last executing test programs: 4m40.737417801s ago: executing program 4 (id=11310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='=\x00'}]}, 0x1c}}, 0x20000080) 4m40.363323891s ago: executing program 4 (id=11315): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000100)=@ethtool_gfeatures}) 4m40.161475206s ago: executing program 4 (id=11319): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x5, 0xfc, 0x9, 0xe, 0x0, 0x70bd27, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81, 0x0, 0x0, 0xa0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) 4m39.686079403s ago: executing program 4 (id=11325): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000181401"], 0x38}, 0x1, 0xf00, 0x0, 0x404884d}, 0x2000004) 4m39.31405214s ago: executing program 4 (id=11329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 4m38.98054042s ago: executing program 4 (id=11333): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x0, 0x3, 0x7da, 0x101, 0x0, 0x8, 0x0}) 4m23.722951149s ago: executing program 32 (id=11333): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x0, 0x3, 0x7da, 0x101, 0x0, 0x8, 0x0}) 2m23.630076755s ago: executing program 1 (id=12797): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7523, 0x10000, 0xefcb, 0xe08c, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x200008}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2m23.146199697s ago: executing program 1 (id=12804): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000c40)="0d32818e2fa06dfb", 0x8}]) 2m22.745925189s ago: executing program 1 (id=12809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]}) 2m22.090079322s ago: executing program 1 (id=12819): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 2m21.831081655s ago: executing program 1 (id=12825): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 2m20.890772825s ago: executing program 1 (id=12829): r0 = io_uring_setup(0x30d5, &(0x7f00000001c0)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m20.305379915s ago: executing program 33 (id=12829): r0 = io_uring_setup(0x30d5, &(0x7f00000001c0)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.813441395s ago: executing program 0 (id=13606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x2]}, 0x6) 1m3.672245611s ago: executing program 0 (id=13609): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000200)={&(0x7f00000026c0)=ANY=[], 0x48}}, 0x0) 1m3.442756232s ago: executing program 0 (id=13611): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m2.720311429s ago: executing program 0 (id=13622): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004400c) 1m2.248679218s ago: executing program 0 (id=13628): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'ipvlan0\x00', 0x4}, 0x18) 1m1.937948572s ago: executing program 0 (id=13631): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x82, 0x16) io_setup(0x7, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f00000001c0)='F', 0x1, 0x9, 0x0, 0x0, r0}]) 1m1.937633354s ago: executing program 2 (id=13632): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) 1m1.081047831s ago: executing program 2 (id=13635): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a8001604", 0x34}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004000180040003803c0002800c00028005000100000000002c000180"], 0x58}}, 0x0) 1m0.736148613s ago: executing program 2 (id=13638): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) 1m0.476556392s ago: executing program 2 (id=13640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) readlink(0x0, 0x0, 0x0) 58.984201111s ago: executing program 2 (id=13643): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0xfffffffd, 0xcc7, 0xff7, 0x5c95239c, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x10, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffffe, 0xffffeadb, 0x0, 0x3c, 0x0, 0x4, 0x2, 0xdffffffa]}) 58.576288835s ago: executing program 3 (id=13645): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xa98e912acc958fdb, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) 58.324594095s ago: executing program 2 (id=13646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 57.816479938s ago: executing program 3 (id=13647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x40, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000}, 0x0) 57.644381736s ago: executing program 3 (id=13648): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) 57.347502755s ago: executing program 3 (id=13649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x8) 57.083671475s ago: executing program 3 (id=13650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000009000000800b0001006272696467650000100002800c0021000000eaa10004"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 56.980885796s ago: executing program 3 (id=13651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020048f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 45.752978879s ago: executing program 34 (id=13631): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x82, 0x16) io_setup(0x7, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f00000001c0)='F', 0x1, 0x9, 0x0, 0x0, r0}]) 43.239013047s ago: executing program 35 (id=13646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 41.677088482s ago: executing program 36 (id=13651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020048f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 37.080945898s ago: executing program 5 (id=13683): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000780)=""/75, 0x47, 0x42, 0x0, 0x0) 36.100067076s ago: executing program 5 (id=13684): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0x2}, 0x6) write(r0, &(0x7f0000000000)="05000000", 0x4) 35.945430138s ago: executing program 5 (id=13685): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = userfaultfd(0x80801) cachestat(r0, &(0x7f0000000fc0)={0x7, 0x294b9e89}, &(0x7f0000001000), 0x0) 35.780893298s ago: executing program 5 (id=13686): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2c020400) sync_file_range(r0, 0x6, 0x3, 0x8000000) 25.253043474s ago: executing program 6 (id=13692): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8480, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 25.230206757s ago: executing program 5 (id=13693): r0 = io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000200)={0x8}, 0x0) 24.875134472s ago: executing program 5 (id=13694): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 24.674725179s ago: executing program 6 (id=13695): msgsnd(0x0, 0x0, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000007"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) 24.627003572s ago: executing program 6 (id=13696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sched_process_fork\x00', r0}, 0x18) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 24.278810054s ago: executing program 6 (id=13697): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x200000, 0x0) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 15.332433798s ago: executing program 6 (id=13698): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb5, 0xf9, 0xc8, 0x8, 0xfe9, 0xdb98, 0x300c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0x5b, 0x11, 0x58}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x3) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000480)=[{0x63, 0xb811, 0x0, 0x0}, {0x33, 0x4000, 0x6, &(0x7f00000000c0)="672124f70cd3"}], 0x2}) 15.104485825s ago: executing program 6 (id=13699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8000000060a09040000000000000000020000010900020073797a32000000000900010073797a30000000002400048020000180080001006c6f670014000280070002405c270000060001400000000040000480100001800c0001006e6f747261636b002c0001800b0001006e756d67656e00001c00028008000240000000060800034000000001080001"], 0x120}, 0x1, 0x0, 0x0, 0x4048000}, 0x8800) 9.500295989s ago: executing program 37 (id=13694): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 0s ago: executing program 38 (id=13699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8000000060a09040000000000000000020000010900020073797a32000000000900010073797a30000000002400048020000180080001006c6f670014000280070002405c270000060001400000000040000480100001800c0001006e6f747261636b002c0001800b0001006e756d67656e00001c00028008000240000000060800034000000001080001"], 0x120}, 0x1, 0x0, 0x0, 0x4048000}, 0x8800) kernel console output (not intermixed with test programs): T990] uclogic 0003:5543:0042.0003: probe with driver uclogic failed with error -22 [ 1221.290778][ T5840] usb 1-1: USB disconnect, device number 38 [ 1221.360100][ T38] audit: type=1400 audit(2000000477.079:2964): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=32349 comm="syz.1.12479" daddr=fe80::bb [ 1221.825890][ T990] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1221.975888][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 1221.978287][ T990] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1221.978316][ T990] usb 3-1: config 179 has no interface number 0 [ 1221.978368][ T990] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1221.978398][ T990] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1221.978429][ T990] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1221.978457][ T990] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1221.978486][ T990] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1221.978532][ T990] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1221.978557][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.993909][T32357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1222.198587][T32374] rdma_op ffff8880395e4a70 conn xmit_rdma 0000000000000000 [ 1222.453834][ T6017] usb 3-1: USB disconnect, device number 66 [ 1222.453839][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1222.453983][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1222.584749][T32381] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1222.975398][T32395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12502'. [ 1223.005935][ T990] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1223.161964][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.162001][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.162043][ T990] usb 2-1: New USB device found, idVendor=258a, idProduct=6a80, bcdDevice= 0.00 [ 1223.162068][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.203821][ T6017] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1223.211537][ T990] usb 2-1: config 0 descriptor?? [ 1223.243245][T15549] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.245554][ T817] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.246915][ T1517] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.248699][ T1517] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.263080][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12504'. [ 1223.375834][ T6017] usb 1-1: Using ep0 maxpacket: 8 [ 1223.379688][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.379725][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.379768][ T6017] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1223.379796][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.438125][ T6017] usb 1-1: config 0 descriptor?? [ 1223.593570][T32406] netlink: 'syz.3.12506': attribute type 3 has an invalid length. [ 1223.593597][T32406] netlink: 'syz.3.12506': attribute type 1 has an invalid length. [ 1223.593614][T32406] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.12506'. [ 1223.798991][ T990] hid-generic 0003:258A:6A80.0004: hidraw0: USB HID v0.00 Device [HID 258a:6a80] on usb-dummy_hcd.1-1/input0 [ 1223.881873][ T6017] logitech 0003:046D:C20E.0005: rdesc size test failed for formula gp [ 1223.883264][ T6017] logitech 0003:046D:C20E.0005: unbalanced collection at end of report description [ 1223.884179][ T6017] logitech 0003:046D:C20E.0005: parse failed [ 1223.884290][ T6017] logitech 0003:046D:C20E.0005: probe with driver logitech failed with error -22 [ 1223.948903][ T6017] usb 2-1: USB disconnect, device number 49 [ 1224.106188][ T990] usb 1-1: USB disconnect, device number 39 [ 1224.242280][T32414] fido_id[32414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1225.069887][T32450] netdevsim netdevsim2: Direct firmware load for . [ 1225.069887][T32450] failed with error -2 [ 1225.069925][T32450] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1225.069925][T32450] [ 1225.155907][ T990] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1225.306034][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 1225.310889][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.310924][ T990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1225.310978][ T990] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 1225.311003][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.341413][ T990] usb 2-1: config 0 descriptor?? [ 1225.620293][T32463] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1225.807415][ T990] shield 0003:0955:7214.0006: item fetching failed at offset 0/1 [ 1225.808239][ T990] shield 0003:0955:7214.0006: Parse failed [ 1225.808317][ T990] shield 0003:0955:7214.0006: probe with driver shield failed with error -22 [ 1225.991810][ T990] usb 2-1: USB disconnect, device number 50 [ 1226.155890][ T9487] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1226.305887][ T9487] usb 6-1: Using ep0 maxpacket: 16 [ 1226.308590][ T9487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.308627][ T9487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.308652][ T9487] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1226.308697][ T9487] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1226.308724][ T9487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.353784][T32488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1226.392067][ T9487] usb 6-1: config 0 descriptor?? [ 1226.850890][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.850929][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.850958][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.850986][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.851025][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.851053][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.851093][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.851122][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.851151][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.851179][ T9487] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1226.889022][T15552] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.890316][T15552] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.890372][T15552] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.890417][T15552] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.997072][ T9487] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1226.997112][ T9487] microsoft 0003:045E:07DA.0007: no inputs found [ 1226.997128][ T9487] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 1227.094169][ T990] usb 6-1: USB disconnect, device number 8 [ 1227.290472][T32506] fido_id[32506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1227.394991][T32518] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1227.399279][ C1] vkms_vblank_simulate: vblank timer overrun [ 1227.476013][ T6635] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1227.631163][ T6635] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.631194][ T6635] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1227.633123][ T6635] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1227.633157][ T6635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1227.633180][ T6635] usb 3-1: SerialNumber: syz [ 1227.939178][ T6635] usb 3-1: 0:2 : does not exist [ 1227.975872][ T9487] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1228.050021][ T6635] usb 3-1: USB disconnect, device number 67 [ 1228.063966][T32532] vlan0: entered allmulticast mode [ 1228.063992][T32532] macsec0: entered allmulticast mode [ 1228.125855][ T9487] usb 6-1: Using ep0 maxpacket: 16 [ 1228.146707][ T9487] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 1228.146738][ T9487] usb 6-1: config 0 has no interface number 0 [ 1228.146792][ T9487] usb 6-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.146822][ T9487] usb 6-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.146849][ T9487] usb 6-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1228.146878][ T9487] usb 6-1: config 0 interface 63 has no altsetting 0 [ 1228.146912][ T9487] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1228.146937][ T9487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.184879][T31577] udevd[31577]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1228.295960][ T9487] usb 6-1: config 0 descriptor?? [ 1228.787901][ T9487] uclogic 0003:28BD:0909.0008: interface is invalid, ignoring [ 1228.966800][ T9487] usb 6-1: USB disconnect, device number 9 [ 1229.345946][ T6635] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1229.508445][ T6635] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.508482][ T6635] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.508523][ T6635] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1229.508547][ T6635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.530321][ T6635] usb 1-1: config 0 descriptor?? [ 1230.003033][ T6635] samsung 0003:0419:0600.0009: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.0-1/input0 [ 1230.139630][ T38] audit: type=1400 audit(2000000485.859:2965): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=32589 comm="syz.1.12591" daddr=fe80::44 dest=20001 [ 1230.170179][ T9487] usb 1-1: USB disconnect, device number 40 [ 1230.245486][T32587] fido_id[32587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1231.268600][T32612] can0: slcan on ptm0. [ 1231.376089][T32618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12604'. [ 1231.609313][T32615] tipc: Started in network mode [ 1231.609349][T32615] tipc: Node identity 00000000000000000040000000000001, cluster identity 4711 [ 1231.609408][T32615] tipc: Enabling of bearer rejected, failed to enable media [ 1231.704792][T32611] can0 (unregistered): slcan off ptm0. [ 1232.295591][ T5906] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1232.469315][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.469345][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1232.469405][ T5906] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1232.475049][ T5906] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1232.475082][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.475104][ T5906] usb 3-1: Product: syz [ 1232.475119][ T5906] usb 3-1: Manufacturer: syz [ 1232.475135][ T5906] usb 3-1: SerialNumber: syz [ 1232.607829][ T5906] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1232.607880][ T5906] cdc_ncm 3-1:1.0: bind() failure [ 1232.669319][ T9487] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1232.670680][ T6635] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1232.787981][ T5906] usb 3-1: USB disconnect, device number 68 [ 1232.828908][ T9487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.828945][ T9487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.828988][ T9487] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1232.829014][ T9487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.833678][ T6635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1232.833716][ T6635] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1232.833759][ T6635] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1232.833783][ T6635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.911921][T32660] sctp: [Deprecated]: syz.0.12619 (pid 32660) Use of int in maxseg socket option. [ 1232.911921][T32660] Use struct sctp_assoc_value instead [ 1232.943718][ T6635] usb 6-1: config 0 descriptor?? [ 1232.951899][ T9487] usb 4-1: config 0 descriptor?? [ 1233.417323][ T6635] mcp2200 0003:04D8:00DF.000A: item fetching failed at offset 5/7 [ 1233.418162][ T6635] mcp2200 0003:04D8:00DF.000A: can't parse reports [ 1233.418271][ T6635] mcp2200 0003:04D8:00DF.000A: probe with driver mcp2200 failed with error -22 [ 1233.659234][ T6635] usb 6-1: USB disconnect, device number 10 [ 1233.680409][ T9487] aquacomputer_d5next 0003:0C70:F00D.000B: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.3-1/input0 [ 1233.944922][ T9487] usb 4-1: USB disconnect, device number 67 [ 1233.988158][T32673] fido_id[32673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1234.668321][ T9487] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1234.836068][ T9487] usb 6-1: Using ep0 maxpacket: 32 [ 1234.843882][ T9487] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.843920][ T9487] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1234.843949][ T9487] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1234.844073][ T9487] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1234.844097][ T9487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.899398][ T9487] usb 6-1: config 0 descriptor?? [ 1235.391125][ T9487] wacom 0003:056A:0094.000C: Using device in hidraw-only mode [ 1235.401360][ T9487] wacom 0003:056A:0094.000C: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 1235.583731][ T5906] usb 6-1: USB disconnect, device number 11 [ 1235.700574][T32723] fido_id[32723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1236.032082][T32738] netlink: 240 bytes leftover after parsing attributes in process `syz.1.12648'. [ 1236.901935][ T302] devpts: Bad value for 'max' [ 1237.001603][ T5906] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1237.173813][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.173852][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.173878][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1237.173925][ T5906] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1237.173951][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.195919][ T5906] usb 3-1: config 0 descriptor?? [ 1237.718996][ T5906] viewsonic 0003:2133:0018.000D: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.2-1/input0 [ 1237.767865][ T331] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1237.874343][ T9487] usb 3-1: USB disconnect, device number 69 [ 1238.305917][ T5928] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1238.473291][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 1238.483198][ T5928] usb 6-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.483236][ T5928] usb 6-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1238.483266][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1238.483303][ T5928] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1238.483330][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.541699][ T5928] usb 6-1: config 0 descriptor?? [ 1238.666386][ T6017] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1238.846515][ T6017] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1238.846551][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.900064][ T6017] usb 1-1: config 0 descriptor?? [ 1239.073218][ T5928] redragon 0003:0C45:760B.000E: item fetching failed at offset 5/7 [ 1239.089100][ T5928] redragon 0003:0C45:760B.000E: probe with driver redragon failed with error -22 [ 1239.231031][ T6635] usb 6-1: USB disconnect, device number 12 [ 1239.334538][ T6017] pantherlord 0003:0F30:0111.000F: item fetching failed at offset 0/4 [ 1239.335398][ T6017] pantherlord 0003:0F30:0111.000F: parse failed [ 1239.335476][ T6017] pantherlord 0003:0F30:0111.000F: probe with driver pantherlord failed with error -22 [ 1239.535418][ T6635] usb 1-1: USB disconnect, device number 41 [ 1239.936924][ T6017] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1240.089568][ T6017] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.089601][ T6017] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1240.089661][ T6017] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1240.089687][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.095604][ T6017] usb 4-1: config 0 descriptor?? [ 1240.425972][ T9487] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1240.596190][ T9487] usb 2-1: Using ep0 maxpacket: 32 [ 1240.604446][ T9487] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 1240.604478][ T9487] usb 2-1: config 0 has no interface number 0 [ 1240.634446][ T9487] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1240.634482][ T9487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.634505][ T9487] usb 2-1: Product: syz [ 1240.634521][ T9487] usb 2-1: Manufacturer: syz [ 1240.634853][ T9487] usb 2-1: SerialNumber: syz [ 1240.680651][ T407] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1240.697425][ T9487] usb 2-1: config 0 descriptor?? [ 1240.728323][ T9487] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1240.728669][ T9487] dvb-usb: bulk message failed: -22 (2/0) [ 1240.772808][ T6017] Bluetooth: Can't get version to change to load ram patch err [ 1240.772833][ T6017] Bluetooth: Loading sysconfig file failed [ 1240.772884][ T6017] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 1240.803416][ T6017] usb 4-1: USB disconnect, device number 68 [ 1240.857198][ T9487] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1240.859287][ T9487] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1240.859351][ T9487] usb 2-1: media controller created [ 1240.920693][ T392] cxusb: i2c wr: len=85 is too big! [ 1240.920693][ T392] [ 1240.937041][ T412] ALSA: mixer_oss: invalid OSS volume '' [ 1240.956753][ T9487] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.010967][ T9487] cxusb: set interface failed [ 1241.010988][ T9487] dvb-usb: bulk message failed: -22 (1/0) [ 1241.139130][ T9487] DVB: Unable to find symbol lgdt330x_attach() [ 1241.139150][ T9487] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1241.291219][ T9487] rc_core: IR keymap rc-dvico-portable not found [ 1241.291244][ T9487] Registered IR keymap rc-empty [ 1241.293107][ T9487] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1241.323976][ T9487] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input98 [ 1241.339146][ T9487] dvb-usb: schedule remote query interval to 100 msecs. [ 1241.339170][ T9487] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1241.362409][ T9487] usb 2-1: USB disconnect, device number 51 [ 1241.628446][ T9487] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1242.130878][ T442] program syz.2.12727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1242.213001][ T444] overlayfs: failed to resolve './file1': -2 [ 1242.345851][ T9487] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1242.495242][ T455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12733'. [ 1242.516735][ T9487] usb 2-1: Using ep0 maxpacket: 32 [ 1242.525091][ T9487] usb 2-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.525124][ T9487] usb 2-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1242.525154][ T9487] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1242.525191][ T9487] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1242.525216][ T9487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.607659][ T9487] usb 2-1: config 0 descriptor?? [ 1243.061697][ T9487] asus 0003:048D:CE50.0010: item fetching failed at offset 2/5 [ 1243.062554][ T9487] asus 0003:048D:CE50.0010: Asus hid parse failed: -22 [ 1243.062680][ T9487] asus 0003:048D:CE50.0010: probe with driver asus failed with error -22 [ 1243.264163][ T6635] usb 2-1: USB disconnect, device number 52 [ 1243.560693][ T5906] IPVS: starting estimator thread 0... [ 1243.613217][ T490] autofs: Bad value for 'fd' [ 1243.649211][ T489] IPVS: using max 6 ests per chain, 14400 per kthread [ 1243.855846][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12754'. [ 1244.773250][ T539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12774'. [ 1244.842094][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.979747][ T542] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.129914][ T549] netlink: 'syz.3.12779': attribute type 29 has an invalid length. [ 1245.132641][ T549] netlink: 'syz.3.12779': attribute type 29 has an invalid length. [ 1245.555875][ T9487] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1245.645948][ T5906] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1245.709910][ T9487] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.709942][ T9487] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1245.716986][ T9487] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 1245.717022][ T9487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.717047][ T9487] usb 2-1: Product: syz [ 1245.717065][ T9487] usb 2-1: Manufacturer: syz [ 1245.717083][ T9487] usb 2-1: SerialNumber: syz [ 1245.735496][ T9487] usb 2-1: config 0 descriptor?? [ 1245.825270][ T5906] usb 1-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1245.825309][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1245.825347][ T5906] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1245.825372][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.902937][ T5906] usb 1-1: config 0 descriptor?? [ 1246.005883][ T6635] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1246.025959][ T6017] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1246.036850][ T5928] usb 2-1: USB disconnect, device number 53 [ 1246.121132][T31577] udevd[31577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.160413][ T6635] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1246.165647][ T6635] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1246.184490][ T6635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.184819][ T6635] usb 4-1: Product: syz [ 1246.184838][ T6635] usb 4-1: Manufacturer: syz [ 1246.184855][ T6635] usb 4-1: SerialNumber: syz [ 1246.185950][ T6017] usb 6-1: Using ep0 maxpacket: 8 [ 1246.191283][ T6017] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1246.195243][ T6017] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 1246.195268][ T6017] usb 6-1: config 4 has no interface number 0 [ 1246.195296][ T6017] usb 6-1: config 4 interface 30 has no altsetting 0 [ 1246.200119][ T6017] usb 6-1: string descriptor 0 read error: -22 [ 1246.200295][ T6017] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1246.200322][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.288886][ T6017] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1246.288934][ T6017] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1246.294220][ T6017] dvb-usb: bulk message failed: -22 (2/0) [ 1246.297258][ T6635] usb 4-1: config 0 descriptor?? [ 1246.310771][ T6017] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1246.324042][ T6017] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1246.324114][ T6017] usb 6-1: media controller created [ 1246.324608][ T6017] dvb-usb: bulk message failed: -22 (6/0) [ 1246.324632][ T6017] dw2102: i2c transfer failed. [ 1246.324656][ T6017] dvb-usb: bulk message failed: -22 (6/0) [ 1246.324676][ T6017] dw2102: i2c transfer failed. [ 1246.324697][ T6017] dvb-usb: bulk message failed: -22 (6/0) [ 1246.324714][ T6017] dw2102: i2c transfer failed. [ 1246.324733][ T6017] dvb-usb: bulk message failed: -22 (6/0) [ 1246.324748][ T6017] dw2102: i2c transfer failed. [ 1246.324767][ T6017] dvb-usb: bulk message failed: -22 (6/0) [ 1246.324783][ T6017] dw2102: i2c transfer failed. [ 1246.324805][ T6017] dvb-usb: bulk message failed: -22 (6/0) [ 1246.324821][ T6017] dw2102: i2c transfer failed. [ 1246.324835][ T6017] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1246.466081][ T574] dvb-usb: bulk message failed: -22 (3/0) [ 1246.466103][ T574] dw2102: i2c transfer failed. [ 1246.466110][ T574] dvb-usb: bulk message failed: -22 (4/0) [ 1246.466121][ T574] dw2102: i2c transfer failed. [ 1246.506802][ T5906] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf3 found [ 1246.506832][ T5906] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf4 found [ 1246.517082][ T6017] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.575225][ T5906] usb 1-1: USB disconnect, device number 42 [ 1246.672701][ T9487] usb 4-1: USB disconnect, device number 69 [ 1246.727334][ T6017] dvb-usb: bulk message failed: -22 (3/0) [ 1246.727360][ T6017] dw2102: command 0x0e transfer failed. [ 1246.727371][ T6017] dvb-usb: bulk message failed: -22 (3/0) [ 1246.727386][ T6017] dw2102: command 0x0e transfer failed. [ 1247.043753][ T6017] dvb-usb: bulk message failed: -22 (3/0) [ 1247.043779][ T6017] dw2102: command 0x0e transfer failed. [ 1247.043791][ T6017] dvb-usb: bulk message failed: -22 (3/0) [ 1247.043807][ T6017] dw2102: command 0x0e transfer failed. [ 1247.043817][ T6017] dvb-usb: bulk message failed: -22 (1/0) [ 1247.043832][ T6017] dw2102: command 0x51 transfer failed. [ 1247.043842][ T6017] dvb-usb: bulk message failed: -22 (5/0) [ 1247.043857][ T6017] dw2102: i2c probe for address 0x68 failed. [ 1247.043870][ T6017] dvb-usb: bulk message failed: -22 (5/0) [ 1247.043885][ T6017] dw2102: i2c probe for address 0x69 failed. [ 1247.043897][ T6017] dvb-usb: bulk message failed: -22 (5/0) [ 1247.043911][ T6017] dw2102: i2c probe for address 0x6a failed. [ 1247.043923][ T6017] dw2102: probing for demodulator failed. Is the external power switched on? [ 1247.043935][ T6017] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1247.269027][ T6017] rc_core: IR keymap rc-tt-1500 not found [ 1247.269052][ T6017] Registered IR keymap rc-empty [ 1247.273613][ T6017] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1247.297644][ T6017] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input99 [ 1247.326568][ T6017] dvb-usb: schedule remote query interval to 250 msecs. [ 1247.326593][ T6017] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1247.326609][ T6017] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1247.378765][ T6017] usb 6-1: USB disconnect, device number 13 [ 1247.784062][ T6017] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1247.941152][ T607] netlink: 'syz.5.12806': attribute type 1 has an invalid length. [ 1248.166039][ T5906] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1248.321766][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.321797][ T5906] usb 3-1: config 0 has no interface number 0 [ 1248.321853][ T5906] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1248.321878][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.367603][ T5906] usb 3-1: config 0 descriptor?? [ 1248.407968][ T5906] usb 3-1: selecting invalid altsetting 1 [ 1248.431577][ T5906] dvb_ttusb_budget: ttusb_init_controller: error [ 1248.431600][ T5906] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1248.698306][ T5906] DVB: Unable to find symbol cx22700_attach() [ 1248.906065][ T5906] DVB: Unable to find symbol tda10046_attach() [ 1248.906082][ T5906] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1248.944813][ T5906] usb 3-1: USB disconnect, device number 70 [ 1249.023977][ T643] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 1249.023977][ T643] [ 1249.195866][ T9487] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1249.249641][ T6017] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1249.360343][ T9487] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1249.360377][ T9487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.411140][ T6017] usb 6-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 1249.411176][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.419258][ T9487] usb 4-1: config 0 descriptor?? [ 1249.439594][ T9487] cp210x 4-1:0.0: cp210x converter detected [ 1249.460882][ T5838] bond0: (slave syz_tun): Releasing backup interface [ 1249.463526][ T6017] usb 6-1: config 0 descriptor?? [ 1250.042499][ T9487] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1250.042530][ T9487] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1250.089096][ T9487] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1250.121774][ T9487] usb 4-1: USB disconnect, device number 70 [ 1250.231522][ T6017] asus 0003:0B05:19B6.0012: hidraw0: USB HID v0.04 Device [HID 0b05:19b6] on usb-dummy_hcd.5-1/input0 [ 1250.231558][ T6017] asus 0003:0B05:19B6.0012: Asus input not registered [ 1250.352750][ T9487] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1250.358044][ T6017] asus 0003:0B05:19B6.0012: probe with driver asus failed with error -12 [ 1250.384751][ T9487] cp210x 4-1:0.0: device disconnected [ 1250.396002][ T6017] usb 6-1: USB disconnect, device number 14 [ 1250.455403][ T651] fido_id[651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1250.597888][ T3644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1250.759115][ T656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12831'. [ 1251.119026][ T667] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 1251.293592][ T3644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.333694][T29391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1251.371777][T29391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1251.374849][T29391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1251.400636][T29391] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1251.417328][T29391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1251.436759][ T662] vlan2: entered allmulticast mode [ 1251.543153][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12842'. [ 1251.543190][ T679] netlink: 'syz.5.12842': attribute type 5 has an invalid length. [ 1251.712020][ T3644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.985811][ T38] audit: type=1400 audit(2000000507.699:2966): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=693 comm="syz.0.12847" daddr=fe80::bb dest=20001 [ 1252.031084][T29391] Bluetooth: hci5: command 0x0406 tx timeout [ 1252.063266][ T3644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.235401][ T668] virt_wifi0 speed is unknown, defaulting to 1000 [ 1252.248807][ T668] lo speed is unknown, defaulting to 1000 [ 1252.565956][ T5928] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1252.600380][ T712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12856'. [ 1252.723218][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.723255][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.723297][ T5928] usb 6-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 1252.723323][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.919065][ T5928] usb 6-1: config 0 descriptor?? [ 1253.158470][ T6017] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1253.322504][ T6017] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1253.322535][ T6017] usb 4-1: config 0 has no interface number 0 [ 1253.322637][ T6017] usb 4-1: config 0 interface 128 has no altsetting 0 [ 1253.391560][ T6017] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 1253.391594][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.391617][ T6017] usb 4-1: Product: syz [ 1253.391633][ T6017] usb 4-1: Manufacturer: syz [ 1253.391653][ T6017] usb 4-1: SerialNumber: syz [ 1253.457305][ T5928] ortek 0003:05A4:2000.0013: item fetching failed at offset 3/5 [ 1253.458205][ T5928] ortek 0003:05A4:2000.0013: probe with driver ortek failed with error -22 [ 1253.465967][ T59] Bluetooth: hci2: command tx timeout [ 1253.485880][ T6635] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1253.539959][ T6017] usb 4-1: config 0 descriptor?? [ 1253.618188][ T6017] radio-si470x 4-1:0.128: could not find interrupt in endpoint [ 1253.618275][ T6017] radio-si470x 4-1:0.128: probe with driver radio-si470x failed with error -5 [ 1253.618822][ T6017] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 1253.638450][ T5928] usb 6-1: USB disconnect, device number 15 [ 1253.664418][ T6635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.664472][ T6635] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1253.664497][ T6635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.801641][ T6017] usb 4-1: USB disconnect, device number 71 [ 1253.874082][ T6635] usb 3-1: config 0 descriptor?? [ 1254.338774][ T6635] holtek 0003:1241:5015.0014: unbalanced collection at end of report description [ 1254.339489][ T6635] holtek 0003:1241:5015.0014: parse failed [ 1254.339553][ T6635] holtek 0003:1241:5015.0014: probe with driver holtek failed with error -22 [ 1254.524298][ T6635] usb 3-1: USB disconnect, device number 71 [ 1254.644759][ T749] xt_socket: unknown flags 0xd0 [ 1255.506058][ T5928] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1255.546616][ T768] Bluetooth: MGMT ver 1.23 [ 1255.561576][ T59] Bluetooth: hci2: command tx timeout [ 1255.575901][ T6635] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1255.659200][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.659235][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.659277][ T5928] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1255.659302][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.674210][ T5928] usb 1-1: config 0 descriptor?? [ 1255.728179][ T6635] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1255.728209][ T6635] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1255.728231][ T6635] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.728253][ T6635] usb 3-1: config 220 has no interface number 2 [ 1255.728333][ T6635] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1255.728361][ T6635] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1255.728380][ T6635] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1255.728399][ T6635] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1255.731647][ T6635] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1255.731679][ T6635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.731700][ T6635] usb 3-1: Product: syz [ 1255.731716][ T6635] usb 3-1: Manufacturer: syz [ 1255.731731][ T6635] usb 3-1: SerialNumber: syz [ 1256.097001][ T6635] usb 3-1: selecting invalid altsetting 0 [ 1256.097631][ T6635] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1256.097666][ T6635] usb 3-1: No valid video chain found. [ 1256.181006][ T5928] cmedia_hs100b 0003:0D8C:0014.0015: item fetching failed at offset 5/7 [ 1256.181829][ T5928] cmedia_hs100b 0003:0D8C:0014.0015: probe with driver cmedia_hs100b failed with error -22 [ 1256.209009][ T6635] usb 3-1: selecting invalid altsetting 0 [ 1256.209053][ T6635] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1256.240688][ T6635] usb 3-1: USB disconnect, device number 72 [ 1256.375233][ T990] usb 1-1: USB disconnect, device number 43 [ 1256.531578][ T777] syz.5.12878 (777) used greatest stack depth: 17768 bytes left [ 1257.625874][ T59] Bluetooth: hci2: command tx timeout [ 1257.983919][ T801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12889'. [ 1257.983945][ T801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12889'. [ 1257.983973][ T801] netlink: 'syz.2.12889': attribute type 7 has an invalid length. [ 1258.849569][ T3644] bond0 (unregistering): Released all slaves [ 1258.870235][ T3644] bond1 (unregistering): Released all slaves [ 1259.706079][ T59] Bluetooth: hci2: command tx timeout [ 1259.799618][ T3644] bond2 (unregistering): Released all slaves [ 1259.823330][ T3644] bond3 (unregistering): Released all slaves [ 1259.876937][ T668] wg1 speed is unknown, defaulting to 1000 [ 1259.938185][ T668] lo speed is unknown, defaulting to 1000 [ 1260.125129][ T3644] : left promiscuous mode [ 1260.450589][ T3644] tipc: Left network mode [ 1260.579415][ T3644] IPVS: stopping backup sync thread 14524 ... [ 1261.713436][ T854] ALSA: seq fatal error: cannot create timer (-22) [ 1262.822801][ T887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12921'. [ 1262.822828][ T887] tipc: MTU too low for tipc bearer [ 1262.860130][ T668] chnl_net:caif_netlink_parms(): no params data found [ 1263.076821][ T38] audit: type=1400 audit(2000000518.799:2967): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=893 comm="syz.3.12927" daddr=fe80::1c dest=16385 [ 1263.090026][ T897] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1263.091437][ T5928] kernel write not supported for file task/461/attr/keycreate (pid: 5928 comm: kworker/1:5) [ 1263.309645][ T38] audit: type=1400 audit(2000000519.029:2968): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=899 comm="syz.5.12928" daddr=::ffff:224.0.0.2 dest=20000 [ 1263.492280][ T906] atomic_op ffff88805cf58218 conn xmit_atomic 0000000000000000 [ 1263.559573][ T909] netlink: 'syz.2.12932': attribute type 1 has an invalid length. [ 1263.559602][ T909] netlink: 184 bytes leftover after parsing attributes in process `syz.2.12932'. [ 1263.559620][ T909] netlink: 'syz.2.12932': attribute type 1 has an invalid length. [ 1264.146184][ T9487] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1264.195821][ T990] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1264.262044][ T948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12941'. [ 1264.262074][ T948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12941'. [ 1264.262104][ T948] netlink: 'syz.0.12941': attribute type 5 has an invalid length. [ 1264.262120][ T948] netlink: 'syz.0.12941': attribute type 6 has an invalid length. [ 1264.345502][ T9487] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.345531][ T9487] usb 3-1: config 0 has no interfaces? [ 1264.349025][ T9487] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1264.349064][ T9487] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1264.349090][ T9487] usb 3-1: Product: syz [ 1264.349109][ T9487] usb 3-1: Manufacturer: syz [ 1264.378598][ T990] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1264.378640][ T990] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1264.378666][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.478512][ T990] usb 6-1: config 0 descriptor?? [ 1264.494963][ T9487] usb 3-1: config 0 descriptor?? [ 1265.086235][ T3644] hsr_slave_0: left promiscuous mode [ 1265.127903][ T990] video4linux radio48: keene_cmd_set failed (-71) [ 1265.127934][ T990] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 1265.154836][ T990] usb 6-1: USB disconnect, device number 16 [ 1265.155519][ T3644] hsr_slave_1: left promiscuous mode [ 1265.845390][ T38] audit: type=1400 audit(2000000521.559:2969): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=984 comm="syz.3.12952" daddr=fe80::bb dest=20002 [ 1266.336135][ T990] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1266.519563][ T990] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1266.519595][ T990] usb 1-1: config 0 has no interface number 0 [ 1266.519675][ T990] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1266.519706][ T990] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1266.519734][ T990] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1266.522752][ T990] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 1266.522783][ T990] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1266.522806][ T990] usb 1-1: Product: syz [ 1266.522823][ T990] usb 1-1: SerialNumber: syz [ 1266.542381][ T990] usb 1-1: config 0 descriptor?? [ 1266.595141][ T990] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1266.638017][ T990] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input100 [ 1266.759554][ C0] cm109_urb_ctl_callback: 1092 callbacks suppressed [ 1266.759584][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.759841][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.760087][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.760350][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.760601][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.760846][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.761101][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.761355][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.761611][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1266.761925][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1267.079459][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1267.079529][ T990] usb 1-1: USB disconnect, device number 44 [ 1267.248148][ T990] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1268.356041][ T5840] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1268.535432][ T5840] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1268.535466][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.535487][ T5840] usb 4-1: Product: syz [ 1268.535504][ T5840] usb 4-1: Manufacturer: syz [ 1268.535519][ T5840] usb 4-1: SerialNumber: syz [ 1268.578162][ T5840] usb 4-1: config 0 descriptor?? [ 1268.862373][ T5840] usb 4-1: USB disconnect, device number 72 [ 1272.802177][ T668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.802440][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.802709][ T668] bridge_slave_0: entered allmulticast mode [ 1272.806751][ T668] bridge_slave_0: entered promiscuous mode [ 1272.889400][ T990] usb 3-1: USB disconnect, device number 73 [ 1273.007011][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.007171][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.007429][ T668] bridge_slave_1: entered allmulticast mode [ 1273.017227][ T668] bridge_slave_1: entered promiscuous mode [ 1273.615965][ T9487] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1273.738557][ T668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.758517][ T668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.777597][ T9487] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1273.777628][ T9487] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1273.777647][ T9487] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.777667][ T9487] usb 1-1: config 8 has no interface number 0 [ 1273.777720][ T9487] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1273.777749][ T9487] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1273.781344][ T9487] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1273.781377][ T9487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.781409][ T9487] usb 1-1: Product: syz [ 1273.781425][ T9487] usb 1-1: Manufacturer: syz [ 1273.781454][ T9487] usb 1-1: SerialNumber: syz [ 1274.146019][ T9487] usb 1-1: USB disconnect, device number 45 [ 1274.518578][ T668] team0: Port device team_slave_0 added [ 1274.540661][ T668] team0: Port device team_slave_1 added [ 1274.578395][ T1102] netlink: 120 bytes leftover after parsing attributes in process `syz.3.12997'. [ 1274.938675][ T668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.938696][ T668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.938727][ T668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.941360][ T668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.941377][ T668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.941406][ T668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.490140][ T1124] devpts: Bad value for 'uid' [ 1275.490163][ T1124] devpts: Bad value for 'uid' [ 1275.532028][ T668] hsr_slave_0: entered promiscuous mode [ 1275.534634][ T668] hsr_slave_1: entered promiscuous mode [ 1275.535601][ T668] debugfs: 'hsr0' already exists in 'hsr' [ 1275.535630][ T668] Cannot create hsr debugfs directory [ 1275.816014][ T5928] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1275.969034][ T5928] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1275.969067][ T5928] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1275.969090][ T5928] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.969112][ T5928] usb 4-1: config 220 has no interface number 2 [ 1275.969196][ T5928] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1275.969225][ T5928] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1275.969245][ T5928] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1275.969263][ T5928] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1275.972628][ T5928] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1275.972662][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.972685][ T5928] usb 4-1: Product: syz [ 1275.972701][ T5928] usb 4-1: Manufacturer: syz [ 1275.972717][ T5928] usb 4-1: SerialNumber: syz [ 1276.096110][ T9487] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1276.245911][ T9487] usb 3-1: Using ep0 maxpacket: 16 [ 1276.253442][ T9487] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.253471][ T9487] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.270441][ T9487] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1276.270482][ T9487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.270509][ T9487] usb 3-1: Product: syz [ 1276.270527][ T9487] usb 3-1: Manufacturer: syz [ 1276.270544][ T9487] usb 3-1: SerialNumber: syz [ 1276.304039][ T5928] usb 4-1: selecting invalid altsetting 0 [ 1276.352591][ T5928] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1276.352629][ T5928] usb 4-1: No valid video chain found. [ 1276.496342][ T5928] usb 4-1: selecting invalid altsetting 0 [ 1276.496386][ T5928] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1276.611629][ T5928] usb 4-1: USB disconnect, device number 73 [ 1276.690235][ T9487] usb 3-1: 0:2 : does not exist [ 1276.711944][ T9487] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1276.920011][ T1149] tipc: Started in network mode [ 1276.920045][ T1149] tipc: Node identity ac14140f, cluster identity 4711 [ 1276.969285][ T9487] usb 3-1: USB disconnect, device number 74 [ 1276.978933][ T1149] tipc: New replicast peer: 255.255.255.8 [ 1277.010171][ T1149] tipc: Enabled bearer , priority 10 [ 1277.346642][ T1156] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13015'. [ 1277.365191][ T1071] udevd[1071]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.750164][ T668] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1277.844419][ T668] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1277.906018][ T9487] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1277.925125][ T668] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1277.978193][ T668] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1278.060448][ T9487] usb 4-1: Using ep0 maxpacket: 16 [ 1278.069294][ T9487] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1278.069329][ T9487] usb 4-1: config 0 has no interface number 0 [ 1278.069387][ T9487] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.069418][ T9487] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.069446][ T9487] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.069496][ T9487] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1278.069524][ T9487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.089685][ T9487] usb 4-1: config 0 descriptor?? [ 1278.115807][ T990] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1278.127119][ T5928] tipc: Node number set to 2886997007 [ 1278.271413][ T990] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1278.271446][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.271468][ T990] usb 3-1: Product: syz [ 1278.271484][ T990] usb 3-1: Manufacturer: syz [ 1278.271501][ T990] usb 3-1: SerialNumber: syz [ 1278.313806][ T990] usb 3-1: config 0 descriptor?? [ 1278.581580][ T990] usb 3-1: USB disconnect, device number 75 [ 1278.667722][ T9487] holtek_mouse 0003:04D9:A072.0016: item fetching failed at offset 3/4 [ 1278.668595][ T9487] holtek_mouse 0003:04D9:A072.0016: hid parse failed: -22 [ 1278.668675][ T9487] holtek_mouse 0003:04D9:A072.0016: probe with driver holtek_mouse failed with error -22 [ 1278.869503][ T9487] usb 4-1: USB disconnect, device number 74 [ 1279.024192][ T668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.154993][ T668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.185843][T30187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.186031][T30187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.209567][ T1200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13029'. [ 1279.287130][ T1200] veth0_macvtap: left promiscuous mode [ 1279.317237][ T38] audit: type=1400 audit(2000000535.039:2970): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5501 comm="dhcpcd" daddr=ff02::2 [ 1279.511083][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.511353][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.882248][ T1215] netlink: 'syz.5.13035': attribute type 1 has an invalid length. [ 1279.882275][ T1215] netlink: 228 bytes leftover after parsing attributes in process `syz.5.13035'. [ 1280.278377][ T1228] netlink: 'syz.0.13040': attribute type 9 has an invalid length. [ 1280.364056][ T1231] ubi: mtd0 is already attached to ubi31 [ 1280.793845][ T668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.558679][ T38] audit: type=1400 audit(2000000537.279:2971): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=1271 comm="syz.3.13057" daddr=ff01::1 [ 1281.854727][ T668] veth0_vlan: entered promiscuous mode [ 1281.879816][ T668] veth1_vlan: entered promiscuous mode [ 1282.067836][ T668] veth0_macvtap: entered promiscuous mode [ 1282.101419][ T668] veth1_macvtap: entered promiscuous mode [ 1282.105475][ T1288] trusted_key: encrypted_key: key trusted:syz not found [ 1282.195824][ T990] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1282.221233][ T668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.255528][ T668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.269396][ T1289] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1282.269459][ T1289] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1282.269699][ T1289] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1282.269846][ T1289] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1282.269907][ T1289] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1282.269960][ T1289] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1282.270104][ T1289] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1282.270156][ T1289] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1282.270212][ T1289] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1282.270310][ T1289] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1282.270366][ T1289] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1282.270418][ T1289] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1282.339983][T30187] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.340639][T30187] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.341246][T30187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.342047][T30187] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.392859][ T990] usb 1-1: Using ep0 maxpacket: 16 [ 1282.395280][ T990] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1282.395312][ T990] usb 1-1: config 1 has no interface number 0 [ 1282.395362][ T990] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1282.395389][ T990] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1282.395415][ T990] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1282.454531][ T990] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1282.454566][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.454588][ T990] usb 1-1: Product: syz [ 1282.454603][ T990] usb 1-1: Manufacturer: syz [ 1282.454619][ T990] usb 1-1: SerialNumber: syz [ 1282.505107][ T1285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1282.505253][ T1285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1282.955480][ T1285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1282.955612][ T1285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1282.978164][ T9487] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1283.128522][ T9487] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1283.128558][ T9487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.144730][ T9487] usb 4-1: config 0 descriptor?? [ 1283.158955][ T990] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1283.159290][ T990] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 1283.223450][ T990] usb 1-1: USB disconnect, device number 46 [ 1283.243317][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.243339][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.544177][T15549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.544201][T15549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.678233][ T9487] hid_parser_main: 7 callbacks suppressed [ 1283.678259][ T9487] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 1283.678297][ T9487] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 1283.678325][ T9487] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 1283.678353][ T9487] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 1283.678381][ T9487] elecom 0003:056E:00E6.0017: unknown main item tag 0x0 [ 1283.713210][ T9487] elecom 0003:056E:00E6.0017: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.3-1/input0 [ 1283.834584][ T990] usb 4-1: USB disconnect, device number 75 [ 1284.056095][ T1316] fido_id[1316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1284.697123][ T1339] wg1: entered promiscuous mode [ 1284.697157][ T1339] wg1: entered allmulticast mode [ 1285.147739][ T1352] netlink: 'syz.6.13087': attribute type 1 has an invalid length. [ 1285.147766][ T1352] netlink: 616 bytes leftover after parsing attributes in process `syz.6.13087'. [ 1285.147807][ T1352] netlink: 'syz.6.13087': attribute type 1 has an invalid length. [ 1285.216214][ T990] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1285.333383][ T1354] netlink: 'syz.3.13090': attribute type 4 has an invalid length. [ 1285.386026][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 1285.389292][ T990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.389354][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1285.389386][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1285.389410][ T990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1285.389435][ T990] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.389480][ T990] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1285.389504][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.476522][ T990] usb 3-1: config 0 descriptor?? [ 1285.712557][ T990] usb 3-1: USB disconnect, device number 76 [ 1285.887275][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13095'. [ 1285.887475][ T1372] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 1285.887508][ T1372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1287.215854][ T9487] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1287.378657][ T9487] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1287.378690][ T9487] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.378712][ T9487] usb 4-1: config 0 has no interface number 0 [ 1287.378768][ T9487] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1287.378794][ T9487] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.382197][ T9487] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1287.382231][ T9487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.382254][ T9487] usb 4-1: Product: syz [ 1287.382270][ T9487] usb 4-1: Manufacturer: syz [ 1287.382287][ T9487] usb 4-1: SerialNumber: syz [ 1287.477578][ T9487] usb 4-1: config 0 descriptor?? [ 1287.856435][ T38] audit: type=1400 audit(2000000543.579:2972): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=1441 comm="syz.5.13130" daddr=::ffff:127.0.0.1 dest=20000 [ 1287.905841][ T990] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1288.065751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.085938][ T990] usb 1-1: Using ep0 maxpacket: 16 [ 1288.088365][ T990] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.088393][ T990] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1288.092087][ T990] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1288.092120][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.092142][ T990] usb 1-1: Product: syz [ 1288.092157][ T990] usb 1-1: Manufacturer: syz [ 1288.092174][ T990] usb 1-1: SerialNumber: syz [ 1288.136024][ T5906] usb 4-1: USB disconnect, device number 76 [ 1288.310140][ T1451] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13134'. [ 1288.642877][ T990] usb 1-1: cannot find UAC_HEADER [ 1288.720831][ T990] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1288.777468][ T990] usb 1-1: USB disconnect, device number 47 [ 1288.810661][ T5906] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1288.825324][ T1071] udevd[1071]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1288.955876][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 1288.958495][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.958530][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.958555][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1288.958601][ T5906] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1288.958627][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.964628][ T5906] usb 3-1: config 0 descriptor?? [ 1289.273859][ T1469] tipc: Enabling of bearer rejected, already enabled [ 1289.460810][ T5906] elecom 0003:056E:00FE.0018: item fetching failed at offset 6/70 [ 1289.461729][ T5906] elecom 0003:056E:00FE.0018: probe with driver elecom failed with error -22 [ 1289.516109][ T1472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13142'. [ 1289.516220][ T1472] tipc: Enabling of bearer rejected, failed to enable media [ 1289.523829][ T1474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13144'. [ 1289.579121][ T1474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13144'. [ 1289.579147][ T1474] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1289.678511][ T5906] usb 3-1: USB disconnect, device number 77 [ 1289.832085][ T38] audit: type=1400 audit(2000000545.549:2973): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=1481 comm="syz.6.13146" daddr=::ffff:172.20.20.13 dest=20000 [ 1290.092325][ T1487] [U] ùÿ [ 1290.755798][ T5906] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1290.919812][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 1290.933757][ T5906] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1290.933791][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.933815][ T5906] usb 4-1: Product: syz [ 1290.933831][ T5906] usb 4-1: Manufacturer: syz [ 1290.933847][ T5906] usb 4-1: SerialNumber: syz [ 1290.963767][ T5906] usb 4-1: config 0 descriptor?? [ 1291.029121][ T5906] gspca_main: se401-2.14.0 probing 047d:5003 [ 1291.407026][ T5906] gspca_se401: Wrong descriptor type [ 1291.628459][ T6017] usb 4-1: USB disconnect, device number 77 [ 1291.778942][ T9487] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1291.925860][ T9487] usb 7-1: Using ep0 maxpacket: 8 [ 1291.928477][ T9487] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1291.928518][ T9487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.934556][ T9487] usb 7-1: config 0 descriptor?? [ 1292.418617][ T9487] magicmouse 0003:05AC:0269.0019: reserved main item tag 0xd [ 1292.418663][ T9487] magicmouse 0003:05AC:0269.0019: item fetching failed at offset 4/5 [ 1292.419545][ T9487] magicmouse 0003:05AC:0269.0019: magicmouse hid parse failed [ 1292.419656][ T9487] magicmouse 0003:05AC:0269.0019: probe with driver magicmouse failed with error -22 [ 1292.647200][ T6017] usb 7-1: USB disconnect, device number 2 [ 1292.960245][ T990] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1293.098524][ T9487] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1293.128993][ T1553] fido_id[1553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1293.245874][ T9487] usb 4-1: Using ep0 maxpacket: 16 [ 1293.248585][ T9487] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1293.248615][ T9487] usb 4-1: config 0 has no interface number 0 [ 1293.248665][ T9487] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1293.251964][ T9487] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1293.251995][ T9487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.252017][ T9487] usb 4-1: Product: syz [ 1293.252033][ T9487] usb 4-1: Manufacturer: syz [ 1293.252048][ T9487] usb 4-1: SerialNumber: syz [ 1293.351833][ T9487] usb 4-1: config 0 descriptor?? [ 1293.587608][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13184'. [ 1294.039595][ T9487] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1294.085864][ T9487] usb 4-1: USB disconnect, device number 78 [ 1295.315844][ T5906] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1295.336839][ T1610] futex_wake_op: syz.5.13205 tries to shift op by -1; fix this program [ 1295.464948][ T1615] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 1295.477071][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 1295.479877][ T5906] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1295.479906][ T5906] usb 7-1: config 0 has no interface number 0 [ 1295.479966][ T5906] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.479995][ T5906] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.480037][ T5906] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1295.480063][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.547823][ T5906] usb 7-1: config 0 descriptor?? [ 1296.173346][ T5906] uclogic 0003:28BD:0071.001B: failed retrieving string descriptor #100: -71 [ 1296.173413][ T5906] uclogic 0003:28BD:0071.001B: failed retrieving pen parameters: -71 [ 1296.173433][ T5906] uclogic 0003:28BD:0071.001B: pen probing failed: -71 [ 1296.173453][ T5906] uclogic 0003:28BD:0071.001B: failed probing parameters: -71 [ 1296.173566][ T5906] uclogic 0003:28BD:0071.001B: probe with driver uclogic failed with error -71 [ 1296.226698][ T5906] usb 7-1: USB disconnect, device number 3 [ 1296.973574][ T1658] binder: 1657:1658 ioctl 4018620d 0 returned -22 [ 1296.975238][ T1658] binder: 1657:1658 ioctl c0306201 200000000240 returned -11 [ 1297.334562][ T1671] netlink: 'syz.2.13232': attribute type 3 has an invalid length. [ 1297.334592][ T1671] netlink: 'syz.2.13232': attribute type 1 has an invalid length. [ 1297.334609][ T1671] netlink: 212 bytes leftover after parsing attributes in process `syz.2.13232'. [ 1297.573246][ T1680] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1297.706367][ T38] audit: type=1400 audit(2000000553.429:2974): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=1687 comm="syz.6.13241" [ 1297.866138][ T9487] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1298.029164][ T9487] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1298.029204][ T9487] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1298.029248][ T9487] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1298.029275][ T9487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.095371][ T1682] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1298.138922][ T9487] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1298.817674][ T6635] usb 4-1: USB disconnect, device number 79 [ 1299.002264][ T9487] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1299.148662][ T9487] usb 3-1: Using ep0 maxpacket: 32 [ 1299.163814][ T9487] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1299.163859][ T9487] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1299.163903][ T9487] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1299.163931][ T9487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.225177][ T9487] usb 3-1: config 0 descriptor?? [ 1299.251825][ T1724] sp0: Synchronizing with TNC [ 1299.298665][ T1728] sp0: Found TNC [ 1299.686063][ T9487] corsair-psu 0003:1B1C:1C09.001C: unknown main item tag 0x0 [ 1299.686108][ T9487] corsair-psu 0003:1B1C:1C09.001C: unknown main item tag 0x0 [ 1299.686136][ T9487] corsair-psu 0003:1B1C:1C09.001C: unknown main item tag 0x0 [ 1299.686164][ T9487] corsair-psu 0003:1B1C:1C09.001C: unknown main item tag 0x0 [ 1299.686191][ T9487] corsair-psu 0003:1B1C:1C09.001C: unknown main item tag 0x0 [ 1299.702472][ T9487] corsair-psu 0003:1B1C:1C09.001C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1299.765972][ T9487] corsair-psu 0003:1B1C:1C09.001C: unable to initialize device (-38) [ 1299.882771][ T9487] corsair-psu 0003:1B1C:1C09.001C: probe with driver corsair-psu failed with error -38 [ 1299.944493][ T9487] usb 3-1: USB disconnect, device number 78 [ 1300.071939][ T1744] fido_id[1744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1300.243907][ T38] audit: type=1400 audit(2000000555.959:2975): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=1751 comm="syz.6.13267" daddr=::ffff:172.20.20.0 [ 1302.780287][ T1849] netlink: 'syz.0.13311': attribute type 2 has an invalid length. [ 1302.780312][ T1849] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.13311'. [ 1302.796209][ T6635] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1302.955831][ T6635] usb 4-1: Using ep0 maxpacket: 32 [ 1302.958759][ T6635] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1302.958795][ T6635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.990993][ T6635] usb 4-1: config 0 descriptor?? [ 1303.448983][ T6635] elecom 0003:056E:00FE.001D: unknown main item tag 0x0 [ 1303.449029][ T6635] elecom 0003:056E:00FE.001D: unknown main item tag 0x0 [ 1303.449058][ T6635] elecom 0003:056E:00FE.001D: unknown main item tag 0x0 [ 1303.449087][ T6635] elecom 0003:056E:00FE.001D: unknown main item tag 0x0 [ 1303.449114][ T6635] elecom 0003:056E:00FE.001D: unknown main item tag 0x0 [ 1303.503169][ T6635] elecom 0003:056E:00FE.001D: hidraw0: USB HID v1.01 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 1303.644368][ T6635] usb 4-1: USB disconnect, device number 80 [ 1303.797795][ T1868] fido_id[1868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1304.626490][ T1905] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 1304.860069][ T9487] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1304.960960][ T1919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13345'. [ 1305.069259][ T9487] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1305.069310][ T9487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1305.069358][ T9487] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1305.069385][ T9487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.083950][ T9487] usb 6-1: config 0 descriptor?? [ 1305.300149][ T9487] ath6kl: Failed to submit usb control message: -71 [ 1305.300203][ T9487] ath6kl: unable to send the bmi data to the device: -71 [ 1305.300220][ T9487] ath6kl: Unable to send get target info: -71 [ 1305.301480][ T9487] ath6kl: Failed to init ath6kl core: -71 [ 1305.332677][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.339286][ T9487] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1305.408553][ T9487] usb 6-1: USB disconnect, device number 17 [ 1305.465819][ T6635] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1305.466060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.618623][ T6635] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.618660][ T6635] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.618705][ T6635] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1305.618731][ T6635] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.635797][ T5840] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1305.677027][ T6635] usb 7-1: config 0 descriptor?? [ 1305.786442][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 1305.788717][ T5840] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1305.791466][ T5840] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1305.791497][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.791518][ T5840] usb 1-1: Product: syz [ 1305.791532][ T5840] usb 1-1: Manufacturer: syz [ 1305.791547][ T5840] usb 1-1: SerialNumber: syz [ 1305.805204][ T5840] usb 1-1: config 0 descriptor?? [ 1305.853051][ T5840] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1305.853143][ T5840] usb 1-1: setting power ON [ 1305.853167][ T5840] dvb-usb: bulk message failed: -22 (2/0) [ 1305.877170][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1305.886837][ T5840] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1305.886909][ T5840] usb 1-1: media controller created [ 1305.993852][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1306.056500][ T1931] dvb-usb: bulk message failed: -22 (3/0) [ 1306.061420][ T1931] cxusb: i2c wr: len=80 is too big! [ 1306.061420][ T1931] [ 1306.134658][ T6635] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x2 [ 1306.210517][ T6635] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 1306.212498][ T5840] usb 1-1: selecting invalid altsetting 6 [ 1306.212523][ T5840] usb 1-1: digital interface selection failed (-22) [ 1306.212540][ T5840] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1306.236490][ T5840] usb 1-1: setting power OFF [ 1306.236798][ T5840] dvb-usb: bulk message failed: -22 (2/0) [ 1306.236824][ T5840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1306.236841][ T5840] (NULL device *): no alternate interface [ 1306.276918][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.328983][ T6635] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 1306.329042][ T6635] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 1306.353819][ T6635] pyra 0003:1E7D:2CF6.001E: probe with driver pyra failed with error -71 [ 1306.376519][ T6635] usb 7-1: USB disconnect, device number 4 [ 1306.574888][ T1948] fido_id[1948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1306.596304][ T5840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1306.626141][ T5840] usb 1-1: USB disconnect, device number 48 [ 1306.927316][ T1959] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1307.295040][ T38] audit: type=1400 audit(2000000563.009:2976): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=1963 comm="syz.2.13365" daddr=ff01::1 dest=20005 [ 1307.579166][ T1974] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.704084][ T1974] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.847865][ T1979] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13372'. [ 1308.599824][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.058680][ T2016] [U]  [ 1309.295966][ T6635] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1309.449502][ T6635] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1309.449541][ T6635] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1309.449572][ T6635] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1309.449610][ T6635] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1309.449635][ T6635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.504940][ T6635] usb 3-1: config 0 descriptor?? [ 1309.512204][ T2017] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1309.945992][ T5840] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1310.025216][ T6635] hid-u2fzero 0003:10C4:8ACF.001F: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 1310.130943][ T6635] hid-u2fzero 0003:10C4:8ACF.001F: U2F Zero LED initialised [ 1310.131140][ T6635] hid-u2fzero 0003:10C4:8ACF.001F: U2F Zero RNG initialised [ 1310.153407][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1310.153444][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1310.153474][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1310.153520][ T5840] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1310.153546][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.224901][ T6635] usb 3-1: USB disconnect, device number 79 [ 1310.250834][ T5840] usb 1-1: config 0 descriptor?? [ 1310.251956][ T2038] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1310.349208][ T2051] fido_id[2051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1310.601869][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.731509][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.731553][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.731582][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.731610][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.731638][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.731665][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.731692][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.731720][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.731749][ T5840] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1310.756135][ T5840] aureal 0003:0755:2626.0020: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 1310.892646][ T5840] usb 1-1: USB disconnect, device number 49 [ 1310.931683][ T2062] fido_id[2062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1311.535039][ T38] audit: type=1400 audit(2000000567.249:2977): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=2081 comm="syz.2.13421" daddr=::ffff:172.20.20.170 dest=20002 [ 1311.682537][ T2088] netlink: 'syz.3.13423': attribute type 58 has an invalid length. [ 1311.682565][ T2088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13423'. [ 1311.883663][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.115031][ T2100] comedi comedi3: comedi_test: 20263 microvolt, 31 microsecond waveform attached [ 1312.608972][ T38] audit: type=1400 audit(2000000568.329:2978): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=2109 comm="syz.2.13433" daddr=ff02::1 [ 1314.287511][ T5840] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1314.448707][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.448744][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1314.448781][ T5840] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1314.448807][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.513686][ T5840] usb 4-1: config 0 descriptor?? [ 1314.944177][ T2171] netlink: 'syz.6.13461': attribute type 1 has an invalid length. [ 1314.979138][ T5840] lenovo 0003:17EF:6067.0021: item fetching failed at offset 0/2 [ 1314.980019][ T5840] lenovo 0003:17EF:6067.0021: hid_parse failed [ 1314.980095][ T5840] lenovo 0003:17EF:6067.0021: probe with driver lenovo failed with error -22 [ 1315.134355][ T5840] usb 4-1: USB disconnect, device number 81 [ 1315.686388][ T2193] netlink: 'syz.6.13472': attribute type 30 has an invalid length. [ 1315.942860][ T6017] IPVS: starting estimator thread 0... [ 1315.943668][ T2201] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13477'. [ 1316.034415][ T2202] IPVS: using max 6 ests per chain, 14400 per kthread [ 1316.607333][ T2227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1316.725998][ T6017] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1316.881224][ T6017] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.881302][ T6017] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1316.881332][ T6017] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1316.884442][ T6017] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1316.884475][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.884498][ T6017] usb 4-1: Product: syz [ 1316.884514][ T6017] usb 4-1: Manufacturer: syz [ 1316.884538][ T6017] usb 4-1: SerialNumber: syz [ 1316.969148][ T2224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1317.287501][ T2244] delete_channel: no stack [ 1317.288162][ T2243] delete_channel: no stack [ 1317.320178][ T2245] IPVS: Error connecting to the multicast addr [ 1317.631027][ T6017] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1317.631117][ T6017] cdc_ncm 4-1:1.0: bind() failure [ 1317.634114][ T6017] usbtest 4-1:1.0: Linux gadget zero [ 1317.634136][ T6017] usbtest 4-1:1.0: full-speed {control in/out int-in} tests (+alt) [ 1317.677228][ T6017] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1317.677279][ T6017] cdc_ncm 4-1:1.1: bind() failure [ 1317.680184][ T6017] usbtest 4-1:1.1: couldn't get endpoints, -22 [ 1317.680278][ T6017] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1317.739137][ T6017] usb 4-1: USB disconnect, device number 82 [ 1318.376204][ T6635] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1318.486038][ T6017] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1318.529187][ T38] audit: type=1400 audit(2000000574.239:2979): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=2277 comm="syz.2.13511" daddr=::ffff:172.20.20.170 [ 1318.529944][ T6635] usb 6-1: Using ep0 maxpacket: 16 [ 1318.532347][ T6635] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1318.532376][ T6635] usb 6-1: config 0 has no interface number 0 [ 1318.552533][ T6635] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1318.552572][ T6635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.552607][ T6635] usb 6-1: Product: syz [ 1318.552624][ T6635] usb 6-1: Manufacturer: syz [ 1318.552642][ T6635] usb 6-1: SerialNumber: syz [ 1318.572425][ T6635] usb 6-1: config 0 descriptor?? [ 1318.583114][ T6635] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1318.690371][ T6017] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1318.691992][ T6017] usb 7-1: config 3 has an invalid interface number: 8 but max is 3 [ 1318.692024][ T6017] usb 7-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 1318.692047][ T6017] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 1318.692068][ T6017] usb 7-1: config 3 has no interface number 0 [ 1318.692125][ T6017] usb 7-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 1318.692155][ T6017] usb 7-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1318.692184][ T6017] usb 7-1: config 3 interface 8 has no altsetting 0 [ 1318.695328][ T6017] usb 7-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 1318.695359][ T6017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.695380][ T6017] usb 7-1: Product: syz [ 1318.695395][ T6017] usb 7-1: Manufacturer: syz [ 1318.695412][ T6017] usb 7-1: SerialNumber: syz [ 1319.176541][ T6017] appledisplay 7-1:3.8: Error while getting initial brightness: -71 [ 1319.184004][ T6017] appledisplay 7-1:3.8: probe with driver appledisplay failed with error -71 [ 1319.216683][ T6017] usbhid 7-1:3.8: can't add hid device: -22 [ 1319.216822][ T6017] usbhid 7-1:3.8: probe with driver usbhid failed with error -22 [ 1319.221529][ T6017] usb 7-1: USB disconnect, device number 5 [ 1319.280314][ T6635] gspca_spca1528: reg_w err -71 [ 1319.295981][ T6635] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1319.330456][ T6635] usb 6-1: USB disconnect, device number 18 [ 1320.375805][ T6635] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1320.537710][ T6635] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.537741][ T6635] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1320.541075][ T6635] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1320.541107][ T6635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1320.541130][ T6635] usb 3-1: SerialNumber: syz [ 1320.585926][ T5906] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1320.743835][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1320.743959][ T5906] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1320.743988][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.832605][ T5906] usb 6-1: config 0 descriptor?? [ 1320.853502][ T6635] usb 3-1: 0:2 : does not exist [ 1321.070218][ T2332] macsec1: entered promiscuous mode [ 1321.070505][ T2332] macsec1: entered allmulticast mode [ 1321.097264][ T6635] usb 3-1: USB disconnect, device number 80 [ 1321.368094][ T5906] uclogic 0003:5543:0522.0022: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input0 [ 1321.414510][ T1071] udevd[1071]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.591901][ T6017] usb 6-1: USB disconnect, device number 19 [ 1321.606566][ T38] audit: type=1326 audit(2000000577.329:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2342 comm="syz.6.13542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77fbe5eba9 code=0x0 [ 1321.688783][ T2343] fido_id[2343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1322.184956][ T2362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13550'. [ 1323.066349][ T6017] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1323.225773][ T6017] usb 7-1: Using ep0 maxpacket: 32 [ 1323.228676][ T6017] usb 7-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1323.228706][ T6017] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.228728][ T6017] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 1323.228787][ T6017] usb 7-1: config 5 interface 0 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 1323.228814][ T6017] usb 7-1: config 5 interface 0 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 1323.228837][ T6017] usb 7-1: config 5 interface 0 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1323.228865][ T6017] usb 7-1: config 5 interface 0 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1323.228890][ T6017] usb 7-1: config 5 interface 0 has no altsetting 0 [ 1323.232330][ T6017] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=9f.21 [ 1323.232362][ T6017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.232384][ T6017] usb 7-1: Product: syz [ 1323.232400][ T6017] usb 7-1: Manufacturer: syz [ 1323.232416][ T6017] usb 7-1: SerialNumber: syz [ 1323.637361][ T6017] usb 7-1: USB disconnect, device number 6 [ 1324.180404][ T6635] IPVS: starting estimator thread 0... [ 1324.326172][ T2426] IPVS: using max 7 ests per chain, 16800 per kthread [ 1324.877629][ T9487] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1324.990248][ T2452] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13587'. [ 1325.028546][ T9487] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1325.028575][ T9487] usb 7-1: config 0 has no interface number 0 [ 1325.028609][ T9487] usb 7-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 1325.028670][ T9487] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.028699][ T9487] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.028812][ T9487] usb 7-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1325.028880][ T9487] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1325.028906][ T9487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.035415][ T9487] usb 7-1: config 0 descriptor?? [ 1325.515924][T31790] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1325.567528][ T9487] hid_parser_main: 60 callbacks suppressed [ 1325.567553][ T9487] wacom 0003:056A:0084.0023: unknown main item tag 0x0 [ 1325.567584][ T9487] wacom 0003:056A:0084.0023: unknown main item tag 0x0 [ 1325.636213][ T9487] wacom 0003:056A:0084.0023: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.6-1/input2 [ 1325.675915][T31790] usb 1-1: Using ep0 maxpacket: 8 [ 1325.695607][T31790] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1325.705199][T31790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.705229][T31790] usb 1-1: Product: syz [ 1325.705245][T31790] usb 1-1: Manufacturer: syz [ 1325.705260][T31790] usb 1-1: SerialNumber: syz [ 1325.756472][T31790] usb 1-1: config 0 descriptor?? [ 1325.778210][T31790] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1325.778269][T31790] dvb-usb: bulk message failed: -22 (2/0) [ 1325.778290][T31790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1325.779204][T31790] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1325.779272][T31790] usb 1-1: media controller created [ 1325.783050][ T6635] usb 7-1: USB disconnect, device number 7 [ 1325.852671][T31790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1325.916960][T31790] dvb-usb: bulk message failed: -22 (1/0) [ 1325.917013][T31790] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1325.942932][T31790] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input107 [ 1325.997249][T31790] dvb-usb: schedule remote query interval to 50 msecs. [ 1325.997281][T31790] dvb-usb: bulk message failed: -22 (2/0) [ 1325.997299][T31790] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1326.057583][ T6017] dvb-usb: bulk message failed: -22 (1/0) [ 1326.057625][ T6017] dvb-usb: error while querying for an remote control event. [ 1326.060653][T31790] usb 1-1: USB disconnect, device number 50 [ 1326.216326][ T2472] fido_id[2472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1326.264059][T31790] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1326.536209][ T6635] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1326.597058][ T2496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13602'. [ 1326.688906][ T6635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.688960][ T6635] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1326.688989][ T6635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.700775][ T6635] usb 3-1: config 0 descriptor?? [ 1327.159843][ T6635] itetech 0003:258A:6A88.0024: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 1327.334164][T31790] usb 3-1: USB disconnect, device number 81 [ 1328.052130][ T2542] delete_channel: no stack [ 1328.052782][ T2540] delete_channel: no stack [ 1328.409520][ T2558] Bluetooth: MGMT ver 1.23 [ 1328.549591][ T2564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1328.551490][ T2564] IPVS: stopping backup sync thread 12467 ... [ 1328.606260][ T5906] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1328.634928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.666488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.698774][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.730139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.759808][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1328.759853][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.759898][ T5906] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1328.759923][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.769317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.785059][ T5906] usb 7-1: config 0 descriptor?? [ 1328.817396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.887825][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.922252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.959295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.997933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.034210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.066499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.098405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.134237][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.166238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.198277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.264581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.345711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.373989][ T5906] hid-u2fzero 0003:10C4:8ACF.0025: unknown main item tag 0x3 [ 1329.374056][ T5906] hid-u2fzero 0003:10C4:8ACF.0025: item fetching failed at offset 4/5 [ 1329.394712][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.405284][ T5906] hid-u2fzero 0003:10C4:8ACF.0025: probe with driver hid-u2fzero failed with error -22 [ 1329.428957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.464077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.500348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.556852][ T5906] usb 7-1: USB disconnect, device number 8 [ 1329.597761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.686006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.719737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.755488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.778922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.812807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.832391][ T2588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13635'. [ 1329.847523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.881189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.914830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.069260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.121644][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.156969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.191054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.297355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.305910][ T5906] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1330.353677][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.387588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.421035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.460225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.472837][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.472888][ T5906] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1330.472913][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.496904][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.498311][ T5906] usb 4-1: config 0 descriptor?? [ 1330.550178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.597285][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.635175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.683946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.717671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.753317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.786995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.820559][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.853084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.886740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.920997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1330.955272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.003171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.036756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.068917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.094323][ T5906] nintendo 0003:057E:200E.0026: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 1331.101578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.135271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.154495][ T5906] nintendo 0003:057E:200E.0026: Failed charging grip handshake [ 1331.154533][ T5906] nintendo 0003:057E:200E.0026: Failed to initialize controller; ret=-110 [ 1331.168525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.196600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.249508][ T5906] nintendo 0003:057E:200E.0026: probe - fail = -110 [ 1331.249678][ T5906] nintendo 0003:057E:200E.0026: probe with driver nintendo failed with error -110 [ 1331.260375][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.307381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.319789][ T5906] usb 4-1: USB disconnect, device number 83 [ 1331.338783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.370097][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.402050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.433492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.468476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.502643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.525013][ T2605] fido_id[2605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1331.600092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.634316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.666650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.699750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.735164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.787075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.820242][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.855538][ C1] vkms_vblank_simulate: vblank timer overrun [ 1331.954596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.004673][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.037982][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.072110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.109900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.171014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.205749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.229652][ T2610] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1332.229716][ T2610] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1332.229821][ T2610] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1332.229968][ T2610] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1332.230136][ T2610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1332.230192][ T2610] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1332.230246][ T2610] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1332.230356][ T2610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1332.230402][ T2610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1332.230451][ T2610] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1332.230553][ T2610] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1332.230607][ T2610] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1332.230669][ T2610] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1332.230780][ T2610] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1332.230840][ T2610] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1332.230898][ T2610] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1332.230951][ T2610] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1332.231006][ T2610] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1332.239947][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.273874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.308876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.343887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.369178][ T38] audit: type=1400 audit(2000000588.089:2981): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=2611 comm="syz.3.13645" daddr=ff01::1 dest=20002 [ 1332.394325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.443181][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.493656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.580459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.612657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.646622][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.679886][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.715958][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.748230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.782048][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.814968][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.853286][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.938024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1332.972256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.007584][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.040341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.077893][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.128800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.163608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.199365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.232350][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.264839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.301792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.337108][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.438682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.473216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.507633][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.543508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.561655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.598811][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.632872][ T2634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13650'. [ 1333.632901][ T2634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13650'. [ 1333.635540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.687544][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.738056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.789454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.895591][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.935768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.966423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1333.996727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.072227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.102888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.134292][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.166569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.199320][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.232414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.264911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.296686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.331106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.388820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.420436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1334.452262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.216064][T22209] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1342.369391][T22209] usb 6-1: Using ep0 maxpacket: 8 [ 1342.372812][T22209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.372962][T22209] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1342.372989][T22209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.427947][T22209] usb 6-1: config 0 descriptor?? [ 1342.910442][T22209] lenovo 0003:17EF:6062.0027: unknown main item tag 0x0 [ 1342.910482][T22209] lenovo 0003:17EF:6062.0027: unknown main item tag 0x0 [ 1342.910511][T22209] lenovo 0003:17EF:6062.0027: unknown main item tag 0x0 [ 1342.910538][T22209] lenovo 0003:17EF:6062.0027: unknown main item tag 0x0 [ 1342.910566][T22209] lenovo 0003:17EF:6062.0027: unknown main item tag 0x0 [ 1342.984695][T22209] lenovo 0003:17EF:6062.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.5-1/input0 [ 1343.116038][T22209] usb 6-1: USB disconnect, device number 20 [ 1343.510462][ T2659] fido_id[2659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1344.202108][ T38] audit: type=1400 audit(2000000599.919:2982): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=2671 comm="syz.6.13663" daddr=fe80::1a dest=19997 [ 1344.416004][T22209] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1344.569231][T22209] usb 6-1: Using ep0 maxpacket: 8 [ 1344.620051][T22209] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1344.620086][T22209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.620108][T22209] usb 6-1: Product: syz [ 1344.620124][T22209] usb 6-1: Manufacturer: syz [ 1344.620140][T22209] usb 6-1: SerialNumber: syz [ 1345.147033][T22209] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1345.147151][T22209] mxuport 6-1:254.0: probe with driver mxuport failed with error -5 [ 1345.384529][T22209] usb 6-1: USB disconnect, device number 21 [ 1345.957913][T29391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1346.011586][T29391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1346.044277][T29391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1346.074340][T29391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1346.082392][T29391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1346.479229][ T2683] virt_wifi0 speed is unknown, defaulting to 1000 [ 1346.495616][ T2683] lo speed is unknown, defaulting to 1000 [ 1346.801070][ T2690] tmpfs: Bad value for 'mpol' [ 1347.125094][ T2697] pimreg: entered allmulticast mode [ 1347.341921][ T2683] wg1 speed is unknown, defaulting to 1000 [ 1347.344809][ T2683] lo speed is unknown, defaulting to 1000 [ 1348.266853][T29391] Bluetooth: hci3: command tx timeout [ 1348.630583][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1348.674431][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1348.686528][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1348.692538][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1348.733284][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1349.436185][T22209] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1349.625987][T22209] usb 6-1: Using ep0 maxpacket: 16 [ 1349.628744][T22209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 1349.628799][T22209] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1349.628824][T22209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.679508][T22209] usb 6-1: config 0 descriptor?? [ 1350.199768][T22209] hid-alps 0003:044E:120B.0028: hidraw0: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.5-1/input0 [ 1350.347983][ T59] Bluetooth: hci3: command tx timeout [ 1350.448168][T22209] usb 6-1: USB disconnect, device number 22 [ 1350.644504][ T2723] fido_id[2723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1350.764245][ T2717] virt_wifi0 speed is unknown, defaulting to 1000 [ 1350.780340][ T2717] lo speed is unknown, defaulting to 1000 [ 1350.826794][ T59] Bluetooth: hci6: command tx timeout [ 1351.226370][ T2683] chnl_net:caif_netlink_parms(): no params data found [ 1351.340326][ T38] audit: type=1326 audit(2000000607.059:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3ff9eba9 code=0x7ffc0000 [ 1351.340385][ T38] audit: type=1326 audit(2000000607.059:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3ff9eba9 code=0x7ffc0000 [ 1351.407512][ T38] audit: type=1326 audit(2000000607.129:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbf3ff9eba9 code=0x7ffc0000 [ 1351.441276][ T38] audit: type=1326 audit(2000000607.159:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf3ff9ebe3 code=0x7ffc0000 [ 1351.441337][ T38] audit: type=1326 audit(2000000607.159:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf3ff9ebe3 code=0x7ffc0000 [ 1351.441386][ T38] audit: type=1326 audit(2000000607.159:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3ff9eba9 code=0x7ffc0000 [ 1351.441435][ T38] audit: type=1326 audit(2000000607.159:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3ff9eba9 code=0x7ffc0000 [ 1351.577300][ T38] audit: type=1326 audit(2000000607.299:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fbf3ff9eba9 code=0x7ffc0000 [ 1351.578861][ T38] audit: type=1326 audit(2000000607.299:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2728 comm="syz.5.13681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3ff9eba9 code=0x7ffc0000 [ 1351.920382][T29391] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1351.940956][T29391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1351.945455][T29391] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1351.995935][T29391] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1352.002822][T29391] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1352.425948][T29391] Bluetooth: hci3: command tx timeout [ 1352.921492][T29391] Bluetooth: hci6: command tx timeout [ 1354.106093][T29391] Bluetooth: hci7: command tx timeout [ 1354.495675][ C1] sched: DL replenish lagged too much [ 1354.506398][T29391] Bluetooth: hci3: command tx timeout [ 1354.986364][T29391] Bluetooth: hci6: command tx timeout [ 1356.186755][T29391] Bluetooth: hci7: command tx timeout [ 1357.066102][T29391] Bluetooth: hci6: command tx timeout [ 1358.267002][T29391] Bluetooth: hci7: command tx timeout [ 1360.346367][T29391] Bluetooth: hci7: command tx timeout [ 1362.038530][ T2717] wg1 speed is unknown, defaulting to 1000 [ 1374.396241][ T5906] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1374.546398][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 1374.566296][ T5906] usb 7-1: config 12 has an invalid interface number: 212 but max is 0 [ 1374.566328][ T5906] usb 7-1: config 12 has no interface number 0 [ 1374.569968][ T5906] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 1374.570000][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.570022][ T5906] usb 7-1: Product: syz [ 1374.570038][ T5906] usb 7-1: Manufacturer: syz [ 1374.570055][ T5906] usb 7-1: SerialNumber: syz [ 1374.670758][ T5906] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 1374.670821][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 1374.699056][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1374.733695][ T5906] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 1374.733765][ T5906] usb 7-1: media controller created [ 1374.811483][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1374.859975][ T2788] dvb-usb: bulk message failed: -22 (4/0) [ 1374.860000][ T2788] cxusb: i2c read failed [ 1374.907536][T29391] Bluetooth: hci2: command 0x0405 tx timeout [ 1374.938535][ T5906] cxusb: set interface failed [ 1374.938558][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 1374.938580][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 1374.938602][ T5906] usb 7-1: bluebird_gpio_write failed. [ 1374.975572][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 1374.975603][ T5906] usb 7-1: bluebird_gpio_write failed. [ 1375.120689][ T5906] DVB: Unable to find symbol dib7000p_attach() [ 1375.120708][ T5906] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 1375.305927][ T5906] rc_core: IR keymap rc-dvico-mce not found [ 1375.305951][ T5906] Registered IR keymap rc-empty [ 1375.307884][ T5906] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1375.311255][ T5906] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input108 [ 1375.370532][ T5906] dvb-usb: schedule remote query interval to 100 msecs. [ 1375.370558][ T5906] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 1375.425988][ T5906] usb 7-1: USB disconnect, device number 9 [ 1375.717877][ T2799] netlink: 104 bytes leftover after parsing attributes in process `syz.6.13699'. [ 1383.424312][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1383.464511][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1383.474266][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1383.483992][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1383.496755][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1386.985883][ T5155] Bluetooth: hci0: command tx timeout [ 1389.066310][ T5155] Bluetooth: hci0: command tx timeout [ 1391.145940][ T5155] Bluetooth: hci0: command tx timeout [ 1391.850166][T29391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1391.885396][T29391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1391.896064][T29391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1391.897833][T29391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1391.900175][T29391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1393.227194][T29391] Bluetooth: hci0: command tx timeout [ 1393.490219][ T5906] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 1394.025845][ T59] Bluetooth: hci1: command tx timeout [ 1396.106096][ T59] Bluetooth: hci1: command tx timeout [ 1398.186324][ T59] Bluetooth: hci1: command tx timeout [ 1400.265955][ T59] Bluetooth: hci1: command tx timeout [ 1402.275451][ T2575] bond0: (slave syz_tun): Releasing backup interface [ 1405.138276][T29391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1405.180896][T29391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1405.202534][T29391] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1405.203977][T29391] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1405.233171][T29391] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1407.306297][T29391] Bluetooth: hci4: command tx timeout [ 1409.220642][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1409.274858][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1409.287184][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1409.288644][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1409.303707][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1409.389633][ T59] Bluetooth: hci4: command tx timeout [ 1411.234026][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1411.268570][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1411.273085][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1411.296362][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1411.299874][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1411.465993][ T59] Bluetooth: hci4: command tx timeout [ 1411.866896][ T59] Bluetooth: hci8: command tx timeout [ 1413.386019][ T59] Bluetooth: hci9: command tx timeout [ 1413.546483][ T59] Bluetooth: hci4: command tx timeout [ 1413.946012][ T59] Bluetooth: hci8: command tx timeout [ 1415.466317][ T59] Bluetooth: hci9: command tx timeout [ 1416.026173][ T59] Bluetooth: hci8: command tx timeout [ 1417.548806][ T59] Bluetooth: hci9: command tx timeout [ 1418.105951][ T59] Bluetooth: hci8: command tx timeout [ 1419.626684][ T59] Bluetooth: hci9: command tx timeout [ 1443.525378][T29391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1443.586205][T29391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1443.590111][T29391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1443.593200][T29391] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1443.594433][T29391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1445.712342][ T59] Bluetooth: hci2: command tx timeout [ 1447.786112][ T59] Bluetooth: hci2: command tx timeout [ 1449.866468][ T59] Bluetooth: hci2: command tx timeout [ 1451.946029][ T59] Bluetooth: hci2: command tx timeout [ 1452.164113][T29391] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1452.201621][T29391] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1452.204721][T29391] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1452.221140][T29391] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1452.222174][T29391] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1454.345901][ T59] Bluetooth: hci10: command tx timeout [ 1456.425922][ T59] Bluetooth: hci10: command tx timeout [ 1458.506277][ T59] Bluetooth: hci10: command tx timeout [ 1460.585961][ T59] Bluetooth: hci10: command tx timeout [ 1465.994213][T29391] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1466.038052][T29391] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1466.054202][T29391] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1466.090056][T29391] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1466.106689][T29391] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1468.186332][ T59] Bluetooth: hci11: command tx timeout [ 1469.849916][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1469.896483][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1469.903834][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1469.921233][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1469.922810][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1470.266272][ T672] Bluetooth: hci11: command tx timeout [ 1471.053600][ T5155] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1471.100096][ T5155] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1471.101827][ T5155] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1471.125819][ T5155] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1471.126840][ T5155] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1472.026001][ T672] Bluetooth: hci12: command tx timeout [ 1472.197123][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 1472.197168][ T5155] Bluetooth: hci6: command 0x0406 tx timeout [ 1472.347626][ T672] Bluetooth: hci11: command tx timeout [ 1473.146440][ T672] Bluetooth: hci13: command tx timeout [ 1474.106338][ T672] Bluetooth: hci12: command tx timeout [ 1474.425935][ T672] Bluetooth: hci11: command tx timeout [ 1475.250595][ T5155] Bluetooth: hci13: command tx timeout [ 1476.187214][ T672] Bluetooth: hci12: command tx timeout [ 1477.317286][ T672] Bluetooth: hci7: command 0x0406 tx timeout [ 1477.317330][ T672] Bluetooth: hci13: command tx timeout [ 1478.265958][ T2858] Bluetooth: hci12: command tx timeout [ 1479.395115][ T2858] Bluetooth: hci13: command tx timeout [ 1503.395797][ T39] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 1503.395831][ T39] Not tainted syzkaller #0 [ 1503.395844][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1503.395858][ T39] task:kworker/u8:0 state:D stack:19720 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1503.395920][ T39] Workqueue: events_unbound bpf_map_free_deferred [ 1503.395958][ T39] Call Trace: [ 1503.395966][ T39] [ 1503.395981][ T39] __schedule+0x16f3/0x4c20 [ 1503.396047][ T39] ? __pfx___schedule+0x10/0x10 [ 1503.396100][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1503.396138][ T39] rt_mutex_schedule+0x77/0xf0 [ 1503.396161][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1503.396189][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1503.396237][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1503.396268][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1503.396320][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1503.396345][ T39] ? __lock_acquire+0xab9/0xd20 [ 1503.396390][ T39] ? rcu_barrier+0x4c/0x570 [ 1503.396416][ T39] ? __lock_acquire+0xab9/0xd20 [ 1503.396456][ T39] ? rcu_barrier+0x4c/0x570 [ 1503.396477][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1503.396504][ T39] ? synchronize_rcu+0x11a/0x310 [ 1503.396531][ T39] rcu_barrier+0x4c/0x570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1503.396567][ T39] dev_map_free+0x11f/0x6a0 [ 1503.396619][ T39] bpf_map_free_deferred+0x110/0x140 [ 1503.396646][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1503.396676][ T39] process_scheduled_works+0xade/0x17b0 [ 1503.396738][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1503.396788][ T39] worker_thread+0x8a0/0xda0 [ 1503.396849][ T39] kthread+0x70e/0x8a0 [ 1503.396889][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1503.396918][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.396958][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.396993][ T39] ret_from_fork+0x439/0x7d0 [ 1503.397027][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.397065][ T39] ? __switch_to_asm+0x39/0x70 [ 1503.397086][ T39] ? __switch_to_asm+0x33/0x70 [ 1503.397107][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.397142][ T39] ret_from_fork_asm+0x1a/0[ 1503.397142][ T39] ret_from_fork_asm+0x1a/0x30 [ 1503.397182][ T39] [ 1503.397200][ T39] INFO: task kworker/u8:2:37 blocked for more than 143 seconds. [ 1503.397216][ T39] Not tainted syzkaller #0 [ 1503.397229][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1503.397240][ T39] task:kworker/u8:2 state:D stack:20200 pid:37 tgid:37 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1503.397298][ T39] Workqueue: events_unbound free_mem_alloc_deferred [ 1503.397325][ T39] Call Trace: [ 1503.397334][ T39] [ 1503.397348][ T39] __schedule+0x16f3/0x4c20 [ 1503.397389][ T39] ? sched_clock+0x3f/0x60 [ 1503.397415][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1503.397454][ T39] ? __pfx___schedule+0x10/0x10 [ 1503.397513][ T39] rt_mutex_schedule+0x77/0xf0 [ 1503.397534][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1503.397587][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1503.397620][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1503.397651][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1503.397680][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1503.397720][ T39] ? rcu_barrier+0x4c/0x570 [ 1503.397751][ T39] ? __lock_acquire+0xab9/0xd20 [ 1503.397786][ T39] ? rcu_barrier+0x4c/0x570 [ 1503.397807][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1503.397840][ T39] rcu_barrier+0x4c/0x570 [ 1503.397868][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1503.397905][ T39] free_mem_alloc_deferred+0x16/0x30 [ 1503.397931][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1503.397957][ T39] process_scheduled_works+0xade/0x17b0 [ 1503.398020][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1503.398069][ T39] worker_thread+0x8a0/0xda0 [ 1503.398115][ T39] ? __kthread_parkme+0x7b/0x200 [ 1503.398157][ T39] kthread+0x70e/0x8a0 [ 1503.398194][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1503.398223][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.398263][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.398298][ T39] ret_from_fork+0x439/0x7d0 [ 1503.398332][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.398368][ T39] ? __switch_to_asm+0x39/0x70 [ 1503.398389][ T39] ? __switch_to_asm+0x33/0x70 [ 1503.398409][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.398443][ T39] ret_from_fork_asm+0x1a/0x30 [ 1503.398485][ T39] [ 1503.398617][ T39] INFO: task kworker/u8:14:15552 blocked for more than 143 seconds. [ 1503.398634][ T39] Not tainted syzkaller #0 [ 1503.398646][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1503.398656][ T39] task:kworker/u8:14 state:D stack:19880 pid:15552 tgid:15552 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1503.398714][ T39] Workqueue: events_unbound free_mem_alloc_deferred [ 1503.398741][ T39] Call Trace: [ 1503.398749][ T39] [ 1503.398764][ T39] __schedule+0x16f3/0x4c20 [ 1503.398821][ T39] ? __lock_acquire+0xab9/0xd20 [ 1503.398852][ T39] ? __pfx___schedule+0x10/0x10 [ 1503.398904][ T39] ? schedule+0x91/0x360 [ 1503.398941][ T39] schedule+0x165/0x360 [ 1503.398974][ T39] schedule_timeout+0x9a/0x270 [ 1503.399006][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 1503.399051][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1503.399084][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1503.399116][ T39] ? wait_for_completion+0x267/0x5d0 [ 1503.399151][ T39] wait_for_completion+0x2bf/0x5d0 [ 1503.399200][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 1503.399235][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1503.399269][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1503.399307][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 1503.399339][ T39] rcu_barrier+0x463/0x570 [ 1503.399375][ T39] free_mem_alloc_deferred+0x16/0x30 [ 1503.399400][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1503.399427][ T39] process_scheduled_works+0xade/0x17b0 [ 1503.399490][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1503.399539][ T39] worker_thread+0x8a0/0xda0 [ 1503.399628][ T39] kthread+0x70e/0x8a0 [ 1503.399667][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1503.399696][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.399735][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.399772][ T39] ret_from_fork+0x439/0x7d0 [ 1503.399805][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.399842][ T39] ? __switch_to_asm+0x39/0x70 [ 1503.399862][ T39] ? __switch_to_asm+0x33/0x70 [ 1503.399882][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.399917][ T39] ret_from_fork_asm+0x1a/0x30 [ 1503.399958][ T39] [ 1503.400011][ T39] [ 1503.400011][ T39] Showing all locks held in the system: [ 1503.400024][ T39] 3 locks held by kworker/u8:0/12: [ 1503.400038][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1503.400108][ T39] #1: ffffc90000117bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1503.400166][ T39] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1503.400233][ T39] 7 locks held by ktimers/1/29: [ 1503.400248][ T39] 3 locks held by kworker/1:0/31: [ 1503.400261][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1503.400319][ T39] #1: ffffc90000a5fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1503.400376][ T39] #2: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1503.400431][ T39] 3 locks held by kworker/u8:2/37: [ 1503.400444][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1503.400503][ T39] #1: ffffc90000ac7bc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1503.400560][ T39] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1503.400621][ T39] 1 lock held by khungtaskd/39: [ 1503.400634][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1503.400706][ T39] 2 locks held by kworker/u8:12/3644: [ 1503.400721][ T39] 4 locks held by kworker/u9:1/5155: [ 1503.400734][ T39] #0: ffff888034759138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1503.400793][ T39] #1: ffffc9000f82fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1503.400851][ T39] #2: ffff888051488e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1503.400905][ T39] #3: ffff8880514880a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1503.400969][ T39] 2 locks held by getty/5593: [ 1503.400982][ T39] #0: ffff88823bf800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1503.401047][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1503.401110][ T39] 3 locks held by kworker/u8:14/15552: [ 1503.401123][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1503.401180][ T39] #1: ffffc9001f1c7bc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1503.401238][ T39] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1503.401290][ T39] 3 locks held by kworker/0:1/22209: [ 1503.401303][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1503.401361][ T39] #1: ffffc9000b7f7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1503.401420][ T39] #2: ffff88801aaf0b98 (&s->s_inode_list_lock){+.+.}-{3:3}, at: nr_blockdev_pages+0x2f/0x110 [ 1503.401475][ T39] 3 locks held by kworker/u8:1/23917: [ 1503.401488][ T39] #0: ffff88802fbbe138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1503.401545][ T39] #1: ffffc9001d5e7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1503.401611][ T39] #2: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1503.401673][ T39] 1 lock held by syz.0.13631/2575: [ 1503.401687][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1503.401740][ T39] 1 lock held by syz.2.13646/2619: [ 1503.401753][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1503.401805][ T39] 1 lock held by syz.3.13651/2637: [ 1503.401818][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1503.401879][ T39] 2 locks held by syz-executor/2683: [ 1503.401891][ T39] #0: ffffffff8f1d79e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1503.401960][ T39] #1: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1503.402017][ T39] 5 locks held by syz-executor/2717: [ 1503.402031][ T39] #0: ffffffff8ecc66c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1503.402089][ T39] #1: ffffffff8ea22ba0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1503.402146][ T39] #2: ffffffff8ea22de0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1503.402203][ T39] #3: ffff88805c585118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 1503.402261][ T39] #4: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 1503.402313][ T39] 1 lock held by syz-executor/2731: [ 1503.402327][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1503.402386][ T39] 3 locks held by kworker/u8:5/2740: [ 1503.402399][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1503.402455][ T39] #1: ffffc90005df7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1503.402511][ T39] #2: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1503.402562][ T39] 4 locks held by kworker/1:9/2744: [ 1503.402586][ T39] 1 lock held by syz.5.13694/2778: [ 1503.402599][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 1503.402657][ T39] 1 lock held by syz.6.13699/2799: [ 1503.402671][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1503.402732][ T39] 1 lock held by syz-executor/2801: [ 1503.402744][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.402797][ T39] 1 lock held by syz-executor/2804: [ 1503.402810][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.402864][ T39] 1 lock held by syz-executor/2810: [ 1503.402877][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.402930][ T39] 1 lock held by syz-executor/2818: [ 1503.402944][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.402996][ T39] 1 lock held by syz-executor/2823: [ 1503.403009][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.403062][ T39] 1 lock held by syz-executor/2826: [ 1503.403075][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.403128][ T39] 1 lock held by syz-executor/2831: [ 1503.403141][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.403194][ T39] 1 lock held by syz-executor/2844: [ 1503.403207][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.403260][ T39] 1 lock held by syz-executor/2850: [ 1503.403274][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.403327][ T39] 1 lock held by syz-executor/2857: [ 1503.403341][ T39] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1503.403392][ T39] 1 lock held by syz-executor/2862: [ 1503.403406][ T39] [ 1503.403413][ T39] ============================================= [ 1503.403413][ T39] [ 1503.403434][ T39] NMI backtrace for cpu 0 [ 1503.403458][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1503.403483][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1503.403496][ T39] Call Trace: [ 1503.403505][ T39] [ 1503.403514][ T39] dump_stack_lvl+0x189/0x250 [ 1503.403552][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1503.403589][ T39] ? __pfx__printk+0x10/0x10 [ 1503.403628][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1503.403660][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1503.403691][ T39] ? __pfx__printk+0x10/0x10 [ 1503.403720][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1503.403751][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1503.403783][ T39] watchdog+0xf93/0xfe0 [ 1503.403818][ T39] ? watchdog+0x1de/0xfe0 [ 1503.403853][ T39] kthread+0x70e/0x8a0 [ 1503.403889][ T39] ? __pfx_watchdog+0x10/0x10 [ 1503.403917][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.403956][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.403991][ T39] ret_from_fork+0x439/0x7d0 [ 1503.404023][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.404058][ T39] ? __switch_to_asm+0x39/0x70 [ 1503.404079][ T39] ? __switch_to_asm+0x33/0x70 [ 1503.404098][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.404132][ T39] ret_from_fork_asm+0x1a/0x30 [ 1503.404172][ T39] [ 1503.404181][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1503.404216][ C1] NMI backtrace for cpu 1 [ 1503.404232][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1503.404254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1503.404272][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 1503.404298][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d e4 c6 66 0b 48 89 de 5b e9 63 a3 54 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 f6 91 65 8b 35 08 d2 [ 1503.404314][ C1] RSP: 0018:ffffc90000a3ede8 EFLAGS: 00000206 [ 1503.404337][ C1] RAX: ffffffff88d80d56 RBX: ffff888084fd8500 RCX: ffff88801cac9dc0 [ 1503.404353][ C1] RDX: 0000000000000100 RSI: 00000000000002c0 RDI: 0000000000000000 [ 1503.404365][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000100 [ 1503.404377][ C1] R10: ffff888084fd8500 R11: ffffed10109fb0b9 R12: ffff88809aec2700 [ 1503.404392][ C1] R13: 0000000000000820 R14: 00000000000002c0 R15: 00000000000002c0 [ 1503.404404][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 1503.404420][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1503.404433][ C1] CR2: 000056067f71f4d8 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 1503.404451][ C1] Call Trace: [ 1503.404458][ C1] [ 1503.404466][ C1] __build_skb_around+0x30/0x3e0 [ 1503.404497][ C1] __alloc_skb+0x179/0x2d0 [ 1503.404526][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 1503.404562][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1503.404592][ C1] ? nft_tunnel_get_reduce+0x210/0x640 [ 1503.404618][ C1] ? synproxy_pernet+0x45/0x270 [ 1503.404642][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 1503.404665][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1503.404687][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1503.404710][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1503.404734][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1503.404754][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1503.404784][ C1] nft_do_chain+0x40c/0x1920 [ 1503.404811][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1503.404833][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 1503.404866][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 1503.404890][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1503.404917][ C1] nft_do_chain_inet+0x25d/0x340 [ 1503.404936][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1503.404963][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1503.404988][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1503.405008][ C1] nf_hook_slow+0xc2/0x220 [ 1503.405038][ C1] NF_HOOK+0x206/0x3a0 [ 1503.405064][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1503.405090][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1503.405114][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1503.405138][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1503.405166][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1503.405193][ C1] ? skb_dst+0x4f/0xd0 [ 1503.405218][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1503.405246][ C1] NF_HOOK+0x30c/0x3a0 [ 1503.405272][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1503.405297][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1503.405321][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1503.405353][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1503.405385][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1503.405409][ C1] __netif_receive_skb+0x143/0x380 [ 1503.405432][ C1] ? rt_spin_unlock+0x65/0x80 [ 1503.405457][ C1] ? process_backlog+0x27b/0x900 [ 1503.405481][ C1] process_backlog+0x31e/0x900 [ 1503.405512][ C1] __napi_poll+0xb6/0x540 [ 1503.405538][ C1] net_rx_action+0x707/0xe00 [ 1503.405579][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1503.405624][ C1] handle_softirqs+0x22f/0x710 [ 1503.405656][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1503.405686][ C1] run_ktimerd+0xcf/0x190 [ 1503.405711][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 1503.405738][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1503.405761][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 1503.405785][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1503.405807][ C1] smpboot_thread_fn+0x53f/0xa60 [ 1503.405832][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1503.405859][ C1] kthread+0x70e/0x8a0 [ 1503.405889][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1503.405912][ C1] ? __pfx_kthread+0x10/0x10 [ 1503.405943][ C1] ? __pfx_kthread+0x10/0x10 [ 1503.405971][ C1] ret_from_fork+0x439/0x7d0 [ 1503.405997][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.406023][ C1] ? __switch_to_asm+0x39/0x70 [ 1503.406041][ C1] ? __switch_to_asm+0x33/0x70 [ 1503.406057][ C1] ? __pfx_kthread+0x10/0x10 [ 1503.406086][ C1] ret_from_fork_asm+0x1a/0x30 [ 1503.406112][ C1] [ 1503.666612][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1503.666637][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1503.666665][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1503.666680][ T39] Call Trace: [ 1503.666689][ T39] [ 1503.666700][ T39] dump_stack_lvl+0x99/0x250 [ 1503.666740][ T39] ? __asan_memcpy+0x40/0x70 [ 1503.666765][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1503.666798][ T39] ? __pfx__printk+0x10/0x10 [ 1503.666838][ T39] vpanic+0x281/0x750 [ 1503.666874][ T39] ? __pfx_vpanic+0x10/0x10 [ 1503.666907][ T39] ? preempt_schedule+0xae/0xc0 [ 1503.666941][ T39] ? preempt_schedule_common+0x83/0xd0 [ 1503.666981][ T39] panic+0xb9/0xc0 [ 1503.667012][ T39] ? __pfx_panic+0x10/0x10 [ 1503.667048][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 1503.667082][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1503.667115][ T39] watchdog+0xfd2/0xfe0 [ 1503.667151][ T39] ? watchdog+0x1de/0xfe0 [ 1503.667186][ T39] kthread+0x70e/0x8a0 [ 1503.667225][ T39] ? __pfx_watchdog+0x10/0x10 [ 1503.667254][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.667293][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.667329][ T39] ret_from_fork+0x439/0x7d0 [ 1503.667362][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.667398][ T39] ? __switch_to_asm+0x39/0x70 [ 1503.667419][ T39] ? __switch_to_asm+0x33/0x70 [ 1503.667439][ T39] ? __pfx_kthread+0x10/0x10 [ 1503.667475][ T39] ret_from_fork_asm+0x1a/0x30 [ 1503.667515][ T39] [ 1503.667849][ T39] Kernel Offset: disabled