last executing test programs: 1m41.357083535s ago: executing program 1 (id=4125): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x92, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x84, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "4740c2"}]}]}}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8adccdd5b271da89a45b8d8583362f6cb68e927df321779eafcc9ff6671d69e7", "290efca4e4937f712f2ba74ca75941ec", {"beea1f1b239f42c93cde265cf5a4daea", "a1556bcd75de3ebb36b7323bcf06706d"}}}}}}}, 0x0) 1m41.214482779s ago: executing program 1 (id=4127): r0 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) tkill(r0, 0x2d) 1m40.860383188s ago: executing program 1 (id=4132): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) 1m40.622760196s ago: executing program 1 (id=4135): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="736e98f3f5aeefb5f883e321cbb9b2dc", 0x10) 1m40.386397809s ago: executing program 1 (id=4139): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 1m40.197125618s ago: executing program 1 (id=4142): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8925, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) 1m25.174202263s ago: executing program 32 (id=4142): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8925, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) 54.701118644s ago: executing program 2 (id=4622): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x4}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x82e, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0xa2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x6, 0x22, {0x5, 0x4, 0x3, 0x14, 0x801, 0x68, 0x1ce2, 0xd9, 0x4, 0x65c, @multicast1, @multicast2}}}}}}, 0x0) 54.413144484s ago: executing program 2 (id=4627): socket(0x40000000002, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f0000001240)={0x2020}, 0x2020) 54.369572572s ago: executing program 5 (id=4628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x800000000000}) 54.279093833s ago: executing program 2 (id=4630): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100", 0x1b}], 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 54.096474337s ago: executing program 5 (id=4631): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x1c0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 53.968671963s ago: executing program 2 (id=4632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 53.722728656s ago: executing program 5 (id=4634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, &(0x7f0000000500)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x0, 0x0}}, 0x10) 53.488520618s ago: executing program 3 (id=4635): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 53.250400559s ago: executing program 5 (id=4637): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1, @empty, 0x2}, 0x1c) 52.98117571s ago: executing program 3 (id=4638): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) 52.791184875s ago: executing program 5 (id=4639): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x145481) 52.620710045s ago: executing program 3 (id=4641): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x1}, 0xe) 52.364771657s ago: executing program 3 (id=4643): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000300)=""/28) 51.07219303s ago: executing program 3 (id=4644): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 50.956920097s ago: executing program 3 (id=4645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 49.363074165s ago: executing program 2 (id=4646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 49.362713578s ago: executing program 2 (id=4647): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x5435, 0x0) 49.29255559s ago: executing program 5 (id=4648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f000000fa80), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f000000fb80)={0x0, 0x0, &(0x7f000000fb40)={&(0x7f000000fac0)={0x68, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffffb, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 48.945257767s ago: executing program 0 (id=4650): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000040)="634f7f", 0x3}], 0x1) ioctl$SNAPSHOT_FREE(r0, 0x3305) 48.516183626s ago: executing program 0 (id=4651): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 48.338632717s ago: executing program 0 (id=4652): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) 48.125716993s ago: executing program 0 (id=4653): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) 47.997482008s ago: executing program 0 (id=4654): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) 47.831515611s ago: executing program 0 (id=4655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000070900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080006400000000108000240000000020800054000000000080003"], 0x9c}}, 0x0) 26.692596348s ago: executing program 33 (id=4648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f000000fa80), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f000000fb80)={0x0, 0x0, &(0x7f000000fb40)={&(0x7f000000fac0)={0x68, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffffb, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 26.537130806s ago: executing program 34 (id=4647): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x5435, 0x0) 26.255594383s ago: executing program 35 (id=4645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 25.871115483s ago: executing program 36 (id=4655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000070900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080006400000000108000240000000020800054000000000080003"], 0x9c}}, 0x0) 20.393394774s ago: executing program 4 (id=4667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r0) 19.530736915s ago: executing program 4 (id=4668): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) 17.34169569s ago: executing program 4 (id=4669): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r0, 0xffffffffffffffff, 0x0) 17.027065117s ago: executing program 4 (id=4670): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) 15.597700619s ago: executing program 4 (id=4671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 15.455447584s ago: executing program 4 (id=4672): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) 0s ago: executing program 37 (id=4672): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) kernel console output (not intermixed with test programs): g 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.893328][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 313.893356][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 313.893379][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 313.895972][ T5927] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 313.896002][ T5927] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 313.896023][ T5927] usb 4-1: Manufacturer: syz [ 313.919047][ T5927] usb 4-1: config 0 descriptor?? [ 314.264334][ T5927] rc_core: IR keymap rc-hauppauge not found [ 314.264356][ T5927] Registered IR keymap rc-empty [ 314.267166][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.281086][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.300025][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 314.313554][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 314.339199][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.358907][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.387655][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.398968][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.428923][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.450528][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.478916][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.499522][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.520529][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.540542][ T5927] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 314.582306][ T5927] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 314.582331][ T5927] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 314.612395][ T5927] usb 4-1: USB disconnect, device number 23 [ 315.388459][ T5927] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 315.583397][ T5927] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 315.583425][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.583443][ T5927] usb 5-1: config 0 has no interface number 0 [ 315.583489][ T5927] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 315.583512][ T5927] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.597585][ T5927] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 315.597613][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.597632][ T5927] usb 5-1: Product: syz [ 315.597656][ T5927] usb 5-1: Manufacturer: syz [ 315.597670][ T5927] usb 5-1: SerialNumber: syz [ 315.613183][ T5927] usb 5-1: config 0 descriptor?? [ 315.882335][ T5927] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 315.901993][ T5928] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 315.918901][ T5927] usb 5-1: USB disconnect, device number 24 [ 316.057893][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.057945][ T5928] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 316.057968][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.083978][ T5928] usb 2-1: config 0 descriptor?? [ 316.518226][ T5928] aquacomputer_d5next 0003:0C70:F00B.0029: item fetching failed at offset 6/7 [ 316.537294][ T5928] aquacomputer_d5next 0003:0C70:F00B.0029: probe with driver aquacomputer_d5next failed with error -22 [ 316.643052][T12367] macsec1: entered promiscuous mode [ 316.747224][ T5927] usb 2-1: USB disconnect, device number 21 [ 317.295383][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.949778][ T37] audit: type=1400 audit(2000000200.940:257): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12411 comm="syz.2.3060" daddr=::ffff:172.20.20.65 dest=20004 [ 319.028453][ T5928] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 319.182785][T12453] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 319.183006][ T5928] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.183036][ T5928] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.183059][ T5928] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.183085][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.183119][ T5928] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 319.183141][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.190638][ T5928] usb 2-1: config 0 descriptor?? [ 319.228549][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 319.431779][ T31] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 319.431878][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.431898][ T31] usb 4-1: Product: syz [ 319.431912][ T31] usb 4-1: Manufacturer: syz [ 319.431926][ T31] usb 4-1: SerialNumber: syz [ 319.455703][ T31] usb 4-1: config 0 descriptor?? [ 319.491837][ T31] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 319.664397][ T5928] uclogic 0003:28BD:0042.002A: interface is invalid, ignoring [ 319.842739][ T5899] usb 2-1: USB disconnect, device number 22 [ 320.095435][ T31] usb 4-1: USB disconnect, device number 24 [ 320.351693][ T5899] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 320.500896][ T5899] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.500925][ T5899] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.500952][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 320.500984][ T5899] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 320.501006][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.565347][ T5899] usb 5-1: config 0 descriptor?? [ 320.688486][ T1197] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 320.838434][ T1197] usb 3-1: Using ep0 maxpacket: 32 [ 320.844671][ T1197] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.844692][ T1197] usb 3-1: config 0 interface 0 has no altsetting 0 [ 320.844712][ T1197] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 320.844724][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.906774][ T1197] usb 3-1: config 0 descriptor?? [ 320.991677][ T5899] kye 0003:0458:501A.002B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 321.024483][ T5899] kye 0003:0458:501A.002B: hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 321.024743][ T5899] kye 0003:0458:501A.002B: tablet-enabling feature report not found [ 321.024759][ T5899] kye 0003:0458:501A.002B: tablet enabling failed [ 321.068600][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 321.197709][ T5899] usb 5-1: USB disconnect, device number 25 [ 321.219083][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 321.221116][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.221140][ T31] usb 4-1: config 0 has no interface number 0 [ 321.225151][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 321.225178][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.225197][ T31] usb 4-1: Product: syz [ 321.225210][ T31] usb 4-1: Manufacturer: syz [ 321.225224][ T31] usb 4-1: SerialNumber: syz [ 321.298005][ T31] usb 4-1: config 0 descriptor?? [ 321.347464][ T1197] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0 [ 321.347503][ T1197] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0 [ 321.347530][ T1197] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0 [ 321.347557][ T1197] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0 [ 321.347583][ T1197] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0 [ 321.351740][ T31] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 321.351764][ T31] usb 4-1: selecting invalid altsetting 1 [ 321.351781][ T31] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 321.371586][ T31] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 321.371971][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 321.372018][ T31] usb 4-1: media controller created [ 321.447396][ T1197] corsair-psu 0003:1B1C:1C09.002C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 321.469913][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.548523][ T1197] corsair-psu 0003:1B1C:1C09.002C: unable to initialize device (-38) [ 321.625713][ T1197] corsair-psu 0003:1B1C:1C09.002C: probe with driver corsair-psu failed with error -38 [ 321.638906][ T31] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 321.638961][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 321.639469][ T31] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 321.640254][ T1197] usb 3-1: USB disconnect, device number 28 [ 321.798515][ T31] usb 4-1: USB disconnect, device number 25 [ 321.954394][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3112'. [ 322.028785][T12526] IPVS: Unknown mcast interface: pimreg1 [ 322.078853][ T37] audit: type=1400 audit(2000000205.070:258): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12527 comm="syz.1.3115" dest=20016 [ 322.274443][T12536] atomic_op ffff888060250a18 conn xmit_atomic 0000000000000000 [ 322.356904][T12539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3120'. [ 322.647684][T12552] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 322.647873][T12552] macsec1: entered allmulticast mode [ 322.647892][T12552] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 323.062923][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 323.467775][T12593] NILFS (nullb0): couldn't find nilfs on the device [ 323.911247][T12607] lo: MTU too low for tipc bearer [ 323.911286][T12607] tipc: Enabling of bearer rejected, failed to enable media [ 324.868449][ T5928] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 324.878506][ T5899] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 325.024612][ T5928] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 325.024642][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.024661][ T5928] usb 5-1: Product: syz [ 325.024675][ T5928] usb 5-1: Manufacturer: syz [ 325.024689][ T5928] usb 5-1: SerialNumber: syz [ 325.040575][ T5928] usb 5-1: config 0 descriptor?? [ 325.045948][ T5928] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 325.054752][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.054784][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.054821][ T5899] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 325.054843][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.117381][ T5899] usb 2-1: config 0 descriptor?? [ 325.471020][ T5928] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 325.548938][ T5899] hid-retrode 0003:0403:97C1.002D: unknown main item tag 0x0 [ 325.552475][ T5899] hid-retrode 0003:0403:97C1.002D: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 325.676702][ T5928] usb 5-1: USB disconnect, device number 26 [ 325.795979][ T31] usb 2-1: USB disconnect, device number 23 [ 326.627057][T12700] iso9660: Bad value for 'gid' [ 326.627077][T12700] iso9660: Bad value for 'gid' [ 326.742713][T12702] netlink: 'syz.1.3197': attribute type 21 has an invalid length. [ 326.742737][T12702] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3197'. [ 326.742848][T12702] netlink: 'syz.1.3197': attribute type 4 has an invalid length. [ 326.742862][T12702] netlink: 'syz.1.3197': attribute type 5 has an invalid length. [ 326.742875][T12702] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3197'. [ 327.218499][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 327.355419][T12720] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 327.368538][ T1197] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 327.376279][ T31] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 327.376308][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.376328][ T31] usb 5-1: Product: syz [ 327.376342][ T31] usb 5-1: Manufacturer: syz [ 327.376355][ T31] usb 5-1: SerialNumber: syz [ 327.386125][ T31] usb 5-1: config 0 descriptor?? [ 327.422612][ T31] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 327.434055][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.436526][ T31] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 327.436580][ T31] usb 5-1: media controller created [ 327.483200][T12720] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 327.561084][ T1197] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 327.561147][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.562282][ T1197] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 327.562308][ T1197] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 327.562327][ T1197] usb 4-1: Manufacturer: syz [ 327.567128][ T1197] usb 4-1: config 0 descriptor?? [ 327.582937][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.738697][ T5928] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 327.758581][ T1197] rc_core: IR keymap rc-hauppauge not found [ 327.758609][ T1197] Registered IR keymap rc-empty [ 327.760199][ T1197] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 327.763451][ T1197] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 327.878064][ T31] DVB: Unable to find symbol mt352_attach() [ 327.904200][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 327.906900][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.906933][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.906973][ T5928] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 327.906997][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.921640][ T5928] usb 2-1: config 0 descriptor?? [ 328.105843][T12730] rc rc0: two consecutive events of type space [ 328.312557][ T5906] usb 4-1: USB disconnect, device number 26 [ 328.340661][ T31] DVB: Unable to find symbol nxt6000_attach() [ 328.340678][ T31] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 328.379321][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 328.431117][ T5928] savu 0003:1E7D:2D5A.002E: unknown main item tag 0x0 [ 328.431155][ T5928] savu 0003:1E7D:2D5A.002E: unknown main item tag 0x0 [ 328.431182][ T5928] savu 0003:1E7D:2D5A.002E: unknown main item tag 0x0 [ 328.431208][ T5928] savu 0003:1E7D:2D5A.002E: unknown main item tag 0x0 [ 328.431240][ T5928] savu 0003:1E7D:2D5A.002E: unknown main item tag 0x0 [ 328.462518][ T5928] savu 0003:1E7D:2D5A.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 328.544963][ T31] dvb-usb: schedule remote query interval to 1000 msecs. [ 328.544986][ T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 328.545004][ T31] dvb-usb: bulk message failed: -22 (7/0) [ 328.545020][ T31] dvb-usb: bulk message failed: -22 (7/0) [ 328.561711][ T31] usb 5-1: USB disconnect, device number 27 [ 328.579701][ T5927] usb 2-1: USB disconnect, device number 24 [ 328.761383][ T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 329.224636][T12760] openvswitch: netlink: IPv6 tunnel dst address is zero [ 329.451072][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 329.518057][T12766] netlink: 'syz.4.3227': attribute type 1 has an invalid length. [ 329.612003][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 329.614449][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 329.614475][ T31] usb 4-1: config 0 has no interface number 0 [ 329.644978][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 329.645008][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.645028][ T31] usb 4-1: Product: syz [ 329.645041][ T31] usb 4-1: Manufacturer: syz [ 329.645055][ T31] usb 4-1: SerialNumber: syz [ 329.660724][ T31] usb 4-1: config 0 descriptor?? [ 329.681874][ T31] smsc95xx v2.0.0 [ 329.681898][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 329.682162][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 329.868485][ T5906] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 329.888923][ T31] usb 4-1: USB disconnect, device number 27 [ 330.004550][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 330.005252][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 330.020133][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 330.020348][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 330.041273][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.041300][ T5906] usb 3-1: config 0 has no interfaces? [ 330.043676][ T5906] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.043705][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.043724][ T5906] usb 3-1: Product: syz [ 330.043739][ T5906] usb 3-1: Manufacturer: syz [ 330.053968][ T5906] usb 3-1: config 0 descriptor?? [ 330.282268][ T31] libceph: connect (1)[c::]:6789 error -101 [ 330.282489][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 330.289529][ T31] usb 3-1: USB disconnect, device number 29 [ 330.540629][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3241'. [ 330.557319][T12801] vlan3: entered promiscuous mode [ 330.557341][T12801] syz_tun: entered promiscuous mode [ 330.788865][ T31] libceph: connect (1)[c::]:6789 error -101 [ 330.789077][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 330.833834][T12785] ceph: No mds server is up or the cluster is laggy [ 331.478497][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 331.608605][T12841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3261'. [ 331.630983][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.631022][ T31] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.631065][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.631088][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.661401][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.662620][ T31] usb 2-1: invalid MIDI out EP 0 [ 331.741132][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 331.978584][ T5906] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 332.012953][ T31] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 332.026708][ T31] usb 2-1: USB disconnect, device number 25 [ 332.149732][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 332.152347][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.152377][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.152416][ T5906] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 332.152521][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.166702][ T5906] usb 3-1: config 0 descriptor?? [ 332.221939][ T5927] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 332.400528][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.400554][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.400667][ T5927] usb 5-1: config 1 has no interface number 0 [ 332.400722][ T5927] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.406031][ T5927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.406114][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.406135][ T5927] usb 5-1: Product: syz [ 332.406149][ T5927] usb 5-1: Manufacturer: syz [ 332.406294][ T5927] usb 5-1: SerialNumber: syz [ 332.507606][ T5927] usb 5-1: selecting invalid altsetting 1 [ 332.711000][ T5906] input: HID 28bd:0935 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0935.002F/input/input27 [ 332.853275][ T5906] uclogic 0003:28BD:0935.002F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.2-1/input0 [ 332.881607][ T5906] usb 3-1: USB disconnect, device number 30 [ 332.913373][ T5927] usb 5-1: selecting invalid altsetting 1 [ 332.913442][ T5927] cdc_ncm 5-1:1.1: bind() failure [ 333.079864][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3274'. [ 333.130187][ T5927] usb 5-1: USB disconnect, device number 28 [ 333.620502][T12885] block nbd1: not configured, cannot reconfigure [ 333.933050][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'. [ 333.933076][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'. [ 334.018224][T12902] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 334.360657][ T37] audit: type=1326 audit(2000000217.340:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 334.378462][ T5927] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 334.400543][ T37] audit: type=1326 audit(2000000217.350:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 334.400595][ T37] audit: type=1326 audit(2000000217.390:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 334.400637][ T37] audit: type=1326 audit(2000000217.390:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 334.400677][ T37] audit: type=1326 audit(2000000217.390:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 334.422545][ T37] audit: type=1326 audit(2000000217.400:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 334.423291][ T37] audit: type=1326 audit(2000000217.410:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 334.438673][ T37] audit: type=1326 audit(2000000217.410:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12919 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 334.541348][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.541378][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.541420][ T5927] usb 5-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 334.541441][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.558447][ T5927] usb 5-1: config 0 descriptor?? [ 334.936586][ T37] audit: type=1400 audit(2000000217.920:267): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12936 comm="syz.1.3307" daddr=fe88::102 [ 335.064722][ T5927] wacom 0003:056A:0336.0030: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.4-1/input0 [ 335.231195][ T5927] usb 5-1: USB disconnect, device number 29 [ 335.396812][ T37] audit: type=1400 audit(2000000218.380:268): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12954 comm="syz.3.3315" daddr=fe80::aa dest=20002 [ 335.518460][ T1197] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 335.552598][T12961] tipc: Can't bind to reserved service type 2 [ 335.564929][T12962] tipc: Invalid UDP bearer configuration [ 335.564974][T12962] tipc: Enabling of bearer rejected, failed to enable media [ 335.669254][ T1197] usb 3-1: Using ep0 maxpacket: 32 [ 335.671744][ T1197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.671797][ T1197] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.671823][ T1197] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.671845][ T1197] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 335.671872][ T1197] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.671904][ T1197] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 335.671928][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.758898][ T1197] usb 3-1: config 0 descriptor?? [ 336.186989][ T1197] hid-thrustmaster 0003:044F:B65D.0031: global environment stack underflow [ 336.187011][ T1197] hid-thrustmaster 0003:044F:B65D.0031: item 0 4 1 11 parsing failed [ 336.187627][ T1197] hid-thrustmaster 0003:044F:B65D.0031: parse failed with error -22 [ 336.187697][ T1197] hid-thrustmaster 0003:044F:B65D.0031: probe with driver hid-thrustmaster failed with error -22 [ 336.383401][ T1197] usb 3-1: USB disconnect, device number 31 [ 337.548519][ T5927] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 337.554235][T13023] tipc: Enabled bearer , priority 17 [ 337.714747][ T5927] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 337.714777][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.714796][ T5927] usb 2-1: Product: syz [ 337.714807][ T5927] usb 2-1: Manufacturer: syz [ 337.714821][ T5927] usb 2-1: SerialNumber: syz [ 337.756708][T13027] tipc: Enabling of bearer rejected, already enabled [ 337.773823][ T5927] usb 2-1: config 0 descriptor?? [ 337.789977][ T5927] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 337.811566][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.812796][ T5927] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 337.812850][ T5927] usb 2-1: media controller created [ 337.863356][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.976205][ T5927] DVB: Unable to find symbol mt352_attach() [ 338.085390][ T5927] DVB: Unable to find symbol nxt6000_attach() [ 338.085407][ T5927] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 338.116139][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 338.118118][ T5927] dvb-usb: schedule remote query interval to 1000 msecs. [ 338.118137][ T5927] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 338.118154][ T5927] dvb-usb: bulk message failed: -22 (7/0) [ 338.118169][ T5927] dvb-usb: bulk message failed: -22 (7/0) [ 338.166694][ T5927] usb 2-1: USB disconnect, device number 26 [ 338.307203][ T5927] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 338.497882][T13057] sch_fq: defrate 4294967295 ignored. [ 338.578459][ T5906] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 338.731091][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.731142][ T5906] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 338.731165][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.758682][T13068] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3367'. [ 338.776391][ T5906] usb 4-1: config 0 descriptor?? [ 339.408524][ T5906] usb 4-1: string descriptor 0 read error: -71 [ 339.409127][ T5906] uclogic 0003:5543:0081.0032: failed retrieving string descriptor #200: -71 [ 339.409185][ T5906] uclogic 0003:5543:0081.0032: failed retrieving pen parameters: -71 [ 339.409201][ T5906] uclogic 0003:5543:0081.0032: failed probing pen v2 parameters: -71 [ 339.409254][ T5906] uclogic 0003:5543:0081.0032: failed probing parameters: -71 [ 339.409359][ T5906] uclogic 0003:5543:0081.0032: probe with driver uclogic failed with error -71 [ 339.418222][ T5906] usb 4-1: USB disconnect, device number 28 [ 339.851267][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3380'. [ 339.980217][T13102] smc: net device bond0 applied user defined pnetid S [ 340.208534][ T5926] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 340.358951][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 340.361343][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.361375][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.361415][ T5926] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 340.361437][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.367526][ T5926] usb 3-1: config 0 descriptor?? [ 340.660690][ T1197] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 340.778512][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 340.803646][ T5926] konepure 0003:1E7D:2DB4.0033: unknown main item tag 0x0 [ 340.803682][ T5926] konepure 0003:1E7D:2DB4.0033: unknown main item tag 0x0 [ 340.803708][ T5926] konepure 0003:1E7D:2DB4.0033: unknown main item tag 0x0 [ 340.803734][ T5926] konepure 0003:1E7D:2DB4.0033: unknown main item tag 0x0 [ 340.807634][ T5926] konepure 0003:1E7D:2DB4.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 340.816475][ T1197] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 340.816528][ T1197] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.816624][ T1197] usb 4-1: config 2 interface 0 has no altsetting 0 [ 340.829594][ T1197] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 340.829621][ T1197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.829641][ T1197] usb 4-1: Product: syz [ 340.829654][ T1197] usb 4-1: Manufacturer: syz [ 340.829668][ T1197] usb 4-1: SerialNumber: syz [ 340.934106][ T5906] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.934140][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.934173][ T5906] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 340.934196][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.975372][ T5906] usb 2-1: config 0 descriptor?? [ 341.029033][ T5926] usb 3-1: USB disconnect, device number 32 [ 341.075819][ T1197] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 341.102878][ T1197] usb 4-1: USB disconnect, device number 29 [ 341.403386][ T5906] nti 0003:0757:0A00.0034: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.1-1/input0 [ 341.437866][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 341.437882][ T37] audit: type=1326 audit(2000000003.610:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 341.438010][ T37] audit: type=1326 audit(2000000003.610:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 341.448608][ T37] audit: type=1326 audit(2000000003.610:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 341.448659][ T37] audit: type=1326 audit(2000000003.620:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13142 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 341.601413][ T5906] usb 2-1: USB disconnect, device number 27 [ 341.871870][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3410'. [ 341.928485][ T1197] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 341.958526][ T5928] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 342.085410][ T1197] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.085445][ T1197] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.085483][ T1197] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.085504][ T1197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.111109][ T5928] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 342.111135][ T5928] usb 5-1: config 0 has no interface number 0 [ 342.129751][T13151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 342.136384][ T1197] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.168916][ T5928] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 342.168945][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.168964][ T5928] usb 5-1: Product: syz [ 342.168977][ T5928] usb 5-1: Manufacturer: syz [ 342.168991][ T5928] usb 5-1: SerialNumber: syz [ 342.241678][ T5928] usb 5-1: config 0 descriptor?? [ 342.250106][ T5928] hub 5-1:0.217: bad descriptor, ignoring hub [ 342.250142][ T5928] hub 5-1:0.217: probe with driver hub failed with error -5 [ 342.455551][ T5928] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 342.492139][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.497388][ T5928] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 342.497445][ T5928] usb 5-1: media controller created [ 342.565471][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.728471][ T1197] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 342.798503][ T5928] DVB: Unable to find symbol dib7000p_attach() [ 342.798518][ T5928] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 342.831092][ T5899] usb 4-1: USB disconnect, device number 30 [ 342.883850][ T1197] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 342.883883][ T1197] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 342.883910][ T1197] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 342.887054][ T1197] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 342.887081][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.887101][ T1197] usb 3-1: Product: syz [ 342.887115][ T1197] usb 3-1: Manufacturer: syz [ 342.887128][ T1197] usb 3-1: SerialNumber: syz [ 342.899656][ T1197] usb 3-1: config 0 descriptor?? [ 342.900619][T13175] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 342.901119][T13175] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 342.916930][ T1197] usb 3-1: ucan: probing device on interface #0 [ 343.068547][ T5928] rc_core: IR keymap rc-dib0700-rc5 not found [ 343.068569][ T5928] Registered IR keymap rc-empty [ 343.069078][ T5928] dvb-usb: could not initialize remote control. [ 343.069089][ T5928] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 343.107146][ T5928] usb 5-1: USB disconnect, device number 30 [ 343.191541][ T5928] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 343.328275][ T1197] usb 3-1: ucan: device reported invalid device info [ 343.328451][ T1197] usb 3-1: ucan: probe failed; try to update the device firmware [ 343.356159][ T37] audit: type=1400 audit(2000000005.530:276): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13190 comm="syz.1.3425" src=1 dest=20000 netif=wpan0 [ 343.554068][ T5928] usb 3-1: USB disconnect, device number 33 [ 343.567055][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 343.711777][T13205] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3432'. [ 344.187203][ T37] audit: type=1400 audit(2000000006.360:277): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13219 comm="syz.4.3439" daddr=fe80::bb dest=20002 [ 344.854851][T13258] IPVS: ip_vs_edit_dest(): server weight less than zero [ 344.878447][ T5906] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 345.031334][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.031366][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.031406][ T5906] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 345.031427][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.078166][ T5906] usb 3-1: config 0 descriptor?? [ 345.518553][ T5906] stadia 0003:18D1:9400.0035: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 345.518585][ T5906] stadia 0003:18D1:9400.0035: no inputs found [ 345.518599][ T5906] stadia 0003:18D1:9400.0035: force feedback init failed [ 345.701088][ T5899] usb 3-1: USB disconnect, device number 34 [ 345.753361][T13277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3466'. [ 345.952572][T13287] Bluetooth: MGMT ver 1.23 [ 346.675920][T13316] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3485'. [ 346.679993][T13316] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 346.751463][T13316] 0ªî{X¹¦: entered allmulticast mode [ 346.752012][T13316] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 347.155919][T13330] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 347.155943][T13330] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3494'. [ 347.185606][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3493'. [ 347.308551][ T5906] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 347.468687][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 347.471390][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.471439][ T5906] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 347.471463][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.485022][ T5906] usb 4-1: config 0 descriptor?? [ 347.605255][T13346] tipc: Enabled bearer , priority 17 [ 347.918242][ T5906] kye 0003:0458:5013.0036: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 347.946740][ T5906] kye 0003:0458:5013.0036: unbalanced collection at end of report description [ 347.947602][ T5906] kye 0003:0458:5013.0036: parse failed [ 347.947675][ T5906] kye 0003:0458:5013.0036: probe with driver kye failed with error -22 [ 348.075375][ T37] audit: type=1326 audit(2000000010.250:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13359 comm="syz.2.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 348.075705][ T37] audit: type=1326 audit(2000000010.250:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13359 comm="syz.2.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 348.076271][ T37] audit: type=1326 audit(2000000010.250:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13359 comm="syz.2.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 348.076673][ T37] audit: type=1326 audit(2000000010.250:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13359 comm="syz.2.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 348.076907][ T37] audit: type=1326 audit(2000000010.250:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13359 comm="syz.2.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 348.153140][ T5906] usb 4-1: USB disconnect, device number 31 [ 348.318604][ T5928] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 348.490914][ T5928] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 348.490946][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.490966][ T5928] usb 2-1: Product: syz [ 348.490981][ T5928] usb 2-1: Manufacturer: syz [ 348.490995][ T5928] usb 2-1: SerialNumber: syz [ 348.510242][ T5928] usb 2-1: config 0 descriptor?? [ 348.521845][ T5928] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 348.608796][ T5906] tipc: Node number set to 24321 [ 348.613873][ T5906] IPVS: starting estimator thread 0... [ 348.617610][T13372] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 348.719025][T13373] IPVS: using max 7 ests per chain, 16800 per kthread [ 348.960331][ T5928] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 349.163877][ T5906] usb 2-1: USB disconnect, device number 28 [ 349.433190][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3528'. [ 349.459469][T13405] vlan3: entered allmulticast mode [ 349.459490][T13405] team0: entered allmulticast mode [ 349.459502][T13405] team_slave_0: entered allmulticast mode [ 349.459524][T13405] team_slave_1: entered allmulticast mode [ 349.573969][T13411] netlink: 'syz.3.3532': attribute type 2 has an invalid length. [ 349.921146][ T37] audit: type=1400 audit(2000000012.090:283): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13424 comm="syz.3.3538" netif=wpan0 [ 350.008607][ T5899] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 350.172031][ T5899] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.172069][ T5899] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.172108][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.172131][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.242210][T13419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 350.258984][ T5899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.478436][ T1197] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 350.631505][ T1197] usb 2-1: config 9 has an invalid interface number: 88 but max is 1 [ 350.631534][ T1197] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 350.631553][ T1197] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 350.631628][ T1197] usb 2-1: config 9 has no interface number 1 [ 350.631689][ T1197] usb 2-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 350.631712][ T1197] usb 2-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 350.631794][ T1197] usb 2-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 350.631822][ T1197] usb 2-1: config 9 interface 88 has no altsetting 0 [ 350.638015][ T1197] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 350.638105][ T1197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.638131][ T1197] usb 2-1: Product: syz [ 350.638145][ T1197] usb 2-1: Manufacturer: syz [ 350.638159][ T1197] usb 2-1: SerialNumber: syz [ 350.873290][ T9] usb 5-1: USB disconnect, device number 31 [ 350.981614][ T1197] qmi_wwan 2-1:9.88: skipping garbage [ 350.981889][ T1197] qmi_wwan 2-1:9.88: probe with driver qmi_wwan failed with error -22 [ 351.090654][ T1197] usb 2-1: Could not set interface, error -71 [ 351.118729][ T1197] usb 2-1: USB disconnect, device number 29 [ 351.212430][T13449] bridge0: port 3(team0) entered disabled state [ 351.326631][T13453] xt_l2tp: missing protocol rule (udp|l2tpip) [ 351.371017][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3551'. [ 351.372275][T13455] 8021q: VLANs not supported on gre0 [ 351.532178][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3553'. [ 353.468972][T13544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3595'. [ 353.509176][ T5928] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 353.677449][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.677478][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.677520][ T5928] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 353.677542][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.682948][ T5928] usb 2-1: config 0 descriptor?? [ 354.108679][ T5928] koneplus 0003:1E7D:2D51.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 354.298575][ T9] usb 2-1: USB disconnect, device number 30 [ 354.648012][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648038][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648053][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648067][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648081][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648095][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648107][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648121][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648134][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.648147][T13580] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 354.912622][T13586] sp0: Synchronizing with TNC [ 354.923531][T13586] sp0: Found TNC [ 355.006073][T13593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3619'. [ 355.061581][T13594] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3617'. [ 355.062852][T13590] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3617'. [ 355.467373][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 355.844467][T13629] kernel profiling enabled (shift: 34) [ 355.844497][T13629] profiling shift: 34 too large [ 356.148458][ T37] audit: type=1400 audit(2000000018.320:284): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13639 comm="syz.1.3650" daddr=ff02::1 [ 356.547186][T13650] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 356.547215][T13650] CIFS mount error: No usable UNC path provided in device string! [ 356.547215][T13650] [ 356.547476][T13650] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 356.921684][T13668] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 357.211842][T13680] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3660'. [ 357.565051][T13699] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 357.614792][ T5928] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 357.764539][ T5928] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 357.764567][ T5928] usb 4-1: config 1 has no interface number 0 [ 357.764613][ T5928] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 357.764637][ T5928] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 357.764661][ T5928] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.778639][ T5928] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 357.778670][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.778690][ T5928] usb 4-1: Product: syz [ 357.778704][ T5928] usb 4-1: Manufacturer: syz [ 357.778718][ T5928] usb 4-1: SerialNumber: syz [ 357.854190][T13689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 358.079996][T13689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 358.208453][ T1197] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 358.342079][ T5928] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 358.358492][ T1197] usb 2-1: Using ep0 maxpacket: 16 [ 358.361307][ T1197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.361335][ T1197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.361357][ T1197] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.361398][ T1197] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.361420][ T1197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.371654][ T1197] usb 2-1: config 0 descriptor?? [ 358.490705][ T5928] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 358.490733][ T5928] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 358.492790][ T5928] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 358.492812][ T5928] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 358.534032][ T5928] usb 4-1: USB disconnect, device number 32 [ 358.545270][ T5928] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 358.719918][ T5928] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 358.817976][ T1197] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 358.818030][ T1197] microsoft 0003:045E:07DA.0038: unbalanced collection at end of report description [ 358.843368][ T1197] microsoft 0003:045E:07DA.0038: parse failed [ 358.843476][ T1197] microsoft 0003:045E:07DA.0038: probe with driver microsoft failed with error -22 [ 359.049122][ T1197] usb 2-1: USB disconnect, device number 31 [ 362.486491][ T37] audit: type=1800 audit(2000000024.660:285): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3761" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 362.588495][ T5928] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 362.667421][T13894] CUSE: unknown device info "" [ 362.667437][T13894] CUSE: zero length info key specified [ 362.751501][ T5928] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 362.751531][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.757431][ T5928] usb 2-1: config 0 descriptor?? [ 362.868621][ T1197] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 362.937875][T13900] validate_nla: 43 callbacks suppressed [ 362.937898][T13900] netlink: 'syz.0.3767': attribute type 3 has an invalid length. [ 363.037518][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.037552][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.041733][ T1197] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 363.041761][ T1197] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 363.041780][ T1197] usb 4-1: Manufacturer: syz [ 363.059635][ T1197] usb 4-1: config 0 descriptor?? [ 363.172994][ T5928] hackrf 2-1:0.0: Board ID: 00 [ 363.173015][ T5928] hackrf 2-1:0.0: Firmware version: [ 363.177091][ T5928] hackrf 2-1:0.0: Registered as swradio24 [ 363.177116][ T5928] videodev: could not get a free minor [ 363.177127][ T5928] hackrf 2-1:0.0: Failed to register as video device (-23) [ 363.209533][ T5928] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 363.385533][ T9] usb 2-1: USB disconnect, device number 32 [ 363.500042][ T1197] cougar 0003:060B:700A.0039: unknown main item tag 0x0 [ 363.500080][ T1197] cougar 0003:060B:700A.0039: unknown main item tag 0x0 [ 363.500107][ T1197] cougar 0003:060B:700A.0039: unknown main item tag 0x0 [ 363.500133][ T1197] cougar 0003:060B:700A.0039: unknown main item tag 0x0 [ 363.500158][ T1197] cougar 0003:060B:700A.0039: unknown main item tag 0x0 [ 363.509738][ T1197] cougar 0003:060B:700A.0039: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 363.683709][ T9] usb 4-1: USB disconnect, device number 33 [ 364.095004][T13941] trusted_key: encrypted_key: key user:syz not found [ 364.823902][T13972] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3800'. [ 365.328428][ T5928] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 365.491392][ T5928] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 365.491420][ T5928] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 365.491438][ T5928] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 365.491457][ T5928] usb 4-1: config 220 has no interface number 2 [ 365.491531][ T5928] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 365.491557][ T5928] usb 4-1: config 220 interface 0 has no altsetting 0 [ 365.491574][ T5928] usb 4-1: config 220 interface 76 has no altsetting 0 [ 365.491590][ T5928] usb 4-1: config 220 interface 1 has no altsetting 0 [ 365.496177][ T5928] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 365.496207][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.496228][ T5928] usb 4-1: Product: syz [ 365.496241][ T5928] usb 4-1: Manufacturer: syz [ 365.496256][ T5928] usb 4-1: SerialNumber: syz [ 365.824113][ T5928] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 365.824147][ T5928] usb 4-1: No valid video chain found. [ 365.824207][ T5928] usb 4-1: selecting invalid altsetting 0 [ 365.855248][ T5928] usb 4-1: selecting invalid altsetting 0 [ 365.855285][ T5928] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 365.880185][ T5928] usb 4-1: USB disconnect, device number 34 [ 365.971139][T14014] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 365.971139][T14014] program syz.2.3820 not setting count and/or reply_len properly [ 366.082106][ T37] audit: type=1326 audit(2000000028.260:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14017 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 366.082156][ T37] audit: type=1326 audit(2000000028.260:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14017 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 366.101891][ T37] audit: type=1326 audit(2000000028.280:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14017 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 366.101939][ T37] audit: type=1326 audit(2000000028.280:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14017 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 366.101978][ T37] audit: type=1326 audit(2000000028.280:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14017 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 366.108768][ T37] audit: type=1326 audit(2000000028.280:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14017 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 366.110234][ T37] audit: type=1326 audit(2000000028.290:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14017 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 366.110281][ T37] audit: type=1326 audit(2000000028.290:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14017 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23ef4ec29 code=0x7ffc0000 [ 366.362496][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3825'. [ 366.383118][T14027] vlan2: entered promiscuous mode [ 366.383140][T14027] syz_tun: entered promiscuous mode [ 366.607012][T14033] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3829'. [ 366.607038][T14033] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.310046][ T37] audit: type=1326 audit(2000000029.490:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14052 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 367.503414][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 367.503432][ T37] audit: type=1326 audit(2000000029.680:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14052 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feae813ae09 code=0x7ffc0000 [ 367.508754][ T37] audit: type=1326 audit(2000000029.680:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14052 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 367.586913][ T1197] kernel write not supported for file /input/mice (pid: 1197 comm: kworker/0:2) [ 368.094212][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3858'. [ 368.268446][ T1197] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 368.418526][ T1197] usb 5-1: Using ep0 maxpacket: 32 [ 368.420921][ T1197] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 368.420951][ T1197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.430904][ T1197] usb 5-1: config 0 descriptor?? [ 368.442875][ T1197] gspca_main: sq930x-2.14.0 probing 041e:403c [ 368.592727][T14107] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 368.951083][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 368.951669][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 369.098507][ T1197] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 369.098621][ T1197] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 369.111628][ T1197] usb 5-1: USB disconnect, device number 32 [ 369.768912][ T5928] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 369.818697][ T5927] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 369.925431][ T5928] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 369.925462][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.925482][ T5928] usb 3-1: Product: syz [ 369.925496][ T5928] usb 3-1: Manufacturer: syz [ 369.925510][ T5928] usb 3-1: SerialNumber: syz [ 369.982927][ T5928] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 370.011587][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.011614][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 370.011663][ T5927] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.014727][ T5927] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.014754][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.014774][ T5927] usb 2-1: Product: syz [ 370.014788][ T5927] usb 2-1: Manufacturer: syz [ 370.014802][ T5927] usb 2-1: SerialNumber: syz [ 370.120876][ T5927] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 370.120923][ T5927] cdc_ncm 2-1:1.0: bind() failure [ 370.132622][T14164] tipc: Enabling of bearer rejected, already enabled [ 370.178860][ T31] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 370.321402][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 370.321424][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 370.338970][T14174] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.339028][T14174] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 370.339114][T14174] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 370.339239][T14174] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 370.339287][T14174] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.339333][T14174] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 370.339461][T14174] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 370.339506][T14174] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 370.339553][T14174] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 370.339639][T14174] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 370.339686][T14174] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 370.339732][T14174] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 370.384272][ T9] usb 2-1: USB disconnect, device number 33 [ 370.848525][ T9] usb 3-1: USB disconnect, device number 35 [ 371.140580][ T37] audit: type=1400 audit(2000000033.320:299): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14195 comm="syz.0.3907" daddr=fe80::bb dest=20004 [ 371.188389][ T5927] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 371.299045][ T31] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 371.299786][ T31] ath9k_htc: Failed to initialize the device [ 371.303911][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 371.338443][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 371.340969][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.341002][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.341025][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 371.341068][ T5927] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 371.341091][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.359480][ T5927] usb 5-1: config 0 descriptor?? [ 371.637548][T14209] program syz.1.3914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.801353][T14217] tipc: Enabled bearer , priority 0 [ 371.838910][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x4 [ 371.838949][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x6 [ 371.838976][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x0 [ 371.839002][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x0 [ 371.839028][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x0 [ 371.839053][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x0 [ 371.839078][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x0 [ 371.839101][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x0 [ 371.839127][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x0 [ 371.839152][ T5927] elecom 0003:056E:00FE.003A: unknown main item tag 0x0 [ 371.860945][ T5927] elecom 0003:056E:00FE.003A: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 372.075937][ T31] usb 5-1: USB disconnect, device number 33 [ 372.438460][ T5927] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 372.594229][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 372.594279][ T5927] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 372.594301][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.624374][ T5927] usb 3-1: config 0 descriptor?? [ 372.638013][T14229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 372.735065][ T37] audit: type=1400 audit(2000000034.910:300): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14249 comm="syz.1.3932" daddr=::ffff:172.20.20.0 [ 372.881511][T14254] xt_l2tp: invalid flags combination: 8 [ 373.140809][ T5927] belkin 0003:050D:3201.003B: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 373.345538][ T1197] usb 3-1: USB disconnect, device number 36 [ 373.828467][ T1197] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 373.978478][ T1197] usb 2-1: Using ep0 maxpacket: 8 [ 373.983438][ T1197] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 373.983494][ T1197] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 373.983518][ T1197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.026019][ T1197] usb 2-1: config 0 descriptor?? [ 374.188693][ T37] audit: type=1400 audit(2000000036.360:301): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14291 comm="syz.3.3950" [ 374.429218][T14299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3954'. [ 374.429275][T14299] gretap0: entered promiscuous mode [ 374.474054][ T1197] corsair 0003:1B1C:1B09.003C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.1-1/input0 [ 374.650154][ T1197] usb 2-1: USB disconnect, device number 34 [ 375.037300][T14323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3965'. [ 375.195931][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3969'. [ 375.438437][ T5927] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 375.598481][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 375.601079][ T5927] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.601112][ T5927] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.601236][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.601279][ T5927] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 375.601302][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.607439][ T5927] usb 4-1: config 0 descriptor?? [ 375.768529][ T1197] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 375.882401][T14346] syz_tun: tun_net_xmit 14 [ 375.924285][ T1197] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 375.924315][ T1197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.924333][ T1197] usb 2-1: Product: syz [ 375.924347][ T1197] usb 2-1: Manufacturer: syz [ 375.924359][ T1197] usb 2-1: SerialNumber: syz [ 375.962240][ T1197] usb 2-1: config 0 descriptor?? [ 376.084263][ T5927] a4tech 0003:09DA:000A.003D: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 376.247384][ T5927] usb 4-1: USB disconnect, device number 35 [ 376.251570][ T5167] usb 2-1: USB disconnect, device number 35 [ 376.382245][T14355] netlink: 'syz.0.3981': attribute type 29 has an invalid length. [ 376.387875][T14355] netlink: 'syz.0.3981': attribute type 29 has an invalid length. [ 376.633889][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3984'. [ 376.686892][T14357] "syz.4.3982" (14357) uses obsolete ecb(arc4) skcipher [ 377.653785][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'. [ 378.703776][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4019'. [ 378.735704][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.819859][T14439] ip6gretap0: entered promiscuous mode [ 378.861297][T14439] ip6gretap0: left promiscuous mode [ 378.921441][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'. [ 379.166486][ T37] audit: type=1400 audit(2000000041.340:302): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14456 comm="syz.3.4028" daddr=fe80::30 dest=20009 [ 379.166569][T14457] sock: sock_timestamping_bind_phc: sock not bind to device [ 379.429735][ T37] audit: type=1326 audit(2000000041.610:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14466 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 379.429785][ T37] audit: type=1326 audit(2000000041.610:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14466 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 379.492667][ T37] audit: type=1326 audit(2000000041.670:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14466 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 379.492720][ T37] audit: type=1326 audit(2000000041.670:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14466 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 379.492762][ T37] audit: type=1326 audit(2000000041.670:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14466 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 379.492803][ T37] audit: type=1326 audit(2000000041.670:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14466 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 379.492842][ T37] audit: type=1326 audit(2000000041.670:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14466 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 379.492882][ T37] audit: type=1326 audit(2000000041.670:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14466 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b27dec29 code=0x7ffc0000 [ 380.849620][T14514] syz.3.4055 (14514): /proc/14513/oom_adj is deprecated, please use /proc/14513/oom_score_adj instead. [ 383.130323][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 383.146519][T14604] use of bytesused == 0 is deprecated and will be removed in the future, [ 383.146534][T14604] use the actual size instead. [ 384.378603][ T31] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 384.425131][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4120'. [ 384.457355][ T37] audit: type=1400 audit(2000000046.630:311): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14654 comm="syz.0.4121" daddr=fe80::1a dest=20001 [ 384.540756][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.540789][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 384.540815][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 384.540858][ T31] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 384.540879][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.546277][ T31] usb 5-1: config 0 descriptor?? [ 384.547343][T14641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 384.654780][ T37] audit: type=1400 audit(2000000046.830:312): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14659 comm="syz.1.4125" src=1 dest=20000 netif=wpan0 [ 384.902780][T14671] [U]  [ 384.902797][T14671] [U] K{‘ [ 384.906239][T14671] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 384.906271][T14671] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 384.906292][T14671] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 384.906944][T14671] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 384.907000][T14671] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 384.907024][T14671] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 384.907265][T14671] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 384.907291][T14671] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÏaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 384.907933][T14671] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 384.907950][T14671] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 385.061207][ T31] aureal 0003:0755:2626.003E: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 385.062309][ T31] hid_parser_main: 62 callbacks suppressed [ 385.062327][ T31] aureal 0003:0755:2626.003E: unknown main item tag 0x6 [ 385.062358][ T31] aureal 0003:0755:2626.003E: report_id 29495 is invalid [ 385.062372][ T31] aureal 0003:0755:2626.003E: item 0 2 1 8 parsing failed [ 385.063231][ T31] aureal 0003:0755:2626.003E: probe with driver aureal failed with error -22 [ 385.066202][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4131'. [ 385.208446][T14671] [U] 22½“Æ©Ðû©x?0;3u± [ 385.208474][T14671] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 385.208504][T14671] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 385.208517][T14671] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 385.208530][T14671] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 385.208544][T14671] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 385.208556][T14671] [U] ¹ ec [ 385.208568][T14671] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 385.212572][T14669] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 385.318079][ T9] usb 5-1: USB disconnect, device number 34 [ 385.424527][ T37] audit: type=1400 audit(2000000047.600:313): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14683 comm="syz.0.4136" daddr=ff01::1 [ 385.441368][T14686] random: crng reseeded on system resumption [ 386.318458][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 386.471324][ T9] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 386.471351][ T9] usb 5-1: config 0 has no interface number 0 [ 386.475556][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 386.475586][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.475604][ T9] usb 5-1: Product: syz [ 386.475617][ T9] usb 5-1: Manufacturer: syz [ 386.475631][ T9] usb 5-1: SerialNumber: syz [ 386.525919][ T9] usb 5-1: config 0 descriptor?? [ 386.958447][ T31] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 387.121072][ T31] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 387.121099][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 387.121148][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.124297][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.124323][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.124341][ T31] usb 3-1: Product: syz [ 387.124355][ T31] usb 3-1: Manufacturer: syz [ 387.124368][ T31] usb 3-1: SerialNumber: syz [ 387.156727][ T31] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 387.156773][ T31] cdc_ncm 3-1:1.0: bind() failure [ 387.204246][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 387.204270][ T9] usb 5-1: Please update to version 0.2 or newer [ 387.292694][ T9] usb 5-1: USB disconnect, device number 35 [ 388.374455][T14753] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 389.788723][ T1197] usb 3-1: USB disconnect, device number 37 [ 391.154450][T14816] hugetlbfs: Bad value '%' for mount option 'size' [ 391.154450][T14816] [ 391.646658][T14831] netlink: 'syz.4.4203': attribute type 1 has an invalid length. [ 391.668574][ T5927] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 391.734379][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4204'. [ 391.734410][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4204'. [ 391.830998][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.831049][ T5927] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 391.831072][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.848063][ T5927] usb 3-1: config 0 descriptor?? [ 392.189707][ T37] audit: type=1326 audit(2000000054.370:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14822 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae819ec29 code=0x7fc00000 [ 392.190173][ T37] audit: type=1326 audit(2000000054.370:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14822 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feae819ec29 code=0x7fc00000 [ 392.329010][ T5927] uclogic 0003:5543:0522.003F: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 392.539109][ T31] usb 3-1: USB disconnect, device number 38 [ 392.697634][ T37] audit: type=1400 audit(2000000054.870:316): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14853 comm="syz.3.4214" daddr=::ffff:172.20.20.187 dest=20003 [ 394.395433][T14914] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4242'. [ 394.831158][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4248'. [ 394.908122][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4249'. [ 395.438483][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 395.590605][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 395.590635][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 395.590662][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 395.590683][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 395.590720][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 395.590743][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.595992][ T31] usb 3-1: config 0 descriptor?? [ 395.824038][T14941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.824499][T14941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.849653][ T31] hdpvr 3-1:0.0: firmware version 0xd dated [ 396.038065][ T31] hdpvr 3-1:0.0: device init failed [ 396.038146][ T31] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 396.080888][ T31] usb 3-1: USB disconnect, device number 39 [ 396.488720][ T31] IPVS: starting estimator thread 0... [ 396.578501][T14977] IPVS: using max 7 ests per chain, 16800 per kthread [ 396.713786][ T37] audit: type=1326 audit(2000000058.890:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 396.714038][ T37] audit: type=1326 audit(2000000058.890:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 396.714495][ T37] audit: type=1326 audit(2000000058.890:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 396.714954][ T37] audit: type=1326 audit(2000000058.890:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 396.715207][ T37] audit: type=1326 audit(2000000058.890:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 396.716097][ T37] audit: type=1326 audit(2000000058.890:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 396.716418][ T37] audit: type=1326 audit(2000000058.890:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14984 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae819ec29 code=0x7ffc0000 [ 399.318212][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 399.318229][ T37] audit: type=1400 audit(2000000061.490:325): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15066 comm="syz.0.4314" daddr=fe80::aa dest=19997 [ 399.546574][T15075] program syz.0.4317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.594678][T15076] program syz.0.4317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.595801][T15076] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 400.343079][T15098] /dev/nullb0: Can't open blockdev [ 400.392126][ T1210] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.393973][ T1210] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.418661][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.561549][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.008679][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.159000][T15121] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 401.591467][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.604789][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.608110][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.632292][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.633130][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.868479][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 403.022366][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 403.031218][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 403.052253][ T31] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 403.052279][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.052296][ T31] usb 4-1: Product: syz [ 403.052308][ T31] usb 4-1: Manufacturer: syz [ 403.052321][ T31] usb 4-1: SerialNumber: syz [ 403.092195][ T31] usb 4-1: config 0 descriptor?? [ 403.278184][ T3612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.494895][T15172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4363'. [ 403.520340][ T31] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 403.520384][ T31] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 403.688499][ T5847] Bluetooth: hci5: command tx timeout [ 403.742229][ T1197] usb 4-1: USB disconnect, device number 36 [ 403.806222][ T3612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.856363][T15187] gretap0: entered promiscuous mode [ 403.968593][T15133] chnl_net:caif_netlink_parms(): no params data found [ 404.197161][ T3612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.288481][ T1197] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 404.408636][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.438453][ T1197] usb 3-1: Using ep0 maxpacket: 8 [ 404.442684][ T3612] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.445546][ T1197] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 404.445577][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.445596][ T1197] usb 3-1: Product: syz [ 404.445610][ T1197] usb 3-1: Manufacturer: syz [ 404.445624][ T1197] usb 3-1: SerialNumber: syz [ 404.471340][ T1197] usb 3-1: config 0 descriptor?? [ 404.478938][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4379'. [ 404.495365][ T1197] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 404.701704][ T5927] usb 3-1: USB disconnect, device number 40 [ 405.149698][T15133] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.149907][T15133] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.150132][T15133] bridge_slave_0: entered allmulticast mode [ 405.152921][T15133] bridge_slave_0: entered promiscuous mode [ 405.312631][ T37] audit: type=1400 audit(2000000067.490:326): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15241 comm="syz.0.4394" daddr=::ac14:140c [ 405.342152][T15133] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.342292][T15133] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.342523][T15133] bridge_slave_1: entered allmulticast mode [ 405.353232][T15133] bridge_slave_1: entered promiscuous mode [ 405.368544][T15240] lo speed is unknown, defaulting to 1000 [ 405.439737][T15240] lo speed is unknown, defaulting to 1000 [ 405.578622][T15240] lo speed is unknown, defaulting to 1000 [ 405.651023][T15240] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 405.768462][ T5847] Bluetooth: hci5: command tx timeout [ 405.811463][T15133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.814604][T15240] lo speed is unknown, defaulting to 1000 [ 405.817506][T15240] lo speed is unknown, defaulting to 1000 [ 405.843007][T15133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.898982][T15260] openvswitch: netlink: IP tunnel TTL not specified. [ 405.908138][T15240] lo speed is unknown, defaulting to 1000 [ 406.038057][T15257] tipc: Enabled bearer , priority 0 [ 406.038209][T15240] lo speed is unknown, defaulting to 1000 [ 406.081052][T15263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4402'. [ 406.182478][T15240] lo speed is unknown, defaulting to 1000 [ 406.240035][ T3612] bridge_slave_1: left allmulticast mode [ 406.240612][ T3612] bridge_slave_1: left promiscuous mode [ 406.243964][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.394428][ T3612] bridge_slave_0: left allmulticast mode [ 406.394464][ T3612] bridge_slave_0: left promiscuous mode [ 406.394742][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.220331][ T31] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 407.382010][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.382045][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.382067][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 407.382115][ T31] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 407.382138][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.467952][ T31] usb 3-1: config 0 descriptor?? [ 407.848681][ T5847] Bluetooth: hci5: command tx timeout [ 407.912786][ T31] viewsonic 0003:2133:0018.0040: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.2-1/input0 [ 408.119598][ T9] usb 3-1: USB disconnect, device number 41 [ 409.168091][ T3612] smc: removing net device bond0 with user defined pnetid S [ 409.219279][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.281313][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.331711][ T3612] bond0 (unregistering): Released all slaves [ 409.380395][T15133] team0: Port device team_slave_0 added [ 409.382560][T15240] lo speed is unknown, defaulting to 1000 [ 409.415604][T15307] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 409.442491][T15133] team0: Port device team_slave_1 added [ 409.669486][ T3612] tipc: Disabling bearer [ 409.739012][ T3612] tipc: Disabling bearer [ 409.841026][ T3612] tipc: Left network mode [ 409.928702][ T5847] Bluetooth: hci5: command tx timeout [ 410.164098][T15326] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 410.165191][T15133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.165204][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.165228][T15133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.238511][T15133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.238658][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.238680][T15133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.636548][T15340] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4438'. [ 410.956897][T15351] netlink: 'syz.0.4443': attribute type 12 has an invalid length. [ 410.956918][T15351] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4443'. [ 411.257096][T15133] hsr_slave_0: entered promiscuous mode [ 411.270397][T15133] hsr_slave_1: entered promiscuous mode [ 411.271449][T15133] debugfs: 'hsr0' already exists in 'hsr' [ 411.271475][T15133] Cannot create hsr debugfs directory [ 411.787672][T15369] syz_tun: tun_net_xmit 86 [ 412.088659][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 412.246780][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.246826][ T9] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 412.246849][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.264288][T15383] vlan2: entered allmulticast mode [ 412.292222][ T9] usb 3-1: config 0 descriptor?? [ 412.661585][ T3612] hsr_slave_0: left promiscuous mode [ 412.708604][ T3612] hsr_slave_1: left promiscuous mode [ 412.718827][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.718941][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.788761][ T9] itetech 0003:258A:6A88.0041: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 412.802600][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.802630][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.818834][ C1] syz_tun: tun_net_xmit 86 [ 412.937637][ T5928] usb 3-1: USB disconnect, device number 42 [ 413.033374][ T3612] veth1_macvtap: left promiscuous mode [ 413.033740][ T3612] veth0_macvtap: left promiscuous mode [ 413.034074][ T3612] veth1_vlan: left promiscuous mode [ 413.288586][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 413.848719][ C1] syz_tun: tun_net_xmit 86 [ 414.078504][ T1197] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 414.118741][T15427] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 414.118797][T15427] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 414.118846][T15427] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 414.118894][T15427] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 414.118941][T15427] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 414.118993][T15427] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 414.119041][T15427] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 414.119090][T15427] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 414.119137][T15427] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 414.119186][T15427] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 414.119234][T15427] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 414.119283][T15427] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 414.119327][T15427] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 414.119379][T15427] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 414.119467][T15427] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 414.119513][T15427] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 414.119562][T15427] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 414.119614][T15427] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 414.119742][T15427] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 414.236806][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.236856][ T1197] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 414.236878][ T1197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.244197][ T1197] usb 4-1: config 0 descriptor?? [ 414.628656][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 414.701989][ T1197] steelseries 0003:1038:12B6.0042: unknown main item tag 0x2 [ 414.702026][ T1197] steelseries 0003:1038:12B6.0042: item fetching failed at offset 6/7 [ 414.702973][ T1197] steelseries 0003:1038:12B6.0042: probe with driver steelseries failed with error -22 [ 414.770091][ T3612] team0 (unregistering): Port device vlan0 removed [ 414.789455][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 414.826284][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 414.826309][ T31] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 414.826319][ T31] usb 5-1: Product: syz [ 414.826327][ T31] usb 5-1: Manufacturer: syz [ 414.826334][ T31] usb 5-1: SerialNumber: syz [ 414.874470][ T31] usb 5-1: config 0 descriptor?? [ 414.884534][ T31] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 414.930606][ T1197] usb 4-1: USB disconnect, device number 37 [ 415.502015][ T31] gspca_zc3xx: reg_w_i err -71 [ 415.502108][ T31] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 415.530764][ T31] usb 5-1: USB disconnect, device number 36 [ 416.522802][ T3612] team0 (unregistering): Port device team_slave_1 removed [ 416.759501][ T3612] team0 (unregistering): Port device team_slave_0 removed [ 419.089584][T15409] netlink: 'syz.0.4470': attribute type 2 has an invalid length. [ 419.640624][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4494'. [ 419.890606][T15133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 419.924007][T15133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 419.987438][T15133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.055061][T15133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 420.547407][ T3612] IPVS: stop unused estimator thread 0... [ 420.652504][T15133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.666973][ T37] audit: type=1326 audit(2000000082.840:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 420.678416][ T37] audit: type=1326 audit(2000000082.840:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 420.684305][ T37] audit: type=1326 audit(2000000082.860:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 420.684353][ T37] audit: type=1326 audit(2000000082.860:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 420.687155][ T37] audit: type=1326 audit(2000000082.860:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 420.703466][ T37] audit: type=1326 audit(2000000082.880:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 420.703512][ T37] audit: type=1326 audit(2000000082.880:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15489 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 420.835697][T15133] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.867233][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.867814][T15297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.871685][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4507'. [ 420.925542][T15494] erspan0: entered promiscuous mode [ 420.943831][T15494] erspan0: left promiscuous mode [ 421.114455][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.114707][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.148499][ T1197] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 421.298426][ T1197] usb 5-1: Using ep0 maxpacket: 16 [ 421.300843][ T1197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.300873][ T1197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.300896][ T1197] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.300936][ T1197] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.300958][ T1197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.310458][ T1197] usb 5-1: config 0 descriptor?? [ 421.820491][ T1197] microsoft 0003:045E:07DA.0043: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 421.820525][ T1197] microsoft 0003:045E:07DA.0043: no inputs found [ 421.820540][ T1197] microsoft 0003:045E:07DA.0043: could not initialize ff, continuing anyway [ 421.824133][T15513] xt_l2tp: missing protocol rule (udp|l2tpip) [ 421.953342][T15133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.013038][ T31] usb 5-1: USB disconnect, device number 37 [ 422.558511][ T1197] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 422.576200][T15527] loop6: detected capacity change from 0 to 524287999 [ 422.721625][ T37] audit: type=1804 audit(2000000084.890:334): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.4520" name="/newroot/905/cgroup.controllers" dev="tmpfs" ino=4586 res=1 errno=0 [ 422.721734][T15133] veth0_vlan: entered promiscuous mode [ 422.724756][ T37] audit: type=1800 audit(2000000084.900:335): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4520" name="cgroup.controllers" dev="tmpfs" ino=4586 res=0 errno=0 [ 422.748387][ T1197] usb 4-1: Using ep0 maxpacket: 16 [ 422.751954][ T1197] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.751977][ T1197] usb 4-1: config 0 has no interface number 0 [ 422.752019][ T1197] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.752043][ T1197] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.752064][ T1197] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.752104][ T1197] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 422.752126][ T1197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.770232][T15133] veth1_vlan: entered promiscuous mode [ 422.859031][ T1197] usb 4-1: config 0 descriptor?? [ 422.890850][T15133] veth0_macvtap: entered promiscuous mode [ 422.936160][T15133] veth1_macvtap: entered promiscuous mode [ 423.002610][T15133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.037202][T15133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.099013][ T1408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.099222][ T1408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.099687][ T1408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.099717][ T1408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.316037][ T1197] holtek_mouse 0003:04D9:A072.0044: item fetching failed at offset 3/4 [ 423.316702][ T1197] holtek_mouse 0003:04D9:A072.0044: hid parse failed: -22 [ 423.316768][ T1197] holtek_mouse 0003:04D9:A072.0044: probe with driver holtek_mouse failed with error -22 [ 423.526989][ T9] usb 4-1: USB disconnect, device number 38 [ 423.696281][ T1408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.696302][ T1408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.830576][T15296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.830596][T15296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.451160][T15572] erspan0: entered promiscuous mode [ 424.451397][T15572] macsec1: entered promiscuous mode [ 424.490597][T15572] erspan0: left promiscuous mode [ 424.508455][ T5926] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 424.658595][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 424.668091][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.668119][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.711816][ T5926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.711845][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.711865][ T5926] usb 6-1: Product: syz [ 424.711879][ T5926] usb 6-1: Manufacturer: syz [ 424.711893][ T5926] usb 6-1: SerialNumber: syz [ 424.992198][T15591] netlink: 'syz.3.4547': attribute type 1 has an invalid length. [ 425.041745][ T5926] usb 6-1: USB disconnect, device number 2 [ 425.058545][ T5928] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 425.212270][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.212301][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.212421][ T5928] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 425.212440][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.217233][ T5928] usb 5-1: config 0 descriptor?? [ 425.372356][T15601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4552'. [ 425.372437][T15601] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 425.435201][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.870898][ T5928] hid-led 0003:1D34:000A.0045: probe with driver hid-led failed with error -71 [ 425.885474][ T5928] usb 5-1: USB disconnect, device number 38 [ 427.202721][ T37] audit: type=1326 audit(2000000089.380:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15644 comm="syz.3.4573" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feae819ec29 code=0x0 [ 427.499869][T15653] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4576'. [ 427.815431][T15655] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 427.815493][T15655] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 427.815557][T15655] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 427.815665][T15655] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 427.815713][T15655] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 428.389066][T15672] autofs: Bad value for 'fd' [ 428.750285][ T1197] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 428.797632][T15685] netlink: 'syz.0.4592': attribute type 30 has an invalid length. [ 428.900868][ T1197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.900893][ T1197] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.902434][ T1197] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 428.902458][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 428.902478][ T1197] usb 3-1: SerialNumber: syz [ 429.164837][ T1197] usb 3-1: 0:2 : does not exist [ 429.164960][ T1197] usb 3-1: unit 255 not found! [ 429.229909][ T1197] usb 3-1: USB disconnect, device number 43 [ 429.729936][ T5167] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 429.893685][ T5167] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 429.893718][ T5167] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 429.893752][ T5167] usb 6-1: config 0 interface 0 has no altsetting 0 [ 429.893785][ T5167] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 429.893808][ T5167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.903165][ T5167] usb 6-1: config 0 descriptor?? [ 429.904192][T15705] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 430.163776][ T5928] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 430.364895][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.364921][ T5928] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 430.364974][ T5928] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 430.364996][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.373515][ T5167] uclogic 0003:28BD:0074.0046: interface is invalid, ignoring [ 430.375968][ T5928] usb 3-1: config 0 descriptor?? [ 430.390155][ T5928] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 430.390203][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 430.398037][ T5928] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 430.399775][ T5928] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 430.399827][ T5928] usb 3-1: media controller created [ 430.402181][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.419440][ T5928] dvb-usb: bulk message failed: -22 (6/0) [ 430.419522][ T5928] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 430.436487][ T5928] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 430.442227][ T5928] dvb-usb: schedule remote query interval to 150 msecs. [ 430.442248][ T5928] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 430.568569][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 430.580988][ T5926] usb 6-1: USB disconnect, device number 3 [ 430.603079][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 430.603128][ T5928] dvb-usb: error while querying for an remote control event. [ 430.616061][ T5928] usb 3-1: USB disconnect, device number 44 [ 430.727631][ T5928] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 431.120303][ T37] audit: type=1326 audit(2000000093.300:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15746 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 431.123551][ T37] audit: type=1326 audit(2000000093.300:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15746 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 431.130129][ T37] audit: type=1326 audit(2000000093.300:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15746 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 431.130370][ T37] audit: type=1326 audit(2000000093.310:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15746 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 431.130409][ T37] audit: type=1326 audit(2000000093.310:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15746 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 431.134118][ T37] audit: type=1326 audit(2000000093.310:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15746 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 431.134384][ T37] audit: type=1326 audit(2000000093.310:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15746 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 431.134890][ T37] audit: type=1326 audit(2000000093.310:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15746 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32dbec29 code=0x7ffc0000 [ 432.228714][T15773] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4632'. [ 432.393135][T15776] siw: device registration error -23 [ 432.859598][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4636'. [ 432.859621][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4636'. [ 433.588768][ T5927] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 433.743199][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.770980][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.818744][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.858961][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.882592][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.932955][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.984110][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.056463][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.131217][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.163549][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.653275][T15806] sp0: Synchronizing with TNC [ 437.087490][T15814] random: crng reseeded on system resumption [ 438.179287][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4655'. [ 438.658028][ T5927] usb 6-1: device descriptor read/all, error -71 [ 440.174921][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.383603][T15804] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 440.556735][T15804] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 440.556766][T15804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.556786][T15804] usb 5-1: Product: syz [ 440.556800][T15804] usb 5-1: Manufacturer: syz [ 440.556813][T15804] usb 5-1: SerialNumber: syz [ 440.680263][T15804] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 440.758675][ T5927] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 442.369241][ T5927] usb 5-1: Service connection timeout for: 257 [ 442.369263][ T5927] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 452.179629][ C0] sched: DL replenish lagged too much [ 455.390509][ T5885] usb 5-1: USB disconnect, device number 39 [ 456.408905][ T5927] ath9k_htc: Failed to initialize the device [ 456.409232][ T5885] usb 5-1: ath9k_htc: USB layer deinitialized [ 461.423019][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.466853][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.468273][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.484484][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.485258][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.026607][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 462.050746][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 462.052242][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 462.053427][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 462.082836][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 462.411136][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 462.439656][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 462.441093][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 462.447154][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 462.490612][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.662562][ T5847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 462.723499][ T5847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 462.736328][ T5847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 462.737516][ T5847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 462.738286][ T5847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 463.618466][ T5847] Bluetooth: hci1: command tx timeout [ 463.848645][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 464.179305][ T5847] Bluetooth: hci6: command tx timeout [ 464.180106][T15863] lo speed is unknown, defaulting to 1000 [ 464.368501][T15868] lo speed is unknown, defaulting to 1000 [ 464.557634][T15870] lo speed is unknown, defaulting to 1000 [ 464.571894][ T5847] Bluetooth: hci7: command tx timeout [ 464.737962][T15865] lo speed is unknown, defaulting to 1000 [ 464.808629][ T5847] Bluetooth: hci8: command tx timeout [ 465.692854][ T5847] Bluetooth: hci1: command tx timeout [ 466.248832][ T5847] Bluetooth: hci6: command tx timeout [ 466.648497][ T5847] Bluetooth: hci7: command tx timeout [ 466.888495][ T5847] Bluetooth: hci8: command tx timeout [ 467.782275][ T5847] Bluetooth: hci1: command tx timeout [ 468.335349][ T5847] Bluetooth: hci6: command tx timeout [ 468.736013][ T5847] Bluetooth: hci7: command tx timeout [ 468.971092][ T5847] Bluetooth: hci8: command tx timeout [ 469.858794][ T5847] Bluetooth: hci1: command tx timeout [ 470.408476][ T5847] Bluetooth: hci6: command tx timeout [ 470.808603][ T5847] Bluetooth: hci7: command tx timeout [ 471.048635][ T5847] Bluetooth: hci8: command tx timeout [ 488.522844][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.533731][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.535233][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.536464][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.537266][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.626508][ T5847] Bluetooth: hci0: command tx timeout [ 493.688606][ T5847] Bluetooth: hci0: command tx timeout [ 495.772011][ T5847] Bluetooth: hci0: command tx timeout [ 497.848725][ T5847] Bluetooth: hci0: command tx timeout [ 501.626814][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.373657][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.405751][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.431454][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 523.443972][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 523.444927][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 523.623949][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.673780][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.696120][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.697476][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.700905][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.851988][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.888786][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.894269][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 523.895607][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 523.896487][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.070206][ T5155] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 524.075590][ T5155] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 524.077037][ T5155] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 524.078249][ T5155] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 524.118884][ T5155] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 525.721310][ T5155] Bluetooth: hci3: command tx timeout [ 525.774870][ T5155] Bluetooth: hci4: command tx timeout [ 526.015621][ T5155] Bluetooth: hci5: command tx timeout [ 526.176641][ T5155] Bluetooth: hci9: command tx timeout [ 527.788520][ T5155] Bluetooth: hci3: command tx timeout [ 527.858430][ T5155] Bluetooth: hci4: command tx timeout [ 528.088613][ T5155] Bluetooth: hci5: command tx timeout [ 528.248592][ T5155] Bluetooth: hci9: command tx timeout [ 529.849619][ T5155] Bluetooth: hci3: command tx timeout [ 529.938700][ T5155] Bluetooth: hci4: command tx timeout [ 530.178516][ T5155] Bluetooth: hci5: command tx timeout [ 530.328651][ T5155] Bluetooth: hci9: command tx timeout [ 531.929447][ T5155] Bluetooth: hci3: command tx timeout [ 532.018715][ T5155] Bluetooth: hci4: command tx timeout [ 532.248778][ T5155] Bluetooth: hci5: command tx timeout [ 532.438540][ T5155] Bluetooth: hci9: command tx timeout [ 533.055028][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 548.388130][ T5847] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 548.416847][ T5847] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 548.432340][ T5847] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 548.433805][ T5847] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 548.434733][ T5847] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 550.496319][ T5847] Bluetooth: hci10: command tx timeout [ 552.597599][ T5847] Bluetooth: hci10: command tx timeout [ 554.649152][ T5847] Bluetooth: hci10: command tx timeout [ 556.728987][ T5847] Bluetooth: hci10: command tx timeout [ 563.083260][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.506567][ T5155] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 583.614654][T15941] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 583.617381][T15941] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 583.638725][T15941] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 583.639598][T15941] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 584.072787][T15941] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 584.106501][T15941] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 584.124521][T15941] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 584.125938][T15941] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 584.126849][T15941] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 584.316637][T15947] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 584.348781][T15947] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 584.350644][T15947] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 584.352971][T15947] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 584.354279][T15947] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 584.386450][ T5847] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 584.462060][T15947] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 584.463697][T15947] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 584.474377][T15947] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 584.489255][T15947] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 585.688590][T15947] Bluetooth: hci11: command tx timeout [ 585.689335][T15947] Bluetooth: hci1: command 0x0406 tx timeout [ 585.689366][T15947] Bluetooth: hci6: command 0x0406 tx timeout [ 585.689389][T15947] Bluetooth: hci7: command 0x0406 tx timeout [ 585.689412][T15947] Bluetooth: hci8: command 0x0406 tx timeout [ 586.248794][T15941] Bluetooth: hci12: command tx timeout [ 586.488624][T15941] Bluetooth: hci14: command tx timeout [ 586.568638][T15941] Bluetooth: hci13: command tx timeout [ 587.768750][T15941] Bluetooth: hci11: command tx timeout [ 588.338534][T15941] Bluetooth: hci12: command tx timeout [ 588.570178][T15941] Bluetooth: hci14: command tx timeout [ 588.650477][T15941] Bluetooth: hci13: command tx timeout [ 589.848655][T15941] Bluetooth: hci11: command tx timeout [ 590.408727][T15941] Bluetooth: hci12: command tx timeout [ 590.648600][T15941] Bluetooth: hci14: command tx timeout [ 590.729350][T15941] Bluetooth: hci13: command tx timeout [ 591.928672][T15941] Bluetooth: hci11: command tx timeout [ 592.489001][T15941] Bluetooth: hci12: command tx timeout [ 592.728956][T15941] Bluetooth: hci14: command tx timeout [ 592.808679][T15941] Bluetooth: hci13: command tx timeout [ 609.627110][T15947] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 609.662983][T15947] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 609.683892][T15947] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 609.694976][T15947] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 609.702608][T15947] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 616.328653][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 624.499237][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.470811][ T38] INFO: task syz.4.4672:15894 blocked for more than 144 seconds. [ 635.470845][ T38] Not tainted syzkaller #0 [ 635.470855][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.470867][ T38] task:syz.4.4672 state:D stack:28384 pid:15894 tgid:15892 ppid:5841 task_flags:0x400040 flags:0x00004004 [ 635.470931][ T38] Call Trace: [ 635.470939][ T38] [ 635.470953][ T38] __schedule+0x16f3/0x4c20 [ 635.470997][ T38] ? __lock_acquire+0xab9/0xd20 [ 635.471032][ T38] ? __pfx___schedule+0x10/0x10 [ 635.471082][ T38] rt_mutex_schedule+0x77/0xf0 [ 635.471100][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 635.471135][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 635.471161][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 635.471185][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 635.471208][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 635.471227][ T38] ? __lock_acquire+0xab9/0xd20 [ 635.471261][ T38] ? smc_setsockopt+0x181/0xab0 [ 635.471299][ T38] ? smc_setsockopt+0x181/0xab0 [ 635.471320][ T38] mutex_lock_nested+0x16a/0x1d0 [ 635.471348][ T38] smc_setsockopt+0x181/0xab0 [ 635.471378][ T38] ? __pfx_smc_setsockopt+0x10/0x10 [ 635.471405][ T38] ? __fget_files+0x2a/0x420 [ 635.471429][ T38] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 635.471447][ T38] ? __pfx_smc_setsockopt+0x10/0x10 [ 635.471472][ T38] do_sock_setsockopt+0x179/0x1b0 [ 635.471503][ T38] __x64_sys_setsockopt+0x145/0x1b0 [ 635.471526][ T38] do_syscall_64+0xfa/0x3b0 [ 635.471544][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.471567][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.471585][ T38] ? clear_bhb_loop+0x60/0xb0 [ 635.471607][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.471630][ T38] RIP: 0033:0x7f1b32dbec29 [ 635.471650][ T38] RSP: 002b:00007f1b30ffd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 635.471669][ T38] RAX: ffffffffffffffda RBX: 00007f1b33006090 RCX: 00007f1b32dbec29 [ 635.471684][ T38] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000003 [ 635.471695][ T38] RBP: 00007f1b32e41e41 R08: 0000000000000018 R09: 0000000000000000 [ 635.471708][ T38] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 635.471720][ T38] R13: 00007f1b33006128 R14: 00007f1b33006090 R15: 00007ffd48582568 [ 635.471751][ T38] [ 635.471777][ T38] [ 635.471777][ T38] Showing all locks held in the system: [ 635.471787][ T38] 8 locks held by ktimers/0/16: [ 635.471799][ T38] 2 locks held by rcuc/0/20: [ 635.471810][ T38] 1 lock held by khungtaskd/38: [ 635.471820][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 635.471872][ T38] 3 locks held by kworker/u8:4/64: [ 635.471883][ T38] #0: ffff88814ce76938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 635.471929][ T38] #1: ffffc900014ffbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 635.471975][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 635.472039][ T38] 4 locks held by kworker/u8:12/3612: [ 635.472049][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 635.472094][ T38] #1: ffffc9000dfbfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 635.472138][ T38] #2: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 635.472185][ T38] #3: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 635.472232][ T38] 2 locks held by getty/5598: [ 635.472242][ T38] #0: ffff88823bf3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 635.472290][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 635.472342][ T38] 1 lock held by syz.2.4647/15805: [ 635.472353][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 635.472402][ T38] 1 lock held by syz.5.4648/15810: [ 635.472412][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 635.472458][ T38] 5 locks held by kworker/u8:19/15837: [ 635.472470][ T38] 2 locks held by kworker/u8:29/15847: [ 635.472480][ T38] 3 locks held by kworker/u8:32/15850: [ 635.472490][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 635.472536][ T38] #1: ffffc9000ceefbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 635.472580][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 635.472620][ T38] 1 lock held by syz-executor/15863: [ 635.472631][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 635.472676][ T38] 2 locks held by syz-executor/15865: [ 635.472686][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 635.472731][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 635.472773][ T38] 1 lock held by syz-executor/15868: [ 635.472783][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.472826][ T38] 1 lock held by syz-executor/15870: [ 635.472841][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 635.472883][ T38] 2 locks held by syz.4.4672/15893: [ 635.472893][ T38] #0: ffff88803897bb40 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x181/0xab0 [ 635.472940][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x7f/0x270 [ 635.472986][ T38] 1 lock held by syz.4.4672/15894: [ 635.472996][ T38] #0: ffff88803897bb40 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x181/0xab0 [ 635.473042][ T38] 1 lock held by syz-executor/15896: [ 635.473052][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 635.473098][ T38] 1 lock held by syz-executor/15911: [ 635.473108][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473151][ T38] 1 lock held by syz-executor/15915: [ 635.473161][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473204][ T38] 1 lock held by syz-executor/15917: [ 635.473213][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473256][ T38] 1 lock held by syz-executor/15919: [ 635.473266][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473308][ T38] 2 locks held by kworker/0:4/15921: [ 635.473319][ T38] 1 lock held by syz-executor/15925: [ 635.473329][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473372][ T38] 1 lock held by syz-executor/15937: [ 635.473382][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473424][ T38] 4 locks held by kworker/u9:6/15941: [ 635.473435][ T38] #0: ffff88807ab04938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 635.473484][ T38] #1: ffffc90003fc7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 635.473529][ T38] #2: ffff88807ed100a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 635.473576][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 635.473622][ T38] 1 lock held by syz-executor/15942: [ 635.473632][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473674][ T38] 1 lock held by syz-executor/15944: [ 635.473684][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473727][ T38] 1 lock held by syz-executor/15945: [ 635.473737][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.473779][ T38] 6 locks held by kworker/u9:7/15947: [ 635.473789][ T38] #0: ffff888048602138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 635.473839][ T38] #1: ffffc90003ee7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 635.473885][ T38] #2: ffff888048ee0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 635.473928][ T38] #3: ffff888048ee00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 635.473975][ T38] #4: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 635.474021][ T38] #5: ffff88802966eb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 635.474066][ T38] 1 lock held by syz-executor/15950: [ 635.474077][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 635.474119][ T38] 1 lock held by dhcpcd/15952: [ 635.474129][ T38] #0: ffff88803d1867b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 635.474177][ T38] 1 lock held by dhcpcd/15953: [ 635.474188][ T38] #0: ffff88803d182af8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 635.474236][ T38] 1 lock held by dhcpcd/15954: [ 635.474245][ T38] #0: ffff88807bd02350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 635.474290][ T38] 1 lock held by dhcpcd/15955: [ 635.474300][ T38] #0: ffff88807bd04350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 635.474344][ T38] 1 lock held by dhcpcd/15956: [ 635.474354][ T38] #0: ffff88808afc2350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 635.474398][ T38] [ 635.474403][ T38] ============================================= [ 635.474403][ T38] [ 635.474418][ T38] NMI backtrace for cpu 1 [ 635.474461][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 635.474483][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 635.474493][ T38] Call Trace: [ 635.474500][ T38] [ 635.474508][ T38] dump_stack_lvl+0x189/0x250 [ 635.474536][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.474560][ T38] ? __pfx__printk+0x10/0x10 [ 635.474590][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 635.474615][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 635.474639][ T38] ? __pfx__printk+0x10/0x10 [ 635.474662][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 635.474685][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 635.474709][ T38] watchdog+0xf93/0xfe0 [ 635.474736][ T38] ? watchdog+0x1de/0xfe0 [ 635.474763][ T38] kthread+0x70e/0x8a0 [ 635.474790][ T38] ? __pfx_watchdog+0x10/0x10 [ 635.474810][ T38] ? __pfx_kthread+0x10/0x10 [ 635.474853][ T38] ? __pfx_kthread+0x10/0x10 [ 635.474877][ T38] ret_from_fork+0x436/0x7d0 [ 635.474901][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 635.474929][ T38] ? __switch_to_asm+0x39/0x70 [ 635.474944][ T38] ? __switch_to_asm+0x33/0x70 [ 635.474959][ T38] ? __pfx_kthread+0x10/0x10 [ 635.474984][ T38] ret_from_fork_asm+0x1a/0x30 [ 635.475016][ T38] [ 635.475023][ T38] Sending NMI from CPU 1 to CPUs 0: [ 635.475050][ C0] NMI backtrace for cpu 0 [ 635.475064][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 635.475081][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 635.475090][ C0] RIP: 0010:__lock_acquire+0x606/0xd20 [ 635.475111][ C0] Code: d3 66 81 0d 00 0f 84 1a 05 00 00 83 7c 24 0c 00 0f 84 a9 00 00 00 41 8b 46 20 66 85 c0 0f 88 8d 00 00 00 65 8b 0d 66 70 5a 10 00 00 03 00 74 38 85 c9 74 1d 48 8b 3c 24 4c 89 f6 ba 01 00 00 [ 635.475124][ C0] RSP: 0018:ffffc900001567b0 EFLAGS: 00000006 [ 635.475137][ C0] RAX: 0000000000041014 RBX: 000000000000000a RCX: 0000000000000000 [ 635.475148][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801c2a5940 [ 635.475157][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff88e012a8 [ 635.475167][ C0] R10: dffffc0000000000 R11: ffffed100c2b503d R12: 0000000000000003 [ 635.475178][ C0] R13: 0000000000000003 R14: ffff88801c2a65f0 R15: ffff88801c2a6610 [ 635.475189][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 635.475203][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.475214][ C0] CR2: 00007fec31c4df96 CR3: 0000000033df2000 CR4: 00000000003526f0 [ 635.475228][ C0] Call Trace: [ 635.475233][ C0] [ 635.475243][ C0] ? __dev_queue_xmit+0xd58/0x3b70 [ 635.475259][ C0] lock_acquire+0x120/0x360 [ 635.475275][ C0] ? __dev_queue_xmit+0xd58/0x3b70 [ 635.475292][ C0] ? __lock_acquire+0xab9/0xd20 [ 635.475311][ C0] rt_spin_lock+0x88/0x2c0 [ 635.475327][ C0] ? __dev_queue_xmit+0xd58/0x3b70 [ 635.475344][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 635.475364][ C0] __dev_queue_xmit+0xd58/0x3b70 [ 635.475379][ C0] ? rt_set_nexthop+0x570/0xa80 [ 635.475397][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 635.475415][ C0] ? synproxy_pernet+0x23/0x240 [ 635.475436][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 635.475451][ C0] ? synproxy_pernet+0x23/0x240 [ 635.475475][ C0] ? synproxy_pernet+0x23/0x240 [ 635.475494][ C0] ? __asan_memset+0x22/0x50 [ 635.475512][ C0] ? __lock_acquire+0xab9/0xd20 [ 635.475533][ C0] ? ip_output+0x2a1/0x3c0 [ 635.475549][ C0] ? ip_finish_output2+0xbae/0x11d0 [ 635.475568][ C0] ip_finish_output2+0xd5a/0x11d0 [ 635.475594][ C0] ? ip_finish_output2+0x452/0x11d0 [ 635.475613][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 635.475631][ C0] ? ip_skb_dst_mtu+0x866/0xab0 [ 635.475647][ C0] ? ip_finish_output+0x33a/0x3f0 [ 635.475663][ C0] ip_output+0x2a1/0x3c0 [ 635.475678][ C0] ? ip_output+0x60/0x3c0 [ 635.475693][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 635.475718][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 635.475737][ C0] ? nft_synproxy_eval_v6+0x1b8/0x560 [ 635.475752][ C0] ? synproxy_pernet+0x45/0x270 [ 635.475769][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 635.475787][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 635.475803][ C0] ? nf_ip_checksum+0x13c/0x510 [ 635.475820][ C0] nft_synproxy_do_eval+0x345/0x570 [ 635.475837][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 635.475853][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 635.475876][ C0] nft_do_chain+0x409/0x1920 [ 635.475896][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 635.475913][ C0] ? ktime_get+0x3e/0x1f0 [ 635.475936][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 635.475956][ C0] nft_do_chain_inet+0x25d/0x340 [ 635.475971][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 635.475986][ C0] ? __lock_acquire+0xab9/0xd20 [ 635.476007][ C0] ? NF_HOOK+0x9a/0x3a0 [ 635.476027][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 635.476042][ C0] nf_hook_slow+0xc2/0x220 [ 635.476063][ C0] NF_HOOK+0x206/0x3a0 [ 635.476081][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 635.476099][ C0] ? NF_HOOK+0x9a/0x3a0 [ 635.476115][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 635.476132][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 635.476151][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 635.476170][ C0] ? skb_dst+0x4f/0xd0 [ 635.476187][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 635.476206][ C0] NF_HOOK+0x30c/0x3a0 [ 635.476224][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 635.476241][ C0] ? NF_HOOK+0x9a/0x3a0 [ 635.476257][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 635.476274][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 635.476296][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 635.476312][ C0] __netif_receive_skb+0x143/0x380 [ 635.476334][ C0] ? rt_spin_unlock+0x65/0x80 [ 635.476352][ C0] ? process_backlog+0x27b/0x900 [ 635.476369][ C0] process_backlog+0x31e/0x900 [ 635.476391][ C0] __napi_poll+0xb6/0x540 [ 635.476409][ C0] net_rx_action+0x707/0xe00 [ 635.476426][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.476452][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 635.476483][ C0] handle_softirqs+0x22f/0x710 [ 635.476504][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 635.476525][ C0] run_ktimerd+0xcf/0x190 [ 635.476542][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 635.476560][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 635.476577][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 635.476601][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 635.476616][ C0] smpboot_thread_fn+0x53f/0xa60 [ 635.476633][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 635.476653][ C0] kthread+0x70e/0x8a0 [ 635.476672][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 635.476689][ C0] ? __pfx_kthread+0x10/0x10 [ 635.476708][ C0] ? __pfx_kthread+0x10/0x10 [ 635.476727][ C0] ret_from_fork+0x436/0x7d0 [ 635.476745][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 635.476764][ C0] ? __switch_to_asm+0x39/0x70 [ 635.476778][ C0] ? __switch_to_asm+0x33/0x70 [ 635.476791][ C0] ? __pfx_kthread+0x10/0x10 [ 635.476810][ C0] ret_from_fork_asm+0x1a/0x30 [ 635.476830][ C0] [ 635.477059][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 635.477073][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 635.477094][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 635.477105][ T38] Call Trace: [ 635.477112][ T38] [ 635.477119][ T38] dump_stack_lvl+0x99/0x250 [ 635.477143][ T38] ? __asan_memcpy+0x40/0x70 [ 635.477163][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.477187][ T38] ? __pfx__printk+0x10/0x10 [ 635.477219][ T38] vpanic+0x281/0x750 [ 635.477245][ T38] ? __pfx_vpanic+0x10/0x10 [ 635.477266][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 635.477284][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.477318][ T38] panic+0xb9/0xc0 [ 635.477340][ T38] ? __pfx_panic+0x10/0x10 [ 635.477366][ T38] ? irq_work_queue+0xc3/0x140 [ 635.477390][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 635.477415][ T38] watchdog+0xfd2/0xfe0 [ 635.477441][ T38] ? watchdog+0x1de/0xfe0 [ 635.477467][ T38] kthread+0x70e/0x8a0 [ 635.477494][ T38] ? __pfx_watchdog+0x10/0x10 [ 635.477514][ T38] ? __pfx_kthread+0x10/0x10 [ 635.477542][ T38] ? __pfx_kthread+0x10/0x10 [ 635.477566][ T38] ret_from_fork+0x436/0x7d0 [ 635.477590][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 635.477617][ T38] ? __switch_to_asm+0x39/0x70 [ 635.477632][ T38] ? __switch_to_asm+0x33/0x70 [ 635.477648][ T38] ? __pfx_kthread+0x10/0x10 [ 635.477673][ T38] ret_from_fork_asm+0x1a/0x30 [ 635.477705][ T38] [ 635.477970][ T38] Kernel Offset: disabled