last executing test programs: 3.697505116s ago: executing program 0 (id=5720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 3.47973493s ago: executing program 0 (id=5724): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x10400, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'workdir]X\xec\v\xa3tg=8\xb4\xd9\x9d\xafR\x80\x83\xd7\xef\x83a(\v\v\xb5\xd5\xb2\xf08\\\x8a\xc6ktmo\x00>\xc5G\x8d[\xca\xe1Q]\xc6\x14\x04\xf3\xdb\x05/\x04\x82\xa4L\xce\xd4\xef0\x05t\x92\xe8\xdf\xf8\xd7\xce\xea\x18\xca\xed\'\xd4AC\xed\x94\xf968\xb7\xc4=\xb8'}}]}) 3.195165738s ago: executing program 0 (id=5729): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) 3.192849515s ago: executing program 2 (id=5731): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.814202286s ago: executing program 3 (id=5736): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300050004000140eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.763144752s ago: executing program 1 (id=5737): socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r0, 0xc02063a1, &(0x7f0000000380)) 2.61771009s ago: executing program 3 (id=5738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f80), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x58, r2, 0x101, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x58}}, 0x0) 2.442860129s ago: executing program 1 (id=5739): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8, 0x12) 2.355582784s ago: executing program 3 (id=5741): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e00)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x68, r1}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @ip6gre={{0x4}, {0x4}}}]}, 0x34}}, 0x0) 2.115957389s ago: executing program 3 (id=5743): landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000640)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYRES16=r0, @ANYRES8=r0], 0x0) 2.084310226s ago: executing program 1 (id=5744): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x34}}, 0x0) 1.865521873s ago: executing program 4 (id=5745): io_uring_setup(0x3e76, &(0x7f0000000000)={0x0, 0x3b02, 0x40, 0x0, 0x2f2}) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) close(0x3) 1.776760978s ago: executing program 1 (id=5746): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}}, 0x50) 1.748740237s ago: executing program 0 (id=5747): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.530117487s ago: executing program 2 (id=5748): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x6a4, @loopback, 0x80200008}, 0x1c) listen(r0, 0x0) 1.505767587s ago: executing program 1 (id=5749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000240)={0x5}) 1.318165669s ago: executing program 2 (id=5750): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 1.177618401s ago: executing program 2 (id=5751): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) 1.098121961s ago: executing program 1 (id=5752): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) inotify_init1(0x0) 929.77056ms ago: executing program 2 (id=5753): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) 736.74797ms ago: executing program 4 (id=5754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8}, @TCA_CAKE_MPU={0x8}]}}]}, 0x44}}, 0x0) 690.914557ms ago: executing program 2 (id=5755): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 588.366579ms ago: executing program 4 (id=5756): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x110) 493.853794ms ago: executing program 0 (id=5757): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0xc10000d1) symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0) 483.093533ms ago: executing program 3 (id=5758): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060ec00000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 428.974361ms ago: executing program 4 (id=5759): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) 268.37056ms ago: executing program 0 (id=5760): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000016000/0x1000)=nil, &(0x7f00003c0000/0x4000)=nil, 0x9eec, 0x0, 0x0, 0x1000000006, 0x40, 0x0, 0x20}) 164.767465ms ago: executing program 4 (id=5761): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x48}}, 0x0) 48.526401ms ago: executing program 3 (id=5762): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2d, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000240)="970169abb19bcf00b6b7a7051b4b90a1", 0x0}, 0x20) 0s ago: executing program 4 (id=5763): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x480) poll(&(0x7f0000000040), 0x55, 0x2) kernel console output (not intermixed with test programs): g): left allmulticast mode [ 344.984708][ T5230] Bluetooth: hci6: command 0x0406 tx timeout [ 345.161969][T14338] syz.2.3987 (14338) used greatest stack depth: 18096 bytes left [ 345.367978][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 345.428053][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 345.785196][ T5228] Bluetooth: hci7: command tx timeout [ 346.047911][T14215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.068367][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3983'. [ 346.269416][T14215] team0: Port device team_slave_0 added [ 346.279078][T14215] team0: Port device team_slave_1 added [ 346.350807][T14215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.358989][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 346.359008][ T29] audit: type=1326 audit(2000000223.950:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 346.359070][T14215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.388101][ T29] audit: type=1326 audit(2000000223.950:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 346.430583][T14215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.466584][ T29] audit: type=1326 audit(2000000223.990:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 346.535224][ T29] audit: type=1326 audit(2000000224.050:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 346.538740][T14215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.576534][ T29] audit: type=1326 audit(2000000224.050:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 346.583228][T14215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.599345][ T29] audit: type=1326 audit(2000000224.050:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 346.641089][T14215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.648850][ T29] audit: type=1326 audit(2000000224.050:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f870d974ee7 code=0x7ffc0000 [ 346.686994][ T29] audit: type=1326 audit(2000000224.060:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f870d9198a9 code=0x7ffc0000 [ 346.709191][ T29] audit: type=1326 audit(2000000224.060:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f870d974ee7 code=0x7ffc0000 [ 346.731858][ T29] audit: type=1326 audit(2000000224.060:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f870d9198a9 code=0x7ffc0000 [ 346.964190][T14215] hsr_slave_0: entered promiscuous mode [ 346.972404][T14215] hsr_slave_1: entered promiscuous mode [ 346.980030][T14215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.987963][T14215] Cannot create hsr debugfs directory [ 347.058071][T14366] wireguard0: entered promiscuous mode [ 347.072467][T14366] wireguard0: entered allmulticast mode [ 347.217735][ T1104] IPVS: stop unused estimator thread 0... [ 347.874788][ T5228] Bluetooth: hci7: command tx timeout [ 348.278265][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4021'. [ 348.304575][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 348.464502][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 348.483809][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4022'. [ 348.485308][ T9] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 348.533412][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.543644][T14215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.559114][ T9] usb 4-1: Product: syz [ 348.563846][ T9] usb 4-1: Manufacturer: syz [ 348.571961][ T9] usb 4-1: SerialNumber: syz [ 348.591594][T14215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.605484][ T9] usb 4-1: config 0 descriptor?? [ 348.648745][T14215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.674923][T14215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.736706][T14424] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 348.945939][T14215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.964602][ T9] kaweth 4-1:0.0: Firmware present in device. [ 348.989832][ T9] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 349.017635][T14215] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.024967][ T9] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 349.045596][ T9] usb 4-1: USB disconnect, device number 36 [ 349.083353][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.090634][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.136852][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.144170][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.500668][T14215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.541420][T14215] veth0_vlan: entered promiscuous mode [ 349.558058][T14215] veth1_vlan: entered promiscuous mode [ 349.595855][T14215] veth0_macvtap: entered promiscuous mode [ 349.747437][T14215] veth1_macvtap: entered promiscuous mode [ 349.819576][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.851151][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.884429][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.913647][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.934600][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.951596][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.970677][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.982859][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.020009][T14215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.033767][T14458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4037'. [ 350.104175][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.116054][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.144491][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.158899][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.169368][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.180491][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.191157][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.202494][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.238972][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.263083][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.305922][T14215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.342564][T14215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.382215][T14215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.395065][T14215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.403924][T14215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.637198][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.645997][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.649812][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.661709][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.072792][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 353.072814][ T29] audit: type=1326 audit(2000000230.670:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14591 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 353.102862][ T29] audit: type=1326 audit(2000000230.670:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14591 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 353.125155][ T29] audit: type=1326 audit(2000000230.670:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14591 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 353.149423][ T29] audit: type=1326 audit(2000000230.670:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14591 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 353.172379][ T29] audit: type=1326 audit(2000000230.670:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14591 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 353.255456][ T937] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 353.426073][ T937] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.435656][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.449946][ T937] usb 2-1: config 0 descriptor?? [ 353.472587][ T937] cp210x 2-1:0.0: cp210x converter detected [ 353.669980][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4109'. [ 353.882794][ T937] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 353.903070][ T937] usb 2-1: cp210x converter now attached to ttyUSB0 [ 354.017002][T14634] vlan2: entered promiscuous mode [ 354.022748][T14634] vlan2: entered allmulticast mode [ 354.029835][T14634] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 354.040092][T14634] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 354.049701][T14634] team0: Port device vlan2 added [ 354.103775][ T25] usb 2-1: USB disconnect, device number 28 [ 354.120610][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 354.209840][ T25] cp210x 2-1:0.0: device disconnected [ 357.477337][ T5229] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 357.481973][T14760] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4173'. [ 357.656901][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.668304][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.678687][ T5229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.703028][ T5229] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 357.723379][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.737886][ T5229] usb 2-1: config 0 descriptor?? [ 357.958189][T14748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.982519][T14748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.990978][T14776] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4181'. [ 358.001858][T14774] netlink: 'syz.0.4180': attribute type 1 has an invalid length. [ 358.004637][ T5229] usbhid 2-1:0.0: can't add hid device: -71 [ 358.015217][T14776] netlink: 89 bytes leftover after parsing attributes in process `syz.4.4181'. [ 358.017972][ T5229] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 358.037414][T14774] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.4180'. [ 358.044718][ T5229] usb 2-1: USB disconnect, device number 29 [ 358.084780][T14774] netlink: 'syz.0.4180': attribute type 2 has an invalid length. [ 358.103679][T14774] netlink: 'syz.0.4180': attribute type 1 has an invalid length. [ 358.534753][ T5229] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 358.694402][ T5229] usb 2-1: Using ep0 maxpacket: 8 [ 358.706442][ T5229] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.721872][ T5229] usb 2-1: config 0 has no interface number 0 [ 358.734648][ T5229] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 358.774145][ T5229] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 358.807642][ T5229] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.817792][ T5229] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 358.832084][ T5229] usb 2-1: config 0 interface 1 has no altsetting 0 [ 358.850461][ T5229] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 358.863355][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.885545][ T5229] usb 2-1: config 0 descriptor?? [ 359.044497][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 359.104882][ T5229] usb 2-1: USB disconnect, device number 30 [ 359.152552][T14818] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.4199'. [ 359.162449][T14818] netlink: 'syz.0.4199': attribute type 2 has an invalid length. [ 359.170632][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4199'. [ 359.194600][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 359.202220][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 359.220068][ T9] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 359.229462][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.237777][ T9] usb 4-1: Product: syz [ 359.242206][ T9] usb 4-1: Manufacturer: syz [ 359.248212][ T9] usb 4-1: SerialNumber: syz [ 359.255195][ T9] usb 4-1: config 0 descriptor?? [ 359.261049][T14803] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 359.274005][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 359.282328][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 359.293034][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 359.492249][T14827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4203'. [ 359.539407][ T9] usb 4-1: USB disconnect, device number 37 [ 359.545411][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 359.775788][T14838] netlink: 576 bytes leftover after parsing attributes in process `syz.4.4207'. [ 360.041210][T14850] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 360.056068][T14850] syzkaller0: group set to 0 [ 360.314507][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 360.478498][ T9] usb 1-1: config 0 has no interfaces? [ 360.484658][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 360.493764][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.572414][ T9] usb 1-1: config 0 descriptor?? [ 360.754640][T14879] sctp: [Deprecated]: syz.4.4225 (pid 14879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.754640][T14879] Use struct sctp_sack_info instead [ 360.783849][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 360.796999][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 360.806317][ T5230] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 360.825124][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 360.845792][ T5230] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 360.853393][ T5230] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 360.866511][ T51] usb 1-1: USB disconnect, device number 30 [ 361.009962][ T5230] Bluetooth: hci6: unknown advertising packet type: 0x65 [ 361.010055][ T5230] Bluetooth: hci6: Dropping invalid advertising data [ 361.028436][ T5230] Bluetooth: hci6: Malformed LE Event: 0x02 [ 361.089690][T14869] chnl_net:caif_netlink_parms(): no params data found [ 361.155812][T14869] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.165051][T14869] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.172458][T14869] bridge_slave_0: entered allmulticast mode [ 361.180335][T14869] bridge_slave_0: entered promiscuous mode [ 361.194122][T14869] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.201795][T14869] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.209161][T14869] bridge_slave_1: entered allmulticast mode [ 361.217111][T14869] bridge_slave_1: entered promiscuous mode [ 361.249451][T14869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.263061][T14869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.302281][T14869] team0: Port device team_slave_0 added [ 361.319159][T14869] team0: Port device team_slave_1 added [ 361.350365][T14869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.359286][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.387505][T14869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.401249][T14869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.425364][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.451750][T14869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.512833][T14869] hsr_slave_0: entered promiscuous mode [ 361.525730][T14869] hsr_slave_1: entered promiscuous mode [ 361.564474][T14869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.598585][T14869] Cannot create hsr debugfs directory [ 361.712885][T14900] Invalid option length (1047906) for dns_resolver key [ 362.030695][T14869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.361949][T14869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.494869][T14929] wireguard0: entered promiscuous mode [ 362.500559][T14929] wireguard0: entered allmulticast mode [ 362.719775][T14869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.901976][T14869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.936548][ T5230] Bluetooth: hci8: command tx timeout [ 363.134867][ T51] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 363.277750][T14869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.313495][ T51] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 363.326363][T14869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.337046][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.361204][T14869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.369015][ T51] usb 2-1: config 0 descriptor?? [ 363.402311][T14869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.527480][T14968] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4263'. [ 363.672359][T14869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.796281][ T51] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 363.822019][T14869] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.860274][ T2593] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.867515][ T2593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.910036][ T2593] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.917260][ T2593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.197357][ T51] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 364.239906][ T51] usb 2-1: USB disconnect, device number 31 [ 364.545190][T15007] sp0: Synchronizing with TNC [ 364.598840][T14869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.767502][T14869] veth0_vlan: entered promiscuous mode [ 364.793159][T14869] veth1_vlan: entered promiscuous mode [ 364.997854][ T5230] Bluetooth: hci8: command tx timeout [ 365.040901][T14869] veth0_macvtap: entered promiscuous mode [ 365.050620][T14869] veth1_macvtap: entered promiscuous mode [ 365.070261][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.081240][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.091582][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.102147][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.113187][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.123782][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.133852][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.145001][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.155170][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.166035][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.182905][T14869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.193030][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.203681][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.213855][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.224452][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.234791][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.245387][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.255329][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.266028][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.276186][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.287111][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.297414][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.308399][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.319823][T14869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.391447][T14869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.417360][T14869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.441120][T14869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.450086][T14869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.726338][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.734225][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.766826][T15034] netlink: 'syz.1.4291': attribute type 4 has an invalid length. [ 365.805851][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.813735][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.799109][T15085] hsr0: entered promiscuous mode [ 366.808129][T15085] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 366.865381][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4316'. [ 366.910596][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4316'. [ 367.063988][T15094] @: renamed from vlan0 [ 367.069045][ T5230] Bluetooth: hci8: command tx timeout [ 367.575559][T15119] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 368.047328][T15148] netlink: 'syz.1.4342': attribute type 8 has an invalid length. [ 368.142732][ T29] audit: type=1326 audit(2000000245.740:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15149 comm="syz.0.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 368.204396][ T29] audit: type=1326 audit(2000000245.740:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15149 comm="syz.0.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 368.271059][ T29] audit: type=1326 audit(2000000245.740:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15149 comm="syz.0.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 368.323949][ T29] audit: type=1326 audit(2000000245.740:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15149 comm="syz.0.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 368.411040][T15163] netem: incorrect ge model size [ 368.799301][T15182] netlink: 'syz.3.4358': attribute type 8 has an invalid length. [ 368.844724][ T5229] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 368.977886][T15191] sp0: Synchronizing with TNC [ 369.014704][ T5229] usb 1-1: Using ep0 maxpacket: 32 [ 369.022282][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.052202][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.075142][ T5229] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 369.085174][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.105996][ T5229] usb 1-1: config 0 descriptor?? [ 369.121711][ T5229] hub 1-1:0.0: USB hub found [ 369.144943][ T5230] Bluetooth: hci8: command tx timeout [ 369.322981][ T5229] hub 1-1:0.0: 1 port detected [ 369.355631][T15207] program syz.2.4368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.452772][ T29] audit: type=1326 audit(2000000247.050:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.3.4371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x0 [ 369.738867][ T5229] usb 1-1: USB disconnect, device number 31 [ 370.035437][T15237] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 370.679008][T15258] sit1: entered promiscuous mode [ 370.684095][T15258] sit1: entered allmulticast mode [ 371.078408][T15277] netlink: 'syz.0.4400': attribute type 6 has an invalid length. [ 371.092910][T15277] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4400'. [ 371.272892][T15287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4405'. [ 371.904530][ T5229] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 371.912414][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 372.106336][ T5229] usb 1-1: Using ep0 maxpacket: 16 [ 372.113259][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.134690][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.154536][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.157230][T15330] tap0: tun_chr_ioctl cmd 99999999 [ 372.172985][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.183436][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.203607][ T5229] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 372.214436][ T25] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 372.224142][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.232363][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.249926][ T5229] usb 1-1: config 0 descriptor?? [ 372.256139][ T25] usb 2-1: config 0 descriptor?? [ 372.697099][ T25] hid-udraw 0003:20D6:CB17.0032: unknown main item tag 0x0 [ 372.727055][ T25] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0032/input/input42 [ 372.749927][ T5229] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0033/input/input46 [ 372.845963][ T25] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0032/input/input43 [ 372.868157][ T5229] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0033/input/input47 [ 373.049961][ T25] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0032/input/input44 [ 373.101453][ T5229] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0033/input/input48 [ 373.156270][ T25] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0032/input/input45 [ 373.192430][ T5229] kye 0003:0458:5015.0033: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 373.217613][ T25] hid-udraw 0003:20D6:CB17.0032: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 373.242711][ T5229] usb 1-1: USB disconnect, device number 32 [ 373.252502][ T25] usb 2-1: USB disconnect, device number 32 [ 373.348282][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.364754][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.391546][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.406709][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.424527][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.454415][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.484436][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.504428][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.523320][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.547178][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.590906][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.610975][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.840475][T15391] netlink: 'syz.1.4452': attribute type 2 has an invalid length. [ 374.207199][T15404] program syz.1.4458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.312683][ T29] audit: type=1326 audit(2000000251.910:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15407 comm="syz.3.4460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x0 [ 374.994635][ T5229] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 375.176442][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.204303][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.221519][ T5229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.247461][ T5229] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 375.267015][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.280705][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4472'. [ 375.290860][ T5229] usb 1-1: config 0 descriptor?? [ 375.530680][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4477'. [ 375.550337][T15446] tipc: Cannot configure node identity twice [ 375.737321][ T5229] hid-udraw 0003:20D6:CB17.0034: unknown main item tag 0x0 [ 375.779975][ T5229] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0034/input/input50 [ 375.922902][ T5229] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0034/input/input51 [ 375.959802][ T5229] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0034/input/input52 [ 375.978572][ T5229] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0034/input/input53 [ 376.098449][ T5229] hid-udraw 0003:20D6:CB17.0034: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 376.124471][ T937] usb 1-1: USB disconnect, device number 33 [ 376.134430][ T5275] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 376.287207][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 376.298370][ T5275] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.307019][ T5275] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 376.317366][ T5275] usb 4-1: can't read configurations, error -71 [ 376.434813][T15477] @: renamed from vlan0 [ 376.521167][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4492'. [ 376.554289][T15483] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.640382][T15487] sctp: [Deprecated]: syz.1.4494 (pid 15487) Use of int in maxseg socket option. [ 376.640382][T15487] Use struct sctp_assoc_value instead [ 377.104746][ T5304] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 377.155448][T15513] netlink: 'syz.1.4506': attribute type 1 has an invalid length. [ 377.169286][T15513] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.4506'. [ 377.194696][ T5229] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 377.286152][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.297980][T15519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.309029][ T5304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.334365][ T5304] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 377.355779][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.373452][ T5304] usb 3-1: config 0 descriptor?? [ 377.394003][ T5229] usb 1-1: Using ep0 maxpacket: 8 [ 377.402350][ T5229] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 377.411392][ T5229] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 377.428705][ T5229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.457065][ T5229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.467830][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.476824][ T5229] usb 1-1: Product: syz [ 377.481039][ T5229] usb 1-1: Manufacturer: syz [ 377.489442][ T5229] usb 1-1: SerialNumber: syz [ 377.612735][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1) [ 377.685027][ T5237] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 377.798442][ T5304] apple 0003:05AC:0262.0035: bogus close delimiter [ 377.813618][ T5304] apple 0003:05AC:0262.0035: item 0 1 2 10 parsing failed [ 377.821972][ T5304] apple 0003:05AC:0262.0035: parse failed [ 377.830317][ T5304] apple 0003:05AC:0262.0035: probe with driver apple failed with error -22 [ 377.877699][ T5237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.904873][ T5237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.917442][ T5237] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.931726][ T5237] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 377.941928][ T5237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.967190][ T5237] usb 4-1: config 0 descriptor?? [ 378.010159][ T5304] usb 3-1: USB disconnect, device number 28 [ 378.115762][ T5229] usb 1-1: 0:2 : does not exist [ 378.259888][ T29] audit: type=1326 audit(2000000255.860:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.291620][ T29] audit: type=1326 audit(2000000255.860:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.314830][ T29] audit: type=1326 audit(2000000255.860:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.337113][ T29] audit: type=1326 audit(2000000255.860:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.349779][ T5304] usb 1-1: USB disconnect, device number 34 [ 378.379954][ T29] audit: type=1326 audit(2000000255.860:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.414015][ T29] audit: type=1326 audit(2000000255.860:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.416666][ T5237] hid-udraw 0003:20D6:CB17.0036: unknown main item tag 0x0 [ 378.461978][ T29] audit: type=1326 audit(2000000255.860:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.466783][ T5237] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0036/input/input54 [ 378.500552][ T29] audit: type=1326 audit(2000000255.860:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.536443][ T5237] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0036/input/input55 [ 378.550643][ T29] audit: type=1326 audit(2000000255.860:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4e57df39 code=0x7ffc0000 [ 378.573922][ T5237] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0036/input/input56 [ 378.620626][ T5237] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0036/input/input57 [ 378.675933][ T5237] hid-udraw 0003:20D6:CB17.0036: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0 [ 378.693732][ T5237] usb 4-1: USB disconnect, device number 40 [ 378.747986][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.294756][ T5229] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 379.456658][ T5229] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.465626][ T5229] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 379.496585][ T5229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.524661][ T5229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 379.541026][ T5229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 379.568205][ T5229] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.582817][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.598726][ T5229] usb 1-1: Product: syz [ 379.602954][ T5229] usb 1-1: Manufacturer: syz [ 379.629430][ T5229] cdc_wdm 1-1:1.0: skipping garbage [ 379.638081][ T5229] cdc_wdm 1-1:1.0: skipping garbage [ 379.655815][ T5229] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 379.661800][ T5229] cdc_wdm 1-1:1.0: Unknown control protocol [ 379.744552][ T937] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 379.896581][ T937] usb 4-1: config 0 has no interfaces? [ 379.902392][ T937] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 379.932016][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.946369][ T937] usb 4-1: config 0 descriptor?? [ 380.168447][ T5229] usb 4-1: USB disconnect, device number 41 [ 380.204671][ T937] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 380.376273][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.379703][ T5229] usb 1-1: USB disconnect, device number 35 [ 380.397922][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.414368][ T937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.438414][ T937] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 380.459994][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.475570][ T937] usb 3-1: config 0 descriptor?? [ 380.904028][ T937] hid-udraw 0003:20D6:CB17.0037: unknown main item tag 0x0 [ 380.924071][ T937] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0037/input/input58 [ 381.024778][ T937] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0037/input/input59 [ 381.080124][ T937] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0037/input/input60 [ 381.172080][ T937] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0037/input/input61 [ 381.218154][ T937] hid-udraw 0003:20D6:CB17.0037: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 381.253737][ T937] usb 3-1: USB disconnect, device number 29 [ 381.704882][ T5229] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 381.864667][ T5229] usb 4-1: Using ep0 maxpacket: 8 [ 381.881098][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.914510][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.955070][ T5229] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 381.964214][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.993723][ T5229] usb 4-1: config 0 descriptor?? [ 382.423310][ T5229] hid-led 0003:04D8:F372.0038: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 382.451780][ T5229] hid-led 0003:04D8:F372.0038: Greynut Luxafor initialized [ 382.454636][ T937] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 382.616454][ T937] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 382.634536][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.651470][ T937] usb 3-1: config 0 descriptor?? [ 382.654858][ T5229] usb 4-1: USB disconnect, device number 42 [ 382.660610][ T937] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 382.686028][ T5275] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 382.705229][ T5275] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 382.721360][ T5275] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 382.731189][ T5275] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 382.740335][ T5275] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 382.753631][ T5237] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 382.762984][ T5275] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 382.776205][ T5275] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 382.785610][ T5275] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 382.794367][ T5275] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 382.803982][ T5275] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 382.813645][ T5275] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 382.822385][ T5275] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 382.831299][ T5275] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 382.840553][ T5275] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 382.865912][ T5275] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 382.876240][ T5275] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 382.885254][ T5275] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 382.990743][T15690] kvm: user requested TSC rate below hardware speed [ 383.274140][T15695] tap0: tun_chr_ioctl cmd 1074025677 [ 383.284789][T15695] tap0: linktype set to 65534 [ 383.469841][ T937] gspca_cpia1: usb_control_msg 02, error -71 [ 383.487037][ T937] gspca_cpia1: usb_control_msg 05, error -71 [ 383.502857][ T937] gspca_cpia1: usb_control_msg 04, error -71 [ 383.510420][ T937] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 383.530854][ T937] usb 3-1: USB disconnect, device number 30 [ 383.640897][T15712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.220545][T15731] mkiss: ax0: crc mode is auto. [ 384.600835][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.639500][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.649023][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.684505][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.705041][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 384.726469][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.834521][ T937] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 384.995169][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 385.006032][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.049693][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.075344][ T937] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 385.094416][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.127679][ T937] usb 4-1: config 0 descriptor?? [ 385.306737][T15746] chnl_net:caif_netlink_parms(): no params data found [ 385.507764][T15775] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 385.577106][ T937] ntrig 0003:1B96:0008.0039: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0 [ 385.590293][T15746] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.597666][T15746] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.605524][T15746] bridge_slave_0: entered allmulticast mode [ 385.613101][T15746] bridge_slave_0: entered promiscuous mode [ 385.628332][T15778] bond0: option resend_igmp: invalid value (7540) [ 385.635437][T15778] bond0: option resend_igmp: allowed values 0 - 255 [ 385.643370][T15746] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.652107][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.660443][T15746] bridge_slave_1: entered allmulticast mode [ 385.691684][T15746] bridge_slave_1: entered promiscuous mode [ 385.757070][ T937] ntrig 0003:1B96:0008.0039: Firmware version: 2.13.12.1.7 (35a5 3780) [ 385.829360][T15746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.862893][T15746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.972586][ T937] usb 4-1: USB disconnect, device number 43 [ 386.020153][ T29] audit: type=1400 audit(2000000263.620:595): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=15787 comm="syz.2.4627" name="71" dev="tmpfs" ino=373 [ 386.079654][T15746] team0: Port device team_slave_0 added [ 386.089698][T15746] team0: Port device team_slave_1 added [ 386.203427][T15798] netlink: 'syz.1.4630': attribute type 10 has an invalid length. [ 386.223638][T15798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.243987][T15798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.310222][T15798] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 386.332859][T15806] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4635'. [ 386.432941][T15746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.441062][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.470951][T15746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.501812][T15746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.520794][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.581098][T15746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.799159][T15746] hsr_slave_0: entered promiscuous mode [ 386.824828][ T5230] Bluetooth: hci4: command tx timeout [ 386.860530][T15746] hsr_slave_1: entered promiscuous mode [ 386.904434][T15746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.912102][T15746] Cannot create hsr debugfs directory [ 387.036965][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4645'. [ 387.046452][T15827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4645'. [ 387.103552][T15827] vlan2: entered allmulticast mode [ 387.109224][T15827] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 387.416605][T15746] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.511783][T15746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.594653][T15746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.665297][ T937] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 387.697732][T15746] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.842608][ T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.874689][ T937] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 387.883879][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.907738][ T937] usb 4-1: config 0 descriptor?? [ 387.946766][T15746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 387.958639][T15746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 387.970941][T15746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 387.985296][T15746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 388.055114][ T5237] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 388.121726][ T937] usb 4-1: string descriptor 0 read error: -71 [ 388.136022][ T937] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 388.158592][ T937] usb 4-1: No valid video chain found. [ 388.170262][T15746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.195564][ T937] usb 4-1: USB disconnect, device number 44 [ 388.251260][ T5237] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 388.271716][ T5237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.285096][ T5237] usb 3-1: Product: syz [ 388.289331][ T5237] usb 3-1: Manufacturer: syz [ 388.303157][T15746] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.304512][ T5237] usb 3-1: SerialNumber: syz [ 388.328321][ T2593] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.335526][ T2593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.356213][ T5237] usb 3-1: config 0 descriptor?? [ 388.369184][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.376409][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.586071][ T5237] usb 3-1: USB disconnect, device number 31 [ 388.676429][ T937] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 388.810738][T15746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.845141][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 388.879366][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.905183][ T5230] Bluetooth: hci4: command tx timeout [ 388.910791][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.952740][ T937] usb 2-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 388.974409][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.002364][ T937] usb 2-1: config 0 descriptor?? [ 389.446169][T15746] veth0_vlan: entered promiscuous mode [ 389.489336][T15746] veth1_vlan: entered promiscuous mode [ 389.580866][T15746] veth0_macvtap: entered promiscuous mode [ 389.593907][T15746] veth1_macvtap: entered promiscuous mode [ 389.645605][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.663285][ T937] usb 2-1: USB disconnect, device number 33 [ 389.688542][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.708935][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.748765][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.769936][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.794759][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.814383][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.834110][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.844332][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.855796][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.880710][T15746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.898003][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.915096][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.926065][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.938287][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.949710][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.984528][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.000041][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.012254][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.022652][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.033785][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.062792][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.074762][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.085363][T15746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.096836][T15746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.125167][T15746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.168911][T15746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.198121][T15746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.219751][T15746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.234345][T15746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.504621][ T3052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.512478][ T3052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.593063][T15924] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 390.635599][T15926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4685'. [ 390.786749][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.832513][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.984964][ T5230] Bluetooth: hci4: command tx timeout [ 391.025400][T15943] input: syz1 as /devices/virtual/input/input64 [ 393.064837][ T5230] Bluetooth: hci4: command tx timeout [ 393.655979][T16071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4750'. [ 393.730789][T16075] syz.3.4749 (16075): drop_caches: 4 [ 393.806804][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4752'. [ 394.293813][T16090] [U] ƒ [ 396.860398][ T29] audit: type=1326 audit(2000000274.460:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16176 comm="syz.3.4797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x0 [ 397.055629][ T29] audit: type=1326 audit(2000000274.660:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16184 comm="syz.1.4801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb4e57df39 code=0x0 [ 397.616435][T16203] ip6gretap0: entered promiscuous mode [ 397.641019][T16203] ip6gretap0: left promiscuous mode [ 397.755004][T16205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4810'. [ 398.124478][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 398.224573][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 398.295143][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 398.303658][ T25] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 398.312148][ T25] usb 1-1: config 0 has no interface number 0 [ 398.335266][ T25] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 398.365080][ T25] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 398.384552][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.387699][ T25] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 398.402649][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.408837][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 398.410851][ T25] usb 1-1: Product: syz [ 398.422965][ T25] usb 1-1: Manufacturer: syz [ 398.430186][ T9] usb 5-1: can't read configurations, error -71 [ 398.434647][ T25] usb 1-1: SerialNumber: syz [ 398.447737][ T25] usb 1-1: config 0 descriptor?? [ 398.456957][T16211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.468696][T16211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.693243][T16211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.703619][T16211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.054533][ T5275] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 399.214850][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 399.231228][ T5275] usb 4-1: config 0 has an invalid interface number: 64 but max is 1 [ 399.257131][ T5275] usb 4-1: config 0 has no interface number 1 [ 399.287347][ T5275] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.327144][ T5275] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 399.336635][ T25] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 399.347872][ T25] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 399.359330][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.369143][ T25] asix 1-1:0.251: probe with driver asix failed with error -71 [ 399.378372][ T5275] usb 4-1: Product: syz [ 399.382750][ T5275] usb 4-1: Manufacturer: syz [ 399.391749][ T5275] usb 4-1: SerialNumber: syz [ 399.397021][ T25] usb 1-1: USB disconnect, device number 36 [ 399.406428][ T5275] usb 4-1: config 0 descriptor?? [ 399.636762][ T5275] usb 4-1: bad CDC descriptors [ 399.676336][ T5275] usb 4-1: USB disconnect, device number 45 [ 399.874034][T16271] program syz.4.4840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.980313][T16275] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4842'. [ 400.001927][T16275] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 400.300126][T16290] input: syz0 as /devices/virtual/input/input65 [ 400.363602][T16292] option changes via remount are deprecated (pid=16291 comm=syz.3.4850) [ 400.970752][T16316] netlink: 'syz.3.4862': attribute type 1 has an invalid length. [ 400.991639][T16316] netlink: 'syz.3.4862': attribute type 4 has an invalid length. [ 401.019093][T16316] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4862'. [ 401.183603][T16327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4868'. [ 401.383035][T16331] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4869'. [ 401.547615][T16343] syz.1.4876[16343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.547756][T16343] syz.1.4876[16343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.580819][T16343] syz.1.4876[16343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.301342][ T5349] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 402.403331][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4891'. [ 402.449429][T16383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.499501][T16380] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.151135][T16397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4900'. [ 403.716250][ T5349] usb 2-1: Using ep0 maxpacket: 16 [ 403.844781][ T5349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.862896][ T5349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.009400][ T5349] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 405.026245][ T5349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.268095][T16433] netlink: 'syz.4.4915': attribute type 2 has an invalid length. [ 406.334495][T16433] netlink: 'syz.4.4915': attribute type 1 has an invalid length. [ 406.341257][ T5349] usb 2-1: config 0 descriptor?? [ 406.342470][T16433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.362882][ T5349] usb 2-1: can't set config #0, error -71 [ 406.498532][ T5349] usb 2-1: USB disconnect, device number 34 [ 407.254415][ T51] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 407.468761][ T51] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.517464][ T51] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 407.595612][ T51] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.655119][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 407.734409][ T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 407.778306][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4931'. [ 407.825954][ T51] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.865684][ T51] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.930934][ T51] usb 4-1: Product: syz [ 407.944539][ T51] usb 4-1: Manufacturer: syz [ 407.981018][ T51] cdc_wdm 4-1:1.0: skipping garbage [ 408.028403][ T51] cdc_wdm 4-1:1.0: skipping garbage [ 408.068222][ T51] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 408.115768][ T51] cdc_wdm 4-1:1.0: Unknown control protocol [ 408.809401][ T51] usb 4-1: USB disconnect, device number 46 [ 409.950600][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'. [ 410.224273][ C0] sched: DL replenish lagged too much [ 411.512492][T16517] netlink: 'syz.0.4953': attribute type 10 has an invalid length. [ 411.568330][T16517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.651944][T16517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.772585][T16517] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 412.443753][T16530] program syz.0.4958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.128505][T16566] bond0: option resend_igmp: invalid value (7540) [ 414.186793][T16566] bond0: option resend_igmp: allowed values 0 - 255 [ 414.516010][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4975'. [ 414.525379][ T29] audit: type=1400 audit(2000000292.100:598): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=16568 comm="syz.1.4973" name="591" dev="tmpfs" ino=2995 [ 414.820597][T16581] netlink: 'syz.1.4979': attribute type 64 has an invalid length. [ 414.844482][ T5304] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 414.885191][T16581] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 415.027436][ T5304] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 415.074191][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.215643][ T5304] usb 5-1: config 0 descriptor?? [ 415.259165][ T5304] cp210x 5-1:0.0: cp210x converter detected [ 415.729907][ T5304] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 415.809202][ T5304] usb 5-1: cp210x converter now attached to ttyUSB0 [ 416.004841][ T5304] usb 5-1: USB disconnect, device number 37 [ 416.051071][ T5304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 416.108504][ T5304] cp210x 5-1:0.0: device disconnected [ 416.417925][T16599] sit1: entered promiscuous mode [ 416.439218][T16599] sit1: entered allmulticast mode [ 416.664596][ T5304] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 416.726190][T16601] ɶƣ0GC¦!: entered promiscuous mode [ 416.915171][ T5304] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 416.962753][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.023597][ T5304] usb 4-1: config 0 descriptor?? [ 417.058775][ T5304] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 417.890255][ T5304] gspca_cpia1: usb_control_msg 02, error -71 [ 417.922303][ T5304] gspca_cpia1: usb_control_msg 05, error -71 [ 417.974141][ T5304] gspca_cpia1: usb_control_msg 04, error -71 [ 418.017095][ T5304] cpia1 4-1:0.0: probe with driver cpia1 failed with error -71 [ 418.107413][ T5304] usb 4-1: USB disconnect, device number 47 [ 418.244497][T16629] netlink: 'syz.1.5001': attribute type 1 has an invalid length. [ 419.346605][T16648] netlink: 'syz.1.5010': attribute type 28 has an invalid length. [ 420.668594][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5021'. [ 421.024105][T16679] sit1: entered promiscuous mode [ 421.050391][T16679] sit1: entered allmulticast mode [ 422.576321][T16699] netlink: 'syz.1.5032': attribute type 25 has an invalid length. [ 422.594519][T16699] netlink: 'syz.1.5032': attribute type 8 has an invalid length. [ 422.964958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 423.038660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 423.384638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 423.545020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 423.554492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 423.562782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 423.617229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 424.444622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 424.504630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 432.449717][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5045'. [ 432.784366][ T5345] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 432.820171][T16735] futex_wake_op: syz.3.5047 tries to shift op by -1; fix this program [ 432.974723][ T5345] usb 1-1: Using ep0 maxpacket: 32 [ 433.026109][ T5345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 433.134527][ T5345] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 433.167058][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.214800][ T5345] usb 1-1: Product: syz [ 433.345843][ T5345] usb 1-1: Manufacturer: syz [ 433.350536][ T5345] usb 1-1: SerialNumber: syz [ 433.364673][ T5345] usb 1-1: config 0 descriptor?? [ 433.612935][ T5345] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 433.649521][ T5345] usb 1-1: USB disconnect, device number 37 [ 434.672419][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5064'. [ 434.816610][T16773] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 434.860833][T16773] team0: Port device batadv2 added [ 434.951724][T16777] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 435.592087][T16786] netlink: 'syz.2.5070': attribute type 2 has an invalid length. [ 435.734532][ T5345] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 435.936268][ T5345] usb 1-1: Using ep0 maxpacket: 32 [ 435.943310][T16781] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 435.979899][ T5345] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 435.994469][T16781] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 436.082794][ T5345] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 436.132961][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.191522][ T5345] usb 1-1: Product: syz [ 436.236569][ T5345] usb 1-1: Manufacturer: syz [ 436.250051][T16781] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.272299][ T5345] usb 1-1: SerialNumber: syz [ 436.304445][T16781] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 436.325959][ T5345] usb 1-1: config 0 descriptor?? [ 436.381696][T16790] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 436.415790][ T5345] hub 1-1:0.0: bad descriptor, ignoring hub [ 436.421785][ T5345] hub 1-1:0.0: probe with driver hub failed with error -5 [ 436.506186][ T5345] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input67 [ 436.943374][ T5345] usb 1-1: USB disconnect, device number 38 [ 436.949365][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 437.183411][T16817] sctp: [Deprecated]: syz.3.5081 (pid 16817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.183411][T16817] Use struct sctp_sack_info instead [ 437.273166][T16819] netlink: 'syz.2.5082': attribute type 1 has an invalid length. [ 437.316452][T16819] netlink: 'syz.2.5082': attribute type 4 has an invalid length. [ 437.361335][T16819] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5082'. [ 438.136816][T16781] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 438.159693][T16836] xt_hashlimit: max too large, truncated to 1048576 [ 438.168014][T16781] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 438.574875][T16781] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 438.654763][T16781] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 439.241182][T16781] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 439.302107][T16781] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 439.780261][T16781] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 439.848086][T16781] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 440.225201][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.276095][T16781] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 440.354479][T16781] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 440.736650][T16888] netlink: 'syz.0.5107': attribute type 29 has an invalid length. [ 440.778481][T16889] netlink: 'syz.0.5107': attribute type 29 has an invalid length. [ 440.952213][T16891] netlink: 'syz.0.5107': attribute type 29 has an invalid length. [ 441.317362][T16899] program syz.1.5111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.444680][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5113'. [ 442.144762][T16922] gfs2: gfs2 mount does not exist [ 442.746456][ T5275] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 442.914989][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 442.923477][ T5275] usb 2-1: config 0 has no interfaces? [ 442.940267][ T5275] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 442.990948][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.040070][ T5275] usb 2-1: config 0 descriptor?? [ 443.146883][T16972] mkiss: ax0: crc mode is auto. [ 443.274667][T16941] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 443.295138][ T9] usb 2-1: USB disconnect, device number 35 [ 443.345081][ T937] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 443.528865][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 443.626759][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.637932][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.648162][ T937] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 443.657711][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.670210][ T937] usb 4-1: config 0 descriptor?? [ 443.798946][T17007] vlan0: entered promiscuous mode [ 443.808058][T17007] gretap0: entered promiscuous mode [ 444.002246][T17016] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 444.089274][ T937] logitech 0003:046D:CA03.003B: item fetching failed at offset 0/5 [ 444.098105][ T937] logitech 0003:046D:CA03.003B: parse failed [ 444.104190][ T937] logitech 0003:046D:CA03.003B: probe with driver logitech failed with error -22 [ 444.159101][ T29] audit: type=1400 audit(2000000321.760:599): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17026 comm="syz.4.5153" dest=20002 netif=wpan0 [ 444.309547][ T937] usb 4-1: USB disconnect, device number 48 [ 444.431268][T17039] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5158'. [ 444.542461][T17044] vxcan1: tx address claim with dlc 1 [ 444.820604][T17058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5165'. [ 445.035797][T17070] vivid-007: disconnect [ 445.062756][T17069] vivid-007: reconnect [ 445.076331][T17075] netlink: 'syz.3.5169': attribute type 1 has an invalid length. [ 445.121547][T17075] netlink: 'syz.3.5169': attribute type 2 has an invalid length. [ 445.647642][T17099] mkiss: ax0: crc mode is auto. [ 446.170862][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5187'. [ 446.196833][T17116] ieee802154 phy0 wpan0: encryption failed: -90 [ 446.204768][T17119] program syz.4.5188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.382906][T17125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5194'. [ 447.897295][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5222'. [ 448.097144][T17201] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5226'. [ 448.194665][ T5237] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 448.385883][ T5237] usb 3-1: Using ep0 maxpacket: 16 [ 448.393066][ T5237] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 448.407904][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.438003][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 101, changing to 10 [ 448.473236][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24675, setting to 1024 [ 448.521477][ T5237] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.557815][ T5237] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 448.579447][ T5237] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 448.606561][ T5237] usb 3-1: Manufacturer: syz [ 448.627095][ T5237] usb 3-1: config 0 descriptor?? [ 448.650978][ T5237] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 448.670618][ T5237] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 448.696108][ T5237] usbhid 3-1:0.0: can't add hid device: -22 [ 448.702180][ T5237] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 448.845126][ T5275] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 448.865771][ T5229] usb 3-1: USB disconnect, device number 32 [ 448.954969][T17235] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 448.968893][T17235] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.025127][ T5275] usb 1-1: Using ep0 maxpacket: 32 [ 449.034791][ T5275] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 449.064451][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.087248][ T5275] usb 1-1: Product: syz [ 449.101098][ T5275] usb 1-1: Manufacturer: syz [ 449.118812][ T5275] usb 1-1: SerialNumber: syz [ 449.141748][ T5275] usb 1-1: config 0 descriptor?? [ 449.160296][ T5275] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 449.568360][T17243] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5245'. [ 449.979637][ T5275] gspca_ov534_9: reg_w failed -71 [ 450.218035][T17265] ɶƣ0GC¦!: entered promiscuous mode [ 450.294495][ T5275] gspca_ov534_9: Unknown sensor 0000 [ 450.294583][ T5275] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 450.349599][ T5275] usb 1-1: USB disconnect, device number 39 [ 450.505801][T17277] netlink: 'syz.3.5259': attribute type 6 has an invalid length. [ 450.940896][T17293] netlink: 'syz.4.5267': attribute type 1 has an invalid length. [ 450.982577][T17293] netlink: 9380 bytes leftover after parsing attributes in process `syz.4.5267'. [ 451.248560][T17303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.294686][ T5275] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 451.448124][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.470192][ T5275] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 451.494941][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.731058][T17316] Invalid/unusable pipe [ 452.078064][ T5275] usb 1-1: config 0 descriptor?? [ 452.144417][ T937] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 452.214424][ T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 452.294447][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 452.301358][ T937] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.334573][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 452.364375][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 452.375151][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 452.388543][ T25] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 452.404260][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.415255][ T937] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 452.422893][ T25] usb 5-1: Product: syz [ 452.429119][ T25] usb 5-1: Manufacturer: syz [ 452.444325][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.452384][ T937] usb 4-1: Product: syz [ 452.456799][ T25] usb 5-1: SerialNumber: syz [ 452.465675][ T25] usb 5-1: config 0 descriptor?? [ 452.484013][ T25] option 5-1:0.0: GSM modem (1-port) converter detected [ 452.484353][ T937] usb 4-1: Manufacturer: syz [ 452.497709][ T5275] elecom 0003:056E:00E6.003C: unknown main item tag 0x0 [ 452.507398][ T5275] elecom 0003:056E:00E6.003C: unknown main item tag 0x0 [ 452.524291][ T5275] elecom 0003:056E:00E6.003C: unknown main item tag 0x1 [ 452.525345][ T937] usb 4-1: SerialNumber: syz [ 452.531559][ T5275] elecom 0003:056E:00E6.003C: unexpected long global item [ 452.555134][ T5275] elecom 0003:056E:00E6.003C: probe with driver elecom failed with error -22 [ 452.565314][ T937] usb 4-1: config 0 descriptor?? [ 452.697383][ T9] usb 5-1: USB disconnect, device number 38 [ 452.712043][ T5275] usb 1-1: USB disconnect, device number 40 [ 452.716095][ T9] option 5-1:0.0: device disconnected [ 452.775780][ T937] radio-si470x 4-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 452.976691][ T937] radio-si470x 4-1:0.0: software version 98, hardware version 86 [ 453.177396][ T937] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 453.187356][ T937] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 453.204857][ T937] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 453.224834][ T937] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 453.241463][T17332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.267197][ T937] usb 4-1: USB disconnect, device number 49 [ 453.968446][T17355] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5295'. [ 454.515763][T17375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.699991][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5310'. [ 456.061236][T17416] ipt_ECN: cannot use operation on non-tcp rule [ 456.796094][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5330'. [ 456.832067][T17430] geneve2: entered promiscuous mode [ 456.844696][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 457.028210][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 457.058312][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.102717][ T9] usb 1-1: config 0 descriptor?? [ 457.698277][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 458.100473][ T9] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 458.127549][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 458.180076][ T9] usb 1-1: USB disconnect, device number 41 [ 458.768689][ T5228] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 458.780080][ T5228] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 458.790366][ T5228] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 458.800616][ T5228] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 458.811904][ T5228] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 458.833613][ T5228] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 458.923565][ T5230] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 459.020801][ T5230] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 459.028645][ T5230] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 459.037512][ T5230] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 459.142383][ T5230] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 459.150280][ T5230] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 459.793796][T17495] netlink: 'syz.0.5355': attribute type 6 has an invalid length. [ 459.844611][T17495] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5355'. [ 460.494934][T17511] Falling back ldisc for ttyS3. [ 460.865503][T17470] chnl_net:caif_netlink_parms(): no params data found [ 461.229971][ T5230] Bluetooth: hci9: command tx timeout [ 461.832637][T17470] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.869455][T17470] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.912076][T17470] bridge_slave_0: entered allmulticast mode [ 461.922848][T17545] netlink: 'syz.2.5376': attribute type 3 has an invalid length. [ 461.952970][T17470] bridge_slave_0: entered promiscuous mode [ 461.963749][T17545] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5376'. [ 462.016957][T17470] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.064397][T17470] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.071745][T17470] bridge_slave_1: entered allmulticast mode [ 462.095601][T17470] bridge_slave_1: entered promiscuous mode [ 462.314014][T17470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.398120][T17470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.888119][ T5304] IPVS: starting estimator thread 0... [ 462.901350][T17564] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 462.941981][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5382'. [ 463.034415][T17565] IPVS: using max 15 ests per chain, 36000 per kthread [ 463.098133][T17470] team0: Port device team_slave_0 added [ 463.167726][T17470] team0: Port device team_slave_1 added [ 463.305494][ T5230] Bluetooth: hci9: command tx timeout [ 463.395783][T17470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.434381][T17470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.581363][T17470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.673632][T17470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.717173][T17470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.887226][T17470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.175693][T17470] hsr_slave_0: entered promiscuous mode [ 464.265324][T17470] hsr_slave_1: entered promiscuous mode [ 464.314539][T17470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.322199][T17470] Cannot create hsr debugfs directory [ 465.387537][ T5230] Bluetooth: hci9: command tx timeout [ 465.536253][ T29] audit: type=1326 audit(2000000343.140:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17598 comm="syz.4.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 465.686531][ T29] audit: type=1326 audit(2000000343.170:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17598 comm="syz.4.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 465.838864][ T29] audit: type=1326 audit(2000000343.170:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17598 comm="syz.4.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 466.022368][T17609] netlink: 'syz.2.5404': attribute type 42 has an invalid length. [ 466.061067][T17470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.413390][T17618] netlink: 'syz.4.5408': attribute type 12 has an invalid length. [ 466.421670][T17618] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.5408'. [ 466.440293][T17470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.530411][T17622] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5410'. [ 466.568109][T17622] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 466.639272][T17470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.726500][T17625] netlink: 'syz.4.5412': attribute type 1 has an invalid length. [ 466.749082][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5412'. [ 466.750353][T17626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.791578][T17628] netlink: 'syz.0.5413': attribute type 32 has an invalid length. [ 466.821810][T17628] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5413'. [ 466.836693][T17470] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.855679][T17628] unsupported nla_type 8192 [ 467.177508][T17470] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 467.398323][T17470] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 467.440090][T17470] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 467.464799][ T5230] Bluetooth: hci9: command tx timeout [ 467.525927][T17470] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.728716][T17470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.781805][T17470] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.790387][ T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 467.834394][ T3052] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.841539][ T3052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.884536][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.891690][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.915619][T17654] tun0: tun_chr_ioctl cmd 2147767517 [ 467.956098][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 467.989752][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.019734][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.050978][ T25] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 468.075376][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.167280][ T25] usb 1-1: config 0 descriptor?? [ 468.626381][ T25] glorious 0003:258A:0033.003D: item fetching failed at offset 2/3 [ 468.646440][ T25] glorious 0003:258A:0033.003D: probe with driver glorious failed with error -22 [ 468.849147][ T25] usb 1-1: USB disconnect, device number 42 [ 469.297300][T17470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.507930][T17470] veth0_vlan: entered promiscuous mode [ 469.596621][T17470] veth1_vlan: entered promiscuous mode [ 469.746727][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5437'. [ 469.789050][T17470] veth0_macvtap: entered promiscuous mode [ 469.863612][T17470] veth1_macvtap: entered promiscuous mode [ 469.976558][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.085012][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.124348][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.154737][T17686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5438'. [ 470.196783][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.208895][T17686] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5438'. [ 470.254648][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.343269][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.407091][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.469635][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.532367][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.555581][T17692] netlink: 'syz.4.5440': attribute type 1 has an invalid length. [ 470.563374][T17692] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.5440'. [ 470.612139][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.653648][T17692] netlink: 'syz.4.5440': attribute type 2 has an invalid length. [ 470.692907][T17470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.712970][T17692] netlink: 'syz.4.5440': attribute type 1 has an invalid length. [ 470.772989][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.826564][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.890582][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.967910][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.025813][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.097992][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.160332][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.216549][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.280659][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.335716][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.393154][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.404710][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 471.434856][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.474343][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.504595][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.522090][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.543432][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.567164][T17470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.584391][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 471.591302][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.601705][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 471.612037][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.622455][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.660919][T17470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.664306][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.680357][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.709584][T17470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.729343][T17470] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.764580][T17470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.902983][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 471.915089][ T25] usbtmc 4-1:16.0: can't read capabilities [ 472.099673][ T3052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.142699][ T3052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.177839][ T5229] usb 4-1: USB disconnect, device number 50 [ 472.276096][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.305261][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.503036][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5453'. [ 472.525104][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5453'. [ 472.549308][T17724] vlan2: entered allmulticast mode [ 472.564976][T17724] bridge0: entered allmulticast mode [ 472.595130][T17727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5343'. [ 472.665604][T17727] veth1_macvtap: left promiscuous mode [ 472.711477][T17727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5343'. [ 473.074458][ T5229] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 473.128439][T17741] input: syz1 as /devices/virtual/input/input70 [ 473.255402][ T5229] usb 4-1: Using ep0 maxpacket: 8 [ 473.265165][ T5229] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 473.284483][ T5229] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 473.299105][ T5229] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 473.309087][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.318107][ T5229] usb 4-1: Product: syz [ 473.322632][ T5229] usb 4-1: Manufacturer: syz [ 473.328081][ T5229] usb 4-1: SerialNumber: syz [ 473.340729][ T5229] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 473.353747][ T5229] dvb-usb: bulk message failed: -22 (3/0) [ 473.392682][ T5229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.403058][ T5229] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 473.416287][ T5229] usb 4-1: media controller created [ 473.461931][ T5229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.499535][ T5229] dvb-usb: bulk message failed: -22 (6/0) [ 473.510233][ T5229] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 473.545951][ T5229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input71 [ 473.569276][ T5229] dvb-usb: schedule remote query interval to 150 msecs. [ 473.585710][ T5229] dvb-usb: bulk message failed: -22 (3/0) [ 473.626393][ T5229] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 473.749397][ T5229] dvb-usb: bulk message failed: -22 (1/0) [ 473.769119][ T5229] dvb-usb: error while querying for an remote control event. [ 473.867961][ T9] usb 4-1: USB disconnect, device number 51 [ 473.938355][ T9] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 474.215497][T17769] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5472'. [ 474.724512][ T5229] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 474.874698][ T5229] usb 4-1: Using ep0 maxpacket: 8 [ 474.883026][ T5229] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 474.901227][ T5229] usb 4-1: config 150 has no interface number 0 [ 474.920188][ T5229] usb 4-1: config 150 interface 204 has no altsetting 0 [ 474.947190][ T5229] usb 4-1: config 150 interface 1 has no altsetting 0 [ 474.969138][ T5229] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 474.985997][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.009537][ T5229] usb 4-1: Product: syz [ 475.021649][ T5229] usb 4-1: Manufacturer: syz [ 475.040312][ T5229] usb 4-1: SerialNumber: syz [ 475.181511][T17801] netlink: 'syz.0.5488': attribute type 29 has an invalid length. [ 475.202554][T17801] netlink: 'syz.0.5488': attribute type 29 has an invalid length. [ 475.224600][T17801] netlink: 'syz.0.5488': attribute type 29 has an invalid length. [ 475.270562][ T5229] xr_serial 4-1:150.204: xr_serial converter detected [ 475.584621][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 475.734427][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 475.741349][ T9] usb 5-1: config 0 has no interfaces? [ 475.750339][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.774675][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.804701][ T9] usb 5-1: Product: syz [ 475.814419][ T9] usb 5-1: Manufacturer: syz [ 475.819075][ T9] usb 5-1: SerialNumber: syz [ 475.853534][ T9] usb 5-1: config 0 descriptor?? [ 475.887262][ T5229] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 475.893842][ T5229] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 475.919735][ T5229] usb 4-1: USB disconnect, device number 52 [ 475.936080][ T5229] xr_serial 4-1:150.204: device disconnected [ 475.974423][ T5345] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 476.081560][ T5304] usb 5-1: USB disconnect, device number 39 [ 476.127953][ T5345] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 476.160663][ T5345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.195632][ T5345] usb 1-1: config 0 descriptor?? [ 476.203479][ T5345] cp210x 1-1:0.0: cp210x converter detected [ 476.635869][ T5345] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 476.687369][ T5345] usb 1-1: cp210x converter now attached to ttyUSB0 [ 476.941624][T17847] Falling back ldisc for ttyS3. [ 477.012555][ T5229] usb 1-1: USB disconnect, device number 43 [ 477.064809][ T5229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 477.184426][ T5229] cp210x 1-1:0.0: device disconnected [ 477.856457][ T25] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 477.923973][T17872] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5521'. [ 477.942048][T17872] netem: invalid attributes len -24 [ 478.048173][ T25] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 478.058141][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.068316][ T25] usb 1-1: config 0 descriptor?? [ 478.075501][ T25] cp210x 1-1:0.0: cp210x converter detected [ 478.466332][ T29] audit: type=1326 audit(2000000356.070:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17887 comm="syz.4.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 478.500295][ T25] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 478.535150][ T29] audit: type=1326 audit(2000000356.090:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17887 comm="syz.4.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 478.535730][ T25] usb 1-1: cp210x converter now attached to ttyUSB0 [ 478.604546][T17892] syz.2.5531: attempt to access beyond end of device [ 478.604546][T17892] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 478.612490][ T29] audit: type=1326 audit(2000000356.090:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17887 comm="syz.4.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 478.657851][T17895] /dev/nbd2: Can't open blockdev [ 478.661012][ T29] audit: type=1326 audit(2000000356.090:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17887 comm="syz.4.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 478.685456][ T29] audit: type=1326 audit(2000000356.090:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17887 comm="syz.4.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 478.707202][ T29] audit: type=1326 audit(2000000356.100:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17887 comm="syz.4.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 478.729077][ T29] audit: type=1326 audit(2000000356.100:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17887 comm="syz.4.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 478.751052][ T29] audit: type=1326 audit(2000000356.100:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17887 comm="syz.4.5529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331937df39 code=0x7ffc0000 [ 478.791567][ T25] usb 1-1: USB disconnect, device number 44 [ 478.800866][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 478.814542][T17892] hfsplus: unable to find HFS+ superblock [ 478.860558][T17898] tap0: tun_chr_ioctl cmd 1074025677 [ 478.875594][T17898] tap0: linktype set to 8 [ 478.919642][ T25] cp210x 1-1:0.0: device disconnected [ 478.925456][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5532'. [ 479.121240][T17907] vlan4: entered allmulticast mode [ 479.128571][T17907] bridge_slave_0: entered allmulticast mode [ 479.174863][T17907] bridge_slave_0: left allmulticast mode [ 479.882418][T17931] netlink: 201400 bytes leftover after parsing attributes in process `syz.4.5549'. [ 480.260192][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5555'. [ 480.279825][ T29] audit: type=1326 audit(2000000357.880:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.3.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 480.325336][ T29] audit: type=1326 audit(2000000357.880:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.3.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870d97df39 code=0x7ffc0000 [ 480.684474][ T5237] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 480.862138][ T5237] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 480.887808][ T5237] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 480.924039][ T5237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.934599][ T5345] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 480.971371][ T5237] usb 1-1: config 0 descriptor?? [ 480.998770][ T5237] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 481.126460][ T5345] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.137257][ T5345] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 481.148888][ T5345] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 481.184702][ T5345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.211099][ T5237] usb 1-1: USB disconnect, device number 45 [ 481.211874][ T5345] usb 4-1: config 0 descriptor?? [ 481.238503][ T5345] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 481.254426][ T5345] dvb-usb: bulk message failed: -22 (3/0) [ 481.267431][ T5345] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 481.307129][ T5345] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 481.325641][ T5345] usb 4-1: media controller created [ 481.345744][ T5345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.378757][ T5345] dvb-usb: bulk message failed: -22 (6/0) [ 481.394758][ T5345] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 481.433868][ T5345] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72 [ 481.481788][ T5345] dvb-usb: schedule remote query interval to 150 msecs. [ 481.494481][ T5345] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 481.514762][ T5345] usb 4-1: USB disconnect, device number 53 [ 481.546488][T17996] bpf: Bad value for 'gid' [ 481.573430][ T5345] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 481.893160][T18002] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.5578'. [ 481.923543][T18002] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 482.284408][ T5304] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 482.331431][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5583'. [ 482.446249][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.463101][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.493470][ T5304] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 482.513754][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.535387][ T5304] usb 1-1: config 0 descriptor?? [ 482.761521][T18013] tap0: tun_chr_ioctl cmd 2148553947 [ 483.026173][ T5304] arvo 0003:1E7D:30D4.003E: unbalanced collection at end of report description [ 483.036073][ T5304] arvo 0003:1E7D:30D4.003E: parse failed [ 483.042142][ T5304] arvo 0003:1E7D:30D4.003E: probe with driver arvo failed with error -22 [ 483.236905][ T5304] usb 1-1: USB disconnect, device number 46 [ 483.594324][ T5345] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 483.694413][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 483.747897][ T5345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.759389][ T5345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.810785][ T5345] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 483.835974][ T5345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.865358][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 483.871721][ T5345] usb 5-1: config 0 descriptor?? [ 483.883952][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.896577][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.908995][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 483.918724][ T9] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 483.933044][ T9] usb 4-1: Product: syz [ 483.937567][ T9] usb 4-1: Manufacturer: syz [ 483.946034][ T9] usb 4-1: config 0 descriptor?? [ 484.298560][ T5345] logitech 0003:046D:C294.003F: unbalanced collection at end of report description [ 484.321017][ T5345] logitech 0003:046D:C294.003F: parse failed [ 484.330601][ T5345] logitech 0003:046D:C294.003F: probe with driver logitech failed with error -22 [ 484.365486][ T9] kovaplus 0003:1E7D:2D50.0040: unknown main item tag 0x0 [ 484.372939][ T9] kovaplus 0003:1E7D:2D50.0040: unknown main item tag 0x0 [ 484.382489][ T9] kovaplus 0003:1E7D:2D50.0040: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 484.416207][T18064] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5606'. [ 484.474922][T18064] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 484.534513][ T5345] usb 5-1: USB disconnect, device number 40 [ 484.566642][ T9] kovaplus 0003:1E7D:2D50.0040: couldn't init struct kovaplus_device [ 484.585528][ T9] kovaplus 0003:1E7D:2D50.0040: couldn't install mouse [ 484.613966][ T9] kovaplus 0003:1E7D:2D50.0040: probe with driver kovaplus failed with error -71 [ 484.636659][ T9] usb 4-1: USB disconnect, device number 54 [ 485.286154][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5616'. [ 485.314762][T18085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5616'. [ 485.342655][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.364035][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.385639][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.404976][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.428804][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.451669][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.469489][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.483950][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.494222][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.506590][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.516900][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.529059][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.540098][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.551315][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.562773][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.590372][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.604611][T18085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.615388][T18085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.657344][T18093] program syz.1.5621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.826079][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 485.826099][ T29] audit: type=1326 audit(2000000363.430:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 485.930593][ T29] audit: type=1326 audit(2000000363.430:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 485.989124][ T29] audit: type=1326 audit(2000000363.460:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 486.070695][ T29] audit: type=1326 audit(2000000363.460:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 486.112022][ T29] audit: type=1326 audit(2000000363.460:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 486.134797][ T29] audit: type=1326 audit(2000000363.460:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 486.156948][ T29] audit: type=1326 audit(2000000363.460:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cf7df39 code=0x7ffc0000 [ 486.179048][ T29] audit: type=1326 audit(2000000363.460:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd73cf74ee7 code=0x7ffc0000 [ 486.201443][ T29] audit: type=1326 audit(2000000363.460:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd73cf198a9 code=0x7ffc0000 [ 486.223692][ T29] audit: type=1326 audit(2000000363.460:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18098 comm="syz.0.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd73cf74ee7 code=0x7ffc0000 [ 487.014902][T18145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5643'. [ 487.052087][T18145] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5643'. [ 487.068324][T18145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5643'. [ 488.395360][ T5229] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 488.586805][ T5229] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 488.606796][ T5229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 488.632937][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.673713][ T5229] usb 1-1: Product: syz [ 488.694382][ T5229] usb 1-1: Manufacturer: syz [ 488.699052][ T5229] usb 1-1: SerialNumber: syz [ 488.751864][T18189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 489.039433][ T5229] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 489.051046][ T5229] usb 1-1: USB disconnect, device number 47 [ 489.544543][ T5229] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 489.704396][ T5229] usb 1-1: Using ep0 maxpacket: 8 [ 489.711523][ T5229] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 489.733072][ T5229] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.751721][ T5229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 489.768943][ T5229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 489.794396][ T5229] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.817113][ T5229] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 489.844266][ T5229] usb 1-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.883556][ T5229] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 489.899132][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.922556][T18189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.148939][ T5229] usb 1-1: usb_control_msg returned -32 [ 490.172394][ T5229] usbtmc 1-1:16.0: can't read capabilities [ 490.203163][ T5229] usb 1-1: USB disconnect, device number 48 [ 490.683953][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5688'. [ 490.731374][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5688'. [ 490.855318][T18249] netlink: 'syz.1.5689': attribute type 11 has an invalid length. [ 491.312663][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5698'. [ 491.454490][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 491.614461][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 491.623359][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 491.656685][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.707575][ T9] usb 5-1: Product: syz [ 491.711812][ T9] usb 5-1: Manufacturer: syz [ 491.740706][ T9] usb 5-1: SerialNumber: syz [ 491.795842][ T9] usb 5-1: config 0 descriptor?? [ 491.861960][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 492.369456][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5704'. [ 492.857210][ T9] gspca_sq930x: ucbus_write failed -71 [ 492.953309][T18319] netlink: 'syz.0.5720': attribute type 1 has an invalid length. [ 492.985314][T18319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5720'. [ 493.074410][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 493.081030][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 493.122087][ T9] usb 5-1: USB disconnect, device number 41 [ 493.294901][T18332] program syz.2.5726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.705184][ T5229] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 493.864497][ T5229] usb 3-1: Using ep0 maxpacket: 32 [ 493.876227][ T5229] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 493.899283][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.935790][ T5229] usb 3-1: config 0 descriptor?? [ 493.956478][ T5229] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 494.396800][ T5229] gspca_nw80x: reg_r err -71 [ 494.401565][ T5229] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 494.446686][ T5229] usb 3-1: USB disconnect, device number 33 [ 494.843934][ T5237] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 495.123564][ T5237] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.134699][ T5237] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.155148][ T5237] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 495.164422][ T5237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 495.182743][ T5237] usb 4-1: SerialNumber: syz [ 495.407844][ T5237] usb 4-1: 0:2 : does not exist [ 495.474495][ T5237] usb 4-1: USB disconnect, device number 55 [ 496.166756][T18405] netlink: 'syz.3.5758': attribute type 10 has an invalid length. [ 496.194308][T18405] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 496.217293][T18405] team0: Port device netdevsim0 added [ 496.250242][T18405] netlink: 'syz.3.5758': attribute type 10 has an invalid length. [ 496.350717][T18405] team0: Port device netdevsim0 removed [ 496.373721][T18405] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 496.405026][T18405] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 496.507483][ T30] INFO: task syz.2.4043:14471 blocked for more than 143 seconds. [ 496.524364][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 496.535895][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.578755][ T30] task:syz.2.4043 state:D stack:27344 pid:14471 tgid:14470 ppid:11472 flags:0x00004004 [ 496.620766][ T30] Call Trace: [ 496.632322][ T30] [ 496.651187][ T30] __schedule+0x1843/0x4ae0 [ 496.673752][ T30] ? __pfx___schedule+0x10/0x10 [ 496.695588][ T30] ? __pfx_lock_release+0x10/0x10 [ 496.715139][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 496.735140][ T30] ? schedule+0x90/0x320 [ 496.754219][ T30] schedule+0x14b/0x320 [ 496.763068][ T30] schedule_preempt_disabled+0x13/0x30 [ 496.778156][ T30] __mutex_lock+0x6a7/0xd70 [ 496.785650][ T30] ? __mutex_lock+0x52a/0xd70 [ 496.790490][ T30] ? nfsd_shutdown_threads+0x4e/0xd0 [ 496.797201][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 496.802407][ T30] ? net_generic+0x1f/0x240 [ 496.816675][ T30] nfsd_shutdown_threads+0x4e/0xd0 [ 496.827331][ T30] nfsd_umount+0x43/0xd0 [ 496.833962][ T30] deactivate_locked_super+0xc4/0x130 [ 496.844260][ T30] put_fs_context+0x94/0x780 [ 496.855079][ T30] fscontext_release+0x62/0x80 [ 496.864857][ T30] ? __pfx_fscontext_release+0x10/0x10 [ 496.879311][ T30] __fput+0x23f/0x880 [ 496.888406][ T30] task_work_run+0x24f/0x310 [ 496.913972][ T30] ? __pfx_task_work_run+0x10/0x10 [ 496.944377][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 496.950271][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 496.971142][ T30] do_syscall_64+0x100/0x230 [ 497.004292][ T30] ? clear_bhb_loop+0x35/0x90 [ 497.009077][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.026308][ T30] RIP: 0033:0x7f958577df39 [ 497.030827][ T30] RSP: 002b:00007f95865a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 497.064577][ T30] RAX: 0000000000000000 RBX: 00007f9585935f80 RCX: 00007f958577df39 [ 497.072655][ T30] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 497.094290][ T30] RBP: 00007f95857f0216 R08: 0000000000000000 R09: 0000000000000000 [ 497.102353][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.124345][ T30] R13: 0000000000000000 R14: 00007f9585935f80 R15: 00007ffee6ae8498 [ 497.132428][ T30] [ 497.154601][ T30] [ 497.154601][ T30] Showing all locks held in the system: [ 497.162405][ T30] 3 locks held by kworker/u8:0/11: [ 497.174300][ T30] 1 lock held by khungtaskd/30: [ 497.179518][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 497.204278][ T30] 2 locks held by kworker/u8:3/52: [ 497.216790][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 497.247349][ T30] #1: ffffc90000bd7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 497.274405][ T30] 2 locks held by kworker/u8:10/2593: [ 497.280109][ T30] 2 locks held by getty/4975: [ 497.294036][ T30] #0: ffff88802eb0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 497.306962][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 497.324362][ T30] 3 locks held by kworker/0:4/5345: [ 497.329729][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 497.348995][ T30] #1: ffffc90004127d00 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 497.360043][ T30] #2: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 497.381108][ T30] 2 locks held by syz.1.2120/10100: [ 497.387124][ T30] #0: ffffffff8fd25170 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 497.395532][ T30] #1: ffffffff8ec19448 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 497.405934][ T30] 2 locks held by syz.2.4043/14471: [ 497.411185][ T30] #0: ffff888031f5a0e0 (&type->s_umount_key#90){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 497.429639][ T30] #1: ffffffff8ec19448 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 497.439462][ T30] 1 lock held by syz.4.4451/15387: [ 497.444731][ T30] #0: ffff888031f5a0e0 (&type->s_umount_key#90){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 497.466082][ T30] [ 497.468658][ T30] ============================================= [ 497.468658][ T30] [ 497.481496][ T30] NMI backtrace for cpu 0 [ 497.486018][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 497.496573][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 497.506679][ T30] Call Trace: [ 497.510081][ T30] [ 497.513040][ T30] dump_stack_lvl+0x241/0x360 [ 497.517774][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.523017][ T30] ? __pfx__printk+0x10/0x10 [ 497.527667][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 497.532663][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 497.538173][ T30] ? _printk+0xd5/0x120 [ 497.542355][ T30] ? __pfx__printk+0x10/0x10 [ 497.546972][ T30] ? __wake_up_klogd+0xcc/0x110 [ 497.551845][ T30] ? __pfx__printk+0x10/0x10 [ 497.556454][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 497.561543][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 497.567549][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 497.573562][ T30] watchdog+0xff4/0x1040 [ 497.577835][ T30] ? watchdog+0x1ea/0x1040 [ 497.582309][ T30] ? __pfx_watchdog+0x10/0x10 [ 497.587023][ T30] kthread+0x2f0/0x390 [ 497.591117][ T30] ? __pfx_watchdog+0x10/0x10 [ 497.595817][ T30] ? __pfx_kthread+0x10/0x10 [ 497.600426][ T30] ret_from_fork+0x4b/0x80 [ 497.604913][ T30] ? __pfx_kthread+0x10/0x10 [ 497.609515][ T30] ret_from_fork_asm+0x1a/0x30 [ 497.614316][ T30] [ 497.618204][ T30] Sending NMI from CPU 0 to CPUs 1: [ 497.623840][ C1] NMI backtrace for cpu 1 [ 497.623856][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 497.623877][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 497.623890][ C1] Workqueue: bat_events batadv_nc_worker [ 497.623914][ C1] RIP: 0010:__lock_acquire+0x9a1/0x2050 [ 497.623945][ C1] Code: 85 a8 00 00 00 80 3b 02 74 31 49 ff c6 48 8b 44 24 38 0f b6 04 10 84 c0 75 6b 48 8b 44 24 48 48 63 00 49 83 c7 28 49 83 c5 28 <41> ff c4 49 39 c6 0f 8c a3 fe ff ff e9 14 01 00 00 89 e8 89 44 24 [ 497.623961][ C1] RSP: 0018:ffffc900001078f0 EFLAGS: 00000096 [ 497.623976][ C1] RAX: 0000000000000002 RBX: ffffffff93c527b0 RCX: ffffffff81702430 [ 497.623990][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff94235898 [ 497.624003][ C1] RBP: 0000000000000000 R08: ffffffff9423589f R09: 1ffffffff2846b13 [ 497.624016][ C1] R10: dffffc0000000000 R11: fffffbfff2846b14 R12: 0000000000000001 [ 497.624029][ C1] R13: ffff88801bee4750 R14: 0000000000000002 R15: ffff88801bee4750 [ 497.624043][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 497.624058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.624071][ C1] CR2: 00007fff315d7fe8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 497.624088][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 497.624099][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 497.624112][ C1] Call Trace: [ 497.624118][ C1] [ 497.624126][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 497.624153][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 497.624184][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 497.624221][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 497.624248][ C1] ? nmi_handle+0x14f/0x5a0 [ 497.624267][ C1] ? nmi_handle+0x2a/0x5a0 [ 497.624286][ C1] ? __lock_acquire+0x9a1/0x2050 [ 497.624313][ C1] ? default_do_nmi+0x63/0x160 [ 497.624343][ C1] ? exc_nmi+0x123/0x1f0 [ 497.624372][ C1] ? end_repeat_nmi+0xf/0x53 [ 497.624399][ C1] ? __lock_acquire+0x890/0x2050 [ 497.624428][ C1] ? __lock_acquire+0x9a1/0x2050 [ 497.624457][ C1] ? __lock_acquire+0x9a1/0x2050 [ 497.624487][ C1] ? __lock_acquire+0x9a1/0x2050 [ 497.624518][ C1] [ 497.624525][ C1] [ 497.624541][ C1] lock_acquire+0x1ed/0x550 [ 497.624570][ C1] ? batadv_nc_worker+0xcb/0x610 [ 497.624594][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 497.624630][ C1] ? batadv_nc_worker+0xcb/0x610 [ 497.624648][ C1] ? __pfx_lock_release+0x10/0x10 [ 497.624676][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 497.624706][ C1] batadv_nc_worker+0xec/0x610 [ 497.624724][ C1] ? batadv_nc_worker+0xcb/0x610 [ 497.624741][ C1] ? batadv_nc_worker+0xcb/0x610 [ 497.624759][ C1] ? process_scheduled_works+0x976/0x1850 [ 497.624784][ C1] process_scheduled_works+0xa63/0x1850 [ 497.624819][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.624847][ C1] ? assign_work+0x364/0x3d0 [ 497.624872][ C1] worker_thread+0x870/0xd30 [ 497.624902][ C1] ? __kthread_parkme+0x169/0x1d0 [ 497.624929][ C1] ? __pfx_worker_thread+0x10/0x10 [ 497.624953][ C1] kthread+0x2f0/0x390 [ 497.624969][ C1] ? __pfx_worker_thread+0x10/0x10 [ 497.624993][ C1] ? __pfx_kthread+0x10/0x10 [ 497.625009][ C1] ret_from_fork+0x4b/0x80 [ 497.625034][ C1] ? __pfx_kthread+0x10/0x10 [ 497.625050][ C1] ret_from_fork_asm+0x1a/0x30 [ 497.625082][ C1] [ 497.664413][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 497.664435][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 497.664463][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 497.664479][ T30] Call Trace: [ 497.664488][ T30] [ 497.664499][ T30] dump_stack_lvl+0x241/0x360 [ 497.664539][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.664572][ T30] ? __pfx__printk+0x10/0x10 [ 497.664597][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 497.664641][ T30] ? vscnprintf+0x5d/0x90 [ 497.664679][ T30] panic+0x349/0x880 [ 497.664709][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 497.664747][ T30] ? __pfx_panic+0x10/0x10 [ 497.664773][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 497.664799][ T30] ? __irq_work_queue_local+0x137/0x410 [ 497.664832][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 497.664858][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 497.664893][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 497.664932][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 497.664971][ T30] watchdog+0x1033/0x1040 [ 497.665004][ T30] ? watchdog+0x1ea/0x1040 [ 497.665042][ T30] ? __pfx_watchdog+0x10/0x10 [ 497.665073][ T30] kthread+0x2f0/0x390 [ 497.665095][ T30] ? __pfx_watchdog+0x10/0x10 [ 497.665125][ T30] ? __pfx_kthread+0x10/0x10 [ 497.665149][ T30] ret_from_fork+0x4b/0x80 [ 497.665182][ T30] ? __pfx_kthread+0x10/0x10 [ 497.665205][ T30] ret_from_fork_asm+0x1a/0x30 [ 497.665251][ T30] [ 498.109121][ T30] Kernel Offset: disabled [ 498.113500][ T30] Rebooting in 86400 seconds..