last executing test programs: 13.701647877s ago: executing program 4 (id=2652): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file6\x00', 0x2) 12.685778732s ago: executing program 4 (id=2654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 9.118993296s ago: executing program 4 (id=2666): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_usb_disconnect(r0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') socket$inet(0x2, 0x0, 0x0) 7.16109235s ago: executing program 1 (id=2675): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) r1 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x5}, 0x2, 0x0, 0x7, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000380)) 6.900907405s ago: executing program 1 (id=2677): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @dev}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, @empty, @multicast2}}}}}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) gettid() socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c8ca4688a000000000000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x3c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'team_slave_1\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'team0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x7964}, @in6={0xa, 0x4e20, 0x3, @local, 0x5}], 0x48) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x1}, 0x10) close(r0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r5, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x281, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x404e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r6, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x10, 0x40, 0x6, 0x7}}) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x0) 6.547018422s ago: executing program 0 (id=2678): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f5}, {&(0x7f0000000bc0)="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", 0x25a}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463", 0x35}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 6.370195784s ago: executing program 0 (id=2679): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000b10b5103a09222689b5010203010902240001000000000904000002f46479000905ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.121268496s ago: executing program 1 (id=2682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000006800010000000000000000000a0000000000000006"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c002b800000030000000000080003000000000008000800", @ANYRES32, @ANYBLOB="4c001a80100002800c00019808000f000000000038000280260001"], 0x88}}, 0x0) 5.948987566s ago: executing program 1 (id=2683): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 5.849792735s ago: executing program 4 (id=2684): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000340)={0xb0000000}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.76630655s ago: executing program 4 (id=2685): pipe2$9p(0x0, 0x80800) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000024c0)=ANY=[@ANYBLOB="12010000cf21b7202104d804336a0000000809021200010000000009040000000202ff"], 0x0) 5.449047831s ago: executing program 2 (id=2686): setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) 4.77089816s ago: executing program 3 (id=2689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x0) 3.514337117s ago: executing program 2 (id=2690): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xbc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40811}, 0x88c0) 3.445778089s ago: executing program 2 (id=2691): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) sendfile(r1, r0, 0x0, 0x80000000) 3.351634363s ago: executing program 0 (id=2692): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) write(r0, &(0x7f0000000040)="82eff4f5ae9b845d44e2c57dfcbce057f20b9e2ae4d8d219", 0x18) 3.350685083s ago: executing program 2 (id=2693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000880)="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", 0x5e9}, {&(0x7f0000000040)="6c208464ca4eae6710c60300", 0xc}], 0x2) 3.21494768s ago: executing program 0 (id=2694): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 3.125311105s ago: executing program 0 (id=2695): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', &(0x7f0000000740), &(0x7f0000000880), 0x100) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = fcntl$getown(0xffffffffffffffff, 0x9) mount$fuse(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500), 0x164000, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64990030303030303030303030303030303030303032303030302c757365725f69643d1e596b65c56d734e7638ad93af423b229c38a86ab93de7f61ba136dd95d02dca346869417b0200523eafa03ca1d6bfc67135247f09fc9533495e2773b3a8a68a9d40db5b430ef8d6b3b98b5d143cb13a1a8af784aa7be3bfc29e1b62809051ed19a66b1556a888a4ca1ff0da954b16395af6da1bce27f3ec15cc90a8f88b4356026561bf2ac1ebd431488a6f6ff9de1fc6f02d4cd94342179e2eed07bc14714583a40c048638da3d3807f40500e0a2b6000046fcf1119879016aaba139942c39cb34b713e7a3e3ced2282b66ed71c4d18025e16b23469ea1e5a36ced6e91", @ANYRESDEC=0xee00, @ANYBLOB="2c67726fc35e7d3f643d", @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="2c50626a5f2feed1d13d2e2f632e328d75f02e6e65742f73030000000000000142c12448c05aae08d01ef89f940d1132906cba5d96486d9c08", @ANYRESDEC, @ANYBLOB="af991443a59703df479c1c30d5463525b1edc2ba17647304"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0xc942, 0x0) r3 = socket(0x40000000002, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="53107172ae91c9522941ff2fa46527703a1ae870f8a105154a6c437df3c8c9204b9e43a2f4cee0721f36280f132518a3d36c5d13540e336d936071bb7cc92bd68ed660c27b211285d12506865fe4842b985968a06ab9de06aeab9605cac88883efb743fd6ceb46f21e7ccdcc17442ee98c55f95bf5b2e8b8f239b6ada8df960f0d2db0b39b75a368e893cca213bc186bae3fdb9028c977782b41459a67b2ee70377f79c031941b39db32a1e23bdf067f41b604a79b7ef54da9643eca17cc4a559cd9e915efcfbd0ff9e6db", 0xcb}, {&(0x7f0000000140)}, {&(0x7f0000000180)="fd12fef5da9ddd56ee2e2fab5c30fa4f3bb666bf391ac2b2f49499cb9680f6fd865ca415219f30752ed8acafb4a266fd9f56fc2a575ead26d2248125e5008dddbc693ceae96581f4b67cc4b803952e564d333d273049344b98f44ca1c017e41c0c95262f5266a31f3d678c2ba6ac564c1a2b70a8c360bafe1b79284f5754864ce9ef08fdba3116e9e2db1cf313e789fef3c60329f99bb250a4c63a991b7fff8207ee02564de2dd58801d7d4cdcdfcb3a9ec4c3bda69dcf77021b37cad2f98c0951e8315e7ca55d696b6360b096ae496c13d932309ba53c2f335c9979804aed1d1f0d80687cba49b1824d5513a2ebf6755832dd54", 0xf4}, {&(0x7f0000000280)="2c2a6313505cc944aca90ac1ea25fc399e187d1020db8ee1819dfc1ef7d212eee4b6a4a208ab88e59999611150ba5e252f70ccf1a8a2d39cb258a2775cd7896e539a1372b41f3c63643294c46aa7503768eeda3d7fcbef9806c3c94b5f70a3a208b9b76cbdf33eedc6d6711991fba83688", 0x71}, {&(0x7f0000000300)="e93d01d69d8e441f9a858eec7d472887abcb64521ac214b6e3278e316366c2ba67a322a896be5b9d99c60c5a57e8117f811a8321a3e664bfa42f0fe61e9322ba03623ccb9dc5a9e2d136c00113809030a26580b23797b118d2f1133030e8bd9701f6a888636a1463537102768370f1c34435c247a2d5b344ec0ea253e8c539276101033a", 0x84}, {&(0x7f00000003c0)="7a6bae6fd8c57e4f6599418c774b6eb4288f3d2897abe3d70bf2e76c", 0x1c}, {&(0x7f0000000400)="5ca5378d8ee5cc6bbb90cd39473c215c2d24e86e4b3d2f29500c55f61cc064135993a56bf33957d15207d1af211452b6ff3ef6512433d392642a3fff75d83d4e48839428b64a1d4460fd07cd54e49519c1be25fc4df99137e863c8eded", 0x5d}, {&(0x7f0000000480)="3c3052acbd5b2a1d716c1a6934ff5df933594139b6031b55f4d83c4d3161f170bf3e0d42d5b40487e7e89f6731006400fb4687ff480111d3adc9831748da6ed7248befee635a7e12e0c47a1a4758d833ebd93538d9df3e7a0dbbd74fbccccd63085adc32ab124ca9110def567df5715273121e8587eb595e8ce4d62cbe", 0x7d}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000001c000000030001000100000002000477", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x1}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)="05d7399eb84f6188720fcad0fa36a31886aeb54b5203b8b6e0934f4c8bcef587a2f3015a8a2e46a37e", 0x29}, {&(0x7f0000000800)="45d6e2479542d1e88b01858be8eaecf1a3602b06f28258bb8a33d9a9e9316130fc68e930ca41e577cfe3eab2d5ab84f17a8ae07b5cb8d7af46217f3f3af6861648b50bab123d26efa71c0b8f063add956f2a5044f3038f702ba92d44b3f7b2ffe7ca2f5cc99f6061825d3d8703b9f471aaf5951c5c879dad94d82940595c63b70b0fad", 0x83}], 0x2, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x40011}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000bc0)="23205f8f5ecd954f0e6bed6d54da83dbff3299793a44218c7f03fe9681fbb6523f0bd5889f3184da3c437543f952b01dab9f27df2c869009d25872877b669827f06bdd3340e06ec458d84fcfd8945342073fe0b8695a2a18be2d8f61cd9844ead2469bb88562a92119fc10a25c381ccc1046f5e559272a337e79328d0a233dec", 0x80}, {&(0x7f0000000c40)="d38ba7e01561b1d03d40a0c012917359463a75f1f124eecf0f6cf5d2b8860d01101ef586df74153197d404650c95e0bde1c0c8423159734e787a6fa87d97da4d50cc5f31ad37d8ea51374f148d86af7a37112d3ec05b7c98c3d0bb8228e086cfd1945dbbd201707d4ad56c345e0e7584b668f360b4fe18bf64b5bd273993fdb6f952b81b27b982d2ce3d09852602f2860b8d62735b508f2fc1edbb5cea1b91a3900bc285f2d8038a4a43009e9a2f7c324b70358e19d5370cc25e334d02e1c42a0ddfcfea8bf0258d5fda20a6", 0xcc}, {&(0x7f0000000d40)="53d416", 0x3}, {&(0x7f0000000d80)="ca148f7101bdddf944b0f4c348dc22b8b05c371090e2204d3c7eeb09246da2450b1e4f1ebebaac9f9f00327a7ff84ceddbc5d52b98337f0c54e86e12a82779d143abbf0bdcf84e3f09f65195b2fa7cd94c3aa1496a71c09d0959117879b01f236539d96b440657a21bd338a8b3e56b6d28aace", 0x73}, {&(0x7f0000000e00)="6e41dc21d08268a6f56e6f1a9c555e0b7eab0e781bdd4608384a19f902405c01f14378ae885278704432fe53d8a229e9ebccbc744279e919800754eb8699b8e09f16157f0f6d476572e459e5", 0x4c}, {&(0x7f0000000e80)="d8e320f4206fd562c73e64a0cae48c7172d35bb1f6b88aec98f92c0cb5af6d2b0bfe2280899607a8c5b95234b60c5d99cc1b835df97150ed7488531b7b3cf3ae19a0c991d392b2a2ac6383dfb882e34c8498dd2cdd292f076a69a1bcaff2b90b47345f5912078a3aa948df88816149716fd7573ec6df5e000f021f454e4d5092315a6f77321baef217ecd2aa927a989f303b557feaaebbf0dd123a06db9c6ee2ae5c93e3a41296db23d1381f75dc36a360d268e810b991cfdd19eae75a38d8c74739df0ea9f55b2a49bc561f4058ddf51f1d0f1e67be555237fa5c38e9096f362fba785179bea648fe50b947", 0xec}, {&(0x7f0000000f80)="a68ff581ac795503412c4ada7ba2630108615e37f062d0dbcd7813aabc4437984d016569d06e588102a08899e0388eb448f39ab4e180c74ce8a76afa9d8aff84da5f6a0d980440fefb087ab86af41bc21ac005af8114f3c408089b42d5ed4a79fc3440a3bc18df20151507b3120e796f9ea96fb36ecf6e35f18d5d41a546fa35baa9e164dc8b5d78c0c9c31e169543c07dbe71b91c69d4be2eeb9bf245d2ad287138a2cf73cb0732c2678bb7e6", 0xad}], 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000003000000000000000010000000100881f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40000}}, {{&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001440)="0b19940439e3bcf56bf93c6e556947f7e2eb1f69fcc4a80d073a62ad7bd2c47440d20b7e84c377d7e10d3eefaeebeabfec30c464217bfff79dc94027d715a1c0856a17d8849cb44671df8f97bc0fbb4c279a82c55c929b0dd974fcf3722005757b5aab9833935b9d71b6b8ffabb85192f455f4614646564554ed63a1c85727143bea3b7d9f03ca73fe8260e7c5858a279282b4f8057fa83259834ec4c5640bf667ad39001f2459a2a97935500eefde10ce8eed3e92f0556d351c46c5a3e5323b1d047bdec80e1230426219c79cddfb20141771ba", 0xd4}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30, 0x4}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001840)="a785ff36f1d5b1f0e30739fda53de936198672416d2c207ff4c6bda5d34aeb8d37c8394132008692f69d59a28223972856c142b46437e694ba9940e7735816f55fa43c64d0db2c06022d748dc34dac5ec8fef16d8afad67a9d89324d90fdbeb91351764d639d6d03015d06978ae57585f5f59ddc08efa424e07336340ae2a5a15e1b9b1a74394cc6ec12151b403c5508971e198807eca846b9ad9048c0cd2ed58de2d0997e2f3a839a50a6f6c484b0342fbf534b8c1b89281e224913707f78e058c1372c7fdf8482200044ac59c65fe8a4af024d51cfd0475f42bfe5bbb89aa1d2278730429e150808445ed4db58bc1fe218a56fa78b1e3964aac69e", 0xfc}], 0x1, &(0x7f0000001b00), 0x0, 0x44}}], 0x5, 0x800) r4 = socket$inet6(0xa, 0x1, 0x84) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r4) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001340)={0x2, 0x401, 0x7fffffff, 0x0, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r6, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r6, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f0000001b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a88326d35b472860080002000000000000000800"], 0x38, 0x4004000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="9ff3ca704f578553cd48e247b89354ed502a835aab3123b66874978cfa09599661019464493a44264c08425c6180e6317765cdf8e9ff47ef7508207f09c25a81edc0b845601cafcdc495bf732a100f46bfc31954167d1c461931a5", 0x5b}], 0x1, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r4, r5, r6]}}], 0x48, 0x881}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001400)="04e753bbfa8f5b9633e07f6ea865d1bf46ef36b42b0c37c4ed", 0x19}], 0x1, 0x0, 0x0, 0x40000001}}, {{&(0x7f0000001480)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001500)="c5969ef8e773f467d37f25a9871a720469d2ae63574f543feedde6c538499485f7af5e6ef0907945df906e1a6dd11e3b1f1c39a1a6742a38f4b3be69b7616becf0b8d390f38861d7090871a926976e8acac3acfe77d1f6db186d0f1f7ac4e05ee5c1227ce7f54935521ad0c5af331cff68312a72e03079e0d4f01f", 0x7b}, {&(0x7f0000001580)="b1bbb21edaea2767700d92ffcd0f1381baa2db54e97946df2230cf0480223c1c163e30a9fe5290d1b34ec66f6cbba5c1695ffa758b412374bf627cb73a94245396b2e993d7febb4bd9f9d59a068445fc06e2baee00a0750490ef6f6f1ffa69b7e114434c11fcca8e7783229527e421e4833d15936dfec4e4be923623544e4ab9a3fb3c04702928188959c5e1a12c29ecf02a69517026182bc21ef44b1643d99c29834dfeca8efbd70e276cd00c1bd5c09323539c87d5e12f7a733869404e4c6c090abf13aaf6", 0xc6}, {&(0x7f0000001680)="7d99dee3abf7b5caed69f69310cc692d982df77c06883c83c93eb7d1e99ba00f72d7fc8dfd9677f598d74da4df025fc8b507391179bb901e44f7355dbd8c33587eeeab8a2302eee01aa3", 0x4a}, {&(0x7f0000001700)="29c2c8ffb0d08b4f8f4e1970bc560789ee89999f09ac600d9ff1a400f917", 0x1e}, {&(0x7f0000001740)="7164a48373e1668672b76258810a48957da975bdd0df9b01f8d7bfd5261e6676c95c27d348027fb0a7f287f30c30fb35424165058b151aef42212d3c95fef392988380ec3d3e5a13ccb2a1327c584df5a7546a104dac4a8736d24d5f8cf56c28aa9ca6db40f4edf2d9ef954c475a78b5d251288f2b963047c0f0e47edc5a61c2dc567cd0d2a2cc62c5f6", 0x8a}, {&(0x7f0000001800)="d44bc31747f3369fd113f4d8190cb5a5db600514d5abb3c706ffe981308f8308ee7a84c0d0001852a10420fa41ed9ced1b2839f0e0fe4fbdc2c6462bfded4735bc956f7ca5a84676547e4bdacb3d6130d60332b76b4d32ad1541856ddbd1d277", 0x60}, {&(0x7f0000001880)="8b99d108217ab1e7fdd8e43368557f5be564b10d19cbdad17f508ac11c9421d7d3a7b7bf53389099a3721f9483f4ea790e5e7e65dc997861b3b38addb01046cde6d6ee26a05715006a49cedcdc8676db5772116a85ad5237058152d73be88ec545e649f059f9e41c7d2cad17bdbd7cc1b509d0224ae2d19e1ee9bce0378bb0b802a47241e1c53ae9f8bca9834de7d07d45c1c198af2600e728d433308fd824ef395f7911f8b7c3", 0xa7}, {&(0x7f0000001940)="0cdbbc", 0x3}, {&(0x7f0000001980)="81a97e178aed1ccd98d4551025cf03798f6e9a8c54f430ecd9ac9ae0f32e07a647dec44c2e957aa1497e8eeb677b1700", 0x30}], 0x9, 0x0, 0x0, 0x8881}}], 0x4, 0x40080) r7 = shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) shmat(r7, &(0x7f0000235000/0x4000)=nil, 0x4000) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3.110065142s ago: executing program 2 (id=2696): r0 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x47, 0x0, 0x0, {0x0, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @dev, 0x0, 0x800}, @esp_ip4_spec={@remote, @remote}, {0x0, @dev}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x60, &(0x7f0000000180)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}, {@uuid_off}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_user={'obj_user', 0x3d, ']&'}}, {@appraise}]}) connect$pptp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) recvmmsg$unix(r4, &(0x7f0000002bc0)=[{{0x0, 0x40002, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x5411, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x21, 0xfffffffe, 0x1003104, 0x5, 0xffff, 0x5}}, 0x50) 3.045616149s ago: executing program 0 (id=2697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioperm(0x0, 0x0, 0x1000) ioperm(0x0, 0x9b4, 0x36f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x62, 0x12141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefd}) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000044c0)='./file0\x00', r5, 0xffffffffffffffff) 2.819042695s ago: executing program 1 (id=2698): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_io_uring_setup(0x5914, &(0x7f0000000440)={0x0, 0x0, 0x800, 0x0, 0x2f6}, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.600287424s ago: executing program 4 (id=2699): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.537814313s ago: executing program 3 (id=2700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 910.791555ms ago: executing program 2 (id=2701): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021b0002000000000904250000ff0127000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4b) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=""/4096, 0x1000) 893.080491ms ago: executing program 3 (id=2702): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x0, 0x10300}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000a80)) 626.062057ms ago: executing program 3 (id=2703): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0x1011, &(0x7f0000000c80)=ANY=[], 0x0) 412.1768ms ago: executing program 3 (id=2704): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$dsp(r0, &(0x7f0000000040)=""/179, 0xb3) 243.056205ms ago: executing program 3 (id=2705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 0s ago: executing program 1 (id=2706): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x4, 0x0, "ecb5d11cd616ff892dea3e4a5751e21e49a554a7571e50a7784cd089fa75a26181533fe6464e93a79421ccbebaafadeb7eda4c4c790cbd27fa2fefc1e976ec403e2a8c60ae88bbf21017af5572cc7e22"}, 0xd8) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) kernel console output (not intermixed with test programs): a tx timeout [ 2707.155648][T14986] Bluetooth: hci4: command 0x0405 tx timeout [ 2707.163446][T14994] Bluetooth: hci5: command 0x0c1a tx timeout [ 2707.181064][ T5393] usb 1-1: USB disconnect, device number 45 [ 2707.310262][ T8558] Bluetooth: hci2: command 0x0c1a tx timeout [ 2707.769157][T19080] Process accounting resumed [ 2707.776286][ T8558] Bluetooth: hci3: command 0x0c1a tx timeout [ 2708.597633][T19085] netlink: 'syz.3.2139': attribute type 21 has an invalid length. [ 2708.805007][T19091] Process accounting resumed [ 2709.508683][T14986] Bluetooth: hci4: command 0x0405 tx timeout [ 2709.534167][T19085] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2139'. [ 2709.550767][T14994] Bluetooth: hci5: command 0x0c1a tx timeout [ 2709.596680][ T8558] Bluetooth: hci1: command 0x0c1a tx timeout [ 2709.603767][T19085] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2139'. [ 2709.639642][T19094] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2139'. [ 2710.109470][T19101] Process accounting resumed [ 2711.203894][T19094] validate_nla: 3 callbacks suppressed [ 2711.203931][T19094] netlink: 'syz.3.2139': attribute type 4 has an invalid length. [ 2711.312821][T19094] netlink: 'syz.3.2139': attribute type 5 has an invalid length. [ 2711.353725][T19094] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2139'. [ 2711.450718][T19098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2711.457242][T19098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2711.463837][T19098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2711.474010][T19098] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2711.484727][T19098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2711.494932][T19085] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2139'. [ 2711.929628][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 2712.168309][ T29] audit: type=1326 audit(1728490619.467:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19123 comm="syz.4.2147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbe637dff9 code=0x0 [ 2712.322155][T19128] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2146'. [ 2713.152292][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.158664][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.370968][ T29] audit: type=1800 audit(1728490620.677:5318): pid=19134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2149" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 2713.550068][ T8558] Bluetooth: hci2: command 0x0c1a tx timeout [ 2713.557613][T17203] Bluetooth: hci4: command 0x0405 tx timeout [ 2713.563759][T14986] Bluetooth: hci1: command 0x0c1a tx timeout [ 2713.569936][T14986] Bluetooth: hci5: command 0x0c1a tx timeout [ 2713.576000][T17203] Bluetooth: hci3: command 0x0c1a tx timeout [ 2714.817780][T19139] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 2716.393792][T13786] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2716.470434][T19155] Process accounting resumed [ 2719.250665][T13786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2719.285563][T13786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2719.321353][T13786] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 2719.357056][T13786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.388319][T13786] usb 4-1: config 0 descriptor?? [ 2719.499721][T19171] netlink: 'syz.1.2159': attribute type 21 has an invalid length. [ 2719.523380][T17203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2719.535197][T17203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2719.544157][T17203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2719.556479][T17203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2719.616796][T19171] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'. [ 2719.633775][T13786] usbhid 4-1:0.0: can't add hid device: -71 [ 2719.649603][T13786] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2719.659965][T13786] usb 4-1: USB disconnect, device number 49 [ 2719.673854][T17203] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2719.681464][T17203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2719.723301][T19171] netlink: 'syz.1.2159': attribute type 4 has an invalid length. [ 2719.739066][T19171] netlink: 'syz.1.2159': attribute type 3 has an invalid length. [ 2719.747397][T19171] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2159'. [ 2719.799156][T19168] netlink: 'syz.1.2159': attribute type 21 has an invalid length. [ 2719.807809][T19168] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'. [ 2720.614679][T19168] netlink: 'syz.1.2159': attribute type 4 has an invalid length. [ 2720.629382][T19168] netlink: 'syz.1.2159': attribute type 5 has an invalid length. [ 2720.657626][T19168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2159'. [ 2720.675215][T19168] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2159'. [ 2720.707063][T19168] bridge0: port 2(bridge_slave_1) entered disabled state [ 2720.714687][T19168] bridge0: port 1(bridge_slave_0) entered disabled state [ 2720.729744][T17723] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2720.899401][T17723] usb 3-1: Using ep0 maxpacket: 8 [ 2720.921679][T17723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2720.931864][T17723] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2720.949716][T17723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2720.963151][T17723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2720.983079][T17723] usb 3-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2720.994184][T17723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.002383][T17723] usb 3-1: Product: syz [ 2721.007284][T17723] usb 3-1: Manufacturer: syz [ 2721.012733][T17723] usb 3-1: SerialNumber: syz [ 2721.033134][T17723] ti_usb_3410_5052 3-1:1.0: TI USB 3410 1 port adapter converter detected [ 2721.074992][T19167] chnl_net:caif_netlink_parms(): no params data found [ 2721.200774][T19167] bridge0: port 1(bridge_slave_0) entered blocking state [ 2721.209704][T19167] bridge0: port 1(bridge_slave_0) entered disabled state [ 2721.217047][T19167] bridge_slave_0: entered allmulticast mode [ 2721.225214][T19167] bridge_slave_0: entered promiscuous mode [ 2721.234218][T13786] usb 3-1: USB disconnect, device number 43 [ 2721.257704][T19167] bridge0: port 2(bridge_slave_1) entered blocking state [ 2721.271719][T19167] bridge0: port 2(bridge_slave_1) entered disabled state [ 2721.279204][T19167] bridge_slave_1: entered allmulticast mode [ 2721.286485][T19167] bridge_slave_1: entered promiscuous mode [ 2721.329682][T19167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2721.348386][T19167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2721.397911][T19167] team0: Port device team_slave_0 added [ 2721.409173][T19167] team0: Port device team_slave_1 added [ 2721.499146][T19167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2721.507731][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2721.534226][T19167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2721.547399][T19167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2721.554760][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2721.582067][T19167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2721.626043][T19167] hsr_slave_0: entered promiscuous mode [ 2721.639137][T19167] hsr_slave_1: entered promiscuous mode [ 2721.645811][T19167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2721.654034][T19167] Cannot create hsr debugfs directory [ 2721.724566][T17203] Bluetooth: hci0: command tx timeout [ 2721.738322][T10413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.853442][T19192] netlink: 'syz.3.2164': attribute type 21 has an invalid length. [ 2721.869463][T19192] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2164'. [ 2721.889891][T19192] netlink: 'syz.3.2164': attribute type 4 has an invalid length. [ 2721.897732][T19192] netlink: 'syz.3.2164': attribute type 3 has an invalid length. [ 2721.915920][T19192] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2164'. [ 2721.948716][T10413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.986508][T19194] netlink: 'syz.2.2165': attribute type 21 has an invalid length. [ 2721.995007][T19194] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2165'. [ 2722.008098][T19194] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2165'. [ 2722.057942][T10413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2722.077113][T19195] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2164'. [ 2722.134437][T10413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2722.271070][T10413] bridge_slave_1: left allmulticast mode [ 2722.290601][T10413] bridge_slave_1: left promiscuous mode [ 2722.297474][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 2722.307240][T10413] bridge_slave_0: left allmulticast mode [ 2722.313330][T10413] bridge_slave_0: left promiscuous mode [ 2722.319097][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.791590][T14994] Bluetooth: hci0: command tx timeout [ 2724.286897][T19212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2724.299973][T19212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2725.511082][T10413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2725.526612][T10413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2725.538848][T10413] bond0 (unregistering): Released all slaves [ 2725.674410][T19218] __nla_validate_parse: 1 callbacks suppressed [ 2725.674430][T19218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2170'. [ 2725.691218][T19206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2725.697424][T19206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2725.705952][T19206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2725.712556][T19206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2725.740527][T19206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2725.746476][T19206] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2725.770267][T19206] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2726.240322][T10413] hsr_slave_0: left promiscuous mode [ 2726.262917][T10413] hsr_slave_1: left promiscuous mode [ 2726.278218][T10413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2726.296134][T10413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2726.465188][T10413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2726.473380][T10413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2726.525032][T10413] veth1_macvtap: left promiscuous mode [ 2726.537488][T10413] veth0_macvtap: left promiscuous mode [ 2726.720985][T10413] veth1_vlan: left promiscuous mode [ 2726.736746][T10413] veth0_vlan: left promiscuous mode [ 2727.590532][T19261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2727.603404][T19261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2727.741866][T17203] Bluetooth: hci3: command 0x0c1a tx timeout [ 2727.748169][T17203] Bluetooth: hci2: command 0x0c1a tx timeout [ 2727.756734][T17203] Bluetooth: hci1: command 0x0c1a tx timeout [ 2727.789709][T17203] Bluetooth: hci0: command 0x040f tx timeout [ 2727.791099][T14986] Bluetooth: hci4: command 0x0405 tx timeout [ 2728.985868][T19271] Process accounting resumed [ 2729.269556][T10413] team0 (unregistering): Port device team_slave_1 removed [ 2729.632287][T10413] team0 (unregistering): Port device team_slave_0 removed [ 2729.899412][T14986] Bluetooth: hci0: command 0x040f tx timeout [ 2730.936352][T19241] validate_nla: 2 callbacks suppressed [ 2730.936373][T19241] netlink: 'syz.1.2178': attribute type 21 has an invalid length. [ 2730.950156][T19241] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2178'. [ 2730.959413][T19241] netlink: 'syz.1.2178': attribute type 4 has an invalid length. [ 2730.967171][T19241] netlink: 'syz.1.2178': attribute type 3 has an invalid length. [ 2730.975016][T19241] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2178'. [ 2730.984481][T19243] netlink: 'syz.3.2179': attribute type 21 has an invalid length. [ 2730.993743][T19243] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2179'. [ 2731.005288][T19243] netlink: 'syz.3.2179': attribute type 4 has an invalid length. [ 2731.013409][T19243] netlink: 'syz.3.2179': attribute type 3 has an invalid length. [ 2731.021389][T19243] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2179'. [ 2731.032376][T19255] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2178'. [ 2731.041776][T19256] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2179'. [ 2731.152403][T14994] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2731.161145][T19274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2731.167703][T19274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2731.181701][T19274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2731.190116][T19274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2731.197985][T19274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2731.300500][T19280] Bluetooth: MGMT ver 1.23 [ 2731.419703][T19286] random: crng reseeded on system resumption [ 2731.515669][T19167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2731.578034][T19167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2731.659191][T19167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2731.724344][T19167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2732.003658][T19167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2732.062737][T19167] 8021q: adding VLAN 0 to HW filter on device team0 [ 2732.088638][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 2732.095800][T10413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2732.128227][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 2732.135337][T10413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2732.177957][T19167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2732.199872][T19167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2732.374039][T19167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2732.445589][T19167] veth0_vlan: entered promiscuous mode [ 2732.497692][T19167] veth1_vlan: entered promiscuous mode [ 2732.529350][ T5732] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2732.575552][T19167] veth0_macvtap: entered promiscuous mode [ 2732.594647][T19167] veth1_macvtap: entered promiscuous mode [ 2732.634577][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2732.677676][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.929420][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2732.940534][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2732.952798][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2732.964481][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.032648][T19308] Process accounting resumed [ 2733.411827][T14986] Bluetooth: hci2: command 0x0c1a tx timeout [ 2733.429675][T14986] Bluetooth: hci1: command 0x0c1a tx timeout [ 2733.437850][ T5732] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2733.447311][T14986] Bluetooth: hci0: command 0x040f tx timeout [ 2733.453707][T14986] Bluetooth: hci4: command 0x0405 tx timeout [ 2733.459974][T14986] Bluetooth: hci3: command 0x0c1a tx timeout [ 2733.473428][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.489752][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2733.497848][ T5732] usb 4-1: Product: syz [ 2733.517872][ T5732] usb 4-1: Manufacturer: syz [ 2733.532376][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.542761][ T5732] usb 4-1: SerialNumber: syz [ 2733.654882][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.665459][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.675439][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.685975][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.696448][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.707305][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.717557][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.728206][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.741152][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.752136][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.762108][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.772812][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.782806][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.793845][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.810247][T19167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2733.831392][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.841981][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.853670][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.864805][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.887295][ T5732] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2733.905243][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.916701][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.934306][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.946380][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.966451][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2733.977075][T15835] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2733.979355][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2733.997499][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2734.008168][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.019471][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2734.030711][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.041003][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2734.042474][ T5329] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2734.051731][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.072632][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2734.083383][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.093565][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2734.105488][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.115605][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2734.126568][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.158197][T15835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2734.182908][T19167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2734.198377][T15835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2734.223270][T19167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2734.232972][T15835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2734.247318][T19167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2734.256202][T15835] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2734.265437][T19167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2734.288317][T15835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2734.297662][T19167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2734.316164][T15835] usb 3-1: config 0 descriptor?? [ 2734.496932][ T2563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2734.511699][ T2563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2734.543031][ T5732] usb 4-1: USB disconnect, device number 50 [ 2734.546145][T18697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2734.579364][T18697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2734.586873][T19314] netlink: 'syz.4.2196': attribute type 21 has an invalid length. [ 2734.595498][T19314] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2196'. [ 2734.605018][T19314] netlink: 'syz.4.2196': attribute type 4 has an invalid length. [ 2734.615435][T19314] netlink: 'syz.4.2196': attribute type 3 has an invalid length. [ 2734.624780][T19314] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2196'. [ 2734.708508][T19315] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2196'. [ 2734.774088][T15835] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 2734.788718][T15835] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 2734.792984][T19316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2734.818160][T15835] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2735.152081][ T5329] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2735.186613][ T5329] ath9k_htc: Failed to initialize the device [ 2735.221397][ T5732] usb 4-1: ath9k_htc: USB layer deinitialized [ 2735.526882][T14994] Bluetooth: hci0: command 0x040f tx timeout [ 2735.639481][ T5393] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2735.850118][ T5393] usb 2-1: device descriptor read/64, error -71 [ 2736.145311][T17801] usb 3-1: USB disconnect, device number 44 [ 2736.366628][ T29] audit: type=1800 audit(1728490643.667:5319): pid=19339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2202" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2736.388729][ T5393] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2736.421830][T19324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2736.427934][T19324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2736.434433][T19324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2736.446208][T19324] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2736.467558][T19324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2736.559624][ T5393] usb 2-1: device descriptor read/64, error -71 [ 2736.859442][ T5393] usb usb2-port1: attempt power cycle [ 2736.871872][T19345] Process accounting resumed [ 2738.148477][ T5393] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2738.361617][T14994] Bluetooth: hci1: command 0x0c1a tx timeout [ 2738.398508][ T5393] usb 2-1: device not accepting address 60, error -71 [ 2738.434859][T14994] Bluetooth: hci2: command 0x0c1a tx timeout [ 2738.451640][T19366] netlink: 'syz.3.2212': attribute type 21 has an invalid length. [ 2738.459897][T19366] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2212'. [ 2738.468984][T19366] netlink: 'syz.3.2212': attribute type 4 has an invalid length. [ 2738.479013][T19366] netlink: 'syz.3.2212': attribute type 3 has an invalid length. [ 2738.486882][T19366] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2212'. [ 2738.509426][T14994] Bluetooth: hci0: command 0x040f tx timeout [ 2738.515479][T14994] Bluetooth: hci4: command 0x0405 tx timeout [ 2738.521638][T14986] Bluetooth: hci3: command 0x0c1a tx timeout [ 2738.570053][T19369] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2212'. [ 2738.629784][T19363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2739.386120][ T29] audit: type=1800 audit(1728490646.667:5320): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2215" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2739.568907][T19383] Process accounting resumed [ 2739.734089][T19372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2739.764905][T19372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2739.801340][T19372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2739.957350][T19372] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2739.978998][T19372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2740.869588][ T5393] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2740.912021][T14994] Bluetooth: hci1: command 0x0c1a tx timeout [ 2741.075804][ T5276] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2741.171242][ T5393] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2741.181608][ T5393] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2741.202080][ T5393] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2741.212814][ T5393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2741.221017][ T5393] usb 4-1: SerialNumber: syz [ 2741.231047][ T5276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2741.241316][ T5276] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2741.251269][ T5276] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2741.311676][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2741.354063][ T5276] usb 3-1: config 0 descriptor?? [ 2741.502387][ T5393] usb 4-1: 0:2 : does not exist [ 2741.517545][ T5393] usb 4-1: USB disconnect, device number 51 [ 2741.726703][T19164] udevd[19164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2741.789463][T14994] Bluetooth: hci2: command 0x0c1a tx timeout [ 2741.869408][T14994] Bluetooth: hci3: command 0x0c1a tx timeout [ 2742.029737][T14994] Bluetooth: hci0: command 0x040f tx timeout [ 2742.029748][T14986] Bluetooth: hci4: command 0x0405 tx timeout [ 2742.192999][T19411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2742.236172][T19414] tipc: Failed to obtain node identity [ 2742.249325][T19414] tipc: Enabling of bearer rejected, failed to enable media [ 2742.490052][T19417] netlink: 'syz.3.2229': attribute type 21 has an invalid length. [ 2742.515548][T19417] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2229'. [ 2742.552821][T19417] netlink: 'syz.3.2229': attribute type 4 has an invalid length. [ 2742.588791][T19417] netlink: 'syz.3.2229': attribute type 3 has an invalid length. [ 2742.620565][T19417] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2229'. [ 2742.641922][T19418] Process accounting resumed [ 2742.734472][T19417] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2229'. [ 2742.925009][ T5732] usb 3-1: USB disconnect, device number 45 [ 2743.469528][ T5276] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2743.634453][ T5276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2743.930376][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2745.051830][ T5276] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2745.061461][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2745.130558][ T5276] usb 1-1: config 0 descriptor?? [ 2745.138836][ T5276] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2745.200220][T19428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2745.220456][T19428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2745.237218][T19428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2745.258962][T19428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2745.306258][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 2745.327041][T19428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2745.920096][ T5276] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2746.129906][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 2746.146672][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2746.165176][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2746.233935][ T5276] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 2746.306817][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2746.679838][ T5393] usb 1-1: USB disconnect, device number 46 [ 2747.030787][ T29] audit: type=1326 audit(1728490654.327:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19440 comm="syz.4.2236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbe637dff9 code=0x0 [ 2747.310488][T14994] Bluetooth: hci2: command 0x0c1a tx timeout [ 2747.316574][T14994] Bluetooth: hci1: command 0x0c1a tx timeout [ 2747.322984][T14994] Bluetooth: hci4: command 0x0405 tx timeout [ 2747.329013][T14994] Bluetooth: hci3: command 0x0c1a tx timeout [ 2747.459663][T17203] Bluetooth: hci0: command 0x040f tx timeout [ 2747.472932][ T5276] usb 2-1: config 0 descriptor?? [ 2747.605422][T19465] Process accounting resumed [ 2748.569473][ T5329] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2748.941363][ T5276] greenasia 0003:0E8F:0012.0043: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 2748.953900][ T5276] greenasia 0003:0E8F:0012.0043: no inputs found [ 2748.966371][ T5276] usb 2-1: USB disconnect, device number 62 [ 2749.184863][ T5393] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2749.201680][ T5329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2749.217423][ T5329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2749.356196][ T5393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2749.498183][ T5393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2749.579571][T17801] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2749.996986][ T5329] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2750.007009][ T5393] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2750.069115][ T5393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.080032][ T5329] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2750.089119][ T5329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.101277][ T5393] usb 4-1: config 0 descriptor?? [ 2750.161377][T17801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2750.200291][T17801] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2750.209609][T17801] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2750.218704][T17801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.271209][T17801] usb 3-1: config 0 descriptor?? [ 2750.641735][ T5329] usb 1-1: config 0 descriptor?? [ 2750.980698][ T5393] lg-g15 0003:046D:C222.0044: unbalanced delimiter at end of report description [ 2750.993942][ T5393] lg-g15 0003:046D:C222.0044: probe with driver lg-g15 failed with error -22 [ 2751.053925][T19481] netlink: 'syz.1.2246': attribute type 21 has an invalid length. [ 2751.073487][T19481] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2246'. [ 2751.208149][ T5393] usb 4-1: USB disconnect, device number 52 [ 2751.233156][T19481] netlink: 'syz.1.2246': attribute type 4 has an invalid length. [ 2751.275338][T19481] netlink: 'syz.1.2246': attribute type 3 has an invalid length. [ 2751.314680][T19481] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2246'. [ 2751.371727][T19481] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2246'. [ 2751.429425][ T5329] usb 1-1: can't set config #0, error -71 [ 2751.441650][ T5329] usb 1-1: USB disconnect, device number 47 [ 2752.643919][ T5329] usb 3-1: USB disconnect, device number 46 [ 2753.054461][T19513] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 2753.088618][T19513] netlink: 'syz.3.2258': attribute type 3 has an invalid length. [ 2753.098628][T19513] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2258'. [ 2753.132578][T19513] NCSI netlink: No device for ifindex 0 [ 2753.289411][T17801] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 2753.369390][ T5732] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2753.420504][T19528] netlink: 'syz.4.2264': attribute type 8 has an invalid length. [ 2753.472662][T17801] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 2753.481941][T17801] usb 2-1: config 0 has no interface number 0 [ 2753.488021][T17801] usb 2-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30 [ 2753.529349][T17801] usb 2-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 2753.540304][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 2753.561995][T19530] netlink: 'syz.2.2265': attribute type 21 has an invalid length. [ 2753.563209][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2753.572551][T17801] usb 2-1: config 0 interface 142 has no altsetting 0 [ 2753.608436][ T5732] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2753.611203][T19530] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2265'. [ 2753.725209][T19530] netlink: 'syz.2.2265': attribute type 4 has an invalid length. [ 2753.769768][T17801] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2753.778996][T17801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2753.791296][T17801] usb 2-1: config 0 descriptor?? [ 2753.802163][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2753.809142][T17801] ums-realtek 2-1:0.142: USB Mass Storage device detected [ 2753.828849][T19530] netlink: 'syz.2.2265': attribute type 3 has an invalid length. [ 2754.519874][ T5732] usb 4-1: config 0 descriptor?? [ 2754.529512][T19530] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2265'. [ 2754.559546][T19538] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2265'. [ 2754.617031][ T29] audit: type=1800 audit(1728490661.897:5322): pid=19542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2267" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2754.643533][T17801] usb 2-1: USB disconnect, device number 63 [ 2755.137795][T19551] Process accounting resumed [ 2756.180364][T19511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2756.529666][T19511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2756.549385][T17801] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2756.558410][ T5732] hid (null): invalid report_size 17387 [ 2756.564712][ T5732] hid (null): report_id 2176741362 is invalid [ 2756.571580][ T5732] hid (null): unknown global tag 0xc [ 2756.576946][ T5732] hid (null): unknown global tag 0xd [ 2756.585215][ T5732] hid-generic 0003:0158:0100.0045: unknown main item tag 0x1 [ 2756.593209][ T5732] hid-generic 0003:0158:0100.0045: unexpected long global item [ 2756.601774][ T5732] hid-generic 0003:0158:0100.0045: probe with driver hid-generic failed with error -22 [ 2756.678232][T19559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2756.711447][T17801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2756.723377][T17801] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2756.736624][T17801] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2756.746107][T17801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2756.759981][T19511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2756.770256][T19511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2756.781288][T17801] usb 1-1: config 0 descriptor?? [ 2756.787869][T15835] usb 4-1: USB disconnect, device number 53 [ 2756.849532][ T5393] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2756.879382][ T5732] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2757.029378][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 2757.031232][ T5393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2757.047244][ T5393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2757.048002][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2757.059010][ T5393] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2757.077880][ T5393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.094404][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2757.096926][ T5393] usb 2-1: config 0 descriptor?? [ 2757.114659][ T5732] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2757.129348][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.150270][ T5732] usb 3-1: config 0 descriptor?? [ 2757.522927][ T5393] lenovo 0003:17EF:6062.0046: unknown main item tag 0x4 [ 2757.547356][ T5393] lenovo 0003:17EF:6062.0046: unknown main item tag 0x2 [ 2757.564067][ T5393] lenovo 0003:17EF:6062.0046: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 2757.582351][ T5732] savu 0003:1E7D:2D5A.0047: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 2757.786527][ T5732] usb 3-1: USB disconnect, device number 47 [ 2757.795395][ T5393] usb 2-1: USB disconnect, device number 64 [ 2758.219532][T17801] usb 1-1: USB disconnect, device number 48 [ 2758.942172][ T29] audit: type=1800 audit(1728490666.247:5323): pid=19575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2279" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 2759.045891][T19582] netlink: 'syz.2.2280': attribute type 1 has an invalid length. [ 2759.079350][T19582] netlink: 'syz.2.2280': attribute type 3 has an invalid length. [ 2759.107367][T19582] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2280'. [ 2759.134357][T19582] NCSI netlink: No device for ifindex 0 [ 2759.319534][ T29] audit: type=1800 audit(1728490666.577:5324): pid=19590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2283" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2759.379442][ T5393] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2759.539356][ T5393] usb 3-1: Using ep0 maxpacket: 16 [ 2759.581471][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2759.592935][ T5393] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2759.629349][ T5393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.650345][ T5393] usb 3-1: config 0 descriptor?? [ 2759.729762][T19600] netlink: 'syz.0.2288': attribute type 21 has an invalid length. [ 2759.748109][T19600] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2288'. [ 2759.776133][T19600] netlink: 'syz.0.2288': attribute type 4 has an invalid length. [ 2759.809669][T19600] netlink: 'syz.0.2288': attribute type 3 has an invalid length. [ 2759.831413][T19600] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2288'. [ 2759.853880][T19601] netlink: 'syz.0.2288': attribute type 21 has an invalid length. [ 2759.870345][T19601] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2288'. [ 2759.898402][T17801] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2759.907530][T19601] netlink: 'syz.0.2288': attribute type 4 has an invalid length. [ 2759.919172][T19601] netlink: 'syz.0.2288': attribute type 5 has an invalid length. [ 2759.927909][T19601] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2288'. [ 2759.992615][T19600] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2288'. [ 2760.013086][T19600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2760.020646][T19600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2760.065492][T19580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2760.071002][T17801] usb 4-1: Using ep0 maxpacket: 16 [ 2760.081174][T19580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2760.096037][ T5393] hid (null): invalid report_size 17387 [ 2760.096605][T19605] fuse: Unknown parameter '0x000000000000000700000000000000000000' [ 2760.112587][ T5393] hid (null): report_id 2176741362 is invalid [ 2760.118821][ T5393] hid (null): unknown global tag 0xc [ 2760.126200][T17801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2760.142337][ T5393] hid (null): unknown global tag 0xd [ 2760.150543][T17801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2760.163078][ T5393] hid-generic 0003:0158:0100.0048: unknown main item tag 0x1 [ 2760.179286][T17801] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 2760.191297][ T5393] hid-generic 0003:0158:0100.0048: unexpected long global item [ 2760.209430][T17801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2760.220020][ T5393] hid-generic 0003:0158:0100.0048: probe with driver hid-generic failed with error -22 [ 2760.235290][T17801] usb 4-1: config 0 descriptor?? [ 2760.310096][T19580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2760.340887][T19580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2760.371487][ T5732] usb 3-1: USB disconnect, device number 48 [ 2760.662322][T17801] bigben 0003:146B:0902.0049: unexpected rdesc, please submit for review [ 2760.684941][T17801] bigben 0003:146B:0902.0049: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 2760.711420][T17801] bigben 0003:146B:0902.0049: missing HID_OUTPUT_REPORT 0 [ 2760.728278][T17801] bigben 0003:146B:0902.0049: no output report found [ 2760.864465][T17801] usb 4-1: USB disconnect, device number 54 [ 2761.419386][ T5732] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2761.682205][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2761.726822][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2761.786828][ T5732] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2762.086090][ T5732] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 2762.101581][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2762.123872][ T5732] usb 3-1: config 0 descriptor?? [ 2762.296557][T19617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2762.309585][T19617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2762.325765][T19617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2762.344564][T19617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2762.368113][T19617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2762.551551][ T5732] hid-udraw 0003:20D6:CB17.004A: unbalanced delimiter at end of report description [ 2762.573353][ T5732] hid-udraw 0003:20D6:CB17.004A: parse failed [ 2762.589520][ T5732] hid-udraw 0003:20D6:CB17.004A: probe with driver hid-udraw failed with error -22 [ 2762.652984][ T29] audit: type=1800 audit(1728490669.957:5325): pid=19624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2295" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 2762.758340][T17801] usb 3-1: USB disconnect, device number 49 [ 2763.479449][T15835] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2763.667957][T15835] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2763.676733][T15835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2763.699068][T15835] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2763.729594][T15835] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2763.737600][T15835] usb 2-1: Manufacturer: syz [ 2763.772083][T15835] usb 2-1: config 0 descriptor?? [ 2763.808581][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 2763.849876][T15835] rc_core: IR keymap rc-hauppauge not found [ 2763.856171][T15835] Registered IR keymap rc-empty [ 2764.019769][T17801] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2764.031700][T15835] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2764.052619][T15835] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 2764.099698][T15835] usb 2-1: USB disconnect, device number 65 [ 2764.140802][T17203] Bluetooth: hci1: command 0x0c1a tx timeout [ 2764.265900][ T29] audit: type=1326 audit(1728490671.567:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.4.2303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbe637dff9 code=0x0 [ 2764.310245][T17801] usb 3-1: Using ep0 maxpacket: 8 [ 2764.330472][T17801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2764.341826][T17801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2764.353442][T17203] Bluetooth: hci4: command 0x0405 tx timeout [ 2764.353491][T17203] Bluetooth: hci3: command 0x0c1a tx timeout [ 2764.353551][T17203] Bluetooth: hci2: command 0x0c1a tx timeout [ 2764.372857][T17801] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 2764.382288][T17801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2764.421209][T17801] usb 3-1: config 0 descriptor?? [ 2764.439419][T14994] Bluetooth: hci0: command 0x040f tx timeout [ 2764.720623][T19660] netlink: 'syz.1.2308': attribute type 21 has an invalid length. [ 2764.761288][T19660] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2308'. [ 2764.805159][T19660] netlink: 'syz.1.2308': attribute type 4 has an invalid length. [ 2764.834209][T19660] netlink: 'syz.1.2308': attribute type 3 has an invalid length. [ 2764.859754][T19660] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2308'. [ 2764.899443][T19663] netlink: 'syz.1.2308': attribute type 21 has an invalid length. [ 2764.924415][T19663] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2308'. [ 2764.968705][T19663] netlink: 'syz.1.2308': attribute type 4 has an invalid length. [ 2765.002111][T19663] netlink: 'syz.1.2308': attribute type 5 has an invalid length. [ 2765.161742][T19663] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2308'. [ 2765.181045][T17801] wacom 0003:056A:0333.004B: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.2-1/input0 [ 2765.282612][T19663] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2308'. [ 2765.382103][T17801] usb 3-1: USB disconnect, device number 50 [ 2766.679456][ T5329] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2766.832203][ T5329] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2766.854643][ T5329] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2766.886021][ T5329] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2766.896618][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2766.916328][ T5329] usb 4-1: config 0 descriptor?? [ 2766.927555][ T5329] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2767.129597][T17801] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2767.312812][T17801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2767.323287][T17801] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2767.335870][T17801] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 2767.345662][T17801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.353933][T17801] usb 3-1: Product: syz [ 2767.358285][T17801] usb 3-1: Manufacturer: syz [ 2767.362981][T17801] usb 3-1: SerialNumber: syz [ 2767.369511][T17801] usb 3-1: config 0 descriptor?? [ 2767.382961][T17801] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 2767.392670][T17801] em28xx 3-1:0.0: Video interface 0 found: bulk [ 2767.640097][T17801] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2767.714011][T19698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2321'. [ 2767.759925][T17801] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2767.779292][T17801] em28xx 3-1:0.0: board has no eeprom [ 2767.834375][T19703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2767.847150][T19703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2767.849872][T17801] em28xx 3-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 2767.864587][T17801] em28xx 3-1:0.0: analog set to bulk mode. [ 2767.871115][ T5276] em28xx 3-1:0.0: Registering V4L2 extension [ 2767.900177][T17801] usb 3-1: USB disconnect, device number 51 [ 2767.914505][T17801] em28xx 3-1:0.0: Disconnecting em28xx [ 2767.972529][ T5276] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 2768.036458][ T5276] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 2768.076433][ T5276] DVB: Unable to find symbol xc2028_attach() [ 2768.082769][ T5276] tuner: 1-0061: Tuner has no way to set tv freq [ 2768.089605][ T5276] em28xx 3-1:0.0: Config register raw data: 0xffffffed [ 2768.106483][ T5276] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 2768.116261][ T5276] em28xx 3-1:0.0: No AC97 audio processor [ 2768.126866][ T5276] tuner: 1-0061: Tuner has no way to set tv freq [ 2768.168877][ T5276] em28xx 3-1:0.0: Registered radio device as radio32 [ 2768.184270][ T5276] usb 3-1: Decoder not found [ 2768.188989][ T5276] em28xx 3-1:0.0: failed to create media graph [ 2768.196163][ T5276] em28xx 3-1:0.0: V4L2 device radio32 deregistered [ 2768.211306][ T5276] em28xx 3-1:0.0: V4L2 device video71 deregistered [ 2768.226743][ T5276] em28xx 3-1:0.0: Registering input extension [ 2768.233737][T17801] em28xx 3-1:0.0: Closing input extension [ 2768.271559][T17801] em28xx 3-1:0.0: Freeing device [ 2768.473826][ T5329] usb 4-1: USB disconnect, device number 55 [ 2768.723241][T17801] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2769.123067][T19728] netlink: 'syz.3.2331': attribute type 21 has an invalid length. [ 2769.131442][ T5276] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2769.139323][T19728] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2331'. [ 2769.148398][T19728] netlink: 'syz.3.2331': attribute type 4 has an invalid length. [ 2769.156662][T19728] netlink: 'syz.3.2331': attribute type 3 has an invalid length. [ 2769.164842][T19728] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2331'. [ 2769.169407][T17801] usb 3-1: Using ep0 maxpacket: 16 [ 2769.177020][T19728] netlink: 'syz.3.2331': attribute type 21 has an invalid length. [ 2769.180821][T17801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2769.189821][T19728] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2331'. [ 2769.206977][T19728] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2331'. [ 2769.208813][T17801] usb 3-1: config 0 has no interfaces? [ 2769.225834][T17801] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 2769.239267][T17801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2769.256000][T17801] usb 3-1: Product: syz [ 2769.260511][T17801] usb 3-1: Manufacturer: syz [ 2769.265137][T17801] usb 3-1: SerialNumber: syz [ 2769.272231][T17801] usb 3-1: config 0 descriptor?? [ 2769.309523][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 2769.319956][ T5329] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2769.324104][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2769.362534][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2769.379778][ T5276] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 2769.388973][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.400209][ T5276] usb 2-1: config 0 descriptor?? [ 2769.495491][ T5329] usb 1-1: Using ep0 maxpacket: 32 [ 2769.505356][ T5329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2769.519489][T17884] usb 3-1: USB disconnect, device number 52 [ 2769.553974][ T5329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2769.574247][ T5329] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2769.591011][ T5329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.610206][ T5329] usb 1-1: config 0 descriptor?? [ 2769.662641][ T29] audit: type=1800 audit(1728490676.967:5327): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2332" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2769.825277][ T5276] logitech 0003:046D:C24F.004C: unknown main item tag 0x1 [ 2769.835980][ T5276] logitech 0003:046D:C24F.004C: unknown main item tag 0x0 [ 2769.849741][ T5276] logitech 0003:046D:C24F.004C: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.1-1/input0 [ 2769.865072][ T5276] logitech 0003:046D:C24F.004C: no inputs found [ 2770.023550][T17884] usb 2-1: USB disconnect, device number 66 [ 2770.037380][ T5329] kye 0003:0458:4018.004D: unknown main item tag 0x0 [ 2770.053462][ T5329] kye 0003:0458:4018.004D: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.0-1/input0 [ 2770.239629][T17884] usb 1-1: USB disconnect, device number 49 [ 2771.049549][ T5276] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2771.167278][T19743] __nla_validate_parse: 1 callbacks suppressed [ 2771.167297][T19743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2336'. [ 2771.290786][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2771.301872][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2771.312114][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2771.325323][ T5276] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2771.334751][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2771.347135][ T5276] usb 3-1: config 0 descriptor?? [ 2771.509380][T17801] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2771.683638][T17801] usb 1-1: config 0 has an invalid interface number: 186 but max is 1 [ 2771.692317][T17801] usb 1-1: config 0 has no interface number 1 [ 2771.706045][T17801] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 2771.715790][T17801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.723939][T17801] usb 1-1: Product: syz [ 2771.729067][T17801] usb 1-1: Manufacturer: syz [ 2771.733832][T17801] usb 1-1: SerialNumber: syz [ 2771.746446][T17801] usb 1-1: config 0 descriptor?? [ 2771.773951][ T5276] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 2771.791311][ T5276] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 2771.822879][ T5276] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2771.965388][ T5732] usb 1-1: USB disconnect, device number 50 [ 2772.111091][T17884] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2772.167481][T19751] validate_nla: 2 callbacks suppressed [ 2772.167496][T19751] netlink: 'syz.3.2340': attribute type 21 has an invalid length. [ 2772.182365][T19751] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2340'. [ 2772.203126][T19751] netlink: 'syz.3.2340': attribute type 4 has an invalid length. [ 2772.211212][T19751] netlink: 'syz.3.2340': attribute type 3 has an invalid length. [ 2772.219074][T19751] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2340'. [ 2772.279362][T17884] usb 2-1: Using ep0 maxpacket: 32 [ 2772.286165][T17884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2772.298250][T19752] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2340'. [ 2772.307427][T17884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2772.318271][T17884] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 2772.327470][T17884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2772.337691][T17884] usb 2-1: config 0 descriptor?? [ 2772.678746][ T29] audit: type=1800 audit(1728490679.977:5328): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2343" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2772.764237][T17884] logitech 0003:046D:C298.004F: unbalanced collection at end of report description [ 2772.790081][T17884] logitech 0003:046D:C298.004F: parse failed [ 2772.803039][T17884] logitech 0003:046D:C298.004F: probe with driver logitech failed with error -22 [ 2772.984357][ T5276] usb 2-1: USB disconnect, device number 67 [ 2773.800355][ T5276] usb 3-1: USB disconnect, device number 53 [ 2774.399749][T19778] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2346'. [ 2774.408832][T19778] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 2774.610182][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.617084][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.828269][T19780] netlink: 'syz.4.2350': attribute type 21 has an invalid length. [ 2774.889732][T19779] syz.1.2351 (19779): /proc/19775/oom_adj is deprecated, please use /proc/19775/oom_score_adj instead. [ 2774.920400][T19780] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2350'. [ 2774.955045][T19780] netlink: 'syz.4.2350': attribute type 4 has an invalid length. [ 2774.996913][T19780] netlink: 'syz.4.2350': attribute type 3 has an invalid length. [ 2775.032005][T19780] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2350'. [ 2775.080009][T19781] netlink: 'syz.4.2350': attribute type 21 has an invalid length. [ 2775.087876][T19781] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2350'. [ 2775.128907][T19781] netlink: 'syz.4.2350': attribute type 4 has an invalid length. [ 2775.148632][T19781] netlink: 'syz.4.2350': attribute type 5 has an invalid length. [ 2775.315699][T19781] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2350'. [ 2775.370020][T19791] Process accounting resumed [ 2776.089573][T19781] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2350'. [ 2776.232896][ T29] audit: type=1800 audit(1728490683.537:5329): pid=19797 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2355" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 2777.197736][ T29] audit: type=1800 audit(1728490684.497:5330): pid=19804 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2357" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 2777.222642][T19788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2777.228729][T19788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2777.234872][T19788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2777.240880][T19788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2777.248024][T19788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2778.208460][T14986] Bluetooth: hci1: command 0x0c1a tx timeout [ 2778.520651][ T5276] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2778.665857][ T5732] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2778.678734][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 2778.711259][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2778.737417][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2778.836669][T19824] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2363'. [ 2778.845831][T19824] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 2779.384045][T14986] Bluetooth: hci0: command 0x040f tx timeout [ 2779.390217][T14986] Bluetooth: hci4: command 0x0405 tx timeout [ 2779.396357][T14986] Bluetooth: hci3: command 0x0c1a tx timeout [ 2779.404102][T14986] Bluetooth: hci2: command 0x0c1a tx timeout [ 2779.623655][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2779.650665][ T5276] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2779.660521][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.672277][ T5276] usb 1-1: config 0 descriptor?? [ 2779.677834][ T5276] usb 1-1: can't set config #0, error -71 [ 2779.685534][ T5276] usb 1-1: USB disconnect, device number 51 [ 2779.855840][ T29] audit: type=1326 audit(1728490687.147:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19820 comm="syz.2.2364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad77dff9 code=0x0 [ 2780.309352][ T5732] usb 4-1: Using ep0 maxpacket: 32 [ 2780.468962][ T5732] usb 4-1: device descriptor read/all, error -71 [ 2780.575669][T19833] Process accounting resumed [ 2781.313735][T19835] netlink: 'syz.0.2366': attribute type 21 has an invalid length. [ 2781.450663][T19835] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2366'. [ 2781.569082][T19841] Process accounting resumed [ 2782.201242][T19835] netlink: 'syz.0.2366': attribute type 4 has an invalid length. [ 2782.209850][T19835] netlink: 'syz.0.2366': attribute type 3 has an invalid length. [ 2782.218056][T19835] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2366'. [ 2782.456668][T19850] netlink: 'syz.2.2369': attribute type 21 has an invalid length. [ 2782.466377][T19850] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2369'. [ 2782.500176][T19850] netlink: 'syz.2.2369': attribute type 4 has an invalid length. [ 2782.526572][T19850] netlink: 'syz.2.2369': attribute type 3 has an invalid length. [ 2782.562951][T19850] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2369'. [ 2782.578660][T19851] netlink: 'syz.2.2369': attribute type 21 has an invalid length. [ 2782.864988][T19851] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2369'. [ 2782.895999][T19851] netlink: 'syz.2.2369': attribute type 4 has an invalid length. [ 2782.904225][T19851] netlink: 'syz.2.2369': attribute type 5 has an invalid length. [ 2782.913121][T19851] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2369'. [ 2782.939893][T19842] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2366'. [ 2783.012589][T19851] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2369'. [ 2783.072490][T19846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2783.078746][T19846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2783.086013][T19846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2783.092773][T19846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2783.109918][ T29] audit: type=1800 audit(1728490690.407:5332): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2372" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 2783.130190][T19846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2784.629578][T17203] Bluetooth: hci1: command 0x0c1a tx timeout [ 2787.792199][T14986] Bluetooth: hci0: command 0x040f tx timeout [ 2787.798451][T14986] Bluetooth: hci4: command 0x0405 tx timeout [ 2787.804667][T14986] Bluetooth: hci3: command 0x0c1a tx timeout [ 2787.815927][T14986] Bluetooth: hci2: command 0x0c1a tx timeout [ 2788.069430][ T5276] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2788.251081][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2788.292575][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2788.359591][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2788.376390][ T5276] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2788.376422][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2788.377463][ T5393] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2788.395010][ T5276] usb 4-1: config 0 descriptor?? [ 2788.724062][ T5276] usbhid 4-1:0.0: can't add hid device: -71 [ 2788.730218][ T5276] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2788.834840][T19890] Process accounting resumed [ 2789.463629][ T5276] usb 4-1: USB disconnect, device number 58 [ 2789.603085][ T5393] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2789.612350][ T5393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2789.627500][ T5393] usb 1-1: config 0 descriptor?? [ 2790.251971][ T5393] ath6kl: Failed to read usb control message: -71 [ 2790.261186][ T5393] ath6kl: Unable to read the bmi data from the device: -71 [ 2790.285395][ T5393] ath6kl: unable to read target info byte count: -71 [ 2790.323602][ T5393] ath6kl: Failed to init ath6kl core: -71 [ 2790.357572][ T5393] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2790.400216][ T5393] usb 1-1: USB disconnect, device number 52 [ 2790.873016][T19906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2790.879078][T19906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2790.885199][T19906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2790.891253][T19906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2790.897453][T19906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2791.062397][T19915] netlink: 'syz.2.2389': attribute type 21 has an invalid length. [ 2791.073218][T19913] binder: 19912:19913 ioctl 400c620e 20000140 returned -22 [ 2791.097156][T19915] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2389'. [ 2791.127654][T19915] netlink: 'syz.2.2389': attribute type 4 has an invalid length. [ 2791.161525][T19915] netlink: 'syz.2.2389': attribute type 3 has an invalid length. [ 2791.169415][T19915] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2389'. [ 2791.209907][ T5732] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2791.299863][T19916] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2389'. [ 2791.339606][T17884] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2791.369567][ T5732] usb 4-1: Using ep0 maxpacket: 32 [ 2791.378097][ T5732] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2791.396450][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.441663][ T5732] usb 4-1: config 0 descriptor?? [ 2791.478269][ T5732] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2791.563883][T19927] Process accounting resumed [ 2792.269605][T17203] Bluetooth: hci1: command 0x0c1a tx timeout [ 2792.270126][T17884] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.00 [ 2792.303858][T17884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2792.332466][T17884] usb 1-1: Product: syz [ 2792.336749][T17884] usb 1-1: Manufacturer: syz [ 2792.358351][T17884] usb 1-1: SerialNumber: syz [ 2792.380596][T17884] usb 1-1: config 0 descriptor?? [ 2792.402511][T17884] ch341 1-1:0.0: ch341-uart converter detected [ 2792.597220][T19938] netlink: 'syz.4.2397': attribute type 2 has an invalid length. [ 2792.602648][T17884] usb 1-1: failed to receive control message: -121 [ 2792.611866][T17884] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 2792.799459][ T5732] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 2792.861628][ T5732] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 2792.910936][T17203] Bluetooth: hci4: command 0x0405 tx timeout [ 2792.911555][ T8558] Bluetooth: hci2: command 0x0c1a tx timeout [ 2792.917167][T17203] Bluetooth: hci3: command 0x0c1a tx timeout [ 2792.926766][ T5732] usb 4-1: USB disconnect, device number 59 [ 2793.009363][ T8558] Bluetooth: hci0: command 0x040f tx timeout [ 2793.501206][T19949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2793.650705][T19946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2793.658932][T19946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2793.665391][T19946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2793.671852][T19946] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2793.679081][T19946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2794.763521][ T5276] usb 1-1: USB disconnect, device number 53 [ 2794.770679][ T5276] ch341 1-1:0.0: device disconnected [ 2794.897644][T19965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2794.914717][T19965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2794.939588][T19969] netlink: 'syz.0.2408': attribute type 3 has an invalid length. [ 2794.948962][T19964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2405'. [ 2794.959548][T19964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2405'. [ 2795.153438][ T8558] Bluetooth: hci1: command 0x0c1a tx timeout [ 2795.972518][ T8558] Bluetooth: hci0: command 0x040f tx timeout [ 2795.978598][ T8558] Bluetooth: hci4: command 0x0405 tx timeout [ 2795.985464][ T8558] Bluetooth: hci3: command 0x0c1a tx timeout [ 2795.991844][ T8558] Bluetooth: hci2: command 0x0c1a tx timeout [ 2796.060702][T19980] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2407'. [ 2796.070398][T19980] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 2796.404398][T19977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2796.410540][T19977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2796.416497][T19977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2796.422601][T19977] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2796.428651][T19977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2797.937600][T20009] binder: 20006:20009 ioctl 400c620e 20000140 returned -22 [ 2797.958473][T20007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2798.349707][T14986] Bluetooth: hci1: command 0x0c1a tx timeout [ 2798.511799][T14986] Bluetooth: hci0: command 0x040f tx timeout [ 2798.518036][T17203] Bluetooth: hci4: command 0x0405 tx timeout [ 2798.518061][ T8558] Bluetooth: hci3: command 0x0c1a tx timeout [ 2798.524180][T14994] Bluetooth: hci2: command 0x0c1a tx timeout [ 2798.984484][T20033] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2423'. [ 2798.993897][T20033] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 2800.743913][T20045] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 2800.751857][T20045] netlink: 'syz.1.2430': attribute type 3 has an invalid length. [ 2800.759893][T20045] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2430'. [ 2800.781115][T20045] NCSI netlink: No device for ifindex 0 [ 2800.887411][T20053] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2431'. [ 2800.959656][ T5276] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2800.972336][T17884] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2801.029306][ T8465] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2801.121981][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 2801.131306][T17884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2801.141564][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2801.141596][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2801.141619][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2801.141656][ T5276] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2801.141681][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2801.152082][ T5276] usb 1-1: config 0 descriptor?? [ 2801.209429][ T8465] usb 2-1: Using ep0 maxpacket: 16 [ 2801.231400][ T8465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2801.260603][ T8465] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2801.270294][T17884] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2801.315965][ T8465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2801.339292][T17884] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2801.369728][ T8465] usb 2-1: config 0 descriptor?? [ 2801.389088][T17884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2801.425123][T17884] usb 4-1: config 0 descriptor?? [ 2801.454123][T17884] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2801.579442][T15835] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2801.625231][ T5276] microsoft 0003:045E:07DA.0050: ignoring exceeding usage max [ 2801.659977][ T5276] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0050/input/input38 [ 2801.700294][ T5276] microsoft 0003:045E:07DA.0050: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2801.739363][T15835] usb 3-1: Using ep0 maxpacket: 8 [ 2801.749062][T15835] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2801.774835][T15835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2801.782528][T20045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2801.800055][T15835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2801.825423][T20045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2801.834644][T15835] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2801.837426][ T8465] hid (null): invalid report_size 17387 [ 2801.878564][T15835] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2801.919549][ T8465] hid (null): report_id 2176741362 is invalid [ 2801.925832][ T8465] hid (null): unknown global tag 0xc [ 2801.929299][T15835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2801.931323][ T8465] hid (null): unknown global tag 0xd [ 2801.954861][ T5276] usb 1-1: USB disconnect, device number 54 [ 2801.964157][ T8465] hid-generic 0003:0158:0100.0051: unknown main item tag 0x1 [ 2801.989053][ T8465] hid-generic 0003:0158:0100.0051: unexpected long global item [ 2802.030310][ T8465] hid-generic 0003:0158:0100.0051: probe with driver hid-generic failed with error -22 [ 2802.051615][T20045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2802.091552][T20045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.145253][ T5393] usb 2-1: USB disconnect, device number 68 [ 2802.197430][T15835] usb 3-1: GET_CAPABILITIES returned 0 [ 2802.206869][T15835] usbtmc 3-1:16.0: can't read capabilities [ 2802.436620][T20066] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 2802.457135][T15835] usb 3-1: USB disconnect, device number 54 [ 2802.667831][T20075] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2437'. [ 2802.677130][T20075] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 2803.194654][T17884] usb 4-1: USB disconnect, device number 60 [ 2803.796450][T13786] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2804.029437][T17884] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2804.037883][ T8465] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2804.069708][T13786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2804.236753][T17884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2804.278792][T13786] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2804.308680][T17884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2804.319458][T13786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2804.325509][T20089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2804.327818][T17884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2804.352563][ T8465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2804.362840][T20089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2804.364785][ T8465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2804.386100][T13786] usb 1-1: config 0 descriptor?? [ 2804.399460][T17884] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2804.415973][ T8465] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2804.429036][T17884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2804.437517][ T8465] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2804.450975][T17884] usb 4-1: config 0 descriptor?? [ 2804.464675][ T8465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2804.489128][ T8465] usb 2-1: config 0 descriptor?? [ 2804.664334][T20092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2804.685898][T20092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2804.834552][T13786] keytouch 0003:0926:3333.0052: fixing up Keytouch IEC report descriptor [ 2804.854969][T13786] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0052/input/input39 [ 2804.887920][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2804.899323][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2804.906987][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2804.919646][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2804.927132][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2804.935828][ T8465] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2804.947109][ T8465] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 2804.968836][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2804.990760][ T8465] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2805.011388][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.018894][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.041448][T13786] keytouch 0003:0926:3333.0052: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 2805.074109][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.091332][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.098818][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.116992][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.131281][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.138761][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.158379][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.176785][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.184649][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.192281][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.199828][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.207269][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.214749][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.222204][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.230841][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.238404][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.245909][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.248470][ T5276] usb 1-1: USB disconnect, device number 55 [ 2805.259663][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.259694][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.275822][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.283519][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.291035][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.298453][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.305954][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.316978][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.324936][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.332681][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.340161][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.347597][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.355116][T17884] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2805.363199][T17884] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 2805.388553][ T29] audit: type=1800 audit(1728490712.597:5333): pid=20097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2446" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 2805.410282][T17884] plantronics 0003:047F:FFFF.0053: hiddev1,hidraw2: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2805.426417][T17884] usb 4-1: USB disconnect, device number 61 [ 2805.865708][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 2806.071102][T20110] netlink: 'syz.0.2449': attribute type 1 has an invalid length. [ 2806.089737][T20110] netlink: 'syz.0.2449': attribute type 3 has an invalid length. [ 2806.098028][T20110] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2449'. [ 2806.117004][T20110] NCSI netlink: No device for ifindex 0 [ 2806.240122][T20113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2806.256001][T20113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2806.335660][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 2806.361320][T13786] usb 2-1: USB disconnect, device number 69 [ 2806.561283][T17884] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2806.619403][ T29] audit: type=1326 audit(1728490713.877:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20114 comm="syz.4.2451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbe637dff9 code=0x0 [ 2806.829289][T17884] usb 1-1: Using ep0 maxpacket: 16 [ 2806.835906][T17884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2806.852341][T17884] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2806.873935][T17884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2806.911370][T17884] usb 1-1: config 0 descriptor?? [ 2807.334332][T20136] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2454'. [ 2807.343612][T20136] netlink: 'syz.2.2454': attribute type 1 has an invalid length. [ 2807.906133][T20142] netlink: 'syz.4.2459': attribute type 21 has an invalid length. [ 2807.917679][T20142] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2459'. [ 2807.936455][T20142] netlink: 'syz.4.2459': attribute type 4 has an invalid length. [ 2807.970009][ T29] audit: type=1326 audit(1728490715.277:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20143 comm="syz.2.2460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad77dff9 code=0x0 [ 2807.981227][T20142] netlink: 'syz.4.2459': attribute type 3 has an invalid length. [ 2808.000496][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2808.029851][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.044777][T17884] hid (null): invalid report_size 17387 [ 2808.050581][T17884] hid (null): report_id 2176741362 is invalid [ 2808.059075][T17884] hid (null): unknown global tag 0xc [ 2808.059460][T20142] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2459'. [ 2808.076944][T17884] hid (null): unknown global tag 0xd [ 2808.085120][T17884] hid-generic 0003:0158:0100.0055: unknown main item tag 0x1 [ 2808.093021][T17884] hid-generic 0003:0158:0100.0055: unexpected long global item [ 2808.101385][T17884] hid-generic 0003:0158:0100.0055: probe with driver hid-generic failed with error -22 [ 2808.109500][T20145] netlink: 'syz.4.2459': attribute type 21 has an invalid length. [ 2808.142054][T20145] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2459'. [ 2808.158018][T20145] netlink: 'syz.4.2459': attribute type 4 has an invalid length. [ 2808.166263][T20145] netlink: 'syz.4.2459': attribute type 5 has an invalid length. [ 2808.174415][T20145] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2459'. [ 2808.211206][T20145] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2459'. [ 2808.269813][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2808.278700][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.305664][ T8465] usb 1-1: USB disconnect, device number 56 [ 2808.840329][ T5276] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2809.952565][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2809.989813][ T5276] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 2809.999415][ T5393] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2810.007195][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2810.035623][T20175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2810.038055][ T5276] usb 2-1: config 0 descriptor?? [ 2810.073183][ T5276] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input40 [ 2810.191464][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2810.234738][T20178] fuse: Unknown parameter '0x000000000000000700000000000000000000' [ 2810.235152][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2810.256152][ T5393] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2810.279397][ T5393] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2810.297348][ T5393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2810.317527][ T5393] usb 3-1: config 0 descriptor?? [ 2810.344920][ T8465] usb 2-1: USB disconnect, device number 70 [ 2811.921884][ T5393] usbhid 3-1:0.0: can't add hid device: -71 [ 2811.951710][ T5393] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2811.993363][ T5393] usb 3-1: USB disconnect, device number 55 [ 2812.185913][T20206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2812.258077][T20206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2812.401253][T20213] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2812.410760][T20213] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2812.419562][T20213] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2812.428303][T20213] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2813.117712][T20228] Process accounting resumed [ 2815.157696][T20243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2815.186997][T20243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2815.696425][T20247] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2815.831692][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'. [ 2815.938340][ T29] audit: type=1400 audit(1728490723.237:5336): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=20255 comm="syz.0.2501" dest=20002 netif=wpan0 [ 2816.197267][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'. [ 2816.244667][ T29] audit: type=1326 audit(1728490723.547:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20271 comm="syz.0.2507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6398b7dff9 code=0x0 [ 2816.299546][ T5393] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2816.409307][T17884] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2816.450652][ T5393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2816.473806][ T5393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2816.483796][ T5393] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 2816.492961][ T5393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2816.505200][ T5393] usb 2-1: config 0 descriptor?? [ 2816.579433][T17884] usb 3-1: Using ep0 maxpacket: 32 [ 2816.595590][T17884] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2816.614315][T17884] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2816.645009][T17884] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2816.681989][T17884] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2816.709297][T17884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2816.733738][T17884] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2816.744312][T17884] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2816.761937][T17884] usb 3-1: Product: syz [ 2816.773144][T17884] usb 3-1: Manufacturer: syz [ 2816.785481][T17884] usb 3-1: SerialNumber: syz [ 2816.811511][T17884] usb 3-1: config 0 descriptor?? [ 2816.828716][T17884] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2816.863626][T17884] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2816.935586][ T5393] holtek_kbd 0003:04D9:A055.0056: unknown main item tag 0x0 [ 2816.949521][ T5393] holtek_kbd 0003:04D9:A055.0056: item fetching failed at offset 3/5 [ 2816.959582][ T5393] holtek_kbd 0003:04D9:A055.0056: probe with driver holtek_kbd failed with error -22 [ 2817.109391][T17884] usb 3-1: USB disconnect, device number 56 [ 2817.115372][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 2817.222258][T17884] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2817.265815][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2510'. [ 2817.438152][T20270] ldusb: No device or device unplugged -19 [ 2818.325668][ T5393] usb 2-1: USB disconnect, device number 71 [ 2818.434818][T20285] netlink: 'syz.3.2511': attribute type 21 has an invalid length. [ 2818.443091][T20285] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2511'. [ 2818.453658][T20285] netlink: 'syz.3.2511': attribute type 4 has an invalid length. [ 2818.476150][T20285] netlink: 'syz.3.2511': attribute type 3 has an invalid length. [ 2818.492184][T20285] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2511'. [ 2818.645764][T20286] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2511'. [ 2818.684867][ T29] audit: type=1326 audit(1728490725.987:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20280 comm="syz.4.2510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbe637dff9 code=0x0 [ 2818.730924][T20289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2818.832733][T20289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2821.798324][ T5393] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2822.144884][ T29] audit: type=1326 audit(1728490729.097:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20323 comm="syz.3.2522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f704b97dff9 code=0x0 [ 2822.789919][ T5393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2823.410471][ T5393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2823.420520][ T5393] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2823.433653][ T5393] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2823.442927][ T5393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2823.481687][ T5393] usb 2-1: config 0 descriptor?? [ 2823.493294][ T5393] usb 2-1: can't set config #0, error -71 [ 2823.501531][ T5393] usb 2-1: USB disconnect, device number 72 [ 2823.586837][T15835] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2823.672979][T20355] netlink: 'syz.4.2532': attribute type 21 has an invalid length. [ 2823.692011][T20355] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2532'. [ 2823.712579][T20349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2823.718694][T20349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2823.724815][T20349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2823.730826][T20349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2823.738819][T20349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2823.760194][T20355] netlink: 'syz.4.2532': attribute type 4 has an invalid length. [ 2823.804128][T15835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2823.814079][T15835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2823.827612][T15835] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2823.837059][T15835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2823.869476][T20355] netlink: 'syz.4.2532': attribute type 3 has an invalid length. [ 2823.898535][T15835] usb 1-1: config 0 descriptor?? [ 2823.915417][T20355] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2532'. [ 2823.932455][T15835] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2824.009652][T20360] netlink: 'syz.4.2532': attribute type 21 has an invalid length. [ 2824.017779][T20360] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2532'. [ 2824.027281][T20360] netlink: 'syz.4.2532': attribute type 4 has an invalid length. [ 2824.440991][T20364] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2535'. [ 2824.450132][T20364] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 2824.705844][T20360] netlink: 'syz.4.2532': attribute type 5 has an invalid length. [ 2824.926634][T20360] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2532'. [ 2824.948108][T20365] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2532'. [ 2825.176123][T20380] bridge0: port 3(vlan2) entered blocking state [ 2825.194868][T20380] bridge0: port 3(vlan2) entered disabled state [ 2825.201692][T20380] vlan2: entered allmulticast mode [ 2825.207986][T20380] vlan2: left allmulticast mode [ 2825.352192][T20385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2542'. [ 2825.709563][T14986] Bluetooth: hci1: command 0x0c1a tx timeout [ 2825.791259][T14986] Bluetooth: hci0: command 0x040f tx timeout [ 2825.797566][T14986] Bluetooth: hci2: command 0x0c1a tx timeout [ 2825.803912][T14986] Bluetooth: hci4: command 0x0405 tx timeout [ 2826.324802][ T8558] Bluetooth: hci3: command 0x0c1a tx timeout [ 2826.337937][T15835] usb 1-1: USB disconnect, device number 57 [ 2826.628297][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 2826.637367][ T5393] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2826.794025][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2827.169325][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2827.201586][ T5393] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2827.242304][ T5393] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2827.286155][ T5393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2827.325910][ T5393] usb 3-1: config 0 descriptor?? [ 2827.760223][T20399] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2827.790234][T20399] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2827.802228][T20399] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2828.148330][ T29] audit: type=1326 audit(1728490735.247:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20396 comm="syz.4.2546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbe637dff9 code=0x0 [ 2828.173717][T20399] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2828.420758][T20399] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2829.599306][T14986] Bluetooth: hci1: command 0x0c1a tx timeout [ 2829.859495][ T5393] usbhid 3-1:0.0: can't add hid device: -71 [ 2829.951774][T14994] Bluetooth: hci2: command 0x0c1a tx timeout [ 2829.959510][T14986] Bluetooth: hci3: command 0x0c1a tx timeout [ 2829.979649][ T5393] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2829.993181][ T5393] usb 3-1: USB disconnect, device number 57 [ 2830.092169][T14986] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 2830.121111][T20422] IPVS: fo: FWM 4 0x00000004 - no destination available [ 2830.139470][T17884] IPVS: starting estimator thread 0... [ 2830.209652][T20429] netlink: 'syz.4.2555': attribute type 21 has an invalid length. [ 2830.217526][T20429] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2555'. [ 2830.229133][T20429] netlink: 'syz.4.2555': attribute type 4 has an invalid length. [ 2830.238038][T20429] netlink: 'syz.4.2555': attribute type 3 has an invalid length. [ 2830.269459][T20427] IPVS: using max 20 ests per chain, 48000 per kthread [ 2830.278115][T20429] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2555'. [ 2830.500084][T20429] netlink: 'syz.4.2555': attribute type 21 has an invalid length. [ 2830.513592][T20429] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2555'. [ 2830.721211][T20443] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2559'. [ 2830.730378][T20443] netlink: 'syz.3.2559': attribute type 1 has an invalid length. [ 2831.381087][T20429] netlink: 'syz.4.2555': attribute type 4 has an invalid length. [ 2831.388874][T20429] netlink: 'syz.4.2555': attribute type 5 has an invalid length. [ 2831.646118][T14986] Bluetooth: hci0: command 0x040f tx timeout [ 2831.840860][T20429] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2555'. [ 2831.969530][ T5393] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2832.179939][T20444] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 2832.291744][T20446] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2555'. [ 2832.315801][T20453] netlink: 'syz.1.2562': attribute type 4 has an invalid length. [ 2832.325737][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2832.337183][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2832.374603][ T5393] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2832.395917][ T5393] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2832.415660][ T5393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2832.511784][ T5393] usb 3-1: config 0 descriptor?? [ 2833.101355][T20466] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2561'. [ 2833.110830][T20466] netlink: 'syz.0.2561': attribute type 1 has an invalid length. [ 2833.955291][T20467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2833.970219][T20467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2834.024206][T20467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2834.031292][T20467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2834.088382][T20467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2834.199504][T20481] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 2834.229118][T20481] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2570'. [ 2834.257038][T20481] NCSI netlink: No device for ifindex 0 [ 2834.570507][T20495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2834.583242][T20495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2834.621597][T20496] Process accounting resumed [ 2834.689333][T15835] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2834.895863][ T5393] usbhid 3-1:0.0: can't add hid device: -71 [ 2834.903974][ T5393] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2834.914365][ T5393] usb 3-1: USB disconnect, device number 58 [ 2834.970059][T15835] usb 1-1: Using ep0 maxpacket: 16 [ 2834.980022][T15835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2835.286984][T15835] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2835.296362][T15835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2835.354824][T20511] Process accounting resumed [ 2835.559796][T20514] block nbd1: NBD_DISCONNECT [ 2835.663904][T15835] usb 1-1: config 0 descriptor?? [ 2835.789336][T14986] Bluetooth: hci1: command 0x0c1a tx timeout [ 2835.869052][T20518] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2836.028827][T20521] program syz.2.2586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2836.039135][T14994] Bluetooth: hci2: command 0x0c1a tx timeout [ 2836.052013][T14986] Bluetooth: hci3: command 0x0c1a tx timeout [ 2836.058914][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.065414][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.088303][T20519] Process accounting resumed [ 2836.090294][T20523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2587'. [ 2836.109736][T14986] Bluetooth: hci0: command 0x040f tx timeout [ 2836.111101][T14994] Bluetooth: hci4: command 0x0405 tx timeout [ 2836.150123][T20481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.205198][T20481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2836.230406][T15835] hid (null): unknown global tag 0xd [ 2836.235771][T15835] hid (null): unknown global tag 0xc [ 2836.242573][T15835] hid (null): invalid report_size 17387 [ 2836.248187][T15835] hid (null): report_id 2176741362 is invalid [ 2836.261711][T15835] hid (null): unknown global tag 0xc [ 2836.268149][T15835] hid (null): unknown global tag 0xd [ 2836.291600][T15835] hid-generic 0003:0158:0100.0057: unknown main item tag 0x1 [ 2836.301755][T15835] hid-generic 0003:0158:0100.0057: unexpected long global item [ 2836.320276][T15835] hid-generic 0003:0158:0100.0057: probe with driver hid-generic failed with error -22 [ 2836.479901][T20481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.526322][T20481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2837.309395][ T5329] usb 1-1: USB disconnect, device number 58 [ 2837.489325][T13786] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2837.497150][T17884] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2837.657288][T20533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2837.671194][T17884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2837.680536][T20533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2837.682287][T13786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2837.704225][T17884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2837.714477][T17884] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2837.723711][T13786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2837.734503][T17884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2837.742639][T13786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2837.756779][T13786] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2837.767047][T17884] usb 2-1: config 0 descriptor?? [ 2837.772302][T13786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2837.783246][T13786] usb 3-1: config 0 descriptor?? [ 2838.131776][T20536] Process accounting resumed [ 2838.212395][T17884] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 2838.253764][T17884] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0058/input/input41 [ 2838.359542][T17884] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2838.434376][T17884] usb 2-1: USB disconnect, device number 73 [ 2838.529788][ T5329] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2838.933549][ T5329] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2839.331565][T13786] usbhid 3-1:0.0: can't add hid device: -71 [ 2839.390627][T13786] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2839.619971][ T5329] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2839.651274][T13786] usb 3-1: USB disconnect, device number 59 [ 2839.657409][ T5329] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2839.695803][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2839.714252][T20552] validate_nla: 1 callbacks suppressed [ 2839.714444][T20552] netlink: 'syz.2.2598': attribute type 21 has an invalid length. [ 2839.730716][T20552] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2598'. [ 2839.740499][T20552] netlink: 'syz.2.2598': attribute type 4 has an invalid length. [ 2839.748245][T20552] netlink: 'syz.2.2598': attribute type 3 has an invalid length. [ 2839.767485][T20538] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2839.805616][ T5329] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2839.865064][T20552] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2598'. [ 2839.951016][T20555] netlink: 'syz.2.2598': attribute type 21 has an invalid length. [ 2839.963088][T20556] Process accounting resumed [ 2839.979044][T20555] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2598'. [ 2840.000324][T20555] netlink: 'syz.2.2598': attribute type 4 has an invalid length. [ 2840.032377][T20555] netlink: 'syz.2.2598': attribute type 5 has an invalid length. [ 2840.040863][T20555] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2598'. [ 2840.050890][T20557] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2598'. [ 2840.081703][ T5276] usb 4-1: USB disconnect, device number 62 [ 2840.234789][T20563] dvmrp1: entered allmulticast mode [ 2840.256762][T20563] dvmrp5: entered allmulticast mode [ 2840.269406][T20563] dvmrp1: left allmulticast mode [ 2840.274554][T20563] dvmrp5: left allmulticast mode [ 2840.411393][ T29] audit: type=1326 audit(1728490747.717:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20564 comm="syz.1.2604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9116f7dff9 code=0x0 [ 2840.648927][T20568] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2605'. [ 2841.764674][ T5393] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2841.821968][T20582] netlink: 'syz.2.2610': attribute type 21 has an invalid length. [ 2841.856546][T20582] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2610'. [ 2841.873813][T20582] netlink: 'syz.2.2610': attribute type 4 has an invalid length. [ 2841.898999][T20582] netlink: 'syz.2.2610': attribute type 3 has an invalid length. [ 2841.941697][T20582] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2610'. [ 2842.092762][ T5393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2842.122128][ T5393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2842.145459][ T5393] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2842.158619][ T5393] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2842.167875][ T5393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2842.168316][T20582] netlink: 'syz.2.2610': attribute type 21 has an invalid length. [ 2842.273452][T20582] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2610'. [ 2842.290579][T20582] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2610'. [ 2842.338302][ T5393] usb 1-1: config 0 descriptor?? [ 2842.689492][T20590] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2610'. [ 2842.729073][T20588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2842.739500][T20588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2842.759346][T20588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2842.765561][T20588] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2842.780041][T20588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2843.138148][T20605] tipc: Started in network mode [ 2843.159396][T20605] tipc: Node identity ac1414aa, cluster identity 4711 [ 2843.187872][T20605] tipc: Enabled bearer , priority 10 [ 2844.504500][ T5393] usbhid 1-1:0.0: can't add hid device: -71 [ 2844.510623][ T5393] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2844.520607][ T8558] Bluetooth: hci1: command 0x0c1a tx timeout [ 2844.528472][ T5393] usb 1-1: USB disconnect, device number 59 [ 2844.536533][T13786] tipc: Node number set to 2886997162 [ 2844.599466][ T5329] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2844.666263][T15835] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2844.749575][ T8558] Bluetooth: hci2: command 0x0c1a tx timeout [ 2844.762709][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2844.789208][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2844.809431][ T5329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2844.822495][ T5329] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2844.829378][ T8558] Bluetooth: hci0: command 0x040f tx timeout [ 2844.831797][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2844.838158][ T8558] Bluetooth: hci4: command 0x0405 tx timeout [ 2844.847729][ T5329] usb 4-1: config 0 descriptor?? [ 2844.854823][ T8558] Bluetooth: hci3: command 0x0c1a tx timeout [ 2844.892746][T15835] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2844.919325][T15835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2844.969519][T15835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2845.009290][T15835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2845.040598][T15835] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2845.069386][T15835] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2845.077664][T15835] usb 2-1: Manufacturer: syz [ 2845.088240][T15835] usb 2-1: config 0 descriptor?? [ 2845.552974][T15835] appleir 0003:05AC:8243.0059: unknown main item tag 0x0 [ 2845.564131][T15835] appleir 0003:05AC:8243.0059: No inputs registered, leaving [ 2845.644476][T15835] appleir 0003:05AC:8243.0059: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2845.776047][T20656] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2636'. [ 2845.824467][T15835] usb 2-1: USB disconnect, device number 74 [ 2846.003234][T20662] validate_nla: 2 callbacks suppressed [ 2846.003255][T20662] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 2846.017460][T20662] netlink: 'syz.0.2640': attribute type 3 has an invalid length. [ 2846.026786][T20662] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2640'. [ 2846.040121][T20662] NCSI netlink: No device for ifindex 0 [ 2846.341832][T15835] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2846.388416][T20665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2846.402010][T20665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2846.583071][ T5329] usbhid 4-1:0.0: can't add hid device: -71 [ 2846.592092][ T5329] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2846.599926][T15835] usb 1-1: Using ep0 maxpacket: 16 [ 2846.601998][ T5329] usb 4-1: USB disconnect, device number 63 [ 2846.619725][T15835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2846.642211][T15835] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2846.662691][T15835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2846.677924][T15835] usb 1-1: config 0 descriptor?? [ 2847.170312][T20662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2847.190353][T20662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2847.203392][T15835] hid (null): invalid report_size 17387 [ 2847.209036][T15835] hid (null): report_id 2176741362 is invalid [ 2847.233868][T15835] hid (null): unknown global tag 0xc [ 2847.239836][T15835] hid (null): unknown global tag 0xd [ 2847.254202][T15835] hid-generic 0003:0158:0100.005A: unknown main item tag 0x1 [ 2847.266821][T20690] netlink: 'syz.2.2650': attribute type 21 has an invalid length. [ 2847.279921][T20690] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2650'. [ 2847.289527][T20690] netlink: 'syz.2.2650': attribute type 4 has an invalid length. [ 2847.297789][T20690] netlink: 'syz.2.2650': attribute type 3 has an invalid length. [ 2847.310674][T20690] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2650'. [ 2847.313434][T15835] hid-generic 0003:0158:0100.005A: unexpected long global item [ 2847.346200][T15835] hid-generic 0003:0158:0100.005A: probe with driver hid-generic failed with error -22 [ 2847.559598][T20662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2847.579573][T20662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2847.580822][T20693] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2650'. [ 2847.614902][T15835] usb 1-1: USB disconnect, device number 60 [ 2848.815842][T20704] Process accounting resumed [ 2850.837087][T20724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2850.907822][T20724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2850.967898][T20727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2661'. [ 2852.950379][T20751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2852.990948][T20751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2853.133810][T20754] Process accounting resumed [ 2853.919419][ T8465] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2854.069330][ T8465] usb 3-1: Using ep0 maxpacket: 32 [ 2854.080912][ T8465] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2854.089382][ T8465] usb 3-1: config 0 has no interface number 0 [ 2854.099938][ T8465] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2854.109000][ T8465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2854.152426][T20768] Process accounting resumed [ 2854.158534][ T8465] usb 3-1: Product: syz [ 2854.163904][ T8465] usb 3-1: Manufacturer: syz [ 2854.168653][ T8465] usb 3-1: SerialNumber: syz [ 2854.188544][ T8465] usb 3-1: config 0 descriptor?? [ 2854.203331][ T8465] smsc95xx v2.0.0 [ 2854.305408][T20770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2854.347384][T20770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2854.555316][T14994] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2854.609070][ T8465] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2854.622988][ T8465] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2855.045502][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'. [ 2855.065991][ T8465] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 2855.089752][ T8465] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 2855.142327][ T8465] usb 3-1: USB disconnect, device number 60 [ 2855.199321][ T5393] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2855.263094][T20787] Process accounting resumed [ 2855.369384][ T5393] usb 1-1: Using ep0 maxpacket: 16 [ 2855.378840][ T5393] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2855.389514][ T5393] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2855.404118][ T5393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2855.414418][ T5393] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2855.429297][T15832] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2855.445873][ T5393] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 2855.460878][ T5393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2855.469557][ T5393] usb 1-1: Product: syz [ 2855.473760][ T5393] usb 1-1: Manufacturer: syz [ 2855.478386][ T5393] usb 1-1: SerialNumber: syz [ 2855.490160][ T5393] usb 1-1: config 0 descriptor?? [ 2855.498543][ T5393] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 2855.579272][T15832] usb 2-1: Using ep0 maxpacket: 8 [ 2855.592457][T15832] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2855.605800][T15832] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2855.619632][T15832] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2855.628911][T15832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2855.979416][T15832] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2856.149646][T15832] usb 3-1: Using ep0 maxpacket: 16 [ 2856.163079][T15832] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2856.172625][T15832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2856.181293][T15832] usb 3-1: Product: syz [ 2856.185621][T15832] usb 3-1: Manufacturer: syz [ 2856.191284][T15832] usb 3-1: SerialNumber: syz [ 2856.198998][T15832] usb 3-1: config 0 descriptor?? [ 2856.207392][T15832] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2856.227906][T15832] usb 3-1: Detected FT-X [ 2856.526063][T15832] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2856.537326][ T5393] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input43 [ 2856.546727][T15832] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2856.560466][T15832] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 2856.575447][ T5393] usb 1-1: USB disconnect, device number 61 [ 2856.581733][T15832] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2856.839802][T15832] usb 3-1: USB disconnect, device number 61 [ 2857.286608][T15832] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2857.297085][T15832] ftdi_sio 3-1:0.0: device disconnected [ 2857.380330][T15835] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2857.540643][T15835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2857.551798][T15835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2857.561628][T15835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2857.578816][T15835] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2857.620936][T15835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2857.642736][T15835] usb 4-1: config 0 descriptor?? [ 2857.914692][T20814] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2858.231006][ T5329] usb 2-1: USB disconnect, device number 75 [ 2858.467396][T20825] fuse: Unknown parameter '0x000000000000000700000000000000000000' [ 2859.376093][T15835] usbhid 4-1:0.0: can't add hid device: -71 [ 2859.389465][T15835] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2859.447618][T15835] usb 4-1: USB disconnect, device number 64 [ 2859.581440][T20830] Process accounting resumed [ 2860.431398][T14994] Bluetooth: hci0: command 0x040f tx timeout [ 2860.469398][T13786] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2860.655420][T13786] usb 3-1: Using ep0 maxpacket: 32 [ 2860.677193][T13786] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 2860.709566][T13786] usb 3-1: config 0 has no interface number 1 [ 2860.740048][T13786] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 2860.749686][T13786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2860.757752][T13786] usb 3-1: Product: syz [ 2860.813173][T13786] usb 3-1: Manufacturer: syz [ 2860.817845][T13786] usb 3-1: SerialNumber: syz [ 2860.872968][T13786] usb 3-1: config 0 descriptor?? [ 2860.923193][T20843] tipc: Started in network mode [ 2860.939306][T20843] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2860.978873][T20843] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 2861.027484][T20843] tipc: Enabled bearer , priority 10 [ 2861.120692][T15832] [ 2861.123064][T15832] ====================================================== [ 2861.130094][T15832] WARNING: possible circular locking dependency detected [ 2861.137122][T15832] 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 Not tainted [ 2861.144238][T15832] ------------------------------------------------------ [ 2861.151262][T15832] kworker/1:5/15832 is trying to acquire lock: [ 2861.157419][T15832] ffff8880619e8258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 [ 2861.168951][T15832] [ 2861.168951][T15832] but task is already holding lock: [ 2861.176327][T15832] ffff888012dc3528 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 [ 2861.185240][T15832] [ 2861.185240][T15832] which lock already depends on the new lock. [ 2861.185240][T15832] [ 2861.195707][T15832] [ 2861.195707][T15832] the existing dependency chain (in reverse order) is: [ 2861.204733][T15832] [ 2861.204733][T15832] -> #3 (&d->lock){+.+.}-{3:3}: [ 2861.209251][T13786] qcserial 3-1:0.37: Qualcomm USB modem converter detected [ 2861.211802][T15832] lock_acquire+0x1ed/0x550 [ 2861.224043][T15832] __mutex_lock+0x136/0xd70 [ 2861.229080][T15832] rfcomm_dev_ioctl+0x1461/0x2220 [ 2861.234651][T15832] rfcomm_sock_ioctl+0x86/0xd0 [ 2861.239963][T15832] sock_do_ioctl+0x158/0x460 [ 2861.245098][T15832] sock_ioctl+0x626/0x8e0 [ 2861.249972][T15832] __se_sys_ioctl+0xf9/0x170 [ 2861.255110][T15832] do_syscall_64+0xf3/0x230 [ 2861.260160][T15832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2861.266644][T15832] [ 2861.266644][T15832] -> #2 (rfcomm_dev_lock){+.+.}-{3:3}: [ 2861.274338][T15832] lock_acquire+0x1ed/0x550 [ 2861.279407][T15832] __mutex_lock+0x136/0xd70 [ 2861.284449][T15832] rfcomm_dev_get+0x81/0x380 [ 2861.289582][T15832] rfcomm_dev_ioctl+0x429/0x2220 [ 2861.295069][T15832] rfcomm_sock_ioctl+0x86/0xd0 [ 2861.300375][T15832] sock_do_ioctl+0x158/0x460 [ 2861.305511][T15832] sock_ioctl+0x626/0x8e0 [ 2861.310395][T15832] __se_sys_ioctl+0xf9/0x170 [ 2861.315525][T15832] do_syscall_64+0xf3/0x230 [ 2861.320577][T15832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2861.327043][T15832] [ 2861.327043][T15832] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 2861.334990][T15832] lock_acquire+0x1ed/0x550 [ 2861.340054][T15832] __mutex_lock+0x136/0xd70 [ 2861.345094][T15832] rfcomm_dev_ioctl+0x168/0x2220 [ 2861.350573][T15832] rfcomm_sock_ioctl+0x86/0xd0 [ 2861.355875][T15832] sock_do_ioctl+0x158/0x460 [ 2861.361003][T15832] sock_ioctl+0x626/0x8e0 [ 2861.365888][T15832] __se_sys_ioctl+0xf9/0x170 [ 2861.371043][T15832] do_syscall_64+0xf3/0x230 [ 2861.376081][T15832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2861.382627][T15832] [ 2861.382627][T15832] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 2861.392055][T15832] validate_chain+0x18ef/0x5920 [ 2861.397453][T15832] __lock_acquire+0x1384/0x2050 [ 2861.402882][T15832] lock_acquire+0x1ed/0x550 [ 2861.407945][T15832] lock_sock_nested+0x48/0x100 [ 2861.408394][T13786] usb 3-1: USB disconnect, device number 62 [ 2861.413251][T15832] rfcomm_sk_state_change+0x5b/0x310 [ 2861.413288][T15832] __rfcomm_dlc_close+0x26f/0x6a0 [ 2861.424827][T13786] qcserial 3-1:0.37: device disconnected [ 2861.424963][T15832] rfcomm_dlc_close+0xf1/0x190 [ 2861.441477][T15832] __rfcomm_sock_close+0x121/0x250 [ 2861.447150][T15832] rfcomm_sock_shutdown+0xb8/0x240 [ 2861.452815][T15832] rfcomm_sock_release+0x59/0x120 [ 2861.458395][T15832] sock_close+0xbc/0x240 [ 2861.463199][T15832] __fput+0x23f/0x880 [ 2861.467734][T15832] delayed_fput+0x63/0x90 [ 2861.472610][T15832] process_scheduled_works+0xa63/0x1850 [ 2861.478713][T15832] worker_thread+0x870/0xd30 [ 2861.483861][T15832] kthread+0x2f0/0x390 [ 2861.488479][T15832] ret_from_fork+0x4b/0x80 [ 2861.493463][T15832] ret_from_fork_asm+0x1a/0x30 [ 2861.498790][T15832] [ 2861.498790][T15832] other info that might help us debug this: [ 2861.498790][T15832] [ 2861.509035][T15832] Chain exists of: [ 2861.509035][T15832] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_dev_lock --> &d->lock [ 2861.509035][T15832] [ 2861.523255][T15832] Possible unsafe locking scenario: [ 2861.523255][T15832] [ 2861.530723][T15832] CPU0 CPU1 [ 2861.536112][T15832] ---- ---- [ 2861.541499][T15832] lock(&d->lock); [ 2861.545342][T15832] lock(rfcomm_dev_lock); [ 2861.552313][T15832] lock(&d->lock); [ 2861.558670][T15832] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 2861.564858][T15832] [ 2861.564858][T15832] *** DEADLOCK *** [ 2861.564858][T15832] [ 2861.573023][T15832] 5 locks held by kworker/1:5/15832: [ 2861.578324][T15832] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2861.589357][T15832] #1: ffffc900037cfd00 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2861.600739][T15832] #2: ffff888057087a08 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 2861.610906][T15832] #3: ffffffff8fe4d8c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x3b/0x190 [ 2861.620448][T15832] #4: ffff888012dc3528 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 [ 2861.629809][T15832] [ 2861.629809][T15832] stack backtrace: [ 2861.635727][T15832] CPU: 1 UID: 0 PID: 15832 Comm: kworker/1:5 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 2861.646593][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2861.656668][T15832] Workqueue: events delayed_fput [ 2861.661643][T15832] Call Trace: [ 2861.665008][T15832] [ 2861.667935][T15832] dump_stack_lvl+0x241/0x360 [ 2861.672619][T15832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2861.677825][T15832] ? __pfx__printk+0x10/0x10 [ 2861.682488][T15832] print_circular_bug+0x13a/0x1b0 [ 2861.687546][T15832] check_noncircular+0x36a/0x4a0 [ 2861.692525][T15832] ? add_lock_to_list+0x1e8/0x2f0 [ 2861.697564][T15832] ? __pfx_check_noncircular+0x10/0x10 [ 2861.703035][T15832] ? lockdep_lock+0x123/0x2b0 [ 2861.707735][T15832] validate_chain+0x18ef/0x5920 [ 2861.712606][T15832] ? __pfx_validate_chain+0x10/0x10 [ 2861.717812][T15832] ? register_lock_class+0x102/0x980 [ 2861.723120][T15832] ? __pfx_register_lock_class+0x10/0x10 [ 2861.728787][T15832] ? mark_lock+0x9a/0x360 [ 2861.733127][T15832] ? __lock_acquire+0x1384/0x2050 [ 2861.738182][T15832] ? mark_lock+0x9a/0x360 [ 2861.742517][T15832] __lock_acquire+0x1384/0x2050 [ 2861.747385][T15832] lock_acquire+0x1ed/0x550 [ 2861.751896][T15832] ? rfcomm_sk_state_change+0x5b/0x310 [ 2861.757362][T15832] ? __pfx_lock_acquire+0x10/0x10 [ 2861.762408][T15832] ? trace_contention_end+0x3c/0x120 [ 2861.767718][T15832] ? __mutex_lock+0x2ef/0xd70 [ 2861.772428][T15832] ? detach_timer+0x16c/0x320 [ 2861.777138][T15832] ? __timer_delete+0x2e0/0x380 [ 2861.781994][T15832] ? __rfcomm_dlc_close+0x226/0x6a0 [ 2861.787202][T15832] ? __pfx___mutex_lock+0x10/0x10 [ 2861.792228][T15832] lock_sock_nested+0x48/0x100 [ 2861.797002][T15832] ? rfcomm_sk_state_change+0x5b/0x310 [ 2861.802495][T15832] rfcomm_sk_state_change+0x5b/0x310 [ 2861.807792][T15832] __rfcomm_dlc_close+0x26f/0x6a0 [ 2861.812822][T15832] rfcomm_dlc_close+0xf1/0x190 [ 2861.817586][T15832] __rfcomm_sock_close+0x121/0x250 [ 2861.822702][T15832] rfcomm_sock_shutdown+0xb8/0x240 [ 2861.827820][T15832] rfcomm_sock_release+0x59/0x120 [ 2861.832849][T15832] sock_close+0xbc/0x240 [ 2861.837101][T15832] ? __pfx_sock_close+0x10/0x10 [ 2861.841953][T15832] __fput+0x23f/0x880 [ 2861.845942][T15832] ? process_scheduled_works+0x976/0x1850 [ 2861.851663][T15832] delayed_fput+0x63/0x90 [ 2861.855988][T15832] process_scheduled_works+0xa63/0x1850 [ 2861.861544][T15832] ? __pfx_process_scheduled_works+0x10/0x10 [ 2861.867525][T15832] ? assign_work+0x364/0x3d0 [ 2861.872133][T15832] worker_thread+0x870/0xd30 [ 2861.876728][T15832] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2861.882650][T15832] ? __kthread_parkme+0x169/0x1d0 [ 2861.887683][T15832] ? __pfx_worker_thread+0x10/0x10 [ 2861.892799][T15832] kthread+0x2f0/0x390 [ 2861.896872][T15832] ? __pfx_worker_thread+0x10/0x10 [ 2861.901989][T15832] ? __pfx_kthread+0x10/0x10 [ 2861.906574][T15832] ret_from_fork+0x4b/0x80 [ 2861.910995][T15832] ? __pfx_kthread+0x10/0x10 [ 2861.915601][T15832] ret_from_fork_asm+0x1a/0x30 [ 2861.920375][T15832] [ 2861.974124][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2708'. [ 2862.047702][T20850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2707'. [ 2862.109268][ T5276] tipc: Node number set to 1