last executing test programs: 3m24.456599593s ago: executing program 4 (id=2554): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3m24.207023635s ago: executing program 4 (id=2557): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) bind$tipc(r0, 0x0, 0x0) 3m23.918148729s ago: executing program 4 (id=2560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)=""/2, &(0x7f0000000240)=0x2) 3m23.632505458s ago: executing program 4 (id=2564): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fa40", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 3m23.28612985s ago: executing program 4 (id=2571): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m23.03354351s ago: executing program 4 (id=2576): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(r0, 0x8903, 0x1000000000000) 3m7.818789627s ago: executing program 32 (id=2576): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(r0, 0x8903, 0x1000000000000) 1m46.916318093s ago: executing program 1 (id=3548): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1m46.60148688s ago: executing program 1 (id=3552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) 1m46.383179826s ago: executing program 1 (id=3555): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5f9c808e90f98db0c300102030109021200010c0000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x3) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x63, 0x0, 0x0, 0x0}, {0x6e4, 0x1, 0x0, 0x0}], 0x2}) 1m45.01324365s ago: executing program 1 (id=3564): r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) 1m44.785275314s ago: executing program 1 (id=3566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c40)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'R'}]}], {0x14}}, 0x70}}, 0x0) 1m44.573118794s ago: executing program 1 (id=3567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000100)=[{0x0, 0xe00}, {&(0x7f0000000580)="051a00000e80006558f2878f020000000000", 0x12}], 0x2) 1m41.738928303s ago: executing program 5 (id=3575): r0 = open(&(0x7f0000000380)='./file0\x00', 0xc040, 0x1) truncate(&(0x7f0000003bc0)='./file0\x00', 0x8) read$FUSE(r0, &(0x7f0000003d00)={0x2020}, 0x2020) 1m41.498891318s ago: executing program 5 (id=3576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x60, r1, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x2}, 0x0) 1m41.242011156s ago: executing program 5 (id=3579): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd77188", 0x6}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x6) 1m41.051350829s ago: executing program 5 (id=3580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) 1m29.784495885s ago: executing program 5 (id=3588): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f00000003c0)={0x0, 0x3b, 0x5, {0x5, 0xd, "4d8188"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m29.26189889s ago: executing program 33 (id=3567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000100)=[{0x0, 0xe00}, {&(0x7f0000000580)="051a00000e80006558f2878f020000000000", 0x12}], 0x2) 1m27.452287009s ago: executing program 5 (id=3597): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe9) 1m22.576454165s ago: executing program 2 (id=3606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffcd, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1m13.820788544s ago: executing program 2 (id=3608): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m13.439725787s ago: executing program 2 (id=3609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xfccf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1m13.049363138s ago: executing program 2 (id=3612): r0 = io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 1m12.825676453s ago: executing program 2 (id=3613): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x0, 0x3e, 0x0, 0x1}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x21, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x8c}}, 0x0) 1m12.09007974s ago: executing program 34 (id=3597): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe9) 1m11.732418471s ago: executing program 2 (id=3615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030007000000080002400000000708000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m2.493405963s ago: executing program 3 (id=3619): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x3, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0xf9f6}}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4044) 56.63077752s ago: executing program 35 (id=3615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030007000000080002400000000708000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 56.237589268s ago: executing program 3 (id=3622): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x67) connect$x25(r0, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) 55.926086647s ago: executing program 3 (id=3623): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619) 49.348734419s ago: executing program 3 (id=3625): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newroute={0x28, 0x1a, 0x1, 0xfffffffc, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x4d6, 0x4, 0x5c}}]}, 0x28}}, 0x0) 48.577413116s ago: executing program 3 (id=3626): r0 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000010c0)=[0x0], 0x0, r1, 0x0, '\x00', 0x1}) 48.183050316s ago: executing program 3 (id=3627): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @loopback, 0xb6}, 0x1c) 35.677141883s ago: executing program 0 (id=3632): socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0xee01, 0xffffffffffffffff) setfsuid(0x0) 35.55542232s ago: executing program 0 (id=3633): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) 35.396111896s ago: executing program 0 (id=3635): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2d, 0x0, 0x0, 0x1}, {0x6, 0x2, 0x4, 0xd060}]}, 0x10) 32.587106807s ago: executing program 36 (id=3627): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @loopback, 0xb6}, 0x1c) 32.198591557s ago: executing program 0 (id=3637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 29.585176702s ago: executing program 0 (id=3638): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0xb, 0x1, {0x0, 0x1}, {0x64, 0x2}, @const={0x5, {0x56, 0x5, 0xfff, 0x9}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 15.419855214s ago: executing program 0 (id=3639): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 0s ago: executing program 37 (id=3639): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) kernel console output (not intermixed with test programs): the interface descriptor's value: 21 [ 293.820477][ T7262] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.820505][ T7262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.832687][ T7262] usb 5-1: config 0 descriptor?? [ 294.073764][ T31] usb 4-1: USB disconnect, device number 25 [ 294.444853][ T9977] fido_id[9977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 294.480974][ T7262] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 294.528975][ T7262] usb 5-1: USB disconnect, device number 23 [ 294.876110][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 295.141694][ T9996] fido_id[9996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 295.308486][T10004] tmpfs: Cannot change global quota limit on remount [ 295.380012][T10008] comedi: No check for data length of config insn id 3 is implemented [ 295.380030][T10008] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 295.380043][T10008] comedi: Assuming n=15 is correct [ 295.740240][T10021] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 295.740270][T10021] CIFS mount error: No usable UNC path provided in device string! [ 295.740270][T10021] [ 295.740500][T10021] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 296.546629][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1864'. [ 296.547187][T10036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1864'. [ 296.675000][T10039] sp0: Synchronizing with TNC [ 298.322526][T10093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1892'. [ 298.946654][T10112] sctp: [Deprecated]: syz.2.1901 (pid 10112) Use of int in maxseg socket option. [ 298.946654][T10112] Use struct sctp_assoc_value instead [ 299.702202][ T38] audit: type=1326 audit(1756853849.601:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10132 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 299.734543][ T38] audit: type=1326 audit(1756853849.631:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10132 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 299.788800][ T38] audit: type=1326 audit(1756853849.681:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10132 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 299.788859][ T38] audit: type=1326 audit(1756853849.691:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10132 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 299.798292][ T38] audit: type=1326 audit(1756853849.691:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10132 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 299.798350][ T38] audit: type=1326 audit(1756853849.701:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10132 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 300.203460][T10143] new mount options do not match the existing superblock, will be ignored [ 300.216461][T10143] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 301.649114][T10182] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 301.977014][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1938'. [ 303.163804][T10223] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 303.987894][T10248] sctp: [Deprecated]: syz.3.1963 (pid 10248) Use of int in maxseg socket option. [ 303.987894][T10248] Use struct sctp_assoc_value instead [ 304.013263][T10247] program syz.2.1964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.282217][T10253] netlink: 'syz.1.1966': attribute type 2 has an invalid length. [ 304.376397][T10254] program syz.3.1968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.535269][T10253] þ: entered promiscuous mode [ 304.744514][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 305.550627][T10285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1982'. [ 305.892997][T10295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1987'. [ 307.491505][T10342] ntfs3: Bad value for 'gid' [ 307.491527][T10342] ntfs3: Bad value for 'gid' [ 307.546815][ T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 307.667188][T10347] netlink: 'syz.0.2012': attribute type 4 has an invalid length. [ 307.667213][T10347] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2012'. [ 307.712147][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.712177][ T10] usb 5-1: config 0 has no interface number 0 [ 307.712232][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 307.712257][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.745169][ T10] usb 5-1: config 0 descriptor?? [ 307.771349][ T10] usb 5-1: selecting invalid altsetting 1 [ 307.771525][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 307.771540][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 307.772977][T10351] tipc: Enabled bearer , priority 10 [ 308.118807][ T10] DVB: Unable to find symbol cx22700_attach() [ 308.323447][ T10] DVB: Unable to find symbol tda10046_attach() [ 308.323464][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 308.360783][ T10] usb 5-1: USB disconnect, device number 24 [ 308.761920][ T38] audit: type=1326 audit(1756853858.661:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10378 comm="syz.4.2025" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e2536ebe9 code=0x0 [ 310.005221][ T7262] kernel write not supported for file /stat (pid: 7262 comm: kworker/1:8) [ 310.066078][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 310.260119][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 310.260156][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.260202][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 310.260227][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.305669][ T10] usb 3-1: config 0 descriptor?? [ 310.331927][T10405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.943890][ T38] audit: type=1326 audit(1756853860.841:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10428 comm="syz.3.2047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd212975ba7 code=0x0 [ 310.994842][ T10] usb 3-1: string descriptor 0 read error: -71 [ 310.995466][ T10] uclogic 0003:5543:0047.0038: failed retrieving string descriptor #200: -71 [ 310.995528][ T10] uclogic 0003:5543:0047.0038: failed retrieving pen parameters: -71 [ 310.995547][ T10] uclogic 0003:5543:0047.0038: failed probing pen v2 parameters: -71 [ 310.995616][ T10] uclogic 0003:5543:0047.0038: failed probing parameters: -71 [ 310.995745][ T10] uclogic 0003:5543:0047.0038: probe with driver uclogic failed with error -71 [ 311.049401][ T10] usb 3-1: USB disconnect, device number 23 [ 311.344345][T10439] openvswitch: netlink: Duplicate or invalid key (type 0). [ 311.344383][T10439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.468235][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 312.618893][ T10] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 312.618923][ T10] usb 5-1: config 0 has no interface number 0 [ 312.618960][ T10] usb 5-1: config 0 interface 29 has no altsetting 0 [ 312.622294][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 312.622325][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.622346][ T10] usb 5-1: Product: syz [ 312.622362][ T10] usb 5-1: Manufacturer: syz [ 312.622377][ T10] usb 5-1: SerialNumber: syz [ 312.700187][ T10] usb 5-1: config 0 descriptor?? [ 312.960228][T10486] netlink: 'syz.3.2074': attribute type 4 has an invalid length. [ 312.960249][T10486] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2074'. [ 312.967941][ T10] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 313.177265][ T10] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 313.177297][ T10] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 313.177318][ T10] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 313.500460][ T10] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 313.515685][ T10] usb 5-1: USB disconnect, device number 25 [ 314.136647][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 314.298128][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 314.298158][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 314.298178][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 314.298200][ T10] usb 2-1: config 220 has no interface number 2 [ 314.298284][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 314.298313][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 314.298333][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 314.298352][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 314.303094][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 314.303127][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.303149][ T10] usb 2-1: Product: syz [ 314.303165][ T10] usb 2-1: Manufacturer: syz [ 314.303181][ T10] usb 2-1: SerialNumber: syz [ 314.317603][T10526] vivid-001: disconnect [ 314.318410][T10524] vivid-001: reconnect [ 314.571362][T10528] sp0: Synchronizing with TNC [ 314.667319][ T10] usb 2-1: selecting invalid altsetting 0 [ 314.689116][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 314.689154][ T10] usb 2-1: No valid video chain found. [ 314.742240][ T10] usb 2-1: selecting invalid altsetting 0 [ 314.742284][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 314.775267][ T10] usb 2-1: USB disconnect, device number 17 [ 315.078650][T10546] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 315.666001][ T7262] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 315.818964][ T7262] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 315.819016][ T7262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.819040][ T7262] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 315.819085][ T7262] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 315.819110][ T7262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.866595][ T7262] usb 2-1: config 0 descriptor?? [ 316.348752][ T7262] holtek_kbd 0003:04D9:A055.0039: item fetching failed at offset 5/7 [ 316.349650][ T7262] holtek_kbd 0003:04D9:A055.0039: probe with driver holtek_kbd failed with error -22 [ 316.547023][ T31] usb 2-1: USB disconnect, device number 18 [ 316.766109][T10591] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2123'. [ 316.766139][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2123'. [ 317.749644][T10617] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2135'. [ 317.988087][T10625] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 319.147140][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 319.381547][T10663] netlink: 'syz.4.2156': attribute type 2 has an invalid length. [ 319.910943][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 320.574866][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 321.072589][T10714] macsec1: entered promiscuous mode [ 322.202003][T10740] vlan2: entered promiscuous mode [ 322.202026][T10740] macvtap0: entered promiscuous mode [ 322.485674][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.485755][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.536696][ T5842] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 322.680456][T10760] hugetlbfs: Bad value '%' for mount option 'size' [ 322.680456][T10760] [ 322.734759][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.734795][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.734836][ T5842] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 322.734860][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.806018][T10762] tmpfs: Cannot retroactively limit inodes [ 322.833224][ T5842] usb 3-1: config 0 descriptor?? [ 323.262012][ T5842] playstation 0003:054C:0DF2.003A: unbalanced delimiter at end of report description [ 323.262855][ T5842] playstation 0003:054C:0DF2.003A: Parse failed [ 323.262937][ T5842] playstation 0003:054C:0DF2.003A: probe with driver playstation failed with error -22 [ 323.464006][ T31] usb 3-1: USB disconnect, device number 24 [ 324.571870][T10787] netlink: 'syz.3.2214': attribute type 2 has an invalid length. [ 325.164659][ T31] IPVS: starting estimator thread 0... [ 325.266095][T10805] IPVS: using max 7 ests per chain, 16800 per kthread [ 325.496661][T10814] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2226'. [ 326.659684][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 326.829983][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 326.833041][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 326.833075][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 326.833104][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 326.833129][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 326.833158][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 326.886832][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 326.886871][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.886895][ T10] usb 2-1: Product: syz [ 326.886913][ T10] usb 2-1: Manufacturer: syz [ 326.886930][ T10] usb 2-1: SerialNumber: syz [ 326.911254][ T10] usb 2-1: config 0 descriptor?? [ 327.320976][T10862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2248'. [ 327.377409][ T10] input input15: Device does not respond to id packet M [ 327.547488][T10871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2252'. [ 327.547513][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2252'. [ 327.582333][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 327.582387][ T10] input input15: Device does not respond to id packet P [ 327.582839][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 327.582883][ T10] input input15: Device does not respond to id packet B [ 327.583444][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 327.583489][ T10] input input15: Device does not respond to id packet N [ 327.583922][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 327.584369][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 327.584921][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 327.585502][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 327.671361][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 327.775738][ T10] usb 2-1: USB disconnect, device number 19 [ 327.878688][T10879] program syz.2.2256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.365693][T10892] netlink: 'syz.3.2261': attribute type 30 has an invalid length. [ 329.500251][T10925] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2276'. [ 330.383910][T10950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2288'. [ 330.558057][T10950] sit0: Master is either lo or non-ether device [ 330.686059][ T5842] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 330.771001][ T38] audit: type=1326 audit(1756853880.671:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10962 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 330.785924][ T38] audit: type=1326 audit(1756853880.671:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10962 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 330.785993][ T38] audit: type=1326 audit(1756853880.671:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10962 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 330.848663][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 330.848694][ T5842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 330.848720][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 330.848744][ T5842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 330.848785][ T5842] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 330.848810][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.879716][ T5842] usb 1-1: config 0 descriptor?? [ 331.113090][ T5842] hdpvr 1-1:0.0: firmware version 0x51 dated [ 331.113112][ T5842] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 331.657810][ T5842] hdpvr 1-1:0.0: Could not setup controls [ 331.658575][ T5842] hdpvr 1-1:0.0: registering videodev failed [ 331.723967][ T5842] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 331.773180][ T5842] usb 1-1: USB disconnect, device number 17 [ 331.993116][T10986] netlink: 'syz.3.2305': attribute type 18 has an invalid length. [ 332.187343][ T3568] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.187654][ T3176] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.187702][ T3176] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.187741][ T3176] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.226699][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 333.389175][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 333.393884][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 333.393934][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 333.393960][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.427353][ T10] usb 2-1: config 0 descriptor?? [ 333.434683][T11018] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2320'. [ 333.434713][T11018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2320'. [ 333.789962][T11024] vxcan1: entered allmulticast mode [ 333.916706][ T10] uclogic 0003:5543:0781.003B: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 333.950561][T11027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2325'. [ 334.079070][ T31] usb 2-1: USB disconnect, device number 20 [ 334.364142][T11031] fido_id[11031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 334.851392][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'. [ 335.261945][T11063] gretap0: entered promiscuous mode [ 335.340499][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 335.417267][T11071] program syz.2.2344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.281457][T11098] __vm_enough_memory: pid: 11098, comm: syz.2.2358, bytes: 21200443060224 not enough memory for the allocation [ 336.808128][T11110] netlink: 'syz.4.2364': attribute type 2 has an invalid length. [ 336.808152][T11110] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2364'. [ 337.446043][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 337.543341][ T38] audit: type=1326 audit(1756853887.441:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11130 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 337.543403][ T38] audit: type=1326 audit(1756853887.441:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11130 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 337.547190][ T38] audit: type=1326 audit(1756853887.451:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11130 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 337.550104][ T38] audit: type=1326 audit(1756853887.451:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11130 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 337.550413][ T38] audit: type=1326 audit(1756853887.451:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11130 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 337.555356][ T38] audit: type=1326 audit(1756853887.451:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11130 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 337.555417][ T38] audit: type=1326 audit(1756853887.451:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11130 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 337.555470][ T38] audit: type=1326 audit(1756853887.451:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11130 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01960bebe9 code=0x7ffc0000 [ 337.636618][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 337.716090][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.716120][ T31] usb 4-1: config 0 has no interface number 0 [ 337.738706][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 337.738739][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.738761][ T31] usb 4-1: Product: syz [ 337.738776][ T31] usb 4-1: Manufacturer: syz [ 337.738792][ T31] usb 4-1: SerialNumber: syz [ 337.800884][ T31] usb 4-1: config 0 descriptor?? [ 337.821509][ T31] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 337.821539][ T31] usb 4-1: selecting invalid altsetting 1 [ 337.821557][ T31] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 337.858829][ T31] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 337.859254][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 337.859308][ T31] usb 4-1: media controller created [ 337.886096][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 337.886232][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 337.952546][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.997113][T11139] macvlan2: entered promiscuous mode [ 338.371655][T11148] max out of range [ 338.702209][T11156] netlink: 'syz.2.2387': attribute type 18 has an invalid length. [ 338.790901][ T3568] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.792457][ T3568] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.792513][ T3568] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.792556][ T3568] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.037579][ T31] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 339.037668][ T31] zl10353_read_register: readreg error (reg=127, ret==-110) [ 339.143213][ T31] usb 4-1: USB disconnect, device number 26 [ 340.152953][T11189] netlink: 'syz.4.2400': attribute type 18 has an invalid length. [ 340.505077][T11197] sock: sock_set_timeout: `syz.0.2403' (pid 11197) tries to set negative timeout [ 341.235971][ T31] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 341.390122][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.390151][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 341.390206][ T31] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 341.390231][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.442880][ T31] usb 2-1: config 0 descriptor?? [ 341.471498][ T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 341.471558][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 341.538943][ T31] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 341.540039][ T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 341.540097][ T31] usb 2-1: media controller created [ 341.543446][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.614357][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 341.614494][ T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 341.638398][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 341.644117][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 341.644144][ T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 341.720911][ T5913] usb 2-1: USB disconnect, device number 21 [ 341.949053][ T5913] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 342.538078][T11258] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 342.737462][T11265] tipc: Enabled bearer , priority 10 [ 343.486149][ T5913] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 343.649300][ T5913] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 343.649333][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.682494][ T5913] usb 4-1: config 0 descriptor?? [ 343.917216][ T5913] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 343.926099][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 344.094726][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 344.098173][ T45] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.098201][ T45] usb 1-1: config 0 has no interface number 0 [ 344.109520][ T45] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 344.109551][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.109573][ T45] usb 1-1: Product: syz [ 344.109589][ T45] usb 1-1: Manufacturer: syz [ 344.109605][ T45] usb 1-1: SerialNumber: syz [ 344.153770][ T45] usb 1-1: config 0 descriptor?? [ 344.154176][ T5913] [drm:udl_init] *ERROR* Selecting channel failed [ 344.171911][ T45] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 344.171940][ T45] usb 1-1: selecting invalid altsetting 1 [ 344.171957][ T45] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 344.199408][ T45] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.199817][ T45] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 344.199866][ T45] usb 1-1: media controller created [ 344.252774][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.433890][ T5913] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 344.433919][ T5913] [drm] Initialized udl on minor 2 [ 344.493784][ T5913] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 344.549254][ T5913] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 344.610285][ T5913] usb 4-1: USB disconnect, device number 27 [ 344.615105][ T5842] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 344.622839][ T5842] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 344.767355][ T5842] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 344.905940][ T8944] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 344.940864][ T5842] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 344.940941][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.942890][ T5842] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 344.942925][ T5842] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 344.942946][ T5842] usb 5-1: Manufacturer: syz [ 345.016724][ T5842] usb 5-1: config 0 descriptor?? [ 345.076721][ T8944] usb 3-1: Using ep0 maxpacket: 16 [ 345.080135][ T8944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.080189][ T8944] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 345.080216][ T8944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.142709][ T8944] usb 3-1: config 0 descriptor?? [ 345.345962][ T5842] rc_core: IR keymap rc-hauppauge not found [ 345.345986][ T5842] Registered IR keymap rc-empty [ 345.357579][ T45] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 345.357662][ T45] zl10353_read_register: readreg error (reg=127, ret==-110) [ 345.378697][ T5842] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 345.447667][ T5842] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 345.510839][T11322] ip6tnl2: entered promiscuous mode [ 345.510891][T11322] ip6tnl2: entered allmulticast mode [ 345.549115][ T45] usb 1-1: USB disconnect, device number 18 [ 345.552782][T11322] team0: Device ip6tnl2 is of different type [ 345.655667][ C0] igorplugusb 5-1:0.0: receive overflow, at least 9 lost [ 345.744229][ T8944] waltop 0003:172F:0501.003C: unknown main item tag 0x0 [ 345.745252][ T8944] waltop 0003:172F:0501.003C: unknown main item tag 0x0 [ 345.745292][ T8944] waltop 0003:172F:0501.003C: unknown main item tag 0x0 [ 345.745321][ T8944] waltop 0003:172F:0501.003C: unknown main item tag 0x0 [ 345.746375][ T8944] waltop 0003:172F:0501.003C: unknown main item tag 0x0 [ 345.870544][ T8944] waltop 0003:172F:0501.003C: hidraw0: USB HID v0.08 Device [HID 172f:0501] on usb-dummy_hcd.2-1/input0 [ 345.929602][ T45] usb 5-1: USB disconnect, device number 26 [ 345.937256][ T8944] usb 3-1: USB disconnect, device number 25 [ 346.134892][T11329] fido_id[11329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 346.383538][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 346.383570][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 347.025711][T11343] netlink: 'syz.0.2471': attribute type 1 has an invalid length. [ 347.826786][ T5913] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 347.989333][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 347.994641][ T5913] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 347.994673][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.994695][ T5913] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 347.994718][ T5913] usb 2-1: config 1 has no interface number 1 [ 347.994790][ T5913] usb 2-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.994821][ T5913] usb 2-1: config 1 interface 242 has no altsetting 0 [ 348.017806][ T5913] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 348.017842][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.017866][ T5913] usb 2-1: Product: syz [ 348.017884][ T5913] usb 2-1: Manufacturer: syz [ 348.017902][ T5913] usb 2-1: SerialNumber: syz [ 348.550539][ T5913] aqc111 2-1:1.242: probe with driver aqc111 failed with error -22 [ 348.722395][T11382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2490'. [ 348.785580][ T31] usb 2-1: USB disconnect, device number 22 [ 349.746074][ T5913] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 349.888296][T11417] IPVS: ip_vs_add_dest(): server weight less than zero [ 349.906963][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 349.939198][ T5913] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 349.939233][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.939256][ T5913] usb 3-1: Product: syz [ 349.939272][ T5913] usb 3-1: Manufacturer: syz [ 349.939288][ T5913] usb 3-1: SerialNumber: syz [ 349.970748][ T5913] usb 3-1: config 0 descriptor?? [ 350.046301][ T5913] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 350.611133][ T5913] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 350.611727][ T5913] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 350.625907][ T5913] usb 3-1: USB disconnect, device number 26 [ 350.736310][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 350.886599][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 350.889661][ T31] usb 5-1: config 12 has an invalid interface number: 212 but max is 0 [ 350.889690][ T31] usb 5-1: config 12 has no interface number 0 [ 350.920802][ T31] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 350.920834][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.920857][ T31] usb 5-1: Product: syz [ 350.920872][ T31] usb 5-1: Manufacturer: syz [ 350.920888][ T31] usb 5-1: SerialNumber: syz [ 350.979739][ T31] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 350.979799][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 351.003289][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 351.004934][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 351.004995][ T31] usb 5-1: media controller created [ 351.069312][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.089618][T11438] ALSA: seq fatal error: cannot create timer (-22) [ 351.143818][ T31] cxusb: set interface failed [ 351.143838][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 351.143863][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 351.143884][ T31] usb 5-1: bluebird_gpio_write failed. [ 351.168350][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 351.171243][ T31] usb 5-1: bluebird_gpio_write failed. [ 351.197908][T11428] dvb-usb: bulk message failed: -22 (3/0) [ 351.293066][ T31] DVB: Unable to find symbol dib7000p_attach() [ 351.293084][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 351.516431][ T31] rc_core: IR keymap rc-dvico-mce not found [ 351.516453][ T31] Registered IR keymap rc-empty [ 351.518387][ T31] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 351.574026][ T31] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 351.595384][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 351.595412][ T31] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 351.621671][ T31] usb 5-1: USB disconnect, device number 27 [ 351.931531][ T31] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 352.460634][T11474] netlink: 201872 bytes leftover after parsing attributes in process `syz.2.2533'. [ 352.460725][T11474] netlink: zone id is out of range [ 352.460761][T11474] netlink: zone id is out of range [ 352.460774][T11474] netlink: zone id is out of range [ 352.460783][T11474] netlink: zone id is out of range [ 352.460792][T11474] netlink: zone id is out of range [ 352.460801][T11474] netlink: zone id is out of range [ 352.460809][T11474] netlink: zone id is out of range [ 352.460818][T11474] netlink: zone id is out of range [ 352.460826][T11474] netlink: zone id is out of range [ 352.460834][T11474] netlink: zone id is out of range [ 352.916984][T11489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2539'. [ 352.919443][T11489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2539'. [ 353.184802][T11494] netlink: 'syz.4.2542': attribute type 2 has an invalid length. [ 354.782586][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 356.194797][T11576] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.2582'. [ 356.194821][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 356.194840][T11576] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.2582'. [ 356.314715][T11581] netlink: 'syz.1.2584': attribute type 29 has an invalid length. [ 356.324812][T11581] netlink: 'syz.1.2584': attribute type 29 has an invalid length. [ 356.646711][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'. [ 357.370361][T11606] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 357.370427][T11606] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 357.370533][T11606] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 357.370698][T11606] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 357.370754][T11606] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 357.370808][T11606] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 357.370962][T11606] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 357.371011][T11606] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 357.371060][T11606] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 357.371176][T11606] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 357.371226][T11606] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 357.371275][T11606] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 358.640709][T11634] binder: 11632:11634 ioctl c00c620f 200000000500 returned -22 [ 359.327900][T11652] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2617'. [ 359.327922][T11652] tc_dump_action: action bad kind [ 359.646267][T11660] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2621'. [ 359.886084][ T8944] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 360.046468][ T8944] usb 4-1: Using ep0 maxpacket: 16 [ 360.048866][ T8944] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 360.048896][ T8944] usb 4-1: config 0 has no interface number 0 [ 360.048946][ T8944] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 360.048975][ T8944] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 360.054896][ T8944] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 360.054927][ T8944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.054949][ T8944] usb 4-1: Product: syz [ 360.054964][ T8944] usb 4-1: Manufacturer: syz [ 360.054979][ T8944] usb 4-1: SerialNumber: syz [ 360.126726][ T8944] usb 4-1: config 0 descriptor?? [ 360.132503][T11661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.132737][T11661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.360798][T11661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.361537][T11661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.534683][T11674] tipc: Enabling of bearer rejected, failed to enable media [ 360.795983][ T8944] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 360.796016][ T8944] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 360.796324][ T8944] asix 4-1:0.251: probe with driver asix failed with error -71 [ 360.826819][ T8944] usb 4-1: USB disconnect, device number 28 [ 362.236478][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 362.388219][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 362.390890][ T31] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.390926][ T31] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.390953][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.390988][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 362.391013][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.511521][ T31] usb 3-1: config 0 descriptor?? [ 363.146993][ T31] usb 3-1: USB disconnect, device number 27 [ 364.988051][T11780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2680'. [ 365.175957][ T8944] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 365.330536][ T8944] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.330564][ T8944] usb 3-1: config 0 has no interface number 0 [ 365.330612][ T8944] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 365.330637][ T8944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.372519][ T8944] usb 3-1: config 0 descriptor?? [ 365.411995][ T8944] usb 3-1: selecting invalid altsetting 1 [ 365.412165][ T8944] dvb_ttusb_budget: ttusb_init_controller: error [ 365.412179][ T8944] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 365.735740][ T8944] DVB: Unable to find symbol cx22700_attach() [ 366.026417][ T8944] DVB: Unable to find symbol tda10046_attach() [ 366.026435][ T8944] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 366.063832][ T8944] usb 3-1: USB disconnect, device number 28 [ 366.345262][T11818] net_ratelimit: 11 callbacks suppressed [ 366.345283][T11818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.416087][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 366.566355][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 366.569020][ T31] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 366.569047][ T31] usb 2-1: config 179 has no interface number 0 [ 366.569111][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 366.569139][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 366.569167][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 366.569192][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 366.569219][ T31] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 366.569264][ T31] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 366.569288][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.637706][T11814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 366.939740][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.956212][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.266626][ T5913] usb 2-1: USB disconnect, device number 23 [ 367.266771][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 367.266845][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 367.536051][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 367.695518][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 367.701543][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.701577][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.701622][ T31] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 367.701644][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.718483][ T31] usb 4-1: config 0 descriptor?? [ 368.216830][ T31] hid_mf 0003:0079:1801.003E: item fetching failed at offset 0/2 [ 368.217691][ T31] hid_mf 0003:0079:1801.003E: HID parse failed. [ 368.217777][ T31] hid_mf 0003:0079:1801.003E: probe with driver hid_mf failed with error -22 [ 368.428768][ T31] usb 4-1: USB disconnect, device number 29 [ 368.555136][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'. [ 368.801987][T11863] netlink: 'syz.2.2715': attribute type 1 has an invalid length. [ 368.802027][T11863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.331821][T11939] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 371.331885][T11939] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 371.331938][T11939] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 371.332137][T11939] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 371.332189][T11939] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 371.332240][T11939] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 371.640505][T11941] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2751'. [ 371.717344][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.739116][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.742735][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.743980][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.744880][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.912561][T11945] lo speed is unknown, defaulting to 1000 [ 372.594453][T11971] program syz.1.2764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.004751][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'. [ 373.004775][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 373.004802][T11982] netlink: 'syz.1.2769': attribute type 11 has an invalid length. [ 373.004817][T11982] netlink: 'syz.1.2769': attribute type 13 has an invalid length. [ 373.697991][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.853560][ T5846] Bluetooth: hci5: command tx timeout [ 373.920973][ T3568] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.148210][ T5913] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 374.176385][ T8944] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 374.311230][ T5913] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 374.311258][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.311279][ T5913] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 374.311301][ T5913] usb 2-1: config 1 has no interface number 1 [ 374.311349][ T5913] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 374.314592][ T5913] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.314622][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.314644][ T5913] usb 2-1: Product: syz [ 374.314659][ T5913] usb 2-1: Manufacturer: syz [ 374.314675][ T5913] usb 2-1: SerialNumber: syz [ 374.397381][ T8944] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 374.397409][ T8944] usb 1-1: config 0 has no interface number 0 [ 374.397472][ T8944] usb 1-1: config 0 interface 98 has no altsetting 0 [ 374.400021][ T8944] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 374.400061][ T8944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.400083][ T8944] usb 1-1: Product: syz [ 374.400098][ T8944] usb 1-1: Manufacturer: syz [ 374.400113][ T8944] usb 1-1: SerialNumber: syz [ 374.477002][ T8944] usb 1-1: config 0 descriptor?? [ 374.600454][ T3568] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.673692][T12021] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2787'. [ 374.745975][ T8944] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 374.776549][ T5913] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 374.776620][ T5913] usb 2-1: MIDIStreaming interface descriptor not found [ 374.876215][ T5913] usb 2-1: USB disconnect, device number 24 [ 375.074289][ T9726] udevd[9726]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.231963][ T3568] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.325971][ T8944] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 375.681974][ T3568] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.821353][ T8944] usb 1-1: failed to restore interface 98 altsetting 4 (error=-71) [ 375.837202][ T8944] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 375.837308][ T8944] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 375.840573][ T5913] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 375.840600][ T5913] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 375.896158][ T31] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 375.916998][ T5846] Bluetooth: hci5: command tx timeout [ 375.921405][ T8944] usb 1-1: USB disconnect, device number 19 [ 375.944750][ T6037] udevd[6037]: setting mode of /dev/bus/usb/001/019 to 020664 failed: No such file or directory [ 375.944947][ T6037] udevd[6037]: setting owner of /dev/bus/usb/001/019 to uid=0, gid=0 failed: No such file or directory [ 376.050044][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.050120][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.050149][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 376.053639][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 376.053668][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.053690][ T31] usb 3-1: Product: syz [ 376.053714][ T31] usb 3-1: Manufacturer: syz [ 376.053729][ T31] usb 3-1: SerialNumber: syz [ 376.084168][T12039] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 376.712253][ T31] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 376.712446][ T31] cdc_ncm 3-1:1.0: bind() failure [ 376.715137][ T3568] bridge_slave_1: left allmulticast mode [ 376.715269][ T3568] bridge_slave_1: left promiscuous mode [ 376.715379][ T31] usbtest 3-1:1.0: Linux gadget zero [ 376.715397][ T31] usbtest 3-1:1.0: full-speed {control in/out int-in} tests (+alt) [ 376.719485][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.774604][ T31] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 376.774665][ T31] cdc_ncm 3-1:1.1: bind() failure [ 376.789357][ T31] usbtest 3-1:1.1: couldn't get endpoints, -22 [ 376.789451][ T31] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 376.851765][ T31] usb 3-1: USB disconnect, device number 29 [ 376.949716][ T3568] bridge_slave_0: left allmulticast mode [ 376.949763][ T3568] bridge_slave_0: left promiscuous mode [ 376.951346][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.436446][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 377.606282][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 377.608822][ T31] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.608856][ T31] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.608879][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 377.608915][ T31] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 377.608939][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.618963][ T31] usb 2-1: config 0 descriptor?? [ 377.912410][T12075] tmpfs: Cannot disable swap on remount [ 377.996050][ T5846] Bluetooth: hci5: command tx timeout [ 378.112507][ T31] dragonrise 0003:0079:0011.003F: unknown main item tag 0x0 [ 378.151845][ T31] dragonrise 0003:0079:0011.003F: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0 [ 378.353330][ T31] usb 2-1: USB disconnect, device number 25 [ 378.578274][T12086] fido_id[12086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 379.382301][T12108] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 379.886354][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 379.966474][ T8944] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 380.036138][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 380.050914][ T31] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 380.050946][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.050966][ T31] usb 1-1: Product: syz [ 380.050982][ T31] usb 1-1: Manufacturer: syz [ 380.050997][ T31] usb 1-1: SerialNumber: syz [ 380.076333][ T5846] Bluetooth: hci5: command tx timeout [ 380.128676][ T8944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.128713][ T8944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.128755][ T8944] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 380.128779][ T8944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.153269][ T8944] usb 4-1: config 0 descriptor?? [ 380.166801][ T31] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 380.166862][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 380.210453][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.211400][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 380.211458][ T31] usb 1-1: media controller created [ 380.271820][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.332209][ T31] usb 1-1: selecting invalid altsetting 1 [ 380.332231][ T31] cxusb: set interface failed [ 380.332246][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 380.332273][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 380.332291][ T31] usb 1-1: bluebird_gpio_write failed. [ 380.346369][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 380.346398][ T31] usb 1-1: bluebird_gpio_write failed. [ 380.350989][T12116] dvb-usb: bulk message failed: -22 (3/0) [ 380.532333][ T31] DVB: Unable to find symbol dib7000p_attach() [ 380.532348][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 380.692089][ T31] rc_core: IR keymap rc-dvico-mce not found [ 380.692110][ T31] Registered IR keymap rc-empty [ 380.694333][ T31] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 380.720542][ T31] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input21 [ 380.740767][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 380.740795][ T31] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 380.770406][ T31] usb 1-1: USB disconnect, device number 20 [ 380.862096][ T8944] usb 4-1: USB disconnect, device number 30 [ 381.011133][ T31] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 381.549469][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.616481][ T5842] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 381.651970][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.707562][ T3568] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 381.738808][ T3568] tipc: Resetting bearer [ 381.790155][ T5842] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 381.790187][ T5842] usb 2-1: config 0 has no interface number 0 [ 381.790225][ T5842] usb 2-1: config 0 interface 98 has no altsetting 0 [ 381.798014][ T5842] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 381.798050][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.798076][ T5842] usb 2-1: Product: syz [ 381.798092][ T5842] usb 2-1: Manufacturer: syz [ 381.798110][ T5842] usb 2-1: SerialNumber: syz [ 381.818931][ T3568] tipc: Resetting bearer [ 381.830942][ T3568] bond0 (unregistering): Released all slaves [ 381.853067][ T5842] usb 2-1: config 0 descriptor?? [ 381.980526][T11945] chnl_net:caif_netlink_parms(): no params data found [ 382.169041][ T5842] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 382.496102][ T3568] tipc: Disabling bearer [ 382.580454][ T3568] tipc: Left network mode [ 382.595945][ T5842] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 382.709513][ T3568] IPVS: stopping backup sync thread 6524 ... [ 382.993149][ T5842] usb 2-1: failed to restore interface 98 altsetting 4 (error=-71) [ 382.993726][ T5842] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 382.993814][ T5842] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 383.036325][ T5842] usb 2-1: USB disconnect, device number 26 [ 383.174402][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2842'. [ 383.174437][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2842'. [ 383.806301][ T5842] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 383.929534][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.929613][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.969751][ T5842] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 383.969781][ T5842] usb 1-1: config 0 has no interface number 0 [ 383.969814][ T5842] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 383.969855][ T5842] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 383.969885][ T5842] usb 1-1: config 0 interface 255 has no altsetting 0 [ 383.969919][ T5842] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 383.969943][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.039991][ T5842] usb 1-1: config 0 descriptor?? [ 384.052426][ T5842] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 384.309547][ T5842] usb 1-1: USB disconnect, device number 21 [ 385.016354][T11945] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.016502][T11945] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.016764][T11945] bridge_slave_0: entered allmulticast mode [ 385.019903][T11945] bridge_slave_0: entered promiscuous mode [ 385.070069][T11945] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.070221][T11945] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.070584][T11945] bridge_slave_1: entered allmulticast mode [ 385.073584][T11945] bridge_slave_1: entered promiscuous mode [ 385.164175][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2859'. [ 385.509978][ T31] hid-generic 0000:0004:0000.0041: unknown main item tag 0x0 [ 385.510016][ T31] hid-generic 0000:0004:0000.0041: unknown main item tag 0x0 [ 385.510043][ T31] hid-generic 0000:0004:0000.0041: unknown main item tag 0x0 [ 385.630118][ T31] hid-generic 0000:0004:0000.0041: hidraw0: HID v0.00 Device [syz0] on syz0 [ 385.735325][T12226] fido_id[12226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 385.822737][T11945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.868702][T11945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.958621][T12229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2864'. [ 386.426939][ T38] audit: type=1326 audit(1756853936.331:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12236 comm="syz.1.2868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01960bebe9 code=0x0 [ 386.929692][T11945] team0: Port device team_slave_0 added [ 387.119195][ T3568] hsr_slave_0: left promiscuous mode [ 387.180443][ T3568] hsr_slave_1: left promiscuous mode [ 387.187137][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.187256][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.245178][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.245215][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.600214][ T3568] veth1_macvtap: left promiscuous mode [ 387.600667][ T3568] veth0_macvtap: left promiscuous mode [ 387.600999][ T3568] veth1_vlan: left promiscuous mode [ 387.601242][ T3568] veth0_vlan: left promiscuous mode [ 387.766331][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 387.872958][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2881'. [ 387.872985][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'. [ 387.929633][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.929685][ T10] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 387.929709][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.935471][ T10] usb 3-1: config 0 descriptor?? [ 388.359137][ T10] zeroplus 0003:0C12:0005.0042: report_id 0 is invalid [ 388.359162][ T10] zeroplus 0003:0C12:0005.0042: item 0 0 1 8 parsing failed [ 388.359967][ T10] zeroplus 0003:0C12:0005.0042: parse failed [ 388.360040][ T10] zeroplus 0003:0C12:0005.0042: probe with driver zeroplus failed with error -22 [ 388.560830][ T10] usb 3-1: USB disconnect, device number 30 [ 388.588584][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2886'. [ 390.902140][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 391.137484][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 392.932501][T11945] team0: Port device team_slave_1 added [ 393.408549][T11945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.408565][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.408590][T11945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.410848][T11945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.410863][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.410889][T11945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.946149][T11945] hsr_slave_0: entered promiscuous mode [ 393.947619][T11945] hsr_slave_1: entered promiscuous mode [ 393.948625][T11945] debugfs: 'hsr0' already exists in 'hsr' [ 393.948649][T11945] Cannot create hsr debugfs directory [ 395.664184][T12354] delete_channel: no stack [ 396.379736][T11945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 396.514240][T11945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 396.623344][T11945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 396.718156][T11945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 397.111514][ T38] audit: type=1326 audit(1756853947.011:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12394 comm="syz.2.2927" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa325a3ebe9 code=0x0 [ 397.551703][T11945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.658144][T11945] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.662159][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 397.718720][ T3176] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.719006][ T3176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.907477][ T3176] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.907646][ T3176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.206784][ T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 398.356673][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 398.359331][ T31] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 398.362577][ T31] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 398.362607][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.362627][ T31] usb 4-1: Product: syz [ 398.362642][ T31] usb 4-1: Manufacturer: syz [ 398.362658][ T31] usb 4-1: SerialNumber: syz [ 398.424909][ T31] usb 4-1: config 0 descriptor?? [ 398.445508][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 398.445580][ T31] usb 4-1: setting power ON [ 398.445600][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 398.480511][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.484193][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 398.484253][ T31] usb 4-1: media controller created [ 398.613194][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.688007][T12415] dvb-usb: bulk message failed: -22 (3/0) [ 398.688030][T12415] cxusb: i2c wr: len=78 is too big! [ 398.688030][T12415] [ 398.808208][T12433] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2941'. [ 398.824677][ T31] usb 4-1: selecting invalid altsetting 6 [ 398.824708][ T31] usb 4-1: digital interface selection failed (-22) [ 398.824727][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 398.837247][ T31] usb 4-1: setting power OFF [ 398.837456][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 398.837480][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 398.837494][ T31] (NULL device *): no alternate interface [ 398.947823][T11945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.164386][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 399.209900][ T31] usb 4-1: USB disconnect, device number 31 [ 400.377079][T11945] veth0_vlan: entered promiscuous mode [ 400.476803][T11945] veth1_vlan: entered promiscuous mode [ 400.728903][T11945] veth0_macvtap: entered promiscuous mode [ 400.754719][T11945] veth1_macvtap: entered promiscuous mode [ 400.883955][T11945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.924473][T11945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.023149][ T1021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.024547][ T1021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.024822][ T1021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.036571][ T1021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.465222][T12491] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2958'. [ 401.583172][ T1809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.583193][ T1809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.648242][ T3176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.648266][ T3176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.389584][T12517] block nbd5: not configured, cannot reconfigure [ 403.286261][ T45] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 403.439021][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.439051][ T45] usb 2-1: config 0 has no interface number 0 [ 403.439100][ T45] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 403.439125][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.455360][ T45] usb 2-1: config 0 descriptor?? [ 403.514528][ T45] usb 2-1: selecting invalid altsetting 1 [ 403.514718][ T45] dvb_ttusb_budget: ttusb_init_controller: error [ 403.514732][ T45] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 403.766302][ T7262] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 403.861063][ T38] audit: type=1326 audit(1756853953.761:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.5.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 403.861806][ T38] audit: type=1326 audit(1756853953.761:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.5.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 403.869146][ T45] DVB: Unable to find symbol cx22700_attach() [ 403.916505][ T7262] usb 1-1: Using ep0 maxpacket: 16 [ 403.917445][ T38] audit: type=1326 audit(1756853953.821:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.5.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 403.917922][ T38] audit: type=1326 audit(1756853953.821:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.5.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 403.918310][ T38] audit: type=1326 audit(1756853953.821:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.5.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 403.918568][ T38] audit: type=1326 audit(1756853953.821:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.5.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 403.919563][ T7262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.919598][ T7262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.919622][ T7262] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.919668][ T7262] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 403.919693][ T7262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.957784][ T7262] usb 1-1: config 0 descriptor?? [ 404.165672][ T45] DVB: Unable to find symbol tda10046_attach() [ 404.165689][ T45] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 404.238591][ T45] usb 2-1: USB disconnect, device number 27 [ 404.499428][T12560] mkiss: ax0: crc mode is auto. [ 404.545524][ T7262] HID 045e:07da: Invalid code 65791 type 1 [ 404.554320][ T7262] HID 045e:07da: Invalid code 768 type 1 [ 404.554444][ T7262] HID 045e:07da: Invalid code 769 type 1 [ 404.554458][ T7262] HID 045e:07da: Invalid code 770 type 1 [ 404.554471][ T7262] HID 045e:07da: Invalid code 771 type 1 [ 404.554482][ T7262] HID 045e:07da: Invalid code 772 type 1 [ 404.554494][ T7262] HID 045e:07da: Invalid code 773 type 1 [ 404.554505][ T7262] HID 045e:07da: Invalid code 774 type 1 [ 404.554517][ T7262] HID 045e:07da: Invalid code 775 type 1 [ 404.554529][ T7262] HID 045e:07da: Invalid code 776 type 1 [ 404.629030][ T7262] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0043/input/input22 [ 404.769820][ T7262] microsoft 0003:045E:07DA.0043: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 404.812768][ T7262] usb 1-1: USB disconnect, device number 22 [ 405.254378][T12571] fido_id[12571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 406.590300][T12606] IPVS: Error connecting to the multicast addr [ 407.275941][T12625] binder: BINDER_SET_CONTEXT_MGR already set [ 407.275956][T12625] binder: 12623:12625 ioctl 40046207 0 returned -16 [ 409.227086][ T5842] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 409.245708][ T5842] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz0] on syz0 [ 409.336889][ T38] audit: type=1326 audit(1756853959.231:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 409.336950][ T38] audit: type=1326 audit(1756853959.231:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 409.370092][ T38] audit: type=1326 audit(1756853959.271:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 409.370154][ T38] audit: type=1326 audit(1756853959.271:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 409.370203][ T38] audit: type=1326 audit(1756853959.271:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 409.370256][ T38] audit: type=1326 audit(1756853959.271:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 409.386377][ T38] audit: type=1326 audit(1756853959.281:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 409.386456][ T38] audit: type=1326 audit(1756853959.281:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.5.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff8b4ebe9 code=0x7ffc0000 [ 409.673018][T12672] fido_id[12672]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 409.996438][T12688] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3040'. [ 409.996598][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3040'. [ 410.361757][ T38] audit: type=1800 audit(1756853960.261:101): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3043" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 410.514571][T12702] sp0: Synchronizing with TNC [ 411.702866][T12740] binder: 12738:12740 ioctl c0306201 0 returned -14 [ 412.453792][ T5846] Bluetooth: Wrong link type (-71) [ 412.946337][ T7262] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 413.098722][ T7262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.098773][ T7262] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 413.098797][ T7262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.113199][ T7262] usb 1-1: config 0 descriptor?? [ 413.614294][ T7262] logitech-djreceiver 0003:046D:C71F.0045: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 413.781474][T12494] usb 1-1: USB disconnect, device number 23 [ 413.987558][T12798] fido_id[12798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 415.578306][T12841] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3096'. [ 415.857686][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3100'. [ 416.479007][T12874] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 416.599326][T12880] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 416.846151][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 417.015289][ T9] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 417.015320][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.015341][ T9] usb 6-1: Product: syz [ 417.015355][ T9] usb 6-1: Manufacturer: syz [ 417.015369][ T9] usb 6-1: SerialNumber: syz [ 417.063555][ T9] usb 6-1: config 0 descriptor?? [ 417.699107][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 417.699429][ T9] asix 6-1:0.0: probe with driver asix failed with error -71 [ 417.735523][ T9] usb 6-1: USB disconnect, device number 2 [ 418.511059][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 419.046375][ T5925] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 419.209101][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.209136][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.209178][ T5925] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 419.209201][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.264151][ T5925] usb 4-1: config 0 descriptor?? [ 419.386426][T12961] netdevsim netdevsim5: Direct firmware load for . [ 419.386426][T12961] failed with error -2 [ 419.386456][T12961] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 419.386456][T12961] [ 419.705352][ T5925] samsung 0003:0419:0600.0046: item fetching failed at offset 5/7 [ 419.726579][ T5925] samsung 0003:0419:0600.0046: parse failed [ 419.726653][ T5925] samsung 0003:0419:0600.0046: probe with driver samsung failed with error -22 [ 419.903373][ T7262] usb 4-1: USB disconnect, device number 32 [ 420.966719][ T38] audit: type=1326 audit(1756853970.871:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 420.975655][ T38] audit: type=1326 audit(1756853970.871:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 420.996746][ T38] audit: type=1326 audit(1756853970.891:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 420.996813][ T38] audit: type=1326 audit(1756853970.891:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 420.996866][ T38] audit: type=1326 audit(1756853970.891:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 420.996917][ T38] audit: type=1326 audit(1756853970.891:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 420.996968][ T38] audit: type=1326 audit(1756853970.891:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 420.997019][ T38] audit: type=1326 audit(1756853970.891:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13002 comm="syz.0.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22bf5ebe9 code=0x7ffc0000 [ 421.323183][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 421.512603][T13017] nbd: socks must be embedded in a SOCK_ITEM attr [ 422.395972][T12494] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 422.548480][T12494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.548516][T12494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.548540][T12494] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.548584][T12494] usb 3-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 422.548608][T12494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.558681][T12494] usb 3-1: config 0 descriptor?? [ 423.051041][T12494] apple 0003:05AC:8102.0047: unknown main item tag 0x0 [ 423.051093][T12494] apple 0003:05AC:8102.0047: unknown main item tag 0x0 [ 423.051119][T12494] apple 0003:05AC:8102.0047: unknown main item tag 0x0 [ 423.051144][T12494] apple 0003:05AC:8102.0047: unknown main item tag 0x0 [ 423.051169][T12494] apple 0003:05AC:8102.0047: unknown main item tag 0x0 [ 423.061651][T12494] apple 0003:05AC:8102.0047: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.2-1/input0 [ 423.238805][T12494] usb 3-1: USB disconnect, device number 31 [ 423.332912][T13055] fido_id[13055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 423.434849][T13060] netlink: 'syz.1.3182': attribute type 30 has an invalid length. [ 423.705331][T13071] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 48 [ 423.756166][T12494] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 423.926809][T12494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.926858][T12494] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 423.926883][T12494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.952987][T12494] usb 4-1: config 0 descriptor?? [ 424.396973][T12494] kye 0003:0458:5017.0048: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 424.398552][T12494] kye 0003:0458:5017.0048: unknown main item tag 0x0 [ 424.398582][T12494] kye 0003:0458:5017.0048: unknown main item tag 0x0 [ 424.398610][T12494] kye 0003:0458:5017.0048: unknown main item tag 0x0 [ 424.398636][T12494] kye 0003:0458:5017.0048: unknown main item tag 0x0 [ 424.398663][T12494] kye 0003:0458:5017.0048: unknown main item tag 0x0 [ 424.421047][T12494] kye 0003:0458:5017.0048: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 424.421090][T12494] kye 0003:0458:5017.0048: tablet-enabling feature report not found [ 424.421108][T12494] kye 0003:0458:5017.0048: tablet enabling failed [ 424.576937][ T5925] usb 4-1: USB disconnect, device number 33 [ 424.763230][T13090] fido_id[13090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 425.345446][T13109] netlink: 'syz.3.3205': attribute type 1 has an invalid length. [ 425.345472][T13109] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3205'. [ 425.345504][T13109] netlink: 'syz.3.3205': attribute type 1 has an invalid length. [ 425.650368][T13116] program syz.0.3208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.676513][T13113] geneve2: entered promiscuous mode [ 425.676544][T13113] geneve2: entered allmulticast mode [ 425.726492][ T82] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 425.733045][ T82] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 425.733108][ T82] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 425.733148][ T82] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 427.405950][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 427.575944][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 427.593932][T13170] futex_wake_op: syz.0.3235 tries to shift op by -1; fix this program [ 427.594411][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 427.594436][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.594457][ T10] usb 2-1: Product: syz [ 427.594486][ T10] usb 2-1: Manufacturer: syz [ 427.594501][ T10] usb 2-1: SerialNumber: syz [ 427.648053][ T10] usb 2-1: config 0 descriptor?? [ 427.680697][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 428.315937][ T10] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 428.446327][ T5925] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 428.536474][ T10] gspca_sq930x: Sensor ov9630 not yet treated [ 428.536570][ T10] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 428.574388][ T10] usb 2-1: USB disconnect, device number 28 [ 428.587981][T12570] udevd[12570]: setting owner of /dev/bus/usb/002/028 to uid=0, gid=0 failed: No such file or directory [ 428.599608][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.599647][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.599689][ T5925] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 428.599717][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.631934][ T5925] usb 1-1: config 0 descriptor?? [ 429.077733][ T5925] cypress 0003:04B4:DE61.0049: item fetching failed at offset 5/7 [ 429.078608][ T5925] cypress 0003:04B4:DE61.0049: parse failed [ 429.078683][ T5925] cypress 0003:04B4:DE61.0049: probe with driver cypress failed with error -22 [ 429.280172][ T5925] usb 1-1: USB disconnect, device number 24 [ 429.697713][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 429.697747][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 429.923907][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3259'. [ 429.923947][T13221] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3259'. [ 431.507048][T13267] program syz.0.3282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.041796][T13279] genirq: Flags mismatch irq 5. 00202000 (pcmmio) vs. 00202000 (das16m1) [ 432.169819][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3288'. [ 432.169913][T13282] tipc: Enabling of bearer rejected, failed to enable media [ 432.670088][T13296] program syz.0.3293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.864133][T13304] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3297'. [ 432.887512][T13304] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3297'. [ 433.556028][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 433.725898][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 433.729101][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 433.733583][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 433.733612][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.733632][ T9] usb 3-1: Product: syz [ 433.733648][ T9] usb 3-1: Manufacturer: syz [ 433.733662][ T9] usb 3-1: SerialNumber: syz [ 433.786547][ T9] usb 3-1: config 0 descriptor?? [ 433.794560][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 433.794617][ T9] usb 3-1: setting power ON [ 433.794637][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 433.847527][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 433.851664][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 433.851722][ T9] usb 3-1: media controller created [ 433.934459][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.982923][ T9] usb 3-1: selecting invalid altsetting 6 [ 433.982947][ T9] usb 3-1: digital interface selection failed (-22) [ 433.982964][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 434.013672][ T9] usb 3-1: setting power OFF [ 434.013699][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 434.013716][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 434.013730][ T9] (NULL device *): no alternate interface [ 434.017104][T13320] dvb-usb: bulk message failed: -22 (4/0) [ 434.017130][T13320] cxusb: i2c read failed [ 434.110118][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 434.133973][ T9] usb 3-1: USB disconnect, device number 32 [ 434.440796][T13344] netlink: 'syz.5.3316': attribute type 1 has an invalid length. [ 434.440825][T13344] NCSI netlink: No device for ifindex 0 [ 435.027300][T13363] netlink: 'syz.2.3324': attribute type 1 has an invalid length. [ 435.384173][T13371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3328'. [ 435.384196][T13371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3328'. [ 435.384215][T13371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3328'. [ 435.384260][T13371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3328'. [ 435.444033][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'. [ 436.574652][T13410] macsec0: entered promiscuous mode [ 436.575691][T13410] macsec0: left promiscuous mode [ 436.596268][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 436.746264][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 436.749085][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.749115][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.749152][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 436.749174][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.807891][ T9] usb 6-1: config 0 descriptor?? [ 437.255988][ T5925] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 437.257659][ T9] ft260 0003:0403:6030.004A: unbalanced collection at end of report description [ 437.258525][ T9] ft260 0003:0403:6030.004A: failed to parse HID [ 437.258628][ T9] ft260 0003:0403:6030.004A: probe with driver ft260 failed with error -22 [ 437.409852][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 437.412341][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.412365][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.433128][ T45] usb 6-1: USB disconnect, device number 3 [ 437.458000][ T5925] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.458032][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.458054][ T5925] usb 1-1: Product: syz [ 437.458069][ T5925] usb 1-1: Manufacturer: syz [ 437.458084][ T5925] usb 1-1: SerialNumber: syz [ 437.748414][ T5925] usb 1-1: 0:2 : does not exist [ 437.764080][ T5925] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 437.807403][ T5925] usb 1-1: USB disconnect, device number 25 [ 438.450471][T13465] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3372'. [ 438.900221][T13483] program syz.1.3381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.900540][T13483] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 439.386259][ T5925] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 439.436595][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 439.486601][ T45] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 439.535973][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 439.538554][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.538598][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.538622][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.538665][ T5925] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 439.538690][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.551375][ T5925] usb 2-1: config 0 descriptor?? [ 439.608860][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.608906][ T10] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 439.608930][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.644895][ T10] usb 3-1: config 0 descriptor?? [ 439.657482][ T45] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 439.657745][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.696249][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 439.703815][ T45] usb 1-1: config 0 descriptor?? [ 439.732998][ T45] cp210x 1-1:0.0: cp210x converter detected [ 439.862067][ T9] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 439.862102][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.901582][ T9] usb 6-1: config 0 descriptor?? [ 440.029949][ T5925] ryos 0003:1E7D:31CE.004B: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 440.109404][ T10] zydacron 0003:13EC:0006.004C: item fetching failed at offset 4/5 [ 440.110954][ T10] zydacron 0003:13EC:0006.004C: parse failed [ 440.111112][ T10] zydacron 0003:13EC:0006.004C: probe with driver zydacron failed with error -22 [ 440.186840][ T45] usb 1-1: cp210x converter now attached to ttyUSB0 [ 440.195268][ T5925] usb 2-1: USB disconnect, device number 29 [ 440.242952][ T8943] usb 2-1: [UEAGLE-ATM] firmware is not available [ 440.271444][ T5913] usb 1-1: [UEAGLE-ATM] firmware is not available [ 440.320960][ T45] usb 3-1: USB disconnect, device number 33 [ 440.366945][ T31] usb 1-1: USB disconnect, device number 26 [ 440.367506][ T9] hid-alps 0003:044E:120C.004D: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 440.384401][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 440.506960][ T31] cp210x 1-1:0.0: device disconnected [ 440.587522][ T6087] usb 6-1: USB disconnect, device number 4 [ 441.320203][T13550] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 441.496337][ T5913] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 441.656094][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 441.658702][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 441.663296][ T5913] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 441.663322][ T5913] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 441.663342][ T5913] usb 4-1: Product: syz [ 441.663356][ T5913] usb 4-1: Manufacturer: syz [ 441.663370][ T5913] usb 4-1: SerialNumber: syz [ 441.866589][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 441.945888][ T5913] usb 4-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 441.945916][ T5913] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 441.945936][ T5913] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 442.027543][ T9] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 442.027650][ T9] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.027676][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 442.027712][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 442.027738][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.097004][ T9] usb 1-1: config 0 descriptor?? [ 442.146992][ T5913] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 442.147141][ T5913] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 442.177010][ T5913] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 442.195309][ T5913] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 442.213629][ T5913] usb 4-1: USB disconnect, device number 34 [ 442.238440][ T5913] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 442.270713][ T5913] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 442.272189][ T5913] visor 4-1:1.0: device disconnected [ 442.530387][ T9] kovaplus 0003:1E7D:2D50.004E: unknown main item tag 0x0 [ 442.530424][ T9] kovaplus 0003:1E7D:2D50.004E: unknown main item tag 0x0 [ 442.530450][ T9] kovaplus 0003:1E7D:2D50.004E: unknown main item tag 0x0 [ 442.558789][ T9] kovaplus 0003:1E7D:2D50.004E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 442.721522][ T9] usb 1-1: USB disconnect, device number 27 [ 443.207824][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 443.446224][ T5913] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 443.474673][T13612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3442'. [ 443.474701][T13612] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3442'. [ 443.474719][T13612] netlink: 'syz.3.3442': attribute type 6 has an invalid length. [ 443.474733][T13612] netlink: 'syz.3.3442': attribute type 5 has an invalid length. [ 443.474747][T13612] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3442'. [ 443.628419][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.628448][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 443.628470][ T5913] usb 2-1: config 1 has no interface number 0 [ 443.628521][ T5913] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.628550][ T5913] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 443.628585][ T5913] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.631677][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 443.631708][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.631730][ T5913] usb 2-1: Product: syz [ 443.631745][ T5913] usb 2-1: Manufacturer: syz [ 443.631761][ T5913] usb 2-1: SerialNumber: syz [ 444.066013][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 444.231415][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 444.231508][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.270966][ T9] usb 1-1: config 0 descriptor?? [ 444.312469][ T5913] cdc_ncm 2-1:1.1: bind() failure [ 444.341456][ T5913] usb 2-1: USB disconnect, device number 30 [ 444.670740][ T45] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 444.818303][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.818333][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.821214][ T45] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 444.821242][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 444.821265][ T45] usb 6-1: SerialNumber: syz [ 444.897897][ T9] ath6kl: Failed to read usb control message: -71 [ 444.897944][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 444.897957][ T9] ath6kl: unable to read target info byte count: -71 [ 444.902493][ T9] ath6kl: Failed to init ath6kl core: -71 [ 444.929382][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 444.986246][ T9] usb 1-1: USB disconnect, device number 28 [ 445.060629][ T45] usb 6-1: 0:2 : does not exist [ 445.103332][ T45] usb 6-1: USB disconnect, device number 5 [ 445.362406][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.376588][T13671] sctp: [Deprecated]: syz.0.3470 (pid 13671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.376588][T13671] Use struct sctp_sack_info instead [ 446.744709][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3476'. [ 446.744734][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3476'. [ 447.101733][T13696] netlink: 'syz.2.3483': attribute type 1 has an invalid length. [ 447.276325][ T45] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 447.399057][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 447.399091][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 447.438973][ T45] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 447.439030][ T45] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 447.439054][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.469805][ T45] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 447.921929][T13735] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3498'. [ 447.922356][T13730] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3498'. [ 448.487698][ T45] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 448.689292][ T45] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 448.689315][ T45] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 448.695652][ T45] usb 4-1: USB disconnect, device number 35 [ 449.649847][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 449.666878][ T6087] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 449.816138][ T6087] usb 4-1: Using ep0 maxpacket: 8 [ 449.839971][ T6087] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 449.840002][ T6087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.840021][ T6087] usb 4-1: Product: syz [ 449.840035][ T6087] usb 4-1: Manufacturer: syz [ 449.840050][ T6087] usb 4-1: SerialNumber: syz [ 449.906532][ T6087] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 449.906602][ T6087] dvb-usb: bulk message failed: -22 (2/0) [ 449.931649][ T6087] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 449.964163][ T6087] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 449.964225][ T6087] usb 4-1: media controller created [ 450.101319][T13788] dvb-usb: bulk message failed: -22 (3/0) [ 450.110812][ T6087] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.184361][ T6087] usb 4-1: selecting invalid altsetting 1 [ 450.184376][ T6087] cxusb: set interface failed [ 450.184386][ T6087] dvb-usb: bulk message failed: -22 (1/0) [ 450.184399][ T6087] dvb-usb: bulk message failed: -22 (3/0) [ 450.184425][ T6087] usb 4-1: bluebird_gpio_write failed. [ 450.195937][ T6087] dvb-usb: bulk message failed: -22 (3/0) [ 450.195965][ T6087] usb 4-1: bluebird_gpio_write failed. [ 450.300966][ T6087] DVB: Unable to find symbol dib7000p_attach() [ 450.300984][ T6087] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 450.464316][ T6087] rc_core: IR keymap rc-dvico-mce not found [ 450.464339][ T6087] Registered IR keymap rc-empty [ 450.465720][ T6087] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 450.469952][ T6087] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input23 [ 450.514347][ T6087] dvb-usb: schedule remote query interval to 100 msecs. [ 450.514371][ T6087] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 450.533531][ T6087] usb 4-1: USB disconnect, device number 36 [ 450.857859][ T6087] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 451.166903][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 451.413249][ T38] audit: type=1326 audit(1756854001.311:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.5.3546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ff8b4ebe9 code=0x0 [ 452.133521][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 452.133549][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 452.206020][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 452.226222][ T5913] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 452.270919][T13809] syz.2.3538 (13809): drop_caches: 1 [ 452.314778][T13855] digital: digital_start_poll: Unknown protocol [ 452.355956][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 452.373043][ T9] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 452.373087][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.373107][ T9] usb 2-1: Product: syz [ 452.373121][ T9] usb 2-1: Manufacturer: syz [ 452.373135][ T9] usb 2-1: SerialNumber: syz [ 452.376304][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 452.379548][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.379581][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.379607][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.379654][ T5913] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.379677][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.408964][ T5913] usb 4-1: config 0 descriptor?? [ 452.482797][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 452.482917][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 452.540574][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 452.543303][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 452.543341][ T9] usb 2-1: media controller created [ 452.576857][T13861] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3560'. [ 452.642317][T13848] dvb-usb: bulk message failed: -22 (3/0) [ 452.672146][ T6087] hid-generic 0000:0004:0000.004F: unknown main item tag 0x0 [ 452.672184][ T6087] hid-generic 0000:0004:0000.004F: unknown main item tag 0x0 [ 452.672212][ T6087] hid-generic 0000:0004:0000.004F: unknown main item tag 0x0 [ 452.693709][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.709367][ T6087] hid-generic 0000:0004:0000.004F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 452.755954][ T10] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 452.766915][ T5925] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 452.800758][ T9] usb 2-1: selecting invalid altsetting 1 [ 452.800782][ T9] cxusb: set interface failed [ 452.800797][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 452.800817][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 452.800836][ T9] usb 2-1: bluebird_gpio_write failed. [ 452.818109][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 452.818137][ T9] usb 2-1: bluebird_gpio_write failed. [ 452.834149][ T5913] microsoft 0003:045E:07DA.0050: unknown main item tag 0x1 [ 452.852061][ T5913] microsoft 0003:045E:07DA.0050: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 452.852100][ T5913] microsoft 0003:045E:07DA.0050: no inputs found [ 452.852116][ T5913] microsoft 0003:045E:07DA.0050: could not initialize ff, continuing anyway [ 452.904511][ T38] audit: type=1326 audit(1756854002.801:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13865 comm="syz.5.3563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ff8b4ebe9 code=0x0 [ 452.909037][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.909078][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.909124][ T10] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 452.909149][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.929752][ T10] usb 1-1: config 0 descriptor?? [ 452.973973][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.974007][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.974045][ T5925] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 452.974070][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.021126][ T5925] usb 3-1: config 0 descriptor?? [ 453.049081][ T5913] usb 4-1: USB disconnect, device number 37 [ 453.272503][ T9] DVB: Unable to find symbol dib7000p_attach() [ 453.272520][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 453.380243][ T10] glorious 0003:258A:0036.0051: unknown main item tag 0x1 [ 453.395245][ T10] glorious 0003:258A:0036.0051: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.0-1/input0 [ 453.478174][ T9] rc_core: IR keymap rc-dvico-mce not found [ 453.478195][ T9] Registered IR keymap rc-empty [ 453.507846][ T9] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 453.510542][ T9] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input24 [ 453.519221][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 453.519244][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 453.536152][ T9] usb 2-1: USB disconnect, device number 31 [ 453.577680][ T10] usb 1-1: USB disconnect, device number 29 [ 453.703162][ T5913] usb 3-1: USB disconnect, device number 34 [ 453.722141][ T9] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 453.797616][ T5925] hid-generic 0000:0004:0000.0053: unknown main item tag 0x0 [ 453.797657][ T5925] hid-generic 0000:0004:0000.0053: unknown main item tag 0x0 [ 453.797686][ T5925] hid-generic 0000:0004:0000.0053: unknown main item tag 0x0 [ 453.850132][ T5925] hid-generic 0000:0004:0000.0053: hidraw0: HID v0.00 Device [syz0] on syz0 [ 454.783663][ T5925] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 454.993985][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 454.994021][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.994061][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 454.994085][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.083430][ T5925] usb 1-1: config 0 descriptor?? [ 455.096698][ T45] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 455.320254][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.321071][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.321116][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 455.321858][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.453721][ T45] usb 3-1: config 0 descriptor?? [ 455.898977][ T5925] usb 1-1: USB disconnect, device number 30 [ 455.943390][ T45] isku 0003:1E7D:319C.0055: unknown main item tag 0x0 [ 455.943429][ T45] isku 0003:1E7D:319C.0055: unknown main item tag 0x0 [ 455.986720][ T45] isku 0003:1E7D:319C.0055: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 456.125340][ T45] isku 0003:1E7D:319C.0055: couldn't init struct isku_device [ 456.125396][ T45] isku 0003:1E7D:319C.0055: couldn't install keyboard [ 456.143984][ T45] isku 0003:1E7D:319C.0055: probe with driver isku failed with error -71 [ 456.187325][ T45] usb 3-1: USB disconnect, device number 35 [ 457.706595][ T38] audit: type=1326 audit(1756854007.601:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13907 comm="syz.3.3582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd21297ebe9 code=0x0 [ 457.840514][ T45] hid-generic 0000:0004:0000.0056: unknown main item tag 0x0 [ 457.840553][ T45] hid-generic 0000:0004:0000.0056: unknown main item tag 0x0 [ 457.840580][ T45] hid-generic 0000:0004:0000.0056: unknown main item tag 0x0 [ 457.896727][ T45] hid-generic 0000:0004:0000.0056: hidraw0: HID v0.00 Device [syz0] on syz0 [ 461.708373][ T38] audit: type=1400 audit(1756854011.581:113): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13924 comm="syz.0.3584" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 461.902437][ T38] audit: type=1400 audit(1756854011.801:114): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 462.107034][ T38] audit: type=1400 audit(1756854012.011:115): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 462.519112][ T38] audit: type=1400 audit(1756854012.421:116): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 463.356953][ T38] audit: type=1400 audit(1756854013.261:117): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 465.037014][ T38] audit: type=1400 audit(1756854014.941:118): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 468.316913][ T38] audit: type=1400 audit(1756854018.221:119): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 469.065899][ T5925] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 469.251095][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 469.251132][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.251174][ T5925] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 469.251198][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.353309][ T5925] usb 6-1: config 0 descriptor?? [ 470.142343][ T5925] usb 6-1: USB disconnect, device number 6 [ 471.126369][T13951] sp0: Synchronizing with TNC [ 471.190582][T13953] sp0: Found TNC [ 471.878283][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.902864][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.913585][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.915011][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.940441][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.066505][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 472.236234][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 472.254511][ T45] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.254547][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 472.254584][ T45] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 472.254608][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.307960][ T45] usb 4-1: config 0 descriptor?? [ 472.785040][ T45] hid-u2fzero 0003:20A0:4287.0058: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 472.799910][ T45] hid-u2fzero 0003:20A0:4287.0058: NitroKey U2F LED initialised [ 472.800022][ T45] hid-u2fzero 0003:20A0:4287.0058: NitroKey U2F RNG initialised [ 472.971332][ T45] usb 4-1: USB disconnect, device number 38 [ 474.090511][ T5846] Bluetooth: hci2: command tx timeout [ 474.798533][ T38] audit: type=1400 audit(1756854024.701:120): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 476.156945][ T5846] Bluetooth: hci2: command tx timeout [ 478.236872][ T5846] Bluetooth: hci2: command tx timeout [ 480.317028][ T5846] Bluetooth: hci2: command tx timeout [ 481.085786][ C0] sched: DL replenish lagged too much [ 484.693716][T13958] lo speed is unknown, defaulting to 1000 [ 485.593045][T13986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3613'. [ 487.538544][T13958] chnl_net:caif_netlink_parms(): no params data found [ 487.679902][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 487.708828][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 487.723726][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 487.741543][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 487.742416][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 488.237480][ T38] audit: type=1400 audit(1756854038.141:121): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 489.836811][ T5846] Bluetooth: hci6: command tx timeout [ 491.916035][ T5846] Bluetooth: hci6: command tx timeout [ 493.996183][ T5846] Bluetooth: hci6: command tx timeout [ 495.467192][T13999] netlink: 'syz.3.3617': attribute type 1 has an invalid length. [ 496.087017][ T5846] Bluetooth: hci6: command tx timeout [ 496.466754][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 496.466779][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3620'. [ 498.647539][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 503.090983][ T5155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 503.115143][ T5155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 503.124639][ T5155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 503.137899][ T5155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 503.141089][ T5155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 505.212322][ T5155] Bluetooth: hci7: command tx timeout [ 506.803148][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.276427][ T5155] Bluetooth: hci7: command tx timeout [ 509.356393][ T5155] Bluetooth: hci7: command tx timeout [ 511.437165][ T5846] Bluetooth: hci7: command tx timeout [ 514.486951][ T38] audit: type=1400 audit(1756854064.391:122): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29 comm="ktimers/1" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=45512 netif=lo [ 526.739600][ T5155] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 526.765094][ T5155] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 526.775271][ T5155] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 526.789371][ T5155] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 526.791173][ T5155] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 528.438859][T13996] lo speed is unknown, defaulting to 1000 [ 528.466748][T13958] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.466904][T13958] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.467174][T13958] bridge_slave_0: entered allmulticast mode [ 528.556922][T13958] bridge_slave_0: entered promiscuous mode [ 528.886091][ T5846] Bluetooth: hci8: command tx timeout [ 530.487317][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 530.511214][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 530.512854][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 530.514422][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 530.554938][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 530.967147][ T5846] Bluetooth: hci8: command tx timeout [ 532.716861][ T5846] Bluetooth: hci3: command tx timeout [ 533.036499][ T5846] Bluetooth: hci8: command tx timeout [ 534.797458][ T5846] Bluetooth: hci3: command tx timeout [ 535.116458][ T5846] Bluetooth: hci8: command tx timeout [ 536.876750][ T5846] Bluetooth: hci3: command tx timeout [ 538.956324][ T5846] Bluetooth: hci3: command tx timeout [ 547.707948][ T5155] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 547.740074][ T5155] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 547.741971][ T5155] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 547.743230][ T5155] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 547.744057][ T5155] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 552.956415][ T5846] Bluetooth: hci9: command tx timeout [ 555.036352][ T5846] Bluetooth: hci9: command tx timeout [ 557.115902][ T5846] Bluetooth: hci9: command tx timeout [ 559.209450][ T5846] Bluetooth: hci9: command tx timeout [ 559.381231][ T5155] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 559.416306][ T5155] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 559.418240][ T5155] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 559.419804][ T5155] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 559.460224][ T5155] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 561.916546][ T5846] Bluetooth: hci10: command tx timeout [ 563.143152][ T5155] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 563.166726][ T5155] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 563.168231][ T5155] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 563.169600][ T5155] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 563.170856][ T5155] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 563.995982][ T5846] Bluetooth: hci10: command tx timeout [ 565.276152][ T5846] Bluetooth: hci11: command tx timeout [ 566.076447][ T5846] Bluetooth: hci10: command tx timeout [ 567.357442][ T5846] Bluetooth: hci11: command tx timeout [ 568.155983][ T5846] Bluetooth: hci10: command tx timeout [ 568.256536][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.435991][ T5846] Bluetooth: hci11: command tx timeout [ 571.516397][ T5846] Bluetooth: hci11: command tx timeout [ 584.330296][T13958] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.330538][T13958] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.330826][T13958] bridge_slave_1: entered allmulticast mode [ 584.657331][T13958] bridge_slave_1: entered promiscuous mode [ 587.408177][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.444834][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.457982][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.459718][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.460529][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.516518][ T5846] Bluetooth: hci4: command tx timeout [ 590.567125][ T5155] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 590.669488][ T5155] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 590.715036][ T5155] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 590.727029][ T5155] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 590.727908][ T5155] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 591.606727][ T5846] Bluetooth: hci4: command tx timeout [ 592.805783][ T5846] Bluetooth: hci12: command tx timeout [ 593.676494][ T5846] Bluetooth: hci4: command tx timeout [ 594.876195][ T5846] Bluetooth: hci12: command tx timeout [ 595.757855][ T5846] Bluetooth: hci4: command tx timeout [ 595.920679][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 596.956420][ T5846] Bluetooth: hci12: command tx timeout [ 599.036104][ T5846] Bluetooth: hci12: command tx timeout [ 605.367002][ T39] INFO: task syz.1.3567:13873 blocked for more than 143 seconds. [ 605.367038][ T39] Not tainted syzkaller #0 [ 605.367050][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.367065][ T39] task:syz.1.3567 state:D stack:25128 pid:13873 tgid:13873 ppid:5838 task_flags:0x400040 flags:0x00004006 [ 605.367144][ T39] Call Trace: [ 605.367152][ T39] [ 605.367168][ T39] __schedule+0x16f3/0x4c20 [ 605.367228][ T39] ? __lock_acquire+0xab9/0xd20 [ 605.367261][ T39] ? __pfx___schedule+0x10/0x10 [ 605.367319][ T39] ? schedule+0x91/0x360 [ 605.367352][ T39] schedule+0x165/0x360 [ 605.367382][ T39] schedule_timeout+0x9a/0x270 [ 605.367410][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 605.367452][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.367482][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.367509][ T39] ? wait_for_completion+0x267/0x5d0 [ 605.367542][ T39] wait_for_completion+0x2bf/0x5d0 [ 605.367586][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 605.367623][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 605.367656][ T39] rcu_barrier+0x463/0x570 [ 605.367688][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 605.367720][ T39] netdev_run_todo+0x327/0xea0 [ 605.367759][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 605.367787][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 605.367819][ T39] ? kasan_quarantine_put+0xdd/0x220 [ 605.367845][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.367885][ T39] ? netdev_state_change+0x1ca/0x220 [ 605.367917][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 605.367947][ T39] tun_chr_close+0x13f/0x1c0 [ 605.367980][ T39] __fput+0x458/0xa80 [ 605.368016][ T39] task_work_run+0x1d4/0x260 [ 605.368043][ T39] ? __pfx_task_work_run+0x10/0x10 [ 605.368073][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 605.368107][ T39] exit_to_user_mode_loop+0xec/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 605.368137][ T39] do_syscall_64+0x2bd/0x3b0 [ 605.368167][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.368196][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.368219][ T39] ? clear_bhb_loop+0x60/0xb0 [ 605.368246][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.368274][ T39] RIP: 0033:0x7f01960bebe9 [ 605.368304][ T39] RSP: 002b:00007fffcae1b298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 605.368327][ T39] RAX: 0000000000000000 RBX: 000000000006eb36 RCX: 00007f01960bebe9 [ 605.368343][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 605.368357][ T39] RBP: 00007f01962f7da0 R08: 0000000000000001 R09: 00000003cae1b58f [ 605.368372][ T39] R10: 0000001b30720000 R11: 0000000000000246 R12: 00007f01962f5fac [ 605.368388][ T39] R13: 00007f01962f5fa0 R14: ffffffffffffffff R15: 00007fffcae1b3b0 [ 605.368425][ T39] [ 605.368452][ T39] [ 605.368452][ T39] Showing all locks held in the system: [ 605.368464][ T39] 2 locks held by ktimers/0/16: [ 605.368476][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 605.368534][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 605.368593][ T39] 2 locks held by rcuc/0/20: [ 605.368604][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 605.368661][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 605.368718][ T39] 3 locks held by kworker/1:0/31: [ 605.368731][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 605.368788][ T39] #1: ffffc90000a5fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 605.368845][ T39] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 605.368909][ T39] 3 locks held by kworker/u8:2/37: [ 605.368922][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 605.368978][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 605.369035][ T39] #2: ffff[ 605.369035][ T39] #2: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 605.369088][ T39] 1 lock held by khungtaskd/39: [ 605.369100][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 605.369156][ T39] 3 locks held by kworker/u8:4/67: [ 605.369168][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 605.369224][ T39] #1: ffffc9000153fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 605.369280][ T39] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 605.369349][ T39] 2 locks held by kworker/u8:5/82: [ 605.369381][ T39] 8 locks held by kworker/0:2/3116: [ 605.369396][ T39] 4 locks held by kworker/u9:1/5155: [ 605.369408][ T39] #0: ffff8880346c6138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 605.369464][ T39] #1: ffffc9000f8f7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 605.369521][ T39] #2: ffff88804de6ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 605.369571][ T39] #3: ffff88804de6c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 605.369628][ T39] 2 locks held by getty/5599: [ 605.369640][ T39] #0: ffff88823bf828a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 605.369699][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 605.369755][ T39] 2 locks held by kworker/0:3/5842: [ 605.369772][ T39] 2 locks held by kworker/1:5/5925: [ 605.369785][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 605.369842][ T39] #1: ffffc900057a7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 605.369898][ T39] 2 locks held by kworker/0:5/5960: [ 605.369913][ T39] 4 locks held by kworker/0:6/8943: [ 605.369925][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 605.369981][ T39] #1: ffffc90005f27bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 605.370040][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 605.370095][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 605.370151][ T39] 4 locks held by kworker/0:7/8944: [ 605.370164][ T39] #0: ffff8880595b9938 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 605.370238][ T39] #1: ffffc90005fdfbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 605.370294][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 605.370356][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 605.370413][ T39] 1 lock held by syz.1.3567/13873: [ 605.370425][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 605.370476][ T39] 2 locks held by syz.5.3597/13950: [ 605.370487][ T39] #0: ffff888036cd90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x110/0x200 [ 605.370546][ T39] #1: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 605.370596][ T39] 1 lock held by syz.2.3615/13991: [ 605.370608][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 605.370658][ T39] 2 locks held by syz-executor/13996: [ 605.370669][ T39] #0: ffffffff8ecc5a20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 605.370723][ T39] #1: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 605.370793][ T39] 4 locks held by syz-executor/14016: [ 605.370805][ T39] #0: ffff88805b39ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 605.370858][ T39] #1: ffff88805b39c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 605.370914][ T39] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 605.370975][ T39] #3: ffff88807374fb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 605.371040][ T39] 1 lock held by syz.3.3627/14027: [ 605.371053][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 605.371110][ T39] 1 lock held by syz-executor/14049: [ 605.371122][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 605.371172][ T39] 1 lock held by syz-executor/14054: [ 605.371183][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 605.371239][ T39] 3 locks held by syz.0.3639/14057: [ 605.371252][ T39] #0: ffff888038150e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 605.371334][ T39] #1: ffff8880381500a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 605.371390][ T39] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 605.371453][ T39] 1 lock held by syz-executor/14059: [ 605.371466][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 605.371521][ T39] 1 lock held by syz-executor/14062: [ 605.371534][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 605.371589][ T39] 1 lock held by syz-executor/14065: [ 605.371601][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 605.371656][ T39] 1 lock held by syz-executor/14069: [ 605.371669][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 605.371718][ T39] 1 lock held by dhcpcd/14073: [ 605.371730][ T39] #0: ffff88805c62ccb8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 605.371788][ T39] 1 lock held by dhcpcd/14074: [ 605.371800][ T39] #0: ffff88805c6296b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 605.371857][ T39] 1 lock held by dhcpcd/14075: [ 605.371870][ T39] #0: ffff88805c62b878 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 605.371925][ T39] 1 lock held by syz-executor/14077: [ 605.371938][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 605.371996][ T39] [ 605.372002][ T39] ============================================= [ 605.372002][ T39] [ 605.372031][ T39] NMI backtrace for cpu 1 [ 605.372057][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 605.372101][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.372123][ T39] Call Trace: [ 605.372139][ T39] [ 605.372154][ T39] dump_stack_lvl+0x189/0x250 [ 605.372218][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.372275][ T39] ? __pfx__printk+0x10/0x10 [ 605.372329][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 605.372357][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 605.372384][ T39] ? __pfx__printk+0x10/0x10 [ 605.372412][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 605.372440][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 605.372468][ T39] watchdog+0xf93/0xfe0 [ 605.372501][ T39] ? watchdog+0x1de/0xfe0 [ 605.372535][ T39] kthread+0x70e/0x8a0 [ 605.372571][ T39] ? __pfx_watchdog+0x10/0x10 [ 605.372596][ T39] ? __pfx_kthread+0x10/0x10 [ 605.372634][ T39] ? __pfx_kthread+0x10/0x10 [ 605.372667][ T39] ret_from_fork+0x3f9/0x770 [ 605.372697][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 605.372731][ T39] ? __switch_to_asm+0x39/0x70 [ 605.372750][ T39] ? __switch_to_asm+0x33/0x70 [ 605.372769][ T39] ? __pfx_kthread+0x10/0x10 [ 605.372801][ T39] ret_from_fork_asm+0x1a/0x30 [ 605.372855][ T39] [ 605.372863][ T39] Sending NMI from CPU 1 to CPUs 0: [ 605.372894][ C0] NMI backtrace for cpu 0 [ 605.372909][ C0] CPU: 0 UID: 0 PID: 3116 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 605.372931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.372944][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 605.372967][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x80 [ 605.372991][ C0] Code: 5b e9 f3 a2 54 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 f0 f5 91 <65> 8b 35 18 91 37 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 0c 0b [ 605.373007][ C0] RSP: 0018:ffffc9000ce6e618 EFLAGS: 00000297 [ 605.373021][ C0] RAX: ffffffff88df724f RBX: ffff88801092e000 RCX: ffff88802f3d1dc0 [ 605.373034][ C0] RDX: 0000000000000100 RSI: 00000000fffffff7 RDI: 00000000fffffff8 [ 605.373046][ C0] RBP: 00000000fffffff7 R08: 0000000000000000 R09: 0000000000000100 [ 605.373057][ C0] R10: 0aaaaaaaaaaa0000 R11: 00080aaaaaaaaaaa R12: 1ffff1100f6a852c [ 605.373070][ C0] R13: dffffc0000000000 R14: ffff88807b5428c0 R15: ffff88807b542960 [ 605.373083][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 605.373097][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.373109][ C0] CR2: 00007f9b2dcfed00 CR3: 00000000817ae000 CR4: 00000000003526f0 [ 605.373124][ C0] Call Trace: [ 605.373131][ C0] [ 605.373137][ C0] netdev_core_pick_tx+0x5f/0x350 [ 605.373158][ C0] __dev_queue_xmit+0x7ee/0x3b70 [ 605.373180][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 605.373202][ C0] ? synproxy_pernet+0x23/0x240 [ 605.373227][ C0] ? __nf_conntrack_eventmask_report+0x10b/0x480 [ 605.373248][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 605.373266][ C0] ? nf_ct_deliver_cached_events+0x1fc/0x2d0 [ 605.373286][ C0] ? __pfx_nf_ct_deliver_cached_events+0x10/0x10 [ 605.373308][ C0] ? __asan_memset+0x22/0x50 [ 605.373329][ C0] ? __lock_acquire+0xab9/0xd20 [ 605.373360][ C0] ? ip_output+0x2a1/0x3c0 [ 605.373390][ C0] ? ip_finish_output2+0xbae/0x11d0 [ 605.373411][ C0] ip_finish_output2+0xd5a/0x11d0 [ 605.373430][ C0] ? ip_finish_output2+0x452/0x11d0 [ 605.373452][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 605.373473][ C0] ? ip_skb_dst_mtu+0x866/0xab0 [ 605.373490][ C0] ? ip_finish_output+0x33a/0x3f0 [ 605.373520][ C0] ip_output+0x2a1/0x3c0 [ 605.373547][ C0] ? ip_output+0x60/0x3c0 [ 605.373580][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 605.373614][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 605.373638][ C0] ? nft_sock_get_eval_cgroupv2+0x88/0x270 [ 605.373666][ C0] ? synproxy_pernet+0x45/0x270 [ 605.373685][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 605.373718][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 605.373748][ C0] ? nf_ip_checksum+0x13c/0x510 [ 605.373776][ C0] nft_synproxy_do_eval+0x345/0x570 [ 605.373808][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 605.373837][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 605.373862][ C0] nft_do_chain+0x40c/0x1920 [ 605.373900][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 605.373931][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 605.373961][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 605.373981][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 605.374004][ C0] nft_do_chain_inet+0x25d/0x340 [ 605.374032][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 605.374068][ C0] ? NF_HOOK+0x9a/0x3a0 [ 605.374089][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 605.374118][ C0] nf_hook_slow+0xc5/0x220 [ 605.374144][ C0] NF_HOOK+0x206/0x3a0 [ 605.374166][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 605.374200][ C0] ? NF_HOOK+0x9a/0x3a0 [ 605.374221][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 605.374240][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 605.374264][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 605.374287][ C0] ? skb_dst+0x4f/0xd0 [ 605.374309][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 605.374350][ C0] NF_HOOK+0x309/0x3a0 [ 605.374373][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 605.374394][ C0] ? NF_HOOK+0x9a/0x3a0 [ 605.374415][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 605.374438][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 605.374466][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 605.374486][ C0] __netif_receive_skb+0x143/0x380 [ 605.374506][ C0] ? rt_spin_unlock+0x65/0x80 [ 605.374527][ C0] ? process_backlog+0x27b/0x900 [ 605.374552][ C0] process_backlog+0x31e/0x900 [ 605.374581][ C0] __napi_poll+0xb3/0x540 [ 605.374603][ C0] net_rx_action+0x707/0xe00 [ 605.374636][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 605.374670][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 605.374698][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 605.374723][ C0] handle_softirqs+0x22f/0x710 [ 605.374751][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 605.374779][ C0] __local_bh_enable_ip+0x179/0x270 [ 605.374801][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 605.374826][ C0] ? mod_peer_timer+0x21/0x260 [ 605.374844][ C0] ? mod_peer_timer+0x21/0x260 [ 605.374863][ C0] ? mod_peer_timer+0x20c/0x260 [ 605.374883][ C0] wg_packet_tx_worker+0x16b/0x7c0 [ 605.374905][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.374929][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 605.374952][ C0] process_scheduled_works+0xade/0x17b0 [ 605.374990][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.375022][ C0] worker_thread+0x8a0/0xda0 [ 605.375045][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.375074][ C0] ? __kthread_parkme+0x7b/0x200 [ 605.375103][ C0] kthread+0x70e/0x8a0 [ 605.375132][ C0] ? __pfx_worker_thread+0x10/0x10 [ 605.375153][ C0] ? __pfx_kthread+0x10/0x10 [ 605.375183][ C0] ? __pfx_kthread+0x10/0x10 [ 605.375210][ C0] ret_from_fork+0x3f9/0x770 [ 605.375234][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 605.375260][ C0] ? __switch_to_asm+0x39/0x70 [ 605.375276][ C0] ? __switch_to_asm+0x33/0x70 [ 605.375291][ C0] ? __pfx_kthread+0x10/0x10 [ 605.375318][ C0] ret_from_fork_asm+0x1a/0x30 [ 605.375343][ C0] [ 605.846582][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 605.846607][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 605.846634][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.846648][ T39] Call Trace: [ 605.846656][ T39] [ 605.846666][ T39] dump_stack_lvl+0x99/0x250 [ 605.846704][ T39] ? __asan_memcpy+0x40/0x70 [ 605.846728][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.846760][ T39] ? __pfx__printk+0x10/0x10 [ 605.846797][ T39] vpanic+0x281/0x750 [ 605.846831][ T39] ? __pfx_vpanic+0x10/0x10 [ 605.846861][ T39] ? preempt_schedule+0xae/0xc0 [ 605.846891][ T39] ? preempt_schedule_common+0x83/0xd0 [ 605.846926][ T39] panic+0xb9/0xc0 [ 605.846956][ T39] ? __pfx_panic+0x10/0x10 [ 605.846989][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 605.847022][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 605.847050][ T39] watchdog+0xfd2/0xfe0 [ 605.847084][ T39] ? watchdog+0x1de/0xfe0 [ 605.847117][ T39] kthread+0x70e/0x8a0 [ 605.847152][ T39] ? __pfx_watchdog+0x10/0x10 [ 605.847196][ T39] ? __pfx_kthread+0x10/0x10 [ 605.847235][ T39] ? __pfx_kthread+0x10/0x10 [ 605.847271][ T39] ret_from_fork+0x3f9/0x770 [ 605.847303][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 605.847340][ T39] ? __switch_to_asm+0x39/0x70 [ 605.847359][ T39] ? __switch_to_asm+0x33/0x70 [ 605.847379][ T39] ? __pfx_kthread+0x10/0x10 [ 605.847414][ T39] ret_from_fork_asm+0x1a/0x30 [ 605.847453][ T39] [ 605.847628][ T39] Kernel Offset: disabled