last executing test programs: 3.463833889s ago: executing program 3 (id=4495): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.968408643s ago: executing program 0 (id=4505): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @empty}}}, 0x90) 2.944989042s ago: executing program 1 (id=4506): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x9, 0x102, 0xb, 0x4, 0x80010, 0x84}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x5, 0x7}}]}}}]}, 0x5c}}, 0x0) 2.776446554s ago: executing program 0 (id=4507): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000030c0)=""/4110, 0x100e) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) read$char_usb(r0, 0x0, 0x57) 2.699817909s ago: executing program 1 (id=4509): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1}, 0xc}], 0x1, 0x2041, 0x0) 2.573765792s ago: executing program 0 (id=4510): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="4000040000005bac791a"], 0x0, 0x0}) 2.210733063s ago: executing program 1 (id=4514): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fanotify_init(0x2, 0x101000) 1.906307696s ago: executing program 4 (id=4517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000440)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x0, 0x653669f3f20e7b9f}) 1.698190703s ago: executing program 4 (id=4518): r0 = syz_clone(0x24240000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setns(r1, 0x8000000) 1.656344547s ago: executing program 2 (id=4519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000000000000040000", @ANYRES32, @ANYBLOB='5{'], 0x20) 1.434360182s ago: executing program 2 (id=4520): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="20003300d00000000802110000010802110000005050505050505d000008"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.195700767s ago: executing program 3 (id=4521): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000005280)=[{&(0x7f0000000480)=""/175, 0xaf}], 0x1, 0x48, 0x0) 1.189340713s ago: executing program 2 (id=4522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f004b00000008000300", @ANYRES32=r2], 0x6f4}}, 0x0) 1.023063611s ago: executing program 1 (id=4523): r0 = socket$inet(0x2, 0x802, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write(r0, &(0x7f00000009c0)="0800adf1ffffff58", 0x8) 960.717159ms ago: executing program 3 (id=4524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='svcsock_tcp_recv_short\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x14, 0xfffffffffffffffe}, 0x16) 901.931125ms ago: executing program 2 (id=4525): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400)={0x1f, @none}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) 817.424053ms ago: executing program 3 (id=4526): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xfd}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xfff}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xb679}]}}]}, 0x58}}, 0x0) 816.676777ms ago: executing program 1 (id=4536): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\r\x00'], 0x10) 774.019377ms ago: executing program 2 (id=4527): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffff8, 0x100000001, 0x101, 0x1, 0x0, 0x401, 0x1, 0x7}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={[0x9]}, 0x8}) 599.378885ms ago: executing program 3 (id=4528): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000010280)="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", 0x2000, &(0x7f0000001000)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40000, 0x2, 0xfff9, 0x0, 0x8000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 565.748832ms ago: executing program 0 (id=4529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4, 0x0, 0x0, @void, @value}, 0x10) 565.301055ms ago: executing program 1 (id=4530): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0x7, 0x49, "2a4e22f5c5196e03ba8bebf15b08cd0649fed85d8ccbb74527e74636849e944f932f50821243b8106afba1842d46ec710cb202fb49d1771543d1939ff4a29127c4798a0dee6e9ae5cf"}, 0x0, 0x0}) 466.302649ms ago: executing program 4 (id=4531): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000380)=0x1, 0x4) 311.048073ms ago: executing program 4 (id=4532): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2004}}}}]}, 0x78}}, 0x0) 255.459821ms ago: executing program 0 (id=4533): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'cpuset'}]}, 0x8) 190.421419ms ago: executing program 3 (id=4534): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78) 129.211801ms ago: executing program 2 (id=4535): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 114.621436ms ago: executing program 0 (id=4537): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000480)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000440)) 198.218µs ago: executing program 4 (id=4538): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpuset'}]}, 0x8) 0s ago: executing program 4 (id=4539): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000006d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) kernel console output (not intermixed with test programs): ct=07b1, bcdDevice= 0.00 [ 276.508400][ T5369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.549049][ T5369] usb 1-1: config 0 descriptor?? [ 277.024954][ T5369] cypress 0003:04B4:07B1.0013: unknown main item tag 0x0 [ 277.043491][ T5369] cypress 0003:04B4:07B1.0013: unknown main item tag 0x0 [ 277.054767][ T5369] cypress 0003:04B4:07B1.0013: unknown main item tag 0x0 [ 277.074622][ T5369] cypress 0003:04B4:07B1.0013: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0 [ 277.274826][T11462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.345701][ T48] usb 1-1: USB disconnect, device number 16 [ 277.802246][T11475] sctp: [Deprecated]: syz.1.2706 (pid 11475) Use of int in maxseg socket option. [ 277.802246][T11475] Use struct sctp_assoc_value instead [ 277.962835][T11479] netlink: 'syz.2.2707': attribute type 21 has an invalid length. [ 277.999166][T11479] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 278.599360][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 278.599381][ T29] audit: type=1326 audit(2000000185.300:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11504 comm="syz.1.2719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x0 [ 278.941758][T11522] cannot load conntrack support for proto=3 [ 279.184262][T11535] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 280.085047][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'. [ 280.110473][T11564] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2746'. [ 280.266994][ T5369] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 280.318471][T11570] netlink: 'syz.4.2749': attribute type 9 has an invalid length. [ 280.352745][T11570] macvlan2: entered promiscuous mode [ 280.377814][T11570] bond0: entered promiscuous mode [ 280.389573][T11570] macvlan2: entered allmulticast mode [ 280.404109][T11570] bond0: entered allmulticast mode [ 280.417061][T11570] bond_slave_0: entered allmulticast mode [ 280.423739][T11570] bond_slave_1: entered allmulticast mode [ 280.437316][T11570] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 280.457076][T11570] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.475308][ T5369] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 280.486098][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.500042][ T5369] usb 3-1: config 0 descriptor?? [ 280.531657][ T5369] cp210x 3-1:0.0: cp210x converter detected [ 280.938675][ T5369] usb 3-1: cp210x converter now attached to ttyUSB0 [ 281.148467][ T8] usb 3-1: USB disconnect, device number 24 [ 281.168232][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 281.187532][ T8] cp210x 3-1:0.0: device disconnected [ 281.277572][ T5369] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 281.479489][ T5369] usb 1-1: Using ep0 maxpacket: 16 [ 281.495397][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032e33000: rx timeout, send abort [ 281.507820][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888032e33000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 281.536506][ T5369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.555004][T11614] netem: change failed [ 281.567147][ T5369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.579050][ T5369] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 281.599413][ T5369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.621270][ T5369] usb 1-1: config 0 descriptor?? [ 282.137544][ T5369] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0014/input/input28 [ 282.263787][ T5369] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0014/input/input29 [ 282.321512][ T5369] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0014/input/input30 [ 282.453676][ T5369] kye 0003:0458:5015.0014: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 282.509296][ T5369] usb 1-1: USB disconnect, device number 17 [ 282.557215][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 282.757256][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 282.768378][ T8] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 282.785321][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.809331][ T8] usb 2-1: config 0 descriptor?? [ 282.821374][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 283.225131][ T8] gspca_nw80x: reg_r err -71 [ 283.231939][T11668] binder: 11667:11668 ioctl c018620c 200005c0 returned -1 [ 283.242984][ T8] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 283.274169][ T8] usb 2-1: USB disconnect, device number 21 [ 283.750305][T11680] netlink: 'syz.3.2799': attribute type 10 has an invalid length. [ 283.826266][T11680] team0: Port device wlan1 added [ 283.936587][T11679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.796510][ T5236] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 284.996462][ T5236] usb 2-1: Using ep0 maxpacket: 8 [ 285.006294][ T5236] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 285.015063][ T5236] usb 2-1: config 0 has an invalid descriptor of length 7, skipping remainder of the config [ 285.046276][ T5236] usb 2-1: config 0 has no interface number 0 [ 285.078089][ T5236] usb 2-1: config 0 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.149301][ T5236] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=ff.24 [ 285.176502][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.191887][ T5236] usb 2-1: Product: syz [ 285.209617][ T5236] usb 2-1: Manufacturer: syz [ 285.214294][ T5236] usb 2-1: SerialNumber: syz [ 285.230918][ T5236] usb 2-1: config 0 descriptor?? [ 285.479607][ T5236] usb 2-1: unknown interface protocol 0x88, assuming v1 [ 285.501042][ T5236] usb 2-1: 230:2 : does not exist [ 285.539508][ T48] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 285.564856][ T5236] usb 2-1: USB disconnect, device number 22 [ 285.751052][ T48] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 285.777407][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.806497][ T48] usb 5-1: Product: syz [ 285.811399][ T48] usb 5-1: Manufacturer: syz [ 285.816050][ T48] usb 5-1: SerialNumber: syz [ 285.847581][ T48] usb 5-1: config 0 descriptor?? [ 286.134727][ T48] hso 5-1:0.0: Failed to find BULK IN ep [ 286.193451][ T48] usb-storage 5-1:0.0: USB Mass Storage device detected [ 286.396912][ T48] usb 5-1: USB disconnect, device number 17 [ 287.195890][T11787] program syz.3.2845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.386867][ T1122] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.007025][T11810] can0: slcan on ptm0. [ 288.066009][ T29] audit: type=1400 audit(2000000194.760:227): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=11811 comm="syz.3.2857" dest=20000 netif=wpan0 [ 288.111826][ T29] audit: type=1400 audit(2000000194.760:228): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=11811 comm="syz.3.2857" dest=20000 netif=wpan0 [ 288.132048][T11809] can0 (unregistered): slcan off ptm0. [ 288.324112][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'. [ 288.461109][T11825] VFS: could not find a valid V7 on nullb0. [ 289.346135][T11865] netlink: 'syz.3.2882': attribute type 3 has an invalid length. [ 290.151597][ T29] audit: type=1326 audit(2000000196.850:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11888 comm="syz.1.2894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x0 [ 290.268487][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 290.459278][ T8] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.482797][ T8] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.511960][ T8] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.543355][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 290.556915][T11907] netlink: 'syz.2.2901': attribute type 1 has an invalid length. [ 290.565053][T11907] netlink: 'syz.2.2901': attribute type 2 has an invalid length. [ 290.573141][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.579890][T11886] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.638294][T11909] netlink: 210620 bytes leftover after parsing attributes in process `syz.3.2903'. [ 290.649759][T11909] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 290.817206][ T48] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 291.019124][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.051401][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.079095][ T48] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 291.106856][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.136005][ T48] usb 5-1: config 0 descriptor?? [ 291.586869][ T48] arvo 0003:1E7D:30D4.0015: unbalanced collection at end of report description [ 291.619161][ T48] arvo 0003:1E7D:30D4.0015: parse failed [ 291.620824][ T8] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 291.627863][ T48] arvo 0003:1E7D:30D4.0015: probe with driver arvo failed with error -22 [ 291.658804][ T8] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input32 [ 291.726949][ T8] usb 1-1: USB disconnect, device number 18 [ 291.733020][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 291.855740][ T5369] usb 5-1: USB disconnect, device number 18 [ 292.535366][T11958] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 292.609591][T11960] tun0: tun_chr_ioctl cmd 1074025676 [ 292.637123][T11960] tun0: owner set to 0 [ 292.745081][T11966] netlink: 'syz.0.2929': attribute type 1 has an invalid length. [ 292.763686][T11966] netlink: 'syz.0.2929': attribute type 4 has an invalid length. [ 292.784186][T11966] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2929'. [ 295.112152][T12054] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2969'. [ 295.196490][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 295.244545][T12061] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 295.391994][ T25] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 295.403308][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.423318][ T25] usb 5-1: Product: syz [ 295.428073][ T25] usb 5-1: Manufacturer: syz [ 295.434607][ T25] usb 5-1: SerialNumber: syz [ 295.447782][ T25] usb 5-1: config 0 descriptor?? [ 295.662758][ T25] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 295.896764][ T5307] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 296.074543][ T25] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 296.087869][T12082] input: syz0 as /devices/virtual/input/input33 [ 296.096791][ T5307] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 296.108704][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.143157][ T5307] usb 2-1: config 0 descriptor?? [ 296.155528][ T5307] cp210x 2-1:0.0: cp210x converter detected [ 296.281728][ T8] usb 5-1: USB disconnect, device number 19 [ 296.388524][T12075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 296.395698][T12075] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 296.448476][T12075] vhci_hcd vhci_hcd.0: Device attached [ 296.450406][ T5307] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 296.474310][T12089] vhci_hcd: connection closed [ 296.483140][ T5307] cp210x 2-1:0.0: querying part number failed [ 296.494598][ T53] vhci_hcd: stop threads [ 296.501211][ T53] vhci_hcd: release socket [ 296.506075][ T53] vhci_hcd: disconnect device [ 296.514038][ T5307] usb 2-1: cp210x converter now attached to ttyUSB0 [ 296.539259][ T5307] usb 2-1: USB disconnect, device number 23 [ 296.559917][ T5307] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 296.577782][ T5307] cp210x 2-1:0.0: device disconnected [ 297.284810][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3002'. [ 297.311465][T12132] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 297.330316][T12132] macsec3: entered promiscuous mode [ 297.342922][T12132] macsec3: entered allmulticast mode [ 297.354498][T12132] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 297.375395][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'. [ 297.426036][T12130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3001'. [ 298.203544][T12171] input: syz0 as /devices/virtual/input/input34 [ 300.428545][T12255] netlink: 'syz.1.3058': attribute type 4 has an invalid length. [ 300.539692][T12259] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.3061'. [ 300.567034][T12259] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 300.576563][T12259] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3061'. [ 300.616246][T12263] netlink: 'syz.1.3062': attribute type 2 has an invalid length. [ 300.638492][T12263] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 300.896526][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 301.041559][T12283] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 301.086484][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 301.100082][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 301.111730][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.129887][ T25] usb 5-1: config 0 descriptor?? [ 301.139498][ T25] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 301.168184][ T25] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.181511][ T25] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 301.201178][ T25] usb 5-1: media controller created [ 301.314024][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.359208][ T25] usb 5-1: selecting invalid altsetting 1 [ 301.365112][ T25] set interface failed [ 301.367897][ T25] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 301.380186][ T25] error writing reg: 0xff, val: 0x00 [ 301.477500][ T25] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 301.506723][ T25] usb 5-1: USB disconnect, device number 20 [ 301.533731][T12301] program syz.1.3080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.727080][ T48] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 301.916667][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 301.924193][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.935400][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.945846][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 301.959776][ T48] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 301.970692][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.979598][ T5236] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 301.990044][ T48] usb 4-1: config 0 descriptor?? [ 302.037007][ T5276] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 302.166545][ T5236] usb 2-1: Using ep0 maxpacket: 8 [ 302.188676][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.216767][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.227359][ T5236] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 302.236933][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.237199][ T5276] usb 3-1: Using ep0 maxpacket: 16 [ 302.252599][ T5236] usb 2-1: config 0 descriptor?? [ 302.286597][ T5276] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 302.295411][ T5276] usb 3-1: config 0 has no interface number 0 [ 302.303134][ T5276] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 302.323466][ T5276] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 302.349413][ T5276] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 302.362073][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.370264][ T5276] usb 3-1: Product: syz [ 302.374717][ T5276] usb 3-1: Manufacturer: syz [ 302.382729][ T5276] usb 3-1: SerialNumber: syz [ 302.400365][ T5276] usb 3-1: config 0 descriptor?? [ 302.406793][T12311] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 302.422109][T12311] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 302.432415][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.453312][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.472808][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.482248][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.490384][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.505025][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.513831][ T5236] usbhid 2-1:0.0: can't add hid device: -71 [ 302.529573][ T5236] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 302.543537][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.555960][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.567764][ T5236] usb 2-1: USB disconnect, device number 24 [ 302.587351][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.594682][ T48] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 302.643766][ T48] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0016/input/input35 [ 302.657055][T12311] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 302.673938][T12311] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 302.684483][ T48] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 302.706259][ T48] usb 4-1: USB disconnect, device number 22 [ 302.874554][T12328] futex_wake_op: syz.4.3094 tries to shift op by 32; fix this program [ 303.289993][ T5276] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 303.313087][ T5276] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 303.327986][ T5276] asix 3-1:0.251: probe with driver asix failed with error -71 [ 303.339950][ T5276] usb 3-1: USB disconnect, device number 25 [ 304.068968][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.083263][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.096814][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.107232][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.118106][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 304.126762][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.157497][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.183917][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.194982][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.208851][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.227818][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 304.236772][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.327312][T12363] lo speed is unknown, defaulting to 1000 [ 304.345598][T12373] Process accounting resumed [ 304.660771][T12363] chnl_net:caif_netlink_parms(): no params data found [ 304.846159][T12390] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3120'. [ 305.063488][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.071135][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.078675][T12363] bridge_slave_0: entered allmulticast mode [ 305.086263][T12363] bridge_slave_0: entered promiscuous mode [ 305.100220][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.108321][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.115724][T12363] bridge_slave_1: entered allmulticast mode [ 305.126274][T12363] bridge_slave_1: entered promiscuous mode [ 305.182585][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.229737][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.315541][T12363] team0: Port device team_slave_0 added [ 305.327206][ T5276] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 305.335124][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 305.351918][T12363] team0: Port device team_slave_1 added [ 305.460114][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.467246][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.500775][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.527253][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.528746][ T5276] usb 5-1: Using ep0 maxpacket: 8 [ 305.535029][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.571438][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.595376][ T8] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 305.611850][ T5276] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 305.624344][ T8] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 305.636533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 305.664642][ T8] usb 3-1: Manufacturer: syz [ 305.672647][ T5276] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 305.687369][ T5276] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.699393][ T5276] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.714886][ T8] usb 3-1: config 0 descriptor?? [ 305.722778][ T5276] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.734402][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.846345][ C0] hrtimer: interrupt took 34711 ns [ 305.864584][T12363] hsr_slave_0: entered promiscuous mode [ 305.903889][T12363] hsr_slave_1: entered promiscuous mode [ 305.922520][T12363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.970509][T12363] Cannot create hsr debugfs directory [ 305.971009][ T5276] usb 5-1: GET_CAPABILITIES returned 0 [ 306.020372][ T5276] usbtmc 5-1:16.0: can't read capabilities [ 306.166216][ T8] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 306.215274][ T48] usb 5-1: USB disconnect, device number 21 [ 306.267730][ T5235] Bluetooth: hci5: command tx timeout [ 306.374628][ T8] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 306.411104][T12363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.423941][ T8] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 306.584581][T12363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.617200][ T8] usb 3-1: USB disconnect, device number 26 [ 306.732260][T12363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.849359][T12418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.871084][T12363] bond0: (slave netdevsim0): Releasing backup interface [ 306.903396][T12363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.988169][T12421] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 306.998150][T12421] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3133'. [ 307.239366][T12363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.290384][T12363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.345636][T12363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.416243][T12363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.856058][T12363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.886165][ T29] audit: type=1326 audit(2000000214.580:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 307.962089][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.964017][ T29] audit: type=1326 audit(2000000214.580:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.010808][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.018071][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.053270][ T29] audit: type=1326 audit(2000000214.580:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.069189][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.082028][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.097686][ T29] audit: type=1326 audit(2000000214.580:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.123427][ T29] audit: type=1326 audit(2000000214.580:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.148625][ T29] audit: type=1326 audit(2000000214.580:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.200673][ T29] audit: type=1326 audit(2000000214.580:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.276769][ T29] audit: type=1326 audit(2000000214.580:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.346792][ T5235] Bluetooth: hci5: command tx timeout [ 308.354746][ T29] audit: type=1326 audit(2000000214.580:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.452607][ T29] audit: type=1326 audit(2000000214.580:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 308.532937][T12480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 308.828941][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.000089][T12363] veth0_vlan: entered promiscuous mode [ 309.039673][T12363] veth1_vlan: entered promiscuous mode [ 309.151079][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3166'. [ 309.190699][T12363] veth0_macvtap: entered promiscuous mode [ 309.305036][T12363] veth1_macvtap: entered promiscuous mode [ 309.408440][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.439759][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.465135][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.477035][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.490591][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 309.491594][T12522] vivid-007: disconnect [ 309.505406][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.511296][T12521] vivid-007: reconnect [ 309.518486][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.530908][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.541435][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.554510][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.586120][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.613302][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.649692][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.670571][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.684150][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.694242][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.704849][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.706841][ T48] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 309.733653][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.756555][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.783527][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.825128][T12363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.844970][T12363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.855228][T12363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.864337][T12363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.943825][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.965456][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 309.978981][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.992371][ T48] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.005179][ T48] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 310.021730][ T48] usb 3-1: config 1 interface 0 has no altsetting 0 [ 310.043839][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.065113][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.073956][ T5236] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 310.086855][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.096133][ T48] usb 3-1: Product: syz [ 310.101455][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.110845][ T48] usb 3-1: Manufacturer: syz [ 310.115589][ T48] usb 3-1: SerialNumber: syz [ 310.165444][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.188909][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.286906][ T5236] usb 4-1: Using ep0 maxpacket: 16 [ 310.303034][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.335946][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.384442][ T5236] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 310.394989][ T48] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 310.425264][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.433665][ T5235] Bluetooth: hci5: command tx timeout [ 310.446938][ T48] usb 3-1: USB disconnect, device number 27 [ 310.456984][ T5236] usb 4-1: config 0 descriptor?? [ 310.619077][T12548] netlink: 632 bytes leftover after parsing attributes in process `syz.1.3183'. [ 310.886907][T12557] netlink: 372 bytes leftover after parsing attributes in process `syz.0.3188'. [ 310.901168][ T5236] playstation 0003:054C:05C4.0017: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 311.081423][ T5236] playstation 0003:054C:05C4.0017: Invalid reportID received, expected 18 got 72 [ 311.106577][ T5236] playstation 0003:054C:05C4.0017: Failed to retrieve DualShock4 pairing info: -22 [ 311.128823][ T5236] playstation 0003:054C:05C4.0017: Failed to get MAC address from DualShock4 [ 311.147119][ T5236] playstation 0003:054C:05C4.0017: Failed to create dualshock4. [ 311.177775][ T5236] playstation 0003:054C:05C4.0017: probe with driver playstation failed with error -22 [ 311.234757][ T2933] wlan0: Trigger new scan to find an IBSS to join [ 311.363350][ T5236] usb 4-1: USB disconnect, device number 23 [ 311.710495][T12575] VFS: could not find a valid V7 on nullb0. [ 311.776127][T12575] VFS: unable to find oldfs superblock on device nullb0 [ 312.473601][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3208'. [ 312.507261][ T5235] Bluetooth: hci5: command tx timeout [ 312.616530][ T5236] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 312.617044][ T5307] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 312.809041][ T5236] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 312.827509][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 312.840457][ T5236] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 312.848588][ T5307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 312.876487][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.882322][ T5307] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 312.922006][ T5307] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.964472][ T5307] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 312.987089][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 312.988284][ T5236] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 312.995140][ T5307] usb 3-1: SerialNumber: syz [ 313.011308][T12597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.023549][ T5307] hub 3-1:1.0: bad descriptor, ignoring hub [ 313.035022][ T5307] hub 3-1:1.0: probe with driver hub failed with error -5 [ 313.247034][ T5276] usb 4-1: USB disconnect, device number 24 [ 313.269023][T12597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.726826][ T5307] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 313.751497][T12647] netlink: 'syz.4.3228': attribute type 33 has an invalid length. [ 313.948934][T12657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3232'. [ 314.003934][T12657] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.014616][T12657] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.114685][ T8] usb 3-1: USB disconnect, device number 28 [ 314.159319][ T8] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 314.198141][ T1122] wlan0: Trigger new scan to find an IBSS to join [ 314.400858][T12669] netlink: 'syz.1.3238': attribute type 10 has an invalid length. [ 314.503407][T12669] bond0: (slave netdevsim0): Releasing backup interface [ 314.556314][T12669] team0: Port device netdevsim0 added [ 314.633642][T12671] netlink: 'syz.1.3238': attribute type 10 has an invalid length. [ 314.717974][T12671] team0: Port device netdevsim0 removed [ 314.755141][T12671] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 314.985736][T12691] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 315.133583][ T35] wlan0: Creating new IBSS network, BSSID da:2d:4c:df:ec:e8 [ 315.293755][T12705] netlink: 'syz.4.3252': attribute type 1 has an invalid length. [ 315.323872][T12705] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.3252'. [ 315.345595][T12705] netlink: 'syz.4.3252': attribute type 2 has an invalid length. [ 315.371338][T12705] netlink: 'syz.4.3252': attribute type 1 has an invalid length. [ 316.108990][ T48] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 316.296503][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 316.313289][ T48] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 316.340901][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.370752][ T48] usb 5-1: Product: syz [ 316.384604][ T48] usb 5-1: Manufacturer: syz [ 316.404289][ T48] usb 5-1: SerialNumber: syz [ 316.424308][ T48] r8152-cfgselector 5-1: Unknown version 0x0000 [ 316.434816][ T48] r8152-cfgselector 5-1: config 0 descriptor?? [ 316.496155][T12738] wireguard0: entered promiscuous mode [ 316.502719][T12738] wireguard0: entered allmulticast mode [ 316.699806][ T48] r8152-cfgselector 5-1: Needed 2 retries to read version [ 316.722691][ T48] r8152-cfgselector 5-1: Unknown version 0x0000 [ 316.737617][ T48] r8152-cfgselector 5-1: bad CDC descriptors [ 316.919974][ T5369] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 317.351597][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3270'. [ 317.479184][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.485662][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.755339][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 317.790787][T12762] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 317.790787][T12762] The task syz.4.3273 (12762) triggered the difference, watch for misbehavior. [ 317.929979][T12764] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.045759][T12768] program syz.3.3278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.516800][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 318.696775][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 318.713123][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.744151][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.767155][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 318.778237][ T25] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 318.798930][ T25] usb 4-1: Product: syz [ 318.803368][ T25] usb 4-1: Manufacturer: syz [ 318.819799][ T25] usb 4-1: config 0 descriptor?? [ 319.272744][ T25] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0x0 [ 319.276607][T12807] netlink: 'syz.4.3294': attribute type 10 has an invalid length. [ 319.305527][ T25] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0x0 [ 319.356857][ T25] kovaplus 0003:1E7D:2D50.0018: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 319.387519][ T53] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.490768][ T25] kovaplus 0003:1E7D:2D50.0018: couldn't init struct kovaplus_device [ 319.528778][ T25] kovaplus 0003:1E7D:2D50.0018: couldn't install mouse [ 319.558054][ T25] kovaplus 0003:1E7D:2D50.0018: probe with driver kovaplus failed with error -71 [ 319.581854][ T25] usb 4-1: USB disconnect, device number 25 [ 320.193025][T12841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 320.737077][T12856] program syz.3.3316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.371963][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 321.835492][ T29] audit: type=1326 audit(2000000228.530:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 321.857108][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.897413][ T29] audit: type=1326 audit(2000000228.530:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 321.947703][ T29] audit: type=1326 audit(2000000228.530:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 321.973282][ T29] audit: type=1326 audit(2000000228.530:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 321.985920][T12906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3339'. [ 322.001913][ T29] audit: type=1326 audit(2000000228.530:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 322.026232][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.036468][ T29] audit: type=1326 audit(2000000228.530:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 322.056466][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 322.058032][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.073035][ T29] audit: type=1326 audit(2000000228.530:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 322.133083][ T29] audit: type=1326 audit(2000000228.530:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 322.193078][ T29] audit: type=1326 audit(2000000228.530:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 322.245990][ T29] audit: type=1326 audit(2000000228.530:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12896 comm="syz.3.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7fc00000 [ 322.276906][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 322.287056][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 322.352250][ T25] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 322.396433][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.404504][ T25] usb 1-1: Product: syz [ 322.425710][ T25] usb 1-1: Manufacturer: syz [ 322.435786][ T25] usb 1-1: SerialNumber: syz [ 322.457372][ T25] usb 1-1: config 0 descriptor?? [ 322.708635][ T25] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 322.748148][ T25] usb 1-1: USB disconnect, device number 19 [ 323.144698][ T48] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 323.346482][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 323.371889][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.405241][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.423564][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.466812][ T48] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.475935][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.517332][ T48] usb 4-1: config 0 descriptor?? [ 323.953735][ T48] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 323.976032][ T48] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 323.984133][ T48] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 324.001555][ T48] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 324.023735][ T48] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 324.023780][ T48] microsoft 0003:045E:07DA.0019: unknown main item tag 0x5 [ 324.023854][ T48] microsoft 0003:045E:07DA.0019: report is too long [ 324.023882][ T48] microsoft 0003:045E:07DA.0019: item 0 0 0 8 parsing failed [ 324.024801][ T48] microsoft 0003:045E:07DA.0019: parse failed [ 324.024911][ T48] microsoft 0003:045E:07DA.0019: probe with driver microsoft failed with error -22 [ 324.116568][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 324.203748][ T48] usb 4-1: USB disconnect, device number 26 [ 324.358501][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 324.365256][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 324.390874][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.411240][ T25] usb 3-1: config 0 descriptor?? [ 324.793932][T13003] netlink: 'syz.1.3385': attribute type 4 has an invalid length. [ 325.253427][ T25] video4linux radio32: keene_cmd_main failed (-71) [ 325.266786][ T25] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 325.291645][ T25] usb 3-1: USB disconnect, device number 29 [ 325.488599][T13032] Process accounting resumed [ 325.756859][T13042] bridge0: port 3(vlan3) entered blocking state [ 325.767710][T13042] bridge0: port 3(vlan3) entered disabled state [ 325.784461][T13042] vlan3: entered allmulticast mode [ 325.791978][T13042] vlan3: left allmulticast mode [ 326.116839][ T48] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 326.316758][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 326.319066][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 326.336864][ T48] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 326.371288][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.392355][ T48] usb 4-1: Product: syz [ 326.412132][ T48] usb 4-1: Manufacturer: syz [ 326.422344][ T48] usb 4-1: SerialNumber: syz [ 326.447231][ T48] usb 4-1: config 0 descriptor?? [ 326.693191][ T48] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 326.707345][ T48] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 326.745420][ T48] usb 4-1: USB disconnect, device number 27 [ 327.222544][T13088] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 327.878550][T13116] sctp: [Deprecated]: syz.1.3435 (pid 13116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.878550][T13116] Use struct sctp_sack_info instead [ 327.934493][T13118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3438'. [ 328.003608][T13108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.267664][ T5235] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 328.278354][ T5235] Bluetooth: hci5: Injecting HCI hardware error event [ 328.288457][ T5235] Bluetooth: hci5: hardware error 0x00 [ 328.486429][ T5369] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 328.695327][ T5369] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 328.714963][ T5369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.735757][ T5369] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.754491][ T5369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 328.780536][ T5369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.811431][ T5369] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.846682][ T5369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 328.860338][ T5369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.883155][ T5369] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.906440][ T5369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 328.926034][ T5369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.935994][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'. [ 328.945700][ T5369] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 328.966409][ T5369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 328.980863][ T5369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 328.996445][ T5369] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.024361][ T5369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 329.043310][ T5369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.062559][ T5369] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.076431][ T5369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 329.102806][ T5369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.140995][ T5369] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.162884][ T5369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 329.169894][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 329.183706][ T5369] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 329.194427][ T5307] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 329.216923][ T5369] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 329.255295][ T5369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 329.266579][ T5369] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 329.284952][ T5369] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 329.295083][ T5369] usb 1-1: Product: syz [ 329.302952][T13154] random: crng reseeded on system resumption [ 329.314065][ T5369] usb 1-1: Manufacturer: syz [ 329.326462][ T5369] usb 1-1: SerialNumber: syz [ 329.335480][ T5369] usb 1-1: config 0 descriptor?? [ 329.369442][ T5369] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 329.397100][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 329.407562][ T5307] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 329.417289][ T5307] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 329.425421][ T5307] usb 3-1: Product: syz [ 329.430708][ T5307] usb 3-1: Manufacturer: syz [ 329.435464][ T5307] usb 3-1: SerialNumber: syz [ 329.470087][ T5307] usb 3-1: config 0 descriptor?? [ 329.482189][ T5307] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 329.746675][ T5236] usb 1-1: USB disconnect, device number 20 [ 329.764822][ T5236] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 330.092150][ T5307] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 330.343358][ T5276] usb 3-1: USB disconnect, device number 30 [ 330.346760][ T5235] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 330.445238][T13177] netlink: 'syz.4.3465': attribute type 12 has an invalid length. [ 330.465516][T13177] netlink: 'syz.4.3465': attribute type 29 has an invalid length. [ 330.500557][T13177] netlink: 'syz.4.3465': attribute type 2 has an invalid length. [ 330.519962][T13177] netlink: 'syz.4.3465': attribute type 2 has an invalid length. [ 330.561605][T13177] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 330.598307][T13177] netlink: 'syz.4.3465': attribute type 37 has an invalid length. [ 330.625443][T13177] netlink: 'syz.4.3465': attribute type 2 has an invalid length. [ 331.666728][ T5276] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 331.717547][T13231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3490'. [ 331.872441][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 331.908261][ T5276] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 331.930386][ T5276] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 331.954109][ T5276] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 331.977178][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.995598][ T5276] usb 4-1: Product: syz [ 332.004301][ T5276] usb 4-1: Manufacturer: syz [ 332.020650][ T5276] usb 4-1: SerialNumber: syz [ 332.032092][ T5276] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 332.054390][ T5276] dvb-usb: bulk message failed: -22 (3/0) [ 332.098123][ T5276] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.121078][T13246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3497'. [ 332.123463][ T5276] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 332.150407][T13246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3497'. [ 332.159762][ T5276] usb 4-1: media controller created [ 332.194065][ T5276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.262499][ T5276] dvb-usb: bulk message failed: -22 (6/0) [ 332.297594][ T5276] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 332.333161][ T5276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 332.364212][ T5276] dvb-usb: schedule remote query interval to 150 msecs. [ 332.378387][ T5276] dvb-usb: bulk message failed: -22 (3/0) [ 332.416865][ T5276] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 332.466903][ T25] usb 4-1: USB disconnect, device number 28 [ 332.603653][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 332.722193][T13264] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 332.903746][ T5276] kernel read not supported for file /dsp (pid: 5276 comm: kworker/0:3) [ 333.118996][T13280] netlink: 'syz.0.3510': attribute type 1 has an invalid length. [ 333.136231][T13280] netlink: 'syz.0.3510': attribute type 2 has an invalid length. [ 334.137751][ T5236] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 334.347073][ T5236] usb 5-1: Using ep0 maxpacket: 8 [ 334.360108][ T5236] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 334.373059][ T5236] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 334.385976][ T5236] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 334.400654][ T5236] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 334.410170][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.419935][ T5236] usb 5-1: Product: syz [ 334.424156][ T5236] usb 5-1: Manufacturer: syz [ 334.434792][ T5236] usb 5-1: SerialNumber: syz [ 334.488516][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 334.688135][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 334.704897][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.718583][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.730637][ T25] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 334.740055][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.763871][ T25] usb 4-1: config 0 descriptor?? [ 334.870917][ T5236] adutux 5-1:168.0: interrupt endpoints not found [ 334.897039][ T5236] usb 5-1: USB disconnect, device number 23 [ 335.097564][T13339] bond0: Unable to set down delay as MII monitoring is disabled [ 335.203556][ T25] cp2112 0003:10C4:EA90.001A: unbalanced delimiter at end of report description [ 335.218724][ T25] cp2112 0003:10C4:EA90.001A: parse failed [ 335.225891][ T25] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -22 [ 335.495350][ T5307] usb 4-1: USB disconnect, device number 29 [ 335.587085][T13358] program syz.4.3548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.682955][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3549'. [ 335.727111][T13360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3549'. [ 336.236767][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 336.427024][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 336.449894][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.467384][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 336.496948][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 336.522292][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 336.553242][ T25] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 336.591234][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.620411][ T25] hub 2-1:1.0: bad descriptor, ignoring hub [ 336.644203][ T25] hub 2-1:1.0: probe with driver hub failed with error -5 [ 336.653109][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 336.668327][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 336.688194][ T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 336.703602][ T25] cdc_wdm 2-1:1.0: Unknown control protocol [ 337.017085][ T5307] usb 2-1: USB disconnect, device number 25 [ 337.276923][ T5276] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 337.479409][ T5276] usb 5-1: Using ep0 maxpacket: 8 [ 337.496645][ T5276] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 337.505764][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.539087][ T5276] usb 5-1: Product: syz [ 337.543335][ T5276] usb 5-1: Manufacturer: syz [ 337.562390][ T5276] usb 5-1: SerialNumber: syz [ 337.573897][T13429] can0: slcan on ttyS3. [ 337.587772][ T5276] usb 5-1: config 0 descriptor?? [ 337.599952][ T5276] gspca_main: se401-2.14.0 probing 047d:5003 [ 337.715068][T13432] program syz.0.3581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.727334][T13429] can0 (unregistered): slcan off ttyS3. [ 337.924327][T13438] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 338.573621][T13472] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 338.593433][ T5276] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 338.689907][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3603'. [ 338.700456][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3603'. [ 338.718138][T13479] input: syz0 as /devices/virtual/input/input40 [ 338.756470][ T5369] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 338.992009][ T5369] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 339.001615][ T5369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.013570][ T5369] usb 4-1: config 0 descriptor?? [ 339.113017][T13496] netlink: 'syz.2.3611': attribute type 1 has an invalid length. [ 339.122646][T13496] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3611'. [ 339.243657][ T5369] [drm] vendor descriptor length:6 data:06 5f 14 24 49 ef 00 00 00 00 00 [ 339.255569][ T5369] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 339.265681][ T5276] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 339.273574][ T5276] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 339.285471][ T5276] usb 5-1: USB disconnect, device number 24 [ 339.416551][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 339.454932][ T5369] [drm:udl_init] *ERROR* Selecting channel failed [ 339.492505][ T5369] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 339.502087][ T5369] [drm] Initialized udl on minor 2 [ 339.514697][ T5369] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 339.523698][ T5369] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 339.535347][ T5276] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 339.550560][ T5369] usb 4-1: USB disconnect, device number 30 [ 339.557494][ T5276] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 339.598265][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 339.621232][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.652075][ T25] usb 2-1: config 3 has an invalid interface number: 238 but max is 0 [ 339.667459][ T25] usb 2-1: config 3 has no interface number 0 [ 339.674416][ T25] usb 2-1: config 3 interface 238 altsetting 6 has a duplicate endpoint with address 0x86, skipping [ 339.710201][ T25] usb 2-1: config 3 interface 238 has no altsetting 0 [ 339.738757][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=2010, bcdDevice=40.8b [ 339.747936][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.756073][ T25] usb 2-1: Product: syz [ 339.760428][ T25] usb 2-1: Manufacturer: syz [ 339.765238][ T25] usb 2-1: SerialNumber: syz [ 339.775861][T13498] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 340.019855][ T25] smsusb:smsusb_probe: board id=9, interface number 238 [ 340.046924][ T25] usb 2-1: USB disconnect, device number 26 [ 341.222906][T13541] ieee802154 phy0 wpan0: encryption failed: -90 [ 341.808703][ T48] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 341.987356][T13575] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 342.010265][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 342.020503][T13576] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3644'. [ 342.036648][T13576] netem: invalid attributes len -24 [ 342.039478][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.062679][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.074010][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 342.097021][ T48] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 342.115462][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.175930][ T48] usb 5-1: config 0 descriptor?? [ 342.244498][T13586] IPv6: Can't replace route, no match found [ 342.620540][ T48] pyra 0003:1E7D:2C24.001B: item fetching failed at offset 5/7 [ 342.637185][ T48] pyra 0003:1E7D:2C24.001B: parse failed [ 342.652665][ T48] pyra 0003:1E7D:2C24.001B: probe with driver pyra failed with error -22 [ 342.662891][ T5277] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 342.868541][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 342.886518][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 342.909028][ T48] usb 5-1: USB disconnect, device number 25 [ 342.924295][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 342.937103][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 342.949419][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 342.978304][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 342.989110][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 342.999404][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 342.999423][ T29] audit: type=1326 audit(2000000249.690:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.035803][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.062475][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 343.075844][ T29] audit: type=1326 audit(2000000249.700:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.075906][ T29] audit: type=1326 audit(2000000249.700:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.075957][ T29] audit: type=1326 audit(2000000249.700:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.076018][ T29] audit: type=1326 audit(2000000249.730:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.076067][ T29] audit: type=1326 audit(2000000249.730:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.076118][ T29] audit: type=1326 audit(2000000249.730:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.076166][ T29] audit: type=1326 audit(2000000249.730:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.076217][ T29] audit: type=1326 audit(2000000249.730:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.076267][ T29] audit: type=1326 audit(2000000249.730:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13606 comm="syz.1.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x7ffc0000 [ 343.312487][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 343.325048][ T5277] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 343.333726][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 343.344009][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 343.385099][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 343.409565][ T5277] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 343.419921][T13615] vlan2: entered promiscuous mode [ 343.436881][ T5277] usb 1-1: string descriptor 0 read error: -22 [ 343.441236][T13615] vlan2: entered allmulticast mode [ 343.443543][ T5277] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.479028][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.517974][ T5277] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 343.772558][ T5369] usb 1-1: USB disconnect, device number 21 [ 344.531147][T13650] io-wq is not configured for unbound workers [ 345.027092][ T5277] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 345.286460][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 345.308258][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.345261][ T5277] usb 4-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 345.378147][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.414422][ T5277] usb 4-1: config 0 descriptor?? [ 345.434208][ T5277] r8712u: register rtl8712_netdev_ops to netdev_ops [ 345.446151][ T5277] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 345.462159][T13676] netlink: 'syz.0.3691': attribute type 16 has an invalid length. [ 345.496831][T13676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3691'. [ 345.943810][ T5277] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 345.961127][ T5277] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 345.986953][ T5277] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 346.300279][ T25] usb 4-1: USB disconnect, device number 31 [ 346.765227][T13711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.796795][T13711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.818177][T13711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.836107][T13711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.996637][ T5307] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 347.206431][ T5307] usb 5-1: Using ep0 maxpacket: 16 [ 347.215523][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.226450][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 347.256809][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.258529][T13721] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 347.269207][ T5307] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 347.299802][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.337899][ T5307] usb 5-1: config 0 descriptor?? [ 347.410477][ T25] usb 1-1: config 0 has no interfaces? [ 347.416962][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 347.426108][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.459674][ T25] usb 1-1: config 0 descriptor?? [ 347.567930][ T53] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 347.680916][ T25] usb 1-1: USB disconnect, device number 22 [ 347.793490][ T5307] ntrig 0003:1B96:0008.001C: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 347.993890][ T5307] ntrig 0003:1B96:0008.001C: Firmware version: 2.13.12.1.7 (35a5 3780) [ 348.146630][ T5369] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 348.222526][ T5307] usb 5-1: USB disconnect, device number 26 [ 348.345019][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'. [ 348.366616][ T5369] usb 3-1: Using ep0 maxpacket: 8 [ 348.377009][ T5369] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.406253][ T5369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.429627][ T5369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 348.443472][ T5369] usb 3-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 348.453530][ T5369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.474591][ T5369] usb 3-1: Product: syz [ 348.480290][ T5369] usb 3-1: Manufacturer: syz [ 348.485080][ T5369] usb 3-1: SerialNumber: syz [ 348.505417][ T5369] usb 3-1: config 0 descriptor?? [ 348.742494][ T5369] radio-si470x 3-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 348.779346][T13746] loop0: detected capacity change from 0 to 1 [ 348.813124][T13746] Dev loop0: unable to read RDB block 1 [ 348.830564][T13746] loop0: unable to read partition table [ 348.853299][T13746] loop0: partition table beyond EOD, truncated [ 348.896451][T13746] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 348.896451][T13746] ) failed (rc=-5) [ 348.951211][ T5369] radio-si470x 3-1:0.0: software version 98, hardware version 86 [ 349.160927][ T5369] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 349.203633][ T5369] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 349.226712][ T5369] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 349.235668][ T5369] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 349.292184][ T5369] usb 3-1: USB disconnect, device number 31 [ 350.376857][T13784] netlink: 'syz.4.3741': attribute type 14 has an invalid length. [ 351.353857][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3748'. [ 351.388397][ T53] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.904604][T13817] tipc: Enabling of bearer rejected, failed to enable media [ 351.976652][T13819] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 351.984441][T13819] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3755'. [ 352.888216][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 354.057145][ T5369] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 354.256483][ T5369] usb 3-1: Using ep0 maxpacket: 16 [ 354.270738][ T5369] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 354.286474][ T5369] usb 3-1: config 0 has no interface number 0 [ 354.298213][ T5369] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.337698][ T5369] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.349979][ T5369] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 354.359685][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 354.369556][ T5369] usb 3-1: Product: syz [ 354.377271][ T5369] usb 3-1: SerialNumber: syz [ 354.394039][ T5369] usb 3-1: config 0 descriptor?? [ 354.406224][ T5369] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 354.419833][ T5369] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input41 [ 354.806025][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.813587][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.822485][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.829700][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.836892][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.844102][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.851290][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.858571][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.865799][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.873131][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 354.887580][ T5369] usb 3-1: USB disconnect, device number 32 [ 354.887641][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 354.950777][ T5369] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 355.619557][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 355.697101][ T5307] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 355.848407][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.876803][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.916735][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 355.917317][ T5307] usb 1-1: Using ep0 maxpacket: 16 [ 355.948432][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.970070][ T5307] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 355.981824][ T25] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 355.986463][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.013278][ T5307] usb 1-1: Product: syz [ 356.019190][ T29] audit: type=1400 audit(2000000262.720:326): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13960 comm="syz.3.3818" src=1 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 356.029412][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.050168][ T5307] usb 1-1: Manufacturer: syz [ 356.067882][ T5307] usb 1-1: SerialNumber: syz [ 356.081814][ T25] usb 5-1: Product: syz [ 356.082063][ T5307] usb 1-1: config 0 descriptor?? [ 356.106459][ T25] usb 5-1: Manufacturer: syz [ 356.111134][ T25] usb 5-1: SerialNumber: syz [ 356.121464][ T25] usb 5-1: config 0 descriptor?? [ 356.126574][ T5307] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 356.169215][ T25] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 356.186871][ T25] em28xx 5-1:0.0: Video interface 0 found: isoc [ 356.324640][ T29] audit: type=1326 audit(2000000263.020:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13965 comm="syz.3.3820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x0 [ 356.359643][ T5276] usb 1-1: USB disconnect, device number 23 [ 356.507933][ T25] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 356.593133][ T25] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 356.608665][ T25] em28xx 5-1:0.0: board has no eeprom [ 356.677025][ T25] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 356.706088][ T25] em28xx 5-1:0.0: analog set to isoc mode. [ 356.715077][ T48] em28xx 5-1:0.0: Registering V4L2 extension [ 356.739394][ T25] usb 5-1: USB disconnect, device number 27 [ 356.755222][ T25] em28xx 5-1:0.0: Disconnecting em28xx [ 356.833957][ T48] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 356.844719][ T48] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 356.859865][ T48] em28xx 5-1:0.0: No AC97 audio processor [ 356.894353][ T48] usb 5-1: Decoder not found [ 356.903329][ T48] em28xx 5-1:0.0: failed to create media graph [ 356.930572][ T48] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 356.956204][ T48] em28xx 5-1:0.0: Remote control support is not available for this card. [ 356.966022][ T25] em28xx 5-1:0.0: Closing input extension [ 357.008302][ T25] em28xx 5-1:0.0: Freeing device [ 357.327701][T13994] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 357.689110][T14010] netlink: 'syz.0.3840': attribute type 15 has an invalid length. [ 358.259023][ T29] audit: type=1326 audit(2000000264.950:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14039 comm="syz.3.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 358.324667][ T29] audit: type=1326 audit(2000000264.950:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14039 comm="syz.3.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 358.361228][T14047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3858'. [ 358.390625][ T29] audit: type=1326 audit(2000000265.000:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14039 comm="syz.3.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 358.444606][ T29] audit: type=1326 audit(2000000265.000:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14039 comm="syz.3.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 358.474541][ T5276] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 358.512125][ T29] audit: type=1326 audit(2000000265.000:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14039 comm="syz.3.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 358.566031][ T29] audit: type=1326 audit(2000000265.000:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14039 comm="syz.3.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 358.638377][ T29] audit: type=1326 audit(2000000265.010:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14039 comm="syz.3.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 358.686783][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 358.703546][ T5276] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 358.714960][ T5276] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 358.727816][ T29] audit: type=1326 audit(2000000265.010:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14039 comm="syz.3.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 358.757692][ T5276] usb 5-1: config 1 has no interface number 1 [ 358.777978][ T5276] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 358.808862][ T5276] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.849580][ T5276] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.866765][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.897181][ T5276] usb 5-1: Product: syz [ 358.901421][ T5276] usb 5-1: Manufacturer: syz [ 358.915433][ T5276] usb 5-1: SerialNumber: syz [ 359.186841][ T5276] usb 5-1: 2:1 : invalid channels 0 [ 359.206831][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 359.247738][ T5276] usb 5-1: USB disconnect, device number 28 [ 359.435414][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.469182][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.489609][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 359.517805][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.534687][ T25] usb 3-1: config 0 descriptor?? [ 359.972470][ T25] apple 0003:05AC:0262.001D: bogus close delimiter [ 359.990986][ T25] apple 0003:05AC:0262.001D: item 0 1 2 10 parsing failed [ 360.012006][ T25] apple 0003:05AC:0262.001D: parse failed [ 360.028331][ T25] apple 0003:05AC:0262.001D: probe with driver apple failed with error -22 [ 360.092667][T14087] netlink: 'syz.0.3876': attribute type 1 has an invalid length. [ 360.122752][T14087] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3876'. [ 360.151178][T14087] netlink: 'syz.0.3876': attribute type 1 has an invalid length. [ 360.183710][ T5369] usb 3-1: USB disconnect, device number 33 [ 360.343284][T14096] netlink: 'syz.4.3880': attribute type 11 has an invalid length. [ 360.482111][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3883'. [ 361.350460][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 361.350480][ T29] audit: type=1400 audit(2000000268.050:339): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=14127 comm="syz.3.3893" daddr=255.255.255.255 dest=20002 netif=wpan0 [ 361.486015][T14132] Invalid/unusable pipe [ 361.576567][T14134] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 361.583167][T14134] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 361.626043][T14134] vhci_hcd vhci_hcd.0: Device attached [ 361.646472][ T29] audit: type=1400 audit(2000000268.340:340): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14138 comm="syz.0.3897" src=1280 dest=20002 netif=wpan0 [ 361.690299][T14135] vhci_hcd: connection closed [ 361.690774][ T1304] vhci_hcd: stop threads [ 361.725698][ T1304] vhci_hcd: release socket [ 361.760626][ T1304] vhci_hcd: disconnect device [ 361.816590][ T5307] vhci_hcd: vhci_device speed not set [ 362.840312][ T29] audit: type=1326 audit(2000000269.540:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.3.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 362.923575][ T29] audit: type=1326 audit(2000000269.540:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.3.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 362.982229][ T29] audit: type=1326 audit(2000000269.610:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.3.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 363.034439][ T29] audit: type=1326 audit(2000000269.610:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.3.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 363.094850][ T29] audit: type=1326 audit(2000000269.610:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.3.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 363.117504][ T29] audit: type=1326 audit(2000000269.610:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.3.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 363.141098][ T29] audit: type=1326 audit(2000000269.610:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.3.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429337def9 code=0x7ffc0000 [ 363.167842][ T29] audit: type=1326 audit(2000000269.610:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.3.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4293374ea7 code=0x7ffc0000 [ 363.500757][T14188] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3917'. [ 363.541126][T14188] netlink: 'syz.3.3917': attribute type 1 has an invalid length. [ 364.471415][T14230] sctp: [Deprecated]: syz.4.3938 (pid 14230) Use of int in max_burst socket option deprecated. [ 364.471415][T14230] Use struct sctp_assoc_value instead [ 364.756087][T14241] use of bytesused == 0 is deprecated and will be removed in the future, [ 364.767826][T14241] use the actual size instead. [ 365.834647][T14297] sch_fq: defrate 0 ignored. [ 365.936626][ T5369] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 365.977236][T14299] kvm: user requested TSC rate below hardware speed [ 366.126475][ T5369] usb 1-1: Using ep0 maxpacket: 8 [ 366.156036][ T5369] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.176913][ T5369] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.206740][ T5369] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.236405][ T5369] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.271306][ T5369] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.299462][ T5369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.549010][ T5369] usb 1-1: GET_CAPABILITIES returned 0 [ 366.554579][ T5369] usbtmc 1-1:16.0: can't read capabilities [ 366.765848][ T25] usb 1-1: USB disconnect, device number 24 [ 367.030522][T14332] program syz.3.3982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.694431][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 367.694451][ T29] audit: type=1326 audit(2000000274.390:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.1.3993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x0 [ 367.802370][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3992'. [ 368.031795][T14367] netlink: 'syz.4.3999': attribute type 8 has an invalid length. [ 368.886485][ T5276] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 369.025507][T14415] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 369.087850][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 369.114701][ T5276] usb 1-1: unable to get BOS descriptor or descriptor too short [ 369.126238][ T5276] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 369.134943][ T5276] usb 1-1: config 8 has no interface number 0 [ 369.143938][ T5276] usb 1-1: config 8 interface 255 has no altsetting 0 [ 369.158307][ T5276] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 369.175941][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.190846][ T29] audit: type=1326 audit(2000000275.890:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14419 comm="syz.1.4020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x0 [ 369.212564][ T5276] usb 1-1: Product: syz [ 369.216899][ T5276] usb 1-1: Manufacturer: syz [ 369.221530][ T5276] usb 1-1: SerialNumber: syz [ 369.427505][ T29] audit: type=1326 audit(2000000276.130:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14430 comm="syz.2.4024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc073b7def9 code=0x0 [ 369.939654][T14449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4032'. [ 370.097982][ T5276] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 370.125189][ T5276] usb 1-1: USB disconnect, device number 25 [ 370.342973][T14464] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 370.840838][ T29] audit: type=1400 audit(2000000277.540:514): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=14482 comm="syz.0.4048" [ 370.985487][T14492] netlink: 'syz.2.4051': attribute type 6 has an invalid length. [ 371.406895][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 371.606873][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 371.622542][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 371.648306][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.679275][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.699529][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 371.720128][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 371.742913][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 371.764403][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.788729][ T25] usb 3-1: config 0 descriptor?? [ 371.847346][ T5235] Bluetooth: hci6: urb ffff8880277e5d00 submission failed (90) [ 372.023043][ T48] usb 3-1: USB disconnect, device number 34 [ 374.478934][T14584] pimreg12: entered allmulticast mode [ 374.536997][T14583] pimreg12: left allmulticast mode [ 375.384119][T14609] sit1: entered promiscuous mode [ 375.408697][T14609] sit1: entered allmulticast mode [ 376.135728][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4115'. [ 376.152285][T14633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4115'. [ 376.163874][T14633] sch_fq: defrate 0 ignored. [ 376.359414][T14644] ip6gretap0: entered promiscuous mode [ 376.401556][T14644] ip6gretap0: left promiscuous mode [ 376.484117][T14647] syz.2.4119 (14647) used greatest stack depth: 17520 bytes left [ 377.445483][ T29] audit: type=1326 audit(2000000284.130:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14698 comm="syz.1.4144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd61d7def9 code=0x0 [ 377.726494][ T48] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 377.771428][T14711] could not allocate digest TFM handle sha512-neon [ 377.903704][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4151'. [ 377.921666][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.933519][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.943649][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.976457][ T48] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 377.985555][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.998631][ T5369] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 378.009310][ T48] usb 4-1: config 0 descriptor?? [ 378.187095][ T5369] usb 1-1: Using ep0 maxpacket: 8 [ 378.209208][ T5369] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 378.227345][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.235822][ T5369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.247031][ T5369] usb 1-1: Product: syz [ 378.251244][ T5369] usb 1-1: Manufacturer: syz [ 378.258640][ T5369] usb 1-1: SerialNumber: syz [ 378.263508][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.275974][ T5369] usb 1-1: config 0 descriptor?? [ 378.285519][ T5369] option 1-1:0.0: GSM modem (1-port) converter detected [ 378.287970][ T48] usbhid 4-1:0.0: can't add hid device: -71 [ 378.307628][ T48] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 378.323272][ T48] usb 4-1: USB disconnect, device number 32 [ 378.537732][ T5369] usb 1-1: USB disconnect, device number 26 [ 378.545977][ T5369] option 1-1:0.0: device disconnected [ 378.607795][T14737] bridge0: port 2(bridge_slave_1) entered listening state [ 378.627115][ T1304] bond0: (slave netdevsim0): link status down for interface, disabling it in 4 ms [ 378.638142][T14738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 378.678980][ T1304] bond0: (slave netdevsim0): link status down for interface, disabling it in 4 ms [ 378.694827][ T1304] bond0: (slave netdevsim0): invalid new link 1 on slave [ 378.751428][ T12] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 378.898579][ T48] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 378.912738][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.118610][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 379.128510][ T48] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.147654][ T48] usb 4-1: config 0 has no interface number 0 [ 379.153839][ T48] usb 4-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 379.159124][T14758] netlink: 'syz.1.4170': attribute type 1 has an invalid length. [ 379.178511][ T48] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 256, setting to 64 [ 379.186502][T14758] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.4170'. [ 379.190006][ T48] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.210398][T14758] netlink: 'syz.1.4170': attribute type 1 has an invalid length. [ 379.218874][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 379.232774][ T48] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.244209][ T48] usb 4-1: config 0 interface 1 has no altsetting 0 [ 379.251324][ T48] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 379.260690][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.281887][ T48] usb 4-1: config 0 descriptor?? [ 379.301553][ T48] hso 4-1:0.1: Failed to find BULK IN ep [ 379.416537][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 379.424092][ T25] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 379.434851][ T25] usb 3-1: config 0 has no interface number 0 [ 379.451337][ T25] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 379.464256][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.483009][ T25] usb 3-1: Product: syz [ 379.493059][ T25] usb 3-1: Manufacturer: syz [ 379.503200][ T25] usb 3-1: SerialNumber: syz [ 379.520019][ T25] usb 3-1: config 0 descriptor?? [ 379.525379][ T8] usb 4-1: USB disconnect, device number 33 [ 379.754013][ T25] radio-si470x 3-1:0.35: this is not a si470x device. [ 379.819394][ T25] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 380.032492][ T25] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 380.057092][ T25] radio-raremono 3-1:0.35: V4L2 device registered as radio32 [ 380.087512][ T25] usb 3-1: USB disconnect, device number 35 [ 380.100756][ T25] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 380.184633][T14794] hsr0: entered promiscuous mode [ 380.191978][T14794] macvlan5: entered promiscuous mode [ 380.207021][T14794] macvlan5: entered allmulticast mode [ 380.212464][T14794] hsr0: entered allmulticast mode [ 380.224857][T14794] hsr_slave_0: entered allmulticast mode [ 380.232689][T14794] hsr_slave_1: entered allmulticast mode [ 380.262085][T14794] hsr0: left allmulticast mode [ 380.279033][T14794] hsr_slave_0: left allmulticast mode [ 380.296468][T14794] hsr_slave_1: left allmulticast mode [ 381.309263][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.321780][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.333399][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.342102][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.352651][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 381.363996][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.475990][T14817] lo speed is unknown, defaulting to 1000 [ 381.892164][T14817] chnl_net:caif_netlink_parms(): no params data found [ 382.087960][T14817] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.111966][T14817] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.137291][T14817] bridge_slave_0: entered allmulticast mode [ 382.155293][T14817] bridge_slave_0: entered promiscuous mode [ 382.185805][T14817] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.193716][ T5236] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 382.224872][T14817] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.239439][T14817] bridge_slave_1: entered allmulticast mode [ 382.260889][T14817] bridge_slave_1: entered promiscuous mode [ 382.402044][T14817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.403821][ T5236] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 382.422754][ T5236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.432427][ T5236] usb 3-1: Product: syz [ 382.446133][ T5236] usb 3-1: Manufacturer: syz [ 382.450706][T14817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.460120][ T5236] usb 3-1: SerialNumber: syz [ 382.468058][ T5236] usb 3-1: config 0 descriptor?? [ 382.497322][T14852] netlink: 'syz.3.4209': attribute type 25 has an invalid length. [ 382.517703][T14852] netlink: 'syz.3.4209': attribute type 8 has an invalid length. [ 382.549546][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4209'. [ 382.728341][T14817] team0: Port device team_slave_0 added [ 382.779547][T14817] team0: Port device team_slave_1 added [ 382.801541][ T5236] usb 3-1: USB disconnect, device number 36 [ 382.913782][T14817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.935207][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.971833][T14817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.995765][T14817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.004954][T14817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.031809][T14817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.117601][T14817] hsr_slave_0: entered promiscuous mode [ 383.125660][T14817] hsr_slave_1: entered promiscuous mode [ 383.137896][T14817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.145520][T14817] Cannot create hsr debugfs directory [ 383.256634][ T25] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 383.327344][T14817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.389316][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 383.428968][ T5369] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 383.446912][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 383.454908][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 383.467148][ T5235] Bluetooth: hci6: command tx timeout [ 383.474684][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.485078][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.488188][T14817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.494852][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 383.517394][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 383.527310][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 383.538825][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.549829][ T25] usb 1-1: config 0 descriptor?? [ 383.567516][ T5235] Bluetooth: hci7: urb ffff88823bc58f40 submission failed (90) [ 383.656167][T14817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.668413][ T5369] usb 2-1: Using ep0 maxpacket: 8 [ 383.693353][ T5369] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 383.717535][ T5369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.727873][ T5369] usb 2-1: Product: syz [ 383.732125][ T5369] usb 2-1: Manufacturer: syz [ 383.743391][ T5369] usb 2-1: SerialNumber: syz [ 383.763893][ T5369] usb 2-1: config 0 descriptor?? [ 383.874263][ T5276] usb 1-1: USB disconnect, device number 27 [ 383.886993][T14817] bond0: (slave netdevsim0): Releasing backup interface [ 383.937798][T14817] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 383.958462][T14817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.030433][ T5369] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 384.297345][T14817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.313938][T14817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.341634][T14817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.384749][T14817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.434147][ T5369] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 384.456881][ T5369] usb 2-1: USB disconnect, device number 27 [ 384.779721][T14817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.847516][T14877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 384.854106][T14877] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 384.881990][T14817] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.886702][T14877] vhci_hcd vhci_hcd.0: Device attached [ 384.919497][T14878] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 384.920894][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.933695][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.948570][ T35] vhci_hcd: stop threads [ 384.952877][ T35] vhci_hcd: release socket [ 384.958561][ T35] vhci_hcd: disconnect device [ 384.974289][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.981908][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.547018][ T5235] Bluetooth: hci6: command tx timeout [ 385.648464][T14817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.067722][T14926] program syz.0.4238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.306047][T14817] veth0_vlan: entered promiscuous mode [ 386.363160][T14817] veth1_vlan: entered promiscuous mode [ 386.417231][ T5369] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 386.450082][T14817] veth0_macvtap: entered promiscuous mode [ 386.476005][T14817] veth1_macvtap: entered promiscuous mode [ 386.542206][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.563182][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.597094][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.626074][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.648504][ T5369] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 386.668932][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 386.682144][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.706455][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.727825][ T5369] usb 3-1: config 0 descriptor?? [ 386.745955][ T5369] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 386.752657][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.783897][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.808773][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.840194][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.862695][T14817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.955088][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.005641][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.036933][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.063326][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.102697][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.121656][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.135499][T14817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.165354][T14817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.194104][T14817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.239573][T14954] wlan1: mtu greater than device maximum [ 387.249478][T14954] team0: Device wlan1 failed to change mtu [ 387.337935][T14817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.376388][T14817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.405872][T14817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.425761][T14817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.437785][ T5369] gspca_stv06xx: vv6410 sensor detected [ 387.598522][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.613810][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.627046][ T5235] Bluetooth: hci6: command tx timeout [ 387.695193][ T1304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.730262][ T1304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.741747][ T5369] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 387.788331][ T5369] usb 3-1: USB disconnect, device number 37 [ 388.195941][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4265'. [ 389.707153][ T5235] Bluetooth: hci6: command tx timeout [ 391.369493][T15115] delete_channel: no stack [ 391.408902][T15114] delete_channel: no stack [ 392.143222][T15147] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.4325'. [ 392.356863][T15153] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4326'. [ 392.413392][T15153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4326'. [ 392.456734][T15160] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 392.496248][T15160] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 392.552792][T15160] Error parsing options; rc = [-22] [ 393.086585][T15190] netlink: 'syz.3.4342': attribute type 9 has an invalid length. [ 394.396152][T15234] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4360'. [ 394.568638][T15241] batadv_slave_1: entered allmulticast mode [ 394.577867][T15241] batadv_slave_1: left allmulticast mode [ 394.667169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.827182][T15253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4369'. [ 394.846877][T15251] netlink: 'syz.4.4368': attribute type 11 has an invalid length. [ 395.212823][ T29] audit: type=1326 audit(2000000301.900:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.266625][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4377'. [ 395.294024][ T29] audit: type=1326 audit(2000000301.900:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.327650][T15278] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4380'. [ 395.364209][ T29] audit: type=1326 audit(2000000301.930:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.430635][ T29] audit: type=1326 audit(2000000301.940:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.527570][ T29] audit: type=1326 audit(2000000301.940:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.572535][ T29] audit: type=1326 audit(2000000301.940:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.612345][ T29] audit: type=1326 audit(2000000301.940:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.635894][ T29] audit: type=1326 audit(2000000301.940:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.698386][ T29] audit: type=1326 audit(2000000301.940:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.746637][ T29] audit: type=1326 audit(2000000301.940:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15271 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c17def9 code=0x7ffc0000 [ 395.769769][ T5276] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 395.836828][ T5369] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 395.920857][T15301] Bluetooth: MGMT ver 1.23 [ 395.987094][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 396.001569][ T5276] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 396.014883][ T5276] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 396.027615][ T5369] usb 5-1: Using ep0 maxpacket: 8 [ 396.049815][ T5369] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.066459][ T5276] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 396.089204][ T5369] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 396.103671][ T5369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.116920][ T5276] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 396.137375][ T5369] usb 5-1: Product: syz [ 396.141618][ T5369] usb 5-1: Manufacturer: syz [ 396.146264][ T5369] usb 5-1: SerialNumber: syz [ 396.155514][ T5276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.166388][ T5276] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 396.175473][ T5276] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 396.185556][ T5276] usb 3-1: Product: syz [ 396.191647][ T5369] usb 5-1: config 0 descriptor?? [ 396.199277][ T5276] usb 3-1: Manufacturer: syz [ 396.204204][ T5276] usb 3-1: SerialNumber: syz [ 396.214459][ T5369] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 396.229533][ T5276] usb 3-1: config 0 descriptor?? [ 396.238050][ T5276] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 396.257413][ T5276] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 396.377619][ T5369] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 396.530432][ T5276] usb 3-1: USB disconnect, device number 38 [ 396.545882][ T5276] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 396.861453][T15324] netlink: 'syz.3.4402': attribute type 8 has an invalid length. [ 397.034374][T15326] team0: No ports can be present during mode change [ 397.158888][ T5369] usb 5-1: device descriptor read/64, error -71 [ 397.448611][T15342] block nbd2: NBD_DISCONNECT [ 397.454809][T15342] block nbd2: Send disconnect failed -22 [ 397.475712][ T5369] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 397.491056][T15340] block nbd2: Disconnected due to user request. [ 397.507643][T15340] block nbd2: shutting down sockets [ 397.514764][ T48] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 397.706953][ T5235] Bluetooth: hci6: command tx timeout [ 397.712511][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 397.729744][ T48] usb 2-1: unable to get BOS descriptor or descriptor too short [ 397.755702][ T48] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 397.766266][ T48] usb 2-1: config 8 has no interface number 0 [ 397.772579][ T48] usb 2-1: config 8 interface 255 has no altsetting 0 [ 397.783420][ T48] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 397.793402][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.815713][ T48] usb 2-1: Product: syz [ 397.820667][ T48] usb 2-1: Manufacturer: syz [ 397.825377][ T48] usb 2-1: SerialNumber: syz [ 398.089336][ T5369] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 398.100867][ T5369] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 398.132205][ T5369] usb 5-1: USB disconnect, device number 29 [ 398.702164][ T48] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 398.742040][ T48] usb 2-1: USB disconnect, device number 28 [ 400.315317][T15445] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4459'. [ 402.595305][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 402.595335][ T29] audit: type=1400 audit(2000000309.290:527): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=15516 comm="syz.0.4491" name="272" dev="tmpfs" ino=1391 [ 402.877121][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 402.892741][T15532] ipvlan2: entered promiscuous mode [ 403.056989][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 403.069516][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.097534][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.129357][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 403.165959][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.196902][ T25] usb 3-1: config 0 descriptor?? [ 403.239003][ T1304] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 403.249552][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 403.265627][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 403.299915][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 403.316694][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.326001][ T8] usb 4-1: Product: syz [ 403.338219][ T8] usb 4-1: Manufacturer: syz [ 403.342986][ T8] usb 4-1: SerialNumber: syz [ 403.363593][ T8] usb 4-1: config 0 descriptor?? [ 403.420296][ T8] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 403.454907][ T8] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 403.550135][T15553] netlink: 'syz.4.4508': attribute type 2 has an invalid length. [ 403.649559][ T25] wacom 0003:056A:00B1.001E: unknown main item tag 0x0 [ 403.673497][ T25] wacom 0003:056A:00B1.001E: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 403.692124][ T25] wacom 0003:056A:00B1.001E: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.2-1/input0 [ 403.712915][ T25] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B1.001E/input/input42 [ 403.923703][ T5276] usb 3-1: USB disconnect, device number 39 [ 403.946679][ T5369] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 404.070681][ T8] em28xx 4-1:0.0: chip ID is em2860 [ 404.182588][ T5369] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 404.202999][ T5369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.222419][ T5369] usb 1-1: Product: syz [ 404.232923][ T5369] usb 1-1: Manufacturer: syz [ 404.240523][ T5369] usb 1-1: SerialNumber: syz [ 404.264294][ T5369] usb 1-1: config 0 descriptor?? [ 404.290034][ T5369] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 028 [ 404.362583][ T8] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 404.384214][ T8] em28xx 4-1:0.0: board has no eeprom [ 404.489402][ T8] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 404.509384][ T8] em28xx 4-1:0.0: dvb set to bulk mode. [ 404.518863][ T5307] em28xx 4-1:0.0: Binding DVB extension [ 404.547689][ T8] usb 4-1: USB disconnect, device number 34 [ 404.570884][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 404.653271][ T5307] em28xx 4-1:0.0: Registering input extension [ 404.710528][ T5369] (null): failure reading functionality [ 404.764706][ T5369] i2c i2c-3: connected i2c-tiny-usb device [ 404.836832][ T5307] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 404.843425][ T5307] Registered IR keymap rc-empty [ 404.898201][ T5307] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 404.941573][ T5307] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 404.972464][ T5369] usb 1-1: USB disconnect, device number 28 [ 405.004829][ T5307] em28xx 4-1:0.0: Input extension successfully initialized [ 405.028186][ T8] em28xx 4-1:0.0: Closing input extension [ 405.111118][T15585] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4522'. [ 405.155110][ T8] em28xx 4-1:0.0: Freeing device [ 405.458150][ T29] audit: type=1326 audit(2000000312.160:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc073b7def9 code=0x7ffc0000 [ 405.516893][ T29] audit: type=1326 audit(2000000312.160:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc073b7def9 code=0x7ffc0000 [ 405.615824][ T29] audit: type=1326 audit(2000000312.200:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc073b7def9 code=0x7ffc0000 [ 405.720528][ T29] audit: type=1326 audit(2000000312.200:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc073b7def9 code=0x7ffc0000 [ 405.754801][ T29] audit: type=1326 audit(2000000312.200:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc073b7def9 code=0x7ffc0000 [ 405.786535][ T29] audit: type=1326 audit(2000000312.200:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc073b7def9 code=0x7ffc0000 [ 405.834659][ T29] audit: type=1326 audit(2000000312.200:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc073b7def9 code=0x7ffc0000 [ 405.869894][ T29] audit: type=1326 audit(2000000312.200:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc073b74ea7 code=0x7ffc0000 [ 405.910445][ T29] audit: type=1326 audit(2000000312.200:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15597 comm="syz.2.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc073b19869 code=0x7ffc0000 [ 406.103908][T15614] [ 406.106323][T15614] ===================================================== [ 406.113374][T15614] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 406.120954][T15614] 6.11.0-syzkaller #0 Not tainted [ 406.126008][T15614] ----------------------------------------------------- [ 406.133015][T15614] syz.3.4534/15614 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 406.140780][T15614] ffff888020f592b8 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x19e/0x4d0 [ 406.149552][T15614] [ 406.149552][T15614] and this task is already holding: [ 406.156953][T15614] ffff88802a56a230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 406.166673][T15614] which would create a new lock dependency: [ 406.172567][T15614] (&dev->event_lock#2){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 406.180520][T15614] [ 406.180520][T15614] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 406.189968][T15614] (&dev->event_lock#2){..-.}-{2:2} [ 406.190003][T15614] [ 406.190003][T15614] ... which became SOFTIRQ-irq-safe at: [ 406.202906][T15614] lock_acquire+0x1ed/0x550 [ 406.207514][T15614] _raw_spin_lock_irqsave+0xd5/0x120 [ 406.212905][T15614] input_inject_event+0xc5/0x340 [ 406.217967][T15614] led_trigger_event+0x138/0x210 [ 406.222998][T15614] kbd_bh+0x1b5/0x290 [ 406.227072][T15614] tasklet_action_common+0x321/0x4d0 [ 406.232459][T15614] handle_softirqs+0x2c4/0x970 [ 406.237324][T15614] run_ksoftirqd+0xca/0x130 [ 406.241925][T15614] smpboot_thread_fn+0x544/0xa30 [ 406.246959][T15614] kthread+0x2f0/0x390 [ 406.251123][T15614] ret_from_fork+0x4b/0x80 [ 406.255720][T15614] ret_from_fork_asm+0x1a/0x30 [ 406.260585][T15614] [ 406.260585][T15614] to a SOFTIRQ-irq-unsafe lock: [ 406.267692][T15614] (tasklist_lock){.+.+}-{2:2} [ 406.267723][T15614] [ 406.267723][T15614] ... which became SOFTIRQ-irq-unsafe at: [ 406.280352][T15614] ... [ 406.280360][T15614] lock_acquire+0x1ed/0x550 [ 406.287803][T15614] _raw_read_lock+0x36/0x50 [ 406.292410][T15614] __do_wait+0x12d/0x850 [ 406.296747][T15614] do_wait+0x1e9/0x560 [ 406.300913][T15614] kernel_wait+0xe9/0x240 [ 406.305336][T15614] call_usermodehelper_exec_work+0xbd/0x230 [ 406.311339][T15614] process_scheduled_works+0xa2c/0x1830 [ 406.316987][T15614] worker_thread+0x870/0xd30 [ 406.321678][T15614] kthread+0x2f0/0x390 [ 406.325848][T15614] ret_from_fork+0x4b/0x80 [ 406.330369][T15614] ret_from_fork_asm+0x1a/0x30 [ 406.335246][T15614] [ 406.335246][T15614] other info that might help us debug this: [ 406.335246][T15614] [ 406.345481][T15614] Chain exists of: [ 406.345481][T15614] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 406.345481][T15614] [ 406.358461][T15614] Possible interrupt unsafe locking scenario: [ 406.358461][T15614] [ 406.366785][T15614] CPU0 CPU1 [ 406.372178][T15614] ---- ---- [ 406.377545][T15614] lock(tasklist_lock); [ 406.381802][T15614] local_irq_disable(); [ 406.389079][T15614] lock(&dev->event_lock#2); [ 406.396290][T15614] lock(&new->fa_lock); [ 406.403063][T15614] [ 406.406621][T15614] lock(&dev->event_lock#2); [ 406.411499][T15614] [ 406.411499][T15614] *** DEADLOCK *** [ 406.411499][T15614] [ 406.419647][T15614] 6 locks held by syz.3.4534/15614: [ 406.424844][T15614] #0: ffff88802a56c110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x272/0x7c0 [ 406.434009][T15614] #1: ffff88802a56a230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 406.444134][T15614] #2: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 406.453820][T15614] #3: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 406.463413][T15614] #4: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2a/0xc80 [ 406.473528][T15614] #5: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x55/0x4d0 [ 406.482606][T15614] [ 406.482606][T15614] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 406.493019][T15614] -> (&dev->event_lock#2){..-.}-{2:2} { [ 406.499119][T15614] IN-SOFTIRQ-W at: [ 406.503105][T15614] lock_acquire+0x1ed/0x550 [ 406.509280][T15614] _raw_spin_lock_irqsave+0xd5/0x120 [ 406.516233][T15614] input_inject_event+0xc5/0x340 [ 406.522915][T15614] led_trigger_event+0x138/0x210 [ 406.529509][T15614] kbd_bh+0x1b5/0x290 [ 406.535146][T15614] tasklet_action_common+0x321/0x4d0 [ 406.542096][T15614] handle_softirqs+0x2c4/0x970 [ 406.548623][T15614] run_ksoftirqd+0xca/0x130 [ 406.554786][T15614] smpboot_thread_fn+0x544/0xa30 [ 406.561387][T15614] kthread+0x2f0/0x390 [ 406.567120][T15614] ret_from_fork+0x4b/0x80 [ 406.573218][T15614] ret_from_fork_asm+0x1a/0x30 [ 406.579647][T15614] INITIAL USE at: [ 406.583543][T15614] lock_acquire+0x1ed/0x550 [ 406.589626][T15614] _raw_spin_lock_irqsave+0xd5/0x120 [ 406.596491][T15614] input_inject_event+0xc5/0x340 [ 406.602995][T15614] kbd_led_trigger_activate+0xb8/0x100 [ 406.610025][T15614] led_trigger_set+0x582/0x9c0 [ 406.616359][T15614] led_trigger_set_default+0x229/0x260 [ 406.623470][T15614] led_classdev_register_ext+0x6e6/0x8a0 [ 406.630680][T15614] input_leds_connect+0x489/0x630 [ 406.637277][T15614] input_register_device+0xd3b/0x1110 [ 406.644225][T15614] atkbd_connect+0x752/0xa00 [ 406.650504][T15614] serio_driver_probe+0x7f/0xa0 [ 406.656947][T15614] really_probe+0x2b8/0xad0 [ 406.663040][T15614] __driver_probe_device+0x1a2/0x390 [ 406.669917][T15614] driver_probe_device+0x50/0x430 [ 406.676512][T15614] __driver_attach+0x45f/0x710 [ 406.682843][T15614] bus_for_each_dev+0x239/0x2b0 [ 406.689288][T15614] serio_handle_event+0x1c7/0x920 [ 406.695925][T15614] process_scheduled_works+0xa2c/0x1830 [ 406.703071][T15614] worker_thread+0x870/0xd30 [ 406.709247][T15614] kthread+0x2f0/0x390 [ 406.714898][T15614] ret_from_fork+0x4b/0x80 [ 406.720889][T15614] ret_from_fork_asm+0x1a/0x30 [ 406.727248][T15614] } [ 406.729783][T15614] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 406.738844][T15614] [ 406.738844][T15614] the dependencies between the lock to be acquired [ 406.738857][T15614] and SOFTIRQ-irq-unsafe lock: [ 406.752395][T15614] -> (tasklist_lock){.+.+}-{2:2} { [ 406.757736][T15614] HARDIRQ-ON-R at: [ 406.761919][T15614] lock_acquire+0x1ed/0x550 [ 406.768484][T15614] _raw_read_lock+0x36/0x50 [ 406.775204][T15614] __do_wait+0x12d/0x850 [ 406.781470][T15614] do_wait+0x1e9/0x560 [ 406.787548][T15614] kernel_wait+0xe9/0x240 [ 406.793883][T15614] call_usermodehelper_exec_work+0xbd/0x230 [ 406.801782][T15614] process_scheduled_works+0xa2c/0x1830 [ 406.809362][T15614] worker_thread+0x870/0xd30 [ 406.815956][T15614] kthread+0x2f0/0x390 [ 406.822049][T15614] ret_from_fork+0x4b/0x80 [ 406.828473][T15614] ret_from_fork_asm+0x1a/0x30 [ 406.835246][T15614] SOFTIRQ-ON-R at: [ 406.839403][T15614] lock_acquire+0x1ed/0x550 [ 406.845916][T15614] _raw_read_lock+0x36/0x50 [ 406.852435][T15614] __do_wait+0x12d/0x850 [ 406.858687][T15614] do_wait+0x1e9/0x560 [ 406.864848][T15614] kernel_wait+0xe9/0x240 [ 406.871181][T15614] call_usermodehelper_exec_work+0xbd/0x230 [ 406.879080][T15614] process_scheduled_works+0xa2c/0x1830 [ 406.886652][T15614] worker_thread+0x870/0xd30 [ 406.893265][T15614] kthread+0x2f0/0x390 [ 406.899347][T15614] ret_from_fork+0x4b/0x80 [ 406.905775][T15614] ret_from_fork_asm+0x1a/0x30 [ 406.912561][T15614] INITIAL USE at: [ 406.916638][T15614] lock_acquire+0x1ed/0x550 [ 406.923067][T15614] _raw_write_lock_irq+0xd3/0x120 [ 406.930031][T15614] copy_process+0x228b/0x3dc0 [ 406.936664][T15614] kernel_clone+0x223/0x880 [ 406.943101][T15614] user_mode_thread+0x132/0x1a0 [ 406.949889][T15614] rest_init+0x23/0x300 [ 406.955971][T15614] start_kernel+0x47a/0x500 [ 406.962419][T15614] x86_64_start_reservations+0x2a/0x30 [ 406.969803][T15614] x86_64_start_kernel+0x9f/0xa0 [ 406.976752][T15614] common_startup_64+0x13e/0x147 [ 406.983608][T15614] INITIAL READ USE at: [ 406.988112][T15614] lock_acquire+0x1ed/0x550 [ 406.994982][T15614] _raw_read_lock+0x36/0x50 [ 407.001844][T15614] __do_wait+0x12d/0x850 [ 407.008443][T15614] do_wait+0x1e9/0x560 [ 407.014860][T15614] kernel_wait+0xe9/0x240 [ 407.021711][T15614] call_usermodehelper_exec_work+0xbd/0x230 [ 407.029958][T15614] process_scheduled_works+0xa2c/0x1830 [ 407.037857][T15614] worker_thread+0x870/0xd30 [ 407.044815][T15614] kthread+0x2f0/0x390 [ 407.051256][T15614] ret_from_fork+0x4b/0x80 [ 407.058059][T15614] ret_from_fork_asm+0x1a/0x30 [ 407.065183][T15614] } [ 407.067857][T15614] ... key at: [] tasklist_lock+0x18/0x40 [ 407.075757][T15614] ... acquired at: [ 407.079733][T15614] lock_acquire+0x1ed/0x550 [ 407.084422][T15614] _raw_read_lock+0x36/0x50 [ 407.089109][T15614] send_sigio+0xfc/0x360 [ 407.093532][T15614] dnotify_handle_event+0x13c/0x440 [ 407.098911][T15614] fsnotify+0x18ab/0x1f70 [ 407.103420][T15614] fsnotify_change+0x24f/0x2a0 [ 407.108368][T15614] notify_change+0xc0c/0xe90 [ 407.113144][T15614] chmod_common+0x2ab/0x4c0 [ 407.117822][T15614] __x64_sys_fchmod+0xf8/0x160 [ 407.122767][T15614] do_syscall_64+0xf3/0x230 [ 407.127448][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.133524][T15614] [ 407.135844][T15614] -> (&f->f_owner.lock){....}-{2:2} { [ 407.141329][T15614] INITIAL USE at: [ 407.145314][T15614] lock_acquire+0x1ed/0x550 [ 407.151570][T15614] _raw_write_lock_irq+0xd3/0x120 [ 407.158350][T15614] f_modown+0x38/0x340 [ 407.164168][T15614] fcntl_dirnotify+0x57d/0x740 [ 407.170682][T15614] do_fcntl+0x492/0x1730 [ 407.176673][T15614] __se_sys_fcntl+0xd2/0x1c0 [ 407.183010][T15614] do_syscall_64+0xf3/0x230 [ 407.189256][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.196892][T15614] INITIAL READ USE at: [ 407.201312][T15614] lock_acquire+0x1ed/0x550 [ 407.207998][T15614] _raw_read_lock_irqsave+0xdd/0x130 [ 407.215467][T15614] send_sigio+0x33/0x360 [ 407.221893][T15614] kill_fasync+0x23a/0x4d0 [ 407.228503][T15614] pipe_release+0x1bf/0x330 [ 407.235197][T15614] __fput+0x24a/0x8a0 [ 407.241372][T15614] task_work_run+0x24f/0x310 [ 407.248169][T15614] syscall_exit_to_user_mode+0x168/0x370 [ 407.255983][T15614] do_syscall_64+0x100/0x230 [ 407.262766][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.270846][T15614] } [ 407.273432][T15614] ... key at: [] init_file.__key+0x0/0x20 [ 407.281335][T15614] ... acquired at: [ 407.285224][T15614] lock_acquire+0x1ed/0x550 [ 407.289909][T15614] _raw_read_lock_irqsave+0xdd/0x130 [ 407.295377][T15614] send_sigio+0x33/0x360 [ 407.299798][T15614] kill_fasync+0x23a/0x4d0 [ 407.304403][T15614] pipe_release+0x1bf/0x330 [ 407.309086][T15614] __fput+0x24a/0x8a0 [ 407.313253][T15614] task_work_run+0x24f/0x310 [ 407.318020][T15614] syscall_exit_to_user_mode+0x168/0x370 [ 407.323933][T15614] do_syscall_64+0x100/0x230 [ 407.328700][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.334774][T15614] [ 407.337094][T15614] -> (&new->fa_lock){....}-{2:2} { [ 407.342230][T15614] INITIAL USE at: [ 407.346123][T15614] lock_acquire+0x1ed/0x550 [ 407.352209][T15614] _raw_write_lock_irq+0xd3/0x120 [ 407.358815][T15614] fasync_remove_entry+0xff/0x1d0 [ 407.365410][T15614] pipe_fasync+0x10b/0x1f0 [ 407.371399][T15614] __fput+0x73e/0x8a0 [ 407.376956][T15614] task_work_run+0x24f/0x310 [ 407.383110][T15614] syscall_exit_to_user_mode+0x168/0x370 [ 407.390482][T15614] do_syscall_64+0x100/0x230 [ 407.396638][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.404095][T15614] INITIAL READ USE at: [ 407.408423][T15614] lock_acquire+0x1ed/0x550 [ 407.414928][T15614] _raw_read_lock_irqsave+0xdd/0x130 [ 407.422222][T15614] kill_fasync+0x19e/0x4d0 [ 407.428654][T15614] pipe_release+0x1bf/0x330 [ 407.435153][T15614] __fput+0x24a/0x8a0 [ 407.441307][T15614] task_work_run+0x24f/0x310 [ 407.447895][T15614] syscall_exit_to_user_mode+0x168/0x370 [ 407.455532][T15614] do_syscall_64+0x100/0x230 [ 407.462136][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.470043][T15614] } [ 407.472540][T15614] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 407.481221][T15614] ... acquired at: [ 407.485019][T15614] lock_acquire+0x1ed/0x550 [ 407.489708][T15614] _raw_read_lock_irqsave+0xdd/0x130 [ 407.495179][T15614] kill_fasync+0x19e/0x4d0 [ 407.499776][T15614] mousedev_notify_readers+0x719/0xc80 [ 407.505411][T15614] mousedev_event+0x5d9/0x1390 [ 407.510349][T15614] input_handler_events_default+0x107/0x1c0 [ 407.516417][T15614] input_pass_values+0x286/0x860 [ 407.521530][T15614] input_event_dispose+0x30f/0x600 [ 407.526819][T15614] input_handle_event+0xa71/0xbe0 [ 407.532014][T15614] input_inject_event+0x22f/0x340 [ 407.537209][T15614] evdev_write+0x672/0x7c0 [ 407.541798][T15614] vfs_write+0x2a2/0xc90 [ 407.546312][T15614] ksys_write+0x1a0/0x2c0 [ 407.550829][T15614] do_syscall_64+0xf3/0x230 [ 407.555510][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.561589][T15614] [ 407.563914][T15614] [ 407.563914][T15614] stack backtrace: [ 407.569800][T15614] CPU: 1 UID: 0 PID: 15614 Comm: syz.3.4534 Not tainted 6.11.0-syzkaller #0 [ 407.578476][T15614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 407.588644][T15614] Call Trace: [ 407.591935][T15614] [ 407.594972][T15614] dump_stack_lvl+0x241/0x360 [ 407.599678][T15614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.604886][T15614] ? __pfx__printk+0x10/0x10 [ 407.609494][T15614] ? print_shortest_lock_dependencies+0xf2/0x160 [ 407.615854][T15614] validate_chain+0x4de0/0x5900 [ 407.620749][T15614] ? __pfx_validate_chain+0x10/0x10 [ 407.625977][T15614] ? __pfx_validate_chain+0x10/0x10 [ 407.631222][T15614] ? register_lock_class+0x102/0x980 [ 407.636524][T15614] ? __pfx_register_lock_class+0x10/0x10 [ 407.642172][T15614] ? mark_lock+0x9a/0x350 [ 407.646522][T15614] __lock_acquire+0x137a/0x2040 [ 407.651403][T15614] lock_acquire+0x1ed/0x550 [ 407.655920][T15614] ? kill_fasync+0x19e/0x4d0 [ 407.660524][T15614] ? __pfx_lock_acquire+0x10/0x10 [ 407.665574][T15614] ? __pfx_lock_acquire+0x10/0x10 [ 407.670616][T15614] _raw_read_lock_irqsave+0xdd/0x130 [ 407.676005][T15614] ? kill_fasync+0x19e/0x4d0 [ 407.680702][T15614] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 407.686618][T15614] kill_fasync+0x19e/0x4d0 [ 407.691045][T15614] ? kill_fasync+0x55/0x4d0 [ 407.695572][T15614] mousedev_notify_readers+0x719/0xc80 [ 407.701052][T15614] ? mousedev_notify_readers+0x2a/0xc80 [ 407.706622][T15614] mousedev_event+0x5d9/0x1390 [ 407.711409][T15614] ? __pfx_mousedev_event+0x10/0x10 [ 407.716625][T15614] input_handler_events_default+0x107/0x1c0 [ 407.722537][T15614] input_pass_values+0x286/0x860 [ 407.727503][T15614] ? input_pass_values+0x8f/0x860 [ 407.732541][T15614] input_event_dispose+0x30f/0x600 [ 407.737658][T15614] input_handle_event+0xa71/0xbe0 [ 407.742690][T15614] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 407.748183][T15614] ? __pfx_input_handle_event+0x10/0x10 [ 407.753737][T15614] input_inject_event+0x22f/0x340 [ 407.758766][T15614] ? input_inject_event+0xd6/0x340 [ 407.763887][T15614] evdev_write+0x672/0x7c0 [ 407.768323][T15614] ? __pfx_evdev_write+0x10/0x10 [ 407.773408][T15614] ? bpf_lsm_file_permission+0x9/0x10 [ 407.778832][T15614] ? security_file_permission+0x7f/0xa0 [ 407.784423][T15614] ? rw_verify_area+0x1d2/0x6b0 [ 407.789307][T15614] ? __pfx_evdev_write+0x10/0x10 [ 407.794291][T15614] vfs_write+0x2a2/0xc90 [ 407.798556][T15614] ? __pfx_vfs_write+0x10/0x10 [ 407.803331][T15614] ? do_futex+0x33b/0x560 [ 407.807674][T15614] ? __fget_files+0x29/0x470 [ 407.812274][T15614] ? __fget_files+0x3f6/0x470 [ 407.816976][T15614] ? __fget_files+0x29/0x470 [ 407.821664][T15614] ksys_write+0x1a0/0x2c0 [ 407.826006][T15614] ? __pfx_ksys_write+0x10/0x10 [ 407.830901][T15614] ? do_syscall_64+0x100/0x230 [ 407.835679][T15614] ? do_syscall_64+0xb6/0x230 [ 407.840388][T15614] do_syscall_64+0xf3/0x230 [ 407.844899][T15614] ? clear_bhb_loop+0x35/0x90 [ 407.849586][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.855497][T15614] RIP: 0033:0x7f429337def9 [ 407.859920][T15614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.879539][T15614] RSP: 002b:00007f429425e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.887963][T15614] RAX: ffffffffffffffda RBX: 00007f4293535f80 RCX: 00007f429337def9 [ 407.895936][T15614] RDX: 0000000000000078 RSI: 00000000200003c0 RDI: 0000000000000004 [ 407.903914][T15614] RBP: 00007f42933f0b76 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 407.911891][T15614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.919864][T15614] R13: 0000000000000000 R14: 00007f4293535f80 R15: 00007ffd43dd4198 [ 407.927849][T15614] [ 408.825196][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.891574][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.986144][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.073865][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.153479][ T12] bridge_slave_1: left allmulticast mode [ 409.159550][ T12] bridge_slave_1: left promiscuous mode [ 409.165278][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.173511][ T12] bridge_slave_0: left promiscuous mode [ 409.179335][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.335296][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.346571][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.356760][ T12] bond0 (unregistering): Released all slaves [ 409.585879][ T12] hsr_slave_0: left promiscuous mode [ 409.593910][ T12] hsr_slave_1: left promiscuous mode [ 409.599931][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.607817][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.615945][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.626129][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.640834][ T12] veth1_macvtap: left promiscuous mode [ 409.646522][ T12] veth0_macvtap: left promiscuous mode [ 409.652171][ T12] veth1_vlan: left promiscuous mode [ 409.657547][ T12] veth0_vlan: left promiscuous mode [ 409.890404][ T12] team0 (unregistering): Port device team_slave_1 removed [ 409.904669][ T12] team0 (unregistering): Port device team_slave_0 removed [ 410.398656][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.438882][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.503864][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.552433][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 410.561380][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.649986][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.704061][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.744084][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.802512][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 410.811170][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.876690][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.944079][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.994452][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.059699][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 411.070252][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.169928][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.221988][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.264092][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.312414][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.384467][ T12] bridge_slave_1: left allmulticast mode [ 411.390637][ T12] bridge_slave_1: left promiscuous mode [ 411.397030][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.405935][ T12] bridge_slave_0: left allmulticast mode [ 411.411953][ T12] bridge_slave_0: left promiscuous mode [ 411.417712][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.428759][ T12] bridge_slave_1: left allmulticast mode [ 411.434435][ T12] bridge_slave_1: left promiscuous mode [ 411.440162][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.448901][ T12] bridge_slave_0: left promiscuous mode [ 411.455672][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.465007][ T12] bridge_slave_1: left allmulticast mode [ 411.471515][ T12] bridge_slave_1: left promiscuous mode [ 411.477307][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.486285][ T12] bridge_slave_0: left allmulticast mode [ 411.492140][ T12] bridge_slave_0: left promiscuous mode [ 411.498844][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.509149][ T12] bridge_slave_1: left allmulticast mode [ 411.514800][ T12] bridge_slave_1: left promiscuous mode [ 411.520888][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.529996][ T12] bridge_slave_0: left allmulticast mode [ 411.535647][ T12] bridge_slave_0: left promiscuous mode [ 411.542291][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.265213][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.276982][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.287545][ T12] bond0 (unregistering): Released all slaves [ 412.312142][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.322628][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.337103][ T12] bond0 (unregistering): Released all slaves [ 412.354964][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.365354][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.381146][ T12] bond0 (unregistering): Released all slaves [ 412.395681][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.406550][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.416629][ T12] bond0 (unregistering): Released all slaves [ 412.517556][ T12] ɶƣ0GC!: left promiscuous mode [ 412.589298][ T12] tipc: Left network mode [ 412.604089][ T12] tipc: Disabling bearer [ 412.610957][ T12] tipc: Left network mode [ 412.678952][ T12] IPVS: stopping master sync thread 8305 ... [ 412.685489][ T12] IPVS: stopping backup sync thread 10867 ... [ 413.037903][ T12] team0: Port device wlan1 removed [ 413.331041][ T12] hsr_slave_0: left promiscuous mode [ 413.337128][ T12] hsr_slave_1: left promiscuous mode [ 413.342987][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.350461][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.362647][ T12] hsr_slave_0: left promiscuous mode [ 413.369007][ T12] hsr_slave_1: left promiscuous mode [ 413.382956][ T12] hsr_slave_0: left promiscuous mode [ 413.389116][ T12] hsr_slave_1: left promiscuous mode [ 413.395016][ T12] batman_adv: batadv0: Interface deactivated:  [ 413.402601][ T12] batman_adv: batadv0: Removing interface:  [ 413.410086][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.417562][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.429722][ T12] hsr_slave_0: left promiscuous mode [ 413.435579][ T12] hsr_slave_1: left promiscuous mode [ 413.441891][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.453547][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.461979][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.470081][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.487899][ T12] veth1_vlan: left promiscuous mode [ 413.493254][ T12] veth0_vlan: left promiscuous mode [ 413.499794][ T12] veth1_macvtap: left promiscuous mode [ 413.505314][ T12] veth0_macvtap: left promiscuous mode [ 413.510996][ T12] veth1_vlan: left promiscuous mode [ 413.516269][ T12] veth0_vlan: left promiscuous mode [ 413.523015][ T12] veth1_macvtap: left promiscuous mode [ 413.528604][ T12] veth0_macvtap: left promiscuous mode [ 413.534128][ T12] veth1_vlan: left promiscuous mode [ 413.539548][ T12] @: left promiscuous mode [ 413.545221][ T12] veth1_macvtap: left promiscuous mode [ 413.551122][ T12] veth0_macvtap: left promiscuous mode [ 413.556891][ T12] veth1_vlan: left promiscuous mode [ 413.562184][ T12] veth0_vlan: left promiscuous mode [ 413.995372][ T12] team0 (unregistering): Port device team_slave_1 removed [ 414.010775][ T12] team0 (unregistering): Port device team_slave_0 removed [ 414.401021][ T12] team0 (unregistering): Port device team_slave_1 removed [ 414.431429][ T12] team0 (unregistering): Port device team_slave_0 removed [ 414.746469][ T53] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 414.794279][ T12] team0 (unregistering): Port device team_slave_1 removed [ 414.825117][ T12] team0 (unregistering): Port device team_slave_0 removed [ 415.150589][ T12] team0 (unregistering): Port device team_slave_1 removed [ 415.182702][ T12] team0 (unregistering): Port device team_slave_0 removed