last executing test programs: 20.502243507s ago: executing program 4 (id=1901): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) 19.984322482s ago: executing program 4 (id=1908): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 19.922155791s ago: executing program 4 (id=1911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x30}}, 0xb8}}, 0x0) 19.757798635s ago: executing program 4 (id=1916): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000030bbb40fa074708"], 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) 19.075619568s ago: executing program 0 (id=1931): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6707, 0x100, 0xfffffffe, 0x1cd}, &(0x7f00000005c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 18.927742424s ago: executing program 0 (id=1935): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x93, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090281af010100000009040000ff"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 18.020429829s ago: executing program 3 (id=1941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x11203}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x0) 17.089972753s ago: executing program 4 (id=1944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000480080001"], 0x34}}, 0x0) 16.746136688s ago: executing program 0 (id=1946): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={r1, 0x3, r0, 0x6}) 16.408841992s ago: executing program 3 (id=1948): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000300)=[{r0, 0x1040}], 0x1, 0x81) 16.058646794s ago: executing program 4 (id=1950): unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 15.892618219s ago: executing program 0 (id=1951): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 15.505580372s ago: executing program 0 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="2c0001800800010003000100200001"], 0x44}}, 0x0) 15.14364459s ago: executing program 0 (id=1953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454d0, 0x0) 15.024334763s ago: executing program 3 (id=1956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]}) 13.545528522s ago: executing program 1 (id=1961): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0x144}}, 0x0) 13.459935943s ago: executing program 1 (id=1962): socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.378590271s ago: executing program 1 (id=1963): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000021c0)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 13.283488373s ago: executing program 1 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004802c0001800e000100696d6d656469617465000000180002800c00028005000100c40000000800014000000008100201800c0001006e6f747261636b000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) close(r0) 13.204074848s ago: executing program 1 (id=1965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 13.049808872s ago: executing program 1 (id=1966): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) 9.065911897s ago: executing program 3 (id=1968): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ppoll(0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) 7.948666518s ago: executing program 3 (id=1974): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 7.814940003s ago: executing program 3 (id=1975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000200)) 878.086093ms ago: executing program 2 (id=1980): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 283.18586ms ago: executing program 2 (id=1981): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_EMULATED_HOST(r1, 0x2283, &(0x7f0000000000)) 224.833044ms ago: executing program 2 (id=1982): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000150008"], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) 134.053647ms ago: executing program 2 (id=1983): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x8) 77.252624ms ago: executing program 2 (id=1984): r0 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000140)={0x2, 0x7fff}, 0x0) 0s ago: executing program 2 (id=1985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): 77.711083][ T5270] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 77.736840][ T5270] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11 [ 77.775322][ T5909] tap0: tun_chr_ioctl cmd 1074025672 [ 77.798022][ T5909] tap0: ignored: set checksum enabled [ 77.866324][ T5271] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 78.000569][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.008882][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.016338][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.023366][ T5271] usb 3-1: USB disconnect, device number 5 [ 78.023587][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 78.036166][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 78.090776][ T5270] usb 4-1: USB disconnect, device number 3 [ 78.111179][ T5271] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 78.549436][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 78.558609][ T5939] netlink: 36 bytes leftover after parsing attributes in process `syz.4.272'. [ 78.571144][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.581822][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.591777][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.602845][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.613406][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.624190][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.634419][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.645108][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.342473][ T5978] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.507207][ T5978] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 79.796631][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 79.839934][ T5997] input: syz1 as /devices/virtual/input/input12 [ 80.407583][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 80.407601][ T29] audit: type=1400 audit(1729650690.826:16): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=6016 comm="syz.4.307" name="55" dev="tmpfs" ino=290 [ 80.676125][ T6028] netlink: 'syz.0.311': attribute type 29 has an invalid length. [ 80.714077][ T6028] netlink: 'syz.0.311': attribute type 29 has an invalid length. [ 80.761472][ T6028] netlink: 'syz.0.311': attribute type 29 has an invalid length. [ 80.881249][ T6037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.095560][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.289977][ T51] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 81.312735][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.347105][ T51] usb 2-1: config 0 descriptor?? [ 81.376571][ T51] cp210x 2-1:0.0: cp210x converter detected [ 81.605988][ T5270] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.737405][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 81.746953][ T6080] bond0: option ad_select: unable to set because the bond device is up [ 81.765842][ T5270] usb 5-1: Using ep0 maxpacket: 8 [ 81.782582][ T51] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 81.788089][ T5270] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.801585][ T51] usb 2-1: cp210x converter now attached to ttyUSB0 [ 81.818335][ T5270] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 81.844784][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 81.863698][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 81.877830][ T5270] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.949383][ T5270] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 81.965107][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.981773][ T5270] usb 5-1: Product: syz [ 81.986868][ T5270] usb 5-1: Manufacturer: syz [ 81.991653][ T5270] usb 5-1: SerialNumber: syz [ 81.998852][ T5270] usb 5-1: config 0 descriptor?? [ 82.008539][ T5299] usb 2-1: USB disconnect, device number 3 [ 82.010115][ T5270] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 82.043931][ T5299] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 82.086250][ T5299] cp210x 2-1:0.0: device disconnected [ 82.186880][ T6092] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 82.303356][ T5299] usb 5-1: USB disconnect, device number 3 [ 82.357620][ T6096] netlink: 203452 bytes leftover after parsing attributes in process `syz.2.340'. [ 82.389783][ T6096] netlink: 'syz.2.340': attribute type 2 has an invalid length. [ 82.409608][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 82.845352][ T6114] veth1_macvtap: left promiscuous mode [ 82.859672][ T6114] macsec0: entered allmulticast mode [ 82.894836][ T6114] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 82.995589][ T5270] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.019721][ T6118] netlink: 2 bytes leftover after parsing attributes in process `syz.1.350'. [ 83.212287][ T6128] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 83.238659][ T5270] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 83.252722][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.261746][ T5270] usb 1-1: Product: syz [ 83.271971][ T5270] usb 1-1: Manufacturer: syz [ 83.315551][ T5270] usb 1-1: SerialNumber: syz [ 83.334069][ T5270] usb 1-1: config 0 descriptor?? [ 83.396853][ T6135] program syz.2.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.464108][ T6140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 83.515200][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'. [ 83.540711][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 83.643686][ T5270] hso 1-1:0.0: Failed to find BULK IN ep [ 83.765521][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.808468][ T5299] usb 1-1: USB disconnect, device number 3 [ 83.937370][ T8] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 83.946682][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.969671][ T8] usb 2-1: config 0 descriptor?? [ 83.993426][ T8] gspca_main: spca508-2.14.0 probing 8086:0110 [ 84.192155][ T8] gspca_spca508: reg_read err -32 [ 84.404592][ T8] gspca_spca508: reg_read err -71 [ 84.416868][ T8] gspca_spca508: reg_read err -71 [ 84.422850][ T8] gspca_spca508: reg_read err -71 [ 84.438923][ T8] gspca_spca508: reg write: error -71 [ 84.444535][ T8] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 84.461882][ T8] usb 2-1: USB disconnect, device number 4 [ 84.636972][ T6164] netlink: 'syz.3.371': attribute type 4 has an invalid length. [ 84.672467][ T6165] capability: warning: `syz.0.369' uses 32-bit capabilities (legacy support in use) [ 85.565633][ T5271] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.779722][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.825925][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.856583][ T5271] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 85.895208][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.926559][ T5271] usb 2-1: config 0 descriptor?? [ 86.344633][ T5271] apple 0003:05AC:0262.0003: bogus close delimiter [ 86.371588][ T5271] apple 0003:05AC:0262.0003: item 0 1 2 10 parsing failed [ 86.404953][ T5271] apple 0003:05AC:0262.0003: parse failed [ 86.423466][ T5271] apple 0003:05AC:0262.0003: probe with driver apple failed with error -22 [ 86.568824][ T8] usb 2-1: USB disconnect, device number 5 [ 86.675571][ T6231] netlink: 64 bytes leftover after parsing attributes in process `syz.3.401'. [ 86.955590][ T5271] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.125597][ T5271] usb 1-1: Using ep0 maxpacket: 16 [ 87.138285][ T5271] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 87.151089][ T5271] usb 1-1: config 0 has no interface number 0 [ 87.164672][ T5271] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.187867][ T5271] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.213230][ T5271] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 87.238633][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 87.252073][ T5271] usb 1-1: Product: syz [ 87.259783][ T5271] usb 1-1: SerialNumber: syz [ 87.266527][ T5271] usb 1-1: config 0 descriptor?? [ 87.281187][ T5271] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 87.290129][ T5271] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 87.325640][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.483406][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.515533][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.535671][ T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 87.544912][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.545244][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.555113][ T9] usb 4-1: config 0 descriptor?? [ 87.560675][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.572255][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.580625][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.588498][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.596070][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.604506][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.612859][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.620837][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.628143][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.635974][ T5271] usb 1-1: USB disconnect, device number 4 [ 87.636037][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 87.662912][ T5271] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 87.820786][ T6279] netlink: 52 bytes leftover after parsing attributes in process `syz.1.423'. [ 87.995958][ T9] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 88.003332][ T9] holtek_kbd 0003:04D9:A055.0004: item fetching failed at offset 3/5 [ 88.026705][ T9] holtek_kbd 0003:04D9:A055.0004: probe with driver holtek_kbd failed with error -22 [ 88.093340][ T6264] syz.2.417 (6264) used greatest stack depth: 19296 bytes left [ 88.223818][ T8] usb 4-1: USB disconnect, device number 4 [ 88.409167][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 88.631077][ T6309] hfsplus: unable to find HFS+ superblock [ 89.842967][ T6352] wg1 speed is unknown, defaulting to 1000 [ 90.095838][ T5271] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.265577][ T5271] usb 3-1: Using ep0 maxpacket: 16 [ 90.280180][ T5271] usb 3-1: config 0 has no interfaces? [ 90.297927][ T5271] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 90.315777][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.325763][ T5271] usb 3-1: Product: syz [ 90.329984][ T5271] usb 3-1: Manufacturer: syz [ 90.334743][ T5271] usb 3-1: SerialNumber: syz [ 90.366241][ T5271] usb 3-1: config 0 descriptor?? [ 90.705842][ T8] usb 3-1: USB disconnect, device number 6 [ 90.779431][ T29] audit: type=1326 audit(1729650701.156:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 90.801683][ T29] audit: type=1326 audit(1729650701.156:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 90.823923][ T29] audit: type=1326 audit(1729650701.156:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 90.845584][ T29] audit: type=1326 audit(1729650701.156:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 90.867171][ T29] audit: type=1326 audit(1729650701.156:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 91.365823][ T5271] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.525650][ T5271] usb 4-1: Using ep0 maxpacket: 16 [ 91.541794][ T5271] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 91.565220][ T5271] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 91.592728][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.617989][ T5271] usb 4-1: Product: syz [ 91.623857][ T5271] usb 4-1: Manufacturer: syz [ 91.628743][ T29] audit: type=1326 audit(1729650702.036:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.0.483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x0 [ 91.656961][ T5271] usb 4-1: SerialNumber: syz [ 91.659622][ T6420] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 91.671701][ T5271] usb 4-1: config 0 descriptor?? [ 91.672771][ T6420] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.484'. [ 91.701599][ T5271] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 91.708969][ T6420] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 91.718592][ T6420] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 91.727607][ T5271] usb 4-1: Detected FT232R [ 91.785718][ T5270] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.846583][ T5299] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.916877][ T5271] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 91.969619][ T5270] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.984603][ T5270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.993424][ T5270] usb 3-1: Product: syz [ 91.995797][ T5299] usb 5-1: Using ep0 maxpacket: 32 [ 92.003161][ T937] IPVS: starting estimator thread 0... [ 92.003741][ T5270] usb 3-1: Manufacturer: syz [ 92.014691][ T6429] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 92.015952][ T5270] usb 3-1: SerialNumber: syz [ 92.029853][ T5299] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 92.039656][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.048007][ T5299] usb 5-1: Product: syz [ 92.052528][ T5299] usb 5-1: Manufacturer: syz [ 92.057344][ T5299] usb 5-1: SerialNumber: syz [ 92.068181][ T5270] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 92.069066][ T5299] usb 5-1: config 0 descriptor?? [ 92.105892][ T6430] IPVS: using max 18 ests per chain, 43200 per kthread [ 92.127425][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.146793][ T5271] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.341526][ T5271] usb 4-1: USB disconnect, device number 5 [ 92.379096][ T5271] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.392562][ T5271] ftdi_sio 4-1:0.0: device disconnected [ 92.456341][ T937] usb 3-1: USB disconnect, device number 7 [ 92.699103][ T5299] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 92.709523][ T5299] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 92.716929][ T5299] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 92.777330][ T5299] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 92.792815][ T5237] udevd[5237]: failed to send result of seq 10678 to main daemon: Connection refused [ 92.968178][ T9] usb 5-1: USB disconnect, device number 4 [ 93.105600][ T5299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.215599][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 93.223134][ T8] ath9k_htc: Failed to initialize the device [ 93.263477][ T937] usb 3-1: ath9k_htc: USB layer deinitialized [ 93.280424][ T5299] usb 2-1: Using ep0 maxpacket: 16 [ 93.295590][ T5299] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 93.314185][ T5299] usb 2-1: config 0 has no interface number 0 [ 93.321315][ T5299] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.365690][ T5299] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 93.397564][ T5299] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 93.406947][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 93.415080][ T5299] usb 2-1: Product: syz [ 93.435325][ T5299] usb 2-1: SerialNumber: syz [ 93.457727][ T5299] usb 2-1: config 0 descriptor?? [ 93.481530][ T5299] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 93.496761][ T5299] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 93.746325][ C1] cm109_urb_ctl_callback: 5 callbacks suppressed [ 93.746350][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.762768][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.771373][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.778659][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.786736][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.793900][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.801085][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.808297][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.820294][ T5299] usb 2-1: USB disconnect, device number 6 [ 93.826265][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 93.826295][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 93.859997][ T5299] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 93.986941][ T6482] ceph: missing cluster fsid [ 93.991590][ T6482] ceph: separator ':' missing in source [ 94.174716][ T6494] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 94.203033][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.226003][ T6494] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 94.240099][ T6500] wg1 speed is unknown, defaulting to 1000 [ 94.505625][ T5271] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.518470][ T6507] Cannot find add_set index 0 as target [ 94.685567][ T5271] usb 5-1: Using ep0 maxpacket: 16 [ 94.693104][ T5271] usb 5-1: config 0 has no interfaces? [ 94.710261][ T5271] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.725604][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.742123][ T5271] usb 5-1: Product: syz [ 94.746880][ T5271] usb 5-1: Manufacturer: syz [ 94.751504][ T5271] usb 5-1: SerialNumber: syz [ 94.759101][ T5271] usb 5-1: config 0 descriptor?? [ 94.835781][ T937] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 95.000010][ T937] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 95.025536][ T5299] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.033125][ T937] usb 2-1: config 246 has no interface number 0 [ 95.051991][ T937] usb 2-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 95.083417][ T5271] usb 5-1: USB disconnect, device number 5 [ 95.100146][ T937] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 95.119767][ T937] usb 2-1: config 246 interface 166 has no altsetting 0 [ 95.139402][ T937] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 95.153115][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.161582][ T937] usb 2-1: Product: syz [ 95.167389][ T937] usb 2-1: Manufacturer: syz [ 95.172029][ T937] usb 2-1: SerialNumber: syz [ 95.229151][ T5299] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 95.244373][ T5299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.252612][ T5299] usb 3-1: Product: syz [ 95.264947][ T5299] usb 3-1: Manufacturer: syz [ 95.269997][ T5299] usb 3-1: SerialNumber: syz [ 95.278608][ T5299] usb 3-1: config 0 descriptor?? [ 95.286496][ T5299] ch341 3-1:0.0: ch341-uart converter detected [ 95.728584][ T6551] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 95.736275][ T6551] ALSA: mixer_oss: invalid OSS volume '' [ 95.753544][ T6551] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 95.763714][ T6551] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 95.778868][ T6551] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 95.821783][ T937] usb 2-1: Limiting number of CPorts to U8_MAX [ 95.854632][ T937] usb 2-1: Unknown endpoint type found, address 0x0b [ 95.885688][ T937] usb 2-1: Unknown endpoint type found, address 0x8a [ 95.895548][ T937] usb 2-1: Not enough endpoints found in device, aborting! [ 96.051036][ T9] usb 2-1: USB disconnect, device number 7 [ 96.105174][ T5299] usb 3-1: failed to send control message: -71 [ 96.135945][ T5299] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 96.225677][ T5299] usb 3-1: USB disconnect, device number 8 [ 96.232374][ T5299] ch341 3-1:0.0: device disconnected [ 96.405764][ T5270] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.589144][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.611074][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.624486][ T5270] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 96.640474][ T6575] netlink: 'syz.1.551': attribute type 22 has an invalid length. [ 96.659226][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.690163][ T5270] usb 5-1: config 0 descriptor?? [ 96.925668][ T29] audit: type=1326 audit(1729650707.326:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 96.971275][ T29] audit: type=1326 audit(1729650707.326:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.041675][ T29] audit: type=1326 audit(1729650707.336:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.074392][ T29] audit: type=1326 audit(1729650707.336:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.104399][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.144442][ T29] audit: type=1326 audit(1729650707.336:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.205798][ T29] audit: type=1326 audit(1729650707.336:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.231372][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.266417][ T5270] wacom 0003:056A:0065.0005: unknown main item tag 0x7 [ 97.275495][ T5270] wacom 0003:056A:0065.0005: unknown main item tag 0x4 [ 97.282769][ T29] audit: type=1326 audit(1729650707.336:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.288586][ T5270] wacom 0003:056A:0065.0005: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 97.352688][ T5270] wacom 0003:056A:0065.0005: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.4-1/input0 [ 97.368580][ T29] audit: type=1326 audit(1729650707.336:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.380251][ T5270] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0065.0005/input/input17 [ 97.390262][ T29] audit: type=1326 audit(1729650707.376:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.423550][ T29] audit: type=1326 audit(1729650707.376:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x7ffc0000 [ 97.456189][ T6607] sg_write: process 265 (syz.3.563) changed security contexts after opening file descriptor, this is not allowed. [ 97.487033][ T6607] program syz.3.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.505783][ T5299] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 97.551627][ T9] usb 5-1: USB disconnect, device number 6 [ 97.661217][ T5299] usb 3-1: Using ep0 maxpacket: 32 [ 97.686797][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 97.717385][ T5299] usb 3-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 97.727433][ T5299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.743907][ T5299] usb 3-1: Product: syz [ 97.749240][ T5299] usb 3-1: Manufacturer: syz [ 97.753885][ T5299] usb 3-1: SerialNumber: syz [ 97.768749][ T5299] usb 3-1: config 0 descriptor?? [ 97.989331][ T5299] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 98.011959][ T5299] usb 3-1: USB disconnect, device number 9 [ 98.706124][ T5299] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 98.853828][ T6667] wg1 speed is unknown, defaulting to 1000 [ 98.900773][ T5299] usb 2-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 98.925550][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.933637][ T5299] usb 2-1: Product: syz [ 98.945529][ T5299] usb 2-1: Manufacturer: syz [ 98.955682][ T5299] usb 2-1: SerialNumber: syz [ 98.977992][ T5299] usb 2-1: config 0 descriptor?? [ 99.136062][ T5272] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.297518][ T5272] usb 4-1: Using ep0 maxpacket: 16 [ 99.312328][ T5272] usb 4-1: config 0 has no interfaces? [ 99.323608][ T5272] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.345696][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.359777][ T5272] usb 4-1: Product: syz [ 99.364187][ T5272] usb 4-1: Manufacturer: syz [ 99.369647][ T5272] usb 4-1: SerialNumber: syz [ 99.387580][ T5272] usb 4-1: config 0 descriptor?? [ 99.415281][ T5299] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in warm state. [ 99.434740][ T5299] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 99.451043][ T5299] dvbdev: DVB: registering new adapter (ASUS My Cinema U3100 Mini DVBT Tuner) [ 99.462845][ T5299] usb 2-1: media controller created [ 99.475254][ T5299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.559247][ T5299] DVB: Unable to find symbol dib7000p_attach() [ 99.571134][ T5299] dvb-usb: no frontend was attached by 'ASUS My Cinema U3100 Mini DVBT Tuner' [ 99.655528][ T937] usb 4-1: USB disconnect, device number 6 [ 99.684603][ T5299] rc_core: IR keymap rc-dib0700-rc5 not found [ 99.691650][ T5299] Registered IR keymap rc-empty [ 99.706951][ T5299] dvb-usb: could not initialize remote control. [ 99.720781][ T5299] dvb-usb: ASUS My Cinema U3100 Mini DVBT Tuner successfully initialized and connected. [ 99.950874][ T5299] usb 2-1: USB disconnect, device number 8 [ 99.969958][ T5299] dvb-usb: ASUS My Cinema U3100 Mini DVBT Tuner successfully deinitialized and disconnected. [ 100.059954][ T6710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.607'. [ 100.073307][ T6710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.607'. [ 100.165693][ T5270] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.325950][ T5270] usb 5-1: Using ep0 maxpacket: 32 [ 100.342525][ T5270] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.360556][ T5270] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.394083][ T5270] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.412799][ T5270] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 100.421647][ T5270] usb 5-1: Product: syz [ 100.426005][ T5270] usb 5-1: Manufacturer: syz [ 100.442027][ T5270] hub 5-1:4.0: USB hub found [ 100.659469][ T5270] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 100.885928][ T5269] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 100.995711][ T5270] usb 5-1: USB disconnect, device number 7 [ 101.057892][ T6755] netlink: 'syz.2.628': attribute type 9 has an invalid length. [ 101.066433][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.085517][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.095329][ T5269] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 101.130634][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.143131][ T5269] usb 2-1: config 0 descriptor?? [ 101.566581][ T5269] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 101.586715][ T5269] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 101.774940][ T5269] cp2112 0003:10C4:EA90.0006: Part Number: 0x42 Device Version: 0x9C [ 101.975788][ T5269] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 101.988308][ T5269] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 102.025892][ T5269] usb 2-1: USB disconnect, device number 9 [ 102.445610][ T937] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.456533][ T6810] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 102.631844][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 102.644219][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.668864][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.691708][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.725133][ T937] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.748233][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.777448][ T937] usb 5-1: config 0 descriptor?? [ 102.785955][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 103.213039][ T937] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 103.275640][ T937] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input22 [ 103.311525][ T937] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 103.501365][ T5270] usb 5-1: USB disconnect, device number 8 [ 104.213173][ T6871] netlink: 60 bytes leftover after parsing attributes in process `syz.1.679'. [ 104.223251][ T6871] netlink: 172 bytes leftover after parsing attributes in process `syz.1.679'. [ 104.916126][ T937] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 105.075478][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 105.095339][ T937] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 105.109530][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.133457][ T937] usb 5-1: Product: syz [ 105.146078][ T937] usb 5-1: Manufacturer: syz [ 105.150826][ T937] usb 5-1: SerialNumber: syz [ 105.172471][ T937] usb 5-1: config 0 descriptor?? [ 105.192995][ T937] gspca_main: sq905-2.14.0 probing 2770:9120 [ 105.816883][ T937] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 105.830906][ T937] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 105.848384][ T6940] IPv6: Can't replace route, no match found [ 105.862055][ T937] usb 5-1: USB disconnect, device number 9 [ 106.836496][ T6986] netlink: 52 bytes leftover after parsing attributes in process `syz.4.729'. [ 106.992189][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'. [ 107.045994][ T6990] bridge0: port 3(vlan3) entered blocking state [ 107.071256][ T6990] bridge0: port 3(vlan3) entered disabled state [ 107.085797][ T6990] vlan3: entered allmulticast mode [ 107.168198][ T6990] vlan3: left allmulticast mode [ 107.786061][ T7012] tun0: tun_chr_ioctl cmd 2148553947 [ 107.918749][ T7020] VFS: could not find a valid V7 on nullb0. [ 107.932354][ T7020] ======================================================= [ 107.932354][ T7020] WARNING: The mand mount option has been deprecated and [ 107.932354][ T7020] and is ignored by this kernel. Remove the mand [ 107.932354][ T7020] option from the mount to silence this warning. [ 107.932354][ T7020] ======================================================= [ 107.971791][ T7020] VFS: unable to find oldfs superblock on device nullb0 [ 108.021802][ T7019] ALSA: mixer_oss: invalid OSS volume '' [ 108.126339][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 108.126355][ T29] audit: type=1326 audit(1729650718.546:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.165720][ T29] audit: type=1326 audit(1729650718.546:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.215495][ T29] audit: type=1326 audit(1729650718.546:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.237089][ T29] audit: type=1326 audit(1729650718.546:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.258597][ T29] audit: type=1326 audit(1729650718.546:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.280120][ T29] audit: type=1326 audit(1729650718.576:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.302439][ T29] audit: type=1326 audit(1729650718.576:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.323976][ T29] audit: type=1326 audit(1729650718.576:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.345587][ T29] audit: type=1326 audit(1729650718.576:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.367009][ T29] audit: type=1326 audit(1729650718.576:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x7ffc0000 [ 108.455908][ T5272] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.620919][ T5269] IPVS: starting estimator thread 0... [ 108.626450][ T5272] usb 5-1: Using ep0 maxpacket: 16 [ 108.629478][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.652486][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.673076][ T5272] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 108.688378][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.721873][ T5272] usb 5-1: config 0 descriptor?? [ 108.735855][ T7045] IPVS: using max 18 ests per chain, 43200 per kthread [ 108.743725][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.757'. [ 109.035372][ T5221] Bluetooth: hci4: failed to read key size for handle 201 [ 109.044064][ T5221] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 109.141172][ T5272] apple 0003:05AC:0246.0008: unknown main item tag 0xd [ 109.148267][ T5272] apple 0003:05AC:0246.0008: unexpected long global item [ 109.156040][ T5272] apple 0003:05AC:0246.0008: parse failed [ 109.165588][ T5272] apple 0003:05AC:0246.0008: probe with driver apple failed with error -22 [ 109.344024][ T5269] usb 5-1: USB disconnect, device number 10 [ 109.565604][ T5272] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 109.663414][ T7086] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 109.663414][ T7086] The task syz.3.769 (7086) triggered the difference, watch for misbehavior. [ 109.719381][ T5272] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 109.735561][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.753954][ T5272] usb 3-1: Product: syz [ 109.764093][ T5272] usb 3-1: Manufacturer: syz [ 109.770036][ T5272] usb 3-1: SerialNumber: syz [ 109.785389][ T5272] usb 3-1: config 0 descriptor?? [ 109.893336][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.773'. [ 109.908110][ T7090] netlink: 172 bytes leftover after parsing attributes in process `syz.4.773'. [ 110.018735][ T5270] usb 3-1: USB disconnect, device number 10 [ 111.807984][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.820'. [ 112.795572][ T5299] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.955655][ T5299] usb 4-1: Using ep0 maxpacket: 8 [ 112.976414][ T5299] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 112.995537][ T5299] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 113.015713][ T5299] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.040780][ T5299] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 113.051070][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.092220][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.101636][ T5299] usb 4-1: SerialNumber: syz [ 113.110147][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.120217][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.130166][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.138207][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.150416][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.161586][ T7230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.168981][ T937] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 113.183198][ T5272] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 113.218878][ T7250] wg1 speed is unknown, defaulting to 1000 [ 113.332497][ T5299] hub 4-1:1.0: bad descriptor, ignoring hub [ 113.338568][ T5299] hub 4-1:1.0: probe with driver hub failed with error -5 [ 113.404583][ T7230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.455054][ T7250] chnl_net:caif_netlink_parms(): no params data found [ 113.502605][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 113.515654][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 113.535372][ T5272] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 113.545534][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.554778][ T937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.565083][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.576294][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.586082][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.596158][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.611335][ T5272] usb 3-1: config 0 descriptor?? [ 113.628624][ T937] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.638287][ T937] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.646551][ T937] usb 5-1: Manufacturer: syz [ 113.662160][ T937] usb 5-1: config 0 descriptor?? [ 113.673037][ T5272] cp210x 3-1:0.0: cp210x converter detected [ 113.701370][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.711130][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.725342][ T7250] bridge_slave_0: entered allmulticast mode [ 113.735318][ T7250] bridge_slave_0: entered promiscuous mode [ 113.744228][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.759717][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.771166][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 113.772956][ T7250] bridge_slave_1: entered allmulticast mode [ 113.791584][ T7250] bridge_slave_1: entered promiscuous mode [ 113.849486][ T5299] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 113.867097][ T7250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.883170][ T7250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.955194][ T7250] team0: Port device team_slave_0 added [ 113.963340][ T7250] team0: Port device team_slave_1 added [ 113.975571][ T937] rc_core: IR keymap rc-hauppauge not found [ 113.982276][ T937] Registered IR keymap rc-empty [ 113.988105][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.011306][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.021983][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.036498][ T937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 114.043351][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.055379][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 114.101354][ T7250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.112265][ T5272] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 114.114320][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.133452][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.137052][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.141075][ T5272] usb 3-1: cp210x converter now attached to ttyUSB0 [ 114.167110][ T7250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.175991][ T5269] usb 4-1: USB disconnect, device number 7 [ 114.205675][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.225648][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.227172][ T5269] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 114.255672][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.279853][ T7250] hsr_slave_0: entered promiscuous mode [ 114.285810][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.295343][ T7250] hsr_slave_1: entered promiscuous mode [ 114.302592][ T7250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.310523][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.318206][ T7250] Cannot create hsr debugfs directory [ 114.336108][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.356285][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.376027][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.396640][ T937] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.418799][ T5269] usb 3-1: USB disconnect, device number 11 [ 114.434264][ T5269] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 114.447290][ T937] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 114.464482][ T5269] cp210x 3-1:0.0: device disconnected [ 114.471020][ T937] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 114.500395][ T937] usb 5-1: USB disconnect, device number 11 [ 114.510417][ T7287] wg1 speed is unknown, defaulting to 1000 [ 114.671314][ T7250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.821758][ T7250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.021527][ T7250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.239350][ T5224] Bluetooth: hci2: command tx timeout [ 115.269098][ T7250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.541632][ T7250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.578295][ T7250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.622592][ T7250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.649434][ T7250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.898685][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.951943][ T7250] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.988452][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.995654][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.083952][ T7250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.095648][ T7250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.114606][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.121785][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.351309][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.435714][ T5269] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 116.455255][ T7250] veth0_vlan: entered promiscuous mode [ 116.488982][ T7250] veth1_vlan: entered promiscuous mode [ 116.553497][ T7250] veth0_macvtap: entered promiscuous mode [ 116.565098][ T7250] veth1_macvtap: entered promiscuous mode [ 116.581057][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.592416][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.602881][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.613407][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.619867][ T5269] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 116.624122][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.632853][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.642916][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.644306][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.673531][ T5269] usb 3-1: Product: syz [ 116.709907][ T5269] usb 3-1: Manufacturer: syz [ 116.740360][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.751280][ T5269] usb 3-1: SerialNumber: syz [ 116.755767][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.759149][ T5269] usb 3-1: config 0 descriptor?? [ 116.778782][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.801836][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.812304][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.831197][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.851695][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.864423][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.887308][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.901068][ T7367] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 116.931309][ T7363] netlink: 'syz.4.890': attribute type 10 has an invalid length. [ 116.941796][ T7363] geneve0: entered promiscuous mode [ 116.963140][ T7363] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 116.984810][ T5269] hso 3-1:0.0: Failed to find BULK IN ep [ 117.006151][ T7250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.020856][ T7250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.030573][ T7250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.040706][ T7250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.157595][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.179230][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.243674][ T5270] usb 3-1: USB disconnect, device number 12 [ 117.258040][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.281664][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.295939][ T5224] Bluetooth: hci2: command tx timeout [ 117.376550][ T5224] Bluetooth: hci0: command tx timeout [ 117.894526][ T7403] netlink: 100 bytes leftover after parsing attributes in process `syz.2.905'. [ 118.117232][ T7417] netlink: 'syz.4.913': attribute type 6 has an invalid length. [ 118.395938][ T5270] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 118.476345][ T5269] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 118.554665][ T7436] netlink: 'syz.3.922': attribute type 11 has an invalid length. [ 118.564309][ T5270] usb 3-1: Using ep0 maxpacket: 8 [ 118.574885][ T5270] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.588447][ T5270] usb 3-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 118.605571][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.624081][ T5270] usb 3-1: config 0 descriptor?? [ 118.632832][ T5270] r8712u: register rtl8712_netdev_ops to netdev_ops [ 118.647949][ T5270] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 118.664451][ T5269] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 118.674569][ T5269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.682780][ T5269] usb 5-1: Product: syz [ 118.687104][ T5269] usb 5-1: Manufacturer: syz [ 118.691753][ T5269] usb 5-1: SerialNumber: syz [ 118.699663][ T5269] usb 5-1: config 0 descriptor?? [ 118.854744][ T7445] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.921610][ T5269] hso 5-1:0.0: Failed to find BULK IN ep [ 119.036419][ T5270] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 119.043086][ T5270] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 119.052074][ T5270] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 119.109600][ T29] audit: type=1326 audit(1729650729.526:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66ac57dff9 code=0x7fc00000 [ 119.162615][ T5271] usb 5-1: USB disconnect, device number 12 [ 119.273041][ T937] usb 3-1: USB disconnect, device number 13 [ 119.375664][ T5224] Bluetooth: hci2: command tx timeout [ 119.407549][ T5271] kernel write not supported for file /media0 (pid: 5271 comm: kworker/1:3) [ 119.666538][ T5270] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 119.837171][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.871692][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.894812][ T5270] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 119.925500][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.959640][ T5270] usb 2-1: config 0 descriptor?? [ 120.254658][ T7509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.953'. [ 120.438029][ T5270] hid-thrustmaster 0003:044F:B65D.0009: unbalanced collection at end of report description [ 120.456024][ T5270] hid-thrustmaster 0003:044F:B65D.0009: parse failed with error -22 [ 120.476177][ T5270] hid-thrustmaster 0003:044F:B65D.0009: probe with driver hid-thrustmaster failed with error -22 [ 120.647743][ T5270] usb 2-1: USB disconnect, device number 10 [ 120.774894][ T7530] program syz.0.963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.096528][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'. [ 121.266640][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 121.391066][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 121.465670][ T5224] Bluetooth: hci2: command tx timeout [ 121.488224][ T7576] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 121.496530][ T7576] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.984'. [ 121.507012][ T7576] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 121.640590][ T937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 121.750267][ T7590] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.796224][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 121.803229][ T937] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.815897][ T937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.835100][ T29] audit: type=1326 audit(1729650732.246:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7591 comm="syz.0.991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x0 [ 121.851767][ T937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.865834][ T7594] sctp: [Deprecated]: syz.3.992 (pid 7594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.865834][ T7594] Use struct sctp_sack_info instead [ 121.920519][ T937] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.932894][ T7596] mkiss: ax0: crc mode is auto. [ 121.935180][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.960619][ T937] usb 5-1: Product: syz [ 121.964847][ T937] usb 5-1: Manufacturer: syz [ 121.976341][ T937] usb 5-1: SerialNumber: syz [ 122.196422][ T7607] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 122.414348][ T937] usb 5-1: 0:2 : does not exist [ 122.495962][ T5271] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 122.667607][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.679268][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.700062][ T5271] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 122.715899][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.778367][ T5271] usb 3-1: config 0 descriptor?? [ 122.845096][ T937] usb 5-1: USB disconnect, device number 13 [ 122.920304][ T7633] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 123.278827][ T5271] steelseries 0003:1038:12B6.000A: unbalanced collection at end of report description [ 123.289238][ T5271] steelseries 0003:1038:12B6.000A: probe with driver steelseries failed with error -22 [ 123.484360][ T5299] usb 3-1: USB disconnect, device number 14 [ 123.565645][ T5270] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.602308][ T7658] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 123.727458][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 123.738959][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.759816][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.790293][ T5270] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 123.809782][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 123.818839][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.836090][ T5270] usb 1-1: config 0 descriptor?? [ 124.169071][ T7687] process 'syz.2.1034' launched './file0' with NULL argv: empty string added [ 124.261513][ T5270] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 124.278873][ T5270] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 124.289725][ T5270] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 124.300954][ T5270] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 124.306223][ T7690] netlink: 'syz.2.1035': attribute type 1 has an invalid length. [ 124.313569][ T5270] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 124.325300][ T5270] uclogic 0003:5543:0003.000B: No inputs registered, leaving [ 124.334694][ T5270] uclogic 0003:5543:0003.000B: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0 [ 124.454286][ T5269] usb 1-1: USB disconnect, device number 5 [ 124.628059][ T7702] wg1 speed is unknown, defaulting to 1000 [ 124.695663][ T5270] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.885514][ T5270] usb 4-1: Using ep0 maxpacket: 16 [ 124.897659][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.921515][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.947909][ T5270] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 124.979195][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.018415][ T5270] usb 4-1: config 0 descriptor?? [ 125.084507][ T29] audit: type=1326 audit(1729650735.496:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.106516][ T29] audit: type=1326 audit(1729650735.516:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.128382][ T29] audit: type=1326 audit(1729650735.526:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.147029][ T7718] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 125.150154][ T29] audit: type=1326 audit(1729650735.526:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.178999][ T29] audit: type=1326 audit(1729650735.526:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.210306][ T7718] syz.0.1047 (7718) used greatest stack depth: 18192 bytes left [ 125.322279][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.342609][ T29] audit: type=1326 audit(1729650735.756:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.378977][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.386309][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.416107][ T29] audit: type=1326 audit(1729650735.836:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.466940][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.517117][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.550528][ T29] audit: type=1326 audit(1729650735.966:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.572695][ T29] audit: type=1326 audit(1729650735.966:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.594219][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.604692][ T5270] hid (null): invalid report_count 14993 [ 125.622348][ T29] audit: type=1326 audit(1729650735.966:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f477dff9 code=0x7ffc0000 [ 125.643795][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.818006][ T5270] usb 4-1: string descriptor 0 read error: -71 [ 125.865800][ T5270] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 125.873870][ T5270] letsketch 0003:6161:4D15.000C: probe with driver letsketch failed with error -32 [ 125.903444][ T5270] usb 4-1: USB disconnect, device number 8 [ 125.924151][ T7733] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 125.931172][ T7733] syzkaller0: linktype set to 780 [ 126.099020][ T7741] netem: change failed [ 126.125596][ T5271] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.204748][ T7745] tun0: tun_chr_ioctl cmd 1074025676 [ 126.224595][ T7745] tun0: owner set to 0 [ 126.331808][ T5271] usb 1-1: Using ep0 maxpacket: 16 [ 126.343139][ T5271] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 126.353536][ T7753] bridge0: port 3(ipvlan2) entered blocking state [ 126.373796][ T7753] bridge0: port 3(ipvlan2) entered disabled state [ 126.403795][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.405677][ T7753] ipvlan2: entered allmulticast mode [ 126.428644][ T5271] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.455634][ T7753] bridge0: entered allmulticast mode [ 126.467928][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.477448][ T7753] ipvlan2: left allmulticast mode [ 126.488093][ T5271] usb 1-1: Product: syz [ 126.492312][ T5271] usb 1-1: Manufacturer: syz [ 126.495822][ T7753] bridge0: left allmulticast mode [ 126.511164][ T5271] usb 1-1: SerialNumber: syz [ 126.532690][ T5271] usb 1-1: config 0 descriptor?? [ 126.550854][ T5271] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 126.579847][ T5271] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 126.941542][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 127.095664][ T5299] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 127.162635][ T5271] em28xx 1-1:0.0: chip ID is em2870 [ 127.261840][ T5299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 127.275767][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 127.281007][ T5299] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 127.301662][ T5299] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 127.323760][ T5299] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.333886][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.343878][ T5299] usb 5-1: SerialNumber: syz [ 127.351486][ T7779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.388580][ T5269] usb 1-1: USB disconnect, device number 6 [ 127.395114][ T5269] em28xx 1-1:0.0: Disconnecting em28xx [ 127.411873][ T5269] em28xx 1-1:0.0: Freeing device [ 127.436319][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 127.448299][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.464581][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.479621][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 127.494327][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.515355][ T8] usb 3-1: config 0 descriptor?? [ 127.578291][ T7779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.942957][ T8] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.000D/input/input24 [ 128.038324][ T8] creative-sb0540 0003:041E:3100.000D: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 128.120205][ T5299] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 128.177413][ T8] usb 3-1: USB disconnect, device number 15 [ 128.214488][ T5269] usb 5-1: USB disconnect, device number 14 [ 128.223316][ T5269] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 129.435744][ T7887] misc userio: Invalid payload size [ 129.676986][ T7903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.085549][ T937] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.220596][ T7928] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1149'. [ 130.255667][ T7928] netlink: 'syz.4.1149': attribute type 2 has an invalid length. [ 130.266557][ T7928] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 130.285769][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 130.305342][ T937] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.333366][ T937] usb 4-1: config 0 has no interface number 0 [ 130.350167][ T937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.375565][ T937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.385374][ T937] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 130.422884][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.425462][ T7938] mmap: syz.4.1151 (7938) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.442784][ T937] usb 4-1: config 0 descriptor?? [ 131.057904][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 131.057920][ T29] audit: type=1326 audit(1729650741.456:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.085748][ T29] audit: type=1326 audit(1729650741.456:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.107117][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.113350][ T29] audit: type=1326 audit(1729650741.456:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.135306][ T29] audit: type=1326 audit(1729650741.456:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.157394][ T29] audit: type=1326 audit(1729650741.456:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.179387][ T29] audit: type=1326 audit(1729650741.476:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.187680][ T937] uclogic 0003:28BD:0094.000E: pen parameters not found [ 131.200862][ T29] audit: type=1326 audit(1729650741.476:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.230107][ T29] audit: type=1326 audit(1729650741.476:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.252042][ T29] audit: type=1326 audit(1729650741.526:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.273640][ T937] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring [ 131.282483][ T29] audit: type=1326 audit(1729650741.676:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7969 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 131.283034][ T937] usb 4-1: USB disconnect, device number 9 [ 131.430751][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 131.442079][ T7985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.450255][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.463177][ T7985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.471152][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.868626][ T5224] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 131.878997][ T5224] Bluetooth: hci2: Injecting HCI hardware error event [ 131.889107][ T5221] Bluetooth: hci2: hardware error 0x00 [ 132.005983][ T8017] can0: slcan on ttyS3. [ 132.049695][ T8023] Bluetooth: MGMT ver 1.23 [ 132.076579][ T8017] can0 (unregistered): slcan off ttyS3. [ 132.138835][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1191'. [ 132.158481][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 132.708569][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 132.850198][ T8070] Bluetooth: MGMT ver 1.23 [ 132.879610][ T8073] netlink: 'syz.0.1212': attribute type 25 has an invalid length. [ 132.905595][ T8073] netlink: 'syz.0.1212': attribute type 8 has an invalid length. [ 133.104013][ T8090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1221'. [ 133.146197][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.152634][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.292076][ T8098] tipc: Started in network mode [ 133.319106][ T8098] tipc: Node identity 4, cluster identity 4711 [ 133.341019][ T8098] tipc: Node number set to 4 [ 133.367138][ T8098] tipc: Cannot configure node identity twice [ 133.620844][ T8104] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 133.639214][ T8104] netlink: 'syz.4.1224': attribute type 2 has an invalid length. [ 133.955011][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 133.964530][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 134.015734][ T5221] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 134.427681][ T8152] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 134.435786][ T8152] netlink: 9320 bytes leftover after parsing attributes in process `syz.0.1249'. [ 134.444991][ T8152] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 134.453046][ T8152] netlink: 'syz.0.1249': attribute type 2 has an invalid length. [ 134.500192][ T8154] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.548888][ T8156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1251'. [ 134.704994][ T8123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.712410][ T8123] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.734520][ T8123] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.749630][ T8123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.765680][ T8123] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.779762][ T8123] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.780068][ T8169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1257'. [ 134.796934][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1257'. [ 134.804983][ T8123] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.812834][ T8123] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.831834][ T8123] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.903299][ T8171] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.969272][ T8174] use of bytesused == 0 is deprecated and will be removed in the future, [ 134.995530][ T8174] use the actual size instead. [ 135.075865][ T5269] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 135.253531][ T8194] netlink: 'syz.4.1270': attribute type 4 has an invalid length. [ 135.333636][ T5269] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 135.377722][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.392591][ T5269] usb 3-1: Product: syz [ 135.402673][ T5269] usb 3-1: Manufacturer: syz [ 135.407438][ T5269] usb 3-1: SerialNumber: syz [ 135.423493][ T5269] usb 3-1: config 0 descriptor?? [ 135.674458][ T5269] usb 3-1: USB disconnect, device number 16 [ 136.016136][ T5224] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 136.017374][ T5221] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.022672][ T5227] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.152794][ T8242] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 136.627258][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 136.627274][ T29] audit: type=1326 audit(1729650747.046:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 136.679808][ T29] audit: type=1326 audit(1729650747.066:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 136.756773][ T29] audit: type=1326 audit(1729650747.076:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 136.815743][ T29] audit: type=1326 audit(1729650747.076:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 136.844839][ T5227] Bluetooth: hci4: command 0x0405 tx timeout [ 136.851329][ T5227] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.919612][ T29] audit: type=1326 audit(1729650747.076:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 136.989600][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.013471][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.028430][ T29] audit: type=1326 audit(1729650747.076:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 137.040568][ T8278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.049763][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.082278][ T29] audit: type=1326 audit(1729650747.076:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 137.083056][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.132233][ T29] audit: type=1326 audit(1729650747.076:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 137.134951][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.199669][ T29] audit: type=1326 audit(1729650747.076:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 137.238458][ T29] audit: type=1326 audit(1729650747.076:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8260 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808917dff9 code=0x7ffc0000 [ 137.275235][ T8275] bond0: (slave batadv0): Releasing backup interface [ 137.661262][ T8302] netlink: 'syz.0.1319': attribute type 9 has an invalid length. [ 137.683304][ T8302] __nla_validate_parse: 3 callbacks suppressed [ 137.683322][ T8302] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1319'. [ 138.095510][ T5224] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.895614][ T5224] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.903009][ T5224] Bluetooth: hci4: command 0x0405 tx timeout [ 139.166003][ T5271] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 139.335947][ T5271] usb 3-1: Using ep0 maxpacket: 16 [ 139.349366][ T5271] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 139.371542][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.389130][ T5271] usb 3-1: Product: syz [ 139.393526][ T5271] usb 3-1: Manufacturer: syz [ 139.401229][ T5271] usb 3-1: SerialNumber: syz [ 139.413004][ T5271] usb 3-1: config 0 descriptor?? [ 139.421668][ T5271] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 139.648831][ T5271] usb 3-1: USB disconnect, device number 17 [ 140.130496][ T8412] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1368'. [ 140.154227][ T8412] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 140.175805][ T5227] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.325061][ T8426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.379878][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.492571][ T8438] tipc: Started in network mode [ 140.505546][ T8438] tipc: Node identity :, cluster identity 4711 [ 140.525655][ T8438] tipc: Enabling of bearer rejected, failed to enable media [ 140.705617][ T5299] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.870606][ T5299] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 140.890002][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.901913][ T5299] usb 1-1: config 0 descriptor?? [ 140.909840][ T5299] usb 1-1: selecting invalid altsetting 1 [ 140.917115][ T5299] flexcop_usb: set interface failed. [ 140.923099][ T5299] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 140.977034][ T5224] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.983222][ T5227] Bluetooth: hci4: command 0x0405 tx timeout [ 141.021330][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1395'. [ 141.189005][ T937] usb 1-1: USB disconnect, device number 7 [ 141.285559][ T5299] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.445532][ T5299] usb 4-1: Using ep0 maxpacket: 32 [ 141.455236][ T5299] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.464302][ T5299] usb 4-1: config 0 has no interface number 0 [ 141.471934][ T5299] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.483306][ T5299] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.493563][ T5299] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 141.502949][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.513950][ T5299] usb 4-1: config 0 descriptor?? [ 141.726726][ T8466] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 141.822660][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 141.822677][ T29] audit: type=1326 audit(1729650752.236:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.1411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f924ff7dff9 code=0x0 [ 142.148919][ T5299] uclogic 0003:28BD:0094.000F: pen parameters not found [ 142.169831][ T5299] uclogic 0003:28BD:0094.000F: interface is invalid, ignoring [ 142.379627][ T9] usb 4-1: USB disconnect, device number 10 [ 142.480495][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'. [ 142.562930][ T8545] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1429'. [ 142.767350][ T8556] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1434'. [ 142.975921][ T5227] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.091211][ T8580] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 143.100723][ T8580] macsec1: entered promiscuous mode [ 143.112999][ T8580] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 143.125590][ T5299] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 143.276410][ T937] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 143.296912][ T5299] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 143.309710][ T5299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.319880][ T5299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.341504][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.350515][ T5299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.360687][ T5299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.371780][ T8590] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1450'. [ 143.382333][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.406168][ T5299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.422857][ T5299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.445702][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.456800][ T5299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.466211][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 143.472295][ T5299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.483948][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.492093][ T937] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 143.503546][ T5299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.514428][ T5299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.526882][ T937] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.536843][ T937] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.545044][ T937] usb 3-1: Product: syz [ 143.549467][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.556472][ T937] usb 3-1: Manufacturer: syz [ 143.561369][ T937] usb 3-1: SerialNumber: syz [ 143.567091][ T5299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.580423][ T937] usb 3-1: config 0 descriptor?? [ 143.585643][ T5299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.597743][ T8575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.615186][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.642016][ T5299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.653580][ T5299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.669131][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.680226][ T5299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.693961][ T5299] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.705061][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.705867][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.714251][ T5299] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 143.729665][ T5299] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 143.738213][ T5299] usb 5-1: Product: syz [ 143.742651][ T5299] usb 5-1: Manufacturer: syz [ 143.748209][ T5299] usb 5-1: SerialNumber: syz [ 143.759038][ T5299] usb 5-1: config 0 descriptor?? [ 143.768497][ T5299] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 143.822741][ T5269] usb 3-1: USB disconnect, device number 18 [ 143.897081][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 143.904364][ T8] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 143.913324][ T8] usb 1-1: config 0 has no interface number 0 [ 143.924993][ T8] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 143.934954][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.945962][ T8] usb 1-1: config 0 descriptor?? [ 143.990092][ T937] usb 5-1: USB disconnect, device number 15 [ 144.003674][ T937] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 144.056147][ T8] viperboard 1-1:0.143: version 0.00 found at bus 001 address 008 [ 144.074058][ T8] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 144.084234][ T8] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 144.168121][ T5299] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.179360][ T8] usb 1-1: USB disconnect, device number 8 [ 144.342251][ T5299] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.357244][ T5299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.369283][ T5299] usb 4-1: Product: syz [ 144.373494][ T5299] usb 4-1: Manufacturer: syz [ 144.384524][ T5299] usb 4-1: SerialNumber: syz [ 144.402685][ T5299] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 144.426829][ T5272] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.514584][ T8] hid-generic 0083:0000:0000.0010: unknown main item tag 0x0 [ 144.523438][ T8] hid-generic 0083:0000:0000.0010: unknown main item tag 0x0 [ 144.538274][ T8] hid-generic 0083:0000:0000.0010: hidraw0: HID vffffff.ff Device [syz0] on syz1 [ 145.231151][ T8647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.282944][ T8647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.365601][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 145.449852][ T8670] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1487'. [ 145.459305][ T5272] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 145.467753][ T5272] ath9k_htc: Failed to initialize the device [ 145.512137][ T5272] usb 4-1: ath9k_htc: USB layer deinitialized [ 145.545905][ T5269] usb 4-1: USB disconnect, device number 11 [ 145.555774][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 145.570749][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.596740][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.609806][ T8] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 145.625686][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.638872][ T8] usb 2-1: config 0 descriptor?? [ 145.999039][ T8684] sctp: [Deprecated]: syz.4.1492 (pid 8684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.999039][ T8684] Use struct sctp_sack_info instead [ 146.026763][ T8691] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 146.034653][ T8691] netlink: 'syz.0.1495': attribute type 2 has an invalid length. [ 146.055283][ T8] ntrig 0003:1B96:0008.0011: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 146.256839][ T8] ntrig 0003:1B96:0008.0011: Firmware version: 2.13.12.1.7 (35a5 3780) [ 146.327838][ T8705] usb usb8: usbfs: process 8705 (syz.3.1502) did not claim interface 0 before use [ 146.456626][ T5271] usb 2-1: USB disconnect, device number 11 [ 146.788207][ T29] audit: type=1400 audit(1729650757.206:94): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wa pid=8738 comm="syz.4.1518" name="sg0" dev="devtmpfs" ino=694 [ 147.155548][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 147.308808][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 147.321346][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 147.326314][ T8767] sp0: Synchronizing with TNC [ 147.336391][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.367133][ T8] usb 3-1: config 0 descriptor?? [ 147.380091][ T8] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 147.405919][ T8772] xt_bpf: check failed: parse error [ 147.518774][ T8777] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.915139][ T8804] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1549'. [ 147.933670][ T8804] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 148.102281][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 148.203803][ T8] gspca_sunplus: reg_w_riv err -71 [ 148.209444][ T8] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 148.225611][ T8] usb 3-1: USB disconnect, device number 19 [ 148.664506][ T8850] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 148.673296][ T8850] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1571'. [ 148.684112][ T8850] netlink: 18430 bytes leftover after parsing attributes in process `syz.3.1571'. [ 148.705965][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.876417][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 148.884057][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.903275][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.917535][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 148.928184][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 148.941504][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.961289][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.979358][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.995041][ T8] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 149.047497][ T8873] netem: incorrect ge model size [ 149.053753][ T8873] netem: change failed [ 149.106113][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.297027][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 149.374351][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.386678][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.415512][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 149.424612][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.456458][ T9] usb 4-1: config 0 descriptor?? [ 149.703806][ T29] audit: type=1326 audit(1729650760.116:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8889 comm="syz.4.1588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16f477dff9 code=0x0 [ 149.814166][ T8897] batadv_slave_1: entered promiscuous mode [ 149.821307][ T8896] batadv_slave_1: left promiscuous mode [ 149.884991][ T9] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 149.892874][ T9] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 149.905105][ T9] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 149.912774][ T9] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 149.920424][ T9] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 149.927946][ T9] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 149.935531][ T9] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 149.949802][ T9] playstation 0003:054C:0CE6.0012: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 150.083195][ T9] playstation 0003:054C:0CE6.0012: Invalid byte count transferred, expected 20 got 0 [ 150.094809][ T9] playstation 0003:054C:0CE6.0012: Failed to retrieve DualSense pairing info: -22 [ 150.111406][ T9] playstation 0003:054C:0CE6.0012: Failed to get MAC address from DualSense [ 150.120349][ T9] playstation 0003:054C:0CE6.0012: Failed to create dualsense. [ 150.135250][ T9] playstation 0003:054C:0CE6.0012: probe with driver playstation failed with error -22 [ 150.330178][ T5271] usb 4-1: USB disconnect, device number 12 [ 150.759498][ T8941] misc userio: Can't change port type on an already running userio instance [ 151.042087][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 151.474603][ T5272] usb 1-1: USB disconnect, device number 9 [ 151.905786][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.057561][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 152.065484][ T8] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 152.074697][ T8] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 152.105043][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 152.114313][ T8] usb 4-1: config 1 has no interface number 0 [ 152.131284][ T8] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.142914][ T8] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 152.178220][ T8] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 152.210852][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.242145][ T8] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 152.499195][ T9029] pimreg: entered allmulticast mode [ 152.509158][ T9027] pimreg: left allmulticast mode [ 152.742773][ T9034] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 152.811429][ T8] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 153.017101][ T9048] sch_fq: defrate 0 ignored. [ 153.053076][ T8] usb 4-1: USB disconnect, device number 13 [ 153.066676][ T8] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 153.282647][ T9066] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 153.296990][ T9066] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1665'. [ 153.308843][ T9066] openvswitch: netlink: Actions may not be safe on all matching packets [ 153.345586][ T5272] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 153.505584][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 153.515915][ T5271] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 153.527080][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.539185][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.549184][ T5272] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.573861][ T5272] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 153.587808][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.605090][ T5272] usb 3-1: config 0 descriptor?? [ 153.675610][ T5271] usb 2-1: Using ep0 maxpacket: 8 [ 153.682553][ T5271] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 153.701858][ T5271] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.721934][ T5271] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.732712][ T5271] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.743206][ T5271] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.756960][ T5271] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.767423][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.899145][ T9088] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1675'. [ 153.998463][ T5271] usb 2-1: GET_CAPABILITIES returned 0 [ 154.012957][ T5271] usbtmc 2-1:16.0: can't read capabilities [ 154.027441][ T5272] logitech 0003:046D:C29C.0013: report_id 35679 is invalid [ 154.034705][ T5272] logitech 0003:046D:C29C.0013: item 0 2 1 8 parsing failed [ 154.061759][ T5272] logitech 0003:046D:C29C.0013: parse failed [ 154.074189][ T5272] logitech 0003:046D:C29C.0013: probe with driver logitech failed with error -22 [ 154.137960][ T9101] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1681'. [ 154.195931][ T8] kernel write not supported for file /snd/seq (pid: 8 comm: kworker/0:0) [ 154.220796][ T8] usb 2-1: USB disconnect, device number 12 [ 154.252118][ T9] usb 3-1: USB disconnect, device number 20 [ 154.856374][ T9144] input: syz0 as /devices/virtual/input/input26 [ 154.950100][ T9148] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1704'. [ 155.029665][ T9153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.051753][ T9154] netlink: 'syz.2.1707': attribute type 10 has an invalid length. [ 155.073944][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1707'. [ 155.092347][ T9154] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 155.202531][ T9159] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 155.573024][ T9184] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 155.580597][ T9184] macsec1: entered promiscuous mode [ 155.589731][ T9184] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 155.690613][ T9191] dvmrp0: entered allmulticast mode [ 155.737254][ T9192] bridge0: port 3(bond1) entered blocking state [ 155.746546][ T9192] bridge0: port 3(bond1) entered disabled state [ 155.758706][ T9192] bond1: entered allmulticast mode [ 155.777247][ T9192] bond1: entered promiscuous mode [ 155.900674][ T9204] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.1729'. [ 155.959585][ T9208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.191542][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'. [ 156.471790][ T9237] netlink: 'syz.1.1745': attribute type 11 has an invalid length. [ 156.905117][ T9260] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 156.924062][ T9260] macsec1: entered promiscuous mode [ 156.925748][ T5272] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 156.941596][ T9260] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 157.095612][ T5272] usb 4-1: Using ep0 maxpacket: 16 [ 157.112645][ T5272] usb 4-1: config 0 has no interfaces? [ 157.121931][ T5272] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 157.155363][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.159309][ T9270] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 157.163491][ T5272] usb 4-1: Product: syz [ 157.163514][ T5272] usb 4-1: Manufacturer: syz [ 157.163528][ T5272] usb 4-1: SerialNumber: syz [ 157.176375][ T5272] usb 4-1: config 0 descriptor?? [ 157.288518][ T937] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 157.419592][ T5272] usb 4-1: USB disconnect, device number 14 [ 157.427022][ T9283] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1764'. [ 157.452916][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.471641][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 157.485602][ T937] usb 1-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 157.498424][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.510586][ T9287] netlink: 'syz.4.1766': attribute type 6 has an invalid length. [ 157.511969][ T937] usb 1-1: config 0 descriptor?? [ 157.614546][ T9289] netlink: 'syz.4.1767': attribute type 14 has an invalid length. [ 157.720375][ T9291] kAFS: unable to lookup cell 'onstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 157.720375][ T9291] vmx flags ' [ 157.771617][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.796057][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.821939][ T937] usbhid 1-1:0.0: can't add hid device: -71 [ 157.830078][ T937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.844617][ T937] usb 1-1: USB disconnect, device number 10 [ 158.285636][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.456859][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 158.470322][ T9324] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 158.479381][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.509707][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 158.528846][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.546148][ T9] usb 1-1: config 0 descriptor?? [ 158.606663][ T9] rc_core: IR keymap rc-xbox-dvd not found [ 158.613813][ T9] Registered IR keymap rc-empty [ 158.622389][ T9] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 158.647838][ T9] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 158.668790][ T9] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 158.686280][ T9] input: failed to attach handler kbd to device input27, error: -5 [ 158.700083][ T4660] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 158.720441][ T4660] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 158.787497][ T8] usb 1-1: USB disconnect, device number 11 [ 159.029452][ T9338] iou-wrk-9337 (9338): drop_caches: 2 [ 159.704037][ T9375] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 159.725842][ T9375] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.1805'. [ 159.735058][ T9375] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 160.073061][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 160.525625][ T937] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 160.679971][ T937] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 160.692698][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.717152][ T937] usb 4-1: config 0 descriptor?? [ 160.742298][ T937] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 160.961001][ T9402] netlink: 'syz.4.1817': attribute type 8 has an invalid length. [ 160.973979][ T937] gp8psk: usb in 128 operation failed. [ 161.015611][ T937] gp8psk: usb in 137 operation failed. [ 161.045706][ T937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.105119][ T937] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 161.165261][ T937] usb 4-1: media controller created [ 161.279194][ T937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.358707][ T937] gp8psk_fe: Frontend attached [ 161.384334][ T937] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 161.443526][ T937] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 161.773669][ T937] gp8psk: usb in 137 operation failed. [ 161.804029][ T937] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 161.841720][ T937] gp8psk: found Genpix USB device pID = 203 (hex) [ 161.860516][ T937] usb 4-1: USB disconnect, device number 15 [ 161.971153][ T937] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 168.235601][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1831'. [ 168.807265][ T9468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1848'. [ 168.835668][ T9468] netem: unknown loss type 13 [ 168.906150][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 168.952701][ T9471] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1849'. [ 169.690249][ T5269] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 169.699231][ T5269] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 169.713550][ T5269] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 169.770846][ T9502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1863'. [ 170.117127][ T9526] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1873'. [ 170.175719][ T937] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 170.245855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 170.337357][ T937] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 170.374653][ T937] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.388494][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.415190][ T937] usb 1-1: Product: syz [ 170.425057][ T937] usb 1-1: Manufacturer: syz [ 170.439284][ T937] usb 1-1: SerialNumber: syz [ 170.456747][ T9515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 170.665730][ T5269] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 170.678265][ T9551] IPv6: sit1: Disabled Multicast RS [ 170.701511][ T937] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 170.727324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 170.736028][ T937] usb 1-1: USB disconnect, device number 12 [ 170.827297][ T5269] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 170.934633][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 170.955708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 170.964500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 171.009254][ T5269] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 171.029794][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.051127][ T5269] usb 4-1: config 0 descriptor?? [ 171.195802][ T937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 171.355562][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 171.369532][ T937] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 171.386403][ T937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.406616][ T937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.425657][ T937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 171.446449][ T937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.464183][ T937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 171.477080][ T5269] appletouch 4-1:0.0: Geyser mode initialized. [ 171.482351][ T937] usb 1-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.501202][ T937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.506227][ T5269] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 171.524884][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.541676][ T9515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.564997][ C1] appletouch 4-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 171.715921][ T8] usb 4-1: USB disconnect, device number 16 [ 171.733238][ T8] appletouch 4-1:0.0: input: appletouch disconnected [ 171.754009][ T937] usb 1-1: usb_control_msg returned -32 [ 171.766494][ T937] usbtmc 1-1:16.0: can't read capabilities [ 171.787799][ T937] usb 1-1: USB disconnect, device number 13 [ 172.875607][ T937] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 173.035649][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 173.123398][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.179956][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.197053][ T937] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 173.213463][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.237738][ T937] usb 5-1: config 0 descriptor?? [ 173.285619][ T5269] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 173.436210][ T5269] usb 3-1: Using ep0 maxpacket: 32 [ 173.443756][ T9654] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1933'. [ 173.446084][ T29] audit: type=1326 audit(1729650783.856:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9652 comm="syz.3.1934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107537dff9 code=0x0 [ 173.492541][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.493521][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 173.503768][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.510603][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 173.525453][ T5269] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 173.539903][ T937] usb 5-1: USB disconnect, device number 16 [ 173.540327][ T5269] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 173.555227][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.568127][ T5269] usb 3-1: config 0 descriptor?? [ 173.771285][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 173.780716][ T5271] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 173.945553][ T5271] usb 1-1: Using ep0 maxpacket: 16 [ 173.952607][ T5271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.963169][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.974298][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.984084][ T5271] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 173.993984][ T5271] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.994687][ T5269] hid (null): global environment stack underflow [ 174.009194][ T5271] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.023120][ T5271] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.031943][ T5269] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0015/input/input29 [ 174.031947][ T5271] usb 1-1: Manufacturer: syz [ 174.047147][ T5271] usb 1-1: config 0 descriptor?? [ 174.065903][ T937] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 174.111062][ T5269] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0015/input/input30 [ 174.135247][ T5269] kye 0003:0458:5011.0015: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 174.159451][ T1058] bridge_slave_1: left allmulticast mode [ 174.165843][ T1058] bridge_slave_1: left promiscuous mode [ 174.172665][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.189284][ T1058] bridge_slave_0: left allmulticast mode [ 174.195033][ T1058] bridge_slave_0: left promiscuous mode [ 174.203017][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.217720][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.231544][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.245218][ T937] usb 5-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice= 0.00 [ 174.275989][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.306493][ T937] usb 5-1: config 0 descriptor?? [ 174.323911][ T5269] usb 3-1: USB disconnect, device number 21 [ 174.344669][ T937] HFC-S_USB 5-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 174.406363][ T5271] rc_core: IR keymap rc-hauppauge not found [ 174.412423][ T5271] Registered IR keymap rc-empty [ 174.426039][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.452458][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.488635][ T5271] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 174.492792][ T9657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.501805][ T5271] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 174.526330][ T9657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.549123][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 174.555132][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 174.581662][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.589489][ T937] usb 5-1: USB disconnect, device number 17 [ 174.620666][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.661629][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.689733][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.716943][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.786264][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.806012][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.833774][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.867096][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.888560][ T5271] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 174.921532][ T5271] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 174.929952][ T5271] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 174.948570][ T5271] usb 1-1: USB disconnect, device number 14 [ 175.580173][ T1058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.614362][ T1058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.652166][ T1058] bond0 (unregistering): Released all slaves [ 175.771206][ T1128] infiniband syz1: set down [ 176.078022][ T9681] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1945'. [ 176.101682][ T5271] wg1 speed is unknown, defaulting to 1000 [ 176.109729][ T5271] wg1 speed is unknown, defaulting to 1000 [ 176.281498][ T9692] wg1 speed is unknown, defaulting to 1000 [ 176.675580][ T937] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 176.873691][ T937] usb 5-1: config 0 has no interfaces? [ 176.879568][ T937] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.896700][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.925941][ T937] usb 5-1: config 0 descriptor?? [ 179.174815][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 187.001637][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.012351][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.022019][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.030239][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.045637][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 187.053164][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.846235][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.863500][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.872436][ T5227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.887063][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.894823][ T5227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 187.902865][ T5227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.135631][ T5227] Bluetooth: hci5: command tx timeout [ 189.832688][ T5224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.846937][ T5224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.864052][ T5224] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.873871][ T5224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.881741][ T5224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 189.889362][ T5224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.939998][ T5227] Bluetooth: hci6: command tx timeout [ 191.206963][ T9692] dvmrp0: entered allmulticast mode [ 191.221728][ T5227] Bluetooth: hci5: command tx timeout [ 191.248159][ T9714] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 191.326247][ T9756] ip6erspan0: tun_chr_ioctl cmd 2147767519 [ 191.945852][ T5227] Bluetooth: hci7: command tx timeout [ 192.015656][ T5227] Bluetooth: hci6: command tx timeout [ 192.143724][ T9776] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1982'. [ 192.153393][ T9776] openvswitch: netlink: Multiple metadata blocks provided [ 193.295651][ T5227] Bluetooth: hci5: command tx timeout [ 194.015578][ T5227] Bluetooth: hci7: command tx timeout [ 194.095701][ T5227] Bluetooth: hci6: command tx timeout [ 194.582001][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.588542][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.390130][ T5227] Bluetooth: hci5: command tx timeout [ 195.646180][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.663371][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.675723][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.684147][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.695628][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.702957][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.095592][ T5224] Bluetooth: hci7: command tx timeout [ 196.175645][ T5224] Bluetooth: hci6: command tx timeout [ 197.775741][ T5224] Bluetooth: hci0: command tx timeout [ 198.175964][ T5224] Bluetooth: hci7: command tx timeout [ 198.505394][ C0] sched: DL replenish lagged too much [ 199.855821][ T5224] Bluetooth: hci0: command tx timeout [ 201.935629][ T5224] Bluetooth: hci0: command tx timeout [ 209.316017][ T5224] Bluetooth: hci0: command tx timeout [ 210.052987][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.065131][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.082677][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.116599][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.253669][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.264272][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.335844][ T5224] Bluetooth: hci2: command tx timeout [ 212.608654][ T8] usb 5-1: USB disconnect, device number 18 [ 213.047454][ T9782] ip6gretap0: entered promiscuous mode [ 213.063655][ T9782] ip6gretap0: left promiscuous mode [ 214.415765][ T5224] Bluetooth: hci2: command tx timeout [ 217.503602][ T5224] Bluetooth: hci2: command tx timeout [ 231.735872][ T5227] Bluetooth: hci2: command tx timeout [ 233.462389][ T9762] wg1 speed is unknown, defaulting to 1000 [ 233.774777][ T1058] hsr_slave_0: left promiscuous mode [ 233.816921][ T1058] hsr_slave_1: left promiscuous mode [ 233.854433][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.875640][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.913072][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.945652][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.003137][ T1058] veth1_macvtap: left promiscuous mode [ 234.030884][ T1058] veth0_macvtap: left promiscuous mode [ 234.046910][ T1058] veth1_vlan: left promiscuous mode [ 234.052637][ T1058] veth0_vlan: left promiscuous mode [ 234.321185][ T1058] infiniband syz1: set down [ 256.198659][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.210525][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 309.389026][ T5224] Bluetooth: hci5: command 0x0406 tx timeout [ 317.800301][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.819756][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.089854][ T5230] Bluetooth: hci6: command 0x0406 tx timeout [ 319.111779][ T5230] Bluetooth: hci7: command 0x0406 tx timeout [ 321.547034][ T5227] Bluetooth: hci0: command 0x0406 tx timeout [ 335.995821][ T5221] Bluetooth: hci2: command 0x0406 tx timeout [ 377.115105][ T30] INFO: task syz-executor:9765 blocked for more than 143 seconds. [ 377.136293][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 377.143979][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.449048][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.468707][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.665363][ T30] task:syz-executor state:D stack:24128 pid:9765 tgid:9765 ppid:1 flags:0x00004004 [ 380.745469][ T30] Call Trace: [ 380.748844][ T30] [ 380.751810][ T30] __schedule+0x185a/0x4b70 [ 380.835400][ T30] ? __pfx___schedule+0x10/0x10 [ 380.840332][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.905356][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.910896][ T30] ? schedule+0x90/0x320 [ 380.915164][ T30] schedule+0x14b/0x320 [ 380.999839][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.052467][ T30] __mutex_lock+0x6a7/0xd70 [ 381.065453][ T30] ? xas_find_marked+0xf5d/0x10e0 [ 381.070555][ T30] ? __mutex_lock+0x52a/0xd70 [ 381.113451][ T30] ? add_one_compat_dev+0x10d/0x710 [ 381.139950][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.145061][ T30] ? xa_find+0x36c/0x420 [ 381.183057][ T30] ? __pfx_down_read+0x10/0x10 [ 381.190634][ T30] add_one_compat_dev+0x10d/0x710 [ 381.224350][ T30] ? fs_reclaim_acquire+0x93/0x130 [ 381.239792][ T30] rdma_dev_init_net+0x1f1/0x280 [ 381.244818][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 381.285426][ T30] ops_init+0x31e/0x590 [ 381.289657][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 381.335392][ T30] setup_net+0x287/0x9e0 [ 381.339703][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 381.387911][ T30] ? __pfx_setup_net+0x10/0x10 [ 381.392769][ T30] copy_net_ns+0x33f/0x570 [ 381.439540][ T30] create_new_namespaces+0x425/0x7b0 [ 381.444934][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 381.495549][ T30] ksys_unshare+0x57d/0xa70 [ 381.500644][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 381.545378][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.551815][ T30] ? do_syscall_64+0x100/0x230 [ 381.595389][ T30] __x64_sys_unshare+0x38/0x40 [ 381.609811][ T30] do_syscall_64+0xf3/0x230 [ 381.614417][ T30] ? clear_bhb_loop+0x35/0x90 [ 381.655383][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.661375][ T30] RIP: 0033:0x7ff62377f7f7 [ 381.715535][ T30] RSP: 002b:00007ffc09eb2098 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 381.724030][ T30] RAX: ffffffffffffffda RBX: 00007ff623935f40 RCX: 00007ff62377f7f7 [ 381.796512][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 381.825418][ T30] RBP: 00007ff623936a38 R08: 0000000000000000 R09: 0000000000000000 [ 381.833467][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 381.895384][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 381.903445][ T30] [ 381.969584][ T30] [ 381.969584][ T30] Showing all locks held in the system: [ 382.006748][ T30] 1 lock held by khungtaskd/30: [ 382.045441][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 382.095391][ T30] 3 locks held by kworker/1:1/51: [ 382.100474][ T30] #0: ffff888020ab4d48 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 382.195366][ T30] #1: ffffc90000bb7d00 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 382.255375][ T30] #2: ffff888021f91230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 382.265068][ T30] 6 locks held by kworker/u8:6/1058: [ 382.355395][ T30] 3 locks held by kworker/R-ipv6_/2729: [ 382.361009][ T30] #0: ffff88802e227148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 382.445389][ T30] #1: ffffc90009b67c80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 382.505332][ T30] #2: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 382.514921][ T30] 1 lock held by syslogd/4657: [ 382.575398][ T30] 2 locks held by klogd/4664: [ 382.580142][ T30] 5 locks held by dhcpcd/4889: [ 382.584925][ T30] 2 locks held by getty/4978: [ 382.655387][ T30] #0: ffff88814b9850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 382.705340][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 382.775429][ T30] 1 lock held by syz-executor/5207: [ 382.780690][ T30] 3 locks held by kworker/0:6/5270: [ 382.825373][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 382.875354][ T30] #1: ffffc900040c7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 382.935369][ T30] #2: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 382.985344][ T30] 2 locks held by kworker/1:3/5271: [ 382.990606][ T30] 2 locks held by syz-executor/9762: [ 383.035368][ T30] #0: ffffffff8fcb3e50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.044880][ T30] #1: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 383.135707][ T30] 4 locks held by syz-executor/9765: [ 383.141050][ T30] #0: ffffffff8fcb3e50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.195382][ T30] #1: ffffffff8fa2fab0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 383.205157][ T30] #2: ffffffff8fa2fc70 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 383.315388][ T30] #3: ffff888021f90f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 383.379289][ T30] 6 locks held by syz-executor/9768: [ 383.384637][ T30] #0: ffffffff8fcb3e50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.425355][ T30] #1: ffffffff8fa2fab0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 383.435212][ T30] #2: ffffffff8fa2fc70 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 383.545335][ T30] #3: ffff888021f90f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 383.595365][ T30] #4: ffff888021f91230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 383.605047][ T30] #5: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 383.669503][ T30] 1 lock held by syz.2.1985/9782: [ 383.674689][ T30] #0: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 383.745428][ T30] 2 locks held by syz-executor/9784: [ 383.779936][ T30] #0: ffffffff8fcb3e50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.825343][ T30] #1: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.875356][ T30] 2 locks held by syz-executor/9787: [ 383.880795][ T30] #0: ffffffff8fcb3e50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.935417][ T30] #1: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.985425][ T30] 3 locks held by kworker/u8:10/9790: [ 383.990870][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 384.065377][ T30] #1: ffffc90003777d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 384.125337][ T30] #2: ffffffff8fcc0948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 384.134412][ T30] 3 locks held by syz-executor/9802: [ 384.180264][ T30] 2 locks held by syz-executor/9806: [ 384.205348][ T30] 3 locks held by syz-executor/9807: [ 384.210740][ T30] [ 384.213079][ T30] ============================================= [ 384.213079][ T30] [ 384.285475][ T30] NMI backtrace for cpu 1 [ 384.289880][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 384.300411][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.310505][ T30] Call Trace: [ 384.313806][ T30] [ 384.316757][ T30] dump_stack_lvl+0x241/0x360 [ 384.321469][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.326697][ T30] ? __pfx__printk+0x10/0x10 [ 384.331321][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 384.336287][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 384.341751][ T30] ? _printk+0xd5/0x120 [ 384.345901][ T30] ? __pfx__printk+0x10/0x10 [ 384.350483][ T30] ? __wake_up_klogd+0xcc/0x110 [ 384.355331][ T30] ? __pfx__printk+0x10/0x10 [ 384.359921][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 384.364946][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.370928][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 384.376912][ T30] watchdog+0xff4/0x1040 [ 384.381157][ T30] ? watchdog+0x1ea/0x1040 [ 384.385575][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.390248][ T30] kthread+0x2f0/0x390 [ 384.394310][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.398985][ T30] ? __pfx_kthread+0x10/0x10 [ 384.403633][ T30] ret_from_fork+0x4b/0x80 [ 384.408045][ T30] ? __pfx_kthread+0x10/0x10 [ 384.412627][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.417393][ T30] [ 384.421243][ T30] Sending NMI from CPU 1 to CPUs 0: [ 384.427079][ C0] NMI backtrace for cpu 0 [ 384.427094][ C0] CPU: 0 UID: 0 PID: 9807 Comm: syz-executor Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 384.427113][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.427123][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x0/0x120 [ 384.427151][ C0] Code: 74 24 08 e8 d2 b8 a8 f5 48 83 c4 08 48 89 df 5b e9 75 20 aa f5 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 384.427170][ C0] RSP: 0018:ffffc900001f7838 EFLAGS: 00000202 [ 384.427184][ C0] RAX: 0000000000000001 RBX: ffffea0006be6540 RCX: ffff888140ef8000 [ 384.427196][ C0] RDX: ffff8881af995dc0 RSI: ffffea0006be6540 RDI: ffff888140ef9000 [ 384.427207][ C0] RBP: 00000000000c0001 R08: 0000000000000001 R09: ffffffff81fb8a2f [ 384.427218][ C0] R10: dffffc0000000000 R11: ffffed10170c89b1 R12: ffff8881af995b40 [ 384.427230][ C0] R13: ffff888140ef9000 R14: 0000000000000001 R15: 0000000000000000 [ 384.427240][ C0] FS: 0000555589c0d500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 384.427254][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.427265][ C0] CR2: 00007fcf82468740 CR3: 000000007c6b4000 CR4: 00000000003526f0 [ 384.427280][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 384.427290][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 384.427300][ C0] Call Trace: [ 384.427306][ C0] [ 384.427313][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 384.427332][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 384.427354][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 384.427372][ C0] ? nmi_handle+0x2a/0x5a0 [ 384.427394][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 384.427411][ C0] ? nmi_handle+0x14f/0x5a0 [ 384.427433][ C0] ? nmi_handle+0x2a/0x5a0 [ 384.427449][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 384.427467][ C0] ? default_do_nmi+0x63/0x160 [ 384.427486][ C0] ? exc_nmi+0x123/0x1f0 [ 384.427504][ C0] ? end_repeat_nmi+0xf/0x53 [ 384.427520][ C0] ? qlist_free_all+0x8f/0x140 [ 384.427539][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 384.427559][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 384.427578][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 384.427598][ C0] [ 384.427603][ C0] [ 384.427608][ C0] __slab_free+0xec/0x3d0 [ 384.427627][ C0] ? __phys_addr+0xba/0x170 [ 384.427644][ C0] qlist_free_all+0x9a/0x140 [ 384.427662][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 384.427682][ C0] __kasan_kmalloc+0x23/0xb0 [ 384.427700][ C0] ? tomoyo_encode+0x26f/0x540 [ 384.427719][ C0] ? tomoyo_encode+0x26f/0x540 [ 384.427736][ C0] __kmalloc_noprof+0x1fc/0x400 [ 384.427754][ C0] tomoyo_encode+0x26f/0x540 [ 384.427774][ C0] tomoyo_realpath_from_path+0x59e/0x5e0 [ 384.427798][ C0] tomoyo_realpath_nofollow+0xba/0x100 [ 384.427817][ C0] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 384.427840][ C0] tomoyo_find_next_domain+0x27c/0x1d40 [ 384.427861][ C0] ? __pfx___kernel_read+0x10/0x10 [ 384.427878][ C0] ? __pfx_lock_release+0x10/0x10 [ 384.427897][ C0] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 384.427918][ C0] ? tomoyo_bprm_check_security+0xe8/0x180 [ 384.427937][ C0] tomoyo_bprm_check_security+0x114/0x180 [ 384.427957][ C0] security_bprm_check+0x86/0x250 [ 384.427977][ C0] bprm_execve+0xa56/0x1770 [ 384.427995][ C0] ? __pfx_lock_release+0x10/0x10 [ 384.428021][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 384.428036][ C0] ? put_arg_page+0xe0/0x260 [ 384.428058][ C0] do_execveat_common+0x55f/0x6f0 [ 384.428080][ C0] __x64_sys_execve+0x92/0xb0 [ 384.428098][ C0] do_syscall_64+0xf3/0x230 [ 384.428113][ C0] ? clear_bhb_loop+0x35/0x90 [ 384.428129][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.428149][ C0] RIP: 0033:0x7f739cdb0ef7 [ 384.428162][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.428173][ C0] RSP: 002b:00007f739db9ee78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 384.428190][ C0] RAX: ffffffffffffffda RBX: 00007f739ce15a70 RCX: 00007f739cdb0ef7 [ 384.428201][ C0] RDX: 00007ffd0809e660 RSI: 00007ffd0809e8a0 RDI: 00007ffd080a0ef2 [ 384.428212][ C0] RBP: 00007ffd0809e6d0 R08: 00007f739db9ef20 R09: 0000000000000000 [ 384.428222][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000555589c34930 [ 384.428232][ C0] R13: 0000000000000100 R14: 00007ffd0809e680 R15: 00007ffd0809e430 [ 384.428250][ C0] [ 384.977145][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 384.984057][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 384.994672][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.004753][ T30] Call Trace: [ 385.008053][ T30] [ 385.011003][ T30] dump_stack_lvl+0x241/0x360 [ 385.015716][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.020935][ T30] ? __pfx__printk+0x10/0x10 [ 385.025547][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 385.031579][ T30] ? vscnprintf+0x5d/0x90 [ 385.035943][ T30] panic+0x349/0x880 [ 385.039868][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 385.046062][ T30] ? __pfx_panic+0x10/0x10 [ 385.050515][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 385.055915][ T30] ? __irq_work_queue_local+0x137/0x410 [ 385.061497][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 385.066897][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 385.073082][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 385.079272][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 385.085469][ T30] watchdog+0x1033/0x1040 [ 385.089835][ T30] ? watchdog+0x1ea/0x1040 [ 385.094291][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.099000][ T30] kthread+0x2f0/0x390 [ 385.103102][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.107809][ T30] ? __pfx_kthread+0x10/0x10 [ 385.112425][ T30] ret_from_fork+0x4b/0x80 [ 385.116873][ T30] ? __pfx_kthread+0x10/0x10 [ 385.121491][ T30] ret_from_fork_asm+0x1a/0x30 [ 385.126295][ T30] [ 385.129598][ T30] Kernel Offset: disabled [ 385.133924][ T30] Rebooting in 86400 seconds..