last executing test programs: 4m41.92754656s ago: executing program 4 (id=1300): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x3b) 4m41.800864728s ago: executing program 4 (id=1301): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000002000010026bd7000fcdbdf250a1400070f0000022500010014000100fe8000110000000000000000000000221400030076657468315f746f5f6272696467650008000400d4"], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4m41.562054743s ago: executing program 4 (id=1305): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 4m39.626774708s ago: executing program 4 (id=1330): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) close(0x3) 4m39.540233132s ago: executing program 4 (id=1332): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m39.396230534s ago: executing program 4 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}}, 0x4) 4m24.236692085s ago: executing program 32 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}}, 0x4) 3m55.670610156s ago: executing program 1 (id=1757): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c4}, 0x0) pidfd_send_signal(r0, 0xa, &(0x7f0000000040)={0x1b, 0x8, 0x21d}, 0x0) 3m55.589266761s ago: executing program 1 (id=1760): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000280)) 3m55.298310072s ago: executing program 1 (id=1763): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070080006a0a00ff00000000dd0d000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) 3m54.84474304s ago: executing program 1 (id=1768): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 3m54.573801324s ago: executing program 1 (id=1772): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m54.28353977s ago: executing program 1 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x48042) 3m39.142723842s ago: executing program 33 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x48042) 58.142178716s ago: executing program 6 (id=3894): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) read$ptp(r0, &(0x7f0000000240)=""/225, 0xe1) 57.912673803s ago: executing program 6 (id=3898): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) 57.690912621s ago: executing program 6 (id=3901): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) 57.417846501s ago: executing program 6 (id=3903): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 57.207525662s ago: executing program 6 (id=3905): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8001}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) 55.574171213s ago: executing program 6 (id=3919): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @loopback={0xe0}, 0x2}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x4c7}, 0x8) 35.876178963s ago: executing program 3 (id=4041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x1100, 0x0, 0x3, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@empty, 0x1f82}, {@broadcast, 0x9}, {@local, 0x8c}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 35.601123704s ago: executing program 3 (id=4045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 35.178943987s ago: executing program 3 (id=4049): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.98257718s ago: executing program 5 (id=4060): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009040402100000fa00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) 32.910507277s ago: executing program 3 (id=4065): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.944836777s ago: executing program 5 (id=4068): mkdir(&(0x7f0000000000)='./file\x00', 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x4a) open(&(0x7f0000000240)='./file/file0/../\x00', 0x205, 0x0) chroot(&(0x7f0000000040)='./file/file0/..//file0\x00') 31.641685108s ago: executing program 5 (id=4070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xfffffe85, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 31.28084255s ago: executing program 5 (id=4072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x40, r1, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0c, 0xfac08, 0xfac0a]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) 31.047997529s ago: executing program 5 (id=4074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.678469489s ago: executing program 5 (id=4076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000910200"]) 30.572223408s ago: executing program 3 (id=4077): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x10, 0x1, &(0x7f0000000000)='F'}, {0x1, 0xd201, 0x0, 0x0}], 0x2}) 30.550249951s ago: executing program 2 (id=4078): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a9", 0x1}], 0x1}, 0x4001) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) 30.249036775s ago: executing program 2 (id=4079): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r2}, 0x80, 0x0}}], 0x2, 0x0) 28.711507811s ago: executing program 3 (id=4081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x4040f00}, 0x0) 23.494635225s ago: executing program 0 (id=4086): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) 23.387090839s ago: executing program 2 (id=4087): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000200)) 23.058546101s ago: executing program 2 (id=4088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x54}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 21.717357093s ago: executing program 0 (id=4089): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 17.756863588s ago: executing program 2 (id=4090): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f00000001c0)="024908e35e9811e74a883af7d2157523b9efe65dd07437e4c8346d40d21f498c1d38902fb95791c11ad31212976ecc538649", 0xfffffeea) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 17.686558813s ago: executing program 0 (id=4091): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x8, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x7, 0x8}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x9, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 17.522928257s ago: executing program 0 (id=4092): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0xffffffed) 16.764423764s ago: executing program 2 (id=4093): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x15c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x38, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9, 0x6, "4ac6768e05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 16.48394348s ago: executing program 0 (id=4094): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000) 15.575057537s ago: executing program 0 (id=4095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.47060101s ago: executing program 34 (id=4076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000910200"]) 13.207696847s ago: executing program 35 (id=4081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x4040f00}, 0x0) 1.2318889s ago: executing program 36 (id=4093): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x15c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x38, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9, 0x6, "4ac6768e05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 37 (id=4095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): descriptor?? [ 287.562387][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 287.594050][ T5927] dvb-usb: found a 'TeVii S662' in warm state. [ 287.594310][ T5927] dw2102: su3000_power_ctrl: 1, initialized 0 [ 287.594329][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 287.666482][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.670321][ T5927] dvbdev: DVB: registering new adapter (TeVii S662) [ 287.670749][ T5927] usb 7-1: media controller created [ 287.670777][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 287.670792][ T5927] dw2102: i2c transfer failed. [ 287.670809][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 287.670822][ T5927] dw2102: i2c transfer failed. [ 287.670838][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 287.670850][ T5927] dw2102: i2c transfer failed. [ 287.677104][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 287.677121][ T5927] dw2102: i2c transfer failed. [ 287.677138][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 287.677151][ T5927] dw2102: i2c transfer failed. [ 287.681120][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 287.681138][ T5927] dw2102: i2c transfer failed. [ 287.681149][ T5927] dvb-usb: MAC address: 02:02:02:02:02:02 [ 287.712081][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 287.729046][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 287.749092][ T31] usb 6-1: config 4 interface 0 has no altsetting 0 [ 287.824838][ T31] usb 6-1: string descriptor 0 read error: -22 [ 287.824936][ T31] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 287.824961][ T31] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 287.863388][ T8537] pl2303 4-1:162.79: required endpoints missing [ 287.876545][T10835] dvb-usb: bulk message failed: -22 (4/0) [ 287.876566][T10835] dw2102: i2c transfer failed. [ 287.938132][ T31] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 287.953426][ T8537] pl2303 4-1:162.183: pl2303 converter detected [ 287.959007][ T8537] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 287.960110][ T8537] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 287.961057][ T8537] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 287.965882][ T8537] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 287.967002][ T8537] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 287.968600][ T8537] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 287.969649][ T8537] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 287.971437][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.974159][ T8537] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 287.974560][ T8537] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 287.975309][ T8537] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 287.975805][ T8537] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 287.981451][ T31] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.994426][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 287.994501][ T31] usb 6-1: media controller created [ 288.010381][ T8537] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 288.046810][ T8537] usb 4-1: USB disconnect, device number 18 [ 288.076469][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 288.076489][ T5927] dw2102: command 0x0e transfer failed. [ 288.076498][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 288.076511][ T5927] dw2102: command 0x0e transfer failed. [ 288.146814][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.160855][ T8537] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 288.165717][ T8537] pl2303 4-1:162.183: device disconnected [ 288.382043][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 288.382065][ T5927] dw2102: command 0x0e transfer failed. [ 288.382075][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 288.382088][ T5927] dw2102: command 0x0e transfer failed. [ 288.382095][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 288.382111][ T5927] dw2102: command 0x51 transfer failed. [ 288.382120][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 288.382133][ T5927] dw2102: i2c probe for address 0x68 failed. [ 288.382204][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 288.382217][ T5927] dw2102: i2c probe for address 0x69 failed. [ 288.383855][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 288.383878][ T5927] dw2102: i2c probe for address 0x6a failed. [ 288.383970][T10843] dvb-usb: bulk message failed: -22 (5/0) [ 288.383984][T10843] dw2102: i2c transfer failed. [ 288.384044][ T5927] dw2102: probing for demodulator failed. Is the external power switched on? [ 288.384054][ T5927] dvb-usb: no frontend was attached by 'TeVii S662' [ 288.388511][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 288.664727][ T8567] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 288.685532][ T31] usb 6-1: USB disconnect, device number 8 [ 288.722050][ T5927] rc_core: IR keymap rc-tt-1500 not found [ 288.722068][ T5927] Registered IR keymap rc-empty [ 288.737071][ T5927] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 288.740056][ T5927] input: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input16 [ 288.771624][ T5927] dvb-usb: schedule remote query interval to 250 msecs. [ 288.771646][ T5927] dw2102: su3000_power_ctrl: 0, initialized 1 [ 288.771658][ T5927] dvb-usb: TeVii S662 successfully initialized and connected. [ 288.796712][ T5927] usb 7-1: USB disconnect, device number 2 [ 288.832220][ T8567] usb 3-1: Using ep0 maxpacket: 16 [ 288.840396][ T8567] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 288.840445][ T8567] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 288.840471][ T8567] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.840491][ T8567] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 288.840525][ T8567] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.840558][ T8567] usb 3-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 288.840581][ T8567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.929113][ T8567] usb 3-1: config 0 descriptor?? [ 289.190996][ T5927] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 289.407021][ T8567] nzxt-smart2 0003:1E71:200E.0029: item fetching failed at offset 0/3 [ 289.407922][ T8567] nzxt-smart2 0003:1E71:200E.0029: probe with driver nzxt-smart2 failed with error -22 [ 289.498275][T10877] netlink: 'syz.6.2145': attribute type 29 has an invalid length. [ 289.508492][T10877] netlink: 'syz.6.2145': attribute type 29 has an invalid length. [ 289.615127][ T8567] usb 3-1: USB disconnect, device number 22 [ 290.212404][ T5956] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 290.367396][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 290.369879][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.369911][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.369949][ T5956] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 290.369971][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.383897][ T5956] usb 4-1: config 0 descriptor?? [ 290.816052][ T5956] hid_mf 0003:0079:1801.002A: item fetching failed at offset 0/2 [ 290.847035][ T5956] hid_mf 0003:0079:1801.002A: HID parse failed. [ 290.847116][ T5956] hid_mf 0003:0079:1801.002A: probe with driver hid_mf failed with error -22 [ 291.008589][ T37] audit: type=1326 audit(1757623539.035:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f793eba9 code=0x7ffc0000 [ 291.008859][ T37] audit: type=1326 audit(1757623539.035:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f65f793eba9 code=0x7ffc0000 [ 291.009622][ T37] audit: type=1326 audit(1757623539.035:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f793eba9 code=0x7ffc0000 [ 291.009851][ T37] audit: type=1326 audit(1757623539.035:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f793eba9 code=0x7ffc0000 [ 291.010564][ T37] audit: type=1326 audit(1757623539.035:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f65f793eba9 code=0x7ffc0000 [ 291.010872][ T37] audit: type=1326 audit(1757623539.035:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f793eba9 code=0x7ffc0000 [ 291.011117][ T37] audit: type=1326 audit(1757623539.035:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10915 comm="syz.5.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f793eba9 code=0x7ffc0000 [ 291.024392][ T5956] usb 4-1: USB disconnect, device number 19 [ 291.192152][ T8535] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 291.347414][ T8535] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 291.347442][ T8535] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 291.347460][ T8535] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 291.347478][ T8535] usb 3-1: config 220 has no interface number 2 [ 291.347551][ T8535] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 291.347575][ T8535] usb 3-1: config 220 interface 0 has no altsetting 0 [ 291.347592][ T8535] usb 3-1: config 220 interface 76 has no altsetting 0 [ 291.347609][ T8535] usb 3-1: config 220 interface 1 has no altsetting 0 [ 291.422026][ T8535] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 291.422055][ T8535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.422070][ T8535] usb 3-1: Product: syz [ 291.422082][ T8535] usb 3-1: Manufacturer: syz [ 291.422095][ T8535] usb 3-1: SerialNumber: syz [ 291.684954][ T8535] usb 3-1: selecting invalid altsetting 0 [ 291.685551][ T8535] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 291.685584][ T8535] usb 3-1: No valid video chain found. [ 291.702843][T10930] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2162'. [ 291.716613][T10932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.759852][ T8535] usb 3-1: selecting invalid altsetting 0 [ 291.759891][ T8535] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 291.779652][ T8535] usb 3-1: USB disconnect, device number 23 [ 292.486079][T10959] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 292.527800][T10959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.601358][T10959] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 292.923892][ T8535] kernel write not supported for file /binder/state (pid: 8535 comm: kworker/1:10) [ 293.159764][ T8537] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 293.315506][ T8537] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 293.315542][ T8537] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.315565][ T8537] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.315599][ T8537] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 293.315683][ T8537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.337930][ T8537] usb 4-1: config 0 descriptor?? [ 293.772447][ T5956] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 293.785551][ T8537] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 293.785589][ T8537] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 293.785618][ T8537] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 293.785646][ T8537] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 293.785677][ T8537] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 293.785705][ T8537] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 293.785730][ T8537] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 293.785756][ T8537] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 293.825276][ T8537] holtek_mouse 0003:04D9:A067.002B: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.3-1/input0 [ 293.960170][ T5956] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 293.960200][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.960219][ T5956] usb 6-1: Product: syz [ 293.960233][ T5956] usb 6-1: Manufacturer: syz [ 293.960247][ T5956] usb 6-1: SerialNumber: syz [ 294.017779][ T8560] usb 4-1: USB disconnect, device number 20 [ 294.029373][ T5956] usb 6-1: config 0 descriptor?? [ 294.039373][ T5956] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 294.223891][T11007] fido_id[11007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 294.665498][ T5956] gspca_sunplus: reg_r err -71 [ 294.665608][ T5956] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 294.674119][ T5956] usb 6-1: USB disconnect, device number 9 [ 296.493175][T11091] program syz.3.2223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.784757][T11142] netlink: 'syz.3.2243': attribute type 1 has an invalid length. [ 298.711950][T11183] tipc: Started in network mode [ 298.711980][T11183] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 298.713387][T11183] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 298.714679][T11183] tipc: Enabled bearer , priority 10 [ 298.867201][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2261'. [ 299.140621][ T8537] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 299.282222][T11207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2269'. [ 299.282247][T11207] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2269'. [ 299.318266][ T8537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 299.318301][ T8537] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 299.318344][ T8537] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 299.318367][ T8537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.368344][ T8537] usb 3-1: config 0 descriptor?? [ 299.369518][T11190] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 299.617224][T11215] pim6reg: entered allmulticast mode [ 299.629590][T11216] pim6reg: left allmulticast mode [ 299.826378][ T8537] logitech 0003:046D:CA04.002C: unknown main item tag 0x6 [ 299.840429][ T8537] logitech 0003:046D:CA04.002C: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 299.840473][ T8537] logitech 0003:046D:CA04.002C: no inputs found [ 299.845736][ T8535] tipc: Node number set to 1 [ 300.027465][ T8535] usb 3-1: USB disconnect, device number 24 [ 300.301036][T11222] fido_id[11222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 300.995018][T11256] netlink: 'syz.6.2289': attribute type 322 has an invalid length. [ 301.519992][T11281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2301'. [ 301.671272][T11286] tipc: Enabling of bearer rejected, failed to enable media [ 301.911176][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2307'. [ 301.931778][T11296] 8021q: VLANs not supported on gre0 [ 303.022701][T11334] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 303.022701][T11334] program syz.5.2324 not setting count and/or reply_len properly [ 303.357619][T11347] netlink: 'syz.3.2330': attribute type 1 has an invalid length. [ 303.357639][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2330'. [ 303.641547][T11356] dvmrp0: entered allmulticast mode [ 303.656042][T11353] dvmrp0: left allmulticast mode [ 304.722045][ T8537] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 304.882292][ T8537] usb 4-1: Using ep0 maxpacket: 32 [ 304.884736][ T8537] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 304.884761][ T8537] usb 4-1: config 0 has no interface number 0 [ 304.884818][ T8537] usb 4-1: config 0 interface 12 has no altsetting 0 [ 304.887977][ T8537] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 304.888003][ T8537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.888024][ T8537] usb 4-1: Product: syz [ 304.888038][ T8537] usb 4-1: Manufacturer: syz [ 304.888052][ T8537] usb 4-1: SerialNumber: syz [ 304.914017][ T8537] usb 4-1: config 0 descriptor?? [ 305.145094][T11399] random: crng reseeded on system resumption [ 305.555139][ T8537] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 305.555195][ T8537] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 305.555211][ T8537] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 305.555297][ T8537] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 305.637930][ T8537] usb 4-1: USB disconnect, device number 21 [ 305.655936][T11407] netlink: 'syz.6.2358': attribute type 1 has an invalid length. [ 305.655958][T11407] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2358'. [ 306.268462][T11427] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2366'. [ 306.415135][ T5927] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 306.564601][ T5927] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.564629][ T5927] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.566286][ T5927] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.566315][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.566335][ T5927] usb 7-1: SerialNumber: syz [ 306.849132][ T5927] usb 7-1: 0:2 : does not exist [ 307.026689][ T5927] usb 7-1: USB disconnect, device number 3 [ 307.160365][T11455] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 307.181372][T10818] udevd[10818]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.194330][T11492] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2397'. [ 308.194393][T11492] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2397'. [ 308.612397][ T5956] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 308.767865][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.767900][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.767938][ T5956] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 308.767961][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.824207][ T5956] usb 4-1: config 0 descriptor?? [ 309.252877][T11522] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2410'. [ 309.267439][ T5956] sunplus 0003:04FC:05D8.002D: unknown main item tag 0x0 [ 309.267485][ T5956] sunplus 0003:04FC:05D8.002D: unknown main item tag 0x0 [ 309.267512][ T5956] sunplus 0003:04FC:05D8.002D: unknown main item tag 0x0 [ 309.267539][ T5956] sunplus 0003:04FC:05D8.002D: unknown main item tag 0x0 [ 309.267565][ T5956] sunplus 0003:04FC:05D8.002D: unknown main item tag 0x0 [ 309.283933][ T5956] sunplus 0003:04FC:05D8.002D: hidraw0: USB HID v0.79 Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 309.476036][ T5927] usb 4-1: USB disconnect, device number 22 [ 309.722434][T11534] netlink: 'syz.6.2415': attribute type 5 has an invalid length. [ 309.830856][T11529] fido_id[11529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 310.630405][T11565] netlink: 'syz.5.2429': attribute type 1 has an invalid length. [ 310.632017][ T31] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 310.789563][ T31] usb 3-1: string descriptor 0 read error: -22 [ 310.789708][ T31] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 310.789732][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.834038][ T31] usb 3-1: config 0 descriptor?? [ 310.840914][ T31] usbtest 3-1:0.0: FX2 device [ 310.840933][ T31] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 310.973711][T11572] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 310.973732][T11572] CUSE: unknown device info "3ܟ,̘" [ 310.973743][T11572] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 310.973743][T11572] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 310.973760][T11572] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|0htvw 7:" [ 310.973772][T11572] CUSE: DEVNAME unspecified [ 311.113056][ T5956] usb 3-1: USB disconnect, device number 25 [ 312.013092][T11602] comedi comedi3: comedi_test: 20263 microvolt, 31 microsecond waveform attached [ 312.329554][T11611] program syz.3.2444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.523013][T11615] loop9: detected capacity change from 0 to 7 [ 312.524544][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.524655][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.524747][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.524833][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.524959][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.525147][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.525237][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.525298][T11615] ldm_validate_partition_table(): Disk read failed. [ 312.525340][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.525426][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.525512][T11615] Buffer I/O error on dev loop9, logical block 0, async page read [ 312.525649][T11615] Dev loop9: unable to read RDB block 0 [ 312.525890][T11615] loop9: unable to read partition table [ 312.526082][T11615] loop9: partition table beyond EOD, truncated [ 312.526104][T11615] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 312.526104][T11615] ) failed (rc=-5) [ 312.742099][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 312.922755][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.922802][ T31] usb 7-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 312.922825][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.928216][ T31] usb 7-1: config 0 descriptor?? [ 313.403934][ T31] wacom 0003:056A:00C6.002E: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.6-1/input0 [ 313.572634][ T31] usb 7-1: USB disconnect, device number 4 [ 313.680987][T11649] EXT4-fs: Conflicting test_dummy_encryption options [ 314.486244][ T37] audit: type=1326 audit(1757623562.515:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11676 comm="syz.0.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 314.486298][ T37] audit: type=1326 audit(1757623562.515:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11676 comm="syz.0.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 314.494153][ T37] audit: type=1326 audit(1757623562.525:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11676 comm="syz.0.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 314.494202][ T37] audit: type=1326 audit(1757623562.525:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11676 comm="syz.0.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 314.494242][ T37] audit: type=1326 audit(1757623562.525:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11676 comm="syz.0.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 314.494281][ T37] audit: type=1326 audit(1757623562.525:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11676 comm="syz.0.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 314.494319][ T37] audit: type=1326 audit(1757623562.525:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11676 comm="syz.0.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 314.494356][ T37] audit: type=1326 audit(1757623562.525:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11676 comm="syz.0.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 314.858312][T11687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.181995][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 315.352077][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 315.354842][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.354899][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 315.354923][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.403984][ T31] usb 6-1: config 0 descriptor?? [ 315.421597][ T31] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 315.589392][T11709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2481'. [ 316.044700][ T31] gspca_vc032x: reg_r err -71 [ 316.044796][ T31] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 316.080303][ T31] usb 6-1: USB disconnect, device number 10 [ 317.174477][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.174555][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.542166][T11785] block nbd0: not configured, cannot reconfigure [ 317.992042][ T31] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 318.176334][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.176360][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.177863][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 318.177891][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.177911][ T31] usb 4-1: SerialNumber: syz [ 318.250252][ T31] usb 4-1: 0:2 : does not exist [ 318.540711][ T31] usb 4-1: USB disconnect, device number 23 [ 318.676753][T10818] udevd[10818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.682244][ T8560] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 318.832676][ T8560] usb 3-1: Using ep0 maxpacket: 32 [ 318.835313][ T8560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.835343][ T8560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.835381][ T8560] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 318.835403][ T8560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.840620][ T8560] usb 3-1: config 0 descriptor?? [ 319.296424][ T8560] uclogic 0003:28BD:0071.002F: interface is invalid, ignoring [ 319.353924][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2533'. [ 319.353958][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2533'. [ 319.477284][ T31] usb 3-1: USB disconnect, device number 26 [ 320.523806][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 321.471275][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 321.471299][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2567'. [ 321.996860][ T3544] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.003512][ T1169] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.004937][ T1169] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.004973][ T1169] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.109457][T11939] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2578'. [ 322.339221][T11949] bond0: option arp_interval: invalid value (18446744071880835072) [ 322.339247][T11949] bond0: option arp_interval: allowed values 0 - 2147483647 [ 322.583970][T11962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2584'. [ 322.584505][T11962] gretap0: entered promiscuous mode [ 322.862041][ T8566] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 323.017347][ T8566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.017379][ T8566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.017416][ T8566] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 323.017437][ T8566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.042091][ T8566] usb 3-1: config 0 descriptor?? [ 323.052337][ T5956] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 323.218754][ T5956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 323.220663][ T5956] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 323.250711][ T5956] usb 4-1: string descriptor 0 read error: -22 [ 323.250928][ T5956] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 323.251004][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.466465][ T5956] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 323.717338][ T8566] hid-led 0003:27B8:01ED.0030: probe with driver hid-led failed with error -71 [ 323.730374][ T8566] usb 3-1: USB disconnect, device number 27 [ 323.760699][ T37] audit: type=1800 audit(1757623571.785:90): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2604" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 324.162062][ T5956] usb 4-1: device descriptor read/64, error -71 [ 324.402242][ T5956] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 324.555745][ T5956] usb 4-1: device firmware changed [ 324.570458][ T5956] usb 4-1: USB disconnect, device number 24 [ 324.762106][ T5956] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 324.916191][ T5956] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 324.936079][ T5956] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 324.936110][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.936130][ T5956] usb 4-1: Product: syz [ 324.936144][ T5956] usb 4-1: Manufacturer: syz [ 324.936158][ T5956] usb 4-1: SerialNumber: syz [ 324.988942][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2619'. [ 325.372176][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 325.534649][ T31] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 325.534678][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.562654][ T31] usb 6-1: config 0 descriptor?? [ 325.912466][ T985] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 325.999816][ T31] hackrf 6-1:0.0: Board ID: 00 [ 325.999839][ T31] hackrf 6-1:0.0: Firmware version: [ 326.055743][ T5956] usb 4-1: USB disconnect, device number 25 [ 326.064302][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 326.064334][ T985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.064375][ T985] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 326.064396][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.107394][ T985] usb 3-1: config 0 descriptor?? [ 326.110758][T12049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.130485][ T31] hackrf 6-1:0.0: Registered as swradio24 [ 326.130509][ T31] videodev: could not get a free minor [ 326.130529][ T31] hackrf 6-1:0.0: Failed to register as video device (-23) [ 326.153555][ T31] hackrf 6-1:0.0: probe with driver hackrf failed with error -23 [ 326.244323][ T31] usb 6-1: USB disconnect, device number 11 [ 326.332973][T12063] macsec1: entered promiscuous mode [ 326.566996][ T985] playstation 0003:054C:0BA0.0031: unknown main item tag 0x0 [ 326.567035][ T985] playstation 0003:054C:0BA0.0031: unknown main item tag 0x0 [ 326.567064][ T985] playstation 0003:054C:0BA0.0031: unknown main item tag 0x0 [ 326.567092][ T985] playstation 0003:054C:0BA0.0031: unknown main item tag 0x0 [ 326.567118][ T985] playstation 0003:054C:0BA0.0031: unknown main item tag 0x0 [ 326.594733][ T985] playstation 0003:054C:0BA0.0031: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 326.599030][ T37] audit: type=1800 audit(1757623574.625:91): pid=12068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2639" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 326.775608][ T985] playstation 0003:054C:0BA0.0031: Failed to retrieve feature with reportID 18: -71 [ 326.775638][ T985] playstation 0003:054C:0BA0.0031: Failed to retrieve DualShock4 pairing info: -71 [ 326.775689][ T985] playstation 0003:054C:0BA0.0031: Failed to get MAC address from DualShock4 [ 326.775704][ T985] playstation 0003:054C:0BA0.0031: Failed to create dualshock4. [ 326.829322][ T985] playstation 0003:054C:0BA0.0031: probe with driver playstation failed with error -71 [ 326.893018][ T985] usb 3-1: USB disconnect, device number 28 [ 327.066784][T12077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2641'. [ 327.068046][T12077] IPVS: Error connecting to the multicast addr [ 327.808517][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 327.902153][ T8535] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 328.056784][ T8535] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 328.056812][ T8535] usb 6-1: config 0 has no interface number 0 [ 328.056843][ T8535] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 328.056944][ T8535] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 328.056971][ T8535] usb 6-1: config 0 interface 255 has no altsetting 0 [ 328.057004][ T8535] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 328.057027][ T8535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.125272][ T8535] usb 6-1: config 0 descriptor?? [ 328.131227][ T8535] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 328.205607][T12109] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2657'. [ 328.374124][ T8560] usb 6-1: USB disconnect, device number 12 [ 328.874585][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 328.874609][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'. [ 328.874635][T12136] netlink: 'syz.3.2669': attribute type 19 has an invalid length. [ 328.874650][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 329.098192][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2673'. [ 329.098284][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2673'. [ 329.312235][ T985] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 329.315258][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2679'. [ 329.467289][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.467322][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.467361][ T985] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 329.467383][ T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.485476][ T985] usb 6-1: config 0 descriptor?? [ 329.489268][T12159] netlink: 'syz.6.2680': attribute type 21 has an invalid length. [ 329.489287][T12159] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2680'. [ 329.489508][T12159] netlink: 'syz.6.2680': attribute type 4 has an invalid length. [ 329.489522][T12159] netlink: 'syz.6.2680': attribute type 5 has an invalid length. [ 329.917213][ T985] arvo 0003:1E7D:30D4.0032: unknown main item tag 0x0 [ 329.917251][ T985] arvo 0003:1E7D:30D4.0032: unknown main item tag 0x0 [ 329.917279][ T985] arvo 0003:1E7D:30D4.0032: unknown main item tag 0x0 [ 329.917306][ T985] arvo 0003:1E7D:30D4.0032: unknown main item tag 0x0 [ 329.917332][ T985] arvo 0003:1E7D:30D4.0032: unknown main item tag 0x0 [ 329.940209][ T985] arvo 0003:1E7D:30D4.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 330.126226][ T985] arvo 0003:1E7D:30D4.0032: couldn't init struct arvo_device [ 330.126280][ T985] arvo 0003:1E7D:30D4.0032: couldn't install keyboard [ 330.131834][ T985] arvo 0003:1E7D:30D4.0032: probe with driver arvo failed with error -71 [ 330.157507][ T985] usb 6-1: USB disconnect, device number 13 [ 330.605308][T12193] netlink: 'syz.6.2695': attribute type 11 has an invalid length. [ 330.605330][T12193] netlink: 'syz.6.2695': attribute type 13 has an invalid length. [ 330.705367][T12195] QAT: Invalid ioctl 1075883590 [ 330.705485][T12195] QAT: Invalid ioctl 1075883590 [ 330.705575][T12195] QAT: Invalid ioctl 1075883590 [ 330.705662][T12195] QAT: Invalid ioctl 1075883590 [ 330.705763][T12195] QAT: Invalid ioctl 1075883590 [ 330.705847][T12195] QAT: Invalid ioctl 1075883590 [ 330.705939][T12195] QAT: Invalid ioctl 1075883590 [ 330.706029][T12195] QAT: Invalid ioctl 1075883590 [ 330.706115][T12195] QAT: Invalid ioctl 1075883590 [ 330.706205][T12195] QAT: Invalid ioctl 1075883590 [ 331.802468][T12222] netlink: 'syz.0.2710': attribute type 66 has an invalid length. [ 331.862040][ T8535] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 331.897271][T12231] syz.6.2715 (12231) used greatest stack depth: 17584 bytes left [ 332.022183][ T8535] usb 4-1: Using ep0 maxpacket: 32 [ 332.024715][ T8535] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 332.024740][ T8535] usb 4-1: config 0 has no interface number 0 [ 332.027826][ T8535] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 332.027853][ T8535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.027872][ T8535] usb 4-1: Product: syz [ 332.027886][ T8535] usb 4-1: Manufacturer: syz [ 332.027900][ T8535] usb 4-1: SerialNumber: syz [ 332.033699][ T8535] usb 4-1: config 0 descriptor?? [ 332.086638][ T8535] smsc95xx v2.0.0 [ 332.661509][ T8535] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 332.661539][ T8535] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 332.662222][ T8535] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 332.662504][ T8535] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 332.700565][ T8535] usb 4-1: USB disconnect, device number 26 [ 333.260247][T12273] program syz.2.2735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.299021][T12275] netlink: 'syz.3.2736': attribute type 1 has an invalid length. [ 333.299042][T12275] __nla_validate_parse: 5 callbacks suppressed [ 333.299054][T12275] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2736'. [ 333.299083][T12275] netlink: 'syz.3.2736': attribute type 1 has an invalid length. [ 334.005176][T12296] netlink: 'syz.6.2745': attribute type 1 has an invalid length. [ 334.005199][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2745'. [ 334.005216][T12296] nbd: illegal input index 65544 [ 334.255305][T12307] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 334.622597][ T985] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 334.675715][T12319] delete_channel: no stack [ 334.676120][T12317] delete_channel: no stack [ 334.774731][ T985] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 334.774759][ T985] usb 4-1: config 0 has no interface number 0 [ 334.774810][ T985] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.774833][ T985] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 334.774858][ T985] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 334.774882][ T985] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 334.774917][ T985] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 334.774943][ T985] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 334.774986][ T985] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 334.775009][ T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.804539][ T985] usb 4-1: config 0 descriptor?? [ 334.805859][T12311] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.806711][T12311] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.932640][ T985] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 335.239835][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-1) [ 335.279225][ T31] usb 4-1: USB disconnect, device number 27 [ 335.290266][ T31] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 336.022060][T12358] program syz.3.2775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.708900][T12388] sp0: Synchronizing with TNC [ 336.902166][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'. [ 338.892190][ T5956] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 338.962020][ T8535] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 339.064713][ T5956] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 339.064742][ T5956] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 339.064765][ T5956] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 339.064784][ T5956] usb 6-1: config 8 has no interface number 0 [ 339.064851][ T5956] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 339.064877][ T5956] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.067930][ T5956] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 339.067956][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.067975][ T5956] usb 6-1: Product: syz [ 339.067989][ T5956] usb 6-1: Manufacturer: syz [ 339.068003][ T5956] usb 6-1: SerialNumber: syz [ 339.117315][ T8535] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 339.117348][ T8535] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 339.117375][ T8535] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 339.125570][ T8535] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 339.125598][ T8535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.125618][ T8535] usb 4-1: Product: syz [ 339.125631][ T8535] usb 4-1: Manufacturer: syz [ 339.125645][ T8535] usb 4-1: SerialNumber: syz [ 339.146624][ T8535] usb 4-1: config 0 descriptor?? [ 339.147770][T12467] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 339.147955][T12467] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 339.159126][ T8535] usb 4-1: ucan: probing device on interface #0 [ 339.367920][ T5956] usb 6-1: USB disconnect, device number 14 [ 339.440597][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 339.444389][T12477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.836811][ T8535] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 339.867161][ T8535] usb 4-1: USB disconnect, device number 28 [ 339.922275][ T985] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 340.074508][ T985] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.074540][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.074564][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 340.074585][ T985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.074625][ T985] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.074646][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.158955][ T985] usb 3-1: config 0 descriptor?? [ 340.590151][ T985] hid_parser_main: 2 callbacks suppressed [ 340.590172][ T985] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 340.637245][ T985] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 340.832915][ T985] usb 3-1: USB disconnect, device number 29 [ 340.942520][T12514] netlink: 'syz.0.2850': attribute type 31 has an invalid length. [ 340.965860][T12508] fido_id[12508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 341.282401][ T5956] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 341.437022][T12532] netlink: 'syz.5.2859': attribute type 1 has an invalid length. [ 341.445083][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 341.447802][ T5956] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.447859][ T5956] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.449503][ T5956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.449531][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 341.449550][ T5956] usb 4-1: SerialNumber: syz [ 341.524932][ T5956] cdc_acm 4-1:1.0: skipping garbage [ 341.524957][ T5956] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 341.524974][ T5956] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 341.525015][ T5956] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 341.730764][ T5956] usb 4-1: USB disconnect, device number 29 [ 341.883995][ T8535] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 342.038812][ T8535] usb 6-1: Using ep0 maxpacket: 8 [ 342.045096][ T8535] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 342.045123][ T8535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.045142][ T8535] usb 6-1: Product: syz [ 342.045155][ T8535] usb 6-1: Manufacturer: syz [ 342.045169][ T8535] usb 6-1: SerialNumber: syz [ 342.069173][ T8535] usb 6-1: config 0 descriptor?? [ 342.089476][ T8535] gspca_main: se401-2.14.0 probing 047d:5003 [ 342.251330][T12562] netlink: 'syz.0.2874': attribute type 12 has an invalid length. [ 342.251413][T12562] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2874'. [ 342.490622][ T8535] gspca_se401: Wrong descriptor type [ 342.722043][ T8535] usb 6-1: USB disconnect, device number 15 [ 343.643125][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 344.259372][T12625] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2902'. [ 344.595994][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 344.842352][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 345.023136][ T8535] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 345.188823][ T8535] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.188855][ T8535] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.188885][ T8535] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.188927][ T8535] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 345.188949][ T8535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.260452][ T8535] usb 7-1: config 0 descriptor?? [ 345.716887][ T8535] chicony 0003:04F2:1236.0034: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.6-1/input0 [ 345.932304][ T8535] usb 7-1: USB disconnect, device number 5 [ 345.962901][T12688] fido_id[12688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 346.437048][T12710] tipc: Enabling of bearer rejected, failed to enable media [ 346.840211][ T3544] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.840589][T12728] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2947'. [ 346.840641][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2947'. [ 346.841384][ T3544] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.841426][ T3544] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.841459][ T3544] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.053877][T12738] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 348.021984][ T8535] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 348.180570][ T8535] usb 7-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 348.180602][ T8535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.180621][ T8535] usb 7-1: Product: syz [ 348.180634][ T8535] usb 7-1: Manufacturer: syz [ 348.180647][ T8535] usb 7-1: SerialNumber: syz [ 348.227049][ T8535] usb 7-1: config 0 descriptor?? [ 348.239381][ T8535] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 348.631563][T12781] xt_HMARK: proto mask must be zero with L3 mode [ 348.659866][ T8535] input: sonixb as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 348.889104][ T985] usb 7-1: USB disconnect, device number 6 [ 350.042614][ T8566] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 350.192590][ T8566] usb 6-1: Using ep0 maxpacket: 16 [ 350.194901][ T8566] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.194931][ T8566] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.194968][ T8566] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 350.194991][ T8566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.217995][ T8566] usb 6-1: config 0 descriptor?? [ 350.666143][ T8566] hid-multitouch 0003:1FD2:6007.0035: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 350.834461][ T8535] usb 6-1: USB disconnect, device number 16 [ 351.001051][T12848] fido_id[12848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 353.180054][ T5990] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 353.233065][ T5990] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz0 [ 353.284147][ T8535] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 353.451937][ T8535] usb 4-1: Using ep0 maxpacket: 32 [ 353.454584][ T8535] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.454614][ T8535] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.454641][ T8535] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.454673][ T8535] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 353.454696][ T8535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.517845][ T8535] usb 4-1: config 0 descriptor?? [ 353.600260][T12916] fido_id[12916]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 353.972042][ T8535] magicmouse 0003:05AC:0324.0037: unknown main item tag 0x0 [ 353.972085][ T8535] magicmouse 0003:05AC:0324.0037: unknown main item tag 0x0 [ 353.972114][ T8535] magicmouse 0003:05AC:0324.0037: unknown main item tag 0x0 [ 353.972141][ T8535] magicmouse 0003:05AC:0324.0037: unknown main item tag 0x0 [ 353.972168][ T8535] magicmouse 0003:05AC:0324.0037: unknown main item tag 0x0 [ 353.977416][ T8535] magicmouse 0003:05AC:0324.0037: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 353.977466][ T8535] magicmouse 0003:05AC:0324.0037: magicmouse input not registered [ 354.043715][ T8535] magicmouse 0003:05AC:0324.0037: probe with driver magicmouse failed with error -12 [ 354.050517][T12934] netlink: 'syz.6.3043': attribute type 6 has an invalid length. [ 354.106082][T12937] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 354.214566][ T985] usb 4-1: USB disconnect, device number 30 [ 354.296435][T12938] fido_id[12938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 354.485566][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3048'. [ 355.544310][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'. [ 356.162721][ T8566] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 356.180082][T13010] sp0: Synchronizing with TNC [ 356.317948][ T8566] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 356.317979][ T8566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.334085][ T8566] usb 6-1: config 0 descriptor?? [ 356.378370][ T8566] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 356.966527][ T8566] gp8psk: usb out operation failed. [ 356.966544][ T8566] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 356.966585][ T8566] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 356.980406][ T8566] usb 6-1: USB disconnect, device number 17 [ 357.494360][ T5990] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 357.648624][ T5990] usb 3-1: Using ep0 maxpacket: 32 [ 357.651015][ T5990] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 357.651039][ T5990] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 357.651057][ T5990] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 357.651116][ T5990] usb 3-1: config 5 interface 0 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 357.651141][ T5990] usb 3-1: config 5 interface 0 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 357.651164][ T5990] usb 3-1: config 5 interface 0 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 357.651189][ T5990] usb 3-1: config 5 interface 0 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 357.651211][ T5990] usb 3-1: config 5 interface 0 has no altsetting 0 [ 357.701967][ T5990] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=9f.21 [ 357.701995][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.702015][ T5990] usb 3-1: Product: syz [ 357.702028][ T5990] usb 3-1: Manufacturer: syz [ 357.702042][ T5990] usb 3-1: SerialNumber: syz [ 358.071720][ T5990] usb 3-1: USB disconnect, device number 30 [ 358.310707][T13071] sch_fq: defrate 4294967295 ignored. [ 358.535918][T13080] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3113'. [ 358.596874][T13084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3115'. [ 358.842098][ T5852] Bluetooth: hci5: command 0x0405 tx timeout [ 361.042269][ T5990] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 361.099453][ T37] audit: type=1326 audit(2000000010.009:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13179 comm="syz.2.3162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d3c23eba9 code=0x0 [ 361.208483][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 361.208534][ T5990] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 361.208557][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.256003][ T5990] usb 6-1: config 0 descriptor?? [ 361.261667][T13168] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 361.699665][ T5990] belkin 0003:050D:3201.0038: unknown main item tag 0x2 [ 361.699703][ T5990] belkin 0003:050D:3201.0038: unknown main item tag 0x0 [ 361.737045][ T5990] belkin 0003:050D:3201.0038: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.5-1/input0 [ 361.912630][ T8566] usb 6-1: USB disconnect, device number 18 [ 362.157826][T13208] bridge1: entered promiscuous mode [ 362.157856][T13208] bridge1: entered allmulticast mode [ 362.174961][T13208] team0: Port device bridge1 added [ 362.452508][T13215] program syz.2.3179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.861968][ T8566] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 363.024472][ T8566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.024505][ T8566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.024544][ T8566] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 363.024566][ T8566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.034730][ T8566] usb 3-1: config 0 descriptor?? [ 363.526382][ T8566] stadia 0003:18D1:9400.0039: unexpected long global item [ 363.527178][ T8566] stadia 0003:18D1:9400.0039: parse failed [ 363.527248][ T8566] stadia 0003:18D1:9400.0039: probe with driver stadia failed with error -22 [ 363.753158][ T8560] usb 3-1: USB disconnect, device number 31 [ 365.083172][T13296] mkiss: ax0: crc mode is auto. [ 365.252523][ T8567] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 365.261998][ T5927] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 365.402369][ T8567] usb 6-1: Using ep0 maxpacket: 32 [ 365.404896][ T8567] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 365.404920][ T8567] usb 6-1: config 0 has no interface number 0 [ 365.404966][ T8567] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.404991][ T8567] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 365.405013][ T8567] usb 6-1: config 0 interface 85 has no altsetting 0 [ 365.408064][ T8567] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 365.408092][ T8567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.408111][ T8567] usb 6-1: Product: syz [ 365.408125][ T8567] usb 6-1: Manufacturer: syz [ 365.408139][ T8567] usb 6-1: SerialNumber: syz [ 365.412082][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 365.414098][ T8567] usb 6-1: config 0 descriptor?? [ 365.415834][ T5927] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.415863][ T5927] usb 7-1: config 0 has no interface number 0 [ 365.433285][ T5927] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 365.433312][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.433331][ T5927] usb 7-1: Product: syz [ 365.433345][ T5927] usb 7-1: Manufacturer: syz [ 365.433359][ T5927] usb 7-1: SerialNumber: syz [ 365.569224][ T5927] usb 7-1: config 0 descriptor?? [ 365.653403][ T8567] appletouch 6-1:0.85: Failed to read mode from device. [ 365.653664][ T8567] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 365.794781][ T5927] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 365.795899][ T5927] gspca_spca1528: reg_w err -71 [ 365.814093][ T5927] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 365.819335][ T5927] usb 7-1: USB disconnect, device number 7 [ 365.850595][T10819] udevd[10819]: setting mode of /dev/bus/usb/007/007 to 020664 failed: No such file or directory [ 365.850860][T10819] udevd[10819]: setting owner of /dev/bus/usb/007/007 to uid=0, gid=0 failed: No such file or directory [ 365.879770][ T8567] usb 6-1: USB disconnect, device number 19 [ 366.548327][T13326] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 366.548386][T13326] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 366.548438][T13326] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 366.548541][T13326] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 366.548586][T13326] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 367.733051][T13376] netlink: 'syz.2.3256': attribute type 15 has an invalid length. [ 367.993080][T13385] hugetlbfs: Bad value '%' for mount option 'size' [ 367.993080][T13385] [ 368.219090][T13397] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 368.219090][T13397] The task syz.5.3264 (13397) triggered the difference, watch for misbehavior. [ 368.487780][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'. [ 368.558314][T13410] program syz.3.3272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.982004][ T5927] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 369.019000][T13424] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3280'. [ 369.145931][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.145963][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.146002][ T5927] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 369.146025][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.193042][ T5927] usb 4-1: config 0 descriptor?? [ 369.626031][ T5927] ortek 0003:05A4:2000.003A: item fetching failed at offset 3/5 [ 369.626885][ T5927] ortek 0003:05A4:2000.003A: probe with driver ortek failed with error -22 [ 369.719936][T13442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3288'. [ 369.825700][ T8567] usb 4-1: USB disconnect, device number 31 [ 371.229391][T13495] ucma_write: process 1464 (syz.2.3311) changed security contexts after opening file descriptor, this is not allowed. [ 372.032067][ T5927] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 372.186472][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.186519][ T5927] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 372.186541][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.193658][ T5927] usb 7-1: config 0 descriptor?? [ 372.352093][ T8537] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 372.360749][T13539] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3334'. [ 372.360810][T13539] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3334'. [ 372.527076][ T8537] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.527103][ T8537] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 372.527123][ T8537] usb 3-1: config 1 has no interface number 0 [ 372.527235][ T8537] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.552514][ T8537] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.552540][ T8537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.552559][ T8537] usb 3-1: Product: syz [ 372.552572][ T8537] usb 3-1: Manufacturer: syz [ 372.552586][ T8537] usb 3-1: SerialNumber: syz [ 372.674526][ T8537] usb 3-1: selecting invalid altsetting 1 [ 372.679318][ T5927] zydacron 0003:13EC:0006.003B: unknown main item tag 0x0 [ 372.679356][ T5927] zydacron 0003:13EC:0006.003B: unknown main item tag 0x0 [ 372.679441][ T5927] zydacron 0003:13EC:0006.003B: unknown main item tag 0x0 [ 372.679470][ T5927] zydacron 0003:13EC:0006.003B: unknown main item tag 0x0 [ 372.679495][ T5927] zydacron 0003:13EC:0006.003B: unknown main item tag 0x0 [ 372.734636][ T5927] zydacron 0003:13EC:0006.003B: hidraw0: USB HID v0.01 Device [HID 13ec:0006] on usb-dummy_hcd.6-1/input0 [ 372.917107][ T8560] usb 7-1: USB disconnect, device number 8 [ 373.101911][ T8537] usb 3-1: selecting invalid altsetting 1 [ 373.101968][ T8537] cdc_ncm 3-1:1.1: bind() failure [ 373.238777][T13546] fido_id[13546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 373.303066][ T8537] usb 3-1: USB disconnect, device number 32 [ 373.902027][ T8567] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 373.928829][T13577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.052255][ T8567] usb 6-1: Using ep0 maxpacket: 32 [ 374.054577][ T8567] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 374.054603][ T8567] usb 6-1: config 0 has no interface number 0 [ 374.081525][ T8567] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 374.081555][ T8567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.081575][ T8567] usb 6-1: Product: syz [ 374.081589][ T8567] usb 6-1: Manufacturer: syz [ 374.081602][ T8567] usb 6-1: SerialNumber: syz [ 374.135556][ T8567] usb 6-1: config 0 descriptor?? [ 374.148139][ T8567] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 374.148207][ T8567] dvb-usb: bulk message failed: -22 (2/0) [ 374.168615][ T8567] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 374.169475][ T8567] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 374.169544][ T8567] usb 6-1: media controller created [ 374.186499][T13585] sctp: [Deprecated]: syz.6.3356 (pid 13585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.186499][T13585] Use struct sctp_sack_info instead [ 374.238673][ T8567] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.279390][ T8567] cxusb: set interface failed [ 374.279409][ T8567] dvb-usb: bulk message failed: -22 (1/0) [ 374.369322][T13568] cxusb: i2c wr: len=85 is too big! [ 374.369322][T13568] [ 374.370236][ T8567] DVB: Unable to find symbol lgdt330x_attach() [ 374.370246][ T8567] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 374.495221][T13596] Falling back ldisc for ptm0. [ 374.522759][ T8567] rc_core: IR keymap rc-dvico-portable not found [ 374.522777][ T8567] Registered IR keymap rc-empty [ 374.524583][ T8567] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 374.530274][ T8567] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input24 [ 374.562082][ T8535] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 374.575867][ T8567] dvb-usb: schedule remote query interval to 100 msecs. [ 374.575889][ T8567] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 374.598638][ T8567] usb 6-1: USB disconnect, device number 20 [ 374.714590][ T8535] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 374.714621][ T8535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.747632][ T8535] usb 3-1: config 0 descriptor?? [ 374.766284][ T8535] cp210x 3-1:0.0: cp210x converter detected [ 374.904477][ T8567] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 375.059409][T13608] can0: slcan on ttyS3. [ 375.226677][T13610] can0 (unregistered): slcan off ttyS3. [ 375.227090][T13610] Falling back ldisc for ttyS3. [ 375.362193][ T8535] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 375.362245][ T8535] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 375.402635][ T8535] usb 3-1: cp210x converter now attached to ttyUSB0 [ 375.405954][ T8535] usb 3-1: USB disconnect, device number 33 [ 375.429112][ T8535] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 375.429895][ T8535] cp210x 3-1:0.0: device disconnected [ 375.432664][ T8560] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 375.587080][ T8560] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.587128][ T8560] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 375.587152][ T8560] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.598011][ T8560] usb 7-1: config 0 descriptor?? [ 376.109695][ T8560] logitech-djreceiver 0003:046D:C71F.003C: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.6-1/input0 [ 376.315949][ T985] usb 7-1: USB disconnect, device number 9 [ 376.632151][T13653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3386'. [ 377.984796][T13699] netlink: 'syz.5.3407': attribute type 11 has an invalid length. [ 378.252195][ T8567] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 378.413090][ T8567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.413139][ T8567] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 378.413162][ T8567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.458232][ T8567] usb 3-1: config 0 descriptor?? [ 378.608574][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.608678][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.632349][ T8560] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 378.793209][ T8560] usb 7-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 378.793293][ T8560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.793313][ T8560] usb 7-1: Product: syz [ 378.793327][ T8560] usb 7-1: Manufacturer: syz [ 378.793341][ T8560] usb 7-1: SerialNumber: syz [ 378.860115][ T8560] usb 7-1: config 0 descriptor?? [ 378.958549][ T8567] lenovo 0003:17EF:60A3.003D: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 379.150527][ T8537] usb 3-1: USB disconnect, device number 34 [ 379.287689][ T8560] usb_8dev 7-1:0.0 can0: sending command message failed [ 379.287715][ T8560] usb_8dev 7-1:0.0 can0: can't get firmware version [ 379.369125][T13718] fido_id[13718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 379.467475][ T8560] usb_8dev 7-1:0.0: probe with driver usb_8dev failed with error -22 [ 379.509005][ T8560] usb 7-1: USB disconnect, device number 10 [ 379.725365][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3422'. [ 379.775660][T13732] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.176224][T13732] bridge_slave_1 (unregistering): left allmulticast mode [ 380.176257][T13732] bridge_slave_1 (unregistering): left promiscuous mode [ 380.176387][T13732] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.773446][ T5927] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 380.936605][ T5927] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 380.936633][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.939848][ T5927] usb 3-1: config 0 descriptor?? [ 380.958045][ T5927] cp210x 3-1:0.0: cp210x converter detected [ 381.549968][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3450'. [ 381.620071][ T5927] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 381.620128][ T5927] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 381.641032][ T5927] usb 3-1: cp210x converter now attached to ttyUSB0 [ 381.687794][ T5927] usb 3-1: USB disconnect, device number 35 [ 381.698148][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 381.698962][ T5927] cp210x 3-1:0.0: device disconnected [ 382.827959][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 383.489760][ T13] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 383.540715][T13843] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3472'. [ 383.541816][T13843] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3472'. [ 383.690743][T13848] sp0: Synchronizing with TNC [ 383.702640][T13848] sp0: Found TNC [ 385.922926][ T8535] kernel write not supported for file /comedi4 (pid: 8535 comm: kworker/1:10) [ 386.079831][ T37] audit: type=1326 audit(2000000034.989:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13910 comm="syz.5.3502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65f793eba9 code=0x0 [ 386.522023][ T8535] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 386.685274][ T8535] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.685303][ T8535] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 386.685356][ T8535] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 386.685380][ T8535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.706711][ T8535] usb 3-1: config 0 descriptor?? [ 386.723309][ T8535] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 386.723379][ T8535] dvb-usb: bulk message failed: -22 (3/0) [ 386.741235][ T8535] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 386.744692][ T8535] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 386.744745][ T8535] usb 3-1: media controller created [ 386.760816][ T8535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.837401][ T8535] dvb-usb: bulk message failed: -22 (6/0) [ 386.837557][ T8535] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 386.884964][ T8535] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 386.950473][T13922] dvb-usb: bulk message failed: -22 (2/0) [ 386.975851][ T8535] dvb-usb: schedule remote query interval to 150 msecs. [ 386.975868][ T8535] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 387.087509][ T8535] usb 3-1: USB disconnect, device number 36 [ 387.293502][ T8535] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 387.341454][T13941] blkio.reset_stats is deprecated [ 387.791715][T13955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3523'. [ 388.486144][T13985] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3535'. [ 388.490010][T13985] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3535'. [ 388.632307][ T8567] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 388.792247][ T8567] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.792272][ T8567] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 388.792316][ T8567] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 388.792338][ T8567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.854197][ T8567] usb 4-1: config 0 descriptor?? [ 388.876005][ T8567] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 388.876050][ T8567] dvb-usb: bulk message failed: -22 (3/0) [ 388.900482][ T8567] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 388.901468][ T8567] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 388.901529][ T8567] usb 4-1: media controller created [ 388.929091][ T8567] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.969276][ T8567] dvb-usb: bulk message failed: -22 (6/0) [ 388.969360][ T8567] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 388.984318][ T8567] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 388.999197][ T8567] dvb-usb: schedule remote query interval to 150 msecs. [ 388.999218][ T8567] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 389.042519][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'. [ 389.204448][T13983] dvb-usb: bulk message failed: -22 (2/0) [ 389.205353][ T8567] dvb-usb: bulk message failed: -22 (1/0) [ 389.205381][ T8567] dvb-usb: error while querying for an remote control event. [ 389.287682][ T8567] usb 4-1: USB disconnect, device number 32 [ 389.549783][ T8567] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 390.421467][T14034] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3550'. [ 390.460813][T14034] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3550'. [ 391.315041][T14051] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 391.342479][ T8535] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.472078][ T5158] Bluetooth: hci5: link tx timeout [ 391.472418][ T5158] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 391.632139][ T5927] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.653577][ T985] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 391.793637][ T5158] Bluetooth: hci5: link tx timeout [ 391.793656][ T5158] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 391.811682][ T985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.811708][ T985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 391.811758][ T985] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 391.811781][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.824149][ T985] usb 7-1: config 0 descriptor?? [ 391.828084][ T5158] Bluetooth: hci5: link tx timeout [ 391.828101][ T5158] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 391.865823][ T985] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 391.865870][ T985] dvb-usb: bulk message failed: -22 (3/0) [ 391.884001][ T985] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 391.893490][ T985] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 391.893547][ T985] usb 7-1: media controller created [ 391.896124][ T985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.924326][ T5158] Bluetooth: hci5: link tx timeout [ 391.924345][ T5158] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 391.972849][ T985] dvb-usb: bulk message failed: -22 (6/0) [ 391.972940][ T985] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 392.006381][ T985] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 392.022590][ T985] dvb-usb: schedule remote query interval to 150 msecs. [ 392.022612][ T985] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 392.083603][T14070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'. [ 392.114574][ T5158] Bluetooth: hci5: link tx timeout [ 392.114593][ T5158] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.139039][T14055] dvb-usb: bulk message failed: -22 (2/0) [ 392.144713][ T985] usb 7-1: USB disconnect, device number 11 [ 392.218440][ T5158] Bluetooth: hci5: link tx timeout [ 392.218458][ T5158] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.288086][T14074] kvm: kvm [14073]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x81 [ 392.448609][ T985] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 392.566296][ T8567] kernel write not supported for file /uhid (pid: 8567 comm: kworker/0:13) [ 393.025343][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3574'. [ 393.249532][ T5158] Bluetooth: hci5: link tx timeout [ 393.249550][ T5158] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 393.562484][ T5158] Bluetooth: hci5: command 0x0405 tx timeout [ 395.837629][ T37] audit: type=1326 audit(2000000044.749:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 395.837682][ T37] audit: type=1326 audit(2000000044.749:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 395.862873][ T37] audit: type=1326 audit(2000000044.769:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 395.862920][ T37] audit: type=1326 audit(2000000044.769:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 395.862963][ T37] audit: type=1326 audit(2000000044.769:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.0.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a1e5eba9 code=0x7ffc0000 [ 395.945169][T14163] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3601'. [ 396.200043][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'. [ 396.414417][ T5927] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 396.574670][ T5927] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 396.574700][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.574720][ T5927] usb 7-1: Product: syz [ 396.574741][ T5927] usb 7-1: Manufacturer: syz [ 396.574754][ T5927] usb 7-1: SerialNumber: syz [ 396.628953][ T5927] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 396.757273][ T8537] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 397.286917][T14197] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3614'. [ 397.412138][ T8567] usb 7-1: USB disconnect, device number 12 [ 397.455722][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 397.455757][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3615'. [ 398.053712][ T8537] usb 7-1: Service connection timeout for: 256 [ 398.053734][ T8537] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 398.061750][ T8537] ath9k_htc: Failed to initialize the device [ 398.087518][ T8567] usb 7-1: ath9k_htc: USB layer deinitialized [ 398.448767][ T8567] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 398.595462][ T8567] usb 7-1: Using ep0 maxpacket: 8 [ 398.598429][ T8567] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 398.598456][ T8567] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.649163][ T8567] pvrusb2: Hardware description: Terratec Grabster AV400 [ 398.649183][ T8567] pvrusb2: ********** [ 398.649189][ T8567] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 398.649201][ T8567] pvrusb2: Important functionality might not be entirely working. [ 398.649210][ T8567] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 398.649220][ T8567] pvrusb2: ********** [ 398.845466][ T2366] pvrusb2: Invalid write control endpoint [ 399.036880][T14240] bridge0: entered promiscuous mode [ 399.039397][T14240] macvtap1: entered allmulticast mode [ 399.039418][T14240] bridge0: entered allmulticast mode [ 399.078002][T14240] bridge0: port 3(macvtap1) entered blocking state [ 399.079610][T14240] bridge0: port 3(macvtap1) entered disabled state [ 399.099086][T14220] pvrusb2: Invalid write control endpoint [ 399.118545][ T8535] usb 7-1: USB disconnect, device number 13 [ 399.201429][ T2366] pvrusb2: Invalid write control endpoint [ 399.201444][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 399.201453][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 399.201469][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 399.201484][ T2366] pvrusb2: Device being rendered inoperable [ 399.201725][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 399.236888][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 399.260704][T14240] bridge0: left allmulticast mode [ 399.260835][T14240] bridge0: left promiscuous mode [ 399.326033][ T2366] pvrusb2: Attached sub-driver cx25840 [ 399.326061][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 399.326071][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 399.413121][ T5927] kernel read not supported for file /dsp (pid: 5927 comm: kworker/1:5) [ 399.805244][T14252] openvswitch: netlink: Multiple metadata blocks provided [ 401.002008][ T8537] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 401.151998][ T8537] usb 7-1: Using ep0 maxpacket: 32 [ 401.154363][ T8537] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 401.154390][ T8537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.160125][ T8537] usb 7-1: config 0 descriptor?? [ 401.413152][ T8537] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 401.431348][ T8537] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.445850][ T8537] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 401.446006][ T8537] usb 7-1: media controller created [ 401.492877][ T8537] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.622147][ T8537] az6027: usb out operation failed. (-71) [ 401.622566][ T8537] az6027: usb out operation failed. (-71) [ 401.622580][ T8537] stb0899_attach: Driver disabled by Kconfig [ 401.622590][ T8537] az6027: no front-end attached [ 401.622590][ T8537] [ 401.622998][ T8537] az6027: usb out operation failed. (-71) [ 401.623011][ T8537] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 401.626457][ T8537] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 401.631427][ T8537] dvb-usb: schedule remote query interval to 400 msecs. [ 401.631445][ T8537] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 401.707003][ T8537] usb 7-1: USB disconnect, device number 14 [ 401.915424][ T8537] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 402.215252][ T5158] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 402.525496][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3666'. [ 402.525519][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3666'. [ 402.984094][T14337] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3672'. [ 403.188897][T14343] loop7: detected capacity change from 0 to 524255231 [ 403.277682][ T37] audit: type=1326 audit(403.084:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf505eba9 code=0x7ffc0000 [ 403.277734][ T37] audit: type=1326 audit(403.114:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf505eba9 code=0x7ffc0000 [ 403.284685][ T37] audit: type=1326 audit(403.124:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2cf505eba9 code=0x7ffc0000 [ 403.292659][T14346] loop7: detected capacity change from 524255231 to 524287912 [ 403.332014][ T37] audit: type=1326 audit(403.154:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf505eba9 code=0x7ffc0000 [ 403.332072][ T37] audit: type=1326 audit(403.154:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2cf505eba9 code=0x7ffc0000 [ 403.332112][ T37] audit: type=1326 audit(403.154:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf505eba9 code=0x7ffc0000 [ 403.332150][ T37] audit: type=1326 audit(403.154:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cf505eba9 code=0x7ffc0000 [ 403.332188][ T37] audit: type=1326 audit(403.154:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cf4ffada9 code=0x7ffc0000 [ 403.378333][ T37] audit: type=1326 audit(403.194:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cf4ffada9 code=0x7ffc0000 [ 403.378382][ T37] audit: type=1326 audit(403.214:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14347 comm="syz.6.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2cf4ffada9 code=0x7ffc0000 [ 403.874949][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3681'. [ 405.765727][T14407] bridge0: entered promiscuous mode [ 405.766121][T14407] macsec1: entered allmulticast mode [ 405.766135][T14407] bridge0: entered allmulticast mode [ 406.083232][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3706'. [ 406.407955][ T8537] kernel write not supported for file /input/event2 (pid: 8537 comm: kworker/1:12) [ 407.121739][T14455] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3721'. [ 407.422513][ T8566] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 407.567211][T14473] program syz.5.3731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.574772][ T8566] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 407.574799][ T8566] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 407.574817][ T8566] usb 4-1: config 0 has no interface number 0 [ 407.574861][ T8566] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.574887][ T8566] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 407.574911][ T8566] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.574936][ T8566] usb 4-1: config 0 interface 52 has no altsetting 0 [ 407.580247][ T8566] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 407.580273][ T8566] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 407.580292][ T8566] usb 4-1: Product: syz [ 407.580306][ T8566] usb 4-1: SerialNumber: syz [ 407.606918][ T8566] usb 4-1: config 0 descriptor?? [ 407.862246][ T8566] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input29 [ 408.146578][ T8535] usb 4-1: USB disconnect, device number 33 [ 408.146678][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 408.672414][T14501] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 412.383608][T14612] sp0: Synchronizing with TNC [ 413.493757][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3794'. [ 413.997114][T14650] misc userio: Invalid payload size [ 414.622937][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3807'. [ 414.811994][ T8560] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 414.966935][ T8560] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 414.966969][ T8560] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 414.966994][ T8560] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 414.971783][ T8560] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 414.972030][ T8560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.972052][ T8560] usb 7-1: Product: syz [ 414.972065][ T8560] usb 7-1: Manufacturer: syz [ 414.972078][ T8560] usb 7-1: SerialNumber: syz [ 414.989194][ T8560] usb 7-1: config 0 descriptor?? [ 415.017927][T14664] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 415.018113][T14664] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 415.039327][ T8560] usb 7-1: ucan: probing device on interface #0 [ 415.351167][ T37] kauditd_printk_skb: 129 callbacks suppressed [ 415.351186][ T37] audit: type=1326 audit(415.184:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 415.351471][ T37] audit: type=1326 audit(415.184:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 415.403254][ T37] audit: type=1326 audit(415.184:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 415.403971][ T37] audit: type=1326 audit(415.244:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 415.413713][ T37] audit: type=1326 audit(415.244:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 415.417216][ T37] audit: type=1326 audit(415.254:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 415.418857][ T37] audit: type=1326 audit(415.254:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 415.643093][ T8560] ucan 7-1:0.0: probe with driver ucan failed with error -22 [ 415.732226][ T8567] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 415.865497][ T8560] usb 7-1: USB disconnect, device number 15 [ 415.886188][ T8567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 415.886222][ T8567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.886260][ T8567] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 415.886281][ T8567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.945832][ T8567] usb 4-1: config 0 descriptor?? [ 416.410991][ T8567] logitech-hidpp-device 0003:046D:C262.003E: item fetching failed at offset 0/3 [ 416.415283][ T8567] logitech-hidpp-device 0003:046D:C262.003E: hidpp_probe:parse failed [ 416.415390][ T8567] logitech-hidpp-device 0003:046D:C262.003E: probe with driver logitech-hidpp-device failed with error -22 [ 416.481307][T14715] netlink: 'syz.0.3831': attribute type 1 has an invalid length. [ 416.481330][T14715] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3831'. [ 416.605198][ T8567] usb 4-1: USB disconnect, device number 34 [ 416.643003][ T37] audit: type=1326 audit(416.484:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 416.643054][ T37] audit: type=1326 audit(416.484:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3c23eba9 code=0x7ffc0000 [ 417.187803][T14728] hsr0: entered promiscuous mode [ 417.189091][T14728] macsec2: entered allmulticast mode [ 417.189109][T14728] hsr0: entered allmulticast mode [ 417.189122][T14728] hsr_slave_0: entered allmulticast mode [ 417.189144][T14728] hsr_slave_1: entered allmulticast mode [ 417.242871][T14728] hsr0: left allmulticast mode [ 417.242893][T14728] hsr_slave_0: left allmulticast mode [ 417.242916][T14728] hsr_slave_1: left allmulticast mode [ 417.479073][T14739] QAT: failed to copy from user cfg_data. [ 418.473852][T14762] netlink: 'syz.5.3852': attribute type 1 has an invalid length. [ 418.473874][T14762] netlink: 'syz.5.3852': attribute type 2 has an invalid length. [ 418.479303][T14762] netlink: 'syz.5.3852': attribute type 1 has an invalid length. [ 418.479324][T14762] netlink: 'syz.5.3852': attribute type 2 has an invalid length. [ 419.743623][ T8567] kernel write not supported for file /amidi2 (pid: 8567 comm: kworker/0:13) [ 419.840074][T14791] syz_tun: entered allmulticast mode [ 419.841348][T14789] syz_tun: left allmulticast mode [ 420.085521][T14801] erspan0: entered promiscuous mode [ 420.243587][ T8567] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 420.399332][T14813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.414722][ T8567] usb 4-1: Using ep0 maxpacket: 8 [ 420.419727][ T8567] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 420.425856][ T8567] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 420.425886][ T8567] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 420.425905][ T8567] usb 4-1: Product: syz [ 420.425918][ T8567] usb 4-1: Manufacturer: syz [ 420.425932][ T8567] usb 4-1: SerialNumber: syz [ 420.653594][ T8567] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 420.653620][ T8567] usb 4-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 420.653639][ T8567] usb 4-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 420.653656][ T8567] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 420.855892][ T8567] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 420.855979][ T8567] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 420.873412][ T8567] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 420.887759][ T8567] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 420.903054][ T8567] usb 4-1: USB disconnect, device number 35 [ 420.958904][ T8567] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 420.972300][ T8535] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 420.995732][ T8567] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 420.997927][ T8567] visor 4-1:1.0: device disconnected [ 421.121970][ T8535] usb 3-1: Using ep0 maxpacket: 16 [ 421.125492][ T8535] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 421.125517][ T8535] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.125534][ T8535] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.165891][ T8535] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.165922][ T8535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.165942][ T8535] usb 3-1: Product: syz [ 421.165957][ T8535] usb 3-1: Manufacturer: syz [ 421.165971][ T8535] usb 3-1: SerialNumber: syz [ 421.645211][ T8535] usb 3-1: 0:2 : does not exist [ 422.067839][ T8535] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 422.144618][ T8535] usb 3-1: USB disconnect, device number 37 [ 422.241621][T10818] udevd[10818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.021241][T14869] Bluetooth: MGMT ver 1.23 [ 423.559163][T10338] cgroup: fork rejected by pids controller in /syz6 [ 426.005463][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3921'. [ 426.080588][ T67] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.301577][T14934] : entered promiscuous mode [ 426.824793][T14952] ieee802154 phy0 wpan0: encryption failed: -22 [ 426.851220][T14954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.910082][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.927920][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.949774][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.951360][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.967518][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.054198][ T67] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.586643][ T67] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.268231][ T67] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.614516][T15001] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.084541][ T5158] Bluetooth: hci0: command tx timeout [ 429.141683][T15015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.565894][ T67] bridge_slave_0: left allmulticast mode [ 429.565929][ T67] bridge_slave_0: left promiscuous mode [ 429.566220][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.164013][ T5158] Bluetooth: hci0: command tx timeout [ 433.240686][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.250040][ T5158] Bluetooth: hci0: command tx timeout [ 433.323114][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.364230][ T67] bond0 (unregistering): Released all slaves [ 433.424022][T15097] tipc: Started in network mode [ 433.424054][T15097] tipc: Node identity ac14140f, cluster identity 4711 [ 433.425180][T15097] tipc: New replicast peer: 255.255.255.255 [ 433.441815][T15097] tipc: Enabled bearer , priority 5 [ 433.444170][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3974'. [ 433.565406][T14950] chnl_net:caif_netlink_parms(): no params data found [ 434.419460][ T8535] tipc: Node number set to 2886997007 [ 434.468977][T15144] netlink: 'syz.3.3990': attribute type 1 has an invalid length. [ 434.959800][T15150] cgroup: fork rejected by pids controller in /syz5 [ 435.340286][ T5158] Bluetooth: hci0: command tx timeout [ 435.918721][T14950] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.918863][T14950] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.919097][T14950] bridge_slave_0: entered allmulticast mode [ 435.956932][T14950] bridge_slave_0: entered promiscuous mode [ 435.973579][T14950] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.973791][T14950] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.974022][T14950] bridge_slave_1: entered allmulticast mode [ 436.021851][T14950] bridge_slave_1: entered promiscuous mode [ 436.035831][T15460] autofs4:pid:15460:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 436.035861][T15460] autofs4:pid:15460:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 436.623613][ T67] hsr_slave_0: left promiscuous mode [ 436.719681][ T67] hsr_slave_1: left promiscuous mode [ 436.720707][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.720735][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.872370][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.872402][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.001419][ T67] veth1_macvtap: left promiscuous mode [ 437.001541][ T67] veth0_macvtap: left promiscuous mode [ 437.001842][ T67] veth1_vlan: left promiscuous mode [ 437.002051][ T67] veth0_vlan: left promiscuous mode [ 438.268312][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 439.242215][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4024'. [ 440.044396][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.044459][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.387610][ T67] team0 (unregistering): Port device team_slave_1 removed [ 440.647662][ T67] team0 (unregistering): Port device team_slave_0 removed [ 443.281936][T14950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.360441][T14950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.522590][ T8566] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 443.697104][ T8566] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.697135][ T8566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.697156][ T8566] usb 6-1: Product: syz [ 443.697170][ T8566] usb 6-1: Manufacturer: syz [ 443.697183][ T8566] usb 6-1: SerialNumber: syz [ 443.989642][T15548] netlink: 844 bytes leftover after parsing attributes in process `syz.3.4034'. [ 444.049068][T14950] team0: Port device team_slave_0 added [ 444.101648][T14950] team0: Port device team_slave_1 added [ 444.406588][T15561] netlink: 'syz.3.4038': attribute type 2 has an invalid length. [ 444.406609][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4038'. [ 444.519501][T14950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.519518][T14950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.519542][T14950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.521842][T14950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.521856][T14950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.521881][T14950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.612245][ T8566] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 444.612305][ T8566] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 444.688298][ T8566] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 444.756604][ T8566] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 444.785490][ T8566] usb 6-1: USB disconnect, device number 21 [ 445.057580][T15578] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 445.288511][T14950] hsr_slave_0: entered promiscuous mode [ 445.289828][T14950] hsr_slave_1: entered promiscuous mode [ 445.290686][T14950] debugfs: 'hsr0' already exists in 'hsr' [ 445.290709][T14950] Cannot create hsr debugfs directory [ 445.347658][T15587] netlink: 'syz.2.4046': attribute type 1 has an invalid length. [ 445.347681][T15587] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4046'. [ 445.347697][T15587] netlink: 97 bytes leftover after parsing attributes in process `syz.2.4046'. [ 445.518568][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4047'. [ 445.678420][ T37] audit: type=1400 audit(701.516:247): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=15597 comm="syz.2.4050" name="871" dev="tmpfs" ino=4411 [ 445.874023][ T8567] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 446.025134][ T8567] usb 4-1: Using ep0 maxpacket: 16 [ 446.028062][ T8567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.028094][ T8567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.028130][ T8567] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 446.028152][ T8567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.087738][ T8567] usb 4-1: config 0 descriptor?? [ 446.603323][ T8567] playstation 0003:054C:05C4.003F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 446.732010][ T8567] playstation 0003:054C:05C4.003F: Invalid byte count transferred, expected 16 got 0 [ 446.732039][ T8567] playstation 0003:054C:05C4.003F: Failed to retrieve DualShock4 pairing info: -22 [ 446.732085][ T8567] playstation 0003:054C:05C4.003F: Failed to get MAC address from DualShock4 [ 446.732099][ T8567] playstation 0003:054C:05C4.003F: Failed to create dualshock4. [ 446.776156][ T8567] playstation 0003:054C:05C4.003F: probe with driver playstation failed with error -22 [ 446.947539][ T8535] usb 4-1: USB disconnect, device number 36 [ 447.024558][T15633] loop7: detected capacity change from 0 to 7 [ 447.036851][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.036888][ C1] buffer_io_error: 9 callbacks suppressed [ 447.036899][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.073164][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.073200][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.074190][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.074216][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.079883][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.079916][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.080493][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.080519][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.080779][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.080802][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.081053][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.081078][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.081266][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.081287][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.081360][T15633] ldm_validate_partition_table(): Disk read failed. [ 447.081624][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.081650][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.081849][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.081868][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 447.082318][T15633] Dev loop7: unable to read RDB block 0 [ 447.090353][T15633] loop7: unable to read partition table [ 447.090597][T15633] loop7: partition table beyond EOD, truncated [ 447.090626][T15633] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 447.163354][ T8567] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 447.330964][ T8567] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 447.330992][ T8567] usb 6-1: config 1 has an invalid interface number: 4 but max is 0 [ 447.331010][ T8567] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 447.331031][ T8567] usb 6-1: config 1 has no interface number 0 [ 447.331047][ T8567] usb 6-1: config 1 has no interface number 1 [ 447.331105][ T8567] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 447.331149][ T8567] usb 6-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.331171][ T8567] usb 6-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 447.331197][ T8567] usb 6-1: config 1 interface 105 has no altsetting 0 [ 447.331215][ T8567] usb 6-1: config 1 interface 4 has no altsetting 0 [ 447.337859][ T8567] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 447.337886][ T8567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.337907][ T8567] usb 6-1: Product: syz [ 447.337921][ T8567] usb 6-1: Manufacturer: syz [ 447.337935][ T8567] usb 6-1: SerialNumber: syz [ 447.828009][ T8567] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 448.084649][ T8567] usb 6-1: USB disconnect, device number 22 [ 450.622029][ T8567] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 450.774513][ T8567] usb 4-1: Using ep0 maxpacket: 8 [ 450.777466][ T8567] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 450.777494][ T8567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.835665][ T8567] pvrusb2: Hardware description: Terratec Grabster AV400 [ 450.835683][ T8567] pvrusb2: ********** [ 450.835689][ T8567] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 450.835701][ T8567] pvrusb2: Important functionality might not be entirely working. [ 450.835710][ T8567] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 450.835719][ T8567] pvrusb2: ********** [ 451.057889][ T2366] pvrusb2: Invalid write control endpoint [ 451.315525][T15687] pvrusb2: Invalid write control endpoint [ 451.341292][ T8567] usb 4-1: USB disconnect, device number 37 [ 451.519700][ T2366] pvrusb2: Invalid write control endpoint [ 451.519714][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 451.519723][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 451.519731][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 451.519741][ T2366] pvrusb2: Device being rendered inoperable [ 451.519767][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 451.519813][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 451.601475][ T2366] pvrusb2: Attached sub-driver cx25840 [ 451.601492][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 451.601502][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 452.200748][T15696] vlan4: entered allmulticast mode [ 452.205310][T15696] batadv0: entered allmulticast mode [ 452.303605][T15699] program syz.0.4082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.889749][T15718] batman_adv: batadv0: Adding interface: gretap1 [ 462.889768][T15718] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.889809][T15718] batman_adv: batadv0: Interface activated: gretap1 [ 463.135529][T15722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.297456][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 466.318162][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 466.320489][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 466.321876][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 466.345907][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 468.432259][ T5852] Bluetooth: hci5: command tx timeout [ 468.479922][ T5158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 468.507103][ T5158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 468.511156][ T5158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 468.530013][ T5158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 468.530973][ T5158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 470.501827][ T5158] Bluetooth: hci5: command tx timeout [ 470.661802][ T5158] Bluetooth: hci6: command tx timeout [ 472.583995][ T5158] Bluetooth: hci5: command tx timeout [ 472.742037][ T5158] Bluetooth: hci6: command tx timeout [ 474.659604][ T5158] Bluetooth: hci5: command tx timeout [ 474.819280][ T5158] Bluetooth: hci6: command tx timeout [ 476.898405][ T5158] Bluetooth: hci6: command tx timeout [ 480.478774][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 480.496790][ T5852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 480.522650][ T5852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 480.540108][ T5852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 480.542358][ T5852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 481.561883][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 481.586415][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 481.588150][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 481.590343][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 481.591175][ T5852] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 482.655539][ T5158] Bluetooth: hci7: command tx timeout [ 483.696718][ T5158] Bluetooth: hci8: command tx timeout [ 484.744369][ T5158] Bluetooth: hci7: command tx timeout [ 485.775706][ T5158] Bluetooth: hci8: command tx timeout [ 486.817428][ T5852] Bluetooth: hci7: command tx timeout [ 486.845472][ T5852] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 486.868809][ T5852] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 486.870284][ T5852] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 486.872116][ T5852] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 486.903595][ T5852] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 487.853164][ T5158] Bluetooth: hci8: command tx timeout [ 488.895567][ T5158] Bluetooth: hci7: command tx timeout [ 488.972336][ T5158] Bluetooth: hci9: command tx timeout [ 489.942272][ T5158] Bluetooth: hci8: command tx timeout [ 491.060615][ T5158] Bluetooth: hci9: command tx timeout [ 493.133276][ T5158] Bluetooth: hci9: command tx timeout [ 495.208971][ T5158] Bluetooth: hci9: command tx timeout [ 499.750786][T15734] chnl_net:caif_netlink_parms(): no params data found [ 499.956700][T15748] chnl_net:caif_netlink_parms(): no params data found [ 500.314319][T15742] chnl_net:caif_netlink_parms(): no params data found [ 501.466298][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.466378][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.984012][T15751] chnl_net:caif_netlink_parms(): no params data found [ 526.279674][T15834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.314806][T15834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.318319][T15834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.355031][T15834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.355948][T15834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.402881][ T5158] Bluetooth: hci2: command tx timeout [ 528.516784][T15834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.548321][T15834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.550004][T15834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.551397][T15834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.585063][T15834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.476961][T15834] Bluetooth: hci2: command tx timeout [ 530.711620][T15834] Bluetooth: hci4: command tx timeout [ 532.550614][T15834] Bluetooth: hci2: command tx timeout [ 532.791580][T15834] Bluetooth: hci4: command tx timeout [ 534.636280][T15834] Bluetooth: hci2: command tx timeout [ 534.869258][T15834] Bluetooth: hci4: command tx timeout [ 536.948735][T15834] Bluetooth: hci4: command tx timeout [ 539.711579][ C0] sched: DL replenish lagged too much [ 541.239424][ T5158] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 541.269573][ T5158] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 541.272049][ T5158] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 541.273385][ T5158] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 541.274644][ T5158] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 542.318472][T15850] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 542.363304][T15850] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 542.375420][T15850] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 542.403220][T15850] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 542.421140][T15850] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 547.018212][T15854] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 547.071575][T15854] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 547.093099][T15854] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 547.123745][T15854] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 547.124696][T15854] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 549.538188][ T5158] Bluetooth: hci10: command tx timeout [ 549.601902][T15858] Bluetooth: hci0: command 0x0406 tx timeout [ 551.581055][T15858] Bluetooth: hci10: command tx timeout [ 551.661467][T15858] Bluetooth: hci12: command tx timeout [ 551.662316][T15858] Bluetooth: hci11: command tx timeout [ 553.660155][T15854] Bluetooth: hci10: command tx timeout [ 553.739792][T15834] Bluetooth: hci12: command tx timeout [ 553.744765][T15854] Bluetooth: hci11: command tx timeout [ 555.739379][T15854] Bluetooth: hci10: command tx timeout [ 555.819369][T15834] Bluetooth: hci11: command tx timeout [ 555.819402][T15834] Bluetooth: hci12: command tx timeout [ 557.908663][T15854] Bluetooth: hci12: command tx timeout [ 557.908701][T15854] Bluetooth: hci11: command tx timeout [ 562.868007][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.868086][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.027671][T15748] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 586.786158][T15854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.820735][T15854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.822690][T15854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.847214][T15854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.861212][T15854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 588.724282][T15834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 588.766323][T15834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 588.770698][T15834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 588.789977][T15834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 588.800815][T15834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 593.560457][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 601.917524][T15850] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 601.952052][T15850] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 601.968870][T15850] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 601.970356][T15850] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 601.971272][T15850] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 602.691143][ T5158] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 602.715788][ T5158] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 602.718823][ T5158] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 602.722158][ T5158] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 602.749616][ T5158] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 603.618608][T15834] Bluetooth: hci13: command tx timeout [ 605.633980][T15858] Bluetooth: hci5: command tx timeout [ 605.639101][T15834] Bluetooth: hci13: command tx timeout [ 605.873949][T15834] Bluetooth: hci7: command 0x0406 tx timeout [ 606.353729][ T38] INFO: task kworker/u8:10:3544 blocked for more than 143 seconds. [ 606.353754][ T38] Not tainted syzkaller #0 [ 606.353764][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.353773][ T38] task:kworker/u8:10 state:D stack:20264 pid:3544 tgid:3544 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 606.353819][ T38] Workqueue: events_unbound bpf_map_free_deferred [ 606.353851][ T38] Call Trace: [ 606.353857][ T38] [ 606.353870][ T38] __schedule+0x16f3/0x4c20 [ 606.353906][ T38] ? sched_clock+0x3f/0x60 [ 606.353929][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 606.353962][ T38] ? __pfx___schedule+0x10/0x10 [ 606.354011][ T38] rt_mutex_schedule+0x77/0xf0 [ 606.354030][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 606.354066][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 606.354093][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 606.354117][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 606.354140][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 606.354159][ T38] ? __lock_acquire+0xab9/0xd20 [ 606.354201][ T38] ? rcu_barrier+0x4c/0x570[ 606.354201][ T38] ? rcu_barrier+0x4c/0x570 [ 606.354223][ T38] ? __lock_acquire+0xab9/0xd20 [ 606.354255][ T38] ? rcu_barrier+0x4c/0x570 [ 606.354271][ T38] mutex_lock_nested+0x16a/0x1d0 [ 606.354292][ T38] ? synchronize_rcu+0x11a/0x310 [ 606.354313][ T38] rcu_barrier+0x4c/0x570 [ 606.354344][ T38] dev_map_free+0x11f/0x6a0 [ 606.354380][ T38] bpf_map_free_deferred+0x113/0x140 [ 606.354399][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 606.354424][ T38] process_scheduled_works+0xade/0x17b0 [ 606.354475][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 606.354516][ T38] worker_thread+0x8a0/0xda0 [ 606.354567][ T38] kthread+0x70e/0x8a0 [ 606.354597][ T38] ? __pfx_worker_thread+0x10/0x10 [ 606.354618][ T38] ? __pfx_kthread+0x10/0x10 [ 606.354650][ T38] ? __pfx_kthread+0x10/0x10 [ 606.354676][ T38] ret_from_fork+0x439/0x7d0 [ 606.354702][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 606.354742][ T38] ? __switch_to_asm+0x39/0x70 [ 606.354759][ T38] ? __switch_to_asm+0x33/0x70 [ 606.354775][ T38] ? __pfx_kthread+0x10/0x10 [ 606.354801][ T38] ret_from_fork_asm+0x1a/0x30 [ 606.354836][ T38] [ 606.354888][ T38] INFO: task syz.5.4076:15682 blocked for more than 143 seconds. [ 606.354901][ T38] Not tainted syzkaller #0 [ 606.354910][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.354919][ T38] task:syz.5.4076 state:D stack:25128 pid:15682 tgid:15682 ppid:9302 task_flags:0x400040 flags:0x00004004 [ 606.354963][ T38] Call Trace: [ 606.354969][ T38] [ 606.354981][ T38] __schedule+0x16f3/0x4c20 [ 606.355029][ T38] ? __lock_acquire+0xab9/0xd20 [ 606.355053][ T38] ? __pfx___schedule+0x10/0x10 [ 606.355094][ T38] ? schedule+0x91/0x360 [ 606.355122][ T38] schedule+0x165/0x360 [ 606.355148][ T38] schedule_timeout+0x9a/0x270 [ 606.355172][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 606.355209][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.355234][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.355257][ T38] ? wait_for_completion+0x267/0x5d0 [ 606.355284][ T38] wait_for_completion+0x2bf/0x5d0 [ 606.355323][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 606.355349][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 606.355380][ T38] rcu_barrier+0x463/0x570 [ 606.355410][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 606.355430][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 606.355468][ T38] kvm_put_kvm+0xf8e/0x1670 [ 606.355498][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 606.355538][ T38] kvm_vm_release+0x46/0x50 [ 606.355560][ T38] __fput+0x458/0xa80 [ 606.355606][ T38] task_work_run+0x1d4/0x260 [ 606.355630][ T38] ? __pfx_task_work_run+0x10/0x10 [ 606.355655][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 606.355682][ T38] exit_to_user_mode_loop+0xec/0x110 [ 606.355707][ T38] do_syscall_64+0x2bd/0x3b0 [ 606.355729][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.355754][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.355772][ T38] ? clear_bhb_loop+0x60/0xb0 [ 606.355795][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.355819][ T38] RIP: 0033:0x7f65f793eba9 [ 606.355836][ T38] RSP: 002b:00007ffd097b3b08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 606.355864][ T38] RAX: 0000000000000000 RBX: 000000000006dde3 RCX: 00007f65f793eba9 [ 606.355877][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 606.355888][ T38] RBP: 00007f65f7b87da0 R08: 0000000000000001 R09: 00000004097b3dff [ 606.355901][ T38] R10: 0000001b2f520000 R11: 0000000000000246 R12: 00007f65f7b85fac [ 606.355913][ T38] R13: 00007f65f7b85fa0 R14: ffffffffffffffff R15: 00007ffd097b3c20 [ 606.355946][ T38] [ 606.355954][ T38] INFO: task syz.3.4081:15696 blocked for more than 143 seconds. [ 606.355967][ T38] Not tainted syzkaller #0 [ 606.355975][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.355983][ T38] task:syz.3.4081 state:D stack:23080 pid:15696 tgid:15695 ppid:5844 task_flags:0x400140 flags:0x00004006 [ 606.356024][ T38] Call Trace: [ 606.356030][ T38] [ 606.356041][ T38] __schedule+0x16f3/0x4c20 [ 606.356072][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.356108][ T38] ? rcu_is_watching+0x15/0xb0 [ 606.356138][ T38] ? __pfx___schedule+0x10/0x10 [ 606.356181][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.356209][ T38] rt_mutex_schedule+0x77/0xf0 [ 606.356228][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 606.356249][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 606.356289][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 606.356313][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 606.356336][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 606.356355][ T38] ? __lock_acquire+0xab9/0xd20 [ 606.356390][ T38] ? rcu_barrier+0x4c/0x570 [ 606.356423][ T38] ? rcu_barrier+0x4c/0x570 [ 606.356439][ T38] mutex_lock_nested+0x16a/0x1d0 [ 606.356458][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 606.356484][ T38] rcu_barrier+0x4c/0x570 [ 606.356514][ T38] netdev_run_todo+0x327/0xea0 [ 606.356541][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 606.356579][ T38] rtnl_newlink+0x177b/0x1c70 [ 606.356617][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 606.356638][ T38] ? migrate_enable+0x29c/0x3c0 [ 606.356660][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 606.356686][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 606.356707][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 606.356774][ T38] ? __local_bh_enable+0x23f/0x3d0 [ 606.356796][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 606.356835][ T38] ? __pfx___local_bh_enable+0x10/0x10 [ 606.356883][ T38] ? __local_bh_enable_ip+0x1b2/0x270 [ 606.356905][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.356934][ T38] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 606.356954][ T38] ? dev_hard_start_xmit+0x7f5/0x870 [ 606.356994][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 606.357020][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 606.357040][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 606.357061][ T38] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 606.357087][ T38] ? __lock_acquire+0xab9/0xd20 [ 606.357164][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 606.357193][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 606.357228][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 606.357250][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.357291][ T38] ? ref_tracker_free+0x61e/0x7c0 [ 606.357318][ T38] ? __asan_memcpy+0x40/0x70 [ 606.357337][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 606.357360][ T38] ? __skb_clone+0x63/0x7a0 [ 606.357400][ T38] netlink_rcv_skb+0x205/0x470 [ 606.357450][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.357481][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.357517][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.357550][ T38] netlink_unicast+0x843/0xa10 [ 606.357609][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 606.357634][ T38] ? netlink_sendmsg+0x642/0xb30 [ 606.357657][ T38] ? skb_put+0x11b/0x210 [ 606.357686][ T38] netlink_sendmsg+0x805/0xb30 [ 606.357745][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.357779][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.357797][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.357820][ T38] __sock_sendmsg+0x219/0x270 [ 606.357847][ T38] ____sys_sendmsg+0x508/0x820 [ 606.357891][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.357920][ T38] ? import_iovec+0x74/0xa0 [ 606.357947][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 606.357969][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.358020][ T38] ? __fget_files+0x2a/0x420 [ 606.358043][ T38] ? __fget_files+0x3a6/0x420 [ 606.358076][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 606.358097][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.358127][ T38] ? rcu_is_watching+0x15/0xb0 [ 606.358156][ T38] ? do_syscall_64+0xbe/0x3b0 [ 606.358178][ T38] do_syscall_64+0xfa/0x3b0 [ 606.358193][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.358213][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.358227][ T38] ? clear_bhb_loop+0x60/0xb0 [ 606.358245][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.358260][ T38] RIP: 0033:0x7fe6b16aeba9 [ 606.358275][ T38] RSP: 002b:00007fe6af916038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.358293][ T38] RAX: ffffffffffffffda RBX: 00007fe6b18f5fa0 RCX: 00007fe6b16aeba9 [ 606.358307][ T38] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 606.358318][ T38] RBP: 00007fe6b1731e19 R08: 0000000000000000 R09: 0000000000000000 [ 606.358330][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.358341][ T38] R13: 00007fe6b18f6038 R14: 00007fe6b18f5fa0 R15: 00007ffc31530da8 [ 606.358372][ T38] [ 606.358407][ T38] [ 606.358407][ T38] Showing all locks held in the system: [ 606.358417][ T38] 3 locks held by kworker/u8:0/12: [ 606.358428][ T38] #0: ffff88814cf7f138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 606.358475][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 606.358522][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 606.358570][ T38] 1 lock held by khungtaskd/38: [ 606.358580][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 606.358623][ T38] 3 locks held by kworker/u8:3/57: [ 606.358633][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 606.358679][ T38] #1: ffffc9000123fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 606.358732][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 606.358774][ T38] 5 locks held by kworker/u8:4/67: [ 606.358784][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 606.358828][ T38] #1: ffffc9000153fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 606.358872][ T38] #2: ffffffff8ecc6680 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 606.358919][ T38] #3: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 606.358963][ T38] #4: ffff8880363dd7b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 606.359016][ T38] 2 locks held by kworker/u8:8/1169: [ 606.359040][ T38] 3 locks held by kworker/u8:10/3544: [ 606.359051][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 606.359097][ T38] #1: ffffc9000d8e7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 606.359143][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 606.359186][ T38] 4 locks held by kworker/u9:1/5158: [ 606.359196][ T38] #0: ffff88805b923938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 606.359246][ T38] #1: ffffc9000fe27bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 606.359291][ T38] #2: ffff88807e6980a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 606.359340][ T38] #3: ffffffff8ee3af38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 606.359389][ T38] 2 locks held by getty/5598: [ 606.359398][ T38] #0: ffff88823bf320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 606.359448][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 606.359495][ T38] 9 locks held by kworker/1:5/5927: [ 606.359511][ T38] 7 locks held by syz-executor/14950: [ 606.359522][ T38] #0: ffff888034982488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 606.359571][ T38] #1: ffff888025bdac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 [ 606.359617][ T38] #2: ffff8880274a93c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 [ 606.359667][ T38] #3: ffffffff8e542d78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 606.359711][ T38] #4: ffff888049dc80d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 606.359810][ T38] #5: ffff8880235fb300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 606.359860][ T38] #6: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 606.359902][ T38] 1 lock held by syz.5.4076/15682: [ 606.359913][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 606.359954][ T38] 2 locks held by syz.3.4081/15696: [ 606.359964][ T38] #0: ffffffff8f1f3930 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 606.360015][ T38] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 606.361876][ T38] 1 lock held by syz.0.4095/15732: [ 606.361888][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 606.361930][ T38] 1 lock held by syz-executor/15734: [ 606.361941][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 606.361989][ T38] 2 locks held by syz-executor/15739: [ 606.362000][ T38] 2 locks held by syz-executor/15742: [ 606.362010][ T38] #0: ffffffff8e43b7a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 606.362063][ T38] #1: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 606.362286][ T38] 3 locks held by syz-executor/15748: [ 606.362298][ T38] 2 locks held by syz-executor/15751: [ 606.362309][ T38] #0: ffff88806d28ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 606.362353][ T38] #1: ffff88806d28c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 606.362399][ T38] 1 lock held by syz-executor/15833: [ 606.362409][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 606.362456][ T38] 1 lock held by syz-executor/15840: [ 606.362466][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 606.362507][ T38] 1 lock held by syz-executor/15845: [ 606.362516][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 606.362558][ T38] 1 lock held by syz-executor/15849: [ 606.362569][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 606.362611][ T38] 4 locks held by kworker/u9:2/15850: [ 606.362621][ T38] #0: ffff8880286cb138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 606.362672][ T38] #1: ffffc90009e1fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 606.362717][ T38] #2: ffff8880837000a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 606.362773][ T38] #3: ffffffff8ee3af38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 606.362819][ T38] 1 lock held by syz-executor/15853: [ 606.362829][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 606.362872][ T38] 5 locks held by kworker/u9:3/15854: [ 606.362882][ T38] #0: ffff888034ee1938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 606.362928][ T38] #1: ffffc90006207bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 606.362974][ T38] #2: ffff888062b04e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 606.363016][ T38] #3: ffff888062b040a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 606.493181][ T38] #4: ffffffff8ee3af38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 606.493236][ T38] 1 lock held by syz-executor/15868: [ 606.493248][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 606.493292][ T38] 1 lock held by syz-executor/15873: [ 606.493302][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 606.493345][ T38] 1 lock held by syz-executor/15879: [ 606.493356][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 606.493398][ T38] 1 lock held by syz-executor/15883: [ 606.493408][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 606.493452][ T38] [ 606.493457][ T38] ============================================= [ 606.493457][ T38] [ 606.493478][ T38] NMI backtrace for cpu 0 [ 606.493500][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.493531][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 606.493541][ T38] Call Trace: [ 606.493548][ T38] [ 606.493557][ T38] dump_stack_lvl+0x189/0x250 [ 606.493587][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.493611][ T38] ? __pfx__printk+0x10/0x10 [ 606.493643][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 606.493669][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 606.493694][ T38] ? __pfx__printk+0x10/0x10 [ 606.493716][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 606.493741][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 606.493764][ T38] watchdog+0xf93/0xfe0 [ 606.493791][ T38] ? watchdog+0x1de/0xfe0 [ 606.493818][ T38] kthread+0x70e/0x8a0 [ 606.493846][ T38] ? __pfx_watchdog+0x10/0x10 [ 606.493866][ T38] ? __pfx_kthread+0x10/0x10 [ 606.493895][ T38] ? __pfx_kthread+0x10/0x10 [ 606.493920][ T38] ret_from_fork+0x439/0x7d0 [ 606.493946][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 606.493973][ T38] ? __switch_to_asm+0x39/0x70 [ 606.493989][ T38] ? __switch_to_asm+0x33/0x70 [ 606.494004][ T38] ? __pfx_kthread+0x10/0x10 [ 606.494029][ T38] ret_from_fork_asm+0x1a/0x30 [ 606.494062][ T38] [ 606.494068][ T38] Sending NMI from CPU 0 to CPUs 1: [ 606.494098][ C1] NMI backtrace for cpu 1 [ 606.494112][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.494130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 606.494139][ C1] RIP: 0010:__lock_acquire+0x50c/0xd20 [ 606.494160][ C1] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 e4 d7 61 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 f0 e2 9e 92 eb 40 83 3d 8b 67 [ 606.494174][ C1] RSP: 0018:ffffc90000a3e6d0 EFLAGS: 00000003 [ 606.494188][ C1] RAX: 000000000000000b RBX: 0000000000000002 RCX: 000000000000000c [ 606.494198][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801caa9dc0 [ 606.494208][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af94440 [ 606.494218][ C1] R10: dffffc0000000000 R11: fffffbfff1e3abe7 R12: 0000000000000003 [ 606.494229][ C1] R13: 0000000000000002 R14: ffff88801caaaac0 R15: ffff88801caaa950 [ 606.494240][ C1] FS: 0000000000000000(0000) GS:ffff8881269bd000(0000) knlGS:0000000000000000 [ 606.494253][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.494264][ C1] CR2: 000055e045d96858 CR3: 0000000033a9a000 CR4: 00000000003526f0 [ 606.494279][ C1] Call Trace: [ 606.494285][ C1] [ 606.494294][ C1] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 606.494312][ C1] lock_acquire+0x120/0x360 [ 606.494329][ C1] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 606.494353][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 606.494373][ C1] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 606.494389][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 606.494411][ C1] ? __lock_acquire+0xab9/0xd20 [ 606.494430][ C1] rt_mutex_slowunlock+0xb0/0x8a0 [ 606.494448][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 606.494467][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 606.494485][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 606.494508][ C1] __dev_queue_xmit+0x1a17/0x3b70 [ 606.494530][ C1] ? __dev_queue_xmit+0x26f/0x3b70 [ 606.494554][ C1] ? synproxy_pernet+0x23/0x240 [ 606.494575][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 606.494591][ C1] ? synproxy_pernet+0x23/0x240 [ 606.494609][ C1] ? synproxy_pernet+0x23/0x240 [ 606.494629][ C1] ? __asan_memset+0x22/0x50 [ 606.494646][ C1] ? __lock_acquire+0xab9/0xd20 [ 606.494668][ C1] ? ip_output+0x2a1/0x3c0 [ 606.494685][ C1] ? ip_finish_output2+0xbae/0x11d0 [ 606.494703][ C1] ip_finish_output2+0xd5a/0x11d0 [ 606.494720][ C1] ? ip_finish_output2+0x452/0x11d0 [ 606.494739][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 606.494757][ C1] ? ip_skb_dst_mtu+0x866/0xab0 [ 606.494779][ C1] ? ip_finish_output+0x33a/0x3f0 [ 606.494795][ C1] ip_output+0x2a1/0x3c0 [ 606.494810][ C1] ? ip_output+0x60/0x3c0 [ 606.494825][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 606.494851][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 606.494870][ C1] ? nft_redir_eval+0x1a8/0x480 [ 606.494890][ C1] ? synproxy_pernet+0x45/0x270 [ 606.494908][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 606.494928][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 606.494945][ C1] ? nf_ip_checksum+0x13c/0x510 [ 606.494963][ C1] nft_synproxy_do_eval+0x345/0x570 [ 606.494982][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 606.494999][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 606.495022][ C1] nft_do_chain+0x409/0x1920 [ 606.495044][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 606.495061][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 606.495087][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 606.495105][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 606.495125][ C1] nft_do_chain_inet+0x25d/0x340 [ 606.495141][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 606.495162][ C1] ? NF_HOOK+0x9a/0x3a0 [ 606.495181][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 606.495198][ C1] nf_hook_slow+0xc2/0x220 [ 606.495219][ C1] NF_HOOK+0x206/0x3a0 [ 606.495238][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 606.495257][ C1] ? NF_HOOK+0x9a/0x3a0 [ 606.495274][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 606.495292][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 606.495312][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 606.495333][ C1] ? skb_dst+0x4f/0xd0 [ 606.495351][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 606.495372][ C1] NF_HOOK+0x30c/0x3a0 [ 606.495391][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 606.495410][ C1] ? NF_HOOK+0x9a/0x3a0 [ 606.495428][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 606.495447][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 606.495471][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 606.495489][ C1] __netif_receive_skb+0x143/0x380 [ 606.495506][ C1] ? rt_spin_unlock+0x65/0x80 [ 606.495525][ C1] ? process_backlog+0x27b/0x900 [ 606.495543][ C1] process_backlog+0x31e/0x900 [ 606.495566][ C1] __napi_poll+0xb3/0x540 [ 606.495586][ C1] net_rx_action+0x707/0xe00 [ 606.495604][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.495631][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 606.495664][ C1] handle_softirqs+0x22f/0x710 [ 606.495686][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 606.495708][ C1] run_ktimerd+0xcf/0x190 [ 606.495727][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 606.495749][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 606.495771][ C1] smpboot_thread_fn+0x53f/0xa60 [ 606.495789][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 606.495810][ C1] kthread+0x70e/0x8a0 [ 606.495830][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 606.495847][ C1] ? __pfx_kthread+0x10/0x10 [ 606.495868][ C1] ? __pfx_kthread+0x10/0x10 [ 606.495887][ C1] ret_from_fork+0x439/0x7d0 [ 606.495906][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 606.495925][ C1] ? __switch_to_asm+0x39/0x70 [ 606.495939][ C1] ? __switch_to_asm+0x33/0x70 [ 606.495952][ C1] ? __pfx_kthread+0x10/0x10 [ 606.495971][ C1] ret_from_fork_asm+0x1a/0x30 [ 606.495991][ C1] [ 606.496099][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 606.496111][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.496130][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 606.496138][ T38] Call Trace: [ 606.496144][ T38] [ 606.496151][ T38] dump_stack_lvl+0x99/0x250 [ 606.496174][ T38] ? __asan_memcpy+0x40/0x70 [ 606.496192][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.496214][ T38] ? __pfx__printk+0x10/0x10 [ 606.496245][ T38] vpanic+0x281/0x750 [ 606.496280][ T38] ? __pfx_vpanic+0x10/0x10 [ 606.496299][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 606.496317][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.496351][ T38] panic+0xb9/0xc0 [ 606.496374][ T38] ? __pfx_panic+0x10/0x10 [ 606.496400][ T38] ? irq_work_queue+0xc3/0x140 [ 606.496425][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 606.496450][ T38] watchdog+0xfd2/0xfe0 [ 606.496476][ T38] ? watchdog+0x1de/0xfe0 [ 606.496504][ T38] kthread+0x70e/0x8a0 [ 606.496604][ T38] ? __pfx_watchdog+0x10/0x10 [ 606.496625][ T38] ? __pfx_kthread+0x10/0x10 [ 606.496651][ T38] ? __pfx_kthread+0x10/0x10 [ 606.496674][ T38] ret_from_fork+0x439/0x7d0 [ 606.496696][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 606.496718][ T38] ? __switch_to_asm+0x39/0x70 [ 606.496731][ T38] ? __switch_to_asm+0x33/0x70 [ 606.496744][ T38] ? __pfx_kthread+0x10/0x10 [ 606.496768][ T38] ret_from_fork_asm+0x1a/0x30 [ 606.496798][ T38] [ 606.497178][ T38] Kernel Offset: disabled