last executing test programs: 2m35.793412211s ago: executing program 3 (id=7152): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000340)) 2m35.624663198s ago: executing program 3 (id=7155): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x7, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) 2m35.45295795s ago: executing program 3 (id=7159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x20, r1, 0x1, 0xffffffff, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 2m35.266092515s ago: executing program 3 (id=7162): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 2m35.058655218s ago: executing program 3 (id=7166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x2c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m32.685791463s ago: executing program 3 (id=7202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) 2m32.34079919s ago: executing program 32 (id=7202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) 1m43.232559242s ago: executing program 5 (id=7856): r0 = msgget(0x2, 0x600) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000000100)={0x2}, 0x8, 0x0) 1m43.070763747s ago: executing program 5 (id=7859): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000000c0)=0x7, 0x4) connect$caif(r0, &(0x7f0000000340)=@dgm, 0x18) 1m42.885371598s ago: executing program 5 (id=7863): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020) 1m42.692740725s ago: executing program 5 (id=7868): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="a95c5540000429e8223500533229ffee", 0x10) 1m42.222395s ago: executing program 5 (id=7878): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m42.045008821s ago: executing program 5 (id=7881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) syncfs(r1) 1m26.83170983s ago: executing program 33 (id=7881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) syncfs(r1) 2.851809773s ago: executing program 6 (id=9526): ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x5, "b16ef08af945b741c7f85e1ab9cb0e3c39ac3468d45d61074f053d111c24c1e2306b1d6293a681d213c502a57623af2e5fe529545521b9904a3f23051d1e991fd54f22045fbb34c1c3342df322bca6ab02dcf824c02e75d95352f99897cdc5893a750188e0fb3d71a67de5294d89f1e777d6bd369767696eaf79ad0ecf4d86ba856046a66aeaa921b0f5ccb1842158cbe3a0210c3bc919f4a7703139491fb91bee176e7e1394a72daaded44c810523454e6694d03d47265ca9545c0e86d3a571b0f6da9ea8bc8563159971def2d3b316322e5918391c501f41cc3e68653f6de145be423bc90c24fa8b63103d52ae6b91778788b89465eb9be5a136825f8f4b452f08f50c1cfae58f3fdc353f4eb3dd184b94879568228635ca53b0f1676065b37de7319dae85d1ffd84c9cddf513e8e9f9b0cea979ef5ffd1355e97c9d193269ee911e06e59b76bf035c23675b039af301336718c2fcf624c4f6aef2b9f5257e7b54e57278ea59ab5012ba68c211fc417220f931f6bbcaa94d3a454d8dab39585820e96800be40daa93097e76a93d187051c98de2bc5df9ac8d31d6a122d3c4da9b93c7a30dd1904e65b987846c1da1545202429a1a36296ea1e97f0bf3323e38a6ba98b2bf4acd40b446aedb2927fd3ac2df8ca496004e68222a4e3b7cc7579c3494548e31ef7c00baf1012317c641749915de76012f336525f49321a329893"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_settime(0x1ed5d7403, &(0x7f0000000080)) 2.563287982s ago: executing program 6 (id=9530): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f00000008c0), 0x12) bind$x25(r0, &(0x7f0000000940), 0x12) 2.404343164s ago: executing program 6 (id=9532): timer_create(0x9, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x5, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 2.358747195s ago: executing program 4 (id=9535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000020c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "fa82d0201dbbbfeb4ef159c270"}]}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 2.237650665s ago: executing program 6 (id=9536): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(0x0, &(0x7f0000000040), 0xba6, &(0x7f0000ffe000/0x2000)=nil, 0x4) 2.13804234s ago: executing program 4 (id=9539): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) 1.966741015s ago: executing program 0 (id=9542): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r0, 0x8b2c, &(0x7f0000000080)) 1.750959381s ago: executing program 1 (id=9546): r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='\xc7\xb1\xed\xa2\x8b\xca\xca\xbe\xa0\xc1\xd0\xfbi\xa4b\xfc\x8a\xb1{\xd0O\xf5\xfaG\x16\x81ry\x05m=\x9a461\x91`g\xc8}V\xda\x9af:\xd1\x8c\xd6\xd6\x8a\xf4 \xcb\x99\x8a\x95\x17\xd6', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.745651814s ago: executing program 0 (id=9547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004041}, 0x40000) 1.632417031s ago: executing program 1 (id=9548): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000002d000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.490728863s ago: executing program 0 (id=9549): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80d}, @in6={0xa, 0x4e22, 0x3ffc0000, @ipv4={'\x00', '\xff\xff', @empty}, 0xa}], 0x38) 1.474106652s ago: executing program 2 (id=9550): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.307960566s ago: executing program 0 (id=9551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.283639863s ago: executing program 2 (id=9552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0f000000300007800800010005000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.267375085s ago: executing program 1 (id=9553): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) 1.015327325s ago: executing program 0 (id=9554): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_delete(0x0) 1.014811375s ago: executing program 1 (id=9555): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 981.348407ms ago: executing program 2 (id=9556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='signal_generate\x00', r0, 0x0, 0x1fc}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 729.551819ms ago: executing program 2 (id=9557): setreuid(0x0, 0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0xc6a6, 0x1000b152, 0x1, 0x1ff, 0x0, 0x5}}) 719.490133ms ago: executing program 0 (id=9558): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000004, 0x11, r0, 0x83000000) 581.030915ms ago: executing program 1 (id=9559): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000040007800c000800000000000000000008000a000000000044000780080001"], 0x90}}, 0x0) 506.905019ms ago: executing program 2 (id=9560): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) 498.165ms ago: executing program 4 (id=9561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4030}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 352.539124ms ago: executing program 6 (id=9562): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @mcast1, [@routing={0x4, 0x0, 0x2, 0xa3}], "42a475f32cd1fdc8"}}}}}}}, 0x0) 340.737018ms ago: executing program 4 (id=9563): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="c7", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/165, 0xa5}], 0x1}, 0x9}], 0x1, 0x400100c3, 0x0) 203.982972ms ago: executing program 2 (id=9564): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880b8938800) 203.098894ms ago: executing program 1 (id=9565): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) 172.676566ms ago: executing program 4 (id=9566): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 546.05µs ago: executing program 4 (id=9567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 6 (id=9568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 460.057736][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.066426][ T5880] usb 2-1: Product: syz [ 460.070638][ T5880] usb 2-1: Manufacturer: syz [ 460.075733][ T5880] usb 2-1: SerialNumber: syz [ 460.133926][ T5880] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 460.191819][ T52] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 460.522486][ T2995] hsr_slave_0: left promiscuous mode [ 460.549634][T23719] ptrace attach of "./syz-executor exec"[5820] was attempted by " [ 460.552700][ T2995] hsr_slave_1: left promiscuous mode [ 460.755962][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.849459][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.894358][ T2995] batman_adv: batadv0: Removing interface: vlan1 [ 460.897476][ T9] usb 2-1: USB disconnect, device number 52 [ 461.012051][T23735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7248'. [ 461.102734][ T5931] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 461.276259][ T5931] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.290600][ T5931] usb 1-1: config 0 has no interface number 0 [ 461.302331][ T5931] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 461.328097][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.340908][ T5931] usb 1-1: config 0 descriptor?? [ 461.357906][ T5931] usb 1-1: selecting invalid altsetting 1 [ 461.383145][ T5931] dvb_ttusb_budget: ttusb_init_controller: error [ 461.392287][ T5931] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 461.516570][ T52] usb 2-1: Service connection timeout for: 256 [ 461.538035][ T52] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 461.585387][ T52] ath9k_htc: Failed to initialize the device [ 461.591663][ T5931] DVB: Unable to find symbol cx22700_attach() [ 461.614882][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 461.738806][ T5931] DVB: Unable to find symbol tda10046_attach() [ 461.762940][ T5931] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 461.765748][ T5834] Bluetooth: hci4: command tx timeout [ 461.796274][ T5931] usb 1-1: USB disconnect, device number 42 [ 462.000133][ T2995] team0 (unregistering): Port device team_slave_1 removed [ 462.150764][ T2995] team0 (unregistering): Port device team_slave_0 removed [ 462.666504][ T1094] smc: removing ib device syz [ 463.017336][ T9] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 463.204146][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 463.240100][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 463.255172][ T9] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.299840][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 463.322249][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 463.331384][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.386833][ T9] usb 1-1: config 0 descriptor?? [ 463.392755][T23794] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 463.817282][ T9] hid (null): invalid report_size -938219617 [ 463.832582][ T5834] Bluetooth: hci4: command tx timeout [ 463.854124][ T9] uclogic 0003:28BD:0094.001D: interface is invalid, ignoring [ 464.114115][ T9] usb 1-1: USB disconnect, device number 43 [ 464.472640][T23492] chnl_net:caif_netlink_parms(): no params data found [ 464.992329][ T52] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 465.168692][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 465.184563][ T52] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 465.192263][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 465.204308][ T52] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.216424][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.242752][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 465.274745][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 465.284168][ T52] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 465.291643][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 465.310878][ T52] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.323545][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.335014][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 465.352849][ T52] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 465.369136][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 465.390749][ T52] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.422117][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.469093][ T52] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 465.503115][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 465.521920][ T52] usb 3-1: string descriptor 0 read error: -22 [ 465.530097][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 465.531639][ T52] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 465.583861][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.600236][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.619602][ T9] usb 2-1: Product: syz [ 465.624338][ T9] usb 2-1: Manufacturer: syz [ 465.658341][ T9] usb 2-1: SerialNumber: syz [ 465.698172][T23492] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.704489][ T52] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 465.730756][T23492] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.737533][ T9] usb 2-1: config 0 descriptor?? [ 465.739037][T23492] bridge_slave_0: entered allmulticast mode [ 465.809878][T23492] bridge_slave_0: entered promiscuous mode [ 465.821832][ T9] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 465.845290][T23492] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.865043][T23492] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.879056][T23492] bridge_slave_1: entered allmulticast mode [ 465.913443][T23492] bridge_slave_1: entered promiscuous mode [ 465.942580][ T52] usb 3-1: USB disconnect, device number 38 [ 466.138195][T23492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.162244][T23492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.267972][T23492] team0: Port device team_slave_0 added [ 466.280675][T23492] team0: Port device team_slave_1 added [ 466.303396][ T5931] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 466.374561][T23492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.386954][ T9] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 466.400764][T23492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.429378][T23492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.441902][ T9] usb 2-1: USB disconnect, device number 53 [ 466.461471][T23492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.462109][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 466.468617][T23492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.501103][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.537446][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.557943][ T5931] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 466.575709][T23492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.579500][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.617728][ T5931] usb 5-1: config 0 descriptor?? [ 466.809899][T23492] hsr_slave_0: entered promiscuous mode [ 466.818967][T23492] hsr_slave_1: entered promiscuous mode [ 467.098774][ T5931] aquacomputer_d5next 0003:0C70:F00A.001E: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.4-1/input0 [ 467.320430][ T9] usb 5-1: USB disconnect, device number 39 [ 467.720507][T23492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 467.800639][T23492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 467.827105][T23492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 467.852730][T23492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 468.130252][T23492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.226293][T23492] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.284621][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.293070][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.294495][ T30] audit: type=1326 audit(1747683909.212:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24296 comm="syz.0.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 468.323997][ T30] audit: type=1326 audit(1747683909.212:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24296 comm="syz.0.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 468.333647][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.352740][ T30] audit: type=1326 audit(1747683909.242:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24296 comm="syz.0.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 468.352809][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.375625][ T30] audit: type=1326 audit(1747683909.242:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24296 comm="syz.0.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 468.403726][T24300] netlink: 'syz.1.7302': attribute type 3 has an invalid length. [ 468.431178][ T30] audit: type=1326 audit(1747683909.242:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24296 comm="syz.0.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 468.513724][ T30] audit: type=1326 audit(1747683909.262:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24296 comm="syz.0.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 468.585815][ T30] audit: type=1326 audit(1747683909.262:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24296 comm="syz.0.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 468.695278][ T30] audit: type=1326 audit(1747683909.262:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24296 comm="syz.0.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 468.923190][T24322] random: crng reseeded on system resumption [ 469.388215][T23492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.990844][T24375] IPVS: Error connecting to the multicast addr [ 470.185787][T24384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.289410][T23492] veth0_vlan: entered promiscuous mode [ 470.323554][T23492] veth1_vlan: entered promiscuous mode [ 470.447612][T23492] veth0_macvtap: entered promiscuous mode [ 470.476794][T23492] veth1_macvtap: entered promiscuous mode [ 470.534733][T23492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.547348][T23492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.560658][T23492] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.589976][T23492] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.611994][T23492] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.620748][T23492] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.703852][T24397] netlink: 'syz.2.7333': attribute type 3 has an invalid length. [ 470.958747][ T30] audit: type=1326 audit(1747683911.893:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24410 comm="syz.2.7336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad118e969 code=0x7ffc0000 [ 471.003839][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.041733][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.060363][ T30] audit: type=1326 audit(1747683911.893:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24410 comm="syz.2.7336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad118e969 code=0x7ffc0000 [ 471.180892][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.200168][T24423] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 471.217736][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.288218][T24435] syz.1.7340 uses old SIOCAX25GETINFO [ 471.442516][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7341'. [ 472.878074][T24564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7361'. [ 472.908596][T24564] smc: net device bond0 applied user defined pnetid S [ 472.937717][T24569] netlink: 'syz.1.7363': attribute type 7 has an invalid length. [ 472.952580][T24569] netlink: 'syz.1.7363': attribute type 8 has an invalid length. [ 473.628865][T24603] hsr0: entered promiscuous mode [ 473.638131][T24602] hsr0: left promiscuous mode [ 473.901816][ T5811] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 473.924831][ T59] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 474.081419][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.101748][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.125336][ T5811] usb 3-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 474.135599][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 474.144819][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.153846][ T59] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 474.168225][ T5811] usb 3-1: config 0 descriptor?? [ 474.186971][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.225036][ T59] usb 5-1: config 0 descriptor?? [ 474.467283][ T59] usb 5-1: string descriptor 0 read error: -71 [ 474.573903][ T59] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 474.627733][ T59] usb 5-1: USB disconnect, device number 40 [ 474.630856][ T5811] hid-generic 0003:0416:C168.001F: unknown main item tag 0x0 [ 474.718314][ T5811] hid-generic 0003:0416:C168.001F: hidraw0: USB HID v0.00 Device [HID 0416:c168] on usb-dummy_hcd.2-1/input0 [ 474.846775][ T5811] usb 3-1: USB disconnect, device number 39 [ 474.876416][T24689] fido_id[24689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 474.951047][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7397'. [ 475.944261][T24756] netlink: 'syz.2.7416': attribute type 3 has an invalid length. [ 476.983758][ T5931] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 477.143401][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.178307][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.193635][ T5931] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 477.226336][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.244393][ T5931] usb 2-1: config 0 descriptor?? [ 477.475781][ T5931] usbhid 2-1:0.0: can't add hid device: -71 [ 477.485001][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 477.510121][ T5931] usb 2-1: USB disconnect, device number 54 [ 477.551763][ T5811] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 477.565845][T14986] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 477.716195][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 477.721651][T14986] usb 6-1: Using ep0 maxpacket: 8 [ 477.726960][ T5811] usb 3-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 477.744573][ T5811] usb 3-1: config 1 interface 0 has no altsetting 0 [ 477.753410][T14986] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.756613][ T5811] usb 3-1: string descriptor 0 read error: -22 [ 477.773947][ T5811] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 477.791516][T14986] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 477.791571][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.813789][T14986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.837848][T14986] usb 6-1: config 0 descriptor?? [ 477.854080][T24843] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 477.867193][T14986] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 478.092557][ T5811] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 64 proto 2 vid 0x0525 pid 0xA4A8 [ 478.132410][T14986] usb 6-1: USB disconnect, device number 2 [ 478.289513][ C1] usblp0: nonzero read bulk status received: -71 [ 478.301063][ T5811] usb 3-1: USB disconnect, device number 40 [ 478.322502][ T5811] usblp0: removed [ 478.384804][T24920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7458'. [ 478.421435][ T59] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 478.581447][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 478.597130][ T59] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.611307][ T59] usb 5-1: config 0 has no interface number 0 [ 478.623976][ T59] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 478.633337][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.649636][ T59] usb 5-1: Product: syz [ 478.656115][ T59] usb 5-1: Manufacturer: syz [ 478.660792][ T59] usb 5-1: SerialNumber: syz [ 478.681072][ T59] usb 5-1: config 0 descriptor?? [ 478.711528][ T59] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 478.742416][ T59] usb 5-1: selecting invalid altsetting 1 [ 478.748924][ T59] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 478.762796][ T59] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 478.774849][ T59] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 478.783747][ T59] usb 5-1: media controller created [ 478.813390][T14986] kernel write not supported for file /2886/attr/prev (pid: 14986 comm: kworker/0:9) [ 478.837782][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.383571][T24963] ip6_vti0: entered promiscuous mode [ 479.593473][T24971] netlink: 'syz.0.7478': attribute type 2 has an invalid length. [ 479.617398][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7478'. [ 479.762501][T24979] overlayfs: failed to resolve './mnt/file0': -20 [ 479.991752][ T59] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 480.020755][ T59] zl10353_read_register: readreg error (reg=127, ret==-110) [ 480.065275][ T59] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 480.087999][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7486'. [ 480.179388][ T59] usb 5-1: USB disconnect, device number 41 [ 480.354074][T25018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7492'. [ 480.613599][T25034] netlink: 'syz.5.7497': attribute type 2 has an invalid length. [ 480.652205][T25034] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7497'. [ 480.822836][T25043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7501'. [ 481.509692][T25090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7519'. [ 481.616881][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 481.616899][ T30] audit: type=1326 audit(1747683922.553:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25093 comm="syz.4.7520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa23398e969 code=0x0 [ 481.925138][T25112] program syz.1.7526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.961419][ T5931] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 482.121541][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 482.135664][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 482.145264][ T5931] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 482.164556][ T5931] usb 3-1: Product: syz [ 482.172228][ T5931] usb 3-1: Manufacturer: syz [ 482.182708][ T5931] usb 3-1: SerialNumber: syz [ 482.197521][ T5931] usb 3-1: config 0 descriptor?? [ 482.219515][ T5931] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 482.830754][ T5931] gspca_zc3xx: reg_w_i err -71 [ 482.836746][ T5931] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 482.862172][ T5931] usb 3-1: USB disconnect, device number 41 [ 483.401771][ T30] audit: type=1326 audit(1747683924.343:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25185 comm="syz.0.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 483.431405][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 483.435085][ T30] audit: type=1326 audit(1747683924.343:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25185 comm="syz.0.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 483.462728][ T30] audit: type=1326 audit(1747683924.343:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25185 comm="syz.0.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 483.484212][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.502566][ T30] audit: type=1326 audit(1747683924.343:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25185 comm="syz.0.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 483.536123][ T30] audit: type=1326 audit(1747683924.343:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25185 comm="syz.0.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 483.601104][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 483.608536][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.619895][ T59] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 483.643810][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.668159][ T59] usb 6-1: config 0 descriptor?? [ 484.108093][ T59] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 484.119900][ T59] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 484.130059][ T59] hid-steam 0003:28DE:1102.0020: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 484.224205][ T59] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' connected [ 484.251558][ T59] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.0020/input/input34 [ 484.374983][ T59] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 484.401300][ T59] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 484.402758][T25240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.458039][ T59] hid-steam 0003:28DE:1102.0021: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 484.508449][ T59] usb 6-1: USB disconnect, device number 3 [ 484.571004][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 484.638092][ T59] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' disconnected [ 484.683552][T25243] fido_id[25243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 484.771267][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 484.804881][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 484.826515][ T9] usb 2-1: config 0 has no interface number 0 [ 484.854642][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 484.884933][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.896517][ T9] usb 2-1: Product: syz [ 484.900748][ T9] usb 2-1: Manufacturer: syz [ 484.918702][ T9] usb 2-1: SerialNumber: syz [ 484.941898][ T9] usb 2-1: config 0 descriptor?? [ 484.959572][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 485.134861][T25284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7576'. [ 485.251351][T25289] netlink: 47 bytes leftover after parsing attributes in process `syz.4.7577'. [ 485.283335][T25289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7577'. [ 485.561195][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 485.616311][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 485.624833][T25316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7584'. [ 485.641903][T25311] Zero length message leads to an empty skb [ 485.731104][ T5830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 485.784581][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 485.786100][ T52] usb 2-1: USB disconnect, device number 55 [ 485.822390][ T52] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 485.867580][ T52] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 485.904971][ T52] quatech2 2-1:0.51: device disconnected [ 485.911384][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 485.937255][ T5830] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 485.946819][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.958348][ T5830] usb 6-1: Product: syz [ 485.966404][ T5830] usb 6-1: Manufacturer: syz [ 485.980936][ T5830] usb 6-1: SerialNumber: syz [ 485.993123][ T5830] usb 6-1: config 0 descriptor?? [ 486.025745][ T5830] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 486.046688][ T5830] usb 6-1: setting power ON [ 486.059827][ T5830] dvb-usb: bulk message failed: -22 (2/0) [ 486.078100][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 486.096647][ T5830] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 486.106695][ T5830] usb 6-1: media controller created [ 486.146117][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.198794][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7590'. [ 486.219662][ T5830] usb 6-1: selecting invalid altsetting 6 [ 486.227173][ T5830] usb 6-1: digital interface selection failed (-22) [ 486.251230][ T5830] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 486.251282][T25303] dvb-usb: bulk message failed: -22 (3/0) [ 486.291710][ T5830] usb 6-1: setting power OFF [ 486.298079][ T5830] dvb-usb: bulk message failed: -22 (2/0) [ 486.321010][ T5830] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 486.330415][ T5830] (NULL device *): no alternate interface [ 486.452477][ T5830] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 486.498147][ T5830] usb 6-1: USB disconnect, device number 4 [ 487.168483][T25400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7606'. [ 487.208019][T25402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.368255][T25416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7612'. [ 487.392619][T23367] udevd[23367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 487.460243][T23367] udevd[23367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 487.630970][ T5906] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 487.781217][T25441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7619'. [ 487.811059][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 487.840357][ T5906] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 487.855764][ T5906] usb 6-1: config 179 has no interface number 0 [ 487.881644][ T5906] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 487.901035][ T5906] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 487.944881][ T5906] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 487.976734][ T5906] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 488.005707][T25452] tipc: Started in network mode [ 488.015946][ T5906] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 488.025973][T25452] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 488.042099][ T5906] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 488.056847][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.064579][T25452] tipc: Enabling of bearer rejected, failed to enable media [ 488.081250][T25418] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 488.590093][ T52] usb 6-1: USB disconnect, device number 5 [ 488.590147][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 488.604529][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 488.828965][T25494] loop4: detected capacity change from 0 to 524255232 [ 488.910624][T25498] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 488.951148][T25500] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7639'. [ 488.990370][T25500] netlink: 'syz.0.7639': attribute type 9 has an invalid length. [ 489.284091][ T5811] IPVS: starting estimator thread 0... [ 489.355461][T25523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7647'. [ 489.371084][T25522] IPVS: using max 27 ests per chain, 64800 per kthread [ 489.600306][T23367] udevd[23367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 489.706963][T23367] udevd[23367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 489.880296][T25566] tipc: Started in network mode [ 489.890192][T25566] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 489.907322][T25566] tipc: Enabling of bearer rejected, failed to enable media [ 489.950763][ T5811] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 490.111494][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 490.118511][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.152416][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.175052][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 490.207875][ T5811] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 490.240452][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.266266][ T5811] usb 5-1: config 0 descriptor?? [ 490.716648][ T5811] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 490.766650][ T5811] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 490.767354][ T30] audit: type=1326 audit(1747683931.767:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25610 comm="syz.5.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecbf8e969 code=0x7ffc0000 [ 490.818777][ T5811] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 490.842003][ T5811] microsoft 0003:045E:07DA.0022: no inputs found [ 490.848446][ T5811] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 490.858998][ T30] audit: type=1326 audit(1747683931.767:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25610 comm="syz.5.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecbf8e969 code=0x7ffc0000 [ 490.908522][ T30] audit: type=1326 audit(1747683931.817:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25610 comm="syz.5.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fdecbf8e969 code=0x7ffc0000 [ 490.946271][ T30] audit: type=1326 audit(1747683931.817:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25610 comm="syz.5.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecbf8e969 code=0x7ffc0000 [ 490.972162][ T30] audit: type=1326 audit(1747683931.817:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25610 comm="syz.5.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecbf8e969 code=0x7ffc0000 [ 491.019186][ T59] usb 5-1: USB disconnect, device number 42 [ 491.079530][ T30] audit: type=1326 audit(1747683931.887:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25610 comm="syz.5.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fdecbf8e969 code=0x7ffc0000 [ 491.089492][T25618] fido_id[25618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 491.125660][ T30] audit: type=1326 audit(1747683931.887:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25610 comm="syz.5.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecbf8e969 code=0x7ffc0000 [ 491.196316][ T30] audit: type=1326 audit(1747683931.887:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25610 comm="syz.5.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdecbf8e969 code=0x7ffc0000 [ 492.218940][T25647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7678'. [ 492.514935][T24897] udevd[24897]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 492.569676][T23367] udevd[23367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 492.627479][T25671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7684'. [ 492.918136][T25684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7689'. [ 493.241053][T25708] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 493.700690][ T5906] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 493.860689][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 493.877976][ T5906] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 493.905642][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.922174][ T5906] usb 2-1: config 0 descriptor?? [ 493.932423][ T5906] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 493.960779][ T5811] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 494.030839][ T52] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 494.130919][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 494.146304][ T5811] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.167773][ T5811] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.187710][ T5811] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 494.197348][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 494.202680][ T5811] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 494.212356][ T5811] usb 5-1: Product: syz [ 494.217217][ T5811] usb 5-1: Manufacturer: syz [ 494.225971][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.237987][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.254254][ T5811] hub 5-1:4.0: USB hub found [ 494.259660][ T52] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 494.269920][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.294253][ T52] usb 3-1: config 0 descriptor?? [ 494.330764][T25773] netlink: 'syz.5.7716': attribute type 1 has an invalid length. [ 494.338721][T25773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.339762][ T5906] gspca_vc032x: reg_w err -71 [ 494.367487][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.373198][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.378766][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.385486][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.391523][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.396856][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.403991][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.409472][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.420535][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.430450][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.446466][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.453212][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.462659][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.468015][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.473959][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.479279][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.486433][ T5811] hub 5-1:4.0: 3 ports detected [ 494.497852][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.509270][ T5906] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.520651][ T5906] gspca_vc032x: Unknown sensor... [ 494.525830][ T5906] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 494.565744][ T5906] usb 2-1: USB disconnect, device number 56 [ 494.687398][ T5811] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 494.700482][ T5811] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 494.727059][ T52] elo 0003:04E7:0009.0023: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.2-1/input0 [ 494.762183][ T5811] usb 5-1: USB disconnect, device number 43 [ 494.946690][ T52] usb 3-1: USB disconnect, device number 42 [ 494.967747][T25807] ip6_vti0: entered promiscuous mode [ 495.908874][T25862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7739'. [ 496.196987][T25880] delete_channel: no stack [ 496.208527][T25879] delete_channel: no stack [ 496.276230][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7746'. [ 496.295591][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7746'. [ 496.330884][ T52] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 496.510862][ T52] usb 5-1: config 0 has an invalid interface number: 181 but max is 0 [ 496.519107][ T52] usb 5-1: config 0 has no interface number 0 [ 496.530975][T25897] smc: net device bond0 erased user defined pnetid S [ 496.555588][ T52] usb 5-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=59.3e [ 496.575957][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.600583][ T52] usb 5-1: Product: syz [ 496.608346][ T52] usb 5-1: Manufacturer: syz [ 496.626587][ T52] usb 5-1: SerialNumber: syz [ 496.652294][ T52] usb 5-1: config 0 descriptor?? [ 496.675789][ T52] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617 [ 496.729856][T25906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7753'. [ 496.885860][ T52] gspca_sn9c20x: Write register 1000 failed -71 [ 496.904366][ T52] gspca_sn9c20x: Device initialization failed [ 496.920563][ T52] gspca_sn9c20x 5-1:0.181: probe with driver gspca_sn9c20x failed with error -71 [ 496.949427][ T52] usb 5-1: USB disconnect, device number 44 [ 497.290294][ T5811] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 497.472469][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.509963][ T5811] usb 6-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 497.550563][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.580501][ T5811] usb 6-1: config 0 descriptor?? [ 497.950268][ T52] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 498.030864][ T5811] sigmamicro 0003:1C4F:0059.0024: hidraw0: USB HID v1.05 Device [HID 1c4f:0059] on usb-dummy_hcd.5-1/input0 [ 498.143440][ T52] usb 3-1: config 0 interface 0 has no altsetting 0 [ 498.150806][ T52] usb 3-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 498.161307][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.201055][ T52] usb 3-1: config 0 descriptor?? [ 498.234100][ T5931] usb 6-1: USB disconnect, device number 6 [ 498.299511][ T30] audit: type=1326 audit(1747683939.297:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26002 comm="syz.4.7781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa23398e969 code=0x0 [ 498.644447][ T52] lenovo 0003:17EF:6049.0025: hidraw0: USB HID v0.f9 Device [HID 17ef:6049] on usb-dummy_hcd.2-1/input0 [ 498.853621][ T52] usb 3-1: USB disconnect, device number 43 [ 499.189830][T26052] netlink: zone id is out of range [ 499.211831][T26052] netlink: zone id is out of range [ 499.231061][T26052] netlink: zone id is out of range [ 499.246734][T26052] netlink: zone id is out of range [ 499.259533][T26052] netlink: zone id is out of range [ 499.271338][T26052] netlink: zone id is out of range [ 499.277090][T26052] netlink: zone id is out of range [ 499.289316][T26052] netlink: zone id is out of range [ 499.299400][T26052] netlink: zone id is out of range [ 499.311850][T26052] netlink: zone id is out of range [ 500.003437][ T5931] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 500.160244][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 500.177133][ T5931] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 500.198272][ T5931] usb 6-1: config 179 has no interface number 0 [ 500.210793][T26107] max out of range [ 500.219674][ T5931] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 500.248778][ T5931] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 500.278660][ T5931] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 500.300724][ T5931] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 500.312544][ T5931] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 500.357086][ T5931] usb 6-1: config 179 interface 65 has no altsetting 0 [ 500.375622][ T5931] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 500.397385][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.421489][T26079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 500.482246][ T5931] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input36 [ 500.763299][ T5931] usb 6-1: USB disconnect, device number 7 [ 500.769251][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 500.833228][ T5931] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 501.046368][ T30] audit: type=1800 audit(1747683942.047:230): pid=26163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.7821" name="SYSV798dd814" dev="tmpfs" ino=0 res=0 errno=0 [ 501.130129][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 501.280106][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 501.294288][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.447800][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.513984][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 501.521288][ T30] audit: type=1326 audit(1747683942.517:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26180 comm="syz.5.7828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdecbf8e969 code=0x0 [ 501.556589][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 501.590339][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.614602][ T9] usb 3-1: config 0 descriptor?? [ 502.112262][T26204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7834'. [ 502.276564][ T52] usb 3-1: USB disconnect, device number 44 [ 502.489031][T26219] support for cryptoloop has been removed. Use dm-crypt instead. [ 502.775724][T26229] tipc: Enabling of bearer rejected, failed to enable media [ 503.232006][T26258] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7849'. [ 503.261568][T26258] netlink: 'syz.0.7849': attribute type 9 has an invalid length. [ 503.283870][T26258] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7849'. [ 503.306758][T26258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7849'. [ 503.641444][T26281] netlink: 'syz.4.7857': attribute type 11 has an invalid length. [ 503.686490][T26284] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.696007][T26284] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.705524][T26284] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.714998][T26284] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.732659][T26272] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 504.174665][T26314] sg_write: data in/out 2031668/4 bytes for SCSI command 0x26-- guessing data in; [ 504.174665][T26314] program syz.1.7867 not setting count and/or reply_len properly [ 504.610025][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 504.763410][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.777680][ T9] usb 3-1: config 0 has no interface number 0 [ 504.790442][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.836801][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.889904][ T9] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.919936][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 504.936123][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.964283][ T9] usb 3-1: config 0 descriptor?? [ 505.392338][T26377] sp0: Synchronizing with TNC [ 505.446365][T26377] sp0: Found TNC [ 505.589996][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 505.612731][ T9] uclogic 0003:28BD:0042.0027: failed retrieving string descriptor #100: -71 [ 505.640011][ T9] uclogic 0003:28BD:0042.0027: failed retrieving pen parameters: -71 [ 505.669878][ T9] uclogic 0003:28BD:0042.0027: pen probing failed: -71 [ 505.676995][ T9] uclogic 0003:28BD:0042.0027: failed probing parameters: -71 [ 505.686220][ T9] uclogic 0003:28BD:0042.0027: probe with driver uclogic failed with error -71 [ 505.700203][ T5931] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 505.710164][ T9] usb 3-1: USB disconnect, device number 45 [ 505.923743][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.946082][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.951302][T26417] pimreg: entered allmulticast mode [ 505.959183][ T5931] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 505.976285][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.997671][ T5931] usb 5-1: config 0 descriptor?? [ 506.435131][ T5931] isku 0003:1E7D:319C.0028: unbalanced collection at end of report description [ 506.478874][ T5931] isku 0003:1E7D:319C.0028: parse failed [ 506.504469][ T5931] isku 0003:1E7D:319C.0028: probe with driver isku failed with error -22 [ 506.653210][ T5931] usb 5-1: USB disconnect, device number 45 [ 506.980485][ T59] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 507.154135][ T59] usb 2-1: config 0 interface 0 has no altsetting 0 [ 507.163805][ T59] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 507.186713][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.221914][ T59] usb 2-1: config 0 descriptor?? [ 507.650369][ T59] microsoft 0003:045E:00F9.0029: hidraw0: USB HID v0.02 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 507.696868][ T59] microsoft 0003:045E:00F9.0029: no inputs found [ 507.720746][ T59] microsoft 0003:045E:00F9.0029: could not initialize ff, continuing anyway [ 507.816826][T26508] batadv0: entered promiscuous mode [ 507.844298][T26506] batadv0: left promiscuous mode [ 507.862014][ T59] usb 2-1: USB disconnect, device number 57 [ 508.064312][T26527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7929'. [ 510.391203][ T5931] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 510.550230][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 510.565258][ T5931] usb 5-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 510.580045][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.588201][ T5931] usb 5-1: Product: syz [ 510.608462][ T5931] usb 5-1: Manufacturer: syz [ 510.615278][T26635] rtc_cmos 00:00: Alarms can be up to one day in the future [ 510.620810][ T5931] usb 5-1: SerialNumber: syz [ 510.640211][ T5931] usb 5-1: config 0 descriptor?? [ 510.656223][ T5931] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 510.676205][ T5931] usb 5-1: Detected FT232A [ 510.689799][ T5931] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 510.878190][ T5931] usb 5-1: USB disconnect, device number 46 [ 510.913770][ T5931] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 510.938982][T26656] sp0: Synchronizing with TNC [ 510.970590][ T5931] ftdi_sio 5-1:0.0: device disconnected [ 510.981204][ T52] rtc_cmos 00:00: Alarms can be up to one day in the future [ 511.008728][ T52] rtc_cmos 00:00: Alarms can be up to one day in the future [ 511.038895][ T52] rtc_cmos 00:00: Alarms can be up to one day in the future [ 511.050713][ T52] rtc_cmos 00:00: Alarms can be up to one day in the future [ 511.068353][ T52] rtc rtc0: __rtc_set_alarm: err=-22 [ 511.502404][ T30] audit: type=1326 audit(1747683952.508:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26688 comm="syz.1.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 511.583522][ T30] audit: type=1326 audit(1747683952.528:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26688 comm="syz.1.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 511.655916][ T30] audit: type=1326 audit(1747683952.538:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26688 comm="syz.1.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 511.715314][ T30] audit: type=1326 audit(1747683952.548:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26688 comm="syz.1.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 511.779984][ T30] audit: type=1326 audit(1747683952.548:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26688 comm="syz.1.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 511.886632][ T30] audit: type=1326 audit(1747683952.548:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26688 comm="syz.1.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 511.962261][T26706] tipc: Started in network mode [ 511.973275][ T30] audit: type=1326 audit(1747683952.548:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26688 comm="syz.1.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 511.989495][T26706] tipc: Node identity a18d, cluster identity 106 [ 512.013582][T26706] tipc: Node number set to 41357 [ 512.169661][ T5906] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 512.341523][ T5906] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 512.354900][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.385156][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.421757][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 512.486879][ T5906] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 512.496925][ T5906] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 512.512140][ T5906] usb 2-1: Manufacturer: syz [ 512.526504][ T5906] usb 2-1: config 0 descriptor?? [ 512.965151][ T5906] appleir 0003:05AC:8243.002A: item fetching failed at offset 0/1 [ 512.982272][ T5906] appleir 0003:05AC:8243.002A: parse failed [ 512.988774][ T5906] appleir 0003:05AC:8243.002A: probe with driver appleir failed with error -22 [ 513.171811][ T5906] usb 2-1: USB disconnect, device number 58 [ 513.326717][T26772] /dev/nullb0: Can't open blockdev [ 513.837576][ T30] audit: type=1326 audit(1747683954.838:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26793 comm="syz.0.8020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 513.920511][ T30] audit: type=1326 audit(1747683954.838:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26793 comm="syz.0.8020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 514.021156][ T30] audit: type=1326 audit(1747683954.838:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26793 comm="syz.0.8020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 515.141161][T26851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8046'. [ 515.498331][T26865] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8052'. [ 515.967223][T26884] netlink: 536 bytes leftover after parsing attributes in process `syz.0.8059'. [ 515.999268][T26884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8059'. [ 516.213312][T26894] autofs: Bad value for 'fd' [ 516.276443][T26896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8064'. [ 516.525883][T26903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8067'. [ 516.556506][T26903] tipc: Invalid UDP bearer configuration [ 516.556572][T26903] tipc: Enabling of bearer rejected, failed to enable media [ 518.117869][T26946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8085'. [ 519.289232][ T5834] Bluetooth: hci4: link tx timeout [ 519.294830][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 519.357443][ T5931] kernel write not supported for file /uinput (pid: 5931 comm: kworker/1:6) [ 519.480138][T27010] tipc: Enabling of bearer rejected, failed to enable media [ 520.279484][ T5931] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 520.451488][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.480753][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.503904][ T5931] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 520.523890][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.562507][ T5931] usb 2-1: config 0 descriptor?? [ 520.675769][T27060] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.688378][T27060] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.699173][T27060] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.715846][T27060] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.725039][T27060] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.774495][T27056] lo speed is unknown, defaulting to 1000 [ 520.777117][T27063] net_ratelimit: 3 callbacks suppressed [ 520.777136][T27063] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 521.051445][ T5931] steelseries 0003:1038:12B6.002B: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 521.262020][ T5931] steelseries 0003:1038:12B6.002B: hid_hw_raw_request() failed with -71 [ 521.328565][ T5931] usb 2-1: USB disconnect, device number 59 [ 521.349470][T27002] Bluetooth: hci4: command 0x0c1a tx timeout [ 521.384317][T27089] fido_id[27089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 521.605407][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8134'. [ 521.648944][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8134'. [ 521.667540][T27150] netlink: 'syz.4.8134': attribute type 12 has an invalid length. [ 521.676486][T27150] netlink: 'syz.4.8134': attribute type 13 has an invalid length. [ 521.916035][T27205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.240406][T27056] chnl_net:caif_netlink_parms(): no params data found [ 522.494385][T27056] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.502148][T27056] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.512337][T27056] bridge_slave_0: entered allmulticast mode [ 522.526570][T27056] bridge_slave_0: entered promiscuous mode [ 522.541785][T27056] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.559561][T27056] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.566977][T27056] bridge_slave_1: entered allmulticast mode [ 522.578632][T27056] bridge_slave_1: entered promiscuous mode [ 522.626685][T27317] netlink: 'syz.0.8148': attribute type 5 has an invalid length. [ 522.724002][T27056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.760132][T27056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.799447][ T5834] Bluetooth: hci5: command tx timeout [ 522.930463][T27056] team0: Port device team_slave_0 added [ 522.963839][T27056] team0: Port device team_slave_1 added [ 523.151366][T27056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.168130][T27056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.231934][T27056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.245039][T27056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.274023][T27056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.329141][T27056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.602192][T27440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8160'. [ 523.650554][T27056] hsr_slave_0: entered promiscuous mode [ 523.657343][T27056] hsr_slave_1: entered promiscuous mode [ 523.685583][T27056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.718784][T27056] Cannot create hsr debugfs directory [ 524.548023][T27056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 524.580404][T27056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 524.627666][T27056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 524.683640][T27056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 524.874430][ T5834] Bluetooth: hci5: command tx timeout [ 524.936911][T27056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.971142][T27056] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.020947][T24544] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.028206][T24544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.062563][T24544] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.069861][T24544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.748367][T27056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.333636][T27596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.423916][T27056] veth0_vlan: entered promiscuous mode [ 526.438089][T27056] veth1_vlan: entered promiscuous mode [ 526.504089][T27056] veth0_macvtap: entered promiscuous mode [ 526.523570][T27056] veth1_macvtap: entered promiscuous mode [ 526.593011][T27056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.650715][T27056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.702824][T27056] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.732841][T27056] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.758097][T27056] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.784450][T27056] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.955145][ T5834] Bluetooth: hci5: command tx timeout [ 527.003259][T24523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.044316][T24523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.138407][T27630] netlink: 'syz.0.8190': attribute type 5 has an invalid length. [ 527.155043][T24508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.172834][T24508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.105538][T27674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8205'. [ 528.124893][T27675] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 529.037996][ T5834] Bluetooth: hci5: command tx timeout [ 530.918531][ T59] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 531.095199][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.117806][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 531.129894][ T59] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 531.148563][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.177767][ T59] usb 5-1: config 0 descriptor?? [ 531.194181][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 531.213623][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 531.234548][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 531.253772][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 531.273549][ T59] usb 5-1: media controller created [ 531.291095][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.320572][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 531.342156][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 531.369112][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 531.400287][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 531.424637][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 531.448569][ T59] usb 5-1: USB disconnect, device number 47 [ 531.489483][ T59] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 533.232649][T27932] [U] ùÿ [ 534.186678][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 534.186696][ T30] audit: type=1326 audit(1747683975.189:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27941 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23398e969 code=0x7fc00000 [ 534.288220][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 534.454384][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 534.464083][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.528028][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.547410][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 534.573639][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.585810][ T9] usb 3-1: config 0 descriptor?? [ 534.796893][T28028] netlink: 'syz.4.8330': attribute type 27 has an invalid length. [ 535.032755][ T9] hid_mf 0003:0079:1801.002C: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.2-1/input0 [ 535.069703][ T9] hid_mf 0003:0079:1801.002C: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 535.246369][ T9] usb 3-1: USB disconnect, device number 46 [ 535.299622][ T5811] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 535.368007][T28070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8339'. [ 535.469432][T28072] sp0: Synchronizing with TNC [ 535.490804][ T5811] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 535.526534][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.546346][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 535.569759][ T5811] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 535.584367][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.631989][ T5811] usb 5-1: config 0 descriptor?? [ 535.759488][T28092] sctp: [Deprecated]: syz.0.8345 (pid 28092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.759488][T28092] Use struct sctp_sack_info instead [ 536.015544][T28108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8351'. [ 536.062159][ T5811] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 536.087483][ T5811] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 536.105952][ T5811] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 536.123568][ T5811] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 536.141203][ T5811] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 536.170579][ T5811] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 536.177954][ T5811] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 536.206906][ T5811] holtek_kbd 0003:04D9:A055.002D: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 536.288269][ T5811] usb 5-1: USB disconnect, device number 48 [ 536.349702][T28134] netlink: 'syz.0.8357': attribute type 2 has an invalid length. [ 536.369813][T28134] netlink: 'syz.0.8357': attribute type 2 has an invalid length. [ 536.383202][T28119] fido_id[28119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 536.561517][T28143] netlink: 'syz.0.8360': attribute type 58 has an invalid length. [ 536.576079][T28143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8360'. [ 536.915086][T28169] program syz.1.8369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.076628][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8372'. [ 537.094412][T28177] netlink: 'syz.0.8372': attribute type 7 has an invalid length. [ 537.429699][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8381'. [ 537.441464][T28202] IPVS: Error joining to the multicast group [ 537.703679][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8388'. [ 538.048072][ T5906] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 538.200329][ T5906] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 538.222539][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 538.236601][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 30768, setting to 64 [ 538.248821][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 538.264985][ T5906] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 538.275347][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 538.284566][ T5906] usb 5-1: Product: syz [ 538.289237][ T5906] usb 5-1: Manufacturer: syz [ 538.293943][ T5906] usb 5-1: SerialNumber: syz [ 538.306090][ T5906] usb 5-1: config 0 descriptor?? [ 538.543570][ T5906] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 538.570615][ T5906] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 538.757413][ T5906] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 538.765780][ T5906] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 538.778721][ T5906] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 538.920233][ T5811] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 538.948046][ T5880] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 538.963852][ T5906] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 538.993971][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.000878][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.007580][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.014669][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.022510][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.029810][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.037199][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.045189][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.052138][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.059089][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.065948][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.072832][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.079588][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.086342][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.093002][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.107410][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.114151][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.118011][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 539.120812][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.126075][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 539.132870][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.145389][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.152123][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.158868][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.165746][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.173380][ T5906] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 539.181916][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.191346][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.198945][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.205690][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.212945][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.219954][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.223953][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.226693][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.242461][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.248433][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.258754][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 539.265776][ T5906] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 539.297520][ T5880] usb 2-1: config 0 has no interface number 0 [ 539.307719][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.308087][ T5906] usb 5-1: USB disconnect, device number 49 [ 539.330873][ T5880] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 539.371087][ T5811] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 539.388105][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.396488][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.412243][ T5880] usb 2-1: Product: syz [ 539.416481][ T5880] usb 2-1: Manufacturer: syz [ 539.425301][ T5880] usb 2-1: SerialNumber: syz [ 539.436426][ T5811] usb 3-1: config 0 descriptor?? [ 539.463499][ T5880] usb 2-1: config 0 descriptor?? [ 539.481834][ T5880] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 539.874068][ T5811] hid (null): report_id 0 is invalid [ 539.905978][ T5811] hid-u2fzero 0003:10C4:8ACF.002E: report_id 0 is invalid [ 539.906006][ T5811] hid-u2fzero 0003:10C4:8ACF.002E: item 0 0 1 8 parsing failed [ 539.907110][ T5811] hid-u2fzero 0003:10C4:8ACF.002E: probe with driver hid-u2fzero failed with error -22 [ 540.013926][T28325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8423'. [ 540.032435][T28325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8423'. [ 540.099974][ T5880] gspca_spca1528: reg_w err -71 [ 540.126215][ T5811] usb 3-1: USB disconnect, device number 47 [ 540.133005][ T5880] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 540.193741][ T5880] usb 2-1: USB disconnect, device number 60 [ 540.839877][T28372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8434'. [ 540.889714][T28372] vlan2: entered allmulticast mode [ 540.935420][T28372] gretap0: entered allmulticast mode [ 541.262468][T28396] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8441'. [ 541.534665][T28409] vlan2: entered allmulticast mode [ 541.758490][T28423] pim6reg527: entered allmulticast mode [ 542.117115][ T30] audit: type=1107 audit(1747683983.110:246): pid=28443 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 542.368584][T28455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8464'. [ 542.654575][T28465] openvswitch: netlink: IPv6 tunnel dst address is zero [ 543.097739][ T5906] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 543.209700][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8475'. [ 543.225739][T28488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8475'. [ 543.238375][T28488] netlink: 'syz.1.8475': attribute type 6 has an invalid length. [ 543.277773][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 543.284918][ T5906] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.312887][ T5906] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.336890][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 543.363430][ T5906] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 543.384556][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.393055][T28493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8476'. [ 543.405122][ T5906] usb 3-1: config 0 descriptor?? [ 543.411465][T28493] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8476'. [ 543.808048][ T59] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 543.846664][ T5906] viewsonic 0003:2133:0018.002F: unknown main item tag 0x0 [ 543.846703][ T5906] viewsonic 0003:2133:0018.002F: unknown main item tag 0x0 [ 543.859384][ T5906] viewsonic 0003:2133:0018.002F: hidraw0: USB HID v0.03 Device [HID 2133:0018] on usb-dummy_hcd.2-1/input0 [ 543.959559][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 543.959591][ T59] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 543.959617][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 543.959640][ T59] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 543.959681][ T59] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 543.959706][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.968318][ T59] usb 2-1: config 0 descriptor?? [ 544.070321][ T5834] Bluetooth: hci5: command tx timeout [ 544.094950][ T5811] usb 3-1: USB disconnect, device number 48 [ 544.190438][ T59] hdpvr 2-1:0.0: firmware version 0x0 dated [ 544.190489][ T59] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 544.556145][T28548] debugfs: Bad value for 'uid' [ 544.562056][T28548] debugfs: Bad value for 'uid' [ 544.636888][ T59] hdpvr 2-1:0.0: Could not setup controls [ 544.677324][ T59] hdpvr 2-1:0.0: registering videodev failed [ 544.723588][ T59] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 544.778412][ T59] usb 2-1: USB disconnect, device number 61 [ 544.903287][T28573] 9pnet_fd: Insufficient options for proto=fd [ 545.086739][T28582] netlink: 'syz.2.8492': attribute type 29 has an invalid length. [ 545.096997][T28582] netlink: 'syz.2.8492': attribute type 29 has an invalid length. [ 545.238421][ T5880] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 545.417923][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 545.431554][ T5880] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.446207][ T5880] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.467677][ T5880] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 545.487413][ T5880] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 545.517985][ T5880] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 545.532009][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 545.541682][ T5880] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 545.567541][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.599450][ T5880] usb 5-1: config 0 descriptor?? [ 545.811771][T28618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8506'. [ 546.028870][ T5880] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 546.055094][ T5880] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 546.071168][ T5880] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 546.090026][ T5880] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 546.109283][ T5880] hid-thrustmaster 0003:044F:B65D.0030: unknown main item tag 0x0 [ 546.130324][ T5880] hid-thrustmaster 0003:044F:B65D.0030: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 546.165212][ T5880] hid-thrustmaster 0003:044F:B65D.0030: setup data couldn't be sent [ 546.284679][ C1] hid-thrustmaster 0003:044F:B65D.0030: URB to get model id failed with error -71 [ 546.296677][ T5880] usb 5-1: USB disconnect, device number 50 [ 546.534329][T28659] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 547.187790][ T5906] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 547.268070][ T59] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 547.288206][ T5880] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 547.337959][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 547.344982][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.356029][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.366956][ T5906] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 547.376220][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.388128][ T5906] usb 5-1: config 0 descriptor?? [ 547.417445][ T59] usb 3-1: Using ep0 maxpacket: 32 [ 547.432361][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.451751][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 547.465737][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 547.466568][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.488559][ T59] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 547.497992][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 547.498122][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.511648][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 547.538835][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.539811][ T59] usb 3-1: config 0 descriptor?? [ 547.556099][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 547.576743][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 547.583533][ T59] hub 3-1:0.0: USB hub found [ 547.598264][ T5880] usb 2-1: Product: syz [ 547.610125][ T5880] usb 2-1: Manufacturer: syz [ 547.614806][ T5880] usb 2-1: SerialNumber: syz [ 547.653492][ T5880] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input39 [ 547.785862][ T59] hub 3-1:0.0: 4 ports detected [ 547.822416][ T5906] corsair 0003:1B1C:1B02.0031: global environment stack underflow [ 547.858195][ T5906] corsair 0003:1B1C:1B02.0031: item 0 4 1 11 parsing failed [ 547.876791][ T5906] corsair 0003:1B1C:1B02.0031: parse failed [ 547.901409][ T5906] corsair 0003:1B1C:1B02.0031: probe with driver corsair failed with error -22 [ 547.936163][ T5880] usb 2-1: USB disconnect, device number 62 [ 547.990714][ T59] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 548.006297][ T59] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 548.027976][ T5880] appletouch 2-1:1.0: input: appletouch disconnected [ 548.049548][ T59] usbhid 3-1:0.0: can't add hid device: -71 [ 548.063462][ T52] usb 5-1: USB disconnect, device number 51 [ 548.064926][ T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 548.139495][ T59] usb 3-1: USB disconnect, device number 49 [ 548.285434][T28756] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 548.289642][T28755] IPVS: stopping backup sync thread 28756 ... [ 551.344417][T28930] ALSA: mixer_oss: invalid OSS volume 'u' [ 551.579945][T28946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8604'. [ 551.589416][T28946] tipc: Enabling of bearer rejected, failed to enable media [ 552.000358][ T30] audit: type=1326 audit(1747683993.000:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28969 comm="syz.1.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 552.050064][ T30] audit: type=1326 audit(1747683993.050:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28969 comm="syz.1.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 552.148645][ T30] audit: type=1326 audit(1747683993.050:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28969 comm="syz.1.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 552.250903][ T30] audit: type=1326 audit(1747683993.050:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28969 comm="syz.1.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 552.314047][ T30] audit: type=1326 audit(1747683993.080:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28969 comm="syz.1.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 552.376079][ T30] audit: type=1326 audit(1747683993.080:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28969 comm="syz.1.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0bf8e969 code=0x7ffc0000 [ 552.458708][ T30] audit: type=1326 audit(1747683993.180:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28977 comm="syz.6.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 552.522888][ T30] audit: type=1326 audit(1747683993.220:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28977 comm="syz.6.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 552.560361][ T30] audit: type=1326 audit(1747683993.230:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28977 comm="syz.6.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 552.614449][ T30] audit: type=1326 audit(1747683993.230:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28977 comm="syz.6.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 552.908250][T29011] can0: slcan on ptm0. [ 553.007416][T29010] can0 (unregistered): slcan off ptm0. [ 553.147427][T14984] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 553.332381][T14984] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 553.354066][T14984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.373782][T14984] usb 3-1: Product: syz [ 553.382793][T14984] usb 3-1: Manufacturer: syz [ 553.394442][T14984] usb 3-1: SerialNumber: syz [ 553.414575][T14984] usb 3-1: config 0 descriptor?? [ 553.420084][T29034] devpts: Bad value for 'max' [ 553.442469][T14984] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 050 [ 554.059966][T14984] i2c i2c-1: failure reading functionality [ 554.096118][T14984] i2c i2c-1: connected i2c-tiny-usb device [ 554.122490][T14984] usb 3-1: USB disconnect, device number 50 [ 554.636597][T29081] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x32314247, 8, 0, 0, 0) [ 556.003941][T29155] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8672'. [ 556.206340][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 557.495538][T29024] syz.0.8629 (29024): drop_caches: 3 [ 558.093172][T29267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8709'. [ 558.178367][T29273] netlink: 632 bytes leftover after parsing attributes in process `syz.1.8710'. [ 558.284106][T29283] tipc: Enabled bearer , priority 0 [ 558.910004][T29321] rdma_op ffff888033d8d1f0 conn xmit_rdma 0000000000000000 [ 559.017902][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 559.017923][ T30] audit: type=1326 audit(1747684000.021:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29327 comm="syz.4.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23398e969 code=0x7ffc0000 [ 559.096629][ T30] audit: type=1326 audit(1747684000.021:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29327 comm="syz.4.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23398e969 code=0x7ffc0000 [ 559.141862][ T30] audit: type=1326 audit(1747684000.021:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29327 comm="syz.4.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa23398e969 code=0x7ffc0000 [ 559.171840][ T30] audit: type=1326 audit(1747684000.021:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29327 comm="syz.4.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23398e969 code=0x7ffc0000 [ 559.209668][ T30] audit: type=1326 audit(1747684000.021:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29327 comm="syz.4.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23398e969 code=0x7ffc0000 [ 559.266282][ T30] audit: type=1326 audit(1747684000.021:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29327 comm="syz.4.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fa23398e969 code=0x7ffc0000 [ 559.325918][ T30] audit: type=1326 audit(1747684000.021:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29327 comm="syz.4.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23398e969 code=0x7ffc0000 [ 559.548555][T29354] mkiss: ax0: crc mode is auto. [ 560.250330][T29397] netlink: 277 bytes leftover after parsing attributes in process `syz.6.8752'. [ 560.431556][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8756'. [ 560.448048][T29408] nbd: socks must be embedded in a SOCK_ITEM attr [ 561.150098][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8770'. [ 561.311701][T29457] [U] ^C [ 561.489446][T14984] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 561.677149][T14984] usb 5-1: Using ep0 maxpacket: 16 [ 561.698107][T14984] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 561.727395][T14984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.759152][T14984] usb 5-1: config 0 descriptor?? [ 561.779628][T14984] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 561.803682][T14984] usb 5-1: Detected FT4232H [ 561.995322][T14984] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 562.019556][T14984] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 562.247177][ T9] usb 5-1: USB disconnect, device number 52 [ 562.281137][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 562.307628][ T9] ftdi_sio 5-1:0.0: device disconnected [ 562.871364][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.659202][T29585] netlink: 'syz.4.8816': attribute type 10 has an invalid length. [ 563.724463][T29585] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 563.759302][T29589] bridge_slave_1: left allmulticast mode [ 563.765126][T29589] bridge_slave_1: left promiscuous mode [ 563.795593][T29589] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.845252][T29589] bridge_slave_0: left allmulticast mode [ 563.885561][T29599] netlink: 201856 bytes leftover after parsing attributes in process `syz.6.8821'. [ 563.889498][T29589] bridge_slave_0: left promiscuous mode [ 563.911251][T29599] netlink: zone id is out of range [ 563.922865][T29599] netlink: zone id is out of range [ 563.924044][T29589] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.934981][T29599] netlink: zone id is out of range [ 563.945717][T29599] netlink: zone id is out of range [ 563.969311][T29599] netlink: zone id is out of range [ 563.990200][T29599] netlink: zone id is out of range [ 563.995527][T29599] netlink: zone id is out of range [ 564.001024][T29599] netlink: zone id is out of range [ 564.006288][T29599] netlink: zone id is out of range [ 564.022591][T29599] netlink: zone id is out of range [ 564.034539][T29589] bond0: (slave bridge0): Releasing backup interface [ 564.657435][T29637] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8836'. [ 565.341503][T29667] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.565386][T29667] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.775018][T29667] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.858839][T29693] i2c i2c-0: Invalid block write size 34 [ 565.959300][T29667] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.223647][T29667] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.293489][T29667] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.354029][T29667] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.431753][T29667] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.665397][T29733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8869'. [ 567.642205][ T30] audit: type=1326 audit(1747684008.641:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29777 comm="syz.2.8889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ad118e969 code=0x0 [ 568.245882][T29810] netlink: 'syz.1.8901': attribute type 23 has an invalid length. [ 570.320933][T29915] x_tables: ip_tables: udp match: only valid for protocol 17 [ 571.612516][T29996] PKCS8: Unsupported PKCS#8 version [ 572.966323][T30074] netlink: 'syz.1.8995': attribute type 1 has an invalid length. [ 573.266424][ T5906] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 573.426096][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 573.437946][ T5906] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 573.447355][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.455373][ T5906] usb 3-1: Product: syz [ 573.460753][ T5906] usb 3-1: Manufacturer: syz [ 573.465485][ T5906] usb 3-1: SerialNumber: syz [ 573.474513][ T5906] usb 3-1: config 0 descriptor?? [ 573.487040][ T5906] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 573.495183][ T5906] usb 3-1: setting power ON [ 573.500032][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 573.509262][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.520097][ T5906] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 573.529813][ T5906] usb 3-1: media controller created [ 573.552818][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.575064][ T5906] usb 3-1: selecting invalid altsetting 6 [ 573.582295][ T5906] usb 3-1: digital interface selection failed (-22) [ 573.589318][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 573.597025][ T5906] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 573.607893][ T5906] usb 3-1: setting power OFF [ 573.613763][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 573.620354][ T5906] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 573.629795][ T5906] (NULL device *): no alternate interface [ 573.660924][ T5906] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 573.748349][ T5906] usb 3-1: USB disconnect, device number 51 [ 573.758091][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.773796][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 573.796496][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.818732][ T9] usb 5-1: config 0 descriptor?? [ 574.237771][ T9] elecom 0003:056E:00FE.0032: item fetching failed at offset 0/3 [ 574.260887][ T9] elecom 0003:056E:00FE.0032: probe with driver elecom failed with error -22 [ 574.470142][ T9] usb 5-1: USB disconnect, device number 53 [ 574.796814][ T52] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 574.946225][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 574.953793][ T52] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 574.966340][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 574.981702][ T52] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 575.001292][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.019622][ T52] usb 3-1: Product: syz [ 575.034227][ T52] usb 3-1: Manufacturer: syz [ 575.039621][ T52] usb 3-1: SerialNumber: syz [ 575.070277][ T52] usb 3-1: config 0 descriptor?? [ 575.126473][T30173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9019'. [ 575.375587][ T52] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 575.379068][ T52] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 575.433381][ T52] usb 3-1: USB disconnect, device number 52 [ 576.180836][T30244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9039'. [ 576.196007][ T5906] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 576.237522][T30244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9039'. [ 576.390908][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.425969][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.443256][T30258] netlink: 'syz.2.9043': attribute type 10 has an invalid length. [ 576.456600][ T5906] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 576.486195][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.504568][T30258] team0: Port device bridge0 removed [ 576.518925][ T5906] usb 2-1: config 0 descriptor?? [ 576.568352][T30258] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 576.644106][T30263] bridge_slave_1: left allmulticast mode [ 576.669005][T30263] bridge_slave_1: left promiscuous mode [ 576.675017][T30263] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.698684][T30263] bridge_slave_0: left allmulticast mode [ 576.718563][T30263] bridge_slave_0: left promiscuous mode [ 576.739138][T30263] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.773857][T30263] bond0: (slave bridge0): Releasing backup interface [ 576.944985][T30283] netlink: 260 bytes leftover after parsing attributes in process `syz.4.9049'. [ 576.960263][ T5906] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 577.004048][ T5906] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 577.013584][ T5906] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 577.024649][ T5906] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 577.032760][ T5906] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 577.045820][ T5906] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 577.053181][ T5906] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 577.093991][ T5906] dragonrise 0003:0079:0006.0033: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 577.137324][ T5906] dragonrise 0003:0079:0006.0033: no inputs found [ 577.170567][ T5906] dragonrise 0003:0079:0006.0033: force feedback init failed [ 577.204532][ T5906] usb 2-1: USB disconnect, device number 63 [ 577.642927][T30327] net_ratelimit: 11 callbacks suppressed [ 577.642946][T30327] openvswitch: netlink: Message has 20 unknown bytes. [ 577.740288][T30327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.778493][T30298] fido_id[30298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 578.134931][T30344] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 578.144736][ T5811] IPVS: starting estimator thread 0... [ 578.202654][T30348] netlink: 'syz.4.9065': attribute type 10 has an invalid length. [ 578.286681][T30345] IPVS: using max 25 ests per chain, 60000 per kthread [ 578.363124][T30353] sp0: Synchronizing with TNC [ 578.790571][T30388] hub 9-0:1.0: USB hub found [ 578.796734][T30388] hub 9-0:1.0: 1 port detected [ 578.921991][T30395] delete_channel: no stack [ 579.052670][T30403] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38415261, 8, 0, 0, 0) [ 579.971830][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9097'. [ 580.754430][T30478] netlink: 'syz.0.9112': attribute type 1 has an invalid length. [ 580.773985][T30478] NCSI netlink: No device for ifindex 0 [ 581.707983][T30530] hsr0: entered promiscuous mode [ 582.907766][T30589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9157'. [ 583.376008][ T5811] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 583.559066][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.589364][ T5811] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.612426][ T5811] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.623758][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.640928][ T5811] usb 3-1: Product: syz [ 583.655933][ T5811] usb 3-1: Manufacturer: syz [ 583.660919][ T5811] usb 3-1: SerialNumber: syz [ 583.914893][ T5811] usb 3-1: 0:2 : does not exist [ 583.928906][ T5811] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 583.989718][ T5811] usb 3-1: USB disconnect, device number 53 [ 584.089979][T23367] udevd[23367]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.113522][T30660] vivid-000: disconnect [ 584.121486][T30652] vivid-000: reconnect [ 584.126194][ T30] audit: type=1800 audit(1747684025.122:269): pid=30659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.9175" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 584.954596][T30706] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.9191'. [ 584.983354][T30703] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.9191'. [ 585.035681][ T5906] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 585.195594][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 585.207719][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.223164][ T5906] usb 5-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 585.237109][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.269354][ T5906] usb 5-1: config 0 descriptor?? [ 585.711558][ T5906] logitech-djreceiver 0003:046D:C531.0034: ignoring exceeding usage max [ 585.896225][ T5906] usb 5-1: USB disconnect, device number 54 [ 586.294843][T30786] mkiss: ax0: crc mode is auto. [ 586.402772][T30796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.932712][T30826] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 586.997556][T30826] batman_adv: batadv0: Adding interface: gretap1 [ 587.003957][T30826] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.033625][T30831] random: crng reseeded on system resumption [ 587.089752][T30826] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 587.147915][T30839] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9239'. [ 587.641927][T30863] binder: 30862:30863 ioctl c018620c 200000000380 returned -22 [ 588.095517][T30869] syz.4.9250 (30869): drop_caches: 3 [ 588.135158][ T5880] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 588.286455][T30892] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (4) [ 588.312894][ T5880] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 588.341740][ T5880] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 588.365428][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.395296][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.424366][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.454382][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.482674][ T5880] usb 2-1: Product: syz [ 588.495429][ T5880] usb 2-1: Manufacturer: syz [ 588.500092][ T5880] usb 2-1: SerialNumber: syz [ 588.621796][ T30] audit: type=1326 audit(1747684029.622:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30908 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 588.726298][ T30] audit: type=1326 audit(1747684029.622:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30908 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 588.793151][ T30] audit: type=1326 audit(1747684029.672:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30908 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 588.808644][ T5880] usb 2-1: 0:2 : does not exist [ 588.829502][T30919] netlink: 'syz.6.9267': attribute type 10 has an invalid length. [ 588.838294][T30919] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.846076][T30919] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.858763][ T30] audit: type=1326 audit(1747684029.672:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30908 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 588.911165][T30919] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.918487][T30919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.921472][ T5880] usb 2-1: USB disconnect, device number 64 [ 588.927457][T30919] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.939188][T30919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.955216][ T30] audit: type=1326 audit(1747684029.672:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30908 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 588.969319][T30919] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 588.983327][ T30] audit: type=1326 audit(1747684029.672:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30908 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 589.044903][ T30] audit: type=1326 audit(1747684029.672:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30908 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 589.046285][T30923] netlink: 'syz.4.9268': attribute type 61 has an invalid length. [ 589.076978][T30924] bridge_slave_1: left allmulticast mode [ 589.083264][T30924] bridge_slave_1: left promiscuous mode [ 589.091452][T30924] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.120251][T30924] bridge_slave_0: left allmulticast mode [ 589.127033][T30924] bridge_slave_0: left promiscuous mode [ 589.129013][T23367] udevd[23367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.133012][T30924] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.217410][T30924] bond0: (slave bridge0): Releasing backup interface [ 589.302299][T30929] mkiss: ax0: crc mode is auto. [ 589.313365][T30940] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 589.834441][T30968] syz.1.9277 (30968): drop_caches: 3 [ 590.239230][T30991] syz.6.9284 (30991): drop_caches: 3 [ 591.125575][ T59] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 591.293964][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.311746][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.331544][ T59] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 591.367952][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.399163][ T59] usb 3-1: config 0 descriptor?? [ 591.674321][T31080] nbd: must specify a device to reconfigure [ 591.856217][ T59] logitech-djreceiver 0003:046D:C534.0035: unknown main item tag 0x7 [ 592.044769][ T5906] usb 3-1: USB disconnect, device number 54 [ 592.155081][ T59] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 592.326824][ T59] usb 2-1: Using ep0 maxpacket: 8 [ 592.348810][ T59] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 592.372154][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.391834][ T59] usb 2-1: Product: syz [ 592.398182][ T59] usb 2-1: Manufacturer: syz [ 592.402921][ T59] usb 2-1: SerialNumber: syz [ 592.420514][ T59] usb 2-1: config 0 descriptor?? [ 592.452696][ T59] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 592.480146][ T59] usb 2-1: setting power ON [ 592.484733][ T59] dvb-usb: bulk message failed: -22 (2/0) [ 592.522615][ T59] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 592.563279][ T59] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 592.629903][ T59] usb 2-1: media controller created [ 592.668624][T31149] netlink: 'syz.4.9335': attribute type 1 has an invalid length. [ 592.677826][T31094] dvb-usb: bulk message failed: -22 (3/0) [ 592.684621][T31094] usb 2-1: gpio_write failed. [ 592.693218][T31149] netlink: 'syz.4.9335': attribute type 2 has an invalid length. [ 592.713232][T31094] cxusb: i2c rd: len=8192 is too big! [ 592.713232][T31094] [ 592.726905][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.792130][ T59] usb 2-1: selecting invalid altsetting 6 [ 592.806290][ T59] usb 2-1: digital interface selection failed (-22) [ 592.830311][ T59] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 592.857593][ T59] usb 2-1: setting power OFF [ 592.868599][ T59] dvb-usb: bulk message failed: -22 (2/0) [ 592.883623][ T59] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 592.898822][ T59] (NULL device *): no alternate interface [ 592.976578][T31163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9338'. [ 592.986045][ T59] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 593.056369][ T59] usb 2-1: USB disconnect, device number 65 [ 593.425042][T14984] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 593.525548][T31189] netlink: 'syz.0.9345': attribute type 10 has an invalid length. [ 593.546458][T31189] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.553902][T31189] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.584554][T31189] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.591831][T31189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.599423][T31189] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.606713][T31189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.624828][T14984] usb 5-1: Using ep0 maxpacket: 32 [ 593.630178][T31189] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 593.632807][T14984] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 593.659365][T31193] bridge_slave_1: left allmulticast mode [ 593.666864][T31193] bridge_slave_1: left promiscuous mode [ 593.672840][T31193] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.676797][T14984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.713998][T14984] usb 5-1: config 0 descriptor?? [ 593.721048][T31193] bridge_slave_0: left allmulticast mode [ 593.739254][T31193] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.798561][T31193] bond0: (slave bridge0): Releasing backup interface [ 594.170506][T14984] apple 0003:05AC:022B.0036: item fetching failed at offset 5/7 [ 594.198972][T14984] apple 0003:05AC:022B.0036: parse failed [ 594.218224][T14984] apple 0003:05AC:022B.0036: probe with driver apple failed with error -22 [ 594.403087][T14984] usb 5-1: USB disconnect, device number 55 [ 595.278159][T31285] overlayfs: conflicting options: metacopy=off,verity=require [ 596.176699][T31316] Bluetooth: MGMT ver 1.23 [ 596.702504][T14984] kernel write not supported for file /input/mouse0 (pid: 14984 comm: kworker/0:7) [ 597.110008][T31376] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9413'. [ 597.224501][T31382] [U]  [ 597.597508][ T30] audit: type=1326 audit(1747684038.593:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31402 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 597.674653][ T30] audit: type=1326 audit(1747684038.633:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31402 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 597.743988][ T30] audit: type=1326 audit(1747684038.663:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31402 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 597.840533][ T30] audit: type=1326 audit(1747684038.663:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31402 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 597.894736][ T30] audit: type=1326 audit(1747684038.793:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31402 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 598.008922][ T30] audit: type=1326 audit(1747684038.793:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31402 comm="syz.6.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af958e969 code=0x7ffc0000 [ 598.225806][ T5834] Bluetooth: hci3: unexpected cc 0x2007 length: 100 > 2 [ 598.234141][ T5834] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 598.435694][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9440'. [ 598.493957][T31443] macvlan2: entered promiscuous mode [ 598.512098][T31443] macvlan2: entered allmulticast mode [ 598.522225][T31443] erspan0: entered allmulticast mode [ 599.142962][T31474] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 599.848387][T31512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9467'. [ 599.899529][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9467'. [ 599.973459][T31512] netlink: 'syz.6.9467': attribute type 15 has an invalid length. [ 600.133698][T31531] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9474'. [ 600.947970][T31573] netlink: 'syz.6.9488': attribute type 2 has an invalid length. [ 601.395680][ T30] audit: type=1326 audit(1747684042.403:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31591 comm="syz.2.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad118e969 code=0x7ffc0000 [ 601.442269][ T30] audit: type=1326 audit(1747684042.423:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31591 comm="syz.2.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad118e969 code=0x7ffc0000 [ 601.465727][ T30] audit: type=1326 audit(1747684042.423:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31591 comm="syz.2.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ad118e969 code=0x7ffc0000 [ 601.528237][ T30] audit: type=1326 audit(1747684042.423:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31591 comm="syz.2.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad118e969 code=0x7ffc0000 [ 602.314561][ T5834] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 602.323234][ T5834] Bluetooth: hci3: Injecting HCI hardware error event [ 602.333007][ T5834] Bluetooth: hci3: hardware error 0x00 [ 602.726699][ T5931] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 602.837856][T31641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9515'. [ 602.884359][T31641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9515'. [ 602.889349][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 602.942301][ T5931] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 602.961328][ T5931] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 602.994754][ T5931] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 602.995083][ T59] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 603.043656][ T5931] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 603.091425][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 603.130164][ T5931] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 603.143163][ T5931] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 603.163403][ T5931] usb 5-1: Product: syz [ 603.173515][ T5931] usb 5-1: Manufacturer: syz [ 603.183630][ T5931] usb 5-1: SerialNumber: syz [ 603.194919][ T59] usb 2-1: Using ep0 maxpacket: 32 [ 603.212333][ T59] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.240500][ T5931] usb 5-1: config 0 descriptor?? [ 603.259728][ T5931] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 603.269590][ T59] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.310657][ T59] usb 2-1: config 0 interface 0 has no altsetting 0 [ 603.313469][ T5931] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 603.341122][ T59] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 603.377378][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.410852][ T59] usb 2-1: config 0 descriptor?? [ 603.532342][T14984] usb 5-1: USB disconnect, device number 56 [ 603.575356][T14984] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 603.870542][ T59] elecom 0003:056E:00E6.0037: item fetching failed at offset 0/2 [ 603.918125][ T59] elecom 0003:056E:00E6.0037: probe with driver elecom failed with error -22 [ 604.106261][T31688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9527'. [ 604.179223][ T59] usb 2-1: USB disconnect, device number 66 [ 604.475115][ T5834] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 604.974266][ T59] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 605.125801][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 605.251562][ T59] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 605.271614][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.308165][ T59] usb 5-1: config 0 has no interface number 0 [ 605.323843][ T59] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 605.352754][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.385159][ T59] usb 5-1: Product: syz [ 605.399588][ T59] usb 5-1: Manufacturer: syz [ 605.434693][ T59] usb 5-1: SerialNumber: syz [ 605.445469][ T59] usb 5-1: config 0 descriptor?? [ 605.481420][ T59] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 605.509843][ T59] usb 5-1: No valid video chain found. [ 605.588286][T31757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9552'. [ 605.657247][ T59] usb 5-1: USB disconnect, device number 57 [ 605.832307][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 605.832325][ T30] audit: type=1326 audit(1747684046.833:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31765 comm="syz.0.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 605.918437][ T30] audit: type=1326 audit(1747684046.833:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31765 comm="syz.0.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 605.918495][ T30] audit: type=1326 audit(1747684046.873:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31765 comm="syz.0.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 605.918539][ T30] audit: type=1326 audit(1747684046.873:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31765 comm="syz.0.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 605.940087][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.136512][ T30] audit: type=1326 audit(1747684046.873:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31765 comm="syz.0.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 606.166682][ T30] audit: type=1326 audit(1747684046.873:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31765 comm="syz.0.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 606.267147][T31779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9559'. [ 606.269087][ T30] audit: type=1326 audit(1747684046.873:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31765 comm="syz.0.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 606.327690][ T30] audit: type=1326 audit(1747684046.873:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31765 comm="syz.0.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260cb8e969 code=0x7ffc0000 [ 606.328137][T31779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9559'. [ 606.665675][ T30] audit: type=1804 audit(1747684047.673:299): pid=31801 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.9566" name="/" dev="pidfs" ino=31801 res=1 errno=0 [ 606.708871][ T2995] unregister_netdevice: waiting for ipvlan1 to become free. Usage count = 3 [ 606.729064][ T2995] ref_tracker: ipvlan1@ffff88807bba8610 has 1/1 users at [ 606.729064][ T2995] ib_device_set_netdev+0x31f/0x6d0 [ 606.729064][ T2995] siw_newlink+0x405/0xd70 [ 606.729064][ T2995] nldev_newlink+0x4a5/0x5a0 [ 606.729064][ T2995] rdma_nl_rcv+0x6bf/0x9a0 [ 606.729064][ T2995] netlink_unicast+0x758/0x8d0 [ 606.729064][ T2995] netlink_sendmsg+0x805/0xb30 [ 606.729064][ T2995] __sock_sendmsg+0x219/0x270 [ 606.729064][ T2995] ____sys_sendmsg+0x505/0x830 [ 606.729064][ T2995] ___sys_sendmsg+0x21f/0x2a0 [ 606.729064][ T2995] __x64_sys_sendmsg+0x19b/0x260 [ 606.729064][ T2995] do_syscall_64+0xf6/0x210 [ 606.729064][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.729064][ T2995] [ 606.798847][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.950447][ T5881] kworker/0:4 (5881) used greatest stack depth: 16392 bytes left [ 615.985777][ T31] INFO: task kworker/u8:7:6431 blocked for more than 143 seconds. [ 615.993949][ T31] Not tainted 6.15.0-rc7-syzkaller #0 [ 615.999868][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.008691][ T31] task:kworker/u8:7 state:D stack:21400 pid:6431 tgid:6431 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 616.020806][ T31] Workqueue: ib-unreg-wq ib_unregister_work [ 616.027018][ T31] Call Trace: [ 616.031414][ T31] [ 616.034492][ T31] __schedule+0x168f/0x4c70 [ 616.039028][ T31] ? validate_chain+0x897/0x2140 [ 616.044138][ T31] ? schedule+0x165/0x360 [ 616.048508][ T31] ? __pfx___schedule+0x10/0x10 [ 616.053393][ T31] ? schedule+0x91/0x360 [ 616.057759][ T31] schedule+0x165/0x360 [ 616.061946][ T31] schedule_timeout+0x9a/0x270 [ 616.066843][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 616.072268][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.077546][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.082774][ T31] ? wait_for_completion+0x267/0x5d0 [ 616.088250][ T31] wait_for_completion+0x2bf/0x5d0 [ 616.093413][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 616.099183][ T31] ? up_write+0x1c4/0x420 [ 616.106181][ T31] ? remove_client_context+0xc0/0x1e0 [ 616.111587][ T31] disable_device+0x1c6/0x320 [ 616.116344][ T31] ? __pfx_disable_device+0x10/0x10 [ 616.121561][ T31] ? __lock_acquire+0xaac/0xd20 [ 616.126676][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 616.132796][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.138268][ T31] ib_unregister_work+0x19/0x30 [ 616.143148][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 616.148966][ T31] process_scheduled_works+0xade/0x17a0 [ 616.154622][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 616.160651][ T31] worker_thread+0x8a0/0xda0 [ 616.165435][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 616.171803][ T31] ? __kthread_parkme+0x7b/0x200 [ 616.176879][ T31] kthread+0x711/0x8a0 [ 616.180982][ T31] ? __pfx_worker_thread+0x10/0x10 [ 616.186213][ T31] ? __pfx_kthread+0x10/0x10 [ 616.190836][ T31] ? __pfx_kthread+0x10/0x10 [ 616.195508][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.200737][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.206095][ T31] ? __pfx_kthread+0x10/0x10 [ 616.211755][ T31] ret_from_fork+0x4b/0x80 [ 616.216283][ T31] ? __pfx_kthread+0x10/0x10 [ 616.220914][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.226146][ T31] [ 616.229285][ T31] [ 616.229285][ T31] Showing all locks held in the system: [ 616.238113][ T31] 1 lock held by khungtaskd/31: [ 616.242973][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 616.253249][ T31] 3 locks held by kworker/u8:6/2995: [ 616.258709][ T31] #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 616.269726][ T31] #1: ffffc9000af87c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 616.280363][ T31] #2: ffffffff8f2dba50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 616.289933][ T31] 2 locks held by getty/5578: [ 616.294764][ T31] #0: ffff888032df80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 616.304793][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 616.315021][ T31] 3 locks held by kworker/u8:7/6431: [ 616.320326][ T31] #0: ffff8880222d4148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 616.331836][ T31] #1: ffffc9001be67c60 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 616.346123][ T31] #2: ffff88807ab646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 616.357908][ T31] [ 616.360293][ T31] ============================================= [ 616.360293][ T31] [ 616.368785][ T31] NMI backtrace for cpu 0 [ 616.368805][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 616.368827][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.368838][ T31] Call Trace: [ 616.368846][ T31] [ 616.368871][ T31] dump_stack_lvl+0x189/0x250 [ 616.368901][ T31] ? __wake_up_klogd+0xd9/0x110 [ 616.368927][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.368967][ T31] ? __pfx__printk+0x10/0x10 [ 616.369010][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 616.369035][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 616.369061][ T31] ? _printk+0xcf/0x120 [ 616.369097][ T31] ? __pfx__printk+0x10/0x10 [ 616.369130][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 616.369152][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 616.369177][ T31] watchdog+0xfee/0x1030 [ 616.369204][ T31] ? watchdog+0x1de/0x1030 [ 616.369237][ T31] kthread+0x711/0x8a0 [ 616.369264][ T31] ? __pfx_watchdog+0x10/0x10 [ 616.369286][ T31] ? __pfx_kthread+0x10/0x10 [ 616.369310][ T31] ? __pfx_kthread+0x10/0x10 [ 616.369331][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.369370][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.369396][ T31] ? __pfx_kthread+0x10/0x10 [ 616.369418][ T31] ret_from_fork+0x4b/0x80 [ 616.369437][ T31] ? __pfx_kthread+0x10/0x10 [ 616.369460][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.369508][ T31] [ 616.369516][ T31] Sending NMI from CPU 0 to CPUs 1: [ 616.516279][ C1] NMI backtrace for cpu 1 [ 616.516296][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 616.516323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.516334][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 616.516361][ C1] Code: 43 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 9f 18 00 f3 0f 1e fa fb f4 18 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 616.516378][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 616.516394][ C1] RAX: c6a5ef5a78635c00 RBX: ffffffff81977028 RCX: c6a5ef5a78635c00 [ 616.516408][ C1] RDX: 0000000000000001 RSI: ffffffff8d73a842 RDI: ffffffff8bc11fc0 [ 616.516421][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 616.516434][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7e0970 [ 616.516447][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dbb40 [ 616.516459][ C1] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 616.516474][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.516486][ C1] CR2: 000055b11af5d220 CR3: 0000000031dcc000 CR4: 00000000003526f0 [ 616.516502][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 616.516513][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 616.516536][ C1] Call Trace: [ 616.516543][ C1] [ 616.516550][ C1] default_idle+0x13/0x20 [ 616.516573][ C1] default_idle_call+0x74/0xb0 [ 616.516598][ C1] do_idle+0x1e8/0x510 [ 616.516623][ C1] ? asm_common_interrupt+0x26/0x40 [ 616.516641][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.516661][ C1] ? __pfx_do_idle+0x10/0x10 [ 616.516691][ C1] ? do_idle+0x4ef/0x510 [ 616.516718][ C1] cpu_startup_entry+0x44/0x60 [ 616.516743][ C1] start_secondary+0x101/0x110 [ 616.516768][ C1] common_startup_64+0x13e/0x147 [ 616.516799][ C1] [ 616.518069][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 616.715882][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 616.725957][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.736023][ T31] Call Trace: