last executing test programs: 2m46.743756873s ago: executing program 1 (id=11160): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16}, 0x94) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) 2m46.566497534s ago: executing program 1 (id=11165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdc03}, 0x14}, 0x1, 0x400000000000000}, 0x48090) 2m46.291471678s ago: executing program 1 (id=11171): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x2e, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000380)='GPL\x00', 0x782b, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2m44.919624749s ago: executing program 1 (id=11201): writev(0xffffffffffffffff, &(0x7f0000006280)=[{0x0}], 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x40}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2m44.715958725s ago: executing program 1 (id=11206): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) 2m44.562593368s ago: executing program 1 (id=11210): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 2m29.40363938s ago: executing program 32 (id=11210): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 4.20664807s ago: executing program 0 (id=13882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000900000006"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 4.092815945s ago: executing program 0 (id=13886): openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x8, 0x5, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfdffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3.520570215s ago: executing program 4 (id=13897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x3c, 0x13}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c004811}, 0x40000) 3.443241748s ago: executing program 0 (id=13898): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x7, &(0x7f000049efa0)={0x0, 0x33, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 3.23899125s ago: executing program 4 (id=13901): socket$inet6(0xa, 0x2, 0xaec1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1301"], 0x6) dup(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 3.215569009s ago: executing program 0 (id=13902): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x40, 0x14, 0x2, "1b7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="2d0102"], 0x0, 0x0}) 2.603854136s ago: executing program 4 (id=13913): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000440)={0xcc, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.824811795s ago: executing program 5 (id=13920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)={0x18, r1, 0x303, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008081}, 0x20008840) 1.582845729s ago: executing program 5 (id=13923): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) 1.476015162s ago: executing program 4 (id=13925): setresuid(0x0, 0xee00, 0x0) r0 = msgget$private(0x0, 0x1ba) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x6}, 0x0, 0x0, 0x4, 0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x5}) msgrcv(r0, 0x0, 0x0, 0x13116868a56b595e, 0x800) 1.272464258s ago: executing program 5 (id=13928): syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b8, 0x0, 0x0}, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) 1.074597493s ago: executing program 0 (id=13932): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 968.85646ms ago: executing program 3 (id=13935): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x2, 0xb6, 0x42, 0x6}, {0x7, 0xfa, 0x9, 0xfffa}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 742.662181ms ago: executing program 3 (id=13937): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r0 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x400, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 742.461159ms ago: executing program 0 (id=13938): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6cd00000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) 741.312935ms ago: executing program 5 (id=13939): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) read$FUSE(r2, 0x0, 0x0) inotify_rm_watch(r2, r1) 628.106568ms ago: executing program 2 (id=13940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700400000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 608.883648ms ago: executing program 3 (id=13941): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000009c0)="a7590dd7f68ba06a12d86016c992618304750d52227600303f", 0x19}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x8094) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty, 0x3ff}}}, 0x108) 577.25808ms ago: executing program 2 (id=13942): r0 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x3, 0x6) r2 = dup3(r0, r1, 0x0) setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0) 490.413432ms ago: executing program 2 (id=13943): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 489.674686ms ago: executing program 4 (id=13944): bind$packet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40010, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x4}, @in=@multicast1, 0x0, 0xfffc, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {0x0, 0x1, 0x1}, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3503, 0x1, 0x2, 0x20, 0xfffffffe, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@broadcast, 0x34ff, 0x0, 0x0, 0x5, 0x80000001, 0xfffffffc, 0xf6b}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x8, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_rs}}}}}, 0x0) 415.25533ms ago: executing program 5 (id=13945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="3c000380380003800c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 364.362944ms ago: executing program 3 (id=13946): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='f']) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 350.070166ms ago: executing program 2 (id=13947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 328.131238ms ago: executing program 4 (id=13948): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) dup2(r0, r1) 176.075646ms ago: executing program 3 (id=13949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) 175.930666ms ago: executing program 2 (id=13950): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0xffffff1b, &(0x7f0000000000)='\x00\x00') madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff1000/0xc000)=nil, 0xc000, &(0x7f0000000040)='\x00\x00\xef\xfaCvu\xb5i\x80\xab=-2\xb1\xc2\xab\\\xd6\x9c\xce\x15OW\xc7\xcb\xb5\"D\xf7\x15o\n\x80/\"6U\x8d\x0fY\x8cT\xdb%*3\xde\xea.\xdex\xd9\x9e{e\x9b\xf7\xf6\x14x~\x95\xe1w\x19\x8f\x0f\xf4h\x82)\x97\xcdA\x1f\xe0\xad\a\x81n\xe0\x84\x14,9\xde9\xcd\xa2\x10\x19|\x00\x00P\xeaJ;*\x91\x91\xb7\xf8\x8b\xabR|\xbc2\x8aG\xae\xf7\xee\xbb\xa7!\xaf\xce\x9e7\x18\xf0\xa4\x80h+\x1a\xa8W\xc6M-\xd2~\xb1\x001\v\xe1\xeb\xec\xd2H\xb8\xc4\x9b\xfe\xd7\n\x10\xc3\x88\x97\xd0*y\xb1\x1c\xed\xd9\x85\x8f`?H%\xe5\xf6Ai`\x9e\x9e\x9c\x1an\x04\xf0\x03\xcc}\x7fG:\xe2\xde\xda2\x14\xech_\xae\xf2\xeb_ij/\xc4\x83\xe1\xb1\x04\xc1\x11,!\xf4F2\xb9\xec\xc3\x03%3\x88&F\xe7;\x94\xb3L\x06\x8c\xac\x8f\xd6!!\xbe\xe7$$)<\xb6\xb1~V\x87\xd1g\xd2:\xd6*;\x0f\xa5\xb28\x7f\x90J\xea\xc5\x99\x89\xaa\xa7\xc8p_d\x01\xcf~\x889\x96\xc9\x98\x1d\x91:1\xe7\xae\xe8J\x19\x9e\xe3bH\x85\xbf\x82\bi\x06\xdd\x1bo\xe1\n\x10\x9bG.\xe7\xf7T\xdc\\1@\xa9\x80g\x19\xbd\xff\xd6\x9f\xed\xcce,\x06\x82h\xdd\t\xb9`\xd0\xf8\x80\x8fe\xd8\xc1\xe7\x1d\xc0\x9b\x9b\xddE\xd3\xef89F\xb8Bn\x18\xcb|\x8c\t{\xee\x106\x93r\x97\xcb\xc3]\xf7\xee\x82\xea1m\\Lu\x9a\xab\xc5\xba\x90\xaa\x84\xedr\n\x93\xdc\xc6~\xbd\xa8K\x8b\xb0\xf4\a7\xe3\xf6l\xd7\xd3\xc7e\x00\x00\xef\xdf\x9f\xa0\xf7?\xe4-\x1c]') syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) 137.479342ms ago: executing program 5 (id=13951): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 58.705316ms ago: executing program 3 (id=13952): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, 0xffffffffffffffff, 0x4}, 0x6) 0s ago: executing program 2 (id=13953): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) kernel console output (not intermixed with test programs): pc272e [ 705.457632][T30945] comedi: valid board names for comedi_parport driver are: [ 705.457664][T30945] comedi_parport [ 705.457685][T30945] comedi: valid board names for comedi_test driver are: [ 705.457710][T30945] comedi_test [ 705.457732][T30945] comedi: valid board names for comedi_bond driver are: [ 705.457743][T30945] comedi_bond [ 705.972169][T30948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9530'. [ 706.551873][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 706.551894][ T37] audit: type=1326 audit(1777406901.822:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30955 comm="syz.0.9534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f004b3bcdd9 code=0x0 [ 707.313332][T30998] netlink: 'syz.4.9548': attribute type 32 has an invalid length. [ 707.313357][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9548'. [ 707.561793][T30998] bond4: Setting coupled_control to off (0) [ 707.747719][T31051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9558'. [ 708.175862][T31074] netlink: 'syz.3.9567': attribute type 27 has an invalid length. [ 708.296258][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9571'. [ 710.923411][ T867] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 711.077350][ T867] usb 1-1: Using ep0 maxpacket: 16 [ 711.079732][ T867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 711.079776][ T867] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 711.079802][ T867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.120895][ T867] usb 1-1: config 0 descriptor?? [ 711.398965][T31235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9627'. [ 711.616521][ T867] uclogic 0003:2179:0053.000F: interface is invalid, ignoring [ 711.792087][ T867] usb 1-1: USB disconnect, device number 86 [ 712.100125][T31277] netlink: zone id is out of range [ 712.100425][T31277] netlink: zone id is out of range [ 712.100972][T31277] netlink: set zone limit has 8 unknown bytes [ 712.293722][T31284] netlink: 'syz.1.9640': attribute type 29 has an invalid length. [ 712.297447][T31284] netlink: 'syz.1.9640': attribute type 29 has an invalid length. [ 712.802198][ T867] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 712.955002][ T867] usb 5-1: Using ep0 maxpacket: 32 [ 712.968098][ T867] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 712.968129][ T867] usb 5-1: config 0 has no interface number 0 [ 713.015551][ T867] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 713.015588][ T867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.015612][ T867] usb 5-1: Product: syz [ 713.015629][ T867] usb 5-1: Manufacturer: syz [ 713.015645][ T867] usb 5-1: SerialNumber: syz [ 713.128566][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9653'. [ 713.128594][T31320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9653'. [ 713.128625][T31320] netlink: 'syz.3.9653': attribute type 14 has an invalid length. [ 713.376925][ T867] usb 5-1: config 0 descriptor?? [ 713.393274][ T867] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 713.394495][ T867] usb 5-1: selecting invalid altsetting 1 [ 713.394515][ T867] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 713.458269][ T867] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 713.458863][ T867] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 713.458917][ T867] usb 5-1: media controller created [ 713.837910][ T867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 714.212428][T31356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9666'. [ 714.351934][T31364] F2FS-fs: Conflicting test_dummy_encryption options [ 714.624255][T31375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9669'. [ 714.624298][T31375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.788119][ T867] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 714.788183][ T867] zl10353_read_register: readreg error (reg=127, ret==-71) [ 714.788678][ T867] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 715.196186][ T867] usb 5-1: USB disconnect, device number 64 [ 717.051271][T31484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9711'. [ 717.761353][T31527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9728'. [ 717.932710][ T5787] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 718.082745][ T5787] usb 2-1: Using ep0 maxpacket: 32 [ 718.085412][ T5787] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 718.085441][ T5787] usb 2-1: config 0 has no interface number 0 [ 718.085489][ T5787] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 718.088773][ T5787] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 718.088807][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.088830][ T5787] usb 2-1: Product: syz [ 718.088847][ T5787] usb 2-1: Manufacturer: syz [ 718.088863][ T5787] usb 2-1: SerialNumber: syz [ 718.174066][ T5787] usb 2-1: config 0 descriptor?? [ 718.175736][T31510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 718.390595][T31510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 718.610249][ T5787] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 718.610549][ T5787] asix 2-1:0.188: probe with driver asix failed with error -71 [ 718.659151][ T5787] usb 2-1: USB disconnect, device number 88 [ 718.869734][T31575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9742'. [ 720.353634][T31633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9766'. [ 721.358650][T31666] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9779'. [ 721.788907][ T37] audit: type=1326 audit(1777406917.061:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.788968][ T37] audit: type=1326 audit(1777406917.061:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.854613][ T37] audit: type=1326 audit(1777406917.121:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.857626][ T37] audit: type=1326 audit(1777406917.131:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.857682][ T37] audit: type=1326 audit(1777406917.131:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.857743][ T37] audit: type=1326 audit(1777406917.131:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.857791][ T37] audit: type=1326 audit(1777406917.131:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.860908][ T37] audit: type=1326 audit(1777406917.131:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.870327][ T37] audit: type=1326 audit(1777406917.141:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 721.884180][ T37] audit: type=1326 audit(1777406917.151:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31680 comm="syz.3.9785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 722.932545][T31727] vivid-006: disconnect [ 722.937951][T31725] vivid-006: reconnect [ 723.262820][T31743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9811'. [ 723.262866][T31743] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9811'. [ 723.262883][T31743] netlink: 'syz.4.9811': attribute type 5 has an invalid length. [ 723.262898][T31743] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9811'. [ 723.388564][T31748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9813'. [ 724.438436][T31791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9828'. [ 725.171278][T31822] netlink: 'syz.4.9839': attribute type 16 has an invalid length. [ 725.171307][T31822] netlink: 64130 bytes leftover after parsing attributes in process `syz.4.9839'. [ 726.977265][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 726.977287][ T37] audit: type=1326 audit(1777406922.250:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31898 comm="syz.1.9874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4be0e5cdd9 code=0x0 [ 729.075838][ T5640] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 729.228357][ T5640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.228396][ T5640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.228423][ T5640] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.228469][ T5640] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.228494][ T5640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.296737][ T5640] usb 2-1: config 0 descriptor?? [ 729.690846][T31993] sch_tbf: peakrate 7 is lower than or equals to rate 5840457056772342912 ! [ 729.730447][ T5640] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 729.794672][ T5640] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 729.913988][ T5641] Bluetooth: hci0: command 0x206a tx timeout [ 730.038755][ T867] usb 2-1: USB disconnect, device number 89 [ 730.369501][T32036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9918'. [ 730.479904][T32043] nbd: must specify at least one socket [ 730.733786][T32056] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 730.733786][T32056] program syz.4.9926 not setting count and/or reply_len properly [ 731.200904][T32080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9935'. [ 731.421509][T32093] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9940'. [ 732.124263][ T5640] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 732.280586][ T5640] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 732.280629][ T5640] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 732.280652][ T5640] usb 5-1: config 0 has no interface number 0 [ 732.285818][ T5640] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 732.285851][ T5640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.285872][ T5640] usb 5-1: Product: syz [ 732.285888][ T5640] usb 5-1: Manufacturer: syz [ 732.285903][ T5640] usb 5-1: SerialNumber: syz [ 732.359113][ T5640] usb 5-1: config 0 descriptor?? [ 732.785473][ T5640] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 732.785515][ T5640] uvcvideo 5-1:0.64: No valid video chain found. [ 733.026762][ T5588] usb 5-1: USB disconnect, device number 65 [ 733.465913][ T37] audit: type=1326 audit(1777406928.740:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.467803][ T37] audit: type=1326 audit(1777406928.740:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.471023][ T37] audit: type=1326 audit(1777406928.740:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.471390][ T37] audit: type=1326 audit(1777406928.740:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.472125][ T37] audit: type=1326 audit(1777406928.740:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.472404][ T37] audit: type=1326 audit(1777406928.740:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.472765][ T37] audit: type=1326 audit(1777406928.740:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.473367][ T37] audit: type=1326 audit(1777406928.740:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.473677][ T37] audit: type=1326 audit(1777406928.740:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.509671][ T37] audit: type=1326 audit(1777406928.740:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32192 comm="syz.1.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be0e5cdd9 code=0x7ffc0000 [ 733.818696][T32200] netlink: 'syz.1.9981': attribute type 1 has an invalid length. [ 733.889301][T32202] comedi comedi2: dac02: I/O base address or length out of range [ 734.883729][T32253] ALSA: mixer_oss: invalid OSS volume '' [ 734.883780][T32253] ALSA: mixer_oss: invalid OSS volume ';' [ 734.883812][T32253] ALSA: mixer_oss: invalid OSS volume '3fy"I&يZ]TYg' [ 734.883826][T32253] ALSA: mixer_oss: invalid OSS volume '' [ 734.883846][T32253] ALSA: mixer_oss: invalid OSS volume '1GYz93ٓ.zba.' [ 734.883860][T32253] ALSA: mixer_oss: invalid OSS volume '˗' [ 734.883878][T32253] ALSA: mixer_oss: invalid OSS volume '5&0 Nq6be%7)F)' [ 734.883896][T32253] ALSA: mixer_oss: invalid OSS volume 'FXM0enW¦+HWQAJΝ?nt' [ 734.883958][T32253] ALSA: mixer_oss: invalid OSS volume '|9V~Q1>3M' [ 734.883972][T32253] ALSA: mixer_oss: invalid OSS volume ' ' [ 734.884074][T32253] ALSA: mixer_oss: invalid OSS volume '#j%mZڃ?$|' [ 734.884100][T32253] ALSA: mixer_oss: invalid OSS volume '!7Xյ'X'GNv' [ 736.210327][T32328] Bluetooth: MGMT ver 1.23 [ 736.720873][T32357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10044'. [ 736.720907][T32357] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 737.299084][T32391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10059'. [ 737.936640][T32427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10072'. [ 739.098830][ T1929] kernel read not supported for file /comedi0 (pid: 1929 comm: kworker/0:3) [ 740.402523][ T5641] Bluetooth: hci1: unknown advertising packet type: 0x6b [ 740.402575][ T5641] Bluetooth: hci1: Malformed LE Event: 0x02 [ 740.813723][T32551] bridge0: port 3(team0) entered disabled state [ 740.970332][T32551] team0: Cannot enslave team device to itself [ 740.970667][T32556] sit0: entered promiscuous mode [ 741.104628][T32556] netlink: 'syz.3.10124': attribute type 1 has an invalid length. [ 741.104657][T32556] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10124'. [ 741.531082][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 741.531103][ T37] audit: type=1326 audit(1777406936.799:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 741.531153][ T37] audit: type=1326 audit(1777406936.799:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 741.533839][ T37] audit: type=1326 audit(1777406936.799:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 741.533900][ T37] audit: type=1326 audit(1777406936.799:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 741.575166][ T37] audit: type=1326 audit(1777406936.839:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 741.575248][ T37] audit: type=1326 audit(1777406936.839:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 741.595283][ T37] audit: type=1326 audit(1777406936.849:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 741.595341][ T37] audit: type=1326 audit(1777406936.859:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 741.612975][ T37] audit: type=1326 audit(1777406936.869:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32585 comm="syz.4.10137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 742.038577][T32605] tipc: Started in network mode [ 742.038615][T32605] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 742.038669][T32605] tipc: Enabling of bearer rejected, failed to enable media [ 743.267622][ T37] audit: type=1326 audit(1777406938.538:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32626 comm="syz.4.10152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7fc00000 [ 743.491457][T32670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10169'. [ 743.565266][T32670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10169'. [ 743.579652][T32674] netlink: 'syz.0.10170': attribute type 1 has an invalid length. [ 743.984903][T32695] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10179'. [ 743.984932][T32695] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10179'. [ 744.246205][ T31] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 744.425722][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 744.429405][ T31] usb 4-1: config 8 has an invalid interface number: 111 but max is 0 [ 744.429436][ T31] usb 4-1: config 8 has no interface number 0 [ 744.429482][ T31] usb 4-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 744.429512][ T31] usb 4-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 744.434213][ T31] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 744.434248][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.434271][ T31] usb 4-1: Product: syz [ 744.434287][ T31] usb 4-1: Manufacturer: syz [ 744.434303][ T31] usb 4-1: SerialNumber: syz [ 744.532374][T32691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 744.860919][ T31] aircable 4-1:8.111: aircable converter detected [ 744.962510][ T31] usb 4-1: aircable converter now attached to ttyUSB0 [ 744.995528][ T31] usb 4-1: USB disconnect, device number 87 [ 745.039021][ T31] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 745.052493][ T31] aircable 4-1:8.111: device disconnected [ 745.454276][T32764] Invalid source name [ 745.468887][ T303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10204'. [ 745.860962][ T322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10212'. [ 745.861414][ T322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10212'. [ 745.977261][ T330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10216'. [ 746.048211][ T333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10217'. [ 747.691120][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.691206][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.636029][ T5641] Bluetooth: hci0: command 0x206a tx timeout [ 748.655221][ T361] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 749.492902][ T478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.846447][ T5640] hid_parser_main: 7 callbacks suppressed [ 749.846475][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.846507][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.846535][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.846564][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.846592][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.846620][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.848135][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.848171][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.848200][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 749.848227][ T5640] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 750.027965][ T5640] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 750.137481][ T502] netlink: 'syz.4.10284': attribute type 1 has an invalid length. [ 750.137508][ T502] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10284'. [ 750.137528][ T502] netlink: 'syz.4.10284': attribute type 1 has an invalid length. [ 750.137545][ T502] netlink: 634 bytes leftover after parsing attributes in process `syz.4.10284'. [ 750.137561][ T502] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10284'. [ 750.274397][ T506] fido_id[506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 751.059666][ T31] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 751.221903][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 751.226393][ T31] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 751.226427][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.280239][ T31] usb 4-1: config 0 descriptor?? [ 751.308999][ T31] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 751.327057][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10302'. [ 751.327097][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10302'. [ 751.935479][ T31] gspca_vc032x: reg_w err -71 [ 751.935512][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935526][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935537][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935547][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935557][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935567][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935577][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935587][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935597][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935607][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935617][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935626][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935636][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935646][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935656][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935666][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935676][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935685][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 751.935695][ T31] gspca_vc032x: Unknown sensor... [ 751.935783][ T31] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 752.079009][ T582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10309'. [ 752.085998][ T31] usb 4-1: USB disconnect, device number 88 [ 752.723651][ T621] netlink: 'syz.3.10325': attribute type 1 has an invalid length. [ 752.723679][ T621] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10325'. [ 752.723698][ T621] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10325'. [ 752.723715][ T621] netlink: 'syz.3.10325': attribute type 1 has an invalid length. [ 752.723733][ T621] netlink: 'syz.3.10325': attribute type 8 has an invalid length. [ 753.013209][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 753.376676][ T31] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 753.536696][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 753.540429][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.540468][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.540510][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 753.540536][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.559343][ T31] usb 2-1: config 0 descriptor?? [ 753.901361][ T682] netlink: 'syz.0.10345': attribute type 1 has an invalid length. [ 754.108691][ T31] koneplus 0003:1E7D:2D51.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 754.221227][ T31] koneplus 0003:1E7D:2D51.0012: couldn't init struct koneplus_device [ 754.221287][ T31] koneplus 0003:1E7D:2D51.0012: couldn't install mouse [ 754.403483][ T31] koneplus 0003:1E7D:2D51.0012: probe with driver koneplus failed with error -71 [ 754.510095][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 754.510116][ T37] audit: type=1326 audit(1777406949.777:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 754.511334][ T37] audit: type=1326 audit(1777406949.777:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 754.511387][ T37] audit: type=1326 audit(1777406949.777:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 754.512898][ T37] audit: type=1326 audit(1777406949.777:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 754.514638][ T37] audit: type=1326 audit(1777406949.777:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 754.515847][ T37] audit: type=1326 audit(1777406949.777:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 754.550437][ T37] audit: type=1326 audit(1777406949.797:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 754.550509][ T37] audit: type=1326 audit(1777406949.807:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=708 comm="syz.4.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 754.733537][ T31] usb 2-1: USB disconnect, device number 90 [ 754.928878][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10357'. [ 755.242856][ T739] trusted_key: encrypted_key: keyword 'uew' not recognized [ 755.889972][ T37] audit: type=1326 audit(1777406951.157:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=774 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 755.899435][ T37] audit: type=1326 audit(1777406951.167:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=774 comm="syz.4.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 757.599899][ T5640] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 757.781832][ T5640] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 757.781886][ T5640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 757.781917][ T5640] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 757.781964][ T5640] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 757.781989][ T5640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.884644][ T5640] usb 5-1: config 0 descriptor?? [ 757.885459][ T856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 758.372855][ T5640] hid_parser_main: 33 callbacks suppressed [ 758.372882][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x4 [ 758.372913][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x5 [ 758.372936][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x7 [ 758.372958][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x0 [ 758.372980][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x0 [ 758.373002][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x0 [ 758.373025][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x0 [ 758.373048][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x0 [ 758.373071][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x0 [ 758.373095][ T5640] hkems 0003:2006:0118.0013: unknown main item tag 0x0 [ 758.373119][ T5640] hkems 0003:2006:0118.0013: unexpected long global item [ 758.375179][ T5640] hkems 0003:2006:0118.0013: parse failed [ 758.375261][ T5640] hkems 0003:2006:0118.0013: probe with driver hkems failed with error -22 [ 758.532824][ T5640] usb 5-1: USB disconnect, device number 66 [ 759.427561][ T5640] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 759.465993][ T976] netlink: 'syz.1.10446': attribute type 1 has an invalid length. [ 759.580334][ T5640] usb 4-1: Using ep0 maxpacket: 16 [ 759.584049][ T5640] usb 4-1: config index 0 descriptor too short (expected 804, got 36) [ 759.584082][ T5640] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 759.584106][ T5640] usb 4-1: config 0 has no interface number 0 [ 759.584185][ T5640] usb 4-1: config 0 interface 181 altsetting 36 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.584216][ T5640] usb 4-1: config 0 interface 181 altsetting 36 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.584242][ T5640] usb 4-1: config 0 interface 181 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.584273][ T5640] usb 4-1: config 0 interface 181 has no altsetting 0 [ 759.584308][ T5640] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 759.584333][ T5640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.680506][ T5640] usb 4-1: config 0 descriptor?? [ 760.047035][ T997] netlink: 'syz.4.10453': attribute type 21 has an invalid length. [ 760.047064][ T997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10453'. [ 760.075246][ T999] netlink: 'syz.0.10455': attribute type 1 has an invalid length. [ 760.142246][ T5640] uclogic 0003:5543:0522.0014: item fetching failed at offset 32/41 [ 760.144374][ T5640] uclogic 0003:5543:0522.0014: parse failed [ 760.150885][ T5640] uclogic 0003:5543:0522.0014: probe with driver uclogic failed with error -22 [ 760.247874][ T1004] netlink: 'syz.1.10456': attribute type 9 has an invalid length. [ 760.247897][ T1004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10456'. [ 760.286851][ T1004] macvlan2: entered promiscuous mode [ 760.286992][ T1004] macvlan2: entered allmulticast mode [ 760.287003][ T1004] gretap0: entered allmulticast mode [ 760.321024][ T5759] usb 4-1: USB disconnect, device number 89 [ 761.159585][ T1078] kAFS: No cell specified [ 761.955948][ T1131] tipc: Enabling of bearer rejected, failed to enable media [ 762.850512][ T1181] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10517'. [ 764.591590][ T1258] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in; [ 764.591590][ T1258] program syz.0.10548 not setting count and/or reply_len properly [ 764.754037][ T1269] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10550'. [ 764.754165][ T1269] openvswitch: netlink: Message has 6 unknown bytes. [ 765.296779][ T1292] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 766.848107][ T31] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 767.005340][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.005378][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.005419][ T31] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 767.005444][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.058577][ T31] usb 1-1: config 0 descriptor?? [ 767.432810][ T1405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.510415][ T31] hid_parser_main: 4 callbacks suppressed [ 767.510440][ T31] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 767.510572][ T31] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 767.575271][ T31] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0015/input/input32 [ 767.898166][ T1929] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 768.052475][ T1929] usb 5-1: Using ep0 maxpacket: 16 [ 768.055173][ T1929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.055234][ T1929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.055264][ T1929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.055307][ T1929] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 768.055333][ T1929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.176754][ T1929] usb 5-1: config 0 descriptor?? [ 768.189763][ T31] cm6533_jd 0003:0D8C:0022.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 768.225761][ T1442] Invalid source name [ 768.242533][ T31] usb 1-1: USB disconnect, device number 87 [ 768.307630][ T1451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10617'. [ 768.618525][ T1452] fido_id[1452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 768.997019][ T1929] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf3 found [ 768.997176][ T1929] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf4 found [ 769.077571][ T1929] usb 5-1: USB disconnect, device number 67 [ 769.950575][ T1540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10643'. [ 769.950637][ T1540] netlink: 'syz.3.10643': attribute type 1 has an invalid length. [ 770.031382][ T5787] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 770.195264][ T5787] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 770.195305][ T5787] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 770.195327][ T5787] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 770.195348][ T5787] usb 5-1: config 220 has no interface number 2 [ 770.195430][ T5787] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 770.195460][ T5787] usb 5-1: config 220 interface 0 has no altsetting 0 [ 770.195481][ T5787] usb 5-1: config 220 interface 76 has no altsetting 0 [ 770.195500][ T5787] usb 5-1: config 220 interface 1 has no altsetting 0 [ 770.213473][ T5787] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 770.213575][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.213642][ T5787] usb 5-1: Product: syz [ 770.213680][ T5787] usb 5-1: Manufacturer: syz [ 770.213724][ T5787] usb 5-1: SerialNumber: syz [ 770.668096][ T5787] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 770.668134][ T5787] uvcvideo 5-1:220.0: No valid video chain found. [ 770.668198][ T5787] usb 5-1: selecting invalid altsetting 0 [ 770.745753][ T5787] usb 5-1: selecting invalid altsetting 0 [ 770.745783][ T5787] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 770.773440][ T5787] usb 5-1: USB disconnect, device number 68 [ 770.944825][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 770.944847][ T37] audit: type=1326 audit(1777406966.205:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 770.946711][ T37] audit: type=1326 audit(1777406966.205:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 770.947968][ T37] audit: type=1326 audit(1777406966.205:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 770.957642][ T37] audit: type=1326 audit(1777406966.205:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 770.976841][ T37] audit: type=1326 audit(1777406966.235:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 771.028457][ T37] audit: type=1326 audit(1777406966.285:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 771.043134][ T37] audit: type=1326 audit(1777406966.295:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 771.043277][ T37] audit: type=1326 audit(1777406966.305:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 771.056271][ T37] audit: type=1326 audit(1777406966.305:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 771.071140][ T37] audit: type=1326 audit(1777406966.315:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1588 comm="syz.0.10659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 771.784555][ T1627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10676'. [ 772.951175][ T1640] syz.3.10680 (1640) used greatest stack depth: 17728 bytes left [ 773.807131][ T1699] netlink: 64134 bytes leftover after parsing attributes in process `syz.0.10708'. [ 774.587935][ T1747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10730'. [ 774.587954][ T1747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10730'. [ 774.675973][ T1754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10731'. [ 774.749381][ T31] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 774.898984][ T5787] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 774.902421][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 774.903041][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 774.904241][ T31] usb 5-1: config 202 has an invalid interface number: 97 but max is 0 [ 774.904270][ T31] usb 5-1: config 202 has no interface number 0 [ 774.904322][ T31] usb 5-1: config 202 interface 97 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 774.904354][ T31] usb 5-1: config 202 interface 97 has no altsetting 0 [ 774.944285][ T31] usb 5-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01 [ 774.944322][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.944345][ T31] usb 5-1: Product: syz [ 774.944361][ T31] usb 5-1: Manufacturer: syz [ 774.944378][ T31] usb 5-1: SerialNumber: syz [ 775.006433][ T1739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 775.066591][ T5787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 775.068300][ T5787] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 775.068328][ T5787] usb 2-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 775.068381][ T5787] usb 2-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 775.068408][ T5787] usb 2-1: config 66 interface 0 has no altsetting 0 [ 775.123697][ T5787] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 775.123730][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.123751][ T5787] usb 2-1: Product: syz [ 775.123769][ T5787] usb 2-1: Manufacturer: syz [ 775.123780][ T5787] usb 2-1: SerialNumber: syz [ 775.254613][ T31] usb-storage 5-1:202.97: USB Mass Storage device detected [ 775.270034][ T31] usb-storage 5-1:202.97: device ignored [ 775.496418][ T5787] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 775.635335][ T5787] usb 2-1: USB disconnect, device number 91 [ 775.703586][ T31] usb 5-1: USB disconnect, device number 69 [ 775.798606][ T1791] ip6tnl4: entered allmulticast mode [ 775.940459][T13161] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 775.940779][T13161] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 775.969181][ T1929] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 776.089333][ T5787] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 776.529190][ T5787] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 777.570224][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 777.570246][ T37] audit: type=1326 audit(1777406972.825:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1900 comm="syz.4.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 777.575851][ T37] audit: type=1326 audit(1777406972.835:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1900 comm="syz.4.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 777.581830][ T37] audit: type=1326 audit(1777406972.845:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1900 comm="syz.4.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 777.581886][ T37] audit: type=1326 audit(1777406972.845:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1900 comm="syz.4.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 777.581930][ T37] audit: type=1326 audit(1777406972.845:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1900 comm="syz.4.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 777.586117][ T37] audit: type=1326 audit(1777406972.845:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1900 comm="syz.4.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 777.586175][ T37] audit: type=1326 audit(1777406972.845:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1900 comm="syz.4.10783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 778.439367][ T5787] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 778.589288][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 778.596909][ T5787] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 778.596942][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.596964][ T5787] usb 4-1: Product: syz [ 778.596979][ T5787] usb 4-1: Manufacturer: syz [ 778.596994][ T5787] usb 4-1: SerialNumber: syz [ 778.660275][ T5787] usb 4-1: config 0 descriptor?? [ 778.687067][ T5787] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 778.723195][ T5787] dvb-usb: bulk message failed: -22 (2/0) [ 778.770720][ T1957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10805'. [ 778.804194][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 778.804824][ T5787] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 778.804865][ T5787] usb 4-1: media controller created [ 778.880040][ T1932] cxusb: i2c wr: len=79 is too big! [ 778.880040][ T1932] [ 779.008769][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.230924][ T5787] usb 4-1: selecting invalid altsetting 7 [ 779.230949][ T5787] cxusb: set interface failed [ 779.230964][ T5787] dvb-usb: bulk message failed: -22 (1/0) [ 779.326267][ T5787] DVB: Unable to find symbol lgdt330x_attach() [ 779.326289][ T5787] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 779.339342][ T5759] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 779.439444][ T5787] rc_core: IR keymap rc-dvico-portable not found [ 779.439467][ T5787] Registered IR keymap rc-empty [ 779.509490][ T5759] usb 5-1: Using ep0 maxpacket: 32 [ 779.529944][ T5759] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.529981][ T5759] usb 5-1: config 0 interface 0 has no altsetting 0 [ 779.530019][ T5759] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 779.530045][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.536459][ T5759] usb 5-1: config 0 descriptor?? [ 779.720802][ T5787] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 779.747880][ T5787] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input33 [ 779.843865][ T1992] tipc: Enabled bearer , priority 5 [ 779.919569][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 779.958894][ T5787] dvb-usb: schedule remote query interval to 100 msecs. [ 779.958925][ T5787] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 779.999692][ T5787] usb 4-1: USB disconnect, device number 90 [ 780.032837][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.032886][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.032913][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.032941][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.032969][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.032996][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.033024][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.033053][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.033080][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.033107][ T5759] chicony 0003:04F2:1123.0017: unknown main item tag 0x0 [ 780.112311][ T5759] chicony 0003:04F2:1123.0017: hidraw0: USB HID v0.04 Device [HID 04f2:1123] on usb-dummy_hcd.4-1/input0 [ 780.354153][ T5640] usb 5-1: USB disconnect, device number 70 [ 780.628486][ T2026] fido_id[2026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 780.663178][ T819] tipc: Node number set to 1 [ 780.948202][ T5787] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 781.239648][ T31] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 781.404854][ T31] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 781.404887][ T31] usb 5-1: config 1 has no interface number 0 [ 781.404937][ T31] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 781.404968][ T31] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 781.404997][ T31] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.462198][ T31] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 781.462234][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.462257][ T31] usb 5-1: Product: syz [ 781.462276][ T31] usb 5-1: Manufacturer: syz [ 781.462292][ T31] usb 5-1: SerialNumber: syz [ 781.518088][ T2058] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 781.751739][ T2058] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 782.029661][ T819] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 782.184740][ T819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 782.184774][ T819] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 782.184801][ T819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 782.193374][ T819] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 782.193473][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.193538][ T819] usb 1-1: Product: syz [ 782.193584][ T819] usb 1-1: Manufacturer: syz [ 782.193637][ T819] usb 1-1: SerialNumber: syz [ 782.290197][ T31] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 782.294990][ T819] usb 1-1: config 0 descriptor?? [ 782.309956][ T2097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 782.310371][ T2097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 782.340787][ T819] usb 1-1: ucan: probing device on interface #0 [ 782.356523][ T31] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 782.356675][ T31] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 782.357390][ T31] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 782.357414][ T31] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 782.395506][ T31] usb 5-1: USB disconnect, device number 71 [ 782.421106][ T31] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 782.757329][ T819] usb 1-1: ucan: failed to retrieve device info [ 782.757353][ T819] usb 1-1: ucan: probe failed; try to update the device firmware [ 782.759206][ T31] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 782.878447][ T819] usb 1-1: USB disconnect, device number 88 [ 782.999721][ T5787] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 783.170807][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 783.176319][ T5787] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 783.189514][ T5787] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 783.191784][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.191862][ T5787] usb 4-1: Product: syz [ 783.191899][ T5787] usb 4-1: Manufacturer: syz [ 783.191945][ T5787] usb 4-1: SerialNumber: syz [ 783.238729][ T5787] usb 4-1: config 0 descriptor?? [ 783.263351][ T5787] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 783.263531][ T5787] usb 4-1: setting power ON [ 783.263552][ T5787] dvb-usb: bulk message failed: -22 (2/0) [ 783.315666][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 783.316946][ T5787] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 783.317009][ T5787] usb 4-1: media controller created [ 783.475822][ T2138] dvb-usb: bulk message failed: -22 (3/0) [ 783.475855][ T2138] dvb-usb: bulk message failed: -22 (4/0) [ 783.475873][ T2138] cxusb: i2c read failed [ 783.550648][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.667537][ T5787] usb 4-1: selecting invalid altsetting 6 [ 783.667565][ T5787] usb 4-1: digital interface selection failed (-22) [ 783.667583][ T5787] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 783.737794][ T5787] usb 4-1: setting power OFF [ 783.738095][ T5787] dvb-usb: bulk message failed: -22 (2/0) [ 783.738109][ T5787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 783.738119][ T5787] (NULL device *): no alternate interface [ 783.918762][ T5787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 783.959865][ T31] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 783.960183][ T5787] usb 4-1: USB disconnect, device number 91 [ 784.117332][ T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 784.117370][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.117394][ T31] usb 5-1: Product: syz [ 784.117411][ T31] usb 5-1: Manufacturer: syz [ 784.117427][ T31] usb 5-1: SerialNumber: syz [ 784.190179][ T31] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 784.223517][ T867] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 784.675542][ T5640] usb 5-1: USB disconnect, device number 72 [ 784.760775][ T2246] Bluetooth: MGMT ver 1.23 [ 785.229453][ T37] audit: type=1326 audit(1777406980.484:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.229513][ T37] audit: type=1326 audit(1777406980.484:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.251756][ T37] audit: type=1326 audit(1777406980.514:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.251814][ T37] audit: type=1326 audit(1777406980.514:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.251987][ T37] audit: type=1326 audit(1777406980.514:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.252108][ T37] audit: type=1326 audit(1777406980.514:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.267293][ T37] audit: type=1326 audit(1777406980.514:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.267493][ T37] audit: type=1326 audit(1777406980.524:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.275716][ T37] audit: type=1326 audit(1777406980.534:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.275866][ T37] audit: type=1326 audit(1777406980.534:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2268 comm="syz.3.10892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 785.367377][ T867] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 785.367913][ T867] ath9k_htc: Failed to initialize the device [ 785.470022][ T5640] usb 5-1: ath9k_htc: USB layer deinitialized [ 785.790212][ T5759] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 785.870076][ T819] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 785.945587][ T5759] usb 2-1: Using ep0 maxpacket: 8 [ 785.948375][ T5759] usb 2-1: unable to get BOS descriptor or descriptor too short [ 785.963196][ T5759] usb 2-1: config 117 has an invalid interface number: 163 but max is 0 [ 785.963228][ T5759] usb 2-1: config 117 has no interface number 0 [ 785.963262][ T5759] usb 2-1: config 117 interface 163 has no altsetting 0 [ 785.994765][ T5759] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 785.994799][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.994820][ T5759] usb 2-1: Product: syz [ 785.994837][ T5759] usb 2-1: Manufacturer: syz [ 785.994854][ T5759] usb 2-1: SerialNumber: syz [ 786.033129][ T819] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 786.033159][ T819] usb 4-1: config 0 has no interface number 0 [ 786.033205][ T819] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 786.033233][ T819] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.033258][ T819] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.033286][ T819] usb 4-1: config 0 interface 1 has no altsetting 0 [ 786.033323][ T819] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 786.033348][ T819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.120094][ T819] usb 4-1: config 0 descriptor?? [ 786.609534][ T5759] f81534a_ctrl 2-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 786.647638][ T5759] usb 2-1: USB disconnect, device number 92 [ 786.740671][ T819] uclogic 0003:145F:0212.0018: failed retrieving string descriptor #100: -71 [ 786.740738][ T819] uclogic 0003:145F:0212.0018: failed retrieving pen parameters: -71 [ 786.740758][ T819] uclogic 0003:145F:0212.0018: pen probing failed: -71 [ 786.740778][ T819] uclogic 0003:145F:0212.0018: failed probing parameters: -71 [ 786.740901][ T819] uclogic 0003:145F:0212.0018: probe with driver uclogic failed with error -71 [ 786.798041][ T819] usb 4-1: USB disconnect, device number 92 [ 787.456355][ T2361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10918'. [ 788.000413][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 788.491123][ T2415] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10939'. [ 788.491149][ T2415] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10939'. [ 789.324700][ T2446] UHID_CREATE from different security context by process 3907 (syz.1.10950), this is not allowed. [ 790.010168][ T2489] vlan2: entered allmulticast mode [ 790.010192][ T2489] bond0: entered allmulticast mode [ 790.010207][ T2489] bond_slave_0: entered allmulticast mode [ 790.010235][ T2489] bond_slave_1: entered allmulticast mode [ 790.443756][ T2521] bridge0: port 4(syz_tun) entered blocking state [ 790.452149][ T2521] bridge0: port 4(syz_tun) entered disabled state [ 790.506484][ T2521] syz_tun: entered allmulticast mode [ 790.680132][ T2521] syz_tun: entered promiscuous mode [ 790.764048][ T2521] bridge0: port 4(syz_tun) entered blocking state [ 790.764252][ T2521] bridge0: port 4(syz_tun) entered forwarding state [ 791.580438][ T2590] netlink: 'syz.4.11002': attribute type 6 has an invalid length. [ 792.833120][ T2677] netlink: 'syz.0.11032': attribute type 1 has an invalid length. [ 792.833146][ T2677] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11032'. [ 792.833165][ T2677] netlink: 658 bytes leftover after parsing attributes in process `syz.0.11032'. [ 793.704875][ T2738] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 793.704915][ T2738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.056999][ T2750] pimreg9: entered allmulticast mode [ 794.191001][ T867] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 794.369177][ T867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.369237][ T867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.369266][ T867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.369308][ T867] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 794.369333][ T867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.467335][ T867] usb 2-1: config 0 descriptor?? [ 795.129807][ T867] usb 2-1: USB disconnect, device number 93 [ 798.552700][ T3023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11153'. [ 799.261144][ T3044] netlink: 'syz.1.11160': attribute type 29 has an invalid length. [ 799.441665][ T5641] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 799.441974][T27533] Bluetooth: hci0: command 0x206a tx timeout [ 799.941986][ T819] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 800.045429][ T3087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11180'. [ 800.094053][ T819] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 800.094087][ T819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.094109][ T819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 800.094184][ T819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.098581][ T819] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 800.098617][ T819] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 800.098633][ T819] usb 2-1: Product: syz [ 800.098663][ T819] usb 2-1: Manufacturer: syz [ 800.198199][ T819] cdc_wdm 2-1:1.0: skipping garbage [ 800.198223][ T819] cdc_wdm 2-1:1.0: skipping garbage [ 800.198326][ T819] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 800.403217][ T5759] usb 2-1: USB disconnect, device number 94 [ 800.925201][ T3136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11196'. [ 801.430756][ T3164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11207'. [ 802.459322][ T3204] netlink: 'syz.3.11225': attribute type 1 has an invalid length. [ 803.498855][ T3277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11251'. [ 804.016219][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 804.912143][ T5759] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 805.065119][ T5759] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.065152][ T5759] usb 4-1: config 0 has no interfaces? [ 805.065185][ T5759] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 805.065212][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.108079][ T5759] usb 4-1: config 0 descriptor?? [ 805.292151][ T819] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 805.332569][ T5759] usb 4-1: USB disconnect, device number 93 [ 805.443806][ T819] usb 5-1: Using ep0 maxpacket: 32 [ 805.445787][ T819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.445823][ T819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.445853][ T819] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 805.445871][ T819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.503563][ T819] usb 5-1: config 0 descriptor?? [ 805.519207][ T819] hub 5-1:0.0: USB hub found [ 805.710540][ T819] hub 5-1:0.0: 1 port detected [ 806.190961][ T819] usb 5-1: USB disconnect, device number 73 [ 806.308180][ T3399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11295'. [ 806.961040][ T3437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11309'. [ 807.112434][ T5759] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 807.263597][ T5759] usb 4-1: Using ep0 maxpacket: 8 [ 807.271487][ T5759] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 807.271522][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.271545][ T5759] usb 4-1: Product: syz [ 807.271562][ T5759] usb 4-1: Manufacturer: syz [ 807.271577][ T5759] usb 4-1: SerialNumber: syz [ 807.318639][ T5759] usb 4-1: config 0 descriptor?? [ 807.483727][ T3456] program syz.4.11317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 807.572421][ T5759] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 808.184429][ T5759] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 808.210832][ T5759] usb 4-1: USB disconnect, device number 94 [ 808.371902][ T3484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11328'. [ 808.467621][ T3489] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 809.125444][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.125523][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.904369][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11353'. [ 810.157379][ T3565] netlink: 'syz.4.11360': attribute type 30 has an invalid length. [ 811.447266][ T3624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11386'. [ 811.447300][ T3624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11386'. [ 812.215208][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 812.215230][ T37] audit: type=1326 audit(1777407007.481:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.215338][ T37] audit: type=1326 audit(1777407007.481:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.220342][ T37] audit: type=1326 audit(1777407007.481:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.220511][ T37] audit: type=1326 audit(1777407007.481:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.220675][ T37] audit: type=1326 audit(1777407007.481:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.221419][ T37] audit: type=1326 audit(1777407007.481:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.221537][ T37] audit: type=1326 audit(1777407007.481:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.222008][ T37] audit: type=1326 audit(1777407007.481:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.222171][ T37] audit: type=1326 audit(1777407007.481:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 812.222377][ T37] audit: type=1326 audit(1777407007.481:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3662 comm="syz.4.11402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe644cdd9 code=0x7ffc0000 [ 814.274294][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11440'. [ 814.661359][ T3773] netlink: 'syz.3.11448': attribute type 4 has an invalid length. [ 814.661384][ T3773] netlink: 'syz.3.11448': attribute type 8 has an invalid length. [ 814.661400][ T3773] netlink: 212 bytes leftover after parsing attributes in process `syz.3.11448'. [ 817.521142][T27533] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 817.584390][T27533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 817.585995][T27533] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 817.587488][T27533] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 817.651311][T27533] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 819.331110][ T4041] program syz.4.11500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.925264][ T5641] Bluetooth: hci5: command tx timeout [ 820.033965][ T4114] program syz.0.11508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.495660][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.495983][ T3918] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.496184][ T3918] bridge_slave_0: entered allmulticast mode [ 820.498975][ T3918] bridge_slave_0: entered promiscuous mode [ 820.528336][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.528682][ T3918] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.572331][ T3918] bridge_slave_1: entered allmulticast mode [ 820.583240][ T3918] bridge_slave_1: entered promiscuous mode [ 820.887961][ T3918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.927598][ T3918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.212970][ T3918] team0: Port device team_slave_0 added [ 821.253513][ T3918] team0: Port device team_slave_1 added [ 821.322006][ T3918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.322024][ T3918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.322047][ T3918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.370876][ T3918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.370897][ T3918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.370928][ T3918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.533663][ T3918] hsr_slave_0: entered promiscuous mode [ 821.541202][ T3918] hsr_slave_1: entered promiscuous mode [ 821.542185][ T3918] debugfs: 'hsr0' already exists in 'hsr' [ 821.542220][ T3918] Cannot create hsr debugfs directory [ 822.004158][ T5641] Bluetooth: hci5: command tx timeout [ 822.154280][ T5787] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 822.346903][ T5787] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 822.346940][ T5787] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.346968][ T5787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 822.347001][ T5787] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 822.347026][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.413597][ T5787] usb 4-1: config 0 descriptor?? [ 822.424169][ T4311] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 822.848086][ T5787] hid_parser_main: 27 callbacks suppressed [ 822.848111][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.848154][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.848180][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.848207][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.848235][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x2 [ 822.848307][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.848334][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.848361][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.848392][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.848420][ T5787] logitech-hidpp-device 0003:046D:C086.001A: unknown main item tag 0x0 [ 822.874166][ T867] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 823.034010][ T867] usb 1-1: Using ep0 maxpacket: 32 [ 823.041515][ T867] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 823.041549][ T867] usb 1-1: config 0 has no interface number 0 [ 823.049488][ T5787] logitech-hidpp-device 0003:046D:C086.001A: hidraw0: USB HID v0.05 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 823.086201][ T867] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 823.086235][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.086257][ T867] usb 1-1: Product: syz [ 823.086274][ T867] usb 1-1: Manufacturer: syz [ 823.086291][ T867] usb 1-1: SerialNumber: syz [ 823.169417][ T867] usb 1-1: config 0 descriptor?? [ 823.178228][ T5787] usb 4-1: USB disconnect, device number 95 [ 823.248114][ T867] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 823.352568][ T4400] fido_id[4400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 823.463515][ T867] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 823.497257][ T867] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 823.814597][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 823.819824][ T867] usb 1-1: USB disconnect, device number 89 [ 823.885044][ T867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 823.933290][ T867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 823.947394][ T867] quatech2 1-1:0.51: device disconnected [ 824.088320][ T5641] Bluetooth: hci5: command tx timeout [ 824.404496][ T867] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 824.554270][ T867] usb 4-1: Using ep0 maxpacket: 32 [ 824.557160][ T867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 824.581968][ T867] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 824.582008][ T867] usb 4-1: config 7 has no interface number 0 [ 824.582058][ T867] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 38 [ 824.582086][ T867] usb 4-1: config 7 interface 187 has no altsetting 0 [ 824.622749][ T867] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 824.622780][ T867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.622803][ T867] usb 4-1: Product: syz [ 824.622817][ T867] usb 4-1: Manufacturer: syz [ 824.622833][ T867] usb 4-1: SerialNumber: syz [ 824.679266][ T4448] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 825.198688][ T867] usb 4-1: Unknown endpoint type found, address 0x07 [ 825.198718][ T867] usb 4-1: Not enough endpoints found in device, aborting! [ 825.643871][ T867] usb 4-1: USB disconnect, device number 96 [ 825.718743][ T3918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 825.812103][ T3918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 825.813565][ T3918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 825.942506][ T3918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 825.944031][ T3918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 826.164457][ T5641] Bluetooth: hci5: command tx timeout [ 826.213135][ T3918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 826.213755][ T4501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11568'. [ 826.246118][ T3918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 826.284931][ T3918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 827.382187][ T3918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.561686][ T3918] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.658796][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.658942][ T1476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.671335][ T4555] program syz.3.11584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.878269][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.878504][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.069981][ T4566] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11591'. [ 828.405244][ T4582] netlink: 'syz.4.11598': attribute type 1 has an invalid length. [ 828.405271][ T4582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11598'. [ 828.407876][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 828.407895][ T37] audit: type=1326 audit(1777407023.659:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 828.407946][ T37] audit: type=1326 audit(1777407023.669:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 828.408725][ T37] audit: type=1326 audit(1777407023.669:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 828.409273][ T37] audit: type=1326 audit(1777407023.669:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 828.410685][ T37] audit: type=1326 audit(1777407023.669:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aa52cdd9 code=0x7ffc0000 [ 828.411267][ T37] audit: type=1326 audit(1777407023.669:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85aa52e647 code=0x7ffc0000 [ 828.413127][ T37] audit: type=1326 audit(1777407023.669:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f85aa4ed60e code=0x7ffc0000 [ 828.594667][ T37] audit: type=1326 audit(1777407023.669:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f85aa4ed60e code=0x7ffc0000 [ 828.595056][ T37] audit: type=1326 audit(1777407023.859:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f85aa4ed60e code=0x7ffc0000 [ 828.595451][ T37] audit: type=1326 audit(1777407023.859:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4579 comm="syz.3.11597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85aa4ed60e code=0x7ffc0000 [ 829.760479][ T4614] input: syz0 as /devices/virtual/input/input34 [ 830.395604][ T3918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.757411][ T4663] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11624'. [ 831.099856][ T3918] veth0_vlan: entered promiscuous mode [ 831.162778][ T3918] veth1_vlan: entered promiscuous mode [ 831.748611][ T3918] veth0_macvtap: entered promiscuous mode [ 831.776524][ T5757] hid_parser_main: 15 callbacks suppressed [ 831.776549][ T5757] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 831.850122][ T3918] veth1_macvtap: entered promiscuous mode [ 831.885497][ T3918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.890355][ T3918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.019994][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.020214][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.020430][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.076809][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.083550][ T4717] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.11643'. [ 832.115131][ T4717] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.11643'. [ 832.316927][ T5757] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 832.697099][ T4734] sctp: [Deprecated]: syz.3.11647 (pid 4734) Use of int in maxseg socket option. [ 832.697099][ T4734] Use struct sctp_assoc_value instead [ 833.958273][ T1519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.958298][ T1519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.506437][ T1519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.506462][ T1519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.365480][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 835.885453][ T867] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 836.035588][ T867] usb 5-1: Using ep0 maxpacket: 16 [ 836.038311][ T867] usb 5-1: config index 0 descriptor too short (expected 52, got 36) [ 836.038342][ T867] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 836.038366][ T867] usb 5-1: config 0 has no interface number 0 [ 836.038416][ T867] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 836.038444][ T867] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 836.094465][ T867] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 836.094498][ T867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.094520][ T867] usb 5-1: Product: syz [ 836.094536][ T867] usb 5-1: Manufacturer: syz [ 836.094552][ T867] usb 5-1: SerialNumber: syz [ 836.187631][ T867] usb 5-1: config 0 descriptor?? [ 836.188405][ T4863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 836.189324][ T4863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 836.386156][ T4897] program syz.3.11693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 836.424267][ T4863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 836.424495][ T4863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 837.043314][ T867] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 837.043350][ T867] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 837.043651][ T867] asix 5-1:0.251: probe with driver asix failed with error -71 [ 837.184455][ T867] usb 5-1: USB disconnect, device number 74 [ 837.256121][ T819] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 837.408905][ T819] usb 4-1: config 0 has no interfaces? [ 837.408946][ T819] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 837.408970][ T819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.472149][ T819] usb 4-1: config 0 descriptor?? [ 837.708924][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.713688][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.716936][ T867] usb 4-1: USB disconnect, device number 97 [ 838.058590][ T5001] dummy0: entered promiscuous mode [ 838.156375][ T5001] dummy0: left promiscuous mode [ 838.275763][ T867] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 838.451343][ T867] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 838.451376][ T867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 838.481025][ T867] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 838.481059][ T867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.481082][ T867] usb 4-1: Product: syz [ 838.481098][ T867] usb 4-1: Manufacturer: syz [ 838.481115][ T867] usb 4-1: SerialNumber: syz [ 838.770463][ T867] usb 4-1: unit 6 not found! [ 838.770491][ T867] usb 4-1: unit 0 not found! [ 838.879341][ T5056] program syz.4.11727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.009626][ T867] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 839.048439][ T867] usb 4-1: USB disconnect, device number 98 [ 839.203443][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.502347][ T5136] program syz.5.11755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.566469][ T5186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11776'. [ 842.835132][ T5243] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11799'. [ 842.927629][ T5252] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 845.804829][ T5411] program syz.5.11858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 845.942533][ T5422] netlink: 'syz.4.11861': attribute type 4 has an invalid length. [ 846.438087][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11872'. [ 846.855173][ T5786] kernel write not supported for file [eventfd] (pid: 5786 comm: kworker/0:6) [ 847.510286][ T5498] sctp: [Deprecated]: syz.0.11891 (pid 5498) Use of int in max_burst socket option deprecated. [ 847.510286][ T5498] Use struct sctp_assoc_value instead [ 853.392425][ T5842] program syz.4.11997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.854989][ T5862] netlink: 'syz.0.12006': attribute type 29 has an invalid length. [ 853.875821][ T5862] netlink: 'syz.0.12006': attribute type 29 has an invalid length. [ 853.889471][ T5862] netlink: 'syz.0.12006': attribute type 29 has an invalid length. [ 854.367629][ T5883] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 854.367679][ T5883] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 854.367694][ T5883] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 854.367988][ T5883] overlayfs: conflicting lowerdir path [ 854.537416][ T5889] netlink: 484 bytes leftover after parsing attributes in process `syz.4.12017'. [ 858.367855][ T4388] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 858.520541][ T4388] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 858.520587][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.569698][ T4388] usb 5-1: config 0 descriptor?? [ 858.591825][ T4388] cp210x 5-1:0.0: cp210x converter detected [ 859.037070][ T6086] netlink: 'syz.5.12093': attribute type 7 has an invalid length. [ 859.219702][ T4388] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 859.219761][ T4388] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 859.252234][ T4388] usb 5-1: cp210x converter now attached to ttyUSB0 [ 859.266434][ T4388] usb 5-1: USB disconnect, device number 75 [ 859.291406][ T4388] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 859.292155][ T4388] cp210x 5-1:0.0: device disconnected [ 859.730707][ T6122] program syz.5.12101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.366952][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12112'. [ 860.424938][ T6153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12113'. [ 860.949283][ T6175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.472465][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12142'. [ 863.406741][ T6302] netlink: 'syz.4.12161': attribute type 1 has an invalid length. [ 863.406782][ T6302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.583434][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12163'. [ 865.228500][ T4388] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 865.380918][ T4388] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 865.380956][ T4388] usb 6-1: config 0 interface 0 has no altsetting 0 [ 865.380993][ T4388] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 865.381019][ T4388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.418489][ T867] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 865.446109][ T4388] usb 6-1: config 0 descriptor?? [ 865.447268][ T6385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.578803][ T867] usb 5-1: Using ep0 maxpacket: 8 [ 865.583490][ T867] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 137, using maximum allowed: 30 [ 865.583598][ T867] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 137 [ 865.583630][ T867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 865.583666][ T867] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 865.583700][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.660389][ T867] usb 5-1: config 0 descriptor?? [ 865.909064][ T4388] hid (null): invalid report_count -2115434050 [ 865.909102][ T4388] hid (null): unknown global tag 0xd [ 865.909344][ T4388] hid (null): unknown global tag 0xc [ 866.087431][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087472][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087500][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087528][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087555][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087582][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087611][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087638][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087677][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.087705][ T4388] mcp2200 0003:04D8:00DF.001C: unknown main item tag 0x0 [ 866.088226][ T4388] mcp2200 0003:04D8:00DF.001C: ignoring exceeding usage max [ 866.178229][ T4388] mcp2200 0003:04D8:00DF.001C: collection stack underflow [ 866.178279][ T4388] mcp2200 0003:04D8:00DF.001C: item 0 1 0 12 parsing failed [ 866.197696][ T4388] mcp2200 0003:04D8:00DF.001C: can't parse reports [ 866.197871][ T4388] mcp2200 0003:04D8:00DF.001C: probe with driver mcp2200 failed with error -22 [ 866.280529][ T4388] usb 6-1: USB disconnect, device number 2 [ 866.281738][ T867] dragonrise 0003:0079:0011.001D: reserved main item tag 0xd [ 866.281774][ T867] dragonrise 0003:0079:0011.001D: reserved main item tag 0xd [ 866.281851][ T867] dragonrise 0003:0079:0011.001D: item fetching failed at offset 43/44 [ 866.282796][ T867] dragonrise 0003:0079:0011.001D: parse failed [ 866.282875][ T867] dragonrise 0003:0079:0011.001D: probe with driver dragonrise failed with error -22 [ 866.398535][ T867] usb 5-1: USB disconnect, device number 76 [ 866.897724][ T6490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12221'. [ 866.914154][ T6490] netlink: 220 bytes leftover after parsing attributes in process `syz.0.12221'. [ 867.178054][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12228'. [ 867.353345][ T6507] bond4: option arp_missed_max: invalid value (0) [ 867.355009][ T6507] bond4: option arp_missed_max: allowed values 1 - 255 [ 867.413836][ T6507] bond4 (unregistering): Released all slaves [ 868.155023][ T6606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12240'. [ 869.444962][ T6675] erspan0: entered promiscuous mode [ 870.109698][ T6722] netlink: 'syz.0.12285': attribute type 5 has an invalid length. [ 870.109724][ T6722] netlink: 340 bytes leftover after parsing attributes in process `syz.0.12285'. [ 870.527241][ T6743] netlink: 220 bytes leftover after parsing attributes in process `syz.0.12296'. [ 870.580009][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.580078][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.793928][ T5641] Bluetooth: hci5: Invalid handle: 0x20c9 > 0x0eff [ 872.848292][ T6862] program syz.0.12337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 873.473678][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12350'. [ 873.915667][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 873.915688][ T37] audit: type=1326 audit(1777407325.165:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 873.915739][ T37] audit: type=1326 audit(1777407325.165:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 874.014600][ T37] audit: type=1326 audit(1777407325.235:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f004b37d60e code=0x7ffc0000 [ 874.014657][ T37] audit: type=1326 audit(1777407325.235:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f004b37d60e code=0x7ffc0000 [ 874.014703][ T37] audit: type=1326 audit(1777407325.235:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 874.014749][ T37] audit: type=1326 audit(1777407325.235:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 874.014794][ T37] audit: type=1326 audit(1777407325.235:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 874.014840][ T37] audit: type=1326 audit(1777407325.235:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 874.014885][ T37] audit: type=1326 audit(1777407325.235:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 874.014930][ T37] audit: type=1326 audit(1777407325.235:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 875.733343][ T819] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 875.897264][ T819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 875.897311][ T819] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 875.897338][ T819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.944970][ T819] usb 5-1: config 0 descriptor?? [ 876.389940][ T819] hid_parser_main: 55 callbacks suppressed [ 876.389968][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390001][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390030][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390071][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390099][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390126][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390152][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390178][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390205][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.390232][ T819] apple 0003:05AC:0241.001E: unknown main item tag 0x0 [ 876.561945][ T819] apple 0003:05AC:0241.001E: hidraw0: USB HID v0.00 Device [HID 05ac:0241] on usb-dummy_hcd.4-1/input0 [ 876.632563][ T819] usb 5-1: USB disconnect, device number 77 [ 876.900093][ T7058] fido_id[7058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 877.822664][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12434'. [ 878.319255][ T5759] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 878.345030][ T7146] bond1 (unregistering): Released all slaves [ 878.489507][ T5759] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 878.489542][ T5759] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 878.502447][ T5759] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 878.502482][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.502504][ T5759] usb 5-1: Product: syz [ 878.502520][ T5759] usb 5-1: Manufacturer: syz [ 878.502536][ T5759] usb 5-1: SerialNumber: syz [ 878.570756][ T5759] usb 5-1: config 0 descriptor?? [ 878.590000][ T5759] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 878.862774][ T7237] program syz.0.12449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 879.344705][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 879.344727][ T37] audit: type=1804 audit(1777407330.535:974): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.12453" name="/newroot/84/file0" dev="tmpfs" ino=445 res=1 errno=0 [ 879.426856][ T5759] gspca_sunplus: reg_r err -71 [ 879.428645][ T5759] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 879.456591][ T5759] usb 5-1: USB disconnect, device number 78 [ 879.544444][ T7257] block nbd0: NBD_DISCONNECT [ 879.606045][ T7252] block nbd0: Disconnected due to user request. [ 879.606072][ T7252] block nbd0: shutting down sockets [ 879.893305][ T7283] program syz.5.12463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 880.749222][ T819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 880.900238][ T819] usb 6-1: Using ep0 maxpacket: 32 [ 880.908115][ T819] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 880.908175][ T819] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 880.908205][ T819] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 880.908235][ T819] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 880.953947][ T819] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 880.954029][ T819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.954115][ T819] usb 6-1: Product: syz [ 880.954161][ T819] usb 6-1: Manufacturer: syz [ 880.954219][ T819] usb 6-1: SerialNumber: syz [ 881.156399][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 881.731779][ T819] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input36 [ 882.368372][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12504'. [ 882.794732][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12512'. [ 882.913735][ T7411] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.12514'. [ 882.995539][ T7413] block nbd0: NBD_DISCONNECT [ 883.570903][ T819] imon:send_packet: packet tx failed (-71) [ 883.590455][ T819] imon 6-1:155.0: panel buttons/knobs setup failed [ 883.590498][ T819] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 883.590514][ T819] (id 0x00) [ 883.853168][ T819] rc_core: IR keymap rc-imon-pad not found [ 883.902198][ T819] Registered IR keymap rc-empty [ 883.902308][ T819] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 883.902329][ T819] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 883.902829][ T819] imon:send_packet: packet tx failed (-71) [ 883.922759][ T819] imon 6-1:155.0: remote input dev register failed [ 883.968943][ T819] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 884.868629][ T819] imon 6-1:155.0: unable to initialize intf0, err 0 [ 884.868654][ T819] imon:imon_probe: failed to initialize context! [ 884.868669][ T819] imon 6-1:155.0: unable to register, err -19 [ 884.922910][ T819] usb 6-1: USB disconnect, device number 3 [ 885.707764][ T7548] __vm_enough_memory: pid: 7548, comm: syz.5.12561, bytes: 11727727931392 not enough memory for the allocation [ 888.963607][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12614'. [ 888.963648][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12614'. [ 890.389216][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12634'. [ 890.697607][ T7748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12640'. [ 891.900409][ T7799] misc userio: Can't change port type on an already running userio instance [ 892.167077][ T7818] pimreg: tun_chr_ioctl cmd 2148553947 [ 894.439463][ T37] audit: type=1326 audit(1777407345.685:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7893 comm="syz.0.12694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7fc00000 [ 894.954531][ T7965] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12719'. [ 894.965720][ T7965] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12719'. [ 894.990691][ T7965] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12719'. [ 895.853387][ T8013] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 896.141040][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12742'. [ 896.639846][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12753'. [ 900.420983][ T8259] program syz.4.12835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 900.687763][ T8271] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12841'. [ 901.292686][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 901.424394][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12858'. [ 901.528761][ T8319] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.12857'. [ 901.635378][ T8324] 9p: Unknown access argument 18446744073709551615: -34 [ 902.113441][ T8351] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12871'. [ 902.513253][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12881'. [ 902.828581][ T8391] program syz.5.12886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.294723][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12899'. [ 903.294758][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12899'. [ 903.629341][ T819] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 903.784537][ T819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.784567][ T819] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 903.784590][ T819] usb 5-1: config 1 has no interface number 0 [ 903.784702][ T819] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.784732][ T819] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 903.784760][ T819] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 903.784793][ T819] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 903.784816][ T819] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.813477][ T819] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 903.813568][ T819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.813673][ T819] usb 5-1: Product: syz [ 903.813768][ T819] usb 5-1: Manufacturer: syz [ 903.813811][ T819] usb 5-1: SerialNumber: syz [ 903.924954][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12912'. [ 903.926102][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12912'. [ 903.953703][ T8421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 904.402105][ T8421] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 904.809236][ T819] cdc_ncm 5-1:1.1: bind() failure [ 904.855955][ T819] usb 5-1: USB disconnect, device number 79 [ 905.069135][ T5786] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 905.223627][ T5786] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.223667][ T5786] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.223693][ T5786] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.223724][ T5786] usb 6-1: config 0 interface 0 has no altsetting 0 [ 905.223767][ T5786] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 905.223795][ T5786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.314604][ T5786] usb 6-1: config 0 descriptor?? [ 905.555422][ T8530] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12936'. [ 905.729942][ T37] audit: type=1326 audit(1777407356.975:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 905.730000][ T37] audit: type=1326 audit(1777407356.985:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 905.797821][ T37] audit: type=1326 audit(1777407357.045:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 905.797865][ T37] audit: type=1326 audit(1777407357.045:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 905.797899][ T37] audit: type=1326 audit(1777407357.045:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 905.797932][ T37] audit: type=1326 audit(1777407357.045:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 905.797965][ T37] audit: type=1326 audit(1777407357.045:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 905.806970][ T37] audit: type=1326 audit(1777407357.055:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 905.807027][ T37] audit: type=1326 audit(1777407357.055:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8532 comm="syz.0.12938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x7ffc0000 [ 906.007357][ T5786] holtek 0003:1241:5015.001F: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 906.007409][ T5786] holtek 0003:1241:5015.001F: no inputs found [ 906.096466][ T8551] program syz.0.12943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.121567][ T5786] usb 6-1: USB disconnect, device number 4 [ 906.223565][ T8553] fido_id[8553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 907.582507][ T8634] __nla_validate_parse: 2 callbacks suppressed [ 907.582528][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12972'. [ 908.186353][ T8660] input: syz0 as /devices/virtual/input/input39 [ 909.550330][ T8744] veth1_vlan: left allmulticast mode [ 909.862566][ T8744] team0: Port device macvlan1 removed [ 910.093808][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13019'. [ 910.093841][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13019'. [ 910.379599][ T8782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13030'. [ 912.008410][ T8875] netlink: 'syz.5.13063': attribute type 58 has an invalid length. [ 912.008435][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13063'. [ 912.386104][ T8897] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13070'. [ 912.583880][ T5264] veth1_vlan: entered allmulticast mode [ 919.092365][ T9217] netlink: 'syz.0.13188': attribute type 4 has an invalid length. [ 919.182021][ T9221] netlink: 'syz.0.13188': attribute type 17 has an invalid length. [ 919.234847][ T819] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 919.452663][ T819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.452702][ T819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.452745][ T819] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 919.452772][ T819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.504047][ T819] usb 5-1: config 0 descriptor?? [ 919.749401][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13196'. [ 919.749433][ T9243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13196'. [ 919.749470][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13196'. [ 919.749943][ T9243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13196'. [ 919.985612][ T819] hid_parser_main: 27 callbacks suppressed [ 919.985637][ T819] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 919.985668][ T819] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 919.985697][ T819] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 919.985726][ T819] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 919.985761][ T819] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 919.985788][ T819] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 919.985816][ T819] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 920.002180][ T819] hid-thrustmaster 0003:044F:B65D.0020: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 920.002994][ T819] hid-thrustmaster 0003:044F:B65D.0020: Wrong number of endpoints? [ 920.223905][ C0] hid-thrustmaster 0003:044F:B65D.0020: Unknown packet type 0x0, unable to proceed further with wheel init [ 920.431268][ T867] usb 5-1: USB disconnect, device number 80 [ 920.476392][ T9263] fido_id[9263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 920.928246][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13215'. [ 923.350668][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13258'. [ 923.372734][ T9425] veth1_to_team: entered promiscuous mode [ 923.402871][ T9425] gretap0: entered promiscuous mode [ 923.422217][ T9425] hsr1: entered promiscuous mode [ 923.496917][ T9434] netlink: 2164 bytes leftover after parsing attributes in process `syz.0.13261'. [ 923.759093][ T9432] loop5: detected capacity change from 0 to 7 [ 924.087160][ T9432] Dev loop5: unable to read RDB block 7 [ 924.087228][ T9432] loop5: unable to read partition table [ 924.087464][ T9432] loop5: partition table beyond EOD, truncated [ 924.087502][ T9432] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 925.539107][ T867] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 925.689258][ T867] usb 1-1: Using ep0 maxpacket: 16 [ 925.692767][ T867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.692796][ T867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.697036][ T867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 925.697070][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.697092][ T867] usb 1-1: Product: syz [ 925.697108][ T867] usb 1-1: Manufacturer: syz [ 925.697125][ T867] usb 1-1: SerialNumber: syz [ 925.828255][ T867] usb 1-1: 0:2 : does not exist [ 926.056000][ T867] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 926.157051][ T867] usb 1-1: USB disconnect, device number 90 [ 926.352771][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 927.717110][ T37] audit: type=1326 audit(1777407378.965:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9640 comm="syz.0.13326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004b3bcdd9 code=0x0 [ 929.346590][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13351'. [ 930.480548][ T5786] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 930.645449][ T5786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 930.645481][ T5786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.645521][ T5786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 930.645546][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.929313][ T5786] usb 1-1: usb_control_msg returned -32 [ 930.929368][ T5786] usbtmc 1-1:16.0: can't read capabilities [ 931.411051][ T9840] input: syz1 as /devices/virtual/input/input40 [ 932.016544][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.016622][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.194174][ T9932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.376585][ T867] usb 1-1: USB disconnect, device number 91 [ 934.619501][ T5640] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 934.772998][ T5640] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 934.773033][ T5640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.821133][ T5640] usb 5-1: config 0 descriptor?? [ 934.844530][ T5640] cp210x 5-1:0.0: cp210x converter detected [ 935.108282][T10044] siw: device registration error -23 [ 935.146142][T10044] netlink: 14 bytes leftover after parsing attributes in process `syz.5.13461'. [ 935.277246][ T5640] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 935.375891][T10044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.527502][T10044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.540892][ T5640] usb 5-1: cp210x converter now attached to ttyUSB0 [ 935.556035][ T5640] usb 5-1: USB disconnect, device number 81 [ 935.591951][T10044] bond0 (unregistering): Released all slaves [ 935.609955][ T5640] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 935.841545][ T5640] cp210x 5-1:0.0: device disconnected [ 937.916744][T10189] CUSE: unknown device info "" [ 937.916764][T10189] CUSE: unknown device info "" [ 937.916774][T10189] CUSE: unknown device info "" [ 937.916784][T10189] CUSE: unknown device info "" [ 937.916795][T10189] CUSE: unknown device info "/dev/cuse" [ 937.916805][T10189] CUSE: DEVNAME unspecified [ 938.249567][ T5786] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 938.419285][ T5786] usb 5-1: Using ep0 maxpacket: 32 [ 938.422090][ T5786] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 938.422145][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.466938][ T5786] usb 5-1: config 0 descriptor?? [ 938.690384][ T5786] as10x_usb: device has been detected [ 938.691369][ T5786] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 938.916422][ T5786] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 940.197117][T10290] syzkaller1: entered promiscuous mode [ 940.197146][T10290] syzkaller1: entered allmulticast mode [ 941.084088][ T5767] kernel write not supported for file [eventfd] (pid: 5767 comm: kworker/0:5) [ 941.166651][ T5786] as10x_usb: error during firmware upload part1 [ 941.167394][ T5786] Registered device nBox DVB-T Dongle [ 941.215230][ T5786] usb 5-1: USB disconnect, device number 82 [ 941.355970][T10343] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 941.441836][ T5786] Unregistered device nBox DVB-T Dongle [ 941.456956][ T5786] as10x_usb: device has been disconnected [ 943.085005][T10426] input: syz0 as /devices/virtual/input/input41 [ 943.085043][T10426] input: failed to attach handler leds to device input41, error: -6 [ 943.442210][T10451] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13588'. [ 943.442241][T10451] nbd: must specify at least one socket [ 945.231985][T10537] bond0: (slave bond_slave_0): Releasing backup interface [ 945.531100][T10552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13627'. [ 945.865766][T10552] bridge0: port 4(syz_tun) entered disabled state [ 945.919649][T10552] bridge0: port 3(dummy0) entered disabled state [ 946.799584][ T4388] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 946.959498][ T4388] usb 5-1: Using ep0 maxpacket: 8 [ 946.963121][ T4388] usb 5-1: unable to get BOS descriptor or descriptor too short [ 946.967557][ T4388] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.967587][ T4388] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 947.013356][ T4388] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 947.013391][ T4388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.013412][ T4388] usb 5-1: Product: syz [ 947.013430][ T4388] usb 5-1: Manufacturer: syz [ 947.013445][ T4388] usb 5-1: SerialNumber: syz [ 947.343713][ T4388] usb 5-1: 0:1 : does not exist [ 947.343741][ T4388] usb 5-1: 0:2 : does not exist [ 947.677488][ T4388] usb 5-1: USB disconnect, device number 83 [ 948.108209][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.454507][T10739] 9p: Bad value for 'wfdno' [ 950.399098][ T4388] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 950.571289][ T4388] usb 1-1: Using ep0 maxpacket: 32 [ 950.576258][ T4388] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 950.576290][ T4388] usb 1-1: config 0 has no interface number 0 [ 950.576339][ T4388] usb 1-1: config 0 interface 184 has no altsetting 0 [ 950.615306][ T4388] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 950.615356][ T4388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.615377][ T4388] usb 1-1: Product: syz [ 950.615393][ T4388] usb 1-1: Manufacturer: syz [ 950.615408][ T4388] usb 1-1: SerialNumber: syz [ 950.690977][ T4388] usb 1-1: config 0 descriptor?? [ 950.761915][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13714'. [ 951.330865][ T4388] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 951.330915][ T4388] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 951.535484][ T4388] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 951.535522][ T4388] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 951.535543][ T4388] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 951.535564][ T4388] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 951.535885][ T4388] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 951.598904][ T4388] usb 1-1: USB disconnect, device number 92 [ 952.230407][ T5641] Bluetooth: hci5: link tx timeout [ 952.230730][ T5641] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 952.717737][T10906] No memory to map [ 954.311227][T10878] Bluetooth: hci5: link tx timeout [ 954.311243][T10878] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 954.329442][T10878] Bluetooth: hci5: command 0x0406 tx timeout [ 954.390907][T10878] Bluetooth: hci5: link tx timeout [ 954.955534][T10878] Bluetooth: hci5: link tx timeout [ 955.015963][T10878] Bluetooth: hci5: link tx timeout [ 955.096802][T10878] Bluetooth: hci5: link tx timeout [ 955.342226][T10878] Bluetooth: hci5: link tx timeout [ 956.317792][T10878] Bluetooth: hci5: link tx timeout [ 957.093693][T10878] Bluetooth: hci5: link tx timeout [ 957.691242][T10878] Bluetooth: hci5: link tx timeout [ 957.838845][T11119] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.13812'. [ 958.482345][T10878] Bluetooth: hci5: link tx timeout [ 960.010027][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13850'. [ 960.135647][T11216] loop8: detected capacity change from 0 to 8 [ 960.245580][T11216] Dev loop8: unable to read RDB block 8 [ 960.245629][T11216] loop8: unable to read partition table [ 960.245861][T11216] loop8: partition table beyond EOD, truncated [ 960.245899][T11216] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 961.374287][T10878] Bluetooth: hci5: link tx timeout [ 962.409505][T10878] Bluetooth: hci5: link tx timeout [ 962.631299][T10878] Bluetooth: hci5: link tx timeout [ 963.119239][ T819] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 963.319143][ T819] usb 1-1: Using ep0 maxpacket: 16 [ 963.338384][ T819] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 963.338417][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.338439][ T819] usb 1-1: Product: syz [ 963.338454][ T819] usb 1-1: Manufacturer: syz [ 963.338469][ T819] usb 1-1: SerialNumber: syz [ 963.389220][ T819] usb 1-1: config 0 descriptor?? [ 963.398673][ T819] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 963.413740][ T819] usb 1-1: Detected FT-X [ 963.575027][T10878] Bluetooth: hci5: link tx timeout [ 963.617286][ T819] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 964.468659][ T819] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 964.487135][ T819] usb 1-1: USB disconnect, device number 93 [ 964.789733][ T819] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 964.808873][ T819] ftdi_sio 1-1:0.0: device disconnected [ 965.196645][T10878] Bluetooth: hci5: link tx timeout [ 965.929485][ T38] INFO: task syz.1.11210:3166 blocked for more than 143 sec[ 965.929485][ T38] INFO: task syz.1.11210:3166 blocked for more than 143 seconds. [ 965.929513][ T38] Tainted: G L syzkaller #0 [ 965.929527][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 965.929539][ T38] task:syz.1.11210 state:D stack:25640 pid:3166 tgid:3163 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 965.929607][ T38] Call Trace: [ 965.929616][ T38] [ 965.929630][ T38] __schedule+0x1681/0x54c0 [ 965.929717][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 965.929759][ T38] ? rt_spin_lock+0x1e0/0x400 [ 965.929790][ T38] ? __pfx___schedule+0x10/0x10 [ 965.929834][ T38] ? schedule+0x90/0x360 [ 965.929872][ T38] schedule+0x164/0x360 [ 965.929909][ T38] fuse_wait_aborted+0x15b/0x250 [ 965.929943][ T38] ? __pfx_fuse_wait_aborted+0x10/0x10 [ 965.929975][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 965.930006][ T38] ? __pfx_fuse_abort_conn+0x10/0x10 [ 965.930036][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 965.930071][ T38] fuse_conn_destroy+0x1b1/0x3b0 [ 965.930109][ T38] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 965.930146][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 965.930180][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 965.930218][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 965.930242][ T38] ? lock_acquire+0x106/0x350 [ 965.930279][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 965.930311][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 965.930347][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 965.930381][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 965.930421][ T38] fuse_kill_sb_anon+0x1ef/0x270 [ 965.930452][ T38] deactivate_locked_super+0xbc/0x130 [ 965.930476][ T38] ? __pfx_fuse_fill_super+0x10/0x10 [ 965.930500][ T38] get_tree_nodev+0xd7/0x150 [ 965.930530][ T38] fuse_get_tree+0x295/0x3b0 [ 965.930559][ T38] vfs_get_tree+0x92/0x2a0 [ 965.930591][ T38] do_new_mount+0x341/0xd30 [ 965.930624][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 965.930662][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 965.930703][ T38] ? ns_capable+0x89/0xe0 [ 965.930757][ T38] ? path_mount+0x690/0x10e0 [ 965.930789][ T38] ? user_path_at+0xd4/0x160 [ 965.930832][ T38] ? user_path_at+0xd4/0x160 [ 965.930859][ T38] __se_sys_mount+0x31d/0x420 [ 965.930912][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 965.930953][ T38] ? __x64_sys_mount+0x20/0xc0 [ 965.932113][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.932145][ T38] do_syscall_64+0x15f/0xf80 [ 965.932168][ T38] ? trace_irq_disable+0x3b/0x140 [ 965.932197][ T38] ? clear_bhb_loop+0x40/0x90 [ 965.932227][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.932252][ T38] RIP: 0033:0x7f4be0e5cdd9 [ 965.932273][ T38] RSP: 002b:00007f4bdf0b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 965.932298][ T38] RAX: ffffffffffffffda RBX: 00007f4be10d5fa0 RCX: 00007f4be0e5cdd9 [ 965.932317][ T38] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 965.932332][ T38] RBP: 00007f4be0ef2d69 R08: 00002000000003c0 R09: 0000000000000000 [ 965.932348][ T38] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000000 [ 965.932362][ T38] R13: 00007f4be10d6038 R14: 00007f4be10d5fa0 R15: 00007ffcfc7cc418 [ 965.932396][ T38] [ 965.932443][ T38] [ 965.932443][ T38] Showing all locks held in the system: [ 965.932473][ T38] 1 lock held by khungtaskd/38: [ 965.932488][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 965.932571][ T38] 7 locks held by kworker/u8:12/1424: [ 965.932586][ T38] 2 locks held by kworker/u8:16/1514: [ 965.932600][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 965.932657][ T38] #1: ffffc90006d8fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 965.932737][ T38] 2 locks held by getty/5357: [ 965.932750][ T38] #0: ffff8880365be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 965.932817][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 965.932881][ T38] 3 locks held by udevd/5619: [ 965.932895][ T38] 9 locks held by syz-executor/5636: [ 965.932910][ T38] 9 locks held by syz-executor/5643: [ 965.932934][ T38] 1 lock held by syz.1.11210/3166: [ 965.932948][ T38] #0: ffff888040aa20d0 (&type->s_umount_key#100/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 965.933014][ T38] 2 locks held by kworker/u8:7/10298: [ 965.933028][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 965.933085][ T38] #1: ffffc90004167c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 965.933141][ T38] 1 lock held by syz.0.13938/11474: [ 965.933154][ T38] #0: ffff88806ebb83b0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x237/0x4f0 [ 965.933207][ T38] 1 lock held by syz.0.13938/11477: [ 965.933219][ T38] 1 lock held by syz.4.13948/11499: [ 965.933233][ T38] 5 locks held by syz.5.13951/11508: [ 965.933247][ T38] [ 965.933254][ T38] ============================================= [ 965.933254][ T38] [ 965.933272][ T38] NMI backtrace for cpu 1 [ 965.933291][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 965.933320][ T38] Tainted: [L]=SOFTLOCKUP [ 965.933328][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 965.933341][ T38] Call Trace: [ 965.933350][ T38] [ 965.933358][ T38] dump_stack_lvl+0xe8/0x150 [ 965.933387][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 965.933417][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 965.933445][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 965.933477][ T38] sys_info+0x135/0x170 [ 965.933501][ T38] watchdog+0xfd3/0x1030 [ 965.933535][ T38] ? watchdog+0x1c9/0x1030 [ 965.933571][ T38] kthread+0x388/0x470 [ 965.933603][ T38] ? __pfx_watchdog+0x10/0x10 [ 965.933626][ T38] ? __pfx_kthread+0x10/0x10 [ 965.933658][ T38] ret_from_fork+0x514/0xb70 [ 965.933687][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 965.933719][ T38] ? __switch_to+0xc79/0x1410 [ 965.933757][ T38] ? __pfx_kthread+0x10/0x10 [ 965.933788][ T38] ret_from_fork_asm+0x1a/0x30 [ 965.933845][ T38] [ 965.933872][ T38] Sending NMI from CPU 1 to CPUs 0: [ 965.933904][ C0] NMI backtrace for cpu 0 [ 965.933921][ C0] CPU: 0 UID: 0 PID: 11499 Comm: syz.4.13948 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 965.933953][ C0] Tainted: [L]=SOFTLOCKUP [ 965.933978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 965.933989][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x2a/0xa0 [ 965.934013][ C0] Code: f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 68 cb a5 10 65 44 8b 05 88 cb a5 10 41 81 e0 00 00 ff 00 ba 00 01 00 00 23 91 e4 0b 00 00 <41> 89 d1 45 09 c1 74 12 45 85 c0 75 5f 85 d2 74 5b 83 b9 b4 16 00 [ 965.934030][ C0] RSP: 0018:ffffc90005957738 EFLAGS: 00000246 [ 965.934046][ C0] RAX: ffffffff8222a187 RBX: 0000000000000174 RCX: ffff88806583dc40 [ 965.934061][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 965.934072][ C0] RBP: ffffc900059579c8 R08: 0000000000000000 R09: 0000000000000000 [ 965.934084][ C0] R10: dffffc0000000000 R11: fffff94000267649 R12: 0000000000000001 [ 965.934098][ C0] R13: dffffc0000000000 R14: ffffea000133b240 R15: 0000000000000000 [ 965.934112][ C0] FS: 0000000000000000(0000) GS:ffff88812617c000(0000) knlGS:0000000000000000 [ 965.934127][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.934140][ C0] CR2: 00007f0596ae7dac CR3: 000000002b2a4000 CR4: 00000000003526f0 [ 965.934158][ C0] Call Trace: [ 965.934165][ C0] [ 965.934172][ C0] free_pages_and_swap_cache+0x257/0x490 [ 965.934206][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 965.934234][ C0] ? free_pgd_range+0x1403/0x1470 [ 965.934277][ C0] ? __virt_addr_valid+0x13c/0x390 [ 965.934317][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 965.934347][ C0] tlb_finish_mmu+0xf9/0x230 [ 965.934373][ C0] exit_mmap+0x498/0x9e0 [ 965.934395][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 965.934414][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 965.934443][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 965.934479][ C0] ? __pfx_exit_aio+0x10/0x10 [ 965.934505][ C0] ? uprobe_clear_state+0x2bf/0x3f0 [ 965.934529][ C0] __mmput+0xcb/0x3d0 [ 965.934549][ C0] exit_mm+0x18e/0x250 [ 965.934576][ C0] do_exit+0x6a2/0x22c0 [ 965.934606][ C0] ? __pfx_do_exit+0x10/0x10 [ 965.934631][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 965.934658][ C0] ? __rcu_read_unlock+0x83/0xe0 [ 965.934685][ C0] ? rt_spin_unlock+0x160/0x200 [ 965.934711][ C0] do_group_exit+0x21b/0x2d0 [ 965.934739][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.934759][ C0] __x64_sys_exit_group+0x3f/0x40 [ 965.934785][ C0] x64_sys_call+0x221a/0x2240 [ 965.934808][ C0] do_syscall_64+0x15f/0xf80 [ 965.934825][ C0] ? trace_irq_disable+0x3b/0x140 [ 965.934849][ C0] ? clear_bhb_loop+0x40/0x90 [ 965.934873][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.934892][ C0] RIP: 0033:0x7f3fe644cdd9 [ 965.934907][ C0] Code: Unable to access opcode bytes at 0x7f3fe644cdaf. [ 965.934917][ C0] RSP: 002b:00007fffe2b18838 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 965.934936][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fe644cdd9 [ 965.934956][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 965.934968][ C0] RBP: 00007fffe2b1889c R08: 0000000000000000 R09: 00000000000927c0 [ 965.934980][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000008ee [ 965.934992][ C0] R13: 00000000000927c0 R14: 00000000000eb846 R15: 00007fffe2b188f0 [ 965.935016][ C0] [ 965.943945][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 965.944037][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 965.944121][ T38] Tainted: [L]=SOFTLOCKUP [ 965.944144][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 965.944178][ T38] Call Trace: [ 965.944206][ T38] [ 965.944228][ T38] vpanic+0x56c/0xa60 [ 965.944315][ T38] ? __pfx___schedule+0x10/0x10 [ 965.944419][ T38] ? __pfx_vpanic+0x10/0x10 [ 965.944516][ T38] panic+0xc5/0xd0 [ 965.944590][ T38] ? __pfx_panic+0x10/0x10 [ 965.944664][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 965.944774][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 965.944892][ T38] watchdog+0x102c/0x1030 [ 965.944970][ T38] ? watchdog+0x1c9/0x1030 [ 965.945055][ T38] kthread+0x388/0x470 [ 965.945140][ T38] ? __pfx_watchdog+0x10/0x10 [ 965.945197][ T38] ? __pfx_kthread+0x10/0x10 [ 965.945284][ T38] ret_from_fork+0x514/0xb70 [ 965.945359][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 965.945424][ T38] ? __switch_to+0xc79/0x1410 [ 965.945521][ T38] ? __pfx_kthread+0x10/0x10 [ 965.945608][ T38] ret_from_fork_asm+0x1a/0x30 [ 965.945725][ T38] [ 965.946352][ T38] Kernel Offset: disabled