last executing test programs: 6m18.107357782s ago: executing program 1 (id=4084): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='* 000000001'], 0x2d) 6m13.599517896s ago: executing program 1 (id=4090): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480140013006361696630000000000000000012de0014003570"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) 6m12.330309607s ago: executing program 1 (id=4093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40) 6m10.277866139s ago: executing program 1 (id=4099): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 6m3.425111843s ago: executing program 1 (id=4111): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b"], 0x28}, 0x84000) 6m0.723130412s ago: executing program 1 (id=4114): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) unshare(0x68040200) 5m43.364282194s ago: executing program 32 (id=4114): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) unshare(0x68040200) 3m21.328774021s ago: executing program 0 (id=5832): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x8f, 0x7fff0000}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 3m21.219571274s ago: executing program 0 (id=5836): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x1, 0x9}], 0x1, 0x0) 3m20.914322255s ago: executing program 0 (id=5840): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7, 0x75, 0x4, 0x7d, 0x3, 0x3e, 0xbffffffb, 0xf8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x38, 0x4, 0x9}, [{0x6, 0x6, 0xaed0, 0x5, 0x2, 0x8000, 0xa, 0x7fff}]}, 0x78) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa2000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/129) 3m20.099099394s ago: executing program 0 (id=5849): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00', @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 3m19.935061358s ago: executing program 0 (id=5851): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x2, 0x8}, 0x0) capset(0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 3m19.763095266s ago: executing program 0 (id=5852): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) 3m17.123123009s ago: executing program 2 (id=5859): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf4, 0x9, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 3m15.187255642s ago: executing program 2 (id=5864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x2070bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008145}, 0x8000) 3m12.46169478s ago: executing program 2 (id=5868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r1, 0x1, 0xffffffff, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3m11.025672354s ago: executing program 2 (id=5870): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) 3m9.136833065s ago: executing program 2 (id=5873): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x79c8a000) waitid(0x0, r0, &(0x7f0000000100), 0x4, 0x0) 3m5.201518307s ago: executing program 2 (id=5880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000001400)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x19, 0x9}, @ipv6=@icmpv6={0x6, 0x6, "004dda", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, "41035e", 0x6, 0x0, 0x0, @local, @mcast2}}}}}, 0x62) 3m2.183201201s ago: executing program 33 (id=5852): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) 2m48.65625951s ago: executing program 34 (id=5880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000001400)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x19, 0x9}, @ipv6=@icmpv6={0x6, 0x6, "004dda", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, "41035e", 0x6, 0x0, 0x0, @local, @mcast2}}}}}, 0x62) 2m10.868432648s ago: executing program 5 (id=5923): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x76ebe000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x198, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 2m3.680075892s ago: executing program 5 (id=5931): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setns(r0, 0x2000000) 2m2.296111043s ago: executing program 5 (id=5932): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 2m0.554242244s ago: executing program 4 (id=5934): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) 1m58.306564828s ago: executing program 5 (id=5936): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 1m57.722093315s ago: executing program 4 (id=5938): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000290000000b00000057"], 0x18}}], 0x1, 0x24008000) 1m55.364566846s ago: executing program 5 (id=5939): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x420, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x4, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x200, 0x7fff, 0x4c74, 0xffffffff, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x6, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcc, 0xf9, 0xd, 0x2c3, 0x6c9, 0xd, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0x3471, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x339, 0x9, 0x8, 0x800, 0x8, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x77, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93691, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x2, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xc3, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x3, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x8, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x1, 0x8, 0xc9, 0xee1, 0xfffff000, 0xffff, 0x3, 0x3, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0x1, 0xfff]}, 0x45c) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30, 0x180}], 0x1, 0x0) 1m55.352971486s ago: executing program 4 (id=5941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf253100000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 1m53.955491615s ago: executing program 4 (id=5942): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 1m53.770990895s ago: executing program 5 (id=5943): io_setup(0x6, &(0x7f0000000d80)=0x0) r1 = eventfd2(0x83, 0x80001) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r1, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r1}]) 1m52.19620926s ago: executing program 4 (id=5945): getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) 1m50.884106172s ago: executing program 4 (id=5946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1m34.768212253s ago: executing program 35 (id=5943): io_setup(0x6, &(0x7f0000000d80)=0x0) r1 = eventfd2(0x83, 0x80001) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r1, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r1}]) 1m34.2697309s ago: executing program 36 (id=5946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 21.942706001s ago: executing program 3 (id=5976): prctl$PR_SET_NAME(0x4, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r0, 0x0, 0x0, 0x19, 0x0) 14.748920798s ago: executing program 3 (id=5977): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 12.498633823s ago: executing program 3 (id=5978): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 7.000036212s ago: executing program 3 (id=5979): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) 3.645075389s ago: executing program 3 (id=5980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0xc4, r1, 0x201, 0x70bd2e, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x25}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x9c, 0xe, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xe7a, "f4a4b0ec2344", @long="779d788579b5a92f543f515e467cee7e"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x41}}, @fast_bss_trans={0x37, 0x68, {0x0, 0x2, "1f20bffd09f49342914f45644d19c747", "8a14d9d2a80d3ec84d016bfb376d2afbf334794240d0df30be1d35341d7109e3", "b18ff4c3b578f2fc53abbabe671eef9214f3ea7825efa98ef89bc1e4ef7b1c41", [{0x2, 0xe, "d2b36cbffe128fd06a653dd2ab7f"}, {0x3, 0x4, 'KGlc'}]}}]}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) 0s ago: executing program 3 (id=5981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0205000044e380"], 0x5a) kernel console output (not intermixed with test programs): llmulticast mode [ 709.272168][T14740] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.376908][T14740] veth0_to_bond: entered promiscuous mode [ 709.418658][T14740] bond0: (slave bond_slave_0): Releasing backup interface [ 709.490651][T14740] veth1_to_bond: entered promiscuous mode [ 709.541739][T14740] bond0: (slave bond_slave_1): Releasing backup interface [ 709.623117][T14740] veth0_to_team: entered promiscuous mode [ 709.681769][T14740] team0: Port device team_slave_0 removed [ 709.684165][T14740] veth1_to_team: entered promiscuous mode [ 709.751453][T14740] team0: Port device team_slave_1 removed [ 709.754300][T14740] veth0_to_batadv: entered promiscuous mode [ 709.755177][T14740] batadv_slave_0: entered promiscuous mode [ 709.755370][T14740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.755397][T14740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.839535][T14740] veth1_to_batadv: entered promiscuous mode [ 709.840210][T14740] batadv_slave_1: entered promiscuous mode [ 709.840391][T14740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.840417][T14740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.899703][T14740] xfrm0: entered promiscuous mode [ 709.900170][T14740] veth0_to_hsr: entered promiscuous mode [ 710.336546][ T1011] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.946507][ T1011] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.121669][T14631] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.121865][T14631] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.122049][T14631] bridge_slave_0: entered allmulticast mode [ 711.153325][T14631] bridge_slave_0: entered promiscuous mode [ 711.164893][T14631] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.176143][T14631] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.176332][T14631] bridge_slave_1: entered allmulticast mode [ 711.187299][T14631] bridge_slave_1: entered promiscuous mode [ 711.354113][T14803] netlink: 'syz.0.4229': attribute type 10 has an invalid length. [ 711.615882][T14803] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 711.631960][T14803] team0: Port device wlan1 added [ 711.656255][T14631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.831638][T14631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.355171][T14823] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 712.466983][T14631] team0: Port device team_slave_0 added [ 712.594147][T14631] team0: Port device team_slave_1 added [ 712.839975][T14631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.840130][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.840154][T14631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.921339][T14631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.921357][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.921389][T14631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.054248][ T1011] bridge_slave_1: left allmulticast mode [ 713.054395][ T1011] bridge_slave_1: left promiscuous mode [ 713.057014][ T1011] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.198263][ T1011] bridge_slave_0: left allmulticast mode [ 713.198294][ T1011] bridge_slave_0: left promiscuous mode [ 713.198550][ T1011] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.328312][ T9] IPVS: starting estimator thread 0... [ 713.427979][T14858] IPVS: using max 8 ests per chain, 19200 per kthread [ 713.563711][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 713.563743][T14872] net_ratelimit: 10095 callbacks suppressed [ 713.563758][T14872] openvswitch: netlink: Unknown nsh attribute 0 [ 713.652271][ T31] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 713.802012][ T49] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 713.820763][ T31] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 713.820792][ T31] usb 3-1: config 0 has no interface number 0 [ 713.820839][ T31] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 713.820868][ T31] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.820910][ T31] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 713.820933][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.851351][ T31] usb 3-1: config 0 descriptor?? [ 713.875932][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4263'. [ 713.876051][T14880] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4263'. [ 713.916718][ T31] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input25 [ 713.954412][T14882] netlink: 'syz.4.4264': attribute type 2 has an invalid length. [ 713.984032][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 713.988492][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.988524][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.988564][ T49] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 713.988589][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.025826][ T49] usb 1-1: config 0 descriptor?? [ 714.161804][ T9] usb 3-1: USB disconnect, device number 76 [ 714.404072][T14893] tmpfs: Unknown parameter 'no' [ 714.484903][ T49] konepure 0003:1E7D:2DB4.0001: item fetching failed at offset 3/4 [ 714.485725][ T49] konepure 0003:1E7D:2DB4.0001: parse failed [ 714.485807][ T49] konepure 0003:1E7D:2DB4.0001: probe with driver konepure failed with error -22 [ 714.722219][ T49] usb 1-1: USB disconnect, device number 72 [ 715.186738][ T1011] bond0 (unregistering): (slave 37): Releasing backup interface [ 715.268095][ T1011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.320402][ T1011] bond0 (unregistering): Released all slaves [ 715.370753][ T1011] bond1 (unregistering): Released all slaves [ 715.438397][ T31] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 715.598810][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 715.601649][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.601681][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.601707][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 715.601751][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 715.601776][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.606584][T14631] hsr_slave_0: entered promiscuous mode [ 715.655264][ T31] usb 4-1: config 0 descriptor?? [ 715.678682][T14631] hsr_slave_1: entered promiscuous mode [ 715.679617][T14631] debugfs: 'hsr0' already exists in 'hsr' [ 715.679643][T14631] Cannot create hsr debugfs directory [ 716.143211][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input26 [ 716.440536][ T31] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 716.472957][T14956] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 716.541084][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 716.542448][ T31] usb 4-1: USB disconnect, device number 78 [ 716.699070][T14954] fido_id[14954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 716.757027][T14965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4302'. [ 716.967028][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4304'. [ 717.620304][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4316'. [ 717.849911][T15009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4317'. [ 718.247871][T15020] comedi: No check for data length of config insn id 3 is implemented [ 718.247892][T15020] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 718.247906][T15020] comedi: Assuming n=15 is correct [ 718.349778][ T1011] hsr_slave_0: left promiscuous mode [ 718.393466][ T1011] hsr_slave_1: left promiscuous mode [ 718.394787][ T1011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.394887][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.465942][ T1011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.465972][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.623755][ T1011] veth1_macvtap: left promiscuous mode [ 718.623990][ T1011] veth0_macvtap: left promiscuous mode [ 718.624292][ T1011] veth1_vlan: left promiscuous mode [ 719.203070][ T809] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 719.363494][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 719.366068][ T809] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 719.366099][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.453596][ T809] usb 4-1: selecting invalid altsetting 3 [ 719.453630][ T809] comedi comedi5: could not set alternate setting 3 in high speed [ 719.453647][ T809] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 719.505655][ T809] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 719.638478][ T9] usb 4-1: USB disconnect, device number 79 [ 719.851575][ T1011] team0 (unregistering): Port device team_slave_1 removed [ 719.912672][ T1011] team0 (unregistering): Port device team_slave_0 removed [ 720.428960][T14631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 720.497705][T14631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 720.579667][T14631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 720.620475][T14631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 721.004296][T15071] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 721.173050][T14631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.226975][T14631] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.285471][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.290564][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.352540][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.353925][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.458697][T15084] team_slave_0: entered promiscuous mode [ 721.458768][T15084] team_slave_1: entered promiscuous mode [ 721.459127][T15084] macvtap1: entered promiscuous mode [ 721.459262][T15084] team0: entered promiscuous mode [ 721.484279][T15084] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 721.484561][T15084] team0: Device macvtap1 is already an upper device of the team interface [ 721.569268][T15084] team0: left promiscuous mode [ 721.570168][T15084] team_slave_0: left promiscuous mode [ 721.570241][T15084] team_slave_1: left promiscuous mode [ 721.692819][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4350'. [ 722.022606][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4355'. [ 722.095995][T15110] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4352'. [ 722.347626][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 722.525610][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 722.525650][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.525700][ T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 722.525727][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.588701][ T10] usb 3-1: config 0 descriptor?? [ 722.832936][T14631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.109799][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.109843][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.109873][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.109918][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.109949][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.109978][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.110008][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.110035][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.110064][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.110093][ T10] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 723.285013][ T10] holtek_mouse 0003:04D9:A04A.0003: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.2-1/input0 [ 723.385287][ T10] usb 3-1: USB disconnect, device number 77 [ 723.648128][T15147] fido_id[15147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 724.062152][T14631] veth0_vlan: entered promiscuous mode [ 724.119523][T14631] veth1_vlan: entered promiscuous mode [ 724.337222][T15179] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in; [ 724.337222][T15179] program syz.4.4376 not setting count and/or reply_len properly [ 724.365192][T14631] veth0_macvtap: entered promiscuous mode [ 724.403244][T14631] veth1_macvtap: entered promiscuous mode [ 724.459188][T14631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.477430][T14631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.505991][ T3558] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.530830][ T3558] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.539042][ T3558] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.562122][ T1169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.113687][T15198] netlink: 'syz.3.4384': attribute type 4 has an invalid length. [ 725.113712][T15198] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4384'. [ 725.187231][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.187254][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.364736][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.364758][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.341591][ T36] audit: type=1326 audit(2000000363.492:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15243 comm="syz.0.4402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79549dc799 code=0x0 [ 726.468403][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.468476][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.839595][ T5870] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 727.011534][ T809] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 727.029880][ T5870] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 727.029940][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.050844][ T5870] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 727.050877][ T5870] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 727.050900][ T5870] usb 5-1: Manufacturer: syz [ 727.093948][ T5870] usb 5-1: config 0 descriptor?? [ 727.181825][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 727.186761][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.186795][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.186821][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 727.186866][ T809] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 727.186891][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.266464][ T809] usb 3-1: config 0 descriptor?? [ 727.299378][ T5870] rc_core: IR keymap rc-hauppauge not found [ 727.299401][ T5870] Registered IR keymap rc-empty [ 727.306718][ T5870] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 727.374505][ T5870] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 727.444975][ T5870] usb 5-1: USB disconnect, device number 79 [ 727.772260][ T809] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 727.773940][ T809] microsoft 0003:045E:07DA.0004: usage index exceeded [ 727.773962][ T809] microsoft 0003:045E:07DA.0004: item 0 4 2 2 parsing failed [ 727.774772][ T809] microsoft 0003:045E:07DA.0004: parse failed [ 727.774892][ T809] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 728.017478][ T5870] usb 3-1: USB disconnect, device number 78 [ 729.308799][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4437'. [ 729.643075][T15354] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.4446'. [ 729.753306][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4450'. [ 730.349862][ T8559] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 730.514672][ T8559] usb 6-1: Using ep0 maxpacket: 32 [ 730.530615][ T8559] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 730.530645][ T8559] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 730.530669][ T8559] usb 6-1: config 0 interface 0 has no altsetting 0 [ 730.534758][ T8559] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 730.534796][ T8559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.534820][ T8559] usb 6-1: Product: syz [ 730.534836][ T8559] usb 6-1: Manufacturer: syz [ 730.534854][ T8559] usb 6-1: SerialNumber: syz [ 730.608398][ T8559] usb 6-1: config 0 descriptor?? [ 730.984316][T15407] netlink: 'syz.0.4469': attribute type 62 has an invalid length. [ 731.119702][ T8559] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 731.335859][ T8559] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 731.336279][ T8559] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 731.382152][ T8559] usb 6-1: USB disconnect, device number 2 [ 731.409180][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 731.570154][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 731.572623][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 731.572657][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34618, setting to 1024 [ 731.572703][ T9] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 731.572729][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.623553][ T9] usb 5-1: config 0 descriptor?? [ 731.624728][T15411] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 732.140367][ T9] ntrig 0003:1B96:0008.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 732.342102][ T9] usb 5-1: USB disconnect, device number 80 [ 732.559786][T15451] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4481'. [ 732.604730][T15444] fido_id[15444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 733.077482][T15469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4488'. [ 733.078138][T15469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4488'. [ 733.210598][T15474] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 733.796243][T15502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4500'. [ 734.010567][T15514] tmpfs: Cannot disable swap on remount [ 734.958988][ T36] audit: type=1326 audit(2000000371.542:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 734.962588][ T36] audit: type=1326 audit(2000000371.552:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 734.999762][ T36] audit: type=1326 audit(2000000371.580:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00775fc42b code=0x7ffc0000 [ 735.001880][ T36] audit: type=1326 audit(2000000371.580:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 735.005036][ T36] audit: type=1326 audit(2000000371.589:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 735.007291][ T36] audit: type=1326 audit(2000000371.589:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 735.080605][ T36] audit: type=1326 audit(2000000371.627:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.4.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 735.256661][T15554] netlink: 'syz.0.4525': attribute type 1 has an invalid length. [ 735.727654][ T36] audit: type=1326 audit(2000000372.253:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15570 comm="syz.5.4535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe89d56c799 code=0x0 [ 736.966466][T15619] netlink: 'syz.3.4557': attribute type 1 has an invalid length. [ 736.966491][T15619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4557'. [ 737.291165][T15632] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 737.427615][ T49] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 737.587983][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 737.591040][ T49] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 737.591068][ T49] usb 1-1: config 0 has no interface number 0 [ 737.591116][ T49] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.591145][ T49] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.591186][ T49] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 737.591212][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.660526][ T49] usb 1-1: config 0 descriptor?? [ 737.785681][T15648] sp0: Synchronizing with TNC [ 737.812617][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 737.973091][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 737.980724][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 737.980764][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 737.980788][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 737.980811][ T9] usb 5-1: config 1 has no interface number 0 [ 737.980858][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.980890][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 737.980923][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 737.980965][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.026140][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 738.258680][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 738.318876][ T49] usb 1-1: USB disconnect, device number 73 [ 738.734531][ T9] usb 5-1: USB disconnect, device number 81 [ 738.742592][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 739.291696][T15697] ptrace attach of "./syz-executor exec"[5799] was attempted by ""[15697] [ 740.825545][T15767] block device autoloading is deprecated and will be removed. [ 740.903477][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 741.095603][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 741.095637][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.095659][ T10] usb 4-1: Product: syz [ 741.095675][ T10] usb 4-1: Manufacturer: syz [ 741.095692][ T10] usb 4-1: SerialNumber: syz [ 741.831900][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 741.831968][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 741.832449][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 741.832506][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 741.853106][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 741.957079][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 742.068001][ T10] usb 4-1: USB disconnect, device number 80 [ 744.281649][T15911] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4674'. [ 744.332483][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4675'. [ 744.347296][ T809] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 744.473738][T15921] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4677'. [ 744.507946][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 744.510847][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.510884][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 744.510931][ T809] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 744.510957][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.603487][ T809] usb 3-1: config 0 descriptor?? [ 745.084240][ T809] hid_parser_main: 223 callbacks suppressed [ 745.084274][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084306][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084334][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084361][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084387][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084412][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084436][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084463][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084490][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.084515][ T809] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 745.180350][ T809] kye 0003:0458:0153.0007: hidraw0: USB HID v0.0a Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 745.372631][ T809] usb 3-1: USB disconnect, device number 79 [ 745.448921][T15944] fido_id[15944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 746.107773][T15980] tipc: Started in network mode [ 746.107801][T15980] tipc: Node identity ac14140f, cluster identity 4711 [ 746.109816][T15980] tipc: Enabled bearer , priority 10 [ 746.208302][ T809] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 746.304497][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 746.380263][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 746.382646][ T809] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 746.382676][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.415537][ T809] usb 4-1: config 0 descriptor?? [ 746.434446][ T809] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 746.464915][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 746.468004][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.468039][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.468124][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 746.468171][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 746.468204][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.547192][ T9] usb 5-1: config 0 descriptor?? [ 746.648565][ T809] usb 4-1: Detected FT232B [ 747.113259][ T809] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 747.131039][ T809] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 747.150136][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input28 [ 747.152633][ T809] usb 4-1: USB disconnect, device number 81 [ 747.191113][ T809] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 747.191863][ T809] ftdi_sio 4-1:0.0: device disconnected [ 747.243927][ T9] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 747.281600][ T9] usb 5-1: USB disconnect, device number 82 [ 747.302908][ T5882] tipc: Node number set to 2886997007 [ 747.558067][T16010] fido_id[16010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 747.587906][ T5882] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 747.748399][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 747.754316][ T5882] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 747.754346][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.754369][ T5882] usb 1-1: Product: syz [ 747.754386][ T5882] usb 1-1: Manufacturer: syz [ 747.754402][ T5882] usb 1-1: SerialNumber: syz [ 747.975297][T16022] smb3: Unknown parameter 'nocase' [ 748.011799][ T5882] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 748.035832][ T5882] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 748.036247][ T5882] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 748.036380][ T5882] usb 1-1: media controller created [ 748.114707][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 748.370607][ T5882] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 748.449288][ T5882] usb 1-1: USB disconnect, device number 74 [ 748.636913][T16048] tipc: Started in network mode [ 748.636945][T16048] tipc: Node identity fe80000000000000000000000000003a, cluster identity 4711 [ 748.639445][T16048] tipc: Enabled bearer , priority 10 [ 748.793199][T16055] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4738'. [ 749.214599][T16076] netlink: 'syz.0.4747': attribute type 2 has an invalid length. [ 749.447859][ T36] audit: type=1326 audit(2000000385.091:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 749.473658][ T36] audit: type=1326 audit(2000000385.091:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 749.473716][ T36] audit: type=1326 audit(2000000385.100:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 749.473787][ T36] audit: type=1326 audit(2000000385.100:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 749.473841][ T36] audit: type=1326 audit(2000000385.109:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 749.473889][ T36] audit: type=1326 audit(2000000385.109:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 749.473937][ T36] audit: type=1326 audit(2000000385.109:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 749.473984][ T36] audit: type=1326 audit(2000000385.109:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 749.834426][ T8559] tipc: Node number set to 4269801530 [ 749.920026][ T5882] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 750.083146][ T5882] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 750.083179][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.120784][ T5882] usb 4-1: config 0 descriptor?? [ 750.150449][ T5882] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 750.583126][ T5882] gspca_cpia1: usb_control_msg 03, error -32 [ 750.584298][ T5882] gspca_cpia1: usb_control_msg 03, error -71 [ 750.584817][ T5882] gspca_cpia1: usb_control_msg 01, error -71 [ 750.584834][ T5882] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 750.622213][ T5882] usb 4-1: USB disconnect, device number 82 [ 751.503936][T16149] syz_tun: Device is already in use. [ 752.076235][T16176] Invalid source name [ 752.999998][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 753.160369][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 753.169297][ T9] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 753.169328][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.169351][ T9] usb 6-1: Product: syz [ 753.169368][ T9] usb 6-1: Manufacturer: syz [ 753.169384][ T9] usb 6-1: SerialNumber: syz [ 753.212396][ T9] usb 6-1: config 0 descriptor?? [ 753.230403][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 753.230924][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 753.262429][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 753.281033][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 753.281088][ T9] usb 6-1: media controller created [ 753.346446][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.393940][ T9] usb 6-1: selecting invalid altsetting 7 [ 753.393961][ T9] cxusb: set interface failed [ 753.393975][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 753.450437][T16206] dvb-usb: bulk message failed: -22 (3/0) [ 753.490162][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 753.490177][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 753.598819][ T9] rc_core: IR keymap rc-dvico-portable not found [ 753.598849][ T9] Registered IR keymap rc-empty [ 753.600824][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 753.604196][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input29 [ 753.641900][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 753.641922][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 753.695160][ T9] usb 6-1: USB disconnect, device number 3 [ 753.830798][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 753.987702][T16233] netlink: 'syz.4.4820': attribute type 1 has an invalid length. [ 753.987731][T16233] netlink: 728 bytes leftover after parsing attributes in process `syz.4.4820'. [ 754.232506][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4823'. [ 754.232532][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4823'. [ 754.232561][T16239] netlink: 'syz.4.4823': attribute type 18 has an invalid length. [ 754.232585][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4823'. [ 754.541511][T16250] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4828'. [ 755.609351][ T5882] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 755.770411][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 755.772840][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.772875][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.772909][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 755.772958][ T5882] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 755.772985][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.836560][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 755.841045][ T5882] usb 3-1: config 0 descriptor?? [ 755.962366][ T8559] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 756.016056][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 756.018557][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.018592][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.018618][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 756.018674][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 756.018702][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.025015][ T9] usb 6-1: config 0 descriptor?? [ 756.253493][ T8559] usb 4-1: Using ep0 maxpacket: 16 [ 756.257434][ T8559] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 756.257463][ T8559] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 756.257485][ T8559] usb 4-1: config 0 has no interface number 0 [ 756.293741][ T8559] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 756.293778][ T8559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.293800][ T8559] usb 4-1: Product: syz [ 756.293871][ T8559] usb 4-1: Manufacturer: syz [ 756.293888][ T8559] usb 4-1: SerialNumber: syz [ 756.371571][ T8559] usb 4-1: config 0 descriptor?? [ 756.383718][ T5882] microsoft 0003:045E:07DA.0009: unbalanced collection at end of report description [ 756.385452][ T5882] microsoft 0003:045E:07DA.0009: parse failed [ 756.385654][ T5882] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22 [ 756.392766][ T8559] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 756.392800][ T8559] uvcvideo 4-1:0.105: No valid video chain found. [ 756.563627][ T9] hid_parser_main: 38 callbacks suppressed [ 756.563657][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.563689][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.563719][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.563748][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.563794][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.563826][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.563856][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.563893][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.563922][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.564042][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 756.660316][ T9] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 756.660352][ T9] microsoft 0003:045E:07DA.000A: no inputs found [ 756.660367][ T9] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 756.660841][ T5882] usb 3-1: USB disconnect, device number 80 [ 756.745238][ T8559] usb 4-1: USB disconnect, device number 83 [ 756.802484][ T9] usb 6-1: USB disconnect, device number 4 [ 757.389173][T16342] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4873'. [ 757.855446][T16359] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 758.370705][T16383] tipc: Started in network mode [ 758.370740][T16383] tipc: Node identity ac14140f, cluster identity 4711 [ 758.371033][T16383] tipc: New replicast peer: 10.1.1.0 [ 758.371306][T16383] tipc: Enabled bearer , priority 10 [ 758.417200][T16385] program syz.3.4893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 759.219693][T16416] tipc: Disabling bearer [ 759.494081][ T36] audit: type=1326 audit(2000000394.487:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.494773][ T36] audit: type=1326 audit(2000000394.487:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.494817][ T36] audit: type=1326 audit(2000000394.487:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.495383][ T36] audit: type=1326 audit(2000000394.487:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.495434][ T36] audit: type=1326 audit(2000000394.487:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.495963][ T36] audit: type=1326 audit(2000000394.487:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.496418][ T36] audit: type=1326 audit(2000000394.487:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.496796][ T36] audit: type=1326 audit(2000000394.487:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.497293][ T36] audit: type=1326 audit(2000000394.487:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 759.682607][ T809] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 759.879328][ T809] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 759.879362][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.907820][ T809] usb 1-1: config 0 descriptor?? [ 759.940379][ T809] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 760.352456][ T809] gspca_stv06xx: I2C: Read error writing address: -71 [ 760.375930][ T809] usb 1-1: USB disconnect, device number 75 [ 760.439790][ T5882] IPVS: starting estimator thread 0... [ 760.529121][T16445] IPVS: using max 8 ests per chain, 19200 per kthread [ 760.781832][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4928'. [ 761.190799][T16476] kAFS: unable to lookup cell '' [ 761.234009][T16476] kAFS: unable to lookup cell '(,c ' [ 761.815183][T16503] lo: left promiscuous mode [ 761.815935][T16503] tunl0: left promiscuous mode [ 761.816559][T16503] gre0: left promiscuous mode [ 761.817149][T16503] gretap0: left promiscuous mode [ 761.843287][T16503] erspan0: left promiscuous mode [ 761.843831][T16503] ip_vti0: left promiscuous mode [ 761.854990][T16503] ip6_vti0: left promiscuous mode [ 761.860907][T16503] sit0: left promiscuous mode [ 761.861486][T16503] ip6tnl0: left promiscuous mode [ 761.862030][T16503] ip6gre0: left promiscuous mode [ 761.862607][T16503] syz_tun: left promiscuous mode [ 761.863181][T16503] ip6gretap0: left promiscuous mode [ 761.863833][T16503] bridge0: left promiscuous mode [ 761.864406][T16503] vcan0: left promiscuous mode [ 761.864973][T16503] bond0: left promiscuous mode [ 761.928387][T16503] team0: left promiscuous mode [ 761.928419][T16503] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 761.929581][T16503] dummy0: left promiscuous mode [ 761.950045][T16503] nlmon0: left promiscuous mode [ 761.950682][T16503] caif0: left promiscuous mode [ 761.950920][T16503] batadv0: left promiscuous mode [ 761.970787][T16503] vxcan0: left promiscuous mode [ 761.971387][T16503] vxcan1: left promiscuous mode [ 761.971943][T16503] veth0: left promiscuous mode [ 761.972543][T16503] veth1: left promiscuous mode [ 761.993387][T16503] wg0: left promiscuous mode [ 761.993989][T16503] wg1: left promiscuous mode [ 762.005330][T16503] wg2: left promiscuous mode [ 762.005919][T16503] veth0_to_bridge: left promiscuous mode [ 762.006537][T16503] bridge_slave_0: left promiscuous mode [ 762.007104][T16503] veth1_to_bridge: left promiscuous mode [ 762.007698][T16503] bridge_slave_1: left promiscuous mode [ 762.008266][T16503] veth0_to_bond: left promiscuous mode [ 762.009968][T16503] bond_slave_0: left promiscuous mode [ 762.010170][T16503] veth1_to_bond: left promiscuous mode [ 762.010344][T16503] bond_slave_1: left promiscuous mode [ 762.010523][T16503] veth0_to_team: left promiscuous mode [ 762.011303][T16503] team_slave_0: left promiscuous mode [ 762.011489][T16503] veth1_to_team: left promiscuous mode [ 762.012312][T16503] team_slave_1: left promiscuous mode [ 762.012496][T16503] veth0_to_batadv: left promiscuous mode [ 762.013231][T16503] batadv_slave_0: left promiscuous mode [ 762.013836][T16503] veth1_to_batadv: left promiscuous mode [ 762.014427][T16503] batadv_slave_1: left promiscuous mode [ 762.015026][T16503] xfrm0: left promiscuous mode [ 762.027873][T16503] veth0_to_hsr: left promiscuous mode [ 762.175883][T16503] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 762.230763][T16503] erspan1: left promiscuous mode [ 762.231297][T16503] gtp0: left promiscuous mode [ 762.282521][T16508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4950'. [ 762.630937][T16520] openvswitch: netlink: Missing valid actions attribute. [ 762.630971][T16520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.998641][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4963'. [ 763.435724][T16550] Invalid ELF header magic: != ELF [ 763.865377][T16567] netlink: 'syz.0.4979': attribute type 58 has an invalid length. [ 763.865402][T16567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4979'. [ 763.935066][T16565] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4978'. [ 763.935100][T16565] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 764.429319][T16585] Cannot find add_set index 46338 as target [ 764.579798][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4989'. [ 764.579822][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4989'. [ 765.282721][T16619] netlink: 'syz.2.5004': attribute type 1 has an invalid length. [ 765.397519][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5007'. [ 765.397545][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5007'. [ 765.397575][T16623] netlink: 'syz.5.5007': attribute type 14 has an invalid length. [ 765.397591][T16623] netlink: 'syz.5.5007': attribute type 12 has an invalid length. [ 765.630677][ T49] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 765.791010][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 765.793331][ T49] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 765.793358][ T49] usb 5-1: config 0 has no interface number 0 [ 765.793405][ T49] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 765.793428][ T49] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 765.793457][ T49] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 2 [ 765.793483][ T49] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 765.797006][ T49] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 765.797037][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.797058][ T49] usb 5-1: Product: syz [ 765.797074][ T49] usb 5-1: Manufacturer: syz [ 765.797089][ T49] usb 5-1: SerialNumber: syz [ 765.906552][ T49] usb 5-1: config 0 descriptor?? [ 765.912076][T16621] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 765.931235][ T49] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input30 [ 765.937122][ T5150] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 766.058710][ T809] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 766.227813][ T809] usb 6-1: unable to get BOS descriptor or descriptor too short [ 766.231663][ T809] usb 6-1: not running at top speed; connect to a high speed hub [ 766.250938][ T809] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.251059][ T809] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 766.251118][ T809] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 766.251146][ T809] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 766.261324][ T809] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 766.261352][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.276491][ T809] usb 6-1: Product: syz [ 766.278328][ T809] usb 6-1: Manufacturer: syz [ 766.278348][ T809] usb 6-1: SerialNumber: syz [ 766.435685][ T9] usb 5-1: USB disconnect, device number 83 [ 766.694591][T16658] macsec1: entered promiscuous mode [ 766.694619][T16658] macsec1: entered allmulticast mode [ 766.912724][T16664] sctp: [Deprecated]: syz.0.5022 (pid 16664) Use of int in max_burst socket option. [ 766.912724][T16664] Use struct sctp_assoc_value instead [ 767.050401][ T809] usb 6-1: 0:2 : does not exist [ 767.190904][ T809] usb 6-1: USB disconnect, device number 5 [ 767.192100][ T49] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 767.298512][T16009] udevd[16009]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.363171][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 767.366849][ T49] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 767.366876][ T49] usb 3-1: config 127 has no interface number 0 [ 767.366919][ T49] usb 3-1: config 127 interface 124 has no altsetting 0 [ 767.369879][ T49] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 767.369916][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.369939][ T49] usb 3-1: Product: syz [ 767.369956][ T49] usb 3-1: Manufacturer: syz [ 767.369972][ T49] usb 3-1: SerialNumber: syz [ 767.525231][T16677] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 767.662416][T16684] vlan3: entered promiscuous mode [ 767.662440][T16684] bond0: entered promiscuous mode [ 768.133058][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5041'. [ 768.155026][ T5870] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 768.327579][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 768.332292][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.332325][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.333538][ T5870] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 768.333568][ T5870] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 768.333589][ T5870] usb 4-1: Manufacturer: syz [ 768.401330][ T5870] usb 4-1: config 0 descriptor?? [ 768.443843][ T49] usb 3-1: reset high-speed USB device number 81 using dummy_hcd [ 768.626408][ T49] usb 3-1: unable to get BOS descriptor or descriptor too short [ 768.626506][ T49] usb 3-1: device firmware changed [ 768.688138][ T49] usb 3-1: USB disconnect, device number 81 [ 768.938858][ T5870] creative-sb0540 0003:041E:3100.000B: item fetching failed at offset 4/5 [ 768.939570][ T5870] creative-sb0540 0003:041E:3100.000B: parse failed [ 768.939682][ T5870] creative-sb0540 0003:041E:3100.000B: probe with driver creative-sb0540 failed with error -22 [ 769.164818][ T9] usb 4-1: USB disconnect, device number 84 [ 769.337591][T16726] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 769.338345][ T5870] IPVS: starting estimator thread 0... [ 769.427642][T16727] IPVS: using max 12 ests per chain, 28800 per kthread [ 770.477484][T16768] netlink: 'syz.5.5074': attribute type 1 has an invalid length. [ 771.097990][T16790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.801467][T16820] netlink: 'syz.5.5098': attribute type 1 has an invalid length. [ 772.184765][T16837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5106'. [ 772.518295][ T49] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 772.684369][ T49] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 772.684397][ T49] usb 4-1: config 0 has no interface number 0 [ 772.684441][ T49] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 772.684466][ T49] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 772.687273][ T49] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 772.687303][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.687325][ T49] usb 4-1: Product: syz [ 772.687341][ T49] usb 4-1: Manufacturer: syz [ 772.687357][ T49] usb 4-1: SerialNumber: syz [ 772.772125][ T49] usb 4-1: config 0 descriptor?? [ 772.773212][T16843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 772.832223][ T49] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 772.866244][ T49] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 773.109883][T16873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5124'. [ 773.213624][ T10] usb 4-1: USB disconnect, device number 85 [ 773.217425][T16874] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5125'. [ 773.289141][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 773.289976][ T10] cyberjack 4-1:0.69: device disconnected [ 773.549462][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 773.876609][ T8559] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 774.039501][ T8559] usb 1-1: Using ep0 maxpacket: 32 [ 774.058589][ T8559] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 774.058618][ T8559] usb 1-1: config 0 has no interface number 0 [ 774.058668][ T8559] usb 1-1: config 0 interface 184 has no altsetting 0 [ 774.061185][ T8559] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 774.061215][ T8559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.061238][ T8559] usb 1-1: Product: syz [ 774.061255][ T8559] usb 1-1: Manufacturer: syz [ 774.061272][ T8559] usb 1-1: SerialNumber: syz [ 774.067018][ T8559] usb 1-1: config 0 descriptor?? [ 774.175045][T16911] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 774.178372][T16911] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 774.180708][T16911] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 774.184671][T16911] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 774.245844][T16911] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 774.245912][T16911] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 774.274890][T16911] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 774.275446][T16911] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 774.276097][T16911] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 774.481904][T16919] kernel read not supported for file /e_1 (pid: 16919 comm: syz.3.5146) [ 774.498196][ T36] audit: type=1800 audit(2000000408.503:367): pid=16919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5146" name="e_1" dev="mqueue" ino=45062 res=0 errno=0 [ 774.590734][ T36] audit: type=1326 audit(2000000408.597:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16920 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 774.591053][ T36] audit: type=1326 audit(2000000408.597:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16920 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 774.664778][ T36] audit: type=1326 audit(2000000408.671:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16920 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 774.665813][ T36] audit: type=1326 audit(2000000408.671:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16920 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 774.666106][ T36] audit: type=1326 audit(2000000408.671:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16920 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 774.698517][ T36] audit: type=1326 audit(2000000408.690:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16920 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 774.756212][ T36] audit: type=1326 audit(2000000408.728:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16920 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 774.766648][ T8559] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 774.766707][ T8559] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 774.766772][ T8559] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 774.767494][ T8559] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 774.810634][ T36] audit: type=1326 audit(2000000408.765:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16920 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00775fc799 code=0x7ffc0000 [ 774.860974][ T8559] usb 1-1: USB disconnect, device number 76 [ 774.892629][ T31] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 775.064483][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 775.064520][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 775.064550][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 775.064596][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 775.064621][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.132916][ T31] usb 3-1: config 0 descriptor?? [ 775.133704][T16923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 775.299000][ T5882] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 775.467497][ T5882] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 775.467593][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.479575][ T5870] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 775.526124][ T5882] usb 5-1: config 0 descriptor?? [ 775.550202][ T5882] cp210x 5-1:0.0: cp210x converter detected [ 775.612571][ T31] hid_parser_main: 1 callbacks suppressed [ 775.612599][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612634][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612730][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612762][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612792][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612820][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612906][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612934][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612963][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.612992][ T31] logitech-hidpp-device 0003:046D:C081.000C: unknown main item tag 0x0 [ 775.719286][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.719323][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.719364][ T5870] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 775.719390][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.724640][ T5870] usb 4-1: config 0 descriptor?? [ 775.831490][ T31] logitech-hidpp-device 0003:046D:C081.000C: hidraw0: USB HID v0.08 Device [HID 046d:c081] on usb-dummy_hcd.2-1/input0 [ 775.890720][ T31] usb 3-1: USB disconnect, device number 82 [ 776.195060][T16941] fido_id[16941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 776.261194][ T5882] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 776.261225][ T5882] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 776.274485][ T5870] stadia 0003:18D1:9400.000D: item fetching failed at offset 1/5 [ 776.275094][ T5870] stadia 0003:18D1:9400.000D: parse failed [ 776.275157][ T5870] stadia 0003:18D1:9400.000D: probe with driver stadia failed with error -22 [ 776.320920][ T5882] usb 5-1: cp210x converter now attached to ttyUSB0 [ 776.361216][ T5882] usb 5-1: USB disconnect, device number 84 [ 776.380814][ T5882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 776.381571][ T5882] cp210x 5-1:0.0: device disconnected [ 776.521696][ T31] usb 4-1: USB disconnect, device number 86 [ 776.584416][T16950] bond0: option all_slaves_active: invalid value (6) [ 777.163433][T16972] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5172'. [ 777.815471][T16998] sp0: Synchronizing with TNC [ 777.818365][T16997] [U] [ 778.111051][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5192'. [ 778.159299][T17013] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 778.204649][T17013] bond1 (unregistering): Released all slaves [ 778.320225][T17021] gfs2: path_lookup on c::: returned error -2 [ 778.447288][T17023] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5195'. [ 778.447328][T17023] netlink: 'syz.5.5195': attribute type 6 has an invalid length. [ 778.447344][T17023] netlink: 'syz.5.5195': attribute type 5 has an invalid length. [ 778.447359][T17023] netlink: 'syz.5.5195': attribute type 4 has an invalid length. [ 778.903433][ T8559] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 779.075104][ T8559] usb 6-1: Using ep0 maxpacket: 16 [ 779.093636][ T8559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.093671][ T8559] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 779.093714][ T8559] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 779.093737][ T8559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.114142][ T8559] usb 6-1: config 0 descriptor?? [ 779.320418][ T809] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 779.346660][T17052] support for the xor transformation has been removed. [ 779.491050][ T809] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 779.491112][ T809] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 779.491144][ T809] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 779.491170][ T809] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.491216][ T809] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 779.491242][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.512850][ T5870] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 779.588267][ T809] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 779.591083][ T809] usb 5-1: invalid MIDI out EP 0 [ 779.606946][ T8559] belkin 0003:1020:0006.000E: hidraw0: USB HID v0.0a Device [HID 1020:0006] on usb-dummy_hcd.5-1/input0 [ 779.716430][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 779.721611][ T5870] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.721645][ T5870] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.721671][ T5870] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 779.721700][ T5870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 779.721736][ T5870] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 779.721761][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.804350][ T5870] usb 1-1: config 0 descriptor?? [ 779.880953][ T31] usb 6-1: USB disconnect, device number 6 [ 780.130604][ T809] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 780.165019][ T809] usb 5-1: USB disconnect, device number 85 [ 780.284901][ T5870] magicmouse 0003:05AC:0265.000F: hidraw0: USB HID vbf.fc Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 780.491797][ T5882] usb 1-1: USB disconnect, device number 77 [ 780.789289][T17078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5218'. [ 780.789736][T17075] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5218'. [ 781.407656][T17104] binder_alloc: binder_alloc_mmap_handler: 17101 200000ffb000-200000fff000 already mapped failed -16 [ 782.539701][ T809] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 782.546382][T17155] netlink: 'syz.0.5254': attribute type 29 has an invalid length. [ 782.699958][ T809] usb 5-1: Using ep0 maxpacket: 8 [ 782.709415][ T809] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 782.709446][ T809] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 782.709476][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 782.709505][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.727437][ T809] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 782.727468][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.727492][ T809] usb 5-1: Product: syz [ 782.727508][ T809] usb 5-1: Manufacturer: syz [ 782.727524][ T809] usb 5-1: SerialNumber: syz [ 782.800013][ T809] usb 5-1: config 0 descriptor?? [ 782.816808][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 782.863882][ T809] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input31 [ 783.213422][ T809] rc_core: IR keymap rc-imon-pad not found [ 783.213444][ T809] Registered IR keymap rc-empty [ 783.213525][ T809] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 783.213546][ T809] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 783.296114][ T809] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 783.326886][ T809] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 783.381499][ T809] imon 5-1:0.0: iMON device (15c2:003b, intf0) on usb<5:86> initialized [ 783.396299][T17177] Bluetooth: MGMT ver 1.23 [ 783.555139][ T809] usb 5-1: USB disconnect, device number 86 [ 783.608635][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5271'. [ 784.218910][T17209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5280'. [ 784.218936][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5280'. [ 784.218964][T17209] netlink: 'syz.5.5280': attribute type 18 has an invalid length. [ 784.273780][T17210] tipc: Enabling of bearer rejected, already enabled [ 784.789092][T17237] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5294'. [ 785.124239][ T10] hid_parser_main: 103 callbacks suppressed [ 785.124263][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 785.124296][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 785.211745][ T10] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 785.377873][T17256] fido_id[17256]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 785.759956][T17274] netlink: 'syz.5.5310': attribute type 11 has an invalid length. [ 786.234343][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5320'. [ 786.447568][T17302] veth0_to_bridge: default FDB implementation only supports local addresses [ 786.635795][ T5882] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 786.796436][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 786.799500][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 786.799534][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 786.799575][ T5882] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 786.799601][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.822700][ T5882] usb 3-1: config 0 descriptor?? [ 787.008105][T17318] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5333'. [ 787.008147][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'. [ 787.098160][ T5882] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 787.106410][ T8559] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 787.272140][ T8559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.272180][ T8559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.272223][ T8559] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 787.272249][ T8559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.341940][ T8559] usb 1-1: config 0 descriptor?? [ 787.367117][T17298] iowarrior 3-1:0.0: Error -90 while submitting URB [ 787.381053][ T5882] usb 3-1: USB disconnect, device number 83 [ 787.535738][T17333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5339'. [ 787.717678][T17339] bridge_slave_0: invalid flags given to default FDB implementation [ 787.817403][ T8559] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x2 [ 787.817447][ T8559] hid-steam 0003:28DE:1102.0011: item fetching failed at offset 4/5 [ 787.818220][ T8559] hid-steam 0003:28DE:1102.0011: steam_probe:parse of hid interface failed [ 787.818309][ T8559] hid-steam 0003:28DE:1102.0011: probe with driver hid-steam failed with error -22 [ 788.039279][ T8559] usb 1-1: USB disconnect, device number 78 [ 788.689028][T17369] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5356'. [ 788.748028][ T809] kernel read not supported for file /comedi0 (pid: 809 comm: kworker/0:2) [ 788.817873][T17372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5357'. [ 789.145458][T17386] macvtap1: entered promiscuous mode [ 789.145480][T17386] vlan1: entered promiscuous mode [ 789.145980][T17386] macvtap1: entered allmulticast mode [ 789.145998][T17386] vlan1: entered allmulticast mode [ 789.146012][T17386] veth0_vlan: entered allmulticast mode [ 789.700575][T17406] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 789.739945][T17404] netlink: 810 bytes leftover after parsing attributes in process `syz.2.5372'. [ 790.166742][T17423] netlink: 'syz.0.5381': attribute type 4 has an invalid length. [ 790.166769][T17423] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5381'. [ 790.389997][ T5882] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 790.553859][ T5882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 790.554709][ T5882] usb 4-1: not running at top speed; connect to a high speed hub [ 790.579519][ T5882] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 790.579550][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.579573][ T5882] usb 4-1: Product: syz [ 790.579589][ T5882] usb 4-1: Manufacturer: syz [ 790.579605][ T5882] usb 4-1: SerialNumber: syz [ 790.765017][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5387'. [ 791.351521][ T5882] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 791.355718][ T5882] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 791.560218][ T5882] usb 4-1: USB disconnect, device number 87 [ 791.594643][T14830] udevd[14830]: setting mode of /dev/bus/usb/004/087 to 020664 failed: No such file or directory [ 791.594851][T14830] udevd[14830]: setting owner of /dev/bus/usb/004/087 to uid=0, gid=0 failed: No such file or directory [ 791.668612][T16009] udevd[16009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.171480][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 792.171569][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.464669][T14936] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 792.627268][T14936] usb 5-1: Using ep0 maxpacket: 8 [ 792.633253][T14936] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.633286][T14936] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.633312][T14936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 792.633348][T14936] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 792.633374][T14936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.662063][T14936] usb 5-1: config 0 descriptor?? [ 792.723737][T17507] netlink: 'syz.5.5421': attribute type 1 has an invalid length. [ 792.723758][T17507] netlink: 5220 bytes leftover after parsing attributes in process `syz.5.5421'. [ 792.723777][T17507] nbd: illegal input index 1638444 [ 792.968444][T17517] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5425'. [ 793.205262][T14936] smartjoyplus 0003:6666:8804.0012: item fetching failed at offset 3/5 [ 793.206101][T14936] smartjoyplus 0003:6666:8804.0012: parse failed [ 793.206178][T14936] smartjoyplus 0003:6666:8804.0012: probe with driver smartjoyplus failed with error -22 [ 793.432941][ T10] usb 5-1: USB disconnect, device number 87 [ 793.474566][T17530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5431'. [ 794.614551][T14936] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 794.696942][T17581] ucma_write: process 468 (syz.5.5455) changed security contexts after opening file descriptor, this is not allowed. [ 794.790066][T14936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 794.791374][T14936] usb 5-1: config 11 has an invalid interface number: 118 but max is 0 [ 794.791421][T14936] usb 5-1: config 11 has no interface number 0 [ 794.794501][T14936] usb 5-1: New USB device found, idVendor=07ca, idProduct=c039, bcdDevice=ec.b0 [ 794.794535][T14936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.794553][T14936] usb 5-1: Product: syz [ 794.794564][T14936] usb 5-1: Manufacturer: syz [ 794.794575][T14936] usb 5-1: SerialNumber: syz [ 795.168632][T14936] usb 5-1: USB disconnect, device number 88 [ 795.224054][ T31] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 795.396819][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 795.399665][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.399690][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 795.403462][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 795.403492][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.403515][ T31] usb 4-1: Product: syz [ 795.403531][ T31] usb 4-1: Manufacturer: syz [ 795.403548][ T31] usb 4-1: SerialNumber: syz [ 795.711838][ T31] usb 4-1: 0:2 : does not exist [ 795.711941][ T31] usb 4-1: unit 9 not found! [ 795.800815][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5466'. [ 795.951317][ T31] usb 4-1: USB disconnect, device number 88 [ 796.022666][T16009] udevd[16009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.389800][ T31] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 796.451182][T17628] nftables ruleset with unbound set [ 796.597151][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 796.597207][ T31] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 796.597237][ T31] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.597263][ T31] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 796.597294][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 796.597331][ T31] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 796.597355][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.608744][ T31] usb 3-1: config 0 descriptor?? [ 797.099044][ T31] hid-alps 0003:044E:120C.0013: unbalanced delimiter at end of report description [ 797.101153][ T31] hid-alps 0003:044E:120C.0013: parse failed [ 797.101265][ T31] hid-alps 0003:044E:120C.0013: probe with driver hid-alps failed with error -22 [ 797.165923][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5489'. [ 797.165948][T17654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5489'. [ 797.321891][ T31] usb 3-1: USB disconnect, device number 84 [ 797.352416][ T809] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 797.512758][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 797.520151][ T809] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 797.520181][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.520204][ T809] usb 4-1: Product: syz [ 797.520219][ T809] usb 4-1: Manufacturer: syz [ 797.520235][ T809] usb 4-1: SerialNumber: syz [ 797.565791][ T809] usb 4-1: config 0 descriptor?? [ 797.578782][ T809] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 797.835691][T17676] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 798.230546][ T809] gspca_sonixj: reg_w1 err -71 [ 798.230642][ T809] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 798.263463][ T809] usb 4-1: USB disconnect, device number 89 [ 798.374174][T17690] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 798.714864][T17708] netlink: 'syz.2.5515': attribute type 28 has an invalid length. [ 798.838982][T17712] net_ratelimit: 67 callbacks suppressed [ 798.839003][T17712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.541226][T17746] netlink: 'syz.4.5533': attribute type 3 has an invalid length. [ 799.541250][T17746] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5533'. [ 800.394416][T17784] bond3: (slave bond_slave_1): Device is not bonding slave [ 800.394441][T17784] bond3: option active_slave: invalid value (bond_slave_1) [ 800.455081][T17784] bond3 (unregistering): Released all slaves [ 800.472082][T17790] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5553'. [ 800.942899][T17808] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5562'. [ 801.331251][ T36] audit: type=1800 audit(2000000662.611:376): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.5570" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 801.404805][ T8559] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 801.568487][ T8559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.568525][ T8559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.568550][ T8559] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 801.568595][ T8559] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 801.568620][ T8559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.639404][ T8559] usb 5-1: config 0 descriptor?? [ 801.782482][T17834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 802.089492][ T8559] plantronics 0003:047F:FFFF.0014: unbalanced delimiter at end of report description [ 802.090292][ T8559] plantronics 0003:047F:FFFF.0014: parse failed [ 802.090402][ T8559] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 802.163407][T17847] use of bytesused == 0 is deprecated and will be removed in the future, [ 802.163424][T17847] use the actual size instead. [ 802.309593][ T8559] usb 5-1: USB disconnect, device number 89 [ 803.559737][ T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 803.731638][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 803.731676][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.731716][ T10] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 803.731740][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.739415][ T10] usb 6-1: config 0 descriptor?? [ 804.224789][ T10] aquacomputer_d5next 0003:0C70:F0B6.0015: unknown main item tag 0x0 [ 804.224833][ T10] aquacomputer_d5next 0003:0C70:F0B6.0015: unknown main item tag 0x0 [ 804.224863][ T10] aquacomputer_d5next 0003:0C70:F0B6.0015: unknown main item tag 0x0 [ 804.224892][ T10] aquacomputer_d5next 0003:0C70:F0B6.0015: unknown main item tag 0x0 [ 804.224920][ T10] aquacomputer_d5next 0003:0C70:F0B6.0015: unknown main item tag 0x0 [ 804.224949][ T10] aquacomputer_d5next 0003:0C70:F0B6.0015: unknown main item tag 0x0 [ 804.224976][ T10] aquacomputer_d5next 0003:0C70:F0B6.0015: unknown main item tag 0x0 [ 804.237334][ T10] aquacomputer_d5next 0003:0C70:F0B6.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 804.348284][ T9] IPVS: starting estimator thread 0... [ 804.374404][T17934] netlink: 'syz.3.5625': attribute type 1 has an invalid length. [ 804.374429][T17934] nbd: illegal input index -788529152 [ 804.434550][T17935] IPVS: using max 10 ests per chain, 24000 per kthread [ 804.441228][ T10] usb 6-1: USB disconnect, device number 7 [ 804.519946][T17940] fido_id[17940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 805.554606][T17992] netlink: 'syz.5.5650': attribute type 1 has an invalid length. [ 805.554742][T17992] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5650'. [ 805.554763][T17992] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5650'. [ 805.576481][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 805.743062][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 805.746117][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 805.746145][ T9] usb 3-1: config 0 has no interface number 0 [ 805.746194][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 805.746224][ T9] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 805.746249][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 805.746276][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 805.804434][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 805.804466][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.804493][ T9] usb 3-1: Product: syz [ 805.804504][ T9] usb 3-1: Manufacturer: syz [ 805.804515][ T9] usb 3-1: SerialNumber: syz [ 805.859377][ T9] usb 3-1: config 0 descriptor?? [ 805.860430][T17979] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 805.941500][T18000] bond1: option ad_user_port_key: invalid value (40960) [ 805.941522][T18000] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 805.989451][T18000] bond1 (unregistering): Released all slaves [ 806.363843][ T9] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 806.364141][ T9] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 806.602714][ T31] usb 3-1: USB disconnect, device number 85 [ 806.650223][T18021] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.5664'. [ 806.878758][ T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 806.904301][T18029] Bluetooth: MGMT ver 1.23 [ 807.048446][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 807.057785][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 807.057820][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 807.057850][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 42869, setting to 1024 [ 807.057880][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 807.104145][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 807.104168][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.104183][ T9] usb 5-1: Product: syz [ 807.104194][ T9] usb 5-1: Manufacturer: syz [ 807.104205][ T9] usb 5-1: SerialNumber: syz [ 807.155727][T18036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5673'. [ 807.190747][ T9] usb 5-1: config 0 descriptor?? [ 807.191765][T18020] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 807.441923][T18020] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 807.489595][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 807.492165][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5676'. [ 807.766653][T18052] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5680'. [ 807.861168][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 807.913229][ T8559] usb 5-1: USB disconnect, device number 90 [ 807.913237][ C0] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 808.019569][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 808.028104][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 808.029885][ T9] usb 3-1: config 10 has an invalid interface number: 148 but max is 0 [ 808.029913][ T9] usb 3-1: config 10 has no interface number 0 [ 808.029959][ T9] usb 3-1: config 10 interface 148 altsetting 24 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 808.029991][ T9] usb 3-1: config 10 interface 148 has no altsetting 0 [ 808.098836][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=6808, bcdDevice=5c.bb [ 808.098871][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.098886][ T9] usb 3-1: Product: syz [ 808.098897][ T9] usb 3-1: Manufacturer: syz [ 808.098908][ T9] usb 3-1: SerialNumber: syz [ 808.377688][ T9] sierra 3-1:10.148: Sierra USB modem converter detected [ 808.402963][ T9] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 808.427450][ T9] usb 3-1: USB disconnect, device number 86 [ 808.459363][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 808.460127][ T9] sierra 3-1:10.148: device disconnected [ 809.573240][ T809] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 809.731567][ T809] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 809.731600][ T809] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 809.731621][ T809] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 809.731654][ T809] usb 3-1: config 220 has no interface number 2 [ 809.731726][ T809] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 809.731757][ T809] usb 3-1: config 220 interface 0 has no altsetting 0 [ 809.731778][ T809] usb 3-1: config 220 interface 76 has no altsetting 0 [ 809.731799][ T809] usb 3-1: config 220 interface 1 has no altsetting 0 [ 809.735045][ T809] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 809.735075][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.735098][ T809] usb 3-1: Product: syz [ 809.735115][ T809] usb 3-1: Manufacturer: syz [ 809.735131][ T809] usb 3-1: SerialNumber: syz [ 810.072857][ T809] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 810.072894][ T809] uvcvideo 3-1:220.0: No valid video chain found. [ 810.072959][ T809] usb 3-1: selecting invalid altsetting 0 [ 810.134821][ T809] usb 3-1: selecting invalid altsetting 0 [ 810.134862][ T809] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 810.164828][ T809] usb 3-1: USB disconnect, device number 87 [ 810.341039][T18111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5708'. [ 810.341062][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5708'. [ 810.341083][T18111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5708'. [ 810.341126][T18111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5708'. [ 810.498580][T18095] orangefs_mount: mount request failed with -4 [ 810.808064][ T1011] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.835159][ T1011] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.835212][ T1011] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.835252][ T1011] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.857979][ T5870] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 810.903486][T18127] vlan3: entered promiscuous mode [ 810.903507][T18127] macvtap0: entered promiscuous mode [ 811.018059][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 811.020517][ T5870] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 811.020652][ T5870] usb 1-1: config 179 has no interface number 0 [ 811.020703][ T5870] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 811.020733][ T5870] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 811.020764][ T5870] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 811.020792][ T5870] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 811.020821][ T5870] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 811.020859][ T5870] usb 1-1: config 179 interface 65 has no altsetting 0 [ 811.020895][ T5870] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 811.020920][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.180689][ T5870] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input35 [ 811.266364][ T5150] input input35: unable to receive magic message: -110 [ 811.427088][ T5150] input input35: unable to receive magic message: -32 [ 811.558141][T18147] misc userio: Invalid payload size [ 811.559792][T18147] misc userio: No port type given on /dev/userio [ 811.591849][ T5150] input input35: unable to receive magic message: -32 [ 811.654340][ T31] usb 1-1: USB disconnect, device number 79 [ 811.654476][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 811.654542][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 811.821843][T18155] netlink: 'syz.2.5728': attribute type 6 has an invalid length. [ 811.969093][T18162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5733'. [ 812.330761][ T5870] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 812.492951][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.492989][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.493033][ T5870] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 812.493060][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.555617][ T5870] usb 5-1: config 0 descriptor?? [ 813.014067][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014104][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014133][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014161][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014189][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014217][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014244][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014290][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014461][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.014493][ T5870] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 813.108580][ T5870] sony 0003:054C:024B.0016: unexpected long global item [ 813.116685][ T5870] sony 0003:054C:024B.0016: parse failed [ 813.116798][ T5870] sony 0003:054C:024B.0016: probe with driver sony failed with error -22 [ 813.233260][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5753'. [ 813.235472][ T5870] usb 5-1: USB disconnect, device number 91 [ 813.497523][ T36] audit: type=1326 audit(2000000674.007:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79549dc799 code=0x7ffc0000 [ 813.498567][ T36] audit: type=1326 audit(2000000674.007:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79549dc799 code=0x7ffc0000 [ 813.501244][ T36] audit: type=1326 audit(2000000674.007:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f79549dc799 code=0x7ffc0000 [ 813.578637][ T36] audit: type=1326 audit(2000000674.082:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79549dc799 code=0x7ffc0000 [ 813.579348][ T36] audit: type=1326 audit(2000000674.082:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79549dc799 code=0x7ffc0000 [ 813.579461][ T31] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 813.741371][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 813.745498][ T31] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 813.745530][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.787148][ T31] usb 3-1: config 0 descriptor?? [ 813.800170][ T31] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 814.010501][ T31] usb 3-1: Detected FT232A [ 814.012899][ T31] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 814.031480][ T31] usb 3-1: USB disconnect, device number 88 [ 814.065809][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 814.066523][ T31] ftdi_sio 3-1:0.0: device disconnected [ 814.204274][T18231] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5764'. [ 814.496191][T18239] kAFS: unable to lookup cell 'էKyy [ 814.496191][T18239] [ 814.496191][T18239] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 814.535764][ T31] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 814.688938][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 814.693740][ T31] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 814.716392][ T31] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 814.716435][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.716458][ T31] usb 1-1: Product: syz [ 814.716475][ T31] usb 1-1: Manufacturer: syz [ 814.716492][ T31] usb 1-1: SerialNumber: syz [ 814.773391][ T31] usb 1-1: config 0 descriptor?? [ 814.808313][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 814.808407][ T31] usb 1-1: setting power ON [ 814.808429][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 814.868203][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 814.876196][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 814.876360][ T31] usb 1-1: media controller created [ 815.016198][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 815.053479][T18235] dvb-usb: bulk message failed: -22 (3/0) [ 815.053507][T18235] dvb-usb: bulk message failed: -22 (4/0) [ 815.053523][T18235] cxusb: i2c read failed [ 815.155429][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5772'. [ 815.194058][ T31] usb 1-1: selecting invalid altsetting 6 [ 815.194076][ T31] usb 1-1: digital interface selection failed (-22) [ 815.194087][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 815.230825][ T31] usb 1-1: setting power OFF [ 815.231113][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 815.231134][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 815.231149][ T31] (NULL device *): no alternate interface [ 815.384232][T18256] CUSE: info not properly terminated [ 815.456049][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 815.490059][ T31] usb 1-1: USB disconnect, device number 80 [ 817.005059][T18326] binder: 18323:18326 ioctl 541b 0 returned -22 [ 817.315241][ T31] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 817.440682][ T36] audit: type=1326 audit(2000000677.699:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18340 comm="syz.3.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fa12c799 code=0x7ffc0000 [ 817.440740][ T36] audit: type=1326 audit(2000000677.699:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18340 comm="syz.3.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fa12c799 code=0x7ffc0000 [ 817.440788][ T36] audit: type=1326 audit(2000000677.699:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18340 comm="syz.3.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fa12c799 code=0x7ffc0000 [ 817.496232][ T36] audit: type=1326 audit(2000000677.746:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18340 comm="syz.3.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fa12c799 code=0x7ffc0000 [ 817.496382][ T36] audit: type=1326 audit(2000000677.746:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18340 comm="syz.3.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1fa12c502 code=0x7ffc0000 [ 817.503904][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 817.585210][ T31] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 817.585243][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.585266][ T31] usb 3-1: Product: syz [ 817.585282][ T31] usb 3-1: Manufacturer: syz [ 817.585298][ T31] usb 3-1: SerialNumber: syz [ 817.632006][ T31] usb 3-1: config 0 descriptor?? [ 817.659682][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 818.297520][ T31] gspca_ov534_9: reg_w failed -71 [ 818.616160][ T31] gspca_ov534_9: Unknown sensor 0000 [ 818.616264][ T31] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 818.625943][ T31] usb 3-1: USB disconnect, device number 89 [ 818.656354][T18383] mmap: syz.4.5835 (18383): VmData 37580800 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 819.811439][ T5870] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 819.896742][ T31] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 819.971612][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 819.975131][ T5870] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 819.975159][ T5870] usb 5-1: config 0 has no interface number 0 [ 819.975210][ T5870] usb 5-1: config 0 interface 12 has no altsetting 0 [ 820.027656][ T5870] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 820.027691][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.027713][ T5870] usb 5-1: Product: syz [ 820.027731][ T5870] usb 5-1: Manufacturer: syz [ 820.027748][ T5870] usb 5-1: SerialNumber: syz [ 820.090857][ T5870] usb 5-1: config 0 descriptor?? [ 820.100848][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 820.127244][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 820.127276][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.127298][ T31] usb 3-1: Product: syz [ 820.127314][ T31] usb 3-1: Manufacturer: syz [ 820.127330][ T31] usb 3-1: SerialNumber: syz [ 820.313251][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 820.313280][ T31] r8152-cfgselector 3-1: config 0 descriptor?? [ 820.555916][ T31] r8152-cfgselector 3-1: Needed 1 retries to read version [ 820.816301][ T5870] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 820.816367][ T5870] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 820.816387][ T5870] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 820.816484][ T5870] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 820.864953][ T809] r8152-cfgselector 3-1: USB disconnect, device number 90 [ 820.917121][ T5870] usb 5-1: USB disconnect, device number 92 [ 821.220100][T14936] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 821.461877][T14936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.461908][T14936] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 821.462069][T14936] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 821.462144][T14936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.557868][T14936] usb 4-1: config 0 descriptor?? [ 822.369732][T14936] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 822.369787][T14936] dvb-usb: bulk message failed: -22 (3/0) [ 822.465625][T14936] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 822.469357][T14936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 822.469510][T14936] usb 4-1: media controller created [ 822.502245][T14936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 822.546215][T14936] dvb-usb: bulk message failed: -22 (6/0) [ 822.546302][T14936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 822.557508][T14936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 822.587877][ T5811] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 822.652953][T14936] dvb-usb: schedule remote query interval to 150 msecs. [ 822.652978][T14936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 822.822838][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 822.822892][ T31] dvb-usb: error while querying for an remote control event. [ 823.034557][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 823.034592][ T5882] dvb-usb: error while querying for an remote control event. [ 823.377554][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 823.377590][ T5882] dvb-usb: error while querying for an remote control event. [ 823.546147][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 823.546182][ T5882] dvb-usb: error while querying for an remote control event. [ 823.740837][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 823.740873][ T31] dvb-usb: error while querying for an remote control event. [ 823.909023][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 823.909061][ T31] dvb-usb: error while querying for an remote control event. [ 823.993198][T14936] usb 4-1: USB disconnect, device number 90 [ 829.620951][T14936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 830.719063][T18463] netlink: 'syz.5.5872': attribute type 2 has an invalid length. [ 834.492079][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5877'. [ 836.078257][T18477] syz_tun: entered promiscuous mode [ 836.156826][T18477] syz_tun: refused to change device tx_queue_len [ 842.324397][T18497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5887'. [ 843.286449][T14458] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 843.686962][T14458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 843.834908][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 843.944050][T14458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 843.963266][T14458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 843.964087][T14458] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 844.031634][T18503] [U] M٭Q& K4 [ 844.103561][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 844.107214][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.107248][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 844.107292][ T10] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 844.107317][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.331233][ T10] usb 5-1: config 0 descriptor?? [ 846.225880][ T5811] Bluetooth: hci1: command tx timeout [ 846.427106][ T10] hid_parser_main: 1161 callbacks suppressed [ 846.427132][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427166][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427196][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427225][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427252][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427280][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427308][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427336][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427364][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.427391][ T10] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0 [ 846.548297][ T10] pantherlord 0003:0810:0002.0017: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 846.548346][ T10] pantherlord 0003:0810:0002.0017: no output reports found [ 846.860592][ T9] usb 5-1: USB disconnect, device number 93 [ 848.445545][ T5811] Bluetooth: hci1: command tx timeout [ 848.488640][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 848.760562][T18509] fido_id[18509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 849.395585][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 849.412743][ T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 849.441206][ T31] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 849.441241][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.441264][ T31] usb 6-1: Product: syz [ 849.441280][ T31] usb 6-1: Manufacturer: syz [ 849.441296][ T31] usb 6-1: SerialNumber: syz [ 849.483827][ T31] usb 6-1: config 0 descriptor?? [ 849.485742][T18515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 850.665728][ T5811] Bluetooth: hci1: command tx timeout [ 850.859847][ T31] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 850.915330][ T3558] usb 6-1: Failed to submit usb control message: -71 [ 850.915369][ T3558] usb 6-1: unable to send the bmi data to the device: -71 [ 850.915390][ T3558] usb 6-1: unable to get target info from device [ 850.915420][ T3558] usb 6-1: could not get target info (-71) [ 850.915501][ T3558] usb 6-1: could not probe fw (-71) [ 850.998779][T18524] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5897'. [ 850.998901][T18524] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 851.394971][ T31] usb 6-1: USB disconnect, device number 8 [ 853.044861][ T5811] Bluetooth: hci1: command tx timeout [ 857.583499][T14830] udevd[14830]: setting mode of /dev/bus/usb/006/008 to 020664 failed: No such file or directory [ 857.583687][T14830] udevd[14830]: setting owner of /dev/bus/usb/006/008 to uid=0, gid=0 failed: No such file or directory [ 858.491068][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.506689][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.305643][T14458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 864.675061][T14458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 864.677920][T14458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 864.679407][T14458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 864.680202][T14458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 867.181848][T14458] Bluetooth: hci0: command tx timeout [ 869.567565][ T5811] Bluetooth: hci0: command tx timeout [ 870.421390][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5909'. [ 870.593776][T18500] chnl_net:caif_netlink_parms(): no params data found [ 871.075226][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 871.901379][ T5811] Bluetooth: hci0: command tx timeout [ 874.149032][T14458] Bluetooth: hci0: command tx timeout [ 881.441238][T18500] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.441366][T18500] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.441961][T18500] bridge_slave_0: entered allmulticast mode [ 881.462311][T18500] bridge_slave_0: entered promiscuous mode [ 882.636119][T18500] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.636250][T18500] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.636624][T18500] bridge_slave_1: entered allmulticast mode [ 882.882710][T18500] bridge_slave_1: entered promiscuous mode [ 885.135465][T18584] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5917'. [ 885.135503][T18584] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5917'. [ 885.718698][T18500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.904806][T18500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.001598][T18590] netlink: 'syz.3.5918': attribute type 10 has an invalid length. [ 886.057311][T18591] netlink: 'syz.3.5918': attribute type 10 has an invalid length. [ 886.057333][T18591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5918'. [ 886.606414][T18590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.191906][T18590] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 887.822165][T18591] batadv0: entered promiscuous mode [ 887.822193][T18591] batadv0: entered allmulticast mode [ 887.954615][T18591] bond0: (slave batadv0): Releasing backup interface [ 888.633692][T18591] bridge0: port 3(batadv0) entered blocking state [ 888.633824][T18591] bridge0: port 3(batadv0) entered disabled state [ 888.672882][T18535] chnl_net:caif_netlink_parms(): no params data found [ 888.903784][ T67] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 888.903806][ T67] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 889.965799][T18500] team0: Port device team_slave_0 added [ 890.308064][T18500] team0: Port device team_slave_1 added [ 896.708103][T18500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.708126][T18500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.708157][T18500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.563013][T18500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.563033][T18500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.563065][T18500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.438098][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.438286][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.438543][T18535] bridge_slave_0: entered allmulticast mode [ 904.441340][T18535] bridge_slave_0: entered promiscuous mode [ 905.327696][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.327826][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.328085][T18535] bridge_slave_1: entered allmulticast mode [ 905.330875][T18535] bridge_slave_1: entered promiscuous mode [ 908.849972][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.854286][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.282864][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 910.301890][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 910.303281][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 910.466957][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 910.467799][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 910.604668][T18535] team0: Port device team_slave_0 added [ 910.667588][T18535] team0: Port device team_slave_1 added [ 912.614561][T18666] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 912.675348][T14458] Bluetooth: hci6: command tx timeout [ 914.891124][T14458] Bluetooth: hci6: command tx timeout [ 914.987126][ T5870] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 915.181404][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.181433][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 915.181500][ T5870] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 915.181525][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.187136][ T5870] usb 4-1: config 0 descriptor?? [ 915.316632][ T5870] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 915.316683][ T5870] dvb-usb: bulk message failed: -22 (3/0) [ 915.481669][ T5870] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 915.482576][ T5870] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 915.482631][ T5870] usb 4-1: media controller created [ 915.484621][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 916.170170][ T5870] dvb-usb: bulk message failed: -22 (6/0) [ 916.170258][ T5870] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 916.213909][T18669] dvb-usb: bulk message failed: -22 (3/0) [ 917.112792][T14458] Bluetooth: hci6: command tx timeout [ 917.457834][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 917.505566][ T5870] dvb-usb: schedule remote query interval to 150 msecs. [ 917.505597][ T5870] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 917.587402][ T5870] usb 4-1: USB disconnect, device number 91 [ 919.197542][ T5870] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 919.592318][T14458] Bluetooth: hci6: command tx timeout [ 923.541480][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 923.560747][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 925.335712][T14458] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.364706][T14458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.368264][T14458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 925.380138][T14458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 925.383145][T14458] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 929.285094][ T5115] Bluetooth: hci1: command tx timeout [ 929.363194][T14458] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 929.368252][T14458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 929.369665][T14458] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 929.475524][T14458] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 929.554319][T14458] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.945791][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 930.966925][ T5115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 930.968442][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 930.991351][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 930.992265][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 931.250231][ T31] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 931.464957][ T5115] Bluetooth: hci1: command tx timeout [ 932.200306][ T5115] Bluetooth: hci3: command tx timeout [ 932.495539][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.495576][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.495619][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 932.495645][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.570436][ T31] usb 4-1: config 0 descriptor?? [ 933.260960][ T5115] Bluetooth: hci7: command tx timeout [ 933.697102][ T5115] Bluetooth: hci1: command tx timeout [ 934.464458][ T5115] Bluetooth: hci3: command tx timeout [ 935.045933][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 935.046071][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 935.274302][ T31] usb 4-1: USB disconnect, device number 92 [ 935.479168][ T5115] Bluetooth: hci7: command tx timeout [ 935.905781][ T5115] Bluetooth: hci1: command tx timeout [ 936.674982][ T5115] Bluetooth: hci3: command tx timeout [ 937.726277][ T5115] Bluetooth: hci7: command tx timeout [ 939.073971][ T5115] Bluetooth: hci3: command tx timeout [ 940.028095][ T5115] Bluetooth: hci7: command tx timeout [ 967.652627][T18661] chnl_net:caif_netlink_parms(): no params data found [ 969.998020][T18686] chnl_net:caif_netlink_parms(): no params data found [ 979.727280][T18690] chnl_net:caif_netlink_parms(): no params data found [ 979.825519][T18677] chnl_net:caif_netlink_parms(): no params data found [ 981.482403][T18741] netlink: 'syz.3.5967': attribute type 2 has an invalid length. [ 981.482427][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5967'. [ 982.498620][T14458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 982.534757][T14458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 982.605496][T14458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 982.692797][T14458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 982.693706][T14458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 983.330606][ T5115] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 983.353053][ T5115] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 983.355552][ T5115] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 983.385518][ T5115] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 983.387603][ T5115] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 985.164802][T14458] Bluetooth: hci0: command tx timeout [ 985.716852][T14458] Bluetooth: hci8: command tx timeout [ 987.746235][T14458] Bluetooth: hci0: command tx timeout [ 987.938389][T14458] Bluetooth: hci8: command tx timeout [ 988.969547][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.969661][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.158463][T14458] Bluetooth: hci0: command tx timeout [ 990.516046][T14458] Bluetooth: hci8: command tx timeout [ 992.392548][T14458] Bluetooth: hci0: command tx timeout [ 992.723911][T14458] Bluetooth: hci8: command tx timeout [ 998.677835][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 998.702956][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 998.807522][ T5811] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 999.398072][T18777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 999.443572][T18777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 999.445411][T18777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 999.496542][ T5811] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 999.498040][ T5811] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 999.499560][ T5811] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 999.500345][ T5811] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1001.919660][T14458] Bluetooth: hci6: command tx timeout [ 1003.426868][T14458] Bluetooth: hci9: command tx timeout [ 1004.440833][T14458] Bluetooth: hci6: command tx timeout [ 1005.700091][T14458] Bluetooth: hci9: command tx timeout [ 1006.667191][T14458] Bluetooth: hci6: command tx timeout [ 1008.105177][T14458] Bluetooth: hci9: command tx timeout [ 1008.874249][T14458] Bluetooth: hci6: command tx timeout [ 1010.326916][T14458] Bluetooth: hci9: command tx timeout [ 1021.778821][ T37] INFO: task kworker/u8:2:42 blocked for more than 143 seconds. [ 1021.778865][ T37] Tainted: G L syzkaller #0 [ 1021.778880][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1021.778892][ T37] task:kworker/u8:2 state:D stack:21136 pid:42 tgid:42 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1021.778967][ T37] Workqueue: events_unbound bpf_map_free_deferred [ 1021.779009][ T37] Call Trace: [ 1021.779022][ T37] [ 1021.779038][ T37] __schedule+0x1553/0x5240 [ 1021.779077][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1021.779119][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1021.779145][ T37] ? __pfx___schedule+0x10/0x10 [ 1021.779192][ T37] rt_mutex_schedule+0x76/0xf0 [ 1021.779221][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1021.779268][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1021.779296][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1021.779324][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1021.779370][ T37] ? rcu_barrier+0x4c/0x580 [ 1021.779405][ T37] ? rcu_barrier+0x4c/0x580 [ 1021.779430][ T37] mutex_lock_nested+0x168/0x1d0 [ 1021.779463][ T37] rcu_barrier+0x4c/0x580 [ 1021.779503][ T37] dev_map_free+0x11f/0x6a0 [ 1021.779531][ T37] ? kfree+0x4d/0x6c0 [ 1021.779572][ T37] bpf_map_free_deferred+0x217/0x460 [ 1021.779601][ T37] ? process_scheduled_works+0xa25/0x1830 [ 1021.779636][ T37] process_scheduled_works+0xb02/0x1830 [ 1021.779723][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1021.779765][ T37] ? assign_work+0x3d5/0x5e0 [ 1021.779803][ T37] worker_thread+0xa50/0xfc0 [ 1021.779868][ T37] kthread+0x388/0x470 [ 1021.779909][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1021.779941][ T37] ? __pfx_kthread+0x10/0x10 [ 1021.779967][ T37] ret_from_fork+0x51e/0xb90 [ 1021.780093][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1021.780128][ T37] ? __switch_to+0xc7d/0x1450 [ 1021.780161][ T37] ? __pfx_kthread+0x10/0x10 [ 1021.780188][ T37] ret_from_fork_asm+0x1a/0x30 [ 1021.780230][ T37] [ 1021.780428][ T37] [ 1021.780428][ T37] Showing all locks held in the system: [ 1021.780440][ T37] 3 locks held by kworker/0:0/9: [ 1021.780454][ T37] 9 locks held by kworker/u8:0/12: [ 1021.780470][ T37] 4 locks held by ksoftirqd/1/30: [ 1021.780484][ T37] 1 lock held by khungtaskd/37: [ 1021.780497][ T37] #0: ffffffff8ddcb880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1021.780561][ T37] 3 locks held by kworker/u8:2/42: [ 1021.780574][ T37] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1021.780638][ T37] #1: ffffc90000b47c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1021.780709][ T37] #2: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.780774][ T37] 2 locks held by kworker/u8:6/160: [ 1021.780788][ T37] #0: ffff88801c3e5938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1021.780851][ T37] #1: ffffc90003b47c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1021.780918][ T37] 5 locks held by kworker/u8:9/1169: [ 1021.780943][ T37] 3 locks held by kworker/u8:13/3563: [ 1021.780957][ T37] #0: ffff8880324ac938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1021.781020][ T37] #1: ffffc9000eb87c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1021.781084][ T37] #2: ffffffff8f15a0f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1021.781147][ T37] 3 locks held by kworker/u8:14/3593: [ 1021.781161][ T37] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1021.781223][ T37] #1: ffffc9000ecd7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1021.781287][ T37] #2: ffffffff8f15a0f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1021.781353][ T37] 2 locks held by getty/5553: [ 1021.781366][ T37] #0: ffff88803758d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1021.781423][ T37] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1021.781495][ T37] 1 lock held by syz.0.5852/18419: [ 1021.781508][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.781566][ T37] 1 lock held by syz.2.5880/18480: [ 1021.781580][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.781638][ T37] 1 lock held by syz-executor/18500: [ 1021.781651][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.781716][ T37] 1 lock held by syz-executor/18535: [ 1021.781730][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.781789][ T37] 2 locks held by kworker/u8:1/18576: [ 1021.781803][ T37] #0: ffff88801c3e5938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1021.781866][ T37] #1: ffffc9000eef7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1021.781930][ T37] 1 lock held by syz-executor/18661: [ 1021.781944][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.782003][ T37] 1 lock held by syz.4.5946/18662: [ 1021.782017][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.782075][ T37] 2 locks held by syz-executor/18677: [ 1021.782089][ T37] #0: ffffffff8f6c1430 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1021.782155][ T37] #1: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.782214][ T37] 1 lock held by syz-executor/18686: [ 1021.782227][ T37] #0: ffffffff8ddd1af0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1021.782286][ T37] 1 lock held by syz-executor/18690: [ 1021.782300][ T37] #0: ffffffff8f15a0f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1021.782361][ T37] 1 lock held by syz-executor/18744: [ 1021.782375][ T37] #0: ffffffff8f15a0f8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e10 [ 1021.782437][ T37] 2 locks held by syz-executor/18749: [ 1021.782451][ T37] #0: ffffffff8f14b940 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1021.782508][ T37] #1: ffffffff8f15a0f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1021.782573][ T37] 2 locks held by syz-executor/18771: [ 1021.782587][ T37] #0: ffffffff8f14b940 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1021.782644][ T37] #1: ffffffff8f15a0f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 1021.782711][ T37] 2 locks held by syz-executor/18772: [ 1021.782725][ T37] #0: ffffffff8f14b940 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1021.782781][ T37] #1: ffffffff8f15a0f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 1021.782841][ T37] 1 lock held by syz.3.5981/18798: [ 1021.782854][ T37] #0: ffffffff8f15a0f8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1021.782914][ T37] 1 lock held by dhcpcd/18800: [ 1021.782927][ T37] #0: ffff888062c86358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1021.782988][ T37] 1 lock held by dhcpcd/18801: [ 1021.783000][ T37] #0: ffff888028b94358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1021.783058][ T37] [ 1021.783065][ T37] ============================================= [ 1021.783065][ T37] [ 1021.783082][ T37] NMI backtrace for cpu 1 [ 1021.783105][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1021.783138][ T37] Tainted: [L]=SOFTLOCKUP [ 1021.783146][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1021.783159][ T37] Call Trace: [ 1021.783169][ T37] [ 1021.783178][ T37] dump_stack_lvl+0xe8/0x150 [ 1021.783213][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1021.783237][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1021.783272][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1021.783299][ T37] sys_info+0x135/0x170 [ 1021.783331][ T37] watchdog+0xfd9/0x1030 [ 1021.783365][ T37] ? watchdog+0x21a/0x1030 [ 1021.783401][ T37] kthread+0x388/0x470 [ 1021.783426][ T37] ? __pfx_watchdog+0x10/0x10 [ 1021.783451][ T37] ? __pfx_kthread+0x10/0x10 [ 1021.783477][ T37] ret_from_fork+0x51e/0xb90 [ 1021.783513][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1021.783544][ T37] ? __switch_to+0xc7d/0x1450 [ 1021.783577][ T37] ? __pfx_kthread+0x10/0x10 [ 1021.783602][ T37] ret_from_fork_asm+0x1a/0x30 [ 1021.783642][ T37] [ 1021.783651][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1021.783685][ C0] NMI backtrace for cpu 0 [ 1021.783704][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1021.783730][ C0] Tainted: [L]=SOFTLOCKUP [ 1021.783738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1021.783751][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1021.783775][ C0] RIP: 0010:fib_lookup+0x0/0x440 [ 1021.783796][ C0] Code: 89 f7 e8 33 39 a9 f8 e9 9c fb ff ff 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 50 49 89 d6 49 89 f5 49 89 fc 49 bf [ 1021.783813][ C0] RSP: 0018:ffffc90000116898 EFLAGS: 00000202 [ 1021.783829][ C0] RAX: ffffffff8981ba9c RBX: ffffc90000116980 RCX: ffff88801c6b0000 [ 1021.783844][ C0] RDX: ffffc90000116980 RSI: ffffc90000116b20 RDI: ffff88803ab8aac0 [ 1021.783858][ C0] RBP: 1ffff92000022d69 R08: 0000000000000000 R09: 0000000000000100 [ 1021.783871][ C0] R10: ffffc90000116980 R11: fffff52000022d36 R12: ffffc90000116b4c [ 1021.783886][ C0] R13: ffff88803ab8aac0 R14: 0000000000000000 R15: 1ffff92000022d64 [ 1021.783900][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 1021.783916][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1021.783929][ C0] CR2: 0000560ce54d1168 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1021.783955][ C0] Call Trace: [ 1021.783962][ C0] [ 1021.783969][ C0] ip_route_output_key_hash_rcu+0x32e/0x25d0 [ 1021.783998][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1021.784019][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1021.784042][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 1021.784065][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1021.784098][ C0] ip_route_output_flow+0x2a/0x150 [ 1021.784116][ C0] ? ip_route_me_harder+0x730/0xf90 [ 1021.784141][ C0] ip_route_me_harder+0x742/0xf90 [ 1021.784171][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1021.784204][ C0] ? __cookie_v4_init_sequence+0x25d/0x500 [ 1021.784239][ C0] synproxy_send_tcp+0x34c/0x670 [ 1021.784266][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 1021.784300][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1021.784324][ C0] ? nft_osf_reduce+0x538/0x560 [ 1021.784349][ C0] ? synproxy_pernet+0x45/0x270 [ 1021.784380][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1021.784411][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1021.784411][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1021.784441][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1021.784471][ C0] nft_synproxy_do_eval+0x305/0x580 [ 1021.784502][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1021.784539][ C0] nft_do_chain+0x45e/0x1990 [ 1021.784569][ C0] ? nft_do_chain+0x16e9/0x1990 [ 1021.784597][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1021.784617][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1021.784661][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1021.784682][ C0] nft_do_chain_inet+0x29d/0x380 [ 1021.784709][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1021.784740][ C0] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1021.784766][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1021.784793][ C0] nf_hook_slow+0xc5/0x220 [ 1021.784819][ C0] NF_HOOK+0x21f/0x3c0 [ 1021.784847][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1021.784876][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1021.784902][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1021.784927][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1021.784965][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1021.784997][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1021.785026][ C0] NF_HOOK+0x336/0x3c0 [ 1021.785051][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1021.785078][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1021.785104][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1021.785130][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1021.785158][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1021.785188][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1021.785214][ C0] ? process_backlog+0x271/0xc60 [ 1021.785235][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1021.785261][ C0] process_backlog+0x569/0xc60 [ 1021.785294][ C0] __napi_poll+0xaf/0x580 [ 1021.785313][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1021.785335][ C0] net_rx_action+0x696/0xe00 [ 1021.785366][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1021.785387][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1021.785416][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1021.785438][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1021.785471][ C0] handle_softirqs+0x1de/0x6f0 [ 1021.785504][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1021.785531][ C0] ? __alloc_skb+0x186/0x7d0 [ 1021.785554][ C0] __alloc_skb+0x1aa/0x7d0 [ 1021.785580][ C0] nsim_dev_trap_report_work+0x29f/0xbc0 [ 1021.785612][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1021.785639][ C0] process_scheduled_works+0xb02/0x1830 [ 1021.785680][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1021.785788][ C0] ? assign_work+0x3d5/0x5e0 [ 1021.785822][ C0] worker_thread+0xa50/0xfc0 [ 1021.785866][ C0] kthread+0x388/0x470 [ 1021.785885][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1021.785912][ C0] ? __pfx_kthread+0x10/0x10 [ 1021.785933][ C0] ret_from_fork+0x51e/0xb90 [ 1021.785962][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1021.785987][ C0] ? __switch_to+0xc7d/0x1450 [ 1021.786012][ C0] ? __pfx_kthread+0x10/0x10 [ 1021.786032][ C0] ret_from_fork_asm+0x1a/0x30 [ 1021.786060][ C0] [ 1023.250422][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1023.250449][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1023.250482][ T37] Tainted: [L]=SOFTLOCKUP [ 1023.250491][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1023.250506][ T37] Call Trace: [ 1023.250516][ T37] [ 1023.250528][ T37] vpanic+0x56c/0xa60 [ 1023.250568][ T37] ? __pfx___schedule+0x10/0x10 [ 1023.250599][ T37] ? __pfx_vpanic+0x10/0x10 [ 1023.250653][ T37] panic+0xc5/0xd0 [ 1023.250686][ T37] ? __pfx_panic+0x10/0x10 [ 1023.250723][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 1023.250757][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1023.250790][ T37] watchdog+0x1023/0x1030 [ 1023.250825][ T37] ? watchdog+0x21a/0x1030 [ 1023.250861][ T37] kthread+0x388/0x470 [ 1023.250887][ T37] ? __pfx_watchdog+0x10/0x10 [ 1023.250913][ T37] ? __pfx_kthread+0x10/0x10 [ 1023.250940][ T37] ret_from_fork+0x51e/0xb90 [ 1023.250976][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1023.251007][ T37] ? __switch_to+0xc7d/0x1450 [ 1023.251041][ T37] ? __pfx_kthread+0x10/0x10 [ 1023.251069][ T37] ret_from_fork_asm+0x1a/0x30 [ 1023.251109][ T37] [ 1023.251705][ T37] Kernel Offset: disabled