last executing test programs: 1m57.649091978s ago: executing program 0 (id=3474): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x1}) 1m57.361786941s ago: executing program 0 (id=3479): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r0, 0x325, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x11}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x20000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m56.958714904s ago: executing program 0 (id=3484): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2932762e758a263e, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 1m56.724903029s ago: executing program 0 (id=3486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, r1, 0x1, 0x70bd25, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1m56.471104454s ago: executing program 0 (id=3490): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m56.23507716s ago: executing program 0 (id=3493): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x4) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000480)=0xfff, 0x4) 1m41.118612315s ago: executing program 32 (id=3493): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x4) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000480)=0xfff, 0x4) 51.3755699s ago: executing program 1 (id=3986): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x190) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x640901, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(r0, 0x0) 51.129042779s ago: executing program 1 (id=3990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) 50.869385895s ago: executing program 1 (id=3993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 50.727334325s ago: executing program 1 (id=3995): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000) close(r0) 49.533214491s ago: executing program 1 (id=4001): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) 49.338483124s ago: executing program 3 (id=4003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xe566c797b7515b9, 0xffff1000, 0x10, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) 48.196224931s ago: executing program 2 (id=4004): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 46.996273257s ago: executing program 4 (id=4005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 46.876930315s ago: executing program 4 (id=4006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000160e00000020c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 46.765535064s ago: executing program 4 (id=4007): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 46.349252466s ago: executing program 4 (id=4008): socketpair$unix(0x1, 0x1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) 46.227768688s ago: executing program 4 (id=4009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 46.068710566s ago: executing program 4 (id=4010): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 45.208542224s ago: executing program 1 (id=4012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080214000001080211000000505050505050"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 41.097924701s ago: executing program 2 (id=4013): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)="390000fa46560200130011186809fc071200000f0000ff3f21000000170a009ea411453cbe3bba3cc1441700e0da8979d2fc6ca9e48270faf047145bc7050b", 0x3f}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 40.873000117s ago: executing program 2 (id=4014): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) 40.324577222s ago: executing program 2 (id=4015): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 40.10520663s ago: executing program 2 (id=4016): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 39.370450407s ago: executing program 2 (id=4017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x5}, 0x8) 35.78222933s ago: executing program 5 (id=4020): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 34.916871373s ago: executing program 3 (id=4021): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' !\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x20, 0x16, 0x95, "ba5151406ac98d6d1f42e2baf4c8d9d7c957258bebe5ba97ed41d2a25735eac8675f672757bcb4eb03d4f76b336ecc7fa7b43a4a217ac682dc34fa3e7c3218dc5bc5410e5802d47485a3f9c041f2c83d83f652ba4420391b32e2e1ce34d2b4b49dd37da9e6057409c0d5ad62931f1c87a357339d35a46ee861e3b6f1aba49a5ae7f38af3c00847a50d68701bda4324f6a61f37c84d"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x6}}) 32.594524239s ago: executing program 3 (id=4022): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xffec) 30.502529045s ago: executing program 33 (id=4010): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 28.370475724s ago: executing program 34 (id=4012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080214000001080211000000505050505050"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 25.778977183s ago: executing program 5 (id=4025): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c0000005ad6723f09e2"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23.726915465s ago: executing program 35 (id=4017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x5}, 0x8) 23.533200807s ago: executing program 5 (id=4027): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r0, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1) 21.333371177s ago: executing program 5 (id=4028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210021ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 21.332878415s ago: executing program 3 (id=4029): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 21.113493861s ago: executing program 3 (id=4030): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/net\x13\r\x1a\x03\xa0\xda\xde\xe3r6\xf2\xfc\xf13\xf8X/\x00\x00u4/c+\x8dG'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 20.887501129s ago: executing program 3 (id=4031): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x80, &(0x7f00000003c0)={@broadcast, @random="f5f87bdd8ab7", @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "4a9e6c", 0x4a, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x6, 0x800, 0x101]}, {0x0, 0x0, 0x1, 0x1}, {0xca88, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xc289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 15.154261077s ago: executing program 5 (id=4032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002880)="c2", 0x1}], 0x1}, 0x4c810) 15.153791813s ago: executing program 5 (id=4033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x5, 0x8, 0x6, 0x1, 0x8, 0x5]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 5.547402614s ago: executing program 36 (id=4031): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x80, &(0x7f00000003c0)={@broadcast, @random="f5f87bdd8ab7", @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "4a9e6c", 0x4a, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x6, 0x800, 0x101]}, {0x0, 0x0, 0x1, 0x1}, {0xca88, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xc289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 0s ago: executing program 37 (id=4033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x5, 0x8, 0x6, 0x1, 0x8, 0x5]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) kernel console output (not intermixed with test programs): 70283][T11919] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 331.180305][T11925] netlink: 'syz.1.2754': attribute type 2 has an invalid length. [ 331.180327][T11925] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.2754'. [ 331.815357][T11952] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2766'. [ 331.815417][T11952] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 332.036530][T11963] tipc: Enabling of bearer rejected, media not registered [ 332.550750][T11978] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 332.830543][T11996] tipc: Enabling of bearer rejected, failed to enable media [ 333.317396][T12000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.442233][T12009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 333.789329][T12019] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 333.789471][T12019] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 333.789600][T12019] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 333.789653][T12019] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 333.791387][T12019] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 333.791443][T12019] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 333.791500][T12019] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 333.791548][T12019] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 333.791621][T12019] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 333.791672][T12019] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 333.791810][T12019] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 333.791862][T12019] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 333.796653][T12019] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 333.804873][T12000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.243362][T12000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.751986][T12000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.267867][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.366677][T12066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2820'. [ 335.390294][ T67] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.492732][ T1303] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.582909][ T57] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.843806][T12080] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2826'. [ 335.843832][T12080] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 335.994657][T12085] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2829'. [ 336.639426][T12102] tipc: Enabling of bearer rejected, failed to enable media [ 336.695554][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2839'. [ 337.375764][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 337.375781][ T37] audit: type=1800 audit(2000000076.338:87): pid=12126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2849" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 337.778629][ T5993] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 337.942653][ T5993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.942699][ T5993] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 337.942722][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.983644][ T5993] usb 5-1: config 0 descriptor?? [ 338.427737][ T5993] nintendo 0003:057E:200E.003B: unbalanced delimiter at end of report description [ 338.440861][ T5993] nintendo 0003:057E:200E.003B: HID parse failed [ 338.441618][ T5993] nintendo 0003:057E:200E.003B: probe - fail = -22 [ 338.441722][ T5993] nintendo 0003:057E:200E.003B: probe with driver nintendo failed with error -22 [ 338.605772][ T44] usb 5-1: USB disconnect, device number 23 [ 339.099747][T12178] netlink: 'syz.2.2872': attribute type 11 has an invalid length. [ 339.099767][T12178] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2872'. [ 339.612685][T12193] netlink: 'syz.0.2880': attribute type 2 has an invalid length. [ 339.941011][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.002695][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.002843][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.002979][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.003112][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.003242][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.003401][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.003559][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.003690][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.003823][T12206] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 340.479543][T12215] tipc: Can't bind to reserved service type 2 [ 340.747183][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 340.747207][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'. [ 340.989726][T12226] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.057685][T12226] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.428751][T12236] netlink: 'syz.2.2902': attribute type 1 has an invalid length. [ 341.428774][T12236] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2902'. [ 341.665784][T12247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2906'. [ 341.767204][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 341.767242][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 342.509007][ T5920] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 342.666450][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 342.681507][ T5920] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 342.681537][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 342.681555][ T5920] usb 3-1: Product: syz [ 342.681568][ T5920] usb 3-1: SerialNumber: syz [ 342.720486][ T5920] usb 3-1: config 0 descriptor?? [ 342.742108][ T5920] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 342.758889][ T5920] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 342.759432][ T5920] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 342.759531][ T5920] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 342.944380][ T5920] usb 3-1: USB disconnect, device number 26 [ 343.725648][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'. [ 343.725673][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'. [ 344.197214][T12332] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 344.197271][T12332] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 344.197323][T12332] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 344.197368][T12332] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 344.197415][T12332] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 344.197463][T12332] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 344.197510][T12332] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 344.197666][T12332] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 344.197840][T12332] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 344.197890][T12332] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 344.197934][T12332] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 344.197980][T12332] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 344.198027][T12332] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 344.198074][T12332] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 344.198172][T12332] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 344.198224][T12332] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 344.198268][T12332] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 344.222988][T12332] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 344.223048][T12332] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 344.223095][T12332] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 344.223140][T12332] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 344.223222][T12332] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 344.223269][T12332] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 344.223408][T12332] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 344.223453][T12332] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 345.129203][ T5913] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 345.289032][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 345.310045][ T5913] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 345.310075][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.310095][ T5913] usb 3-1: Product: syz [ 345.310107][ T5913] usb 3-1: Manufacturer: syz [ 345.310121][ T5913] usb 3-1: SerialNumber: syz [ 345.338636][ T5913] usb 3-1: config 0 descriptor?? [ 345.681355][T12377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2969'. [ 345.718521][ T5920] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 345.775046][ T5913] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 345.775072][ T5913] airspy 3-1:0.0: Could not detect board [ 345.775183][ T5913] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 345.814322][ T5913] usb 3-1: USB disconnect, device number 27 [ 345.881357][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.881385][ T5920] usb 2-1: config 0 has no interface number 0 [ 345.884220][ T5920] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 345.884250][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.884270][ T5920] usb 2-1: Product: syz [ 345.884283][ T5920] usb 2-1: Manufacturer: syz [ 345.884297][ T5920] usb 2-1: SerialNumber: syz [ 345.951405][ T5920] usb 2-1: config 0 descriptor?? [ 346.193117][ T5920] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 346.214483][ T5920] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 346.214913][ T5920] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 346.214981][ T5920] usb 2-1: media controller created [ 346.296528][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.436864][T12392] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2976'. [ 346.638616][ T5920] usb 2-1: USB disconnect, device number 31 [ 346.691542][T12400] Invalid logical block size (8192) [ 346.738522][ T44] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 346.897366][ T44] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 346.897393][ T44] usb 3-1: config 0 has no interface number 0 [ 346.897464][ T44] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 346.897504][ T44] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 346.897531][ T44] usb 3-1: config 0 interface 255 has no altsetting 0 [ 346.897565][ T44] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 346.897587][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.980015][ T44] usb 3-1: config 0 descriptor?? [ 346.996446][ T44] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 347.008734][ T5223] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 347.162938][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 347.162975][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 347.163018][ T5223] usb 4-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 347.163042][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.178337][T12414] net_ratelimit: 2807 callbacks suppressed [ 347.178867][T12414] openvswitch: netlink: IP tunnel TTL not specified. [ 347.231149][ T5993] usb 3-1: USB disconnect, device number 28 [ 347.238646][ T5223] usb 4-1: config 0 descriptor?? [ 347.254913][T12402] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 347.381184][ T37] audit: type=1326 audit(2000000086.348:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12415 comm="syz.1.2987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a6c87eec9 code=0x0 [ 347.677290][ T5223] lenovo 0003:17EF:60FE.003C: unknown main item tag 0x0 [ 347.690595][ T5223] lenovo 0003:17EF:60FE.003C: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.3-1/input0 [ 347.899340][ T5223] usb 4-1: USB disconnect, device number 26 [ 349.298568][ T5223] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 349.458090][ T5223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.458116][ T5223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.483227][ T5223] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.483257][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.483276][ T5223] usb 4-1: SerialNumber: syz [ 349.658558][ T5913] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 349.743480][ T5223] usb 4-1: 0:2 : does not exist [ 349.805157][ T5223] usb 4-1: USB disconnect, device number 27 [ 349.842170][ T5913] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 349.842198][ T5913] usb 5-1: config 0 has no interface number 0 [ 349.842233][ T5913] usb 5-1: config 0 interface 62 has no altsetting 0 [ 349.846330][ T5913] usb 5-1: New USB device found, idVendor=2584, idProduct=4a8f, bcdDevice=a4.2c [ 349.846356][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.846375][ T5913] usb 5-1: Product: syz [ 349.846386][ T5913] usb 5-1: Manufacturer: syz [ 349.846399][ T5913] usb 5-1: SerialNumber: syz [ 349.920308][ T5913] usb 5-1: config 0 descriptor?? [ 350.015957][ T9200] udevd[9200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.101406][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3020'. [ 350.182260][ T5913] usb-storage 5-1:0.62: USB Mass Storage device detected [ 350.357346][ T5913] usb 5-1: USB disconnect, device number 24 [ 350.869052][ T5223] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 350.869564][T12508] usb usb8: usbfs: process 12508 (syz.4.3030) did not claim interface 0 before use [ 351.019917][ T5223] usb 4-1: Using ep0 maxpacket: 8 [ 351.036759][ T5223] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 351.036812][ T5223] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 351.036890][ T5223] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.036926][ T5223] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 351.036949][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.096351][ T5223] usb 4-1: config 0 descriptor?? [ 351.610757][ T5223] elecom 0003:056E:011C.003D: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.3-1/input0 [ 351.738609][ T5993] usb 4-1: USB disconnect, device number 28 [ 351.856438][T12536] netlink: 'syz.0.3043': attribute type 18 has an invalid length. [ 351.987696][T12529] fido_id[12529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 352.190701][ T5913] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 352.339464][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 352.344021][ T5913] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 352.344050][ T5913] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.344074][ T5913] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.344098][ T5913] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.344120][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.355719][ T5913] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 352.355749][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.355768][ T5913] usb 5-1: Product: syz [ 352.355781][ T5913] usb 5-1: Manufacturer: syz [ 352.355794][ T5913] usb 5-1: SerialNumber: syz [ 352.374106][ T5913] usb 5-1: config 0 descriptor?? [ 352.635859][ T5913] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input31 [ 352.651062][ T5192] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 352.830631][T12541] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 352.917867][ T5192] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 353.020716][ T5192] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 353.032617][ T5913] usb 5-1: USB disconnect, device number 25 [ 353.058721][ T37] audit: type=1326 audit(2000000092.028:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 353.062020][ T37] audit: type=1326 audit(2000000092.028:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 353.062375][ T37] audit: type=1326 audit(2000000092.028:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 353.062813][ T37] audit: type=1326 audit(2000000092.028:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 353.063061][ T37] audit: type=1326 audit(2000000092.028:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 353.063655][ T37] audit: type=1326 audit(2000000092.028:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 353.064616][ T37] audit: type=1326 audit(2000000092.028:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 353.064860][ T37] audit: type=1326 audit(2000000092.028:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12564 comm="syz.2.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 354.144049][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144083][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144109][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144133][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144157][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144182][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144206][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144230][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144255][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.144279][ T44] hid-generic 0002:0004:0007.003E: unknown main item tag 0x0 [ 354.278975][ T44] hid-generic 0002:0004:0007.003E: hidraw0: HID v0.04 Device [syz0] on syz0 [ 354.349326][T12595] rdma_op ffff88805b58da70 conn xmit_rdma 0000000000000000 [ 354.358897][ T5993] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 354.514246][ T5993] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.514273][ T5993] usb 4-1: config 0 has no interface number 0 [ 354.514326][ T5993] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 354.514350][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.530592][ T5993] usb 4-1: config 0 descriptor?? [ 354.537713][ T5993] usb 4-1: selecting invalid altsetting 1 [ 354.552450][ T5993] dvb_ttusb_budget: ttusb_init_controller: error [ 354.552468][ T5993] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 354.589657][T12596] fido_id[12596]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 354.842483][ T5993] DVB: Unable to find symbol cx22700_attach() [ 354.964700][ T5993] DVB: Unable to find symbol tda10046_attach() [ 354.964712][ T5993] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 354.985501][ T5993] usb 4-1: USB disconnect, device number 29 [ 355.186523][T12614] devpts: Bad value for 'max' [ 355.257706][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3080'. [ 355.662508][T12626] netlink: 'syz.2.3084': attribute type 3 has an invalid length. [ 355.662530][T12626] netlink: 'syz.2.3084': attribute type 1 has an invalid length. [ 355.662543][T12626] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3084'. [ 355.769779][T12630] comedi: No check for data length of config insn id 1003 is implemented [ 355.769798][T12630] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 355.769810][T12630] comedi: Assuming n=15 is correct [ 355.808674][T12628] netlink: 'syz.3.3085': attribute type 1 has an invalid length. [ 355.808696][T12628] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3085'. [ 355.808710][T12628] netlink: 'syz.3.3085': attribute type 1 has an invalid length. [ 356.338208][T12649] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3094'. [ 357.182946][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.272181][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.272319][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.272446][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.272583][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.272713][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.272842][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.272971][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.273098][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.273226][T12679] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 357.312194][T12681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3110'. [ 361.601710][ T5993] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 361.749990][ T5993] usb 4-1: Using ep0 maxpacket: 32 [ 361.752348][ T5993] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 361.752372][ T5993] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 361.752390][ T5993] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 361.752445][ T5993] usb 4-1: config 5 interface 0 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 361.752469][ T5993] usb 4-1: config 5 interface 0 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 361.752491][ T5993] usb 4-1: config 5 interface 0 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 361.752572][ T5993] usb 4-1: config 5 interface 0 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 361.752595][ T5993] usb 4-1: config 5 interface 0 has no altsetting 0 [ 361.756303][ T5993] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=9f.21 [ 361.756339][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.756359][ T5993] usb 4-1: Product: syz [ 361.756374][ T5993] usb 4-1: Manufacturer: syz [ 361.756388][ T5993] usb 4-1: SerialNumber: syz [ 362.048652][ T5913] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 362.073431][ T5993] usb 4-1: USB disconnect, device number 30 [ 362.208765][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 362.211864][ T5913] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 362.216604][ T5913] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 362.216633][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.216652][ T5913] usb 5-1: Product: syz [ 362.216666][ T5913] usb 5-1: Manufacturer: syz [ 362.216679][ T5913] usb 5-1: SerialNumber: syz [ 362.274912][ T5913] usb 5-1: config 0 descriptor?? [ 362.333458][ T5913] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 362.333524][ T5913] usb 5-1: setting power ON [ 362.372868][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 362.412848][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.416568][ T5913] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 362.416625][ T5913] usb 5-1: media controller created [ 362.466997][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3159'. [ 362.467040][T12794] netlink: 'syz.2.3159': attribute type 8 has an invalid length. [ 362.553155][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.594028][T12782] dvb-usb: bulk message failed: -22 (3/0) [ 362.787122][ T5913] usb 5-1: selecting invalid altsetting 6 [ 362.787148][ T5913] usb 5-1: digital interface selection failed (-22) [ 362.787164][ T5913] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 362.790718][ T5913] usb 5-1: setting power OFF [ 362.791727][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 362.791748][ T5913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 362.791761][ T5913] (NULL device *): no alternate interface [ 363.032942][ T37] audit: type=1326 audit(2000000101.998:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12808 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac07feec9 code=0x7ffc0000 [ 363.033067][ T37] audit: type=1326 audit(2000000101.998:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12808 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac07feec9 code=0x7ffc0000 [ 363.053627][ T5913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 363.076553][ T37] audit: type=1326 audit(2000000102.018:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12808 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ac07feec9 code=0x7ffc0000 [ 363.076607][ T37] audit: type=1326 audit(2000000102.018:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12808 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac07feec9 code=0x7ffc0000 [ 363.076646][ T37] audit: type=1326 audit(2000000102.018:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12808 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac07feec9 code=0x7ffc0000 [ 363.076684][ T37] audit: type=1326 audit(2000000102.018:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12808 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f0ac07feec9 code=0x7ffc0000 [ 363.076722][ T37] audit: type=1326 audit(2000000102.018:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12808 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac07feec9 code=0x7ffc0000 [ 363.076760][ T37] audit: type=1326 audit(2000000102.018:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12808 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac07feec9 code=0x7ffc0000 [ 363.127399][ T5913] usb 5-1: USB disconnect, device number 26 [ 363.831765][T12833] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 363.831765][T12833] [ 364.838612][ T5913] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 365.018630][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 365.022161][ T5913] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 365.022189][ T5913] usb 3-1: config 0 has an invalid interface number: 150 but max is 64 [ 365.022210][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.022229][ T5913] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 365.022249][ T5913] usb 3-1: config 0 has no interface number 0 [ 365.022314][ T5913] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.022341][ T5913] usb 3-1: config 0 interface 150 has no altsetting 0 [ 365.022375][ T5913] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 365.022397][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.034123][ T5913] usb 3-1: config 0 descriptor?? [ 365.212460][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 365.212500][T12873] net_ratelimit: 6968 callbacks suppressed [ 365.212512][T12873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.407743][T12879] netlink: 'syz.4.3193': attribute type 5 has an invalid length. [ 365.493339][ T5223] usb 3-1: USB disconnect, device number 29 [ 365.579274][ T9200] udevd[9200]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.778521][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 365.940675][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 365.946376][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 365.946406][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.946426][ T9] usb 4-1: Product: syz [ 365.946437][ T9] usb 4-1: Manufacturer: syz [ 365.946451][ T9] usb 4-1: SerialNumber: syz [ 365.970492][ T9] usb 4-1: config 0 descriptor?? [ 366.225029][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 366.625838][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 366.654875][ T9] usb 4-1: USB disconnect, device number 31 [ 367.253843][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 367.398560][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 367.403126][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 367.408885][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 367.408907][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 367.408925][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.450851][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.450880][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.450899][ T9] usb 3-1: Product: syz [ 367.450913][ T9] usb 3-1: Manufacturer: syz [ 367.450926][ T9] usb 3-1: SerialNumber: syz [ 367.568804][ T5913] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 367.754887][ T5913] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 367.754974][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.754996][ T5913] usb 4-1: Product: syz [ 367.755010][ T5913] usb 4-1: Manufacturer: syz [ 367.755024][ T5913] usb 4-1: SerialNumber: syz [ 367.834369][ T5913] usb 4-1: config 0 descriptor?? [ 367.887402][ T5913] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 367.948186][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.952740][ T5913] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 367.952802][ T5913] usb 4-1: media controller created [ 367.983492][T12950] binder_alloc: binder_alloc_mmap_handler: 12949 200000ffc000-200001000000 already mapped failed -16 [ 368.058888][T12935] dvb-usb: bulk message failed: -22 (7/0) [ 368.133403][ T9] usb 3-1: 0:2 : does not exist [ 368.206224][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.258398][ T9] usb 3-1: USB disconnect, device number 30 [ 368.479285][ T9200] udevd[9200]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.516038][ T5913] DVB: Unable to find symbol mt352_attach() [ 368.702291][ T5913] DVB: Unable to find symbol nxt6000_attach() [ 368.702306][ T5913] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 368.766450][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 368.797096][ T5913] dvb-usb: schedule remote query interval to 1000 msecs. [ 368.797116][ T5913] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 368.797131][ T5913] dvb-usb: bulk message failed: -22 (7/0) [ 368.797147][ T5913] dvb-usb: bulk message failed: -22 (7/0) [ 368.819571][ T5913] usb 4-1: USB disconnect, device number 32 [ 368.883226][T12977] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3236'. [ 368.883297][T12977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3236'. [ 368.883310][T12977] tipc: Invalid UDP bearer configuration [ 368.883350][T12977] tipc: Enabling of bearer rejected, failed to enable media [ 368.898624][T12975] [U] V3Fپ"S/4:XTZWTLW= [ 368.922938][T12975] [U] J"E:" [ 369.006824][T12979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3237'. [ 369.142595][ T5913] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 369.669612][T12999] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 369.669669][T12999] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 369.669718][T12999] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 369.669769][T12999] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 369.669820][T12999] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 369.669872][T12999] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 369.669920][T12999] comedi comedi3: 8255: I/O port conflict (0x11,4) [ 369.669968][T12999] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 369.670016][T12999] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 369.670069][T12999] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 369.670142][T12999] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 369.670194][T12999] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 369.670242][T12999] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 369.670289][T12999] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 369.670385][T12999] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 369.670434][T12999] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 369.670482][T12999] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 369.670533][T12999] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 369.670660][T12999] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 369.670754][T12999] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 369.670801][T12999] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 369.670891][T12999] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 369.670942][T12999] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 370.248624][ T5920] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 370.408167][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.408187][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.408208][ T5920] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 370.408220][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.428136][ T5920] usb 4-1: config 0 descriptor?? [ 370.818720][ T5913] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 370.889600][ T5920] lenovo 0003:17EF:6067.003F: item fetching failed at offset 0/2 [ 370.890423][ T5920] lenovo 0003:17EF:6067.003F: hid_parse failed [ 370.890492][ T5920] lenovo 0003:17EF:6067.003F: probe with driver lenovo failed with error -22 [ 370.971139][ T5913] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.971172][ T5913] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 370.971198][ T5913] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 370.971224][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 370.971256][ T5913] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 370.971280][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.014801][ T5913] usb 5-1: config 0 descriptor?? [ 371.059661][T13025] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 371.111512][ T5920] usb 4-1: USB disconnect, device number 33 [ 371.511576][ T5913] vrc2 0003:07C0:1125.0040: fixing up VRC-2 report descriptor [ 371.539165][ T5913] input: HID 07c0:1125 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:07C0:1125.0040/input/input33 [ 371.668934][ T5913] vrc2 0003:07C0:1125.0040: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.4-1/input0 [ 371.791666][ T5913] usb 5-1: USB disconnect, device number 27 [ 372.180483][T13062] comedi comedi0: Minor 3 specified more than once! [ 372.215658][T13063] lo speed is unknown, defaulting to 1000 [ 372.216529][T13063] lo speed is unknown, defaulting to 1000 [ 372.231345][T13063] lo speed is unknown, defaulting to 1000 [ 372.284514][T13057] fido_id[13057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 372.336407][T13063] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 372.453387][T13063] lo speed is unknown, defaulting to 1000 [ 372.468628][T13063] lo speed is unknown, defaulting to 1000 [ 372.491927][T13063] lo speed is unknown, defaulting to 1000 [ 372.495261][T13063] lo speed is unknown, defaulting to 1000 [ 372.519138][T13063] lo speed is unknown, defaulting to 1000 [ 372.674555][ T5920] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 372.841756][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.841814][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.841925][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.841966][ T5920] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 372.841988][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.941820][ T5920] usb 4-1: config 0 descriptor?? [ 373.248621][ T44] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 373.279748][ T37] audit: type=1326 audit(2000000112.248:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 373.290664][ T37] audit: type=1326 audit(2000000112.258:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 373.298653][ T37] audit: type=1326 audit(2000000112.258:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 373.302735][ T37] audit: type=1326 audit(2000000112.268:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 373.302784][ T37] audit: type=1326 audit(2000000112.268:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 373.303037][ T37] audit: type=1326 audit(2000000112.268:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 373.308034][ T37] audit: type=1326 audit(2000000112.268:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.2.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 373.468897][ T5920] wacom 0003:056A:0010.0041: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 373.474822][ T5920] wacom 0003:056A:0010.0041: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 373.488531][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 373.512591][ T44] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 373.512617][ T44] usb 5-1: config 0 has no interface number 0 [ 373.512664][ T44] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.515847][ T44] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 373.515875][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.515899][ T44] usb 5-1: Product: syz [ 373.515913][ T44] usb 5-1: Manufacturer: syz [ 373.515928][ T44] usb 5-1: SerialNumber: syz [ 373.588831][ T5920] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0041/input/input34 [ 373.628674][ T44] usb 5-1: config 0 descriptor?? [ 373.638247][ T44] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 373.638283][ T44] em28xx 5-1:0.132: Video interface 132 found: [ 373.720551][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 373.790210][ T5920] usb 4-1: USB disconnect, device number 34 [ 373.833129][T13095] fido_id[13095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 373.875110][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 373.875161][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 373.875183][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.932574][ T10] usb 2-1: config 0 descriptor?? [ 374.083603][ T44] em28xx 5-1:0.132: chip ID is em2800 [ 374.407660][ T44] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 374.407692][ T44] em28xx 5-1:0.132: board has no eeprom [ 374.458946][ T44] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 374.458985][ T44] em28xx 5-1:0.132: analog set to bulk mode. [ 374.460787][ T5920] em28xx 5-1:0.132: Registering V4L2 extension [ 374.501205][ T44] usb 5-1: USB disconnect, device number 28 [ 374.503456][ T44] em28xx 5-1:0.132: Disconnecting em28xx [ 374.509010][ T10] logitech 0003:046D:C626.0042: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.1-1/input0 [ 374.579828][T13110] futex_wake_op: syz.3.3297 tries to shift op by 32; fix this program [ 374.677442][ T5913] usb 2-1: USB disconnect, device number 32 [ 374.690493][ T6127] udevd[6127]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 374.690808][ T6127] udevd[6127]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 375.099266][ T5920] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 375.099289][ T5920] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 375.099301][ T5920] em28xx 5-1:0.132: No AC97 audio processor [ 375.240669][ T5920] usb 5-1: Decoder not found [ 375.240690][ T5920] em28xx 5-1:0.132: failed to create media graph [ 375.240749][ T5920] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 375.307010][ T5920] em28xx 5-1:0.132: Remote control support is not available for this card. [ 375.307894][ T44] em28xx 5-1:0.132: Closing input extension [ 375.457590][ T44] em28xx 5-1:0.132: Freeing device [ 376.630761][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3319'. [ 377.020417][T13177] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3326'. [ 377.020439][T13177] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3326'. [ 377.194772][T13181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3327'. [ 377.194792][T13181] tipc: Invalid UDP bearer configuration [ 377.194835][T13181] tipc: Enabling of bearer rejected, failed to enable media [ 377.516251][T13191] pimreg: entered allmulticast mode [ 377.517179][T13195] tipc: Started in network mode [ 377.517212][T13195] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 377.517416][T13195] tipc: Enabled bearer , priority 0 [ 377.528486][T13196] pimreg: left allmulticast mode [ 377.738644][ T5913] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 377.888743][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 377.908698][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.908730][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.908767][ T5913] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 377.908789][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.940443][ T5913] usb 4-1: config 0 descriptor?? [ 378.407168][ T5913] koneplus 0003:1E7D:2D51.0043: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 378.508570][ T9] tipc: Node number set to 11578026 [ 378.575139][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.618519][ T5913] koneplus 0003:1E7D:2D51.0043: couldn't init struct koneplus_device [ 378.618574][ T5913] koneplus 0003:1E7D:2D51.0043: couldn't install mouse [ 378.632156][ T5913] koneplus 0003:1E7D:2D51.0043: probe with driver koneplus failed with error -71 [ 378.662507][ T5913] usb 4-1: USB disconnect, device number 35 [ 378.978843][ T5920] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 379.128780][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 379.131165][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 379.131214][ T5920] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 379.131238][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.180042][ T5920] usb 3-1: config 0 descriptor?? [ 379.414017][T13243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3356'. [ 379.657719][ T5920] uclogic 0003:5543:0781.0044: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 [ 379.808767][ T5913] usb 3-1: USB disconnect, device number 31 [ 379.864305][T13252] fido_id[13252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 381.308632][ T5920] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 381.461570][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 381.464328][ T5920] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 381.464354][ T5920] usb 3-1: config 0 has no interface number 0 [ 381.468905][T13300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3383'. [ 381.501567][ T5920] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 381.501596][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.501614][ T5920] usb 3-1: Product: syz [ 381.501628][ T5920] usb 3-1: Manufacturer: syz [ 381.501651][ T5920] usb 3-1: SerialNumber: syz [ 381.510382][T13300] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 381.565260][ T5920] usb 3-1: config 0 descriptor?? [ 381.576300][ T5920] smsc95xx v2.0.0 [ 381.576318][ T5920] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 381.576600][ T5920] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 381.791950][ T10] usb 3-1: USB disconnect, device number 32 [ 381.929263][ T5920] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 382.107744][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.107796][ T5920] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 382.107819][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.137365][T13320] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3393'. [ 382.156406][ T5920] usb 4-1: config 0 descriptor?? [ 382.591492][ T5920] asus 0003:0B05:17E0.0045: item fetching failed at offset 2/5 [ 382.592359][ T5920] asus 0003:0B05:17E0.0045: Asus hid parse failed: -22 [ 382.592461][ T5920] asus 0003:0B05:17E0.0045: probe with driver asus failed with error -22 [ 382.794721][ T5920] usb 4-1: USB disconnect, device number 36 [ 382.819948][ T37] audit: type=1326 audit(2000000121.788:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13336 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 382.820055][ T37] audit: type=1326 audit(2000000121.788:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13336 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 382.838025][ T37] audit: type=1326 audit(2000000121.798:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13336 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 382.838416][ T37] audit: type=1326 audit(2000000121.798:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13336 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 382.838461][ T37] audit: type=1326 audit(2000000121.798:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13336 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 382.844071][ T37] audit: type=1326 audit(2000000121.808:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13336 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 382.844123][ T37] audit: type=1326 audit(2000000121.808:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13336 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 382.844164][ T37] audit: type=1326 audit(2000000121.808:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13336 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 383.738750][ T5920] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 383.901455][ T5920] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 383.901482][ T5920] usb 5-1: config 0 has no interface number 0 [ 383.901513][ T5920] usb 5-1: config 0 interface 128 has no altsetting 0 [ 383.904112][ T5920] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 383.904140][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.904161][ T5920] usb 5-1: Product: syz [ 383.904174][ T5920] usb 5-1: Manufacturer: syz [ 383.904187][ T5920] usb 5-1: SerialNumber: syz [ 383.927877][ T5920] usb 5-1: config 0 descriptor?? [ 383.941417][ T5920] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 383.941505][ T5920] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 383.941992][ T5920] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 384.161047][ T5913] usb 5-1: USB disconnect, device number 29 [ 384.539113][T13384] autofs: Bad value for 'fd' [ 384.932972][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3428'. [ 385.336811][T13407] vivid-003: disconnect [ 385.377484][T13402] vivid-003: reconnect [ 385.800242][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3440'. [ 385.887604][T13423] IPVS: Error connecting to the multicast addr [ 386.279613][T13442] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 386.284827][T13442] VFS: Can't find a romfs filesystem on dev nullb0. [ 386.284827][T13442] [ 387.919933][T13501] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3477'. [ 388.533137][T13517] mkiss: ax0: crc mode is auto. [ 388.684499][T13524] netlink: 'syz.3.3487': attribute type 4 has an invalid length. [ 388.684523][T13524] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3487'. [ 389.251770][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3494'. [ 390.019311][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'. [ 390.988865][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'. [ 391.015964][T13578] dummy0: entered promiscuous mode [ 391.079846][T13578] dummy0: left promiscuous mode [ 391.698989][T13594] netlink: 'syz.2.3522': attribute type 41 has an invalid length. [ 392.568614][ T5920] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 392.721375][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.721408][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.721431][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.721471][ T5920] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 392.721493][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.728602][ T44] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 392.808945][ T5920] usb 2-1: config 0 descriptor?? [ 392.878854][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 392.883786][ T44] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 392.883813][ T44] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 392.883832][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 392.883851][ T44] usb 3-1: config 1 has no interface number 0 [ 392.885076][ T44] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.885104][ T44] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 392.885147][ T44] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 392.885237][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.004489][ T44] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 393.220081][ T44] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 393.363587][ T5920] chicony 0003:04F2:1236.0046: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 393.422274][ T10] usb 2-1: USB disconnect, device number 33 [ 393.618260][ T5913] usb 3-1: USB disconnect, device number 33 [ 393.620974][ T5913] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 393.742340][T13620] fido_id[13620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 394.314094][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3541'. [ 394.314171][T13639] tipc: Started in network mode [ 394.314193][T13639] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 394.314245][T13639] tipc: Enabling of bearer rejected, failed to enable media [ 394.368482][ T991] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 394.518884][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 394.524308][ T991] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 394.524341][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.524364][ T991] usb 2-1: Product: syz [ 394.524378][ T991] usb 2-1: Manufacturer: syz [ 394.524392][ T991] usb 2-1: SerialNumber: syz [ 394.582313][ T991] usb 2-1: config 0 descriptor?? [ 394.587570][ T991] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 394.681965][T13649] gtp0: entered promiscuous mode [ 394.824057][ T10] usb 2-1: USB disconnect, device number 34 [ 395.886045][T13675] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 396.321649][T13688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3563'. [ 396.860005][T13703] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3570'. [ 397.224552][T13718] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 397.508776][T13729] ucma_write: process 1549 (syz.1.3581) changed security contexts after opening file descriptor, this is not allowed. [ 398.005104][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'. [ 398.101253][T13742] veth0_macvtap: left promiscuous mode [ 398.938856][T13753] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 399.000817][T13756] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3595'. [ 399.524074][T13769] netlink: 'syz.1.3601': attribute type 1 has an invalid length. [ 399.524096][T13769] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3601'. [ 401.587218][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3622'. [ 401.630808][T13816] netlink: 'syz.2.3623': attribute type 4 has an invalid length. [ 402.668739][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'. [ 402.673024][T13846] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.673480][T13846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.101725][ T44] kernel write not supported for file /1597/attr/prev (pid: 44 comm: kworker/1:1) [ 404.110605][T13886] input: syz0 as /devices/virtual/input/input37 [ 404.282310][T13891] program syz.4.3657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.882931][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.045889][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.053722][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.056288][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.057480][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.058218][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.818919][ T5842] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 407.028037][T13946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3681'. [ 407.335362][ T1303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.478639][T13930] lo speed is unknown, defaulting to 1000 [ 407.796343][T13972] ./file0: Can't open blockdev [ 407.853023][ T1303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.168674][ T5842] Bluetooth: hci0: command tx timeout [ 408.193393][ T1303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.219004][ T5920] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 408.378099][ T5920] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 408.378127][ T5920] usb 5-1: config 7 has no interface number 0 [ 408.393957][ T5920] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 408.393989][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.394009][ T5920] usb 5-1: Product: syz [ 408.394023][ T5920] usb 5-1: Manufacturer: syz [ 408.394037][ T5920] usb 5-1: SerialNumber: syz [ 408.770153][ T1303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.164134][T13992] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3701'. [ 409.164160][T13992] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 409.268323][ T5920] as10x_usb: device has been detected [ 409.269664][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 409.381534][ T5920] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 409.775877][ T5920] as10x_usb: error during firmware upload part1 [ 409.776603][ T5920] Registered device Elgato EyeTV DTT Deluxe [ 409.858800][ T5920] usb 5-1: USB disconnect, device number 30 [ 410.018177][T13930] chnl_net:caif_netlink_parms(): no params data found [ 410.135078][T14007] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.180554][ T5920] Unregistered device Elgato EyeTV DTT Deluxe [ 410.208917][ T5920] as10x_usb: device has been disconnected [ 410.248988][ T5842] Bluetooth: hci0: command tx timeout [ 410.658788][ T1303] bridge_slave_1: left allmulticast mode [ 410.658975][ T1303] bridge_slave_1: left promiscuous mode [ 410.662973][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.921908][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3720'. [ 411.921944][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3720'. [ 412.337719][ T5842] Bluetooth: hci0: command tx timeout [ 412.827530][ T1303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.899556][ T1303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.969593][ T1303] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 413.018994][ T1303] bond0 (unregistering): Released all slaves [ 413.109118][T14039] tap0: tun_chr_ioctl cmd 2148553947 [ 413.184714][T14045] blktrace: Concurrent blktraces are not allowed on sg0 [ 413.558864][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.559551][ T1303] tipc: Disabling bearer [ 413.641924][ T1303] tipc: Left network mode [ 413.668534][ T5913] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 413.741044][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 413.789292][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.820198][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.820216][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.820238][ T5913] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 413.820250][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.823532][ T5913] usb 2-1: config 0 descriptor?? [ 413.888729][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 413.904657][ T10] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 413.904686][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.904706][ T10] usb 5-1: Product: syz [ 413.904718][ T10] usb 5-1: Manufacturer: syz [ 413.904732][ T10] usb 5-1: SerialNumber: syz [ 413.928571][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 413.957904][ T10] usb 5-1: config 0 descriptor?? [ 413.992672][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 414.098685][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 414.105029][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 414.105056][ T9] usb 3-1: config 0 has no interface number 0 [ 414.112486][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 414.112891][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.112912][ T9] usb 3-1: Product: syz [ 414.112925][ T9] usb 3-1: Manufacturer: syz [ 414.112939][ T9] usb 3-1: SerialNumber: syz [ 414.139614][ T9] usb 3-1: config 0 descriptor?? [ 414.163364][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 414.258536][T13930] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.258713][T13930] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.258925][T13930] bridge_slave_0: entered allmulticast mode [ 414.264980][T13930] bridge_slave_0: entered promiscuous mode [ 414.295887][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.313013][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.313306][T13930] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.313458][T13930] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.338308][ T5913] cp2112 0003:10C4:EA90.0047: item fetching failed at offset 5/7 [ 414.338511][T13930] bridge_slave_1: entered allmulticast mode [ 414.352338][ T5913] cp2112 0003:10C4:EA90.0047: parse failed [ 414.352534][ T5913] cp2112 0003:10C4:EA90.0047: probe with driver cp2112 failed with error -22 [ 414.403296][T13930] bridge_slave_1: entered promiscuous mode [ 414.421560][ T5842] Bluetooth: hci0: command tx timeout [ 414.425754][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 414.457522][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 414.559499][ T5920] usb 2-1: USB disconnect, device number 35 [ 414.789351][ T10] gspca_stk1135: reg_w 0x5 err -71 [ 414.790629][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 414.790642][ T10] gspca_stk1135: Sensor write failed [ 414.790670][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 414.790679][ T10] gspca_stk1135: Sensor write failed [ 414.791085][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 414.791097][ T10] gspca_stk1135: Sensor read failed [ 414.791157][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 414.791166][ T10] gspca_stk1135: Sensor read failed [ 414.791547][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 414.791588][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 414.791597][ T10] gspca_stk1135: Sensor read failed [ 414.791626][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 414.791634][ T10] gspca_stk1135: Sensor read failed [ 414.792040][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 414.792051][ T10] gspca_stk1135: Sensor write failed [ 414.792089][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 414.792098][ T10] gspca_stk1135: Sensor write failed [ 414.792578][ T10] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 414.841922][ T10] usb 5-1: USB disconnect, device number 31 [ 414.882532][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 414.883191][ T9] usb 3-1: USB disconnect, device number 34 [ 414.931770][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 414.961514][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 414.968210][ T9] quatech2 3-1:0.51: device disconnected [ 415.738914][T13930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.765810][T13930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.252471][ T1303] hsr_slave_0: left promiscuous mode [ 416.310156][ T1303] hsr_slave_1: left promiscuous mode [ 416.313364][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.313440][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.377370][ T1303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.377401][ T1303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.495710][ T1303] veth1_macvtap: left promiscuous mode [ 416.495957][ T1303] veth0_macvtap: left promiscuous mode [ 416.496279][ T1303] veth1_vlan: left promiscuous mode [ 416.496480][ T1303] veth0_vlan: left promiscuous mode [ 416.624648][T14099] sctp: [Deprecated]: syz.4.3746 (pid 14099) Use of int in max_burst socket option. [ 416.624648][T14099] Use struct sctp_assoc_value instead [ 417.061621][T14104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3748'. [ 419.119117][ T1303] team0 (unregistering): Port device team_slave_1 removed [ 419.349195][ T1303] team0 (unregistering): Port device team_slave_0 removed [ 421.912986][T13930] team0: Port device team_slave_0 added [ 421.957511][T14104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3748'. [ 421.980542][ T5920] lo speed is unknown, defaulting to 1000 [ 421.980567][ T5920] infiniband syz2: ib_query_port failed (-19) [ 422.018111][T13930] team0: Port device team_slave_1 added [ 422.410701][T14119] netlink: 'syz.1.3752': attribute type 25 has an invalid length. [ 422.410723][T14119] netlink: 'syz.1.3752': attribute type 8 has an invalid length. [ 422.418657][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 422.591604][T13930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.591620][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.591645][T13930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.598583][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 422.601213][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.601238][ T10] usb 3-1: config 0 has no interface number 0 [ 422.607811][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 422.607838][ T10] usb 3-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 422.607857][ T10] usb 3-1: Product: syz [ 422.607870][ T10] usb 3-1: Manufacturer: syz [ 422.607884][ T10] usb 3-1: SerialNumber: syz [ 422.621142][ T10] usb 3-1: config 0 descriptor?? [ 422.630005][T13930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.630019][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.630040][T13930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.638037][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 422.638075][ T10] usb 3-1: selecting invalid altsetting 1 [ 422.638090][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 422.691210][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 422.691742][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 422.691790][ T10] usb 3-1: media controller created [ 422.843491][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.201082][T13930] hsr_slave_0: entered promiscuous mode [ 423.202425][T13930] hsr_slave_1: entered promiscuous mode [ 423.203527][T13930] debugfs: 'hsr0' already exists in 'hsr' [ 423.203553][T13930] Cannot create hsr debugfs directory [ 424.009678][T14124] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 424.028967][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 424.029021][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 424.029476][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 424.120991][ T10] usb 3-1: USB disconnect, device number 35 [ 424.241106][ T1303] IPVS: stop unused estimator thread 0... [ 424.308790][ T5920] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 424.468864][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 424.473578][ T5920] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 424.473609][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.511946][ T5920] usb 5-1: config 0 descriptor?? [ 424.732700][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 424.750363][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.764330][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 424.764389][ T5920] usb 5-1: media controller created [ 424.982607][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.065899][ T5920] az6027: usb out operation failed. (-71) [ 425.066344][ T5920] az6027: usb out operation failed. (-71) [ 425.066358][ T5920] stb0899_attach: Driver disabled by Kconfig [ 425.066369][ T5920] az6027: no front-end attached [ 425.066369][ T5920] [ 425.066767][ T5920] az6027: usb out operation failed. (-71) [ 425.066781][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 425.072911][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 425.089684][ T5920] dvb-usb: schedule remote query interval to 400 msecs. [ 425.089707][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 425.114339][ T5920] usb 5-1: USB disconnect, device number 32 [ 425.395737][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 425.909347][T13930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 425.983955][T13930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.013619][T13930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.084638][T13930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.651559][T13930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.719919][T13930] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.755490][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.755708][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.792556][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.792775][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.833264][T13930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.148656][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 428.223773][T14261] Dead loop on virtual device ip6_vti0, fix it urgently! [ 428.303067][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.303096][ T10] usb 3-1: config 0 has no interface number 0 [ 428.306407][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 428.306435][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.306455][ T10] usb 3-1: Product: syz [ 428.306469][ T10] usb 3-1: Manufacturer: syz [ 428.306483][ T10] usb 3-1: SerialNumber: syz [ 428.357070][ T10] usb 3-1: config 0 descriptor?? [ 428.586595][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 428.650427][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 428.650788][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 428.650840][ T10] usb 3-1: media controller created [ 428.710454][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 429.166003][T13930] veth0_vlan: entered promiscuous mode [ 429.232860][T13930] veth1_vlan: entered promiscuous mode [ 429.269463][ T5920] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 429.401464][T13930] veth0_macvtap: entered promiscuous mode [ 429.425732][T13930] veth1_macvtap: entered promiscuous mode [ 429.431863][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.431922][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 429.431949][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 429.431975][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 429.433815][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 429.433841][ T5920] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 429.433862][ T5920] usb 4-1: Manufacturer: syz [ 429.470065][ T5920] usb 4-1: config 0 descriptor?? [ 429.627961][T13930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.743423][T13930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.769311][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 429.804013][T14245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.818940][T14236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.819474][T14236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.826674][T14236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.908906][ T10] usb 3-1: USB disconnect, device number 36 [ 429.948495][ T5920] rc_core: IR keymap rc-hauppauge not found [ 429.948514][ T5920] Registered IR keymap rc-empty [ 429.951071][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 429.987499][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.000308][ T5920] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 430.003490][ T5920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 430.070251][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.097741][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.109493][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.130993][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.159104][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.169503][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.200506][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.220571][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.239399][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.259446][ T5920] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 430.309758][ T5920] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 430.309785][ T5920] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 430.405205][ T5920] usb 4-1: USB disconnect, device number 37 [ 430.627411][T14233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.627432][T14233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.940152][ T2205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.940173][ T2205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.068556][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 431.228531][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 431.232862][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 431.237299][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 431.237327][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.237346][ T10] usb 3-1: Product: syz [ 431.237359][ T10] usb 3-1: Manufacturer: syz [ 431.237376][ T10] usb 3-1: SerialNumber: syz [ 431.291064][ T10] usb 3-1: config 0 descriptor?? [ 431.323534][ T10] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 431.423897][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 431.423934][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 431.501948][ T10] snd_usb_toneport 3-1:0.0: set_interface failed [ 431.502234][ T10] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 431.502445][ T10] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 431.534782][ T10] usb 3-1: USB disconnect, device number 37 [ 432.037947][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3804'. [ 432.037974][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3804'. [ 433.558112][ T37] audit: type=1400 audit(2000000172.458:120): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=14325 comm="syz.3.3817" name="784" dev="tmpfs" ino=3963 [ 434.048865][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 434.213021][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 434.215169][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 434.215196][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.217356][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 434.217384][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.217402][ T10] usb 2-1: Product: syz [ 434.217415][ T10] usb 2-1: Manufacturer: syz [ 434.217429][ T10] usb 2-1: SerialNumber: syz [ 434.330131][ T10] usb 2-1: config 0 descriptor?? [ 434.336291][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 434.336334][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 434.778868][T14355] syz.2.3829 uses obsolete (PF_INET,SOCK_PACKET) [ 434.973657][ T10] em28xx 2-1:0.0: chip ID is em28178 [ 435.030502][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 435.179034][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 435.181749][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.181774][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.185136][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.185163][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.185183][ T31] usb 3-1: Product: syz [ 435.185196][ T31] usb 3-1: Manufacturer: syz [ 435.185211][ T31] usb 3-1: SerialNumber: syz [ 435.256670][ T5920] usb 2-1: USB disconnect, device number 36 [ 435.264418][ T5920] em28xx 2-1:0.0: Disconnecting em28xx [ 435.419880][ T5920] em28xx 2-1:0.0: Freeing device [ 435.452888][ T31] usb 3-1: 0:2 : does not exist [ 435.470472][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 435.603844][ T31] usb 3-1: USB disconnect, device number 38 [ 435.697440][T14116] udevd[14116]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.038912][T14390] hsr0: entered promiscuous mode [ 437.656321][ T37] audit: type=1326 audit(2000000176.608:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 437.656375][ T37] audit: type=1326 audit(2000000176.618:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 437.656414][ T37] audit: type=1326 audit(2000000176.618:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 437.656455][ T37] audit: type=1326 audit(2000000176.618:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 437.699256][ T37] audit: type=1326 audit(2000000176.668:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 437.718538][ T37] audit: type=1326 audit(2000000176.678:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 437.718594][ T37] audit: type=1326 audit(2000000176.678:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 437.718636][ T37] audit: type=1326 audit(2000000176.678:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 437.718677][ T37] audit: type=1326 audit(2000000176.678:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14398 comm="syz.2.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504daeeec9 code=0x7ffc0000 [ 438.298969][ T5920] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 438.449192][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 438.471601][ T5920] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 438.471629][ T5920] usb 3-1: config 0 has no interface number 0 [ 438.474664][ T5920] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 438.474692][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.474711][ T5920] usb 3-1: Product: syz [ 438.474725][ T5920] usb 3-1: Manufacturer: syz [ 438.474738][ T5920] usb 3-1: SerialNumber: syz [ 438.490751][ T5920] usb 3-1: config 0 descriptor?? [ 438.536698][ T5920] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 438.743046][ T5920] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 438.763222][ T5920] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 439.148126][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 439.155558][ T10] usb 3-1: USB disconnect, device number 39 [ 439.185482][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 439.212615][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 439.214830][ T10] quatech2 3-1:0.51: device disconnected [ 440.015055][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.554853][T14463] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.3877'. [ 440.555159][T14463] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 440.808727][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 440.971310][ T10] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 440.971348][ T10] usb 3-1: config 0 has no interface number 0 [ 440.993564][ T10] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 440.993596][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.993617][ T10] usb 3-1: Product: syz [ 440.993630][ T10] usb 3-1: Manufacturer: syz [ 440.993644][ T10] usb 3-1: SerialNumber: syz [ 441.040901][ T10] usb 3-1: config 0 descriptor?? [ 441.057144][ T10] hub 3-1:0.217: bad descriptor, ignoring hub [ 441.057183][ T10] hub 3-1:0.217: probe with driver hub failed with error -5 [ 441.263301][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 441.290712][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 441.307952][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 441.308011][ T10] usb 3-1: media controller created [ 441.359825][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.451794][ T10] DVB: Unable to find symbol dib7000p_attach() [ 441.451811][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 441.698481][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 441.698501][ T10] Registered IR keymap rc-empty [ 441.698811][ T10] dvb-usb: could not initialize remote control. [ 441.698820][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 441.739350][ T10] usb 3-1: USB disconnect, device number 40 [ 441.896789][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 442.288670][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 442.449894][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 442.449924][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.449943][ T9] usb 2-1: Product: syz [ 442.449957][ T9] usb 2-1: Manufacturer: syz [ 442.449972][ T9] usb 2-1: SerialNumber: syz [ 442.455799][ T9] usb 2-1: config 0 descriptor?? [ 442.736074][ T9] usb 2-1: USB disconnect, device number 37 [ 443.699472][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 443.772189][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 443.888833][ T5920] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 443.931278][ T31] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 443.931305][ T31] usb 4-1: config 1 has no interface number 0 [ 443.931354][ T31] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 443.931379][ T31] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 443.931403][ T31] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.935655][ T31] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 443.935680][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.935698][ T31] usb 4-1: Product: syz [ 443.935710][ T31] usb 4-1: Manufacturer: syz [ 443.935723][ T31] usb 4-1: SerialNumber: syz [ 443.957680][T14530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 444.045093][ T5920] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 444.045121][ T5920] usb 3-1: config 0 has no interface number 0 [ 444.051576][ T5920] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 444.051604][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.051623][ T5920] usb 3-1: Product: syz [ 444.051635][ T5920] usb 3-1: Manufacturer: syz [ 444.051648][ T5920] usb 3-1: SerialNumber: syz [ 444.116749][ T5920] usb 3-1: config 0 descriptor?? [ 444.214604][T14530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 444.560435][ T31] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 444.561131][ T5920] usb 3-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 444.648791][ T5842] Bluetooth: hci0: command tx timeout [ 444.688161][T14549] loop6: detected capacity change from 0 to 7 [ 444.735933][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.735975][ C0] buffer_io_error: 4 callbacks suppressed [ 444.735997][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.765082][ T5920] usb 3-1: failed to fetch extended address, random address set [ 444.784785][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.784822][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.806839][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.806874][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.811366][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.811447][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.830193][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.830231][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.830689][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.830755][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.831085][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.831111][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.831289][T14549] ldm_validate_partition_table(): Disk read failed. [ 444.831780][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.831805][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.832300][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.832375][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.832859][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.832885][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.833357][T14549] Dev loop6: unable to read RDB block 0 [ 444.846337][ T31] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 444.846363][ T31] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 444.867268][T14549] loop6: unable to read partition table [ 444.867878][T14549] loop6: partition table beyond EOD, truncated [ 444.868054][T14549] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 444.927814][ T31] usb 4-1: USB disconnect, device number 38 [ 445.018198][ T31] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 445.074085][T14157] ldm_validate_partition_table(): Disk read failed. [ 445.075329][T14157] Dev loop6: unable to read RDB block 0 [ 445.093227][T14157] loop6: unable to read partition table [ 445.093492][T14157] loop6: partition table beyond EOD, truncated [ 445.411543][ T31] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 445.504256][ T5920] usb 3-1: USB disconnect, device number 41 [ 446.989167][ T5920] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 447.058912][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 447.139564][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 447.142087][ T5920] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.142116][ T5920] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.144169][ T5920] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 447.144197][ T5920] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 447.144322][ T5920] usb 3-1: Product: syz [ 447.144338][ T5920] usb 3-1: Manufacturer: syz [ 447.177586][ T5920] hub 3-1:4.0: USB hub found [ 447.219127][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 447.222446][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.222535][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.222574][ T31] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 447.222597][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.262925][ T31] usb 6-1: config 0 descriptor?? [ 447.394059][ T5920] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 447.568834][ T5223] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 447.719030][ T9] usb 3-1: USB disconnect, device number 42 [ 447.725978][ T31] hid_parser_main: 7 callbacks suppressed [ 447.725999][ T31] corsair 0003:1B1C:1B02.0048: unknown main item tag 0x0 [ 447.726028][ T31] corsair 0003:1B1C:1B02.0048: unknown main item tag 0x0 [ 447.726052][ T31] corsair 0003:1B1C:1B02.0048: unknown main item tag 0x0 [ 447.728763][ T5223] usb 4-1: Using ep0 maxpacket: 32 [ 447.732081][ T5223] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 447.732106][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.735295][ T31] corsair 0003:1B1C:1B02.0048: unknown main item tag 0x0 [ 447.735323][ T31] corsair 0003:1B1C:1B02.0048: unknown main item tag 0x0 [ 447.751302][ T31] corsair 0003:1B1C:1B02.0048: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 447.760912][ T5223] usb 4-1: config 0 descriptor?? [ 447.985891][ T5223] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 448.123710][ T5223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 448.126922][ T5223] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 448.126977][ T5223] usb 4-1: media controller created [ 448.141600][ T31] corsair 0003:1B1C:1B02.0048: Read invalid backlight brightness: ce. [ 448.220439][ T37] audit: type=1326 audit(2000000187.188:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.250261][ T37] audit: type=1326 audit(2000000187.218:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.250395][ T37] audit: type=1326 audit(2000000187.218:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.258795][ T37] audit: type=1326 audit(2000000187.218:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.258920][ T37] audit: type=1326 audit(2000000187.218:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.258953][ T37] audit: type=1326 audit(2000000187.218:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.258992][ T37] audit: type=1326 audit(2000000187.218:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.261822][ T37] audit: type=1326 audit(2000000187.228:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.264469][ T37] audit: type=1326 audit(2000000187.228:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 448.267510][ T5223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.268528][ T37] audit: type=1326 audit(2000000187.228:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14592 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c87eec9 code=0x7ffc0000 [ 448.372775][ T5223] az6027: usb out operation failed. (-71) [ 448.373291][ T5223] az6027: usb out operation failed. (-71) [ 448.373304][ T5223] stb0899_attach: Driver disabled by Kconfig [ 448.373313][ T5223] az6027: no front-end attached [ 448.373313][ T5223] [ 448.373694][ T5223] az6027: usb out operation failed. (-71) [ 448.373705][ T5223] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 448.385843][ T5223] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 448.402809][ T991] usb 6-1: USB disconnect, device number 2 [ 448.406577][ T5223] dvb-usb: schedule remote query interval to 400 msecs. [ 448.406597][ T5223] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 448.452361][ T5223] usb 4-1: USB disconnect, device number 39 [ 448.827644][ T5223] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 449.160241][ T9] kernel write not supported for file /amidi2 (pid: 9 comm: kworker/0:0) [ 449.280426][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3938'. [ 449.393157][T14621] syz_tun: tun_net_xmit 46 [ 449.393273][T14621] syz_tun: tun_net_xmit 43 [ 450.318525][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 450.470241][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 450.475694][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 450.475722][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.475733][ T10] usb 3-1: Product: syz [ 450.475740][ T10] usb 3-1: Manufacturer: syz [ 450.475748][ T10] usb 3-1: SerialNumber: syz [ 450.478866][ T991] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 450.525172][ T10] usb 3-1: config 0 descriptor?? [ 450.651752][ T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.651786][ T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 450.651830][ T991] usb 6-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 450.651866][ T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.664035][ T991] usb 6-1: config 0 descriptor?? [ 450.666002][T14647] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 450.995407][ T10] airspy 3-1:0.0: Board ID: 00 [ 450.995430][ T10] airspy 3-1:0.0: Firmware version: [ 451.145820][ T991] glorious 0003:22D4:1503.0049: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.5-1/input0 [ 451.363066][ T991] usb 6-1: USB disconnect, device number 3 [ 451.418626][ T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 451.436069][T14659] fido_id[14659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 451.477664][ T10] airspy 3-1:0.0: Registered as swradio24 [ 451.477685][ T10] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 451.525663][ T10] usb 3-1: USB disconnect, device number 43 [ 452.438709][T14673] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 453.500812][T14703] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3977'. [ 454.618840][ T991] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 454.781957][ T991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.781984][ T991] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.782037][ T991] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 454.782060][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.800819][ T991] usb 4-1: config 0 descriptor?? [ 454.817705][ T991] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 454.817757][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 454.900379][ T57] wlan1: Trigger new scan to find an IBSS to join [ 454.981694][ T991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 454.999933][ T991] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 454.999994][ T991] usb 4-1: media controller created [ 455.060252][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.167077][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 455.167163][ T991] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 455.219443][ T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 455.253993][ T991] dvb-usb: schedule remote query interval to 150 msecs. [ 455.254016][ T991] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 455.306697][ T991] usb 4-1: USB disconnect, device number 40 [ 459.326527][T14781] netlink: 'syz.4.4010': attribute type 1 has an invalid length. [ 459.545645][T14245] wlan1: Creating new IBSS network, BSSID 02:3b:25:50:af:73 [ 460.592669][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 460.592688][ T37] audit: type=1326 audit(2000000199.548:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14782 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e375eec9 code=0x7ffc0000 [ 460.595466][ T37] audit: type=1326 audit(2000000199.558:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14782 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f88e375eec9 code=0x7ffc0000 [ 460.595516][ T37] audit: type=1326 audit(2000000199.558:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14782 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e375eec9 code=0x7ffc0000 [ 460.595993][ T37] audit: type=1326 audit(2000000199.558:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14782 comm="syz.5.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e375eec9 code=0x7ffc0000 [ 464.288778][T14789] program syz.2.4013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.240168][ T991] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 470.738920][ T991] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 470.946960][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.946993][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.947033][ T991] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 470.947056][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.011215][ T991] usb 4-1: config 0 descriptor?? [ 471.544251][ T991] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 471.544289][ T991] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 471.544315][ T991] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 471.544341][ T991] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 471.544366][ T991] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 471.544391][ T991] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 471.544416][ T991] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 471.690099][ T991] pyra 0003:1E7D:2CF6.004A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 472.044898][ T991] pyra 0003:1E7D:2CF6.004A: couldn't init struct pyra_device [ 472.044945][ T991] pyra 0003:1E7D:2CF6.004A: couldn't install mouse [ 472.102005][ T991] pyra 0003:1E7D:2CF6.004A: probe with driver pyra failed with error -71 [ 472.180379][ T991] usb 4-1: USB disconnect, device number 41 [ 472.384030][T14807] fido_id[14807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 478.494582][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 478.528166][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 478.538252][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 478.547525][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 478.560672][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 479.176703][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 479.215759][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 479.217517][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 479.241583][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 479.242593][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 479.828596][T14814] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 479.996670][T14814] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 479.996701][T14814] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 479.996726][T14814] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 480.039315][T14814] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 480.039344][T14814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.039363][T14814] usb 6-1: Product: syz [ 480.039376][T14814] usb 6-1: Manufacturer: syz [ 480.039390][T14814] usb 6-1: SerialNumber: syz [ 480.108674][T14814] usb 6-1: config 0 descriptor?? [ 480.115352][T14826] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.117849][T14826] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 480.148859][T14814] usb 6-1: ucan: probing device on interface #0 [ 480.666553][ T5842] Bluetooth: hci5: command tx timeout [ 481.294156][ T5842] Bluetooth: hci6: command tx timeout [ 482.730660][ T5842] Bluetooth: hci5: command tx timeout [ 482.921079][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 482.952429][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 482.974731][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 482.976201][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 482.996284][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 483.368586][ T5842] Bluetooth: hci6: command tx timeout [ 484.808566][ T5842] Bluetooth: hci5: command tx timeout [ 484.888396][ C1] sched: DL replenish lagged too much [ 485.448778][ T5842] Bluetooth: hci6: command tx timeout [ 486.888833][ T59] Bluetooth: hci5: command tx timeout [ 487.528596][ T59] Bluetooth: hci6: command tx timeout [ 489.522314][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 491.688992][ T59] Bluetooth: hci7: command tx timeout [ 493.769280][ T59] Bluetooth: hci7: command tx timeout [ 495.863074][ T59] Bluetooth: hci7: command tx timeout [ 497.929011][ T59] Bluetooth: hci7: command tx timeout [ 500.711585][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.758264][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.776341][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.778208][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.794183][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.538856][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.902028][ T5156] Bluetooth: hci1: command tx timeout [ 504.980134][ T5156] Bluetooth: hci1: command tx timeout [ 506.970618][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 507.005730][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 507.016940][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 507.018272][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 507.028343][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 507.048987][ T5156] Bluetooth: hci1: command tx timeout [ 509.132059][ T59] Bluetooth: hci8: command tx timeout [ 509.132849][ T59] Bluetooth: hci1: command tx timeout [ 511.219055][ T5156] Bluetooth: hci8: command tx timeout [ 513.308643][ T5156] Bluetooth: hci8: command tx timeout [ 515.368630][ T5156] Bluetooth: hci8: command tx timeout [ 525.669614][T14243] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 536.935610][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 536.955358][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 536.957572][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.960117][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.961041][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 538.665226][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 538.699960][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 538.705911][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 538.707733][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 538.738794][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 539.128665][ T59] Bluetooth: hci3: command tx timeout [ 540.812292][ T59] Bluetooth: hci9: command tx timeout [ 541.218924][ T59] Bluetooth: hci3: command tx timeout [ 542.468725][ T5207] udevd[5207]: worker [14817] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 542.898014][ T59] Bluetooth: hci9: command tx timeout [ 543.263124][ T5156] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 543.267713][ T5156] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 543.289611][ T5156] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 543.289700][ T5156] Bluetooth: hci3: command tx timeout [ 543.290863][ T5156] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 543.291858][ T5156] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 544.968637][ T59] Bluetooth: hci9: command tx timeout [ 545.368602][ T59] Bluetooth: hci3: command tx timeout [ 545.448725][ T59] Bluetooth: hci10: command tx timeout [ 547.048609][ T59] Bluetooth: hci9: command tx timeout [ 547.532440][ T59] Bluetooth: hci10: command tx timeout [ 549.608578][ T59] Bluetooth: hci10: command tx timeout [ 551.688642][ T59] Bluetooth: hci10: command tx timeout [ 561.227039][ T5156] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 561.258852][ T5156] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 561.261697][ T5156] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 561.262858][ T5156] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 561.268299][ T5156] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 561.718767][T14814] ucan 6-1:0.0 can0: registered device [ 561.719467][T14814] ucan 6-1:0.0 can0: firmware string: unknown [ 561.789055][T14814] usb 6-1: USB disconnect, device number 4 [ 562.533480][T14245] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.942903][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.368970][ T5156] Bluetooth: hci11: command tx timeout [ 565.476100][ T5156] Bluetooth: hci11: command tx timeout [ 567.082798][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 567.118841][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 567.121099][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 567.122465][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 567.123370][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 567.528858][ T5156] Bluetooth: hci11: command tx timeout [ 569.208619][ T5156] Bluetooth: hci12: command tx timeout [ 569.608789][ T5156] Bluetooth: hci11: command tx timeout [ 571.288651][ T5156] Bluetooth: hci12: command tx timeout [ 573.372226][ T5156] Bluetooth: hci12: command tx timeout [ 575.454964][ T5156] Bluetooth: hci12: command tx timeout [ 597.661244][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.688025][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.699818][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.701845][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.702752][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 598.832716][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 598.864099][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 598.866591][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.885945][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.886830][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 603.841664][T14876] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 603.887976][T14882] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 603.916516][T14882] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 603.927258][T14882] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 603.928121][T14882] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 605.253414][T14228] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 621.818267][T14880] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 621.834907][T14880] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 621.836387][T14880] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 621.869237][T14880] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 621.870540][T14880] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 624.343151][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.729257][T14887] Bluetooth: hci1: command 0x0406 tx timeout [ 627.373654][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 627.404416][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 627.405881][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 627.407121][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 627.444136][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 628.968660][ T5156] Bluetooth: hci4: command tx timeout [ 629.048668][ T5156] Bluetooth: hci2: command tx timeout [ 630.515898][ T5207] udevd[5207]: worker [14817] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 631.048555][ T5156] Bluetooth: hci4: command tx timeout [ 631.128605][ T5156] Bluetooth: hci2: command tx timeout [ 633.128624][ T5156] Bluetooth: hci4: command tx timeout [ 633.214965][ T5156] Bluetooth: hci2: command tx timeout [ 635.208769][ T5156] Bluetooth: hci4: command tx timeout [ 635.288664][ T5156] Bluetooth: hci2: command tx timeout [ 639.643256][T14245] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 643.688803][ T5156] Bluetooth: hci13: command tx timeout [ 645.768777][ T5156] Bluetooth: hci13: command tx timeout [ 647.848726][ T5156] Bluetooth: hci13: command tx timeout [ 649.929927][ T5156] Bluetooth: hci13: command tx timeout [ 654.568778][T14880] Bluetooth: hci14: command tx timeout [ 654.571193][ T59] Bluetooth: hci7: command tx timeout [ 656.649077][T14880] Bluetooth: hci14: command tx timeout [ 656.649178][ T59] Bluetooth: hci7: command tx timeout [ 657.343414][T14880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 657.364084][T14880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 657.379051][T14880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 657.389571][T14880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 657.391532][T14880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 658.743400][ T59] Bluetooth: hci7: command tx timeout [ 658.743434][ T59] Bluetooth: hci14: command tx timeout [ 659.193028][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 659.232076][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 659.234790][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 659.236107][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 659.276529][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 660.007678][T14880] Bluetooth: hci0: command tx timeout [ 660.818707][ T5156] Bluetooth: hci14: command tx timeout [ 660.818740][ T5156] Bluetooth: hci7: command tx timeout [ 662.148611][ T5156] Bluetooth: hci5: command tx timeout [ 662.149391][ T5156] Bluetooth: hci0: command tx timeout [ 662.264745][T14882] Bluetooth: hci3: command 0x0406 tx timeout [ 662.265066][T14882] Bluetooth: hci9: command 0x0406 tx timeout [ 664.170253][ T5842] Bluetooth: hci0: command tx timeout [ 664.170286][ T5842] Bluetooth: hci5: command tx timeout [ 664.721544][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 664.753190][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 664.755317][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 664.756646][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 664.757503][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 666.254305][ T5842] Bluetooth: hci5: command tx timeout [ 666.254342][ T5842] Bluetooth: hci0: command tx timeout [ 668.408708][ T5156] Bluetooth: hci5: command tx timeout [ 670.438262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.326733][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 682.785236][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 682.813910][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 682.835827][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 682.837721][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 682.872824][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 685.783836][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.493780][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 687.524860][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 687.540264][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 687.543766][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 687.544677][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 712.346182][T14245] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 716.888661][T14882] Bluetooth: hci6: command tx timeout [ 718.486208][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 718.519963][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 718.521693][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 718.524827][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 718.525964][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 718.968788][T14882] Bluetooth: hci6: command tx timeout [ 719.511063][T14880] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 719.541050][T14880] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 719.542597][T14880] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 719.544406][T14880] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 719.547343][T14880] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 721.049085][T14882] Bluetooth: hci6: command tx timeout [ 721.693771][T14882] Bluetooth: hci1: command tx timeout [ 723.142578][T14882] Bluetooth: hci6: command tx timeout [ 723.777416][T14882] Bluetooth: hci1: command tx timeout [ 725.840764][ T5156] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 725.858752][ T5156] Bluetooth: hci1: command tx timeout [ 725.858925][ T5156] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 725.863215][ T5156] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 725.864656][ T5156] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 725.865530][ T5156] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 727.932467][T14882] Bluetooth: hci1: command tx timeout [ 731.959285][ T67] kworker/u8:4 (67) used greatest stack depth: 13976 bytes left [ 733.208732][T14882] Bluetooth: hci8: command tx timeout [ 733.288827][T14882] Bluetooth: hci9: command tx timeout [ 733.289640][T14882] Bluetooth: hci10: command tx timeout [ 733.289985][T14882] Bluetooth: hci11: command tx timeout [ 733.939993][T14880] Bluetooth: hci4: command 0x0406 tx timeout [ 733.940144][T14880] Bluetooth: hci2: command 0x0406 tx timeout [ 735.288762][T14882] Bluetooth: hci8: command tx timeout [ 735.368765][T14882] Bluetooth: hci11: command tx timeout [ 735.368796][T14882] Bluetooth: hci10: command tx timeout [ 735.368817][T14882] Bluetooth: hci9: command tx timeout [ 737.368743][T14880] Bluetooth: hci8: command tx timeout [ 737.450374][ T5842] Bluetooth: hci11: command tx timeout [ 737.453343][T14882] Bluetooth: hci10: command tx timeout [ 737.472056][T14880] Bluetooth: hci9: command tx timeout [ 739.448917][T14882] Bluetooth: hci8: command tx timeout [ 739.528926][T14882] Bluetooth: hci10: command tx timeout [ 739.528960][T14882] Bluetooth: hci9: command tx timeout [ 739.528980][T14882] Bluetooth: hci11: command tx timeout [ 743.585264][T14882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 743.620692][T14882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 743.622188][T14882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 743.623845][T14882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 743.654016][T14882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 744.907933][T14228] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 747.219431][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.938646][ T59] Bluetooth: hci3: command tx timeout [ 748.406858][T14882] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 748.446126][T14882] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 748.447743][T14882] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 748.466911][T14882] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 748.467791][T14882] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 749.301571][T14882] Bluetooth: hci13: command 0x0406 tx timeout [ 750.015282][T14887] Bluetooth: hci3: command tx timeout [ 750.568680][T14887] Bluetooth: hci12: command tx timeout [ 752.089109][T14887] Bluetooth: hci3: command tx timeout [ 752.648695][T14887] Bluetooth: hci12: command tx timeout [ 754.169066][T14887] Bluetooth: hci3: command tx timeout [ 754.431329][T14887] Bluetooth: hci14: command 0x0406 tx timeout [ 754.728629][T14887] Bluetooth: hci12: command tx timeout [ 756.825198][T14887] Bluetooth: hci12: command tx timeout [ 774.898314][T14882] Bluetooth: hci7: command 0x0406 tx timeout [ 775.375002][ T38] INFO: task syz-executor:14889 blocked for more than 143 seconds. [ 775.375031][ T38] Not tainted syzkaller #0 [ 775.375042][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.375051][ T38] task:syz-executor state:D stack:26952 pid:14889 tgid:14889 ppid:1 task_flags:0x400140 flags:0x00004004 [ 775.375103][ T38] Call Trace: [ 775.375111][ T38] [ 775.375124][ T38] __schedule+0x16f3/0x4c20 [ 775.375185][ T38] ? __pfx___schedule+0x10/0x10 [ 775.375228][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 775.375256][ T38] rt_mutex_schedule+0x77/0xf0 [ 775.375275][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 775.375296][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 775.375335][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 775.375359][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 775.375381][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 775.375399][ T38] ? __lock_acquire+0xab9/0xd20 [ 775.375433][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 775.375460][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 775.375487][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 775.375504][ T38] mutex_lock_nested+0x16a/0x1d0 [ 775.375538][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 775.375568][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 775.375607][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 775.375626][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 775.375649][ T38] ? __lock_acquire+0xab9/0xd20 [ 775.375673][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 775.375695][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.375735][ T38] netlink_rcv_skb+0x208/0x470 [ 775.375757][ T38] ? __lock_acquire+0xab9/0xd20 [ 775.375778][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.375802][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 775.375837][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.375869][ T38] netlink_unicast+0x846/0xa10 [ 775.375900][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 775.375923][ T38] ? netlink_sendmsg+0x642/0xb30 [ 775.375943][ T38] ? skb_put+0x11b/0x210 [ 775.375972][ T38] netlink_sendmsg+0x805/0xb30 [ 775.376009][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.376041][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 775.376059][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.376083][ T38] __sock_sendmsg+0x219/0x270 [ 775.376109][ T38] __sys_sendto+0x3c7/0x520 [ 775.376136][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 775.376187][ T38] ? exc_page_fault+0x76/0xf0 [ 775.376216][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 775.376243][ T38] __x64_sys_sendto+0xde/0x100 [ 775.376270][ T38] do_syscall_64+0xfa/0x3b0 [ 775.376287][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.376308][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.376324][ T38] ? clear_bhb_loop+0x60/0xb0 [ 775.376342][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.376363][ T38] RIP: 0033:0x7f959c1c0d5c [ 775.376383][ T38] RSP: 002b:00007ffc6faae160 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 775.376402][ T38] RAX: ffffffffffffffda RBX: 00007f959cf44620 RCX: 00007f959c1c0d5c [ 775.376416][ T38] RDX: 0000000000000028 RSI: 00007f959cf44670 RDI: 0000000000000003 [ 775.376427][ T38] RBP: 0000000000000000 R08: 00007ffc6faae1b4 R09: 000000000000000c [ 775.376439][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 775.376451][ T38] R13: 0000000000000000 R14: 00007f959cf44670 R15: 0000000000000000 [ 775.376480][ T38] [ 775.376501][ T38] [ 775.376501][ T38] Showing all locks held in the system: [ 775.376511][ T38] 2 locks held by ksoftirqd/1/30: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 775.376522][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 775.376573][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 775.376618][ T38] 1 lock held by khungtaskd/38: [ 775.376629][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 775.376670][ T38] 4 locks held by kworker/1:1/44: [ 775.376685][ T38] 11 locks held by kworker/1:2/991: [ 775.376712][ T38] 2 locks held by getty/5600: [ 775.377545][ T38] #0: ffff88823bf300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 775.377602][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 775.377650][ T38] 2 locks held by kworker/0:4/5912: [ 775.377661][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.377707][ T38] #1: ffffc900055dfbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.377752][ T38] 2 locks held by kworker/1:6/5946: [ 775.377765][ T38] 2 locks held by kbnepd bnep0/14180: [ 775.377775][ T38] #0: ffffffff8ee636c0 (bnep_session_sem){+.+.}-{4:4}, at: bnep_session+0x2940/0x2b40 [ 775.377818][ T38] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 775.377861][ T38] 5 locks held by kworker/u8:27/14236: [ 775.377871][ T38] #0: ffff88801a6f4138 ((wq_completion)net[ 775.377871][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.377916][ T38] #1: ffffc90004b3fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.377960][ T38] #2: ffffffff8ecc6a20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 775.378007][ T38] #3: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 775.378054][ T38] #4: ffff88805b6757b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 775.378097][ T38] 3 locks held by kworker/u8:28/14237: [ 775.378107][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.378152][ T38] #1: ffffc90004b4fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.378195][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 775.378237][ T38] 3 locks held by kworker/u8:37/14246: [ 775.378248][ T38] #0: ffff88814cd9b938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.378292][ T38] #1: ffffc90004d2fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.378337][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 775.828627][ T38] 4 locks held by kworker/1:8/14772: [ 775.828640][ T38] #0: ffff88805b818d38 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.828694][ T38] #1: ffffc90003a97bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.828752][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 775.828796][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 775.828840][ T38] 1 lock held by syz.4.4010/14781: [ 775.828850][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 775.828893][ T38] 1 lock held by syz.1.4012/14785: [ 775.828903][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 775.828945][ T38] 4 locks held by kworker/1:9/14841: [ 775.828955][ T38] #0: ffff88805b0ae538 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.829004][ T38] #1: ffffc90003ea7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.829065][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 775.829108][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 775.829152][ T38] 1 lock held by syz.5.4033/14845: [ 775.829162][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 775.829210][ T38] 4 locks held by kworker/1:10/14854: [ 775.829221][ T38] #0: ffff888031820538 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.829265][ T38] #1: ffffc90004eafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.829321][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 775.829364][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 775.829409][ T38] 3 locks held by kworker/0:11/14870: [ 775.829419][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.829463][ T38] #1: ffffc900051b7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.829508][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 775.829557][ T38] 2 locks held by syz-executor/14875: [ 775.829568][ T38] #0: ffff8880238f8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 775.829613][ T38] #1: ffff8880238f80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 775.829660][ T38] 4 locks held by syz-executor/14879: [ 775.829671][ T38] #0: ffff8880515b0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 775.829715][ T38] #1: ffff8880515b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 775.829760][ T38] #2: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 775.829802][ T38] #3: ffff88802b74d358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 775.829846][ T38] 5 locks held by kworker/u9:4/14880: [ 775.829857][ T38] #0: ffff888052e77938 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 775.829905][ T38] #1: ffffc90003f67bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 775.829948][ T38] #2: ffff888062770e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 775.829991][ T38] #3: ffff8880627700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 775.830102][ T38] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 775.830149][ T38] 3 locks held by syz-executor/14885: [ 775.830159][ T38] #0: ffff888045eb0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 775.830203][ T38] #1: ffff888045eb00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 775.830248][ T38] #2: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 775.830291][ T38] 1 lock held by syz-executor/14889: [ 775.830301][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830345][ T38] 1 lock held by syz-executor/14893: [ 775.830355][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830397][ T38] 1 lock held by syz-executor/14896: [ 775.830408][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830454][ T38] 1 lock held by syz-executor/14899: [ 775.830464][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830506][ T38] 1 lock held by syz-executor/14902: [ 775.830517][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830626][ T38] 1 lock held by syz-executor/14905: [ 775.830638][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830680][ T38] 1 lock held by syz-executor/14910: [ 775.830689][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830728][ T38] 1 lock held by syz-executor/14915: [ 775.830736][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830775][ T38] 1 lock held by syz-executor/14919: [ 775.830785][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830826][ T38] 1 lock held by syz-executor/14928: [ 775.830836][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830876][ T38] 1 lock held by syz-executor/14933: [ 775.830885][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 775.830930][ T38] [ 775.830935][ T38] ============================================= [ 775.830935][ T38] [ 775.830955][ T38] NMI backtrace for cpu 0 [ 775.830980][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 775.831003][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.831014][ T38] Call Trace: [ 775.831021][ T38] [ 775.831030][ T38] dump_stack_lvl+0x189/0x250 [ 775.831058][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.831081][ T38] ? __pfx__printk+0x10/0x10 [ 775.831113][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 775.831138][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 775.831162][ T38] ? __pfx__printk+0x10/0x10 [ 775.831185][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 775.831207][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 775.831232][ T38] watchdog+0xf93/0xfe0 [ 775.831259][ T38] ? watchdog+0x1de/0xfe0 [ 775.831285][ T38] kthread+0x70e/0x8a0 [ 775.831313][ T38] ? __pfx_watchdog+0x10/0x10 [ 775.831333][ T38] ? __pfx_kthread+0x10/0x10 [ 775.831361][ T38] ? __pfx_kthread+0x10/0x10 [ 775.831384][ T38] ret_from_fork+0x436/0x7d0 [ 775.831408][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 775.831434][ T38] ? __switch_to_asm+0x39/0x70 [ 775.831450][ T38] ? __switch_to_asm+0x33/0x70 [ 775.831524][ T38] ? __pfx_kthread+0x10/0x10 [ 775.831548][ T38] ret_from_fork_asm+0x1a/0x30 [ 775.831580][ T38] [ 775.831587][ T38] Sending NMI from CPU 0 to CPUs 1: [ 775.831615][ C1] NMI backtrace for cpu 1 [ 775.831630][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 775.831647][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.831656][ C1] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 775.831679][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 775.831692][ C1] RSP: 0018:ffffc90000a3e9e0 EFLAGS: 00000246 [ 775.831706][ C1] RAX: 1ffff92000147d01 RBX: fffffffffffffffe RCX: ffffffff8172cd58 [ 775.831725][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000a3eb58 [ 775.831735][ C1] RBP: 0000000000000000 R08: ffffc90000a3eb67 R09: 1ffff92000147d6c [ 775.831747][ C1] R10: dffffc0000000000 R11: fffff52000147d6b R12: 0000000000000002 [ 775.831758][ C1] R13: ffffc90000a3eb58 R14: fffff52000147d6d R15: 1ffff92000147d6b [ 775.831770][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 775.831784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 775.831795][ C1] CR2: 00007f823b1ca30c CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 775.831811][ C1] Call Trace: [ 775.831816][ C1] [ 775.831825][ C1] __asan_memset+0x22/0x50 [ 775.831842][ C1] unwind_next_frame+0xc98/0x2390 [ 775.831864][ C1] ? unwind_next_frame+0xa5/0x2390 [ 775.831882][ C1] ? process_backlog+0x31e/0x900 [ 775.831903][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 775.831920][ C1] arch_stack_walk+0x11c/0x150 [ 775.831942][ C1] ? __napi_poll+0xb6/0x540 [ 775.831963][ C1] stack_trace_save+0x9c/0xe0 [ 775.831978][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 775.831992][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 775.832007][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 775.832023][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 775.832037][ C1] ? nft_do_chain+0x409/0x1920 [ 775.832054][ C1] ? __lock_acquire+0xab9/0xd20 [ 775.832071][ C1] kasan_save_track+0x3e/0x80 [ 775.832086][ C1] ? kasan_save_track+0x3e/0x80 [ 775.832100][ C1] ? kasan_save_free_info+0x46/0x50 [ 775.832113][ C1] ? __kasan_slab_free+0x5b/0x80 [ 775.832128][ C1] ? kmem_cache_free+0x195/0x510 [ 775.832145][ C1] ? skb_release_data+0x62d/0x7c0 [ 775.832158][ C1] ? consume_skb+0x9e/0xf0 [ 775.832175][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 775.832189][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 775.832204][ C1] ? nft_do_chain+0x409/0x1920 [ 775.832217][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 775.832231][ C1] ? nf_hook_slow+0xc5/0x220 [ 775.832249][ C1] ? NF_HOOK+0x206/0x3a0 [ 775.832265][ C1] ? NF_HOOK+0x309/0x3a0 [ 775.832281][ C1] ? __netif_receive_skb+0x143/0x380 [ 775.832297][ C1] ? process_backlog+0x31e/0x900 [ 775.832335][ C1] kasan_save_free_info+0x46/0x50 [ 775.832349][ C1] __kasan_slab_free+0x5b/0x80 [ 775.832365][ C1] ? skb_release_data+0x62d/0x7c0 [ 775.832377][ C1] kmem_cache_free+0x195/0x510 [ 775.832398][ C1] skb_release_data+0x62d/0x7c0 [ 775.832416][ C1] consume_skb+0x9e/0xf0 [ 775.832435][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 775.832455][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 775.832472][ C1] ? nf_ip_checksum+0x13c/0x510 [ 775.832489][ C1] nft_synproxy_do_eval+0x345/0x570 [ 775.832509][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 775.832524][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 775.832546][ C1] nft_do_chain+0x409/0x1920 [ 775.832569][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 775.832587][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 775.832613][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 775.832631][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 775.832650][ C1] nft_do_chain_inet+0x25d/0x340 [ 775.832667][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 775.832688][ C1] ? NF_HOOK+0x9a/0x3a0 [ 775.832710][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 775.832731][ C1] nf_hook_slow+0xc5/0x220 [ 775.832754][ C1] NF_HOOK+0x206/0x3a0 [ 775.832772][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 775.832790][ C1] ? NF_HOOK+0x9a/0x3a0 [ 775.832807][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 775.832825][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 775.832846][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 775.832865][ C1] ? skb_dst+0x4f/0xd0 [ 775.832883][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 775.832903][ C1] NF_HOOK+0x309/0x3a0 [ 775.832921][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 775.832938][ C1] ? NF_HOOK+0x9a/0x3a0 [ 775.832955][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 775.832974][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 775.832996][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 775.833013][ C1] __netif_receive_skb+0x143/0x380 [ 775.833030][ C1] ? rt_spin_unlock+0x65/0x80 [ 775.833050][ C1] ? process_backlog+0x27b/0x900 [ 775.833067][ C1] process_backlog+0x31e/0x900 [ 775.833090][ C1] __napi_poll+0xb6/0x540 [ 775.833110][ C1] net_rx_action+0x707/0xe00 [ 775.833136][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 775.833173][ C1] handle_softirqs+0x22f/0x710 [ 775.833195][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 775.833217][ C1] run_ktimerd+0xcf/0x190 [ 775.833235][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 775.833258][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 775.833275][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 775.833292][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 775.833307][ C1] smpboot_thread_fn+0x53f/0xa60 [ 775.833324][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 775.833345][ C1] kthread+0x70e/0x8a0 [ 775.833365][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 775.833381][ C1] ? __pfx_kthread+0x10/0x10 [ 775.833402][ C1] ? __pfx_kthread+0x10/0x10 [ 775.833420][ C1] ret_from_fork+0x436/0x7d0 [ 775.833438][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 775.833458][ C1] ? __switch_to_asm+0x39/0x70 [ 775.833471][ C1] ? __switch_to_asm+0x33/0x70 [ 775.833484][ C1] ? __pfx_kthread+0x10/0x10 [ 775.833504][ C1] ret_from_fork_asm+0x1a/0x30 [ 775.833526][ C1] [ 775.932101][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 775.932123][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 775.932145][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.932157][ T38] Call Trace: [ 775.932165][ T38] [ 775.932173][ T38] dump_stack_lvl+0x99/0x250 [ 775.932201][ T38] ? __asan_memcpy+0x40/0x70 [ 775.932222][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.932244][ T38] ? __pfx__printk+0x10/0x10 [ 775.932276][ T38] vpanic+0x281/0x750 [ 775.932302][ T38] ? __pfx_vpanic+0x10/0x10 [ 775.932323][ T38] ? preempt_schedule+0xae/0xc0 [ 775.932348][ T38] ? preempt_schedule_common+0x83/0xd0 [ 775.932377][ T38] panic+0xb9/0xc0 [ 775.932399][ T38] ? __pfx_panic+0x10/0x10 [ 775.932423][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 775.932450][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 775.932474][ T38] watchdog+0xfd2/0xfe0 [ 775.932499][ T38] ? watchdog+0x1de/0xfe0 [ 775.932526][ T38] kthread+0x70e/0x8a0 [ 775.932553][ T38] ? __pfx_watchdog+0x10/0x10 [ 775.932572][ T38] ? __pfx_kthread+0x10/0x10 [ 775.932601][ T38] ? __pfx_kthread+0x10/0x10 [ 775.932625][ T38] ret_from_fork+0x436/0x7d0 [ 775.932649][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 775.932676][ T38] ? __switch_to_asm+0x39/0x70 [ 775.932691][ T38] ? __switch_to_asm+0x33/0x70 [ 775.932707][ T38] ? __pfx_kthread+0x10/0x10 [ 775.932731][ T38] ret_from_fork_asm+0x1a/0x30 [ 775.932769][ T38] [ 775.933024][ T38] Kernel Offset: disabled