff88823bf3c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 654.537189][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 654.537238][ T38] 7 locks held by kworker/1:7/6011: [ 654.537250][ T38] 1 lock held by syz.4.3494/13437: [ 654.537260][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 654.537304][ T38] 2 locks held by syz.3.5125/17229: [ 654.537314][ T38] #0: ffff88803c1c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x110/0x200 [ 654.537355][ T38] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 654.537396][ T38] 1 lock held by syz-executor/17320: [ 654.537407][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 654.537459][ T38] 2 locks held by syz-executor/17325: [ 654.537469][ T38] #0: ffff888033440e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 654.537515][ T38] #1: ffff8880334400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 654.537562][ T38] 1 lock held by syz.5.5176/17353: [ 654.537572][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 654.537619][ T38] 1 lock held by syz.0.5186/17382: [ 654.537629][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 654.537675][ T38] 1 lock held by syz.1.5190/17391: [ 654.537685][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: mrtsock_destruct+0x4a/0x240 [ 654.537733][ T38] 1 lock held by syz-executor/17393: [ 654.537743][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 654.537790][ T38] 1 lock held by syz-executor/17402: [ 654.537800][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 654.537845][ T38] 1 lock held by syz-executor/17407: [ 654.537856][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 654.537901][ T38] 1 lock held by syz-executor/17415: [ 654.537911][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 654.537953][ T38] 1 lock held by syz-executor/17420: [ 654.537964][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 654.538006][ T38] 1 lock held by syz-executor/17425: [ 654.538016][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 654.538058][ T38] 2 locks held by kworker/1:0/17429: [ 654.538069][ T38] 1 lock held by syz-executor/17432: [ 654.538079][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 654.538121][ T38] 1 lock held by syz-executor/17435: [ 654.538131][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 654.538174][ T38] 1 lock held by syz-executor/17441: [ 654.538184][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 654.538226][ T38] 1 lock held by dhcpcd/17446: [ 654.538236][ T38] #0: ffff8880383dda38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 654.538285][ T38] 1 lock held by syz-executor/17447: [ 654.538295][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 654.538337][ T38] 1 lock held by dhcpcd/17448: [ 654.538347][ T38] #0: ffff8880383d8278 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 654.538395][ T38] 1 lock held by dhcpcd/17450: [ 654.538405][ T38] #0: ffff8880383de0f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 654.538458][ T38] 1 lock held by dhcpcd/17451: [ 654.538467][ T38] #0: ffff8880383d9d78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 654.538516][ T38] 1 lock held by syz-executor/17457: [ 654.538526][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 654.538568][ T38] [ 654.538573][ T38] ============================================= [ 654.538573][ T38] [ 654.538588][ T38] NMI backtrace for cpu 0 [ 654.538606][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 654.538627][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 654.538637][ T38] Call Trace: [ 654.538644][ T38] [ 654.538651][ T38] dump_stack_lvl+0x189/0x250 [ 654.538678][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.538701][ T38] ? __pfx__printk+0x10/0x10 [ 654.538732][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 654.538756][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 654.538780][ T38] ? __pfx__printk+0x10/0x10 [ 654.538803][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 654.538827][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 654.538851][ T38] watchdog+0xf93/0xfe0 [ 654.538877][ T38] ? watchdog+0x1de/0xfe0 [ 654.538904][ T38] kthread+0x70e/0x8a0 [ 654.538931][ T38] ? __pfx_watchdog+0x10/0x10 [ 654.538950][ T38] ? __pfx_kthread+0x10/0x10 [ 654.538978][ T38] ? __pfx_kthread+0x10/0x10 [ 654.539001][ T38] ret_from_fork+0x436/0x7d0 [ 654.539025][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 654.539053][ T38] ? __switch_to_asm+0x39/0x70 [ 654.539068][ T38] ? __switch_to_asm+0x33/0x70 [ 654.539083][ T38] ? __pfx_kthread+0x10/0x10 [ 654.539107][ T38] ret_from_fork_asm+0x1a/0x30 [ 654.539139][ T38] [ 654.539146][ T38] Sending NMI from CPU 0 to CPUs 1: [ 654.539172][ C1] NMI backtrace for cpu 1 [ 654.539185][ C1] CPU: 1 UID: 0 PID: 6011 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 654.539203][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 654.539213][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 654.539234][ C1] RIP: 0010:unwind_next_frame+0x214/0x2390 [ 654.539254][ C1] Code: ef 08 8b 15 4e 6f b2 0b 8d 42 ff 44 39 f8 0f 86 65 18 00 00 44 89 f8 4c 8d 2c 85 74 00 4b 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 <84> c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d [ 654.539267][ C1] RSP: 0018:ffffc900054f66d8 EFLAGS: 00000a06 [ 654.539280][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 7eb077f88739fc00 [ 654.539291][ C1] RDX: 000000000009fba8 RSI: ffffffff8b621660 RDI: ffffffff8b621620 [ 654.539302][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 654.539313][ C1] R10: ffffc900054f67f8 R11: ffffffff81aaf310 R12: ffffffff88e2fda2 [ 654.539325][ C1] R13: ffffffff906a8c68 R14: ffffc900054f67a8 R15: 000000000007e2fd [ 654.539337][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 654.539350][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.539361][ C1] CR2: 0000561d771c3ed8 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 654.539375][ C1] Call Trace: [ 654.539381][ C1] [ 654.539390][ C1] ? unwind_next_frame+0xa5/0x2390 [ 654.539409][ C1] ? __netif_receive_skb+0x143/0x380 [ 654.539428][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 654.539445][ C1] arch_stack_walk+0x11c/0x150 [ 654.539467][ C1] ? __netif_receive_skb+0x143/0x380 [ 654.539486][ C1] stack_trace_save+0x9c/0xe0 [ 654.539500][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 654.539515][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 654.539530][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 654.539545][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 654.539559][ C1] ? nft_do_chain+0x40c/0x1920 [ 654.539577][ C1] ? __lock_acquire+0xab9/0xd20 [ 654.539594][ C1] kasan_save_track+0x3e/0x80 [ 654.539609][ C1] ? kasan_save_track+0x3e/0x80 [ 654.539624][ C1] ? kasan_save_free_info+0x46/0x50 [ 654.539637][ C1] ? __kasan_slab_free+0x5b/0x80 [ 654.539652][ C1] ? kmem_cache_free+0x195/0x510 [ 654.539669][ C1] ? skb_release_data+0x62d/0x7c0 [ 654.539689][ C1] ? consume_skb+0x9e/0xf0 [ 654.539706][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 654.539720][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 654.539735][ C1] ? nft_do_chain+0x40c/0x1920 [ 654.539748][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 654.539762][ C1] ? nf_hook_slow+0xc2/0x220 [ 654.539780][ C1] ? NF_HOOK+0x206/0x3a0 [ 654.539797][ C1] ? NF_HOOK+0x30c/0x3a0 [ 654.539813][ C1] ? __netif_receive_skb+0x143/0x380 [ 654.539850][ C1] kasan_save_free_info+0x46/0x50 [ 654.539864][ C1] __kasan_slab_free+0x5b/0x80 [ 654.539880][ C1] ? skb_release_data+0x62d/0x7c0 [ 654.539893][ C1] kmem_cache_free+0x195/0x510 [ 654.539913][ C1] skb_release_data+0x62d/0x7c0 [ 654.539932][ C1] consume_skb+0x9e/0xf0 [ 654.539950][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 654.539969][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 654.539986][ C1] ? nf_ip_checksum+0x13c/0x510 [ 654.540004][ C1] nft_synproxy_do_eval+0x345/0x570 [ 654.540022][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 654.540046][ C1] nft_do_chain+0x40c/0x1920 [ 654.540068][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 654.540087][ C1] ? __lock_acquire+0xab9/0xd20 [ 654.540117][ C1] nft_do_chain_inet+0x25d/0x340 [ 654.540132][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 654.540147][ C1] ? __lock_acquire+0xab9/0xd20 [ 654.540168][ C1] ? NF_HOOK+0x9a/0x3a0 [ 654.540186][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 654.540202][ C1] nf_hook_slow+0xc2/0x220 [ 654.540222][ C1] NF_HOOK+0x206/0x3a0 [ 654.540240][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 654.540258][ C1] ? NF_HOOK+0x9a/0x3a0 [ 654.540274][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 654.540290][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 654.540310][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 654.540328][ C1] ? skb_dst+0x4f/0xd0 [ 654.540346][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 654.540366][ C1] NF_HOOK+0x30c/0x3a0 [ 654.540383][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 654.540401][ C1] ? NF_HOOK+0x9a/0x3a0 [ 654.540417][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 654.540434][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 654.540457][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 654.540474][ C1] __netif_receive_skb+0x143/0x380 [ 654.540490][ C1] ? rt_spin_unlock+0x65/0x80 [ 654.540509][ C1] ? process_backlog+0x27b/0x900 [ 654.540525][ C1] process_backlog+0x31e/0x900 [ 654.540549][ C1] __napi_poll+0xb3/0x540 [ 654.540567][ C1] net_rx_action+0x707/0xe00 [ 654.540594][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 654.540613][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 654.540636][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 654.540658][ C1] handle_softirqs+0x22f/0x710 [ 654.540684][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 654.540706][ C1] __local_bh_enable_ip+0x179/0x270 [ 654.540724][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 654.540740][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 654.540756][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 654.540780][ C1] ? neigh_periodic_work+0x57/0xe90 [ 654.540799][ C1] neigh_periodic_work+0xc37/0xe90 [ 654.540819][ C1] ? neigh_periodic_work+0x57/0xe90 [ 654.540836][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 654.540854][ C1] process_scheduled_works+0xade/0x17b0 [ 654.540885][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 654.540910][ C1] worker_thread+0x8a0/0xda0 [ 654.540928][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 654.540951][ C1] ? __kthread_parkme+0x7b/0x200 [ 654.540973][ C1] kthread+0x70e/0x8a0 [ 654.540993][ C1] ? __pfx_worker_thread+0x10/0x10 [ 654.541009][ C1] ? __pfx_kthread+0x10/0x10 [ 654.541030][ C1] ? __pfx_kthread+0x10/0x10 [ 654.541049][ C1] ret_from_fork+0x436/0x7d0 [ 654.541067][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 654.541087][ C1] ? __switch_to_asm+0x39/0x70 [ 654.541100][ C1] ? __switch_to_asm+0x33/0x70 [ 654.541113][ C1] ? __pfx_kthread+0x10/0x10 [ 654.541132][ C1] ret_from_fork_asm+0x1a/0x30 [ 654.541154][ C1] [ 654.541175][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 654.541189][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 654.541209][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 654.541219][ T38] Call Trace: [ 654.541226][ T38] [ 654.541234][ T38] dump_stack_lvl+0x99/0x250 [ 654.541257][ T38] ? __asan_memcpy+0x40/0x70 [ 654.541276][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.541300][ T38] ? __pfx__printk+0x10/0x10 [ 654.541331][ T38] vpanic+0x281/0x750 [ 654.541356][ T38] ? __pfx_vpanic+0x10/0x10 [ 654.541376][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 654.541394][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.541433][ T38] panic+0xb9/0xc0 [ 654.541455][ T38] ? __pfx_panic+0x10/0x10 [ 654.541481][ T38] ? irq_work_queue+0xc3/0x140 [ 654.541506][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 654.541530][ T38] watchdog+0xfd2/0xfe0 [ 654.541557][ T38] ? watchdog+0x1de/0xfe0 [ 654.541583][ T38] kthread+0x70e/0x8a0 [ 654.541610][ T38] ? __pfx_watchdog+0x10/0x10 [ 654.541630][ T38] ? __pfx_kthread+0x10/0x10 [ 654.541659][ T38] ? __pfx_kthread+0x10/0x10 [ 654.541683][ T38] ret_from_fork+0x436/0x7d0 [ 654.541707][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 654.541733][ T38] ? __switch_to_asm+0x39/0x70 [ 654.541750][ T38] ? __switch_to_asm+0x33/0x70 [ 654.541765][ T38] ? __pfx_kthread+0x10/0x10 [ 654.541789][ T38] ret_from_fork_asm+0x1a/0x30 [ 654.541821][ T38] [ 654.542085][ T38] Kernel Offset: disabled