last executing test programs: 34.189498443s ago: executing program 4 (id=11516): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000010c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0xd8, 0x4001}}], 0x2, 0x193bc0d8627a41f8) 34.130651697s ago: executing program 4 (id=11519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x74}}, 0x0) 33.965454703s ago: executing program 4 (id=11521): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x20000000) 33.907630768s ago: executing program 3 (id=11522): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[], 0x28) 33.680751101s ago: executing program 3 (id=11523): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x2) 33.545794389s ago: executing program 4 (id=11524): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x534}, {&(0x7f0000000400)=""/106, 0x500}, {&(0x7f0000000000)=""/66, 0x6a}, {&(0x7f0000000300)=""/83, 0x63c}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x208, &(0x7f0000000600)=""/191, 0x41}}], 0x3fffffffffffc30, 0x0, &(0x7f0000003700)={0x77359400}) 33.463308549s ago: executing program 3 (id=11525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="df482abd7000000000000c0000002c00038028000380140001800500020000000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) 33.239077514s ago: executing program 4 (id=11526): r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101270000090400000602060000052406000005240000000d240f010000000000000000000905820208020000000905030240"], 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) 33.123405362s ago: executing program 3 (id=11528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.967127073s ago: executing program 3 (id=11529): socket$rds(0x15, 0x5, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102389, &(0x7f0000000100)=0x18ff5) 31.871977348s ago: executing program 3 (id=11530): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000300)={0x4, 0x7, 0x8ac, 0x9, 0x6, "428949511a70bbc0"}) 29.9571217s ago: executing program 4 (id=11537): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0xc008744c, 0x2000000c) 26.618500157s ago: executing program 1 (id=11561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) 26.461089181s ago: executing program 1 (id=11563): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 26.355951307s ago: executing program 1 (id=11564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1000}]}]}]}, 0x38}}, 0x0) 26.248686644s ago: executing program 1 (id=11565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r1, 0x4}, 0x38) 26.128739124s ago: executing program 1 (id=11566): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0xd, "a3fc58d42c678e558d206c95a4"}, 0x0, 0x0, 0x0, 0x0}) 24.183325409s ago: executing program 1 (id=11577): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000380)=""/263, 0x107}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/226, 0x126}, {&(0x7f00000007c0)=""/172, 0xac}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4073, 0xfe9}], 0xc}, 0x0) 20.236012704s ago: executing program 2 (id=11593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09000000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x64}}, 0x0) 20.10726302s ago: executing program 2 (id=11594): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000004c0)="04", 0x1) 16.617198344s ago: executing program 2 (id=11599): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udplite6\x00') lseek(r0, 0xd7, 0x0) preadv2(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x9e2, 0x3, 0x1) 16.440636186s ago: executing program 2 (id=11600): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x2101) pread64(r0, &(0x7f0000000340)=""/109, 0x6d, 0x0) 16.259136694s ago: executing program 2 (id=11601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 16.062384482s ago: executing program 2 (id=11602): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) 3.842146504s ago: executing program 0 (id=11621): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x200040, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 3.669668264s ago: executing program 0 (id=11622): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 366.975266ms ago: executing program 0 (id=11623): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x8d8, 0x2c, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {0x9, 0xa}, {0xfff2, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pimreg\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_bpf={{0x8}, {0x868, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x1d, 0x3, 0x1, 0x8}, {0x2, 0x6, 0x40, 0xfffffff7}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x838, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x63b, 0x7, 0xfff, 0x8001, 0x7, 0x1, 0x3b0517f4, 0x3, 0x200, 0x1, 0x2, 0xde, 0x92b6, 0x3ff, 0x2, 0x0, 0xffffff12, 0xfffffff7, 0x3, 0x101, 0x8000, 0x9, 0x0, 0xb, 0xd, 0xffffffff, 0xffff4711, 0x5, 0x7, 0x9, 0x10001, 0x8, 0x4, 0x6, 0x6, 0x6, 0x100, 0x8001, 0x5, 0x9, 0x3, 0x9, 0x4, 0x80, 0x5, 0x6, 0x7fff, 0x3, 0x2, 0x2, 0xc, 0xefc, 0x0, 0x6, 0x6, 0xf0b, 0x5a, 0x7, 0x9b, 0x5, 0x7, 0x1, 0x9, 0x81, 0x1e, 0xfff, 0xffffffff, 0x3, 0x3, 0x3, 0x4d6ba80d, 0x80000000, 0x4, 0xa, 0x8, 0x8, 0x121f, 0x3, 0xa, 0x1ff, 0x1ff, 0x0, 0x86f3, 0x0, 0x2, 0x5, 0x10000, 0x0, 0xd, 0x3, 0x3, 0x77cd, 0x4, 0x9, 0x7, 0x5, 0x7, 0x9, 0x9, 0x80, 0x3, 0x2, 0xfff, 0x4, 0x5, 0x23f1, 0x0, 0xb3d, 0x8, 0x2, 0x5e, 0x2, 0x2cc, 0x1, 0x2, 0x9, 0x3, 0x80, 0x0, 0xffffff81, 0x7, 0x8, 0x0, 0x100, 0x9481, 0x1, 0x9, 0x2, 0x1, 0x5, 0xbbc, 0x8, 0x5, 0x4, 0x3, 0xfffffffe, 0xa193, 0x5, 0x81, 0x8, 0x7, 0x9, 0x101, 0x9, 0x7, 0x99, 0x2, 0x8, 0x7, 0x800, 0x4, 0x9, 0x1a8, 0x8, 0x6, 0x7, 0x6, 0x5, 0x4, 0x9, 0x2, 0x8001, 0x1, 0xa700000, 0x4, 0x8, 0x2, 0x3, 0x1a1db800, 0x4, 0x85, 0x10001, 0x2, 0x382, 0xc1, 0x3, 0x8, 0x0, 0x10000, 0x3, 0x5ca, 0x1, 0x8, 0xb, 0x67b, 0x151, 0x40, 0x2, 0x7, 0x6, 0x9, 0xf, 0x0, 0xfffffffa, 0x8, 0x5a6ff6c0, 0x7, 0x0, 0xb6ee, 0x340, 0x2, 0x2b461cf7, 0x44, 0xeffe, 0x3, 0x5, 0xd, 0x2, 0x0, 0x3, 0x200, 0x6, 0xe5000000, 0x5, 0x6, 0x1000, 0xff, 0x3, 0x1, 0x9, 0x2, 0x4, 0x99, 0x9, 0x0, 0xf41, 0x1, 0x1, 0x9, 0xcf11, 0x65, 0x4, 0x8, 0x3, 0x3, 0x6, 0x0, 0x4, 0x8, 0x6, 0x0, 0x7fff, 0x6, 0x7fffffff, 0x2, 0x4, 0x0, 0x100, 0x3, 0x8001, 0x3, 0x2, 0x0, 0x41d, 0x7, 0x1]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x2, 0x0, 0x5, 0x3, 0xffffff12, 0x1, 0xffff, 0x2, 0x58, 0x7ff, 0xc0000, 0x2f4d9dd, 0x9, 0xeff, 0x810, 0x9, 0x0, 0x800, 0x0, 0x1, 0x0, 0xd, 0x2, 0x6, 0x5, 0x5, 0x15, 0xace9, 0x5697, 0x2c, 0x8, 0x4, 0x0, 0x3, 0x80000000, 0xfffffff8, 0x5, 0x100, 0xfffffffb, 0x9, 0x6, 0x4ba6, 0x9, 0x8, 0x4, 0x0, 0xfffeffff, 0xff, 0x1, 0x7, 0x5, 0x1, 0xa0, 0x5, 0x0, 0x0, 0xfffff1a5, 0x585, 0x7, 0x1df2, 0x2, 0x7fff, 0x4000, 0x58e, 0x8, 0xfffffff8, 0x3, 0x3, 0x6, 0x9, 0x9, 0x3, 0x401, 0xff, 0x0, 0x7, 0x9, 0x9, 0x9, 0x8, 0x0, 0x8, 0xfffffffc, 0x10001, 0x76, 0x7, 0x6, 0x4, 0x5, 0x1000, 0x9, 0x80, 0x7, 0xd1, 0x400, 0xe, 0x8, 0x20d7, 0x9, 0x2, 0x4, 0x5, 0x7ff, 0x6, 0x3, 0x7, 0x200, 0x101, 0x2e50, 0x3ff, 0x63c774f1, 0xd, 0x9, 0x3, 0xffffffff, 0x4, 0x2, 0x3, 0x7, 0x49, 0xfffffffb, 0x3ff, 0x2, 0x40, 0x3, 0x11fd14a0, 0x39, 0xfff, 0x7ff, 0xac14, 0x0, 0x0, 0x1, 0x6, 0x7f, 0x4e, 0x3, 0x200, 0x0, 0x2, 0x2, 0x4, 0x1ff, 0x3, 0x615, 0xb24, 0xc9, 0xd, 0x5, 0xca1, 0xfffffffa, 0x7, 0x1ff, 0x40, 0x1, 0x3ff, 0x8, 0x5, 0x9, 0x2d, 0xcd7, 0xb1, 0x6, 0x9f, 0x1, 0x9, 0x100, 0x4, 0xfffffffc, 0x7fff, 0xffff, 0x6, 0x70, 0x5, 0xdb, 0x6, 0x401, 0x1000, 0x7, 0x8001, 0x80000001, 0x8, 0x3a2a, 0x6, 0x8, 0x7fff, 0x8, 0x6, 0x3, 0x4, 0x80, 0x5, 0xa000000, 0x0, 0x1, 0x6, 0xffff, 0x1, 0x1, 0x0, 0x7, 0xe4b3, 0x3, 0x7, 0x1, 0x0, 0xe03, 0x3, 0x723b, 0xd87a, 0xa8, 0x7fff, 0x50e1, 0x9, 0x5, 0x7, 0x0, 0x6847, 0x3ff, 0x8001, 0x401, 0x9, 0x1, 0xb, 0x7, 0x6, 0xffff9070, 0x80, 0x5, 0x0, 0xffffffd8, 0xa3, 0x4, 0x8, 0x8, 0x3, 0x800, 0x94, 0x5, 0x9, 0xded, 0xffb, 0x7, 0x20000000, 0x1fffe00, 0x4, 0x9, 0xa43, 0x282, 0x0, 0x4, 0xee4, 0x486ed29, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x200c1}, 0x1010) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc601000127a0a000600093582c137153e37080c18800dac0f000300", 0x33fe0}], 0x1}, 0x0) 241.596605ms ago: executing program 0 (id=11624): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d0}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 112.450114ms ago: executing program 0 (id=11625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r1}, 0x20) 0s ago: executing program 0 (id=11626): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8926, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) kernel console output (not intermixed with test programs): 0 descriptor?? [ 595.972744][ T5266] usb 3-1: USB disconnect, device number 11 [ 596.219864][T26682] program syz.1.10207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.538812][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10215'. [ 596.836127][T26717] [U]  [ 597.153018][T26732] xt_CT: No such helper "syz1" [ 597.378577][T26750] Invalid logical block size (17) [ 597.543860][T26758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10243'. [ 597.569439][T26758] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10243'. [ 597.592662][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10243'. [ 598.095358][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10255'. [ 598.145437][T26786] tipc: MTU too low for tipc bearer [ 598.284795][T26794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10260'. [ 598.440964][T26802] futex_wake_op: syz.2.10264 tries to shift op by 144; fix this program [ 599.091800][T26827] openvswitch: netlink: Actions may not be safe on all matching packets [ 599.277646][T26831] program syz.1.10277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.281626][T26832] program syz.0.10278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.875186][T26850] use of bytesused == 0 is deprecated and will be removed in the future, [ 599.893090][T26850] use the actual size instead. [ 599.946398][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 600.138871][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.162120][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.176165][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 600.185388][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.217470][ T25] usb 2-1: config 0 descriptor?? [ 600.283109][T26868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10296'. [ 600.638308][ T25] wacom 0003:056A:00B0.0014: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 600.655160][ T25] wacom 0003:056A:00B0.0014: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0 [ 600.678311][ T25] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.0014/input/input93 [ 600.796408][ T5722] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 600.850142][ T5267] usb 2-1: USB disconnect, device number 27 [ 600.958440][ T5722] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 600.968061][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.978499][ T5722] usb 3-1: config 0 descriptor?? [ 600.987213][ T5722] cp210x 3-1:0.0: cp210x converter detected [ 601.136649][ T5218] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 601.286337][ T5218] usb 5-1: Using ep0 maxpacket: 16 [ 601.293531][ T5218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.306353][ T5218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.316871][ T5218] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 601.326057][ T5218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.347295][ T5218] usb 5-1: config 0 descriptor?? [ 601.616924][ T5722] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 601.624700][ T5722] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 601.653863][ T5722] usb 3-1: cp210x converter now attached to ttyUSB0 [ 601.676578][ T5722] usb 3-1: USB disconnect, device number 12 [ 601.698660][ T5722] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 601.708151][ T5722] cp210x 3-1:0.0: device disconnected [ 601.794120][ T5218] hid-led 0003:1294:1320.0015: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 601.826055][ T5218] hid-led 0003:1294:1320.0015: Riso Kagaku Webmail Notifier initialized [ 601.968095][ T5722] usb 5-1: USB disconnect, device number 3 [ 601.981167][ T5296] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 601.998406][ T5296] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 602.014797][ T5296] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 602.951731][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 602.986440][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.008766][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.027068][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.034640][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.057737][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.065234][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.103852][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.121817][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.140412][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.158997][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.169404][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.180202][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.188528][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.198576][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.209485][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.218227][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.226126][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.233967][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.242114][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.250096][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.258509][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.265991][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.274194][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.289603][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.297154][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.305169][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.313219][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.320978][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.329316][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.355233][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.377062][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.399379][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.412895][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.420905][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.429472][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.437948][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.445539][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.475071][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.494930][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.504065][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.514730][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.522377][ T5296] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 603.543681][ T5296] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 603.663414][T26982] netlink: 'syz.1.10351': attribute type 322 has an invalid length. [ 603.946582][ T5218] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 604.107018][ T5218] usb 3-1: Using ep0 maxpacket: 16 [ 604.114275][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.126394][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.135397][T27007] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 604.146788][ T5218] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 604.165185][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.179227][T24682] cxacru 4-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 604.210493][ T5218] usb 3-1: config 0 descriptor?? [ 604.486839][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 604.639800][ T5218] hid-alps 0003:044E:120C.0017: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 604.652530][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 604.673120][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.701896][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.721420][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.769491][ T8] usb 4-1: string descriptor 0 read error: -71 [ 604.775814][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 604.786604][ T8] usb 4-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 604.807367][ T8] usb 4-1: config 0 descriptor?? [ 604.816735][ T8] usb 4-1: can't set config #0, error -71 [ 604.843106][ T8] usb 4-1: USB disconnect, device number 11 [ 604.865917][ T5218] usb 3-1: USB disconnect, device number 13 [ 605.276805][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 605.307157][T27051] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 605.418719][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 605.441799][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 605.462418][ T8] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 605.471812][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.489660][ T8] usb 4-1: config 0 descriptor?? [ 605.509593][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.816171][ T8] usb 4-1: USB disconnect, device number 12 [ 605.965232][T27076] netlink: 'syz.1.10394': attribute type 1 has an invalid length. [ 605.975583][T27076] openvswitch: netlink: Actions may not be safe on all matching packets [ 606.567247][ T5296] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 606.634401][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10413'. [ 606.739141][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.750907][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.770570][ T5296] usb 5-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 606.793176][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.813942][ T5296] usb 5-1: config 0 descriptor?? [ 607.197722][ T5722] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 607.221256][T27140] netlink: 'syz.1.10427': attribute type 2 has an invalid length. [ 607.229585][T27140] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10427'. [ 607.243321][ T5296] wacom 0003:056A:00E3.0018: unknown main item tag 0x0 [ 607.250426][ T5296] wacom 0003:056A:00E3.0018: unknown main item tag 0x0 [ 607.257538][ T5296] wacom 0003:056A:00E3.0018: unknown main item tag 0x0 [ 607.264531][ T5296] wacom 0003:056A:00E3.0018: unknown main item tag 0x0 [ 607.271675][ T5296] wacom 0003:056A:00E3.0018: unknown main item tag 0x0 [ 607.278915][ T5296] wacom 0003:056A:00E3.0018: unknown main item tag 0x0 [ 607.285859][ T5296] wacom 0003:056A:00E3.0018: unknown main item tag 0x0 [ 607.298680][ T5296] wacom 0003:056A:00E3.0018: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.4-1/input0 [ 607.389156][ T5722] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 607.398133][ T5722] usb 3-1: config 4 has no interface number 0 [ 607.409525][ T5722] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 607.418940][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.427656][ T5722] usb 3-1: Product: syz [ 607.432890][ T5722] usb 3-1: Manufacturer: syz [ 607.437680][ T5722] usb 3-1: SerialNumber: syz [ 607.454636][ T5722] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 607.474695][ T5296] usb 5-1: USB disconnect, device number 4 [ 607.627122][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 607.651375][ T5722] vp7045: USB control message 'out' went wrong. [ 607.661890][ T5722] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 607.672685][ T5722] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 607.703891][ T5722] usb 3-1: USB disconnect, device number 14 [ 607.764919][T27155] tipc: Enabling of bearer rejected, failed to enable media [ 607.827081][ T8] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 607.838323][ T8] usb 2-1: config 0 has no interface number 0 [ 607.844501][ T8] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.868907][ T8] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.879617][ T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 607.890068][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.903207][ T8] usb 2-1: config 0 descriptor?? [ 608.340112][ T8] uclogic 0003:256C:006D.0019: interface is invalid, ignoring [ 608.417566][ T5266] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 608.550617][ T8] usb 2-1: USB disconnect, device number 28 [ 608.567778][ T5266] usb 4-1: Using ep0 maxpacket: 8 [ 608.575681][ T5266] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 608.596296][ T5266] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 608.614021][ T5266] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 608.624230][ T5266] usb 4-1: Product: syz [ 608.635920][ T5266] usb 4-1: Manufacturer: syz [ 608.642124][ T5266] usb 4-1: SerialNumber: syz [ 608.882826][ T5266] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 608.891387][ T5266] usb 4-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 608.900595][ T5266] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 608.908768][ T5266] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 609.084462][ T5266] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 609.093255][ T5266] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 609.103620][ T5266] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 609.115287][ T5266] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 609.127739][ T5266] usb 4-1: USB disconnect, device number 13 [ 609.186678][ T5266] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 609.216901][ T5266] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 609.246735][ T5266] visor 4-1:1.0: device disconnected [ 609.777345][ T5266] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 609.937399][ T5266] usb 2-1: Using ep0 maxpacket: 16 [ 609.939533][T27233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10467'. [ 609.945053][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.975837][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.992957][ T5266] usb 2-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 610.007822][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.034884][ T5266] usb 2-1: config 0 descriptor?? [ 610.466711][ T5266] wacom 0003:056A:032F.001A: unknown main item tag 0x0 [ 610.492336][ T5266] wacom 0003:056A:032F.001A: unknown main item tag 0x0 [ 610.506870][ T5266] wacom 0003:056A:032F.001A: unknown main item tag 0x0 [ 610.523092][ T5266] wacom 0003:056A:032F.001A: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.1-1/input0 [ 610.537915][ T5296] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 610.666951][ T8] usb 2-1: USB disconnect, device number 29 [ 610.689679][ T5296] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 610.699496][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.716564][ T5296] usb 4-1: config 0 descriptor?? [ 610.725616][ T5296] cp210x 4-1:0.0: cp210x converter detected [ 611.140800][ T5296] usb 4-1: cp210x converter now attached to ttyUSB0 [ 611.324170][ T29] audit: type=1326 audit(2000000321.163:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27264 comm="syz.1.10484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 611.355205][ T5296] usb 4-1: USB disconnect, device number 14 [ 611.366726][ T29] audit: type=1326 audit(2000000321.163:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27264 comm="syz.1.10484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 611.405692][ T5296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 611.447648][ T29] audit: type=1326 audit(2000000321.173:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27264 comm="syz.1.10484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 611.470008][ T5296] cp210x 4-1:0.0: device disconnected [ 611.506454][ T29] audit: type=1326 audit(2000000321.173:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27264 comm="syz.1.10484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 611.577443][ T29] audit: type=1326 audit(2000000321.173:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27264 comm="syz.1.10484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 611.627612][ T29] audit: type=1326 audit(2000000321.173:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27264 comm="syz.1.10484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 611.677543][ T29] audit: type=1326 audit(2000000321.183:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27264 comm="syz.1.10484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 611.733704][T27272] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 611.931759][T27274] gretap0: entered promiscuous mode [ 611.954133][T27274] macvlan2: entered allmulticast mode [ 611.959793][T27274] gretap0: entered allmulticast mode [ 611.985271][T27274] gretap0: left allmulticast mode [ 611.991776][T27274] gretap0: left promiscuous mode [ 612.206487][T27283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10492'. [ 612.512500][T27298] usb usb9: usbfs: process 27298 (syz.2.10499) did not claim interface 0 before use [ 613.436712][T27354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10525'. [ 614.026829][T27384] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 614.919022][ T5296] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 615.048328][ T5266] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 615.080906][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.093130][ T5296] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 615.102356][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.122035][ T5296] usb 4-1: config 0 descriptor?? [ 615.148259][ T25] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 615.198874][ T5266] usb 2-1: Using ep0 maxpacket: 32 [ 615.218987][ T5266] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.242465][ T5266] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.263016][ T5266] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 615.279654][ T5266] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 615.302253][ T5266] usb 2-1: Product: syz [ 615.309102][ T25] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 615.327929][ T5266] usb 2-1: Manufacturer: syz [ 615.348633][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 615.376788][ T5266] hub 2-1:4.0: USB hub found [ 615.388815][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.409556][ T25] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.435422][ T25] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 615.459145][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 615.480012][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.502125][ T25] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.529775][ T25] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 615.557716][ T5296] sunplus 0003:04FC:05D8.001B: item fetching failed at offset 5/7 [ 615.570746][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 615.590662][ T5296] sunplus 0003:04FC:05D8.001B: probe with driver sunplus failed with error -22 [ 615.608737][ T5266] hub 2-1:4.0: 2 ports detected [ 615.628633][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.642816][ T25] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.669369][ T25] usb 3-1: string descriptor 0 read error: -22 [ 615.675766][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 615.699988][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.727078][ T25] adutux 3-1:168.0: interrupt endpoints not found [ 615.794094][ T25] usb 4-1: USB disconnect, device number 15 [ 615.801349][ T5266] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 615.807780][ T5266] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 615.880291][ T5266] usb 2-1: USB disconnect, device number 30 [ 615.946053][ T5296] usb 3-1: USB disconnect, device number 15 [ 616.428519][ T5218] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 616.598077][ T5218] usb 3-1: Using ep0 maxpacket: 8 [ 616.623320][ T5218] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 616.652419][ T5218] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 616.680494][ T5218] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 616.698055][ T5218] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.742856][ T5218] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 616.762930][ T5218] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 616.784955][ T5218] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 616.827857][ T5218] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.875272][ T5218] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 616.887441][ T5218] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 616.917096][ T5218] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 616.935223][ T5218] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.963111][ T5218] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 616.995057][ T5218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.028262][ T5218] usb 3-1: Product: syz [ 617.032591][ T5218] usb 3-1: Manufacturer: syz [ 617.069354][ T5218] usb 3-1: SerialNumber: syz [ 617.296105][ T5218] adutux 3-1:168.0: interrupt endpoints not found [ 617.324815][ T5218] usb 3-1: USB disconnect, device number 16 [ 617.531850][T27504] netlink: 'syz.0.10595': attribute type 1 has an invalid length. [ 618.037535][T27528] CUSE: DEVNAME unspecified [ 618.817146][ T29] audit: type=1326 audit(2000000328.652:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27555 comm="syz.4.10619" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f8017def9 code=0x0 [ 620.538567][ T5296] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 620.608049][T27613] sp0: Synchronizing with TNC [ 620.690752][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.720792][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.768897][ T5296] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 620.798753][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.820507][ T5296] usb 5-1: config 0 descriptor?? [ 620.879656][T27627] netlink: 'syz.2.10650': attribute type 3 has an invalid length. [ 621.108683][ T5218] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 621.271350][ T5296] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x0 [ 621.290706][ T5218] usb 2-1: Using ep0 maxpacket: 8 [ 621.297988][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 621.308670][ T5296] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x0 [ 621.325406][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.328662][ T5296] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x0 [ 621.347535][ T5218] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.369317][ T5296] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x0 [ 621.376851][ T5296] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x0 [ 621.406968][ T5296] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x0 [ 621.407446][ T5218] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 621.425995][ T5296] pantherlord 0003:0F30:0111.001C: unknown main item tag 0x0 [ 621.467369][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.476676][ T29] audit: type=1326 audit(2000000331.242:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.2.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 621.499242][ T29] audit: type=1326 audit(2000000331.242:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.2.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 621.520472][ T5218] usb 2-1: config 0 descriptor?? [ 621.521495][ T29] audit: type=1326 audit(2000000331.252:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.2.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 621.548875][ T29] audit: type=1326 audit(2000000331.252:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.2.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 621.571118][ T29] audit: type=1326 audit(2000000331.252:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.2.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 621.592897][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.599282][ T29] audit: type=1326 audit(2000000331.252:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.2.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 621.621852][ T29] audit: type=1326 audit(2000000331.252:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.2.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 621.644033][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.650410][ T29] audit: type=1326 audit(2000000331.252:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27640 comm="syz.2.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 621.672815][ T5296] pantherlord 0003:0F30:0111.001C: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.4-1/input0 [ 621.685537][ T5296] pantherlord 0003:0F30:0111.001C: no output reports found [ 621.729721][ T5296] usb 5-1: USB disconnect, device number 5 [ 621.937604][ T5218] ortek 0003:1223:3F07.001D: report_id 0 is invalid [ 621.962283][ T5218] ortek 0003:1223:3F07.001D: item 0 1 1 8 parsing failed [ 621.990402][ T5218] ortek 0003:1223:3F07.001D: probe with driver ortek failed with error -22 [ 622.146784][ T5296] usb 2-1: USB disconnect, device number 31 [ 622.523741][T27666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10667'. [ 622.941980][ T5309] IPVS: starting estimator thread 0... [ 623.039088][T27684] IPVS: using max 17 ests per chain, 40800 per kthread [ 623.317141][T27698] sp0: Synchronizing with TNC [ 623.347073][ T5722] kernel write not supported for file /sg0 (pid: 5722 comm: kworker/1:6) [ 623.542266][T27705] netlink: 'syz.1.10685': attribute type 5 has an invalid length. [ 624.154668][T27733] openvswitch: netlink: Actions may not be safe on all matching packets [ 624.203639][ T29] audit: type=1326 audit(2000000334.042:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 624.203691][ T29] audit: type=1326 audit(2000000334.042:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 624.244707][ T29] audit: type=1326 audit(2000000334.082:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 624.245637][ T29] audit: type=1326 audit(2000000334.082:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 624.245839][ T29] audit: type=1326 audit(2000000334.082:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 624.256373][ T29] audit: type=1326 audit(2000000334.091:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 624.551145][T27744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10705'. [ 624.551274][T27744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10705'. [ 624.596722][ T29] audit: type=1326 audit(2000000334.431:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 624.623386][ T29] audit: type=1326 audit(2000000334.461:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.10702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4f57def9 code=0x7ffc0000 [ 624.793629][T27750] tipc: Started in network mode [ 624.793673][T27750] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 624.794469][T27750] tipc: Enabling of bearer rejected, failed to enable media [ 625.289220][ T5296] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 625.306260][ T5722] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 625.441295][ T5296] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 625.441347][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 625.441377][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 625.441406][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 625.441439][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 625.442457][ T5296] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 625.442502][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 625.442532][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 625.442559][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 625.442590][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 625.443604][ T5296] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 625.443646][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 625.443674][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 625.443702][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 625.443733][ T5296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 625.446335][ T5296] usb 5-1: string descriptor 0 read error: -22 [ 625.446440][ T5296] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 625.446471][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.460851][ T5722] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 625.460890][ T5722] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 625.460914][ T5722] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 625.460955][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 625.460987][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 625.462391][ T5722] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 625.462426][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 625.462453][ T5722] usb 3-1: Product: syz [ 625.462471][ T5722] usb 3-1: Manufacturer: syz [ 625.512447][ T5722] cdc_wdm 3-1:1.0: skipping garbage [ 625.512477][ T5722] cdc_wdm 3-1:1.0: skipping garbage [ 625.513300][ T5296] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 625.516529][ T5722] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 625.516556][ T5722] cdc_wdm 3-1:1.0: Unknown control protocol [ 625.771240][ T5266] usb 5-1: USB disconnect, device number 6 [ 625.789115][ T5218] usb 3-1: USB disconnect, device number 17 [ 626.590589][T27795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10728'. [ 626.619336][T27795] nbd: socks must be embedded in a SOCK_ITEM attr [ 626.737776][ T29] audit: type=1326 audit(2000000336.571:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27804 comm="syz.4.10734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8017def9 code=0x7ffc0000 [ 626.776898][ T29] audit: type=1326 audit(2000000336.571:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27804 comm="syz.4.10734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8017def9 code=0x7ffc0000 [ 626.891629][T27813] usb usb1: usbfs: process 27813 (syz.3.10739) did not claim interface 0 before use [ 627.128037][T27827] UBIFS error (pid: 27827): cannot open "/dev/iommu", error -22 [ 627.131540][T27826] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10746'. [ 627.949523][ T5722] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 628.109557][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 628.116751][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.129765][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.144098][ T5722] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 628.166519][ T5722] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 628.179668][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.200661][ T5722] usb 3-1: config 0 descriptor?? [ 628.280986][T27874] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 628.288624][T27874] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 628.331028][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 628.489789][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 628.497273][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.516718][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.528029][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 628.542888][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 628.553979][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.565149][ T8] usb 5-1: config 0 descriptor?? [ 628.630459][ T5722] input: HID 0955:7214 Haptics as /devices/virtual/input/input102 [ 628.722995][ T5722] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 628.742319][ T5722] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 628.826282][ T5296] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 628.847824][ T5722] usb 3-1: USB disconnect, device number 18 [ 628.868641][ T5296] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 628.901313][ T5296] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 628.914864][ T5296] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 628.987042][ T8] microsoft 0003:045E:07DA.001F: unbalanced collection at end of report description [ 628.998754][ T8] microsoft 0003:045E:07DA.001F: parse failed [ 629.007669][ T8] microsoft 0003:045E:07DA.001F: probe with driver microsoft failed with error -22 [ 629.049993][ T5218] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 629.075322][T27898] netlink: 'syz.1.10780': attribute type 1 has an invalid length. [ 629.084269][T27898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.091598][T27898] IPv6: NLM_F_CREATE should be set when creating new route [ 629.188305][T27902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10782'. [ 629.204017][ T5722] usb 5-1: USB disconnect, device number 7 [ 629.220542][ T5218] usb 4-1: Using ep0 maxpacket: 8 [ 629.237712][ T5218] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 629.246940][ T5218] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 629.258269][ T5218] usb 4-1: config 135 has no interface number 0 [ 629.264931][ T5218] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.289145][ T5218] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 629.298696][ T5218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.307665][ T5218] usb 4-1: Product: syz [ 629.313304][ T5218] usb 4-1: Manufacturer: syz [ 629.318124][ T5218] usb 4-1: SerialNumber: syz [ 629.331328][ T5218] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 629.337910][ T5218] usb 4-1: No valid video chain found. [ 629.432211][T27906] syz.2.10784 (27906) used obsolete PPPIOCDETACH ioctl [ 629.537670][ T5218] usb 4-1: USB disconnect, device number 16 [ 629.540223][ T5296] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 629.709670][ T5296] usb 2-1: Using ep0 maxpacket: 8 [ 629.720774][ T5296] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 629.765716][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.778467][ T5296] usb 2-1: config 0 descriptor?? [ 629.889899][T27918] sp0: Synchronizing with TNC [ 630.016677][ T5296] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 630.101062][T27930] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 630.101062][T27930] program syz.4.10796 not setting count and/or reply_len properly [ 630.430038][ T5296] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 630.440804][ T5296] asix 2-1:0.0: probe with driver asix failed with error -71 [ 630.459006][ T5296] usb 2-1: USB disconnect, device number 32 [ 630.734190][T27958] netlink: 'syz.2.10808': attribute type 10 has an invalid length. [ 630.744136][T27958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10808'. [ 630.754333][T27958] 0·: entered allmulticast mode [ 630.759238][T27958] hsr_slave_0: entered allmulticast mode [ 630.765241][T27958] hsr_slave_1: entered allmulticast mode [ 630.772089][T27958] bridge0: port 4(70·) entered blocking state [ 630.779147][T27958] bridge0: port 4(70·) entered disabled state [ 630.787557][T27958] bridge0: port 4(70·) entered blocking state [ 630.793913][T27958] bridge0: port 4(70·) entered forwarding state [ 631.096200][T27972] lo: entered allmulticast mode [ 631.101844][ T5218] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 631.263390][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.296824][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.307408][ T5218] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 631.316872][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.335551][ T5218] usb 3-1: config 0 descriptor?? [ 631.660257][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 631.777309][ T5218] hid-retrode 0003:0403:97C1.0020: unknown main item tag 0x1 [ 631.801034][ T5218] hid-retrode 0003:0403:97C1.0020: unknown main item tag 0x0 [ 631.808684][ T5218] hid-retrode 0003:0403:97C1.0020: unbalanced collection at end of report description [ 631.840064][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 631.847043][ T5218] hid-retrode 0003:0403:97C1.0020: probe with driver hid-retrode failed with error -22 [ 631.859445][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 631.867474][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 631.882196][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.894848][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.907937][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 631.941096][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 631.949062][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 631.968441][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.981635][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.997224][ T5266] usb 3-1: USB disconnect, device number 19 [ 632.002231][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 632.043185][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 632.057460][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 632.084784][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 632.097346][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 632.109100][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 632.128109][ T8] usb 2-1: string descriptor 0 read error: -22 [ 632.134965][ T8] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 632.146606][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.168371][ T8] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 632.393494][ T5296] usb 2-1: USB disconnect, device number 33 [ 633.018966][T28049] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 633.151351][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 633.312012][ T8] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 633.322996][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.343667][ T8] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 633.353933][ T5218] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 633.364984][ T8] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 633.375663][ T8] usb 3-1: Manufacturer: syz [ 633.421348][ T8] usb 3-1: config 0 descriptor?? [ 633.530354][ T8] rc_core: IR keymap rc-hauppauge not found [ 633.537078][ T8] Registered IR keymap rc-empty [ 633.545656][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.565132][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.581261][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 633.616032][ T5218] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.647314][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input103 [ 633.668707][ T5218] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 633.695582][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.739058][ T8] usb 3-1: USB disconnect, device number 20 [ 633.763168][ T5218] usb 2-1: config 0 descriptor?? [ 634.236598][ T5218] logitech 0003:046D:C287.0021: unknown main item tag 0x3 [ 634.249822][ T5218] logitech 0003:046D:C287.0021: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.1-1/input0 [ 634.290963][ T5218] logitech 0003:046D:C287.0021: no inputs found [ 634.439027][ T5267] usb 2-1: USB disconnect, device number 34 [ 634.612385][ T5218] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 634.858424][ T5218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.886228][ T5218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.914483][ T5218] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 634.946154][ T5218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.018353][ T5218] usb 5-1: config 0 descriptor?? [ 635.380926][T28152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.412798][T28152] team0: Port device bond0 added [ 635.450771][ T5267] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 635.464621][ T5218] uclogic 0003:5543:0042.0022: unknown main item tag 0x6 [ 635.492291][ T5218] uclogic 0003:5543:0042.0022: No inputs registered, leaving [ 635.521100][ T5218] uclogic 0003:5543:0042.0022: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 635.646098][ T5267] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 635.660458][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.672579][ T5267] usb 2-1: Product: syz [ 635.675896][ T5296] usb 5-1: USB disconnect, device number 8 [ 635.676882][ T5267] usb 2-1: Manufacturer: syz [ 635.676905][ T5267] usb 2-1: SerialNumber: syz [ 635.690413][ T5267] usb 2-1: config 0 descriptor?? [ 635.717914][ T5267] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 636.140864][ T5267] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 636.152214][ T5267] sq905c 2-1:0.0: Reading version command failed [ 636.167217][ T5267] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 636.186956][ T5267] usb 2-1: USB disconnect, device number 35 [ 636.192548][ T5266] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 636.326663][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 636.326684][ T29] audit: type=1326 audit(2000000346.160:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28179 comm="syz.2.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 636.361252][ T29] audit: type=1326 audit(2000000346.200:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28179 comm="syz.2.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 636.410120][ T29] audit: type=1326 audit(2000000346.220:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28179 comm="syz.2.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 636.452196][ T5266] usb 4-1: Using ep0 maxpacket: 16 [ 636.459210][ T5266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.469759][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.483001][ T29] audit: type=1326 audit(2000000346.220:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28179 comm="syz.2.10913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 636.490217][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.539886][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 636.554861][ T5266] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.572192][ T5266] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 636.583903][ T5266] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 636.599497][ T5266] usb 4-1: Manufacturer: syz [ 636.616196][ T5266] usb 4-1: config 0 descriptor?? [ 636.659605][ T5266] usbhid 4-1:0.0: can't add hid device: -22 [ 636.666069][ T5266] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 636.884381][T28202] netlink: 'syz.4.10925': attribute type 10 has an invalid length. [ 636.890199][ T5266] usb 4-1: USB disconnect, device number 17 [ 636.942162][T28202] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.949427][T28202] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.985751][T28203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10925'. [ 637.010805][ T5218] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 637.028846][T28203] bridge_slave_1: left allmulticast mode [ 637.040398][T28203] bridge_slave_1: left promiscuous mode [ 637.046177][T28203] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.065883][T28203] bridge_slave_0: left allmulticast mode [ 637.076011][T28203] bridge_slave_0: left promiscuous mode [ 637.085743][T28203] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.135731][T28203] bond0: (slave bridge0): Releasing backup interface [ 637.149161][T28203] bridge0 (unregistering): left promiscuous mode [ 637.171424][ T5218] usb 2-1: Using ep0 maxpacket: 8 [ 637.178236][ T5218] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.190419][ T5218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.209689][ T5218] usb 2-1: config 0 has no interface number 0 [ 637.209703][T28205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10927'. [ 637.209735][T28205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10927'. [ 637.217091][ T5218] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 637.267198][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.286493][ T5218] usb 2-1: config 0 descriptor?? [ 637.307692][ T5218] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 637.408966][T28207] fuse: Bad value for 'user_id' [ 637.414424][T28207] fuse: Bad value for 'user_id' [ 637.539332][ T5266] usb 2-1: USB disconnect, device number 36 [ 638.033737][ T5266] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 638.201088][ T5266] usb 2-1: Using ep0 maxpacket: 16 [ 638.208130][ T5266] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.231636][ T5266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.266263][ T5266] usb 2-1: config 0 has no interface number 0 [ 638.282759][T28246] netlink: 'syz.3.10946': attribute type 11 has an invalid length. [ 638.287837][ T5266] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=30.22 [ 638.312933][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.339104][ T5266] usb 2-1: config 0 descriptor?? [ 638.382207][ T5266] hub 2-1:0.1: bad descriptor, ignoring hub [ 638.388555][ T5266] hub 2-1:0.1: probe with driver hub failed with error -5 [ 638.425696][ T5266] usb 2-1: selecting invalid altsetting 1 [ 638.453407][ T5266] snd-usb-us122l 2-1:0.1: usb_set_interface error [ 638.477726][ T5266] snd-usb-us122l 2-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 638.740910][ T5296] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 638.741390][ T5218] usb 2-1: USB disconnect, device number 37 [ 638.773851][ T5309] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 638.891307][ T5296] usb 5-1: Using ep0 maxpacket: 32 [ 638.924511][ T5296] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 638.929517][T28272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.940894][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.940931][ T5296] usb 5-1: Product: syz [ 638.940951][ T5296] usb 5-1: Manufacturer: syz [ 638.940969][ T5296] usb 5-1: SerialNumber: syz [ 638.963635][ T5309] usb 3-1: Using ep0 maxpacket: 16 [ 638.966113][ T5296] usb 5-1: config 0 descriptor?? [ 638.986883][ T5309] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.003802][T28272] team0: Port device bond0 added [ 639.010407][ T5309] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.037913][ T5309] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 639.092721][ T5309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 639.103429][ T5309] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 639.118034][ T5309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.128781][ T5309] usb 3-1: config 0 descriptor?? [ 639.191785][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10962'. [ 639.570311][ T5309] hid-generic 0003:045E:05DA.0023: unbalanced collection at end of report description [ 639.591448][ T5309] hid-generic 0003:045E:05DA.0023: probe with driver hid-generic failed with error -22 [ 639.618220][ T5296] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 639.672334][ T5296] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 639.687659][ T5296] usb 5-1: USB disconnect, device number 9 [ 639.777356][ T5266] usb 3-1: USB disconnect, device number 21 [ 640.533692][T28308] netlink: 64126 bytes leftover after parsing attributes in process `syz.2.10976'. [ 641.184247][T28342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.202772][T28342] bond0: entered promiscuous mode [ 641.219651][T28342] bond_slave_0: entered promiscuous mode [ 641.228148][T28342] bond_slave_1: entered promiscuous mode [ 641.235441][T28342] bond0: entered allmulticast mode [ 641.241650][T28342] bond_slave_0: entered allmulticast mode [ 641.250530][T28342] bond_slave_1: entered allmulticast mode [ 641.269984][T28342] team0: Port device bond0 added [ 641.291157][ T5266] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 641.451425][ T5266] usb 2-1: Using ep0 maxpacket: 32 [ 641.460213][ T5266] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 641.469979][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.480955][ T5266] usb 2-1: Product: syz [ 641.485752][ T5266] usb 2-1: Manufacturer: syz [ 641.511014][ T5266] usb 2-1: SerialNumber: syz [ 641.518750][ T5266] usb 2-1: config 0 descriptor?? [ 641.676586][T28350] hub 6-0:1.0: USB hub found [ 641.686999][T28350] hub 6-0:1.0: 1 port detected [ 641.931278][ T5296] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 642.061231][ T5218] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 642.093562][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.129729][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.149029][ T5296] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 642.160524][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.182022][ T5296] usb 5-1: config 0 descriptor?? [ 642.231476][ T5218] usb 4-1: Using ep0 maxpacket: 16 [ 642.240591][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.258983][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.280471][ T5218] usb 4-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 642.301679][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.347743][ T5218] usb 4-1: config 0 descriptor?? [ 642.401616][ T5266] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 642.613942][ T5296] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 642.644169][ T5296] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 642.797489][ T5218] aquacomputer_d5next 0003:0C70:F012.0025: unknown main item tag 0x0 [ 642.812419][ T5296] cp2112 0003:10C4:EA90.0024: error requesting version [ 642.817526][ T5218] aquacomputer_d5next 0003:0C70:F012.0025: unknown main item tag 0x0 [ 642.833842][T28376] blktrace: Concurrent blktraces are not allowed on sg0 [ 642.837028][ T5218] aquacomputer_d5next 0003:0C70:F012.0025: hidraw1: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.3-1/input0 [ 642.872274][ T5296] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -71 [ 642.874882][ T5267] usb 2-1: USB disconnect, device number 38 [ 642.924005][ T5296] usb 5-1: USB disconnect, device number 10 [ 642.999847][ T5218] usb 4-1: USB disconnect, device number 18 [ 643.512500][T28405] tipc: New replicast peer: 255.255.255.255 [ 643.522476][T28405] tipc: Enabled bearer , priority 10 [ 643.851800][T28425] tipc: Cannot configure node identity twice [ 643.857091][T28426] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 643.947122][T28430] Zero length message leads to an empty skb [ 644.662978][ T5218] tipc: Node number set to 3758096386 [ 645.071701][ T5218] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 645.242209][T28481] openvswitch: netlink: Actions may not be safe on all matching packets [ 645.251970][ T5218] usb 4-1: Using ep0 maxpacket: 8 [ 645.259443][ T5218] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 645.269168][ T5218] usb 4-1: config 0 has no interface number 0 [ 645.276319][ T5218] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.296479][ T5218] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.317656][ T5218] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 645.330478][ T5218] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 645.345439][ T5218] usb 4-1: Manufacturer: syz [ 645.356472][ T5218] usb 4-1: config 0 descriptor?? [ 645.521955][T28494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11065'. [ 645.544471][T28494] tipc: Invalid UDP bearer configuration [ 645.544527][T28494] tipc: Enabling of bearer rejected, failed to enable media [ 645.842273][T28505] mkiss: ax0: crc mode is auto. [ 646.013813][ T5296] usb 4-1: USB disconnect, device number 19 [ 646.169447][T28517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11076'. [ 646.858593][T28551] syz.2.11089: attempt to access beyond end of device [ 646.858593][T28551] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 646.879223][T28551] SQUASHFS error: Failed to read block 0x0: -5 [ 646.885923][T28551] unable to read squashfs_super_block [ 647.623075][ T5296] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 647.797659][ T5296] usb 3-1: Using ep0 maxpacket: 16 [ 647.812948][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.837483][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.857339][ T5296] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 647.890708][ T5296] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 647.920095][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.944779][ T5296] usb 3-1: config 0 descriptor?? [ 648.024063][ T5218] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 648.193414][ T5218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.202120][ T5266] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 648.225279][ T5218] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 648.277026][ T5218] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.290208][ T5218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.310349][ T5218] usb 5-1: config 0 descriptor?? [ 648.375152][ T5296] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 648.404056][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.416138][ T5296] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 648.447402][ T5296] microsoft 0003:045E:07DA.0027: No inputs registered, leaving [ 648.458087][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.476493][ T5266] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 648.494435][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.494803][ T5296] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 648.494843][ T5296] microsoft 0003:045E:07DA.0027: no inputs found [ 648.494864][ T5296] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 648.508941][ T5266] usb 4-1: config 0 descriptor?? [ 648.585113][ T5296] usb 3-1: USB disconnect, device number 22 [ 648.744333][ T5218] plantronics 0003:047F:FFFF.0028: unbalanced collection at end of report description [ 648.772641][ T5218] plantronics 0003:047F:FFFF.0028: parse failed [ 648.789371][ T5218] plantronics 0003:047F:FFFF.0028: probe with driver plantronics failed with error -22 [ 648.924368][ T5266] wacom 0003:056A:0027.0029: unknown main item tag 0x0 [ 648.949782][ T5266] wacom 0003:056A:0027.0029: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 648.973000][ T5266] wacom 0003:056A:0027.0029: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0 [ 648.993649][ T5266] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.0029/input/input105 [ 649.014515][ T5218] usb 5-1: USB disconnect, device number 11 [ 649.120025][ T5267] usb 4-1: USB disconnect, device number 20 [ 649.461042][T28648] netlink: 'syz.0.11128': attribute type 10 has an invalid length. [ 649.483840][T28648] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.491381][T28648] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.529731][T28648] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.537139][T28648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.544881][T28648] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.552422][T28648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.573338][T28648] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 649.590901][T28650] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 649.611993][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11128'. [ 649.612370][T28650] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 649.621238][T28651] bridge_slave_1: left allmulticast mode [ 649.661654][T28651] bridge_slave_1: left promiscuous mode [ 649.671595][T28651] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.690467][T28651] bridge_slave_0: left allmulticast mode [ 649.701667][T28651] bridge_slave_0: left promiscuous mode [ 649.720730][T28651] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.804445][T28651] bond0: (slave bridge0): Releasing backup interface [ 650.021232][T28661] bridge0: port 3(macvlan1) entered disabled state [ 650.030609][T28661] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.038560][T28661] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.258532][T28661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.281089][T28661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.347393][T28661] tipc: Resetting bearer [ 650.384925][T28661] veth0_vlan: left allmulticast mode [ 650.405123][T28661] veth1_vlan: left allmulticast mode [ 650.497868][T28661] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.515264][T28661] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.525510][T28661] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.535651][T28661] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.292783][ T5309] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 651.303116][ T5296] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 651.430177][T28727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11166'. [ 651.452657][ T5296] usb 2-1: Using ep0 maxpacket: 32 [ 651.459337][ T5296] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 651.473783][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.480676][ T5309] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 651.491791][ T5309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.502446][ T5296] usb 2-1: config 0 descriptor?? [ 651.510668][ T5309] usb 3-1: config 0 descriptor?? [ 651.531033][ T5296] gspca_main: sunplus-2.14.0 probing 041e:400b [ 651.726559][ T5296] gspca_sunplus: reg_w_riv err -71 [ 651.731852][ T5296] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 651.772781][ T5296] usb 2-1: USB disconnect, device number 39 [ 651.781404][T28738] netlink: 125880 bytes leftover after parsing attributes in process `syz.4.11171'. [ 651.804092][T28738] netlink: 18430 bytes leftover after parsing attributes in process `syz.4.11171'. [ 651.805263][T28739] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 651.945030][ T5309] wacom 0003:056A:00B3.002A: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 651.973709][ T5309] wacom 0003:056A:00B3.002A: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.2-1/input0 [ 651.987973][T28745] hugetlbfs: Bad value 'm' for mount option 'size' [ 651.987973][T28745] [ 652.001821][ T5309] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B3.002A/input/input108 [ 652.152904][ T5309] usb 3-1: USB disconnect, device number 23 [ 652.362308][ T5296] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 652.525356][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.538128][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.550033][ T5296] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 652.561856][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.572928][ T5296] usb 4-1: config 0 descriptor?? [ 652.749280][T28773] x_tables: duplicate underflow at hook 4 [ 652.755710][ T5266] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 652.925323][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.956866][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.980575][ T5266] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 653.006259][ T5296] wacom 0003:056A:0317.002B: unknown main item tag 0x0 [ 653.020951][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.035327][ T5296] wacom 0003:056A:0317.002B: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 653.048120][ T5266] usb 2-1: config 0 descriptor?? [ 653.082530][ T5296] wacom 0003:056A:0317.002B: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 653.114750][ T5296] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.002B/input/input111 [ 653.237679][ T5296] usb 4-1: USB disconnect, device number 21 [ 653.439733][T28799] netlink: 'syz.2.11199': attribute type 1 has an invalid length. [ 653.448627][T28799] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11199'. [ 653.462443][ T5309] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 653.482721][ T5266] gembird 0003:11FF:3331.002C: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0 [ 653.621896][T28805] tmpfs: Bad value for 'mpol' [ 653.634875][ T5309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.657503][ T5309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.680730][ T5309] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 653.690163][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.698318][ T5296] usb 2-1: USB disconnect, device number 40 [ 653.738009][ T5309] usb 5-1: config 0 descriptor?? [ 653.902649][ T5266] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 654.069212][ T5266] usb 3-1: Using ep0 maxpacket: 32 [ 654.095216][ T5266] usb 3-1: config 107 has an invalid interface number: 29 but max is 0 [ 654.116341][ T5266] usb 3-1: config 107 has no interface number 0 [ 654.134329][ T5266] usb 3-1: config 107 interface 29 has no altsetting 0 [ 654.150992][ T5266] usb 3-1: New USB device found, idVendor=07ca, idProduct=a807, bcdDevice=87.10 [ 654.162047][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.172003][ T5309] wacom 0003:056A:0059.002D: unknown main item tag 0x0 [ 654.183090][ T5266] usb 3-1: Product: syz [ 654.189004][ T5266] usb 3-1: Manufacturer: syz [ 654.201853][ T5266] usb 3-1: SerialNumber: syz [ 654.207061][ T5309] wacom 0003:056A:0059.002D: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.4-1/input0 [ 654.373697][T28828] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 654.412584][ T5296] usb 5-1: USB disconnect, device number 12 [ 654.789737][ T5266] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 654.791343][ T5266] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 654.824740][ T5266] dib0700: firmware download failed at 7 with -22 [ 654.840044][ T5266] usb 3-1: USB disconnect, device number 24 [ 655.424755][T28852] program syz.3.11226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.309922][T28891] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 656.446418][T28899] netlink: 240 bytes leftover after parsing attributes in process `syz.4.11245'. [ 656.490994][T28899] NCSI netlink: No device for ifindex 0 [ 656.821748][T28917] geneve0: entered promiscuous mode [ 656.860710][T28921] No control pipe specified [ 657.764504][ T5218] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 657.823261][ T5309] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 657.859496][T28982] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11285'. [ 657.888676][T28982] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11285'. [ 657.947428][ T5218] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 657.960830][ T5218] usb 5-1: config 0 has no interface number 0 [ 657.980951][ T5218] usb 5-1: config 0 interface 108 altsetting 231 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.993229][ T5309] usb 2-1: Using ep0 maxpacket: 16 [ 658.002512][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 658.020849][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 658.031273][ T5218] usb 5-1: config 0 interface 108 altsetting 231 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.046519][ T5218] usb 5-1: config 0 interface 108 has no altsetting 0 [ 658.064951][ T5309] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 658.075045][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.084102][ T5218] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 658.094272][ T5309] usb 2-1: Product: syz [ 658.098677][ T5309] usb 2-1: Manufacturer: syz [ 658.103722][ T5218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.112063][ T5309] usb 2-1: SerialNumber: syz [ 658.119265][ T5218] usb 5-1: config 0 descriptor?? [ 658.133943][ T5309] usb 2-1: config 0 descriptor?? [ 658.151467][ T5309] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 658.171221][ T5309] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 658.376169][ T5296] usb 2-1: USB disconnect, device number 41 [ 658.404418][ T5296] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 658.443412][ T5296] kobil_sct 2-1:0.0: device disconnected [ 658.566359][ T5218] uclogic 0003:5543:0522.002E: unknown main item tag 0x0 [ 658.582004][ T5218] uclogic 0003:5543:0522.002E: unknown main item tag 0x0 [ 658.610431][ T5218] uclogic 0003:5543:0522.002E: unknown main item tag 0x0 [ 658.610473][ T5218] uclogic 0003:5543:0522.002E: unknown main item tag 0x0 [ 658.610505][ T5218] uclogic 0003:5543:0522.002E: unknown main item tag 0x0 [ 658.611120][ T5218] uclogic 0003:5543:0522.002E: No inputs registered, leaving [ 658.645157][ T5218] uclogic 0003:5543:0522.002E: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input108 [ 658.841048][ T5296] usb 5-1: USB disconnect, device number 13 [ 658.959725][T29015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11301'. [ 659.383389][ T5218] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 659.533495][ T5218] usb 2-1: Using ep0 maxpacket: 16 [ 659.537226][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.537270][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.537299][ T5218] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.537343][ T5218] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 659.537382][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.539782][ T5218] usb 2-1: config 0 descriptor?? [ 659.958537][ T5218] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 659.975829][ T5218] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002F/input/input118 [ 659.983484][ T5218] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 660.186148][ T5309] usb 2-1: USB disconnect, device number 42 [ 660.299717][T29040] netlink: 'syz.2.11312': attribute type 3 has an invalid length. [ 660.299808][T29040] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11312'. [ 660.902829][T29058] netlink: 'syz.1.11321': attribute type 29 has an invalid length. [ 660.905145][T29058] netlink: 'syz.1.11321': attribute type 29 has an invalid length. [ 660.943900][ T5218] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 661.103406][ T5218] usb 4-1: Using ep0 maxpacket: 8 [ 661.105559][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.105601][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.105640][ T5218] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 661.105674][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.108066][ T5218] usb 4-1: config 0 descriptor?? [ 661.573570][ T5218] hid-picolcd 0003:04D8:F002.0030: item fetching failed at offset 2/5 [ 661.574135][ T5218] hid-picolcd 0003:04D8:F002.0030: device report parse failed [ 661.574216][ T5218] hid-picolcd 0003:04D8:F002.0030: probe with driver hid-picolcd failed with error -22 [ 661.775600][ T25] usb 4-1: USB disconnect, device number 22 [ 662.130609][T29078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11330'. [ 662.163432][ T5218] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 662.323701][ T5218] usb 2-1: Using ep0 maxpacket: 16 [ 662.326077][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.326120][ T5218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.326190][ T5218] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 662.326222][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.328613][ T5218] usb 2-1: config 0 descriptor?? [ 662.443557][ T5296] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 662.595398][ T5296] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 662.649902][ T5296] usb 3-1: config 0 has no interface number 0 [ 662.649955][ T5296] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.649988][ T5296] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.650030][ T5296] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 662.650059][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.680601][ T5296] usb 3-1: config 0 descriptor?? [ 662.787739][ T5218] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 662.787785][ T5218] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 662.787819][ T5218] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 662.787851][ T5218] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 662.787884][ T5218] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 662.789668][ T5218] aquacomputer_d5next 0003:0C70:F00D.0031: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 662.999310][ T5218] usb 2-1: USB disconnect, device number 43 [ 663.155560][ T5296] prodikeys 0003:041E:2801.0032: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 663.168744][ T5296] hid_prodikeys: hid-prodikeys: failed to find output report [ 663.168744][ T5296] [ 663.359933][ T5296] usb 3-1: USB disconnect, device number 25 [ 664.093839][ T5296] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 664.265545][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.285045][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.303646][ T5296] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 664.323709][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.346407][ T5296] usb 2-1: config 0 descriptor?? [ 664.781155][ T5296] petalynx 0003:18B1:0037.0033: unknown main item tag 0xd [ 664.804215][ T5296] petalynx 0003:18B1:0037.0033: unexpected long global item [ 664.827200][ T5296] petalynx 0003:18B1:0037.0033: parse failed [ 664.833512][ T5296] petalynx 0003:18B1:0037.0033: probe with driver petalynx failed with error -22 [ 665.020495][ T5267] usb 2-1: USB disconnect, device number 44 [ 665.524684][ T5218] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 665.695622][ T5218] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 665.706033][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.751471][ T5218] usb 4-1: config 0 descriptor?? [ 665.828546][T29230] ufs: Invalid option: "workdir=./bus" or missing value [ 665.836232][T29230] ufs: wrong mount options [ 666.400769][ T5218] ath6kl: Failed to read usb control message: -71 [ 666.417441][ T5218] ath6kl: Unable to read the bmi data from the device: -71 [ 666.452107][ T5218] ath6kl: unable to read target info byte count: -71 [ 666.472488][ T5218] ath6kl: Failed to init ath6kl core: -71 [ 666.482295][ T5218] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 666.517241][ T5218] usb 4-1: USB disconnect, device number 23 [ 666.712899][T29263] program syz.2.11405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.046642][T29280] netlink: 'syz.3.11413': attribute type 29 has an invalid length. [ 667.092790][T29280] netlink: 'syz.3.11413': attribute type 29 has an invalid length. [ 667.458775][ T29] audit: type=1326 audit(2000000377.286:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29304 comm="syz.2.11426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 667.482935][ T5267] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 667.513624][T29308] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 667.521454][ T29] audit: type=1326 audit(2000000377.286:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29304 comm="syz.2.11426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 667.551883][ T5218] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 667.564158][ T29] audit: type=1326 audit(2000000377.286:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29304 comm="syz.2.11426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 667.598209][ T29] audit: type=1326 audit(2000000377.286:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29304 comm="syz.2.11426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 667.620002][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.629196][ T29] audit: type=1326 audit(2000000377.286:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29304 comm="syz.2.11426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 667.651147][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.659399][ T29] audit: type=1326 audit(2000000377.286:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29304 comm="syz.2.11426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 667.681839][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.693160][ T5267] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 667.713835][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.735823][ T29] audit: type=1326 audit(2000000377.286:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29304 comm="syz.2.11426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 667.741593][ T5218] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45 [ 667.785309][ T5267] usb 5-1: config 0 descriptor?? [ 667.821415][ T29] audit: type=1326 audit(2000000377.286:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29304 comm="syz.2.11426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 667.824711][ T5218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.882797][ T5218] usb 4-1: Product: syz [ 667.888563][ T5218] usb 4-1: Manufacturer: syz [ 667.893285][ T5218] usb 4-1: SerialNumber: syz [ 667.920354][ T5218] usb 4-1: config 0 descriptor?? [ 667.938275][ T5218] usb 4-1: Found UVC 0.00 device syz (8086:0b03) [ 667.951108][ T5218] usb 4-1: No valid video chain found. [ 668.124228][ T5309] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 668.151519][ T5218] usb 4-1: USB disconnect, device number 24 [ 668.231058][ T5267] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x0 [ 668.241398][ T5267] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x0 [ 668.262058][ T5267] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x0 [ 668.277976][ T5267] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x0 [ 668.286929][ T5267] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x0 [ 668.294533][ T5309] usb 2-1: Using ep0 maxpacket: 32 [ 668.303524][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.323753][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.340412][ T5267] corsair 0003:1B1C:1B3E.0034: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 668.361939][ T5309] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 668.392465][ T5309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.413247][ T5309] usb 2-1: config 0 descriptor?? [ 668.481746][ T25] usb 5-1: USB disconnect, device number 14 [ 668.673937][T29342] netlink: 'syz.2.11444': attribute type 153 has an invalid length. [ 668.682836][T29342] netlink: 'syz.2.11444': attribute type 1 has an invalid length. [ 668.692813][T29342] netlink: 88156 bytes leftover after parsing attributes in process `syz.2.11444'. [ 668.858252][ T5309] hid-u2fzero 0003:10C4:8ACF.0035: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 668.890003][ T5309] hid-u2fzero 0003:10C4:8ACF.0035: U2F Zero LED initialised [ 668.899063][ T5309] hid-u2fzero 0003:10C4:8ACF.0035: U2F Zero RNG initialised [ 669.086275][ T5266] usb 2-1: USB disconnect, device number 45 [ 669.104461][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 669.126364][T29360] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 669.132989][T29360] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 669.152393][T29360] vhci_hcd vhci_hcd.0: Device attached [ 669.277106][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 669.283953][T29366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11455'. [ 669.302021][ T25] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 669.324203][ T25] usb 4-1: config 150 has no interface number 0 [ 669.330677][ T25] usb 4-1: config 150 interface 204 has no altsetting 0 [ 669.354448][ T25] usb 4-1: config 150 interface 1 has no altsetting 0 [ 669.365022][ T25] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 669.374325][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.382457][ T25] usb 4-1: Product: syz [ 669.394451][ T5267] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 669.411014][ T25] usb 4-1: Manufacturer: syz [ 669.422881][ T25] usb 4-1: SerialNumber: syz [ 669.502780][T29361] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 669.522777][ T1114] vhci_hcd: stop threads [ 669.527590][ T1114] vhci_hcd: release socket [ 669.535370][ T1114] vhci_hcd: disconnect device [ 669.614491][ T5309] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 669.652544][ T25] xr_serial 4-1:150.204: xr_serial converter detected [ 669.794578][ T5309] usb 5-1: Using ep0 maxpacket: 32 [ 669.801800][ T5309] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 669.811795][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.831746][ T5309] usb 5-1: config 0 descriptor?? [ 670.022696][T29381] netlink: 'syz.1.11462': attribute type 1 has an invalid length. [ 670.040449][T29381] netlink: 9384 bytes leftover after parsing attributes in process `syz.1.11462'. [ 670.065353][ T25] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 670.071903][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 670.097968][ T25] usb 4-1: USB disconnect, device number 25 [ 670.112664][ T25] xr_serial 4-1:150.204: device disconnected [ 670.260131][ T5309] kye 0003:0458:5011.0036: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 670.282604][ T5309] kye 0003:0458:5011.0036: hidraw0: USB HID vb.51 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 670.308457][ T5309] kye 0003:0458:5011.0036: tablet-enabling feature report not found [ 670.329161][ T5309] kye 0003:0458:5011.0036: tablet enabling failed [ 670.458560][ T25] usb 5-1: USB disconnect, device number 15 [ 670.574896][T29398] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11470'. [ 670.586025][T29398] tipc: Enabled bearer , priority 10 [ 670.754434][T29406] netlink: 'syz.3.11474': attribute type 3 has an invalid length. [ 670.762649][T29406] netlink: 201364 bytes leftover after parsing attributes in process `syz.3.11474'. [ 670.883235][T29414] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11477'. [ 670.895262][T29414] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 671.171558][T29430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11486'. [ 671.274789][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 671.446697][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.472384][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.484623][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 671.500519][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.513697][ T8] usb 4-1: config 0 descriptor?? [ 671.553276][T29450] mkiss: ax0: crc mode is auto. [ 671.733470][T29456] mkiss: ax0: crc mode is auto. [ 671.965347][ T8] wacom 0003:056A:00D0.0037: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 672.005111][ T8] wacom 0003:056A:00D0.0037: hidraw0: USB HID v0.80 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 672.045679][ T8] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0037/input/input121 [ 672.269451][ T8] usb 4-1: USB disconnect, device number 26 [ 672.895063][ T5266] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 673.054906][ T5266] usb 2-1: Using ep0 maxpacket: 16 [ 673.068465][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.110713][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.155258][ T5266] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 673.209719][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.256652][ T5266] usb 2-1: config 0 descriptor?? [ 673.746152][ T5266] kye 0003:0458:500F.0038: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 673.805263][ T5266] kye 0003:0458:500F.0038: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.1-1/input0 [ 673.848350][ T5266] kye 0003:0458:500F.0038: tablet-enabling feature report not found [ 673.880557][ T5266] kye 0003:0458:500F.0038: tablet enabling failed [ 673.887359][ T25] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 673.954877][ T5296] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 673.991703][ T5266] usb 2-1: USB disconnect, device number 46 [ 674.068093][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 674.100231][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 674.134935][ T5296] usb 3-1: Using ep0 maxpacket: 8 [ 674.148849][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.174614][ T5296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.198129][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 674.219417][ T5296] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 674.237592][ T25] usb 5-1: SerialNumber: syz [ 674.256507][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 674.274439][T29512] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 674.303719][ T5296] usb 3-1: SerialNumber: syz [ 674.326467][ T5296] usb 3-1: config 0 descriptor?? [ 674.375453][ T5296] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 674.407948][ T5296] usb 3-1: No valid video chain found. [ 674.598081][ T5296] usb 3-1: USB disconnect, device number 26 [ 675.004085][T29521] sp0: Synchronizing with TNC [ 675.056203][T29520] [U] è [ 676.335244][ T5266] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 676.516625][ T5266] usb 3-1: Using ep0 maxpacket: 32 [ 676.553792][ T5266] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 676.573015][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.591823][ T5266] usb 3-1: Product: syz [ 676.602287][ T5266] usb 3-1: Manufacturer: syz [ 676.611125][ T5266] usb 3-1: SerialNumber: syz [ 676.660328][ T5266] usb 3-1: config 0 descriptor?? [ 676.711625][ T5266] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 676.760043][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 676.851636][ T25] usb 5-1: USB disconnect, device number 16 [ 677.328979][ T5266] gspca_stk1135: reg_w 0x3 err -71 [ 677.351219][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 677.407308][ T5266] gspca_stk1135: Sensor write failed [ 677.445315][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 677.472694][ T5266] gspca_stk1135: Sensor write failed [ 677.492287][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 677.523108][ T5266] gspca_stk1135: Sensor read failed [ 677.548215][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 677.577518][ T5266] gspca_stk1135: Sensor read failed [ 677.602180][ T5266] gspca_stk1135: Detected sensor type unknown (0x0) [ 677.638273][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 677.675585][ T5266] gspca_stk1135: Sensor read failed [ 677.710247][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 677.741727][ T5266] gspca_stk1135: Sensor read failed [ 677.763790][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 677.794764][ T5266] gspca_stk1135: Sensor write failed [ 677.830690][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 677.857872][ T5266] gspca_stk1135: Sensor write failed [ 677.895364][ T5266] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 677.966118][ T5266] usb 3-1: USB disconnect, device number 27 [ 678.186873][T29553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11544'. [ 679.388466][T29579] random: crng reseeded on system resumption [ 680.925667][ T5266] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 681.089564][ T5266] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 681.123967][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.176229][ T5266] usb 2-1: config 0 descriptor?? [ 681.219445][ T5266] cp210x 2-1:0.0: cp210x converter detected [ 681.277054][T29600] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 681.572332][ T29] audit: type=1326 audit(2000000391.395:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.2.11569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 681.654307][ T5266] usb 2-1: cp210x converter now attached to ttyUSB0 [ 681.710394][ T29] audit: type=1326 audit(2000000391.395:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.2.11569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 681.858134][ T5266] usb 2-1: USB disconnect, device number 47 [ 681.885749][ T29] audit: type=1326 audit(2000000391.435:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.2.11569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 681.928621][ T5266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 682.020767][ T29] audit: type=1326 audit(2000000391.435:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.2.11569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 682.060014][ T16] sched: DL replenish lagged too much [ 682.123344][ T29] audit: type=1326 audit(2000000391.435:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.2.11569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 682.237670][ T29] audit: type=1326 audit(2000000391.435:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.2.11569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 682.343316][ T29] audit: type=1326 audit(2000000391.435:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.2.11569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 682.457571][ T29] audit: type=1326 audit(2000000391.435:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29603 comm="syz.2.11569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccded7def9 code=0x7ffc0000 [ 686.058613][T29645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 686.074008][T29645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 686.086490][T29645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 686.099528][T29645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 686.109107][T29645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 686.118444][T29645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 686.566512][T29656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11593'. [ 686.916543][T27431] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 687.106498][T27431] usb 3-1: Using ep0 maxpacket: 8 [ 687.113542][T27431] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 687.136550][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 687.173357][T27431] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.206223][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 687.246295][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 687.288102][T27431] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 687.295737][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 687.333518][T27431] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.365906][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 687.402438][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 687.435844][T27431] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 687.453190][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 687.487937][T27431] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.526888][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 687.555080][T27431] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 687.609527][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 687.620908][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 687.630006][ T5227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 687.642441][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 687.651942][ T5227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 687.662895][T27431] usb 3-1: string descriptor 0 read error: -22 [ 687.672362][ T5227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 687.709617][T27431] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 687.736407][T27431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.780284][T27431] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 688.176778][ T5227] Bluetooth: hci5: command tx timeout [ 689.010363][ T5266] cp210x 2-1:0.0: device disconnected [ 689.778786][ T5227] Bluetooth: hci6: command tx timeout [ 690.024512][ T5266] usb 3-1: USB disconnect, device number 28 [ 690.256935][ T5227] Bluetooth: hci5: command tx timeout [ 691.268898][T29679] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 691.857066][ T5227] Bluetooth: hci6: command tx timeout [ 692.337242][ T5227] Bluetooth: hci5: command tx timeout [ 693.390472][T29689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11608'. [ 693.794136][T29645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 693.811456][T29645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 693.821001][T29645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 693.838807][T29645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 693.848735][T29645] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 693.858484][T29645] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 693.939057][ T5227] Bluetooth: hci6: command tx timeout [ 694.417463][ T5227] Bluetooth: hci5: command tx timeout [ 695.937426][T29645] Bluetooth: hci7: command tx timeout [ 696.017547][T29645] Bluetooth: hci6: command tx timeout [ 696.337633][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.022839][T29645] Bluetooth: hci7: command tx timeout [ 700.097938][T29645] Bluetooth: hci7: command tx timeout [ 701.200993][T29711] syz.0.11616 (29711): drop_caches: 1 [ 701.928638][ T5227] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 701.946895][ T5227] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 701.963341][ T5227] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 701.972099][ T5227] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 701.980750][ T5227] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 701.995108][ T5227] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 702.178258][ T5227] Bluetooth: hci7: command tx timeout [ 702.802063][ T29] audit: type=1326 audit(2000000412.632:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29720 comm="syz.0.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59f7def9 code=0x7ffc0000 [ 702.849735][ T29] audit: type=1326 audit(2000000412.662:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29720 comm="syz.0.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59f7def9 code=0x7ffc0000 [ 702.954105][ T29] audit: type=1326 audit(2000000412.662:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29720 comm="syz.0.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fae59f7def9 code=0x7ffc0000 [ 703.010495][ T29] audit: type=1326 audit(2000000412.662:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29720 comm="syz.0.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59f7def9 code=0x7ffc0000 [ 703.078327][ T29] audit: type=1326 audit(2000000412.662:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29720 comm="syz.0.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59f7def9 code=0x7ffc0000 [ 703.178255][ T29] audit: type=1326 audit(2000000412.662:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29720 comm="syz.0.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fae59f7def9 code=0x7ffc0000 [ 703.253796][ T29] audit: type=1326 audit(2000000412.662:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29720 comm="syz.0.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59f7def9 code=0x7ffc0000 [ 703.289006][ T29] audit: type=1326 audit(2000000412.662:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29720 comm="syz.0.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59f7def9 code=0x7ffc0000 [ 704.098499][ T5227] Bluetooth: hci8: command tx timeout [ 706.178809][ T5227] Bluetooth: hci8: command tx timeout [ 706.418175][T29729] netlink: 'syz.0.11623': attribute type 11 has an invalid length. [ 706.436740][T29729] netlink: 'syz.0.11623': attribute type 11 has an invalid length. [ 706.447520][T29729] netlink: 209800 bytes leftover after parsing attributes in process `syz.0.11623'. [ 708.258944][ T5227] Bluetooth: hci8: command tx timeout [ 710.339110][ T5227] Bluetooth: hci8: command tx timeout [ 717.611856][T29645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 717.633256][T29645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 717.645753][T29645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 717.655013][T29645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 717.663269][T29645] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 717.671213][T29645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 719.780494][T29645] Bluetooth: hci9: command tx timeout [ 721.860500][T29645] Bluetooth: hci9: command tx timeout [ 723.940705][T29645] Bluetooth: hci9: command tx timeout [ 726.020960][T29645] Bluetooth: hci9: command tx timeout [ 734.995209][T29620] netlink: 'syz.1.11577': attribute type 29 has an invalid length. [ 736.900704][T29660] lo speed is unknown, defaulting to 1000 [ 736.980037][T29620] bridge0: port 3(syz_tun) entered disabled state [ 737.351180][T29620] syz_tun (unregistering): left allmulticast mode [ 737.359236][T29620] syz_tun (unregistering): left promiscuous mode [ 737.376267][T29620] bridge0: port 3(syz_tun) entered disabled state [ 737.604220][T29735] team0: Port device syz_tun removed [ 738.057006][T29644] lo speed is unknown, defaulting to 1000 [ 738.793025][T29738] lo speed is unknown, defaulting to 1000 [ 739.002329][T29718] lo speed is unknown, defaulting to 1000 [ 739.512355][T29693] lo speed is unknown, defaulting to 1000 [ 739.586212][T29660] chnl_net:caif_netlink_parms(): no params data found [ 739.602047][ T1114] macvlan1: left allmulticast mode [ 739.609723][ T1114] macvlan1: left promiscuous mode [ 739.618337][ T1114] bridge0: port 3(macvlan1) entered disabled state [ 739.647595][ T1114] bridge_slave_1: left allmulticast mode [ 739.655146][ T1114] bridge_slave_1: left promiscuous mode [ 739.661063][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.680576][ T1114] bridge_slave_0: left allmulticast mode [ 739.688845][ T1114] bridge_slave_0: left promiscuous mode [ 739.704229][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.029272][ T1114] team0: Port device bond0 removed [ 741.047693][ T1114] bond0 (unregistering): (slave 50ª): Releasing backup interface [ 741.091023][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.113794][ T1114] bond0 (unregistering): Released all slaves [ 741.137074][ T1114] bond1 (unregistering): Released all slaves [ 741.161315][ T1114] bond2 (unregistering): Released all slaves [ 741.746760][ T1114] tipc: Disabling bearer [ 741.769768][ T1114] tipc: Left network mode [ 741.782190][T29644] chnl_net:caif_netlink_parms(): no params data found [ 741.931671][ T1114] IPVS: stopping master sync thread 17909 ... [ 742.537782][T29738] chnl_net:caif_netlink_parms(): no params data found [ 742.724219][T29660] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.731496][T29660] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.749381][T29660] bridge_slave_0: entered allmulticast mode [ 742.759127][T29660] bridge_slave_0: entered promiscuous mode [ 746.228237][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 746.242525][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 746.252386][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 746.260840][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 746.269346][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 746.278360][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 748.021721][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.036213][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.045834][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.054199][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.063920][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 748.071589][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.343501][T29645] Bluetooth: hci0: command tx timeout [ 750.103750][T29645] Bluetooth: hci1: command tx timeout [ 750.423837][T29645] Bluetooth: hci0: command tx timeout [ 752.184110][T29645] Bluetooth: hci1: command tx timeout [ 752.504016][T29645] Bluetooth: hci0: command tx timeout [ 754.098003][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 754.109368][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 754.118391][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 754.128216][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 754.139363][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 754.147240][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 754.264332][ T5227] Bluetooth: hci1: command tx timeout [ 754.589045][ T5227] Bluetooth: hci0: command tx timeout [ 756.184504][ T5227] Bluetooth: hci2: command tx timeout [ 756.344466][ T5227] Bluetooth: hci1: command tx timeout [ 758.269124][ T5227] Bluetooth: hci2: command tx timeout [ 760.344885][T29645] Bluetooth: hci2: command tx timeout [ 762.242753][T29645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.254695][T29645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.264130][T29645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.276232][T29645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.286906][T29645] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 762.294439][T29645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.425034][ T5227] Bluetooth: hci2: command tx timeout [ 764.348732][ T5227] Bluetooth: hci3: command tx timeout [ 766.425524][ T5227] Bluetooth: hci3: command tx timeout [ 768.505765][ T5227] Bluetooth: hci3: command tx timeout [ 770.586001][ T5227] Bluetooth: hci3: command tx timeout [ 779.004631][T29645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 779.019519][T29645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 779.030119][T29645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 779.039862][T29645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 779.047981][T29645] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 779.057543][T29645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.147475][T29645] Bluetooth: hci4: command tx timeout [ 783.227427][T29645] Bluetooth: hci4: command tx timeout [ 785.307741][T29645] Bluetooth: hci4: command tx timeout [ 787.387976][T29645] Bluetooth: hci4: command tx timeout [ 795.786181][ T5267] vhci_hcd: vhci_device speed not set [ 808.377952][ T5227] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 808.390908][ T5227] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 808.406671][ T5227] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 808.419266][ T5227] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 808.443422][ T5227] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 808.451241][ T5227] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 808.929227][T29645] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 808.942905][T29645] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 808.952869][T29645] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 808.967223][T29645] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 808.976990][T29645] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 808.986194][T29645] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 810.513986][T29837] Bluetooth: hci10: command tx timeout [ 811.078027][T29837] Bluetooth: hci11: command tx timeout [ 811.084178][T29838] Bluetooth: hci5: command 0x0406 tx timeout [ 811.116346][T29838] Bluetooth: hci6: command 0x0406 tx timeout [ 812.592239][ T5217] Bluetooth: hci10: command tx timeout [ 813.150993][ T5217] Bluetooth: hci11: command tx timeout [ 814.681121][ T5217] Bluetooth: hci10: command tx timeout [ 814.722023][T29839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 814.735701][T29839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 814.745529][T29839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 814.761227][T29839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 814.775442][T29839] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 814.783218][T29839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 815.237879][T29839] Bluetooth: hci11: command tx timeout [ 816.198422][T29839] Bluetooth: hci7: command 0x0406 tx timeout [ 816.751271][T29645] Bluetooth: hci10: command tx timeout [ 816.831433][T29645] Bluetooth: hci12: command tx timeout [ 817.311239][T29645] Bluetooth: hci11: command tx timeout [ 818.911669][T29645] Bluetooth: hci12: command tx timeout [ 820.991791][T29645] Bluetooth: hci12: command tx timeout [ 822.725725][T29839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 822.754983][T29839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 822.766530][T29839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 822.777132][T29839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 822.787275][T29839] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 822.796336][T29839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 823.072122][T29839] Bluetooth: hci12: command tx timeout [ 824.832286][T29645] Bluetooth: hci13: command tx timeout [ 826.441975][T29645] Bluetooth: hci8: command 0x0406 tx timeout [ 826.913889][T29839] Bluetooth: hci13: command tx timeout [ 827.697392][T29660] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.742544][T29660] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.789170][T29660] bridge_slave_1: entered allmulticast mode [ 827.833541][T29660] bridge_slave_1: entered promiscuous mode [ 829.012482][T29839] Bluetooth: hci13: command tx timeout [ 831.073045][T29839] Bluetooth: hci13: command tx timeout [ 839.073072][T29645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 839.085179][T29645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 839.096479][T29645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 839.114962][T29645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 839.122862][T29645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 839.134255][T29645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.234202][T29839] Bluetooth: hci0: command tx timeout [ 843.314332][T29839] Bluetooth: hci0: command tx timeout [ 845.394459][T29839] Bluetooth: hci0: command tx timeout [ 847.474686][T29839] Bluetooth: hci0: command tx timeout [ 869.224597][T29645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 869.235238][T29645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 869.244288][T29645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 869.253955][T29645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 869.277679][T29645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 869.289313][T29645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 869.823363][ T5217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 869.835963][ T5217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 869.845673][ T5217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 869.854447][ T5217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 869.862338][ T5217] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 869.870349][ T5217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 871.317406][ T5217] Bluetooth: hci1: command tx timeout [ 871.957530][ T5217] Bluetooth: hci2: command tx timeout [ 873.397522][ T5217] Bluetooth: hci1: command tx timeout [ 874.037811][ T5217] Bluetooth: hci2: command tx timeout [ 875.010032][T29839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.025943][T29839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.038981][T29839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 875.047057][T29839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 875.055253][T29839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 875.063866][T29839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 875.477830][T29839] Bluetooth: hci1: command tx timeout [ 876.118064][T29839] Bluetooth: hci2: command tx timeout [ 877.158618][T29839] Bluetooth: hci3: command tx timeout [ 877.561412][T29839] Bluetooth: hci1: command tx timeout [ 878.208471][T29839] Bluetooth: hci2: command tx timeout [ 879.238337][T29839] Bluetooth: hci3: command tx timeout [ 881.318544][T29839] Bluetooth: hci3: command tx timeout [ 883.309429][ T5217] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 883.328598][ T5217] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 883.337698][ T5217] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 883.347084][ T5217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 883.355502][ T5217] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 883.364435][ T5217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 883.398703][ T5217] Bluetooth: hci3: command tx timeout [ 885.399013][ T5217] Bluetooth: hci5: command tx timeout [ 887.479256][ T5217] Bluetooth: hci5: command tx timeout [ 889.559414][ T5217] Bluetooth: hci5: command tx timeout [ 891.639697][ T5217] Bluetooth: hci5: command tx timeout [ 900.183152][T29839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 900.199637][T29839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 900.209784][T29839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 900.220985][T29839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 900.232617][T29839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 900.240557][T29839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 902.360771][ T5217] Bluetooth: hci6: command tx timeout [ 903.248170][ T5217] Bluetooth: hci4: command 0x0406 tx timeout [ 904.441068][T29839] Bluetooth: hci6: command tx timeout [ 906.522157][T29839] Bluetooth: hci6: command tx timeout [ 907.691480][T29825] lo speed is unknown, defaulting to 1000 [ 908.601466][T29839] Bluetooth: hci6: command tx timeout [ 926.763583][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 930.106066][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 930.130330][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 930.148205][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 930.156977][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 930.164986][ T5217] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 930.172395][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 931.292584][T29839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 931.307585][T29839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 931.316560][T29839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 931.326056][T29839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 931.336209][T29839] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 931.347880][T29839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 932.204239][ T5217] Bluetooth: hci0: command tx timeout [ 933.410287][ T5217] Bluetooth: hci7: command tx timeout [ 933.976728][ T5227] Bluetooth: hci10: command 0x0406 tx timeout [ 933.982952][ T5217] Bluetooth: hci11: command 0x0406 tx timeout [ 934.284278][T29645] Bluetooth: hci0: command tx timeout [ 935.494450][T29645] Bluetooth: hci7: command tx timeout [ 935.815540][T29839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 935.828483][T29839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 935.837537][T29839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 935.847414][T29839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 935.855388][T29839] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 935.865286][T29839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 936.364536][T29645] Bluetooth: hci0: command tx timeout [ 937.564636][T29645] Bluetooth: hci7: command tx timeout [ 937.964753][T29645] Bluetooth: hci8: command tx timeout [ 938.444700][T29645] Bluetooth: hci0: command tx timeout [ 939.093337][T29645] Bluetooth: hci12: command 0x0406 tx timeout [ 939.644900][T29839] Bluetooth: hci7: command tx timeout [ 940.044907][T29839] Bluetooth: hci8: command tx timeout [ 942.125234][T29839] Bluetooth: hci8: command tx timeout [ 944.215408][T29839] Bluetooth: hci8: command tx timeout [ 944.828376][T29645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 944.838934][T29645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 944.848283][T29645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 944.859707][T29645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 944.869158][T29645] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 944.876851][T29645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 946.925713][T29645] Bluetooth: hci9: command tx timeout [ 949.005840][T29645] Bluetooth: hci9: command tx timeout [ 949.335254][T29645] Bluetooth: hci13: command 0x0406 tx timeout [ 951.086212][T29839] Bluetooth: hci9: command tx timeout [ 953.166544][T29839] Bluetooth: hci9: command tx timeout [ 960.821784][T29645] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 960.834089][T29645] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 960.844773][T29645] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 960.854181][T29645] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 960.866044][T29645] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 960.874152][T29645] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 962.927487][T29839] Bluetooth: hci14: command tx timeout [ 965.007650][T29839] Bluetooth: hci14: command tx timeout [ 967.087878][T29839] Bluetooth: hci14: command tx timeout [ 969.168232][T29839] Bluetooth: hci14: command tx timeout [ 986.930113][ T30] INFO: task syz-executor:29830 blocked for more than 143 seconds. [ 986.938186][ T30] Not tainted 6.11.0-syzkaller-10045-g97d8894b6f4c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 986.989841][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 987.030681][ T30] task:syz-executor state:D stack:24128 pid:29830 tgid:29830 ppid:1 flags:0x00004004 [ 987.109122][ T30] Call Trace: [ 987.125143][ T30] [ 987.128157][ T30] __schedule+0x1843/0x4ae0 [ 987.191784][ T30] ? __pfx___schedule+0x10/0x10 [ 987.196755][ T30] ? __pfx_lock_release+0x10/0x10 [ 987.270584][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 987.276186][ T30] ? schedule+0x90/0x320 [ 987.321720][ T30] schedule+0x14b/0x320 [ 987.325990][ T30] schedule_preempt_disabled+0x13/0x30 [ 987.380132][ T30] __mutex_lock+0x6a7/0xd70 [ 987.384757][ T30] ? xas_find_marked+0xf80/0x10e0 [ 987.420030][ T30] ? __mutex_lock+0x52a/0xd70 [ 987.424816][ T30] ? add_one_compat_dev+0x10d/0x710 [ 987.474392][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 987.479532][ T30] ? xa_find+0x36c/0x420 [ 987.520009][ T30] ? __pfx_down_read+0x10/0x10 [ 987.524883][ T30] add_one_compat_dev+0x10d/0x710 [ 987.564641][ T30] ? fs_reclaim_acquire+0x93/0x140 [ 987.574842][ T30] rdma_dev_init_net+0x1f1/0x280 [ 987.604685][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 987.639929][ T30] ops_init+0x31e/0x590 [ 987.644258][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 987.687527][ T30] setup_net+0x287/0x9e0 [ 987.692160][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 987.721444][ T30] ? __pfx_setup_net+0x10/0x10 [ 987.726375][ T30] copy_net_ns+0x33f/0x570 [ 987.760524][ T30] create_new_namespaces+0x425/0x7b0 [ 987.765930][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 987.807484][ T30] ksys_unshare+0x619/0xc10 [ 987.831369][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 987.836501][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 987.864374][ T30] ? do_syscall_64+0x100/0x230 [ 987.869257][ T30] __x64_sys_unshare+0x38/0x40 [ 987.896070][ T30] do_syscall_64+0xf3/0x230 [ 987.909956][ T30] ? clear_bhb_loop+0x35/0x90 [ 987.914742][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.943885][ T30] RIP: 0033:0x7fc94e77f6f7 [ 987.948481][ T30] RSP: 002b:00007ffd0d3c0cb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 987.988347][ T30] RAX: ffffffffffffffda RBX: 00007fc94e935f40 RCX: 00007fc94e77f6f7 [ 988.020011][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 988.028182][ T30] RBP: 00007fc94e936a38 R08: 0000000000000000 R09: 0000000000000000 [ 988.058538][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 988.082216][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 988.107337][ T30] [ 988.119995][ T30] INFO: task syz-executor:29847 blocked for more than 144 seconds. [ 988.127997][ T30] Not tainted 6.11.0-syzkaller-10045-g97d8894b6f4c #0 [ 988.169984][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 988.178740][ T30] task:syz-executor state:D stack:23152 pid:29847 tgid:29847 ppid:1 flags:0x00004006 [ 988.236312][ T30] Call Trace: [ 988.239679][ T30] [ 988.254698][ T30] __schedule+0x1843/0x4ae0 [ 988.259611][ T30] ? __pfx___schedule+0x10/0x10 [ 988.286955][ T30] ? __pfx_lock_release+0x10/0x10 [ 988.304521][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 988.328969][ T30] ? schedule+0x90/0x320 [ 988.337939][ T30] schedule+0x14b/0x320 [ 988.360576][ T30] schedule_preempt_disabled+0x13/0x30 [ 988.366155][ T30] __mutex_lock+0x6a7/0xd70 [ 988.390045][ T30] ? xas_find_marked+0xf80/0x10e0 [ 988.395250][ T30] ? __mutex_lock+0x52a/0xd70 [ 988.416940][ T30] ? add_one_compat_dev+0x10d/0x710 [ 988.430083][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 988.435389][ T30] ? xa_find+0x36c/0x420 [ 988.462661][ T30] ? __pfx_down_read+0x10/0x10 [ 988.467637][ T30] add_one_compat_dev+0x10d/0x710 [ 988.500205][ T30] ? fs_reclaim_acquire+0x93/0x140 [ 988.505438][ T30] rdma_dev_init_net+0x1f1/0x280 [ 988.536744][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 988.550041][ T30] ops_init+0x31e/0x590 [ 988.554914][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 988.580700][ T30] setup_net+0x287/0x9e0 [ 988.585063][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 988.620068][ T30] ? __pfx_setup_net+0x10/0x10 [ 988.625001][ T30] copy_net_ns+0x33f/0x570 [ 988.629692][ T30] create_new_namespaces+0x425/0x7b0 [ 988.660194][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 988.666041][ T30] ksys_unshare+0x619/0xc10 [ 988.689560][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 988.713817][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 988.726191][ T30] ? do_syscall_64+0x100/0x230 [ 988.747532][ T30] __x64_sys_unshare+0x38/0x40 [ 988.760055][ T30] do_syscall_64+0xf3/0x230 [ 988.764660][ T30] ? clear_bhb_loop+0x35/0x90 [ 988.769404][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.808194][ T30] RIP: 0033:0x7f395457f6f7 [ 988.826280][ T30] RSP: 002b:00007ffe46fa00a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 988.849843][ T30] RAX: ffffffffffffffda RBX: 00007f3954735f40 RCX: 00007f395457f6f7 [ 988.858508][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 988.892997][ T30] RBP: 00007f3954736a38 R08: 0000000000000000 R09: 0000000000000000 [ 988.917711][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 988.946054][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 988.966394][ T30] [ 988.988346][ T30] [ 988.988346][ T30] Showing all locks held in the system: [ 989.010351][ T30] 3 locks held by kworker/u8:0/11: [ 989.015818][ T30] #0: ffff88802de39948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.067145][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.102661][ T30] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 989.129903][ T30] 1 lock held by khungtaskd/30: [ 989.135332][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 989.169760][ T30] 3 locks held by kworker/u8:5/996: [ 989.184745][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.237779][ T30] #1: ffffc90003b47d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.267682][ T30] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 989.297207][ T30] 6 locks held by kworker/u8:6/1114: [ 989.316556][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.346147][ T30] #1: ffffc90003f07d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.371417][ T30] #2: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 989.398532][ T30] #3: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 989.417153][ T30] #4: ffff888024710768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 989.450101][ T30] #5: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 989.477139][ T30] 2 locks held by dhcpcd/4882: [ 989.498475][ T30] #0: ffffffff8fca0268 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 989.527127][ T30] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 989.556536][ T30] 2 locks held by getty/4965: [ 989.566423][ T30] #0: ffff88802e6dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 989.597618][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 989.625287][ T30] 6 locks held by kworker/0:3/5218: [ 989.642920][ T30] 6 locks held by kworker/0:5/5267: [ 989.648298][ T30] 3 locks held by kworker/1:6/5722: [ 989.674874][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.707622][ T30] #1: ffffc9001679fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.732644][ T30] #2: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 989.763029][ T30] 2 locks held by syz-executor/29825: [ 989.768531][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 989.797893][ T30] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 989.830287][ T30] 4 locks held by syz-executor/29830: [ 989.835826][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 989.860221][ T30] #1: ffffffff8fa2b4f0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 989.882859][ T30] #2: ffffffff8fa2b6b0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 989.906479][ T30] #3: ffff88804d34cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 989.930181][ T30] 5 locks held by syz-executor/29835: [ 989.935633][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 989.956598][ T30] #1: ffffffff8fa2b4f0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 989.970395][ T30] #2: ffffffff8fa2b6b0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 989.991987][ T30] #3: ffff88805a2b8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 990.013777][ T30] #4: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 990.034624][ T30] 6 locks held by syz-executor/29841: [ 990.049986][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 990.059758][ T30] #1: ffffffff8fa2b4f0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 990.085362][ T30] #2: ffffffff8fa2b6b0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 990.108068][ T30] #3: ffff88804d34cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 990.130882][ T30] #4: ffff88804d34d230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 990.151730][ T30] #5: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 990.170131][ T30] 4 locks held by syz-executor/29847: [ 990.175621][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 990.197117][ T30] #1: ffffffff8fa2b4f0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 990.220307][ T30] #2: ffffffff8fa2b6b0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 990.241744][ T30] #3: ffff88804d34cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 990.266813][ T30] 4 locks held by syz-executor/29878: [ 990.276868][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 990.290099][ T30] #1: ffffffff8fa2b4f0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 990.314918][ T30] #2: ffffffff8fa2b6b0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 990.330190][ T30] #3: ffff88804d34cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 990.353069][ T30] 2 locks held by syz-executor/29883: [ 990.358527][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 990.380398][ T30] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 990.402070][ T30] 2 locks held by syz-executor/29886: [ 990.407526][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 990.428748][ T30] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 990.450318][ T30] 4 locks held by syz-executor/29892: [ 990.455872][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 990.476746][ T30] #1: ffffffff8fa2b4f0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 990.500562][ T30] #2: ffffffff8fa2b6b0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 990.523943][ T30] #3: ffff88804d34cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 990.550280][ T30] 2 locks held by syz-executor/29898: [ 990.555736][ T30] #0: ffffffff8fcaec50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 990.575435][ T30] #1: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 990.592508][ T30] 1 lock held by syz-executor/29906: [ 990.598679][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 990.620942][ T30] 1 lock held by syz-executor/29911: [ 990.626324][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 990.649092][ T30] 1 lock held by syz-executor/29914: [ 990.658897][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 990.680344][ T30] 1 lock held by syz-executor/29919: [ 990.685711][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 990.707873][ T30] 1 lock held by syz-executor/29925: [ 990.717272][ T30] #0: ffffffff8fcbb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 990.739477][ T30] [ 990.743725][ T30] ============================================= [ 990.743725][ T30] [ 990.760590][ T30] NMI backtrace for cpu 1 [ 990.765095][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10045-g97d8894b6f4c #0 [ 990.775295][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 990.785404][ T30] Call Trace: [ 990.788724][ T30] [ 990.791706][ T30] dump_stack_lvl+0x241/0x360 [ 990.796434][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 990.801676][ T30] ? __pfx__printk+0x10/0x10 [ 990.806342][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 990.811355][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 990.816885][ T30] ? _printk+0xd5/0x120 [ 990.821104][ T30] ? __pfx__printk+0x10/0x10 [ 990.825761][ T30] ? __wake_up_klogd+0xcc/0x110 [ 990.830664][ T30] ? __pfx__printk+0x10/0x10 [ 990.835307][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 990.840391][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 990.846788][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 990.852912][ T30] watchdog+0xff4/0x1040 [ 990.857225][ T30] ? watchdog+0x1ea/0x1040 [ 990.861708][ T30] ? __pfx_watchdog+0x10/0x10 [ 990.866525][ T30] kthread+0x2f0/0x390 [ 990.870645][ T30] ? __pfx_watchdog+0x10/0x10 [ 990.875367][ T30] ? __pfx_kthread+0x10/0x10 [ 990.879998][ T30] ret_from_fork+0x4b/0x80 [ 990.884478][ T30] ? __pfx_kthread+0x10/0x10 [ 990.889193][ T30] ret_from_fork_asm+0x1a/0x30 [ 990.894110][ T30] [ 990.897969][ T30] Sending NMI from CPU 1 to CPUs 0: [ 990.903610][ C0] NMI backtrace for cpu 0 [ 990.903626][ C0] CPU: 0 UID: 0 PID: 5218 Comm: kworker/0:3 Not tainted 6.11.0-syzkaller-10045-g97d8894b6f4c #0 [ 990.903647][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 990.903660][ C0] Workqueue: events nsim_dev_trap_report_work [ 990.903691][ C0] RIP: 0010:unwind_get_return_address+0x51/0x90 [ 990.903723][ C0] Code: 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 2b 1f ba 00 48 8b 3b e8 a3 72 1e 00 85 c0 74 14 <43> 80 3c 37 00 74 08 48 89 df e8 10 1f ba 00 48 8b 03 eb 02 31 c0 [ 990.903738][ C0] RSP: 0018:ffffc90000006bc0 EFLAGS: 00000202 [ 990.903754][ C0] RAX: 0000000000000001 RBX: ffffc90000006c28 RCX: ffffffff91791000 [ 990.903767][ C0] RDX: ffffffff9193cc01 RSI: ffffc90000000000 RDI: ffffffff8157568b [ 990.903781][ C0] RBP: ffffc90000006c70 R08: ffffc90000007fe8 R09: 0000000000000000 [ 990.903800][ C0] R10: ffffc90000006c30 R11: fffff52000000d88 R12: ffff88802c620000 [ 990.903814][ C0] R13: ffffffff818066f0 R14: dffffc0000000000 R15: 1ffff92000000d85 [ 990.903828][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 990.903844][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 990.903857][ C0] CR2: 00007f3c4f735f84 CR3: 000000000e734000 CR4: 00000000003506f0 [ 990.903873][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 990.903884][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 990.903896][ C0] Call Trace: [ 990.903903][ C0] [ 990.903911][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 990.903934][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 990.903962][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 990.903983][ C0] ? nmi_handle+0x2a/0x5a0 [ 990.904008][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 990.904032][ C0] ? nmi_handle+0x14f/0x5a0 [ 990.904050][ C0] ? nmi_handle+0x2a/0x5a0 [ 990.904069][ C0] ? unwind_get_return_address+0x51/0x90 [ 990.904096][ C0] ? default_do_nmi+0x63/0x160 [ 990.904123][ C0] ? exc_nmi+0x123/0x1f0 [ 990.904144][ C0] ? end_repeat_nmi+0xf/0x53 [ 990.904171][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 990.904196][ C0] ? __init_begin+0x41000/0x41000 [ 990.904217][ C0] ? no_hash_pointers_enable+0x61/0xe0 [ 990.904245][ C0] ? do_softirq+0x11b/0x1e0 [ 990.904268][ C0] ? unwind_get_return_address+0x51/0x90 [ 990.904296][ C0] ? unwind_get_return_address+0x51/0x90 [ 990.904325][ C0] ? no_hash_pointers_enable+0x61/0xe0 [ 990.904352][ C0] ? unwind_get_return_address+0x51/0x90 [ 990.904380][ C0] [ 990.904386][ C0] [ 990.904394][ C0] arch_stack_walk+0xfd/0x150 [ 990.904415][ C0] ? do_softirq+0x11b/0x1e0 [ 990.904440][ C0] stack_trace_save+0x118/0x1d0 [ 990.904461][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 990.904480][ C0] ? stack_trace_save+0x118/0x1d0 [ 990.904502][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 990.904526][ C0] kasan_save_track+0x3f/0x80 [ 990.904548][ C0] ? kasan_save_track+0x3f/0x80 [ 990.904569][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 990.904593][ C0] ? __kmalloc_node_track_caller_noprof+0x225/0x440 [ 990.904612][ C0] ? kmalloc_reserve+0x111/0x2a0 [ 990.904629][ C0] ? __alloc_skb+0x1f3/0x440 [ 990.904644][ C0] ? synproxy_send_client_synack_ipv6+0x1ba/0xc30 [ 990.904671][ C0] ? nft_synproxy_do_eval+0x739/0xa60 [ 990.904697][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 990.904722][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 990.904748][ C0] ? nf_hook_slow+0xc3/0x220 [ 990.904769][ C0] ? NF_HOOK+0x29e/0x450 [ 990.904786][ C0] ? NF_HOOK+0x3a4/0x450 [ 990.904808][ C0] ? __netif_receive_skb+0x1ea/0x650 [ 990.904830][ C0] ? process_backlog+0x662/0x15b0 [ 990.904853][ C0] ? __napi_poll+0xcb/0x490 [ 990.904873][ C0] ? net_rx_action+0x89b/0x1240 [ 990.904895][ C0] ? handle_softirqs+0x2c5/0x980 [ 990.904938][ C0] __kasan_kmalloc+0x98/0xb0 [ 990.904962][ C0] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 990.904981][ C0] ? __alloc_skb+0x1f3/0x440 [ 990.904999][ C0] ? __alloc_skb+0x1f3/0x440 [ 990.905016][ C0] kmalloc_reserve+0x111/0x2a0 [ 990.905035][ C0] __alloc_skb+0x1f3/0x440 [ 990.905054][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 990.905077][ C0] synproxy_send_client_synack_ipv6+0x1ba/0xc30 [ 990.905107][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 990.905134][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 990.905163][ C0] ? synproxy_pernet+0x45/0x270 [ 990.905191][ C0] nft_synproxy_do_eval+0x739/0xa60 [ 990.905220][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 990.905251][ C0] ? __pfx_validate_chain+0x10/0x10 [ 990.905275][ C0] nft_do_chain+0x4ad/0x1da0 [ 990.905305][ C0] ? nf_nat_inet_fn+0xa30/0xd10 [ 990.905325][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 990.905363][ C0] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 990.905385][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 990.905408][ C0] nft_do_chain_inet+0x418/0x6b0 [ 990.905435][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 990.905460][ C0] ? nf_nat_ipv6_local_in+0x1cd/0x620 [ 990.905484][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 990.905505][ C0] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 990.905528][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 990.905554][ C0] nf_hook_slow+0xc3/0x220 [ 990.905578][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 990.905596][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 990.905614][ C0] NF_HOOK+0x29e/0x450 [ 990.905632][ C0] ? NF_HOOK+0x9a/0x450 [ 990.905648][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 990.905667][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 990.905686][ C0] ? ip6_rcv_finish_core+0x1fb/0x410 [ 990.905707][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 990.905724][ C0] NF_HOOK+0x3a4/0x450 [ 990.905740][ C0] ? skb_orphan+0xae/0xd0 [ 990.905758][ C0] ? NF_HOOK+0x9a/0x450 [ 990.905774][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 990.905797][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 990.905818][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 990.905836][ C0] __netif_receive_skb+0x1ea/0x650 [ 990.905860][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 990.905886][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 990.905907][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 990.905933][ C0] ? __pfx_lock_release+0x10/0x10 [ 990.905960][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 990.905989][ C0] process_backlog+0x662/0x15b0 [ 990.906016][ C0] ? process_backlog+0x33b/0x15b0 [ 990.906044][ C0] ? __pfx_process_backlog+0x10/0x10 [ 990.906067][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 990.906095][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 990.906123][ C0] __napi_poll+0xcb/0x490 [ 990.906146][ C0] net_rx_action+0x89b/0x1240 [ 990.906181][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 990.906215][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 990.906247][ C0] handle_softirqs+0x2c5/0x980 [ 990.906273][ C0] ? do_softirq+0x11b/0x1e0 [ 990.906297][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 990.906324][ C0] do_softirq+0x11b/0x1e0 [ 990.906346][ C0] [ 990.906352][ C0] [ 990.906359][ C0] ? __pfx_do_softirq+0x10/0x10 [ 990.906382][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 990.906410][ C0] ? rcu_is_watching+0x15/0xb0 [ 990.906430][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 990.906453][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 990.906479][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 990.906502][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 990.906525][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 990.906554][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 990.906588][ C0] ? process_scheduled_works+0x976/0x1850 [ 990.906613][ C0] process_scheduled_works+0xa63/0x1850 [ 990.906650][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 990.906679][ C0] ? assign_work+0x364/0x3d0 [ 990.906704][ C0] worker_thread+0x870/0xd30 [ 990.906732][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 990.906758][ C0] ? __kthread_parkme+0x169/0x1d0 [ 990.906785][ C0] ? __pfx_worker_thread+0x10/0x10 [ 990.906814][ C0] kthread+0x2f0/0x390 [ 990.906831][ C0] ? __pfx_worker_thread+0x10/0x10 [ 990.906854][ C0] ? __pfx_kthread+0x10/0x10 [ 990.906871][ C0] ret_from_fork+0x4b/0x80 [ 990.906895][ C0] ? __pfx_kthread+0x10/0x10 [ 990.906912][ C0] ret_from_fork_asm+0x1a/0x30 [ 990.906946][ C0] [ 991.741801][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 991.748724][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10045-g97d8894b6f4c #0 [ 991.758926][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 991.769023][ T30] Call Trace: [ 991.772358][ T30] [ 991.775339][ T30] dump_stack_lvl+0x241/0x360 [ 991.780073][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.785334][ T30] ? __pfx__printk+0x10/0x10 [ 991.790024][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 991.796082][ T30] ? vscnprintf+0x5d/0x90 [ 991.800465][ T30] panic+0x349/0x880 [ 991.804430][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 991.810631][ T30] ? __pfx_panic+0x10/0x10 [ 991.815102][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 991.820530][ T30] ? __irq_work_queue_local+0x137/0x410 [ 991.826233][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 991.831699][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 991.838016][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 991.844361][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 991.850575][ T30] watchdog+0x1033/0x1040 [ 991.854959][ T30] ? watchdog+0x1ea/0x1040 [ 991.859435][ T30] ? __pfx_watchdog+0x10/0x10 [ 991.864171][ T30] kthread+0x2f0/0x390 [ 991.868456][ T30] ? __pfx_watchdog+0x10/0x10 [ 991.873186][ T30] ? __pfx_kthread+0x10/0x10 [ 991.877818][ T30] ret_from_fork+0x4b/0x80 [ 991.882375][ T30] ? __pfx_kthread+0x10/0x10 [ 991.887092][ T30] ret_from_fork_asm+0x1a/0x30 [ 991.892103][ T30] [ 991.895445][ T30] Kernel Offset: disabled [ 991.899994][ T30] Rebooting in 86400 seconds..