last executing test programs: 2m46.01934189s ago: executing program 4 (id=15902): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x2000400c) 2m45.78735548s ago: executing program 4 (id=15906): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) 2m45.609906629s ago: executing program 4 (id=15909): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x58, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x47}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{0x0, 0x2, 0x4}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]]}, 0x58}}, 0x0) 2m45.365878698s ago: executing program 4 (id=15914): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40002022) 2m45.203786773s ago: executing program 4 (id=15916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/65}, 0x20) 2m44.784470159s ago: executing program 4 (id=15925): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m28.675516301s ago: executing program 32 (id=15925): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m50.401247593s ago: executing program 5 (id=16788): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'veth0_vlan\x00', {0x1}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x0, 'geneve0\x00', {}, 0x1ff}) 1m50.176004329s ago: executing program 5 (id=16790): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 1m50.060634598s ago: executing program 5 (id=16793): timer_create(0xb, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 1m49.913173169s ago: executing program 5 (id=16796): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf}) 1m49.761797258s ago: executing program 5 (id=16800): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m49.578624742s ago: executing program 5 (id=16803): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r0, 0x0}]) 1m33.456274566s ago: executing program 33 (id=16803): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r0, 0x0}]) 1m26.322481983s ago: executing program 2 (id=17071): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x40086602, &(0x7f0000000000)) 1m26.188889464s ago: executing program 2 (id=17074): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x415, 0x40000020, r0, 0x0) 1m26.116262295s ago: executing program 2 (id=17075): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xdb}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 1m26.018433439s ago: executing program 2 (id=17077): r0 = timerfd_create(0x7, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000001300)=[{r0, 0x4}], 0x1, 0x9) 1m25.861561355s ago: executing program 2 (id=17080): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file1\x00') 1m25.796919065s ago: executing program 2 (id=17082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 1m9.571685875s ago: executing program 34 (id=17082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 55.633719736s ago: executing program 6 (id=17452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setresuid(0x0, 0xee00, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) 55.316979403s ago: executing program 6 (id=17456): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 55.15535227s ago: executing program 6 (id=17459): unshare(0xc040480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 54.95989918s ago: executing program 6 (id=17462): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/253, 0xfd}], 0x1, 0x2, 0x7ff) 54.824743837s ago: executing program 6 (id=17465): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240)) 54.608843282s ago: executing program 6 (id=17469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01040000000000000000020000040900010073797a30"], 0x50}}, 0x0) 38.484853793s ago: executing program 35 (id=17469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01040000000000000000020000040900010073797a30"], 0x50}}, 0x0) 4.574328244s ago: executing program 1 (id=18145): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x0, "cb6d"}, @main=@item_4={0x3, 0x0, 0x8, "9fea28c8"}, @local, @local=@item_4={0x3, 0x2, 0x1, "7d1b9b9f"}, @global=@item_4={0x3, 0x1, 0x4, "19000003"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0x9, "93cb2eba"}]}}, 0x0}, 0x0) 3.779843732s ago: executing program 3 (id=18156): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000240)="240000001a005f0214f9f407000904001f00000000000000000000000800040001001000", 0x24) 3.669214797s ago: executing program 3 (id=18157): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 3.595442135s ago: executing program 3 (id=18158): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) lseek(r0, 0x1, 0x0) 3.503626576s ago: executing program 3 (id=18159): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3.196809654s ago: executing program 3 (id=18161): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 3.097174377s ago: executing program 3 (id=18164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040435522050000000000010902240001000000000904020001030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.575962792s ago: executing program 1 (id=18175): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 2.48191041s ago: executing program 1 (id=18177): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000100)=""/171, 0xab) getdents(r0, 0x0, 0x0) 2.479997853s ago: executing program 0 (id=18178): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 2.352239743s ago: executing program 0 (id=18180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800d000100756470877615717995a8"], 0x28}}, 0x0) 2.308908721s ago: executing program 1 (id=18182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) 2.147743892s ago: executing program 0 (id=18185): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 2.087202075s ago: executing program 1 (id=18187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r1, 0xffff}, 0x8) 2.001232049s ago: executing program 0 (id=18189): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 1.895790831s ago: executing program 1 (id=18191): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x738, 0x1705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb7be, 0x3, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 1.862790965s ago: executing program 0 (id=18192): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x7800, 0x7, 0x8, 0x7fff, {{0x5, 0x4, 0x1, 0x3c, 0x14, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @private=0xa010101}}}}) 1.709825794s ago: executing program 7 (id=18194): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x80, r1}) 1.685361011s ago: executing program 0 (id=18195): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 1.551972803s ago: executing program 7 (id=18196): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.340930716s ago: executing program 8 (id=18197): unshare(0x22020400) r0 = openat$pidfd(0xffffff9c, &(0x7f00000000c0), 0x20c080, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 1.155991512s ago: executing program 8 (id=18198): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000040)={0x0, 0x0, r1}) 1.028940822s ago: executing program 8 (id=18199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3) 875.858661ms ago: executing program 8 (id=18200): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 844.16547ms ago: executing program 7 (id=18201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x8848}, @val={0x1, 0x4, 0x3, 0xff, 0xc5, 0xe}, @x25={0x0, 0x90, 0xf7, "cda81b0e41d42558f28a769b587004030a9bea28452f88b4593afc72f4e3bf186a0998eb6e4891f72ba9e3e54707f13bd5b95eb08299c13ef1d11e92eefee36e1926db59c4e2b4fe96d47a043a85608c67476ed9743332cf191e486e87084723586edc16abd7cfd4203a7f2fa4f0316e4c459d2676a8cf626399a003d42ffa2cd97ca06c499c669f6f572055c8a03732d3b0c06a781be86fe93ec826a966b9348b647c48a3925272135671086c4397b5d5ff201568a946fb4691609d937d3d9935c223790cf9356e63eb916ea72fb977c5b00195780b"}}, 0xe7) 240.238852ms ago: executing program 8 (id=18202): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 213.995729ms ago: executing program 7 (id=18203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 85.230439ms ago: executing program 7 (id=18204): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) read(r0, 0x0, 0x0) 84.513198ms ago: executing program 8 (id=18205): r0 = syz_usb_connect$hid(0x0, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x1, 0x6, {0x6, 0x9, "b20200de"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 7 (id=18206): unshare(0x4000400) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$getownex(r0, 0xa, &(0x7f00000133c0)) kernel console output (not intermixed with test programs): tor with address 0x93, changing to 0x83 [ 1011.095256][T30311] apple 0003:05AC:0222.005D: parse failed [ 1011.108734][T30311] apple 0003:05AC:0222.005D: probe with driver apple failed with error -22 [ 1011.159109][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1011.194072][T30284] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.234089][T30284] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1011.261946][T30284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.286539][T30284] usb 2-1: Product: syz [ 1011.293904][T30311] usb 5-1: USB disconnect, device number 78 [ 1011.301235][T30284] usb 2-1: Manufacturer: syz [ 1011.305888][T30284] usb 2-1: SerialNumber: syz [ 1011.314518][T30284] usb 2-1: config 0 descriptor?? [ 1011.329694][T30284] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input134 [ 1011.646324][T30284] imon:send_packet: packet tx failed (-71) [ 1011.667948][T30284] imon 2-1:0.0: panel buttons/knobs setup failed [ 1011.798106][ T30] audit: type=1326 audit(2000000997.531:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7214 comm="syz.2.15853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e638cda9 code=0x7ffc0000 [ 1011.825109][T30284] rc_core: IR keymap rc-imon-pad not found [ 1011.835124][ T30] audit: type=1326 audit(2000000997.531:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7214 comm="syz.2.15853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f46e638cda9 code=0x7ffc0000 [ 1011.842151][T30284] Registered IR keymap rc-empty [ 1011.885875][ T30] audit: type=1326 audit(2000000997.531:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7214 comm="syz.2.15853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e638cda9 code=0x7ffc0000 [ 1011.910726][T30284] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1011.943676][T30284] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1011.983796][T30284] imon:send_packet: packet tx failed (-71) [ 1012.028482][T30284] imon 2-1:0.0: remote input dev register failed [ 1012.049654][T30284] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1012.128871][T30284] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1012.145921][T30284] imon:imon_probe: failed to initialize context! [ 1012.152330][T30284] imon 2-1:0.0: unable to register, err -19 [ 1012.176817][T30284] usb 2-1: USB disconnect, device number 65 [ 1012.481020][ T7239] netlink: 'syz.1.15866': attribute type 1 has an invalid length. [ 1012.602010][ T7243] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1012.608704][ T7243] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1012.634105][ T7243] vhci_hcd vhci_hcd.0: Device attached [ 1012.664203][ T7244] vhci_hcd: connection closed [ 1012.666065][ T29] vhci_hcd: stop threads [ 1012.681157][ T29] vhci_hcd: release socket [ 1012.685740][ T29] vhci_hcd: disconnect device [ 1012.905049][ T5984] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1013.065266][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 1013.075867][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1013.089183][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1013.102716][ T5984] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1013.129104][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.147813][ T5984] usb 4-1: config 0 descriptor?? [ 1013.338793][ T7278] nbd: must specify a device to reconfigure [ 1013.618985][ T5984] kovaplus 0003:1E7D:2D50.005E: item fetching failed at offset 0/3 [ 1013.619521][ T5984] kovaplus 0003:1E7D:2D50.005E: parse failed [ 1013.619582][ T5984] kovaplus 0003:1E7D:2D50.005E: probe with driver kovaplus failed with error -22 [ 1013.847678][ T5984] usb 4-1: USB disconnect, device number 115 [ 1014.372460][ T7310] sctp: [Deprecated]: syz.1.15900 (pid 7310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.372460][ T7310] Use struct sctp_sack_info instead [ 1015.742905][ T7366] smc: removing ib device s [ 1016.336509][ T5984] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1016.509511][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.537398][ T5984] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1016.567991][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.587965][ T5984] usb 4-1: config 0 descriptor?? [ 1017.056574][ T5984] lenovo 0003:17EF:60A3.005F: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 1017.204424][ T7425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1017.271677][T30311] usb 4-1: USB disconnect, device number 116 [ 1018.250444][ T7466] random: crng reseeded on system resumption [ 1018.648450][ T7481] netlink: 'syz.3.15982': attribute type 4 has an invalid length. [ 1018.656492][ T7481] netlink: 'syz.3.15982': attribute type 2 has an invalid length. [ 1019.383431][T30311] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1019.565101][T30311] usb 4-1: Using ep0 maxpacket: 32 [ 1019.577251][T30311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.602248][T30311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.612842][T30311] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 1019.622351][T30311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.633774][T30311] usb 4-1: config 0 descriptor?? [ 1020.088103][T30311] topre 0003:0853:0146.0060: item fetching failed at offset 0/2 [ 1020.105562][T30311] topre 0003:0853:0146.0060: probe with driver topre failed with error -22 [ 1020.325432][ T5852] usb 4-1: USB disconnect, device number 117 [ 1020.837282][T30311] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1020.994601][ T7559] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1021.040308][T30311] usb 2-1: Using ep0 maxpacket: 16 [ 1021.053240][T30311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.074045][T30311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.095302][T30311] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1021.108475][T30311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.120658][ T7565] program syz.0.16023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.137428][T30311] usb 2-1: config 0 descriptor?? [ 1021.336527][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16027'. [ 1021.616234][T30311] hid-alps 0003:044E:120C.0061: item fetching failed at offset 2/5 [ 1021.626058][T30311] hid-alps 0003:044E:120C.0061: parse failed [ 1021.639010][T30311] hid-alps 0003:044E:120C.0061: probe with driver hid-alps failed with error -22 [ 1021.873778][T30311] usb 2-1: USB disconnect, device number 66 [ 1022.280443][ T5984] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1022.440686][ T5984] usb 4-1: Using ep0 maxpacket: 8 [ 1022.465498][ T5984] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 1022.491589][ T5984] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.509983][ T5984] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1022.531895][ T5984] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1022.540964][ T5984] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1022.557307][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.576076][ T5984] usb 4-1: config 0 descriptor?? [ 1022.930379][ T7619] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1023.014747][ T7621] openvswitch: netlink: Missing valid actions attribute. [ 1023.026242][ T7621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.028152][ T5984] hid (null): global environment stack underflow [ 1023.046221][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16051'. [ 1023.065300][ T5984] nintendo 0003:057E:200E.0062: global environment stack underflow [ 1023.103748][ T5984] nintendo 0003:057E:200E.0062: item 0 1 1 11 parsing failed [ 1023.111843][ T5984] nintendo 0003:057E:200E.0062: HID parse failed [ 1023.154276][ T5984] nintendo 0003:057E:200E.0062: probe - fail = -22 [ 1023.176733][ T5984] nintendo 0003:057E:200E.0062: probe with driver nintendo failed with error -22 [ 1023.280277][ T5984] usb 4-1: USB disconnect, device number 118 [ 1023.475947][ T30] audit: type=1326 audit(2000001008.447:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7638 comm="syz.0.16058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70ecd8cda9 code=0x0 [ 1024.510782][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16074'. [ 1024.539107][ T7677] overlayfs: lower data-only dirs require metacopy support. [ 1024.611037][T30311] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1024.792681][T30311] usb 3-1: Using ep0 maxpacket: 16 [ 1024.811627][T30311] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.825571][T30311] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.843339][T30311] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1024.854462][T30311] usb 3-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1024.876118][T30311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1024.883143][T30311] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1024.900791][T30311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.927215][T30311] usb 3-1: config 0 descriptor?? [ 1025.086679][ T7699] [U] ^C [ 1025.364228][ T7712] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16094'. [ 1025.434311][T30311] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.0063/input/input136 [ 1025.521770][T30311] kye 0003:0458:5010.0063: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 1025.648807][ T5984] usb 3-1: USB disconnect, device number 61 [ 1025.841477][ T7726] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1025.848344][ T7726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1025.863512][ T7726] vhci_hcd vhci_hcd.0: Device attached [ 1026.120055][ T5939] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1026.329142][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16111'. [ 1026.338770][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16111'. [ 1026.634199][ T7765] tipc: Started in network mode [ 1026.639158][ T7765] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 1026.661726][ T7765] tipc: Enabled bearer , priority 0 [ 1026.745617][ T7769] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 1528 [ 1026.796926][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16123'. [ 1027.512009][ T30] audit: type=1400 audit(2000001012.226:492): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7808 comm="syz.2.16140" daddr=::ffff:172.20.20.0 [ 1027.722902][ T5852] tipc: Node number set to 4269801642 [ 1028.168139][ T7845] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1028.181670][ T5984] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1028.252411][ T7847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.343657][ T5984] usb 2-1: Using ep0 maxpacket: 32 [ 1028.352212][ T5984] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1028.360495][ T5984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.371752][ T5984] usb 2-1: config 0 has no interface number 0 [ 1028.378384][ T5984] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1028.392871][ T5984] usb 2-1: config 0 interface 8 has no altsetting 0 [ 1028.413821][ T5984] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1028.423404][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.432975][ T5984] usb 2-1: Product: syz [ 1028.437680][ T5984] usb 2-1: Manufacturer: syz [ 1028.442873][ T5984] usb 2-1: SerialNumber: syz [ 1028.458385][ T5984] usb 2-1: config 0 descriptor?? [ 1028.693858][ T5984] ath6kl: Failed to submit usb control message: -71 [ 1028.710951][ T5984] ath6kl: unable to send the bmi data to the device: -71 [ 1028.720334][ T5984] ath6kl: Unable to send get target info: -71 [ 1028.759058][ T5984] ath6kl: Failed to init ath6kl core: -71 [ 1028.766249][ T5984] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1028.804923][ T5984] usb 2-1: USB disconnect, device number 67 [ 1029.065576][ T7727] vhci_hcd: connection reset by peer [ 1029.071962][ T1144] vhci_hcd: stop threads [ 1029.076358][ T1144] vhci_hcd: release socket [ 1029.096411][ T1144] vhci_hcd: disconnect device [ 1029.253107][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16166'. [ 1029.295882][ T7863] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.336073][ T7863] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.361827][ T7863] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.389226][ T7863] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1029.409166][ T7863] geneve3: entered allmulticast mode [ 1029.491185][ T30] audit: type=1326 audit(2000001014.069:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.3.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1029.533770][ T30] audit: type=1326 audit(2000001014.069:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.3.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1029.576139][ T7875] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16172'. [ 1029.587553][ T30] audit: type=1326 audit(2000001014.107:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.3.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1029.626461][ T7875] netlink: 'syz.1.16172': attribute type 5 has an invalid length. [ 1029.656758][ T30] audit: type=1326 audit(2000001014.107:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.3.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1029.697979][ T30] audit: type=1326 audit(2000001014.107:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.3.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1029.720064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.747620][ T30] audit: type=1326 audit(2000001014.107:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.3.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1029.777648][ T30] audit: type=1326 audit(2000001014.107:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.3.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1029.810756][ T30] audit: type=1326 audit(2000001014.107:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.3.16170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1029.945500][T30311] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1029.978113][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16180'. [ 1029.987299][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16180'. [ 1030.116062][T30311] usb 3-1: Using ep0 maxpacket: 8 [ 1030.123439][T30311] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1030.132653][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1030.155467][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1030.189123][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1030.235736][T30311] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1030.243329][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1030.287675][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1030.307975][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1030.331787][T30311] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1030.339504][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1030.352350][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1030.382235][T30311] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1030.407509][T30311] usb 3-1: string descriptor 0 read error: -22 [ 1030.413940][T30311] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1030.438212][T30311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.463885][T30311] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1030.718414][T30311] usb 3-1: USB disconnect, device number 62 [ 1030.837333][ T7924] netlink: 'syz.0.16196': attribute type 1 has an invalid length. [ 1031.570728][ T5939] vhci_hcd: vhci_device speed not set [ 1032.262332][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1032.276325][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1032.287658][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1032.298491][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1032.306390][ T5876] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1032.314120][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1032.395977][ T7962] sit0 speed is unknown, defaulting to 1000 [ 1032.450723][ T7968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.835537][ T7962] chnl_net:caif_netlink_parms(): no params data found [ 1032.965360][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.000182][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.009583][ T7962] bridge_slave_0: entered allmulticast mode [ 1033.034483][ T7962] bridge_slave_0: entered promiscuous mode [ 1033.055288][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.078061][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.085425][ T7962] bridge_slave_1: entered allmulticast mode [ 1033.111863][ T7962] bridge_slave_1: entered promiscuous mode [ 1033.165522][ T7962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.190426][ T7962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.244449][ T7962] team0: Port device team_slave_0 added [ 1033.262830][ T7962] team0: Port device team_slave_1 added [ 1033.338418][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.351297][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.389109][ T7962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.406796][ T7962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.414117][ T7962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.442916][ T7962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.500687][ T7962] hsr_slave_0: entered promiscuous mode [ 1033.508585][ T7962] hsr_slave_1: entered promiscuous mode [ 1033.514960][ T7962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.523878][ T7962] Cannot create hsr debugfs directory [ 1033.591262][T30311] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1033.765554][ T7962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1033.779560][ T7962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1033.787329][T30311] usb 3-1: Using ep0 maxpacket: 16 [ 1033.794539][T30311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.834128][T30311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.844609][T30311] usb 3-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.00 [ 1033.869264][T30311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.887952][T30311] usb 3-1: config 0 descriptor?? [ 1033.921996][ T7962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1033.947313][ T7962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1034.071059][ T8016] netlink: 'syz.3.16237': attribute type 1 has an invalid length. [ 1034.105061][ T7962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.161765][ T7962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.183662][ T4005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.191068][ T4005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.224292][ T4005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.231828][ T4005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.341324][T30311] hid-generic 0003:0408:3001.0064: hidraw0: USB HID v0.00 Device [HID 0408:3001] on usb-dummy_hcd.2-1/input0 [ 1034.489329][T30425] Bluetooth: hci5: command tx timeout [ 1034.593843][ T7962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.596526][ T5984] usb 3-1: USB disconnect, device number 63 [ 1035.145204][ T7962] veth0_vlan: entered promiscuous mode [ 1035.200897][ T7962] veth1_vlan: entered promiscuous mode [ 1035.338189][ T7962] veth0_macvtap: entered promiscuous mode [ 1035.395438][ T7962] veth1_macvtap: entered promiscuous mode [ 1035.415788][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.472419][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.484445][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.504783][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.536761][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.593300][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.630453][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16252'. [ 1035.654292][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.686689][ T7962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.722322][ T7962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.766896][ T7962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.818214][ T7962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.872165][ T7962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.910998][ T7962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.943092][ T7962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.109673][ T8068] mkiss: ax0: crc mode is auto. [ 1036.344721][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.377427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.457977][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.494374][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.716166][T30425] Bluetooth: hci5: command tx timeout [ 1037.021928][ T8094] tmpfs: Bad value for 'mpol' [ 1037.472144][T30311] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1037.664922][T30311] usb 3-1: Using ep0 maxpacket: 8 [ 1037.672663][T30311] usb 3-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 1037.710383][T30311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.733187][T30311] usb 3-1: config 0 descriptor?? [ 1037.767097][T30311] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1037.989340][T30311] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1038.017350][T30311] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 1038.068354][T30311] usb 3-1: USB disconnect, device number 64 [ 1038.345412][ T8152] kAFS: unable to lookup cell 'gK)kJL+} T/pbΈ&MK(|Fkq2J$O-7RkE1 ўLEB{Nb+*eRMc\jmԩԿOt" kknzHKu6MySHIUo IfVU r&cNN0NBc5?7c#0*k<9mcL 07뜖Ctϒ [ 1038.345412][ T8152] jyHao 1.B$&2M0=`;!dφOJIX!J˟BvU_Rc?' [ 1038.925941][ T5939] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1038.936804][T30425] Bluetooth: hci5: command tx timeout [ 1039.016045][ T8181] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1039.024305][ T8181] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1039.043439][ T8181] vhci_hcd vhci_hcd.0: Device attached [ 1039.090165][ T5939] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1039.104731][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.123233][ T5939] usb 2-1: Product: syz [ 1039.139773][ T5939] usb 2-1: Manufacturer: syz [ 1039.146129][ T5939] usb 2-1: SerialNumber: syz [ 1039.164666][ T5939] usb 2-1: config 0 descriptor?? [ 1039.235824][ T119] vhci_hcd: vhci_device speed not set [ 1039.242496][ T5984] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1039.310532][ T119] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1039.408625][ T5984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.430231][ T5984] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1039.441778][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.452886][ T5984] usb 3-1: Product: syz [ 1039.457258][ T5984] usb 3-1: Manufacturer: syz [ 1039.462468][ T5984] usb 3-1: SerialNumber: syz [ 1039.479362][ T5984] usb 3-1: config 0 descriptor?? [ 1039.530296][ T5984] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1039.545799][ T30] audit: type=1326 audit(2000001023.470:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8191 comm="syz.3.16308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1039.606560][ T30] audit: type=1326 audit(2000001023.470:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8191 comm="syz.3.16308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1039.651153][T28420] udevd[28420]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.676728][ T30] audit: type=1326 audit(2000001023.470:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8191 comm="syz.3.16308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1039.708978][ T5984] usb 3-1: USB disconnect, device number 65 [ 1039.755838][ T30] audit: type=1326 audit(2000001023.470:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8191 comm="syz.3.16308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1039.780364][ T30] audit: type=1326 audit(2000001023.470:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8191 comm="syz.3.16308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1039.810305][ T30] audit: type=1326 audit(2000001023.470:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8191 comm="syz.3.16308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1039.833084][ T30] audit: type=1326 audit(2000001023.470:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8191 comm="syz.3.16308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x7ffc0000 [ 1039.864034][ T5939] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1039.874686][ T5939] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1039.895915][ T5939] usb 2-1: USB disconnect, device number 68 [ 1040.376575][ T8214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16318'. [ 1040.578128][ T30] audit: type=1326 audit(2000001024.452:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.1.16323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1040.675885][ T30] audit: type=1326 audit(2000001024.452:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.1.16323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1040.763305][ T30] audit: type=1326 audit(2000001024.489:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.1.16323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1040.848426][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16328'. [ 1041.117354][ T5939] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1041.134938][ T8243] debugfs: Bad value for 'uid' [ 1041.141508][ T8243] debugfs: Bad value for 'uid' [ 1041.160067][T30425] Bluetooth: hci5: command tx timeout [ 1041.301950][ T5939] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1041.324626][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.358727][ T5939] usb 2-1: config 0 descriptor?? [ 1041.365228][ T8251] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16337'. [ 1041.565791][ T8257] sp0: Synchronizing with TNC [ 1041.824654][ T5939] hackrf 2-1:0.0: Board ID: 00 [ 1041.831053][ T5939] hackrf 2-1:0.0: Firmware version: [ 1041.841524][ T5939] hackrf 2-1:0.0: Registered as swradio24 [ 1041.850634][ T5939] videodev: could not get a free minor [ 1041.857933][ T5939] hackrf 2-1:0.0: Failed to register as video device (-23) [ 1041.870438][ T5939] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 1042.005740][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16345'. [ 1042.058073][ T46] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1042.080622][ T5939] usb 2-1: USB disconnect, device number 69 [ 1042.239691][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 1042.254508][ T46] usb 6-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 1042.259740][ T8183] vhci_hcd: connection reset by peer [ 1042.275948][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.294805][ T46] usb 6-1: Product: syz [ 1042.300128][ T46] usb 6-1: Manufacturer: syz [ 1042.311228][ T1144] vhci_hcd: stop threads [ 1042.318030][ T1144] vhci_hcd: release socket [ 1042.326530][ T46] usb 6-1: SerialNumber: syz [ 1042.332038][ T1144] vhci_hcd: disconnect device [ 1042.348184][ T46] usb 6-1: config 0 descriptor?? [ 1042.359343][ T46] ipheth 6-1:0.0: Unable to find alternate settings interface [ 1042.586127][ T46] usb 6-1: USB disconnect, device number 2 [ 1042.782035][ T8292] sp0: Synchronizing with TNC [ 1042.801384][ T8292] sp0: Found TNC [ 1042.869443][ T8295] sg_write: data in/out 134217692/8 bytes for SCSI command 0xff-- guessing data in; [ 1042.869443][ T8295] program syz.0.16358 not setting count and/or reply_len properly [ 1043.734439][ T8330] ntfs3: Bad value for 'gid' [ 1043.752706][ T8330] ntfs3: Bad value for 'gid' [ 1044.721939][ T8363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16390'. [ 1044.727623][ T8365] overlayfs: missing 'lowerdir' [ 1044.838716][ T119] vhci_hcd: vhci_device speed not set [ 1045.034466][ T8378] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1045.218931][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16401'. [ 1045.513876][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16408'. [ 1045.695293][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16411'. [ 1046.219591][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16422'. [ 1046.864055][ T8463] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.874518][ T8463] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.884031][ T8463] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.897381][ T8463] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.018465][T30311] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1047.099259][ T8471] ptrace attach of "./syz-executor exec"[5858] was attempted by " [ 1047.198700][T30311] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.200711][ T8477] bond0: left allmulticast mode [ 1047.377386][ T8478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.420113][T30311] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1047.420260][ T8483] netlink: 'syz.2.16448': attribute type 1 has an invalid length. [ 1047.454302][T30311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.516494][T30311] usb 6-1: config 0 descriptor?? [ 1047.545329][T30311] pwc: Askey VC010 type 2 USB webcam detected. [ 1047.838857][ T8496] netlink: 'syz.2.16454': attribute type 322 has an invalid length. [ 1048.057912][ T8501] netlink: 'syz.2.16457': attribute type 1 has an invalid length. [ 1048.080312][ T8501] netlink: 160 bytes leftover after parsing attributes in process `syz.2.16457'. [ 1048.195861][T30311] pwc: recv_control_msg error -71 req 02 val 2700 [ 1048.213729][T30311] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1048.224525][T30311] pwc: recv_control_msg error -71 req 04 val 1000 [ 1048.237479][T30311] pwc: recv_control_msg error -71 req 04 val 1300 [ 1048.253000][T30311] pwc: recv_control_msg error -71 req 04 val 1400 [ 1048.278168][T30311] pwc: recv_control_msg error -71 req 02 val 2000 [ 1048.290512][T30311] pwc: recv_control_msg error -71 req 02 val 2100 [ 1048.321216][T30311] pwc: recv_control_msg error -71 req 04 val 1500 [ 1048.330782][T30311] pwc: recv_control_msg error -71 req 02 val 2500 [ 1048.355021][T30311] pwc: recv_control_msg error -71 req 02 val 2400 [ 1048.366728][T30311] pwc: recv_control_msg error -71 req 02 val 2600 [ 1048.373780][T30311] pwc: recv_control_msg error -71 req 02 val 2900 [ 1048.381780][T30311] pwc: recv_control_msg error -71 req 02 val 2800 [ 1048.391952][T30311] pwc: recv_control_msg error -71 req 04 val 1100 [ 1048.403545][T30311] pwc: recv_control_msg error -71 req 04 val 1200 [ 1048.419884][T30311] pwc: Registered as video103. [ 1048.426964][T30311] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input138 [ 1048.448482][T30311] usb 6-1: USB disconnect, device number 3 [ 1050.316573][ T8579] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.16494'. [ 1051.910319][ T8635] netlink: 'syz.1.16519': attribute type 1 has an invalid length. [ 1052.235516][T30284] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1052.419099][T30284] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.448250][T30284] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1052.478262][T30284] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1052.511333][T30284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1052.528450][T30284] usb 6-1: SerialNumber: syz [ 1052.794578][T30284] usb 6-1: 0:2 : does not exist [ 1052.856319][T30284] usb 6-1: USB disconnect, device number 4 [ 1053.087315][T28418] udevd[28418]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.391284][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16537'. [ 1053.417263][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16537'. [ 1053.422390][ T8692] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16535'. [ 1053.690082][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16539'. [ 1053.983197][T30284] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 1054.010966][T30284] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1054.631004][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1054.631024][ T30] audit: type=1326 audit(2000001037.604:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.5.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec038cda9 code=0x7ffc0000 [ 1054.696633][ T30] audit: type=1326 audit(2000001037.632:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.5.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec038cda9 code=0x7ffc0000 [ 1054.705001][T30311] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1054.763845][ T30] audit: type=1326 audit(2000001037.632:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.5.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5ec038cda9 code=0x7ffc0000 [ 1054.810342][ T30] audit: type=1326 audit(2000001037.632:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.5.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec038cda9 code=0x7ffc0000 [ 1054.841840][ T30] audit: type=1326 audit(2000001037.632:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.5.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec038cda9 code=0x7ffc0000 [ 1054.867858][ T30] audit: type=1326 audit(2000001037.632:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.5.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f5ec038cda9 code=0x7ffc0000 [ 1054.890744][ T30] audit: type=1326 audit(2000001037.632:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.5.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec038cda9 code=0x7ffc0000 [ 1054.943096][ T30] audit: type=1326 audit(2000001037.632:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8739 comm="syz.5.16556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec038cda9 code=0x7ffc0000 [ 1054.946523][T30311] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1054.966899][ C0] vkms_vblank_simulate: vblank timer overrun [ 1054.986665][T30311] usb 3-1: config 0 has no interface number 0 [ 1054.992959][T30311] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1055.003083][T30311] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1055.013158][T30311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.021924][T30311] usb 3-1: Product: syz [ 1055.036520][T30311] usb 3-1: Manufacturer: syz [ 1055.046148][T30311] usb 3-1: SerialNumber: syz [ 1055.060739][T30311] usb 3-1: config 0 descriptor?? [ 1055.312315][T30311] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1055.535886][T30311] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 1055.551596][T30311] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 1055.558786][T30311] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 1055.636468][T30311] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -22 [ 1055.741961][ T46] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1055.764973][T30284] usb 3-1: USB disconnect, device number 66 [ 1055.915991][ T46] usb 6-1: config 54 has an invalid interface number: 154 but max is 0 [ 1055.924918][ T46] usb 6-1: config 54 has no interface number 0 [ 1055.937674][ T46] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1055.947062][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.968554][ T46] usb 6-1: Product: syz [ 1055.972774][ T46] usb 6-1: Manufacturer: syz [ 1055.987790][ T46] usb 6-1: SerialNumber: syz [ 1056.225676][ T46] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1056.230622][ T1144] usb 6-1: Failed to submit usb control message: -71 [ 1056.243000][ T1144] usb 6-1: unable to send the bmi data to the device: -71 [ 1056.244729][ T46] usb 6-1: USB disconnect, device number 5 [ 1056.251805][ T1144] usb 6-1: unable to get target info from device [ 1056.263389][ T1144] usb 6-1: could not get target info (-71) [ 1056.269025][T30284] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1056.270178][ T1144] usb 6-1: could not probe fw (-71) [ 1056.447812][T30284] usb 2-1: Using ep0 maxpacket: 8 [ 1056.455306][T30284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.478632][T30284] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1056.499052][T30284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.525952][T30284] usb 2-1: config 0 descriptor?? [ 1056.547544][T30284] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1057.100465][ T8805] netlink: 'syz.2.16585': attribute type 29 has an invalid length. [ 1057.132262][ T8805] netlink: 'syz.2.16585': attribute type 29 has an invalid length. [ 1057.203075][T30284] gspca_vc032x: reg_r err -71 [ 1057.215655][T30284] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1057.234820][T30284] usb 2-1: USB disconnect, device number 70 [ 1058.564367][T30284] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1058.746170][T30284] usb 2-1: Using ep0 maxpacket: 32 [ 1058.783682][T30284] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 1058.810137][T30284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.841326][T30284] usb 2-1: Product: syz [ 1058.851928][T30284] usb 2-1: Manufacturer: syz [ 1058.857077][T30284] usb 2-1: SerialNumber: syz [ 1058.880367][T30284] usb 2-1: config 0 descriptor?? [ 1059.106598][ T8878] sp0: Synchronizing with TNC [ 1059.221529][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16622'. [ 1059.836536][T30284] usb 2-1: reset high-speed USB device number 71 using dummy_hcd [ 1060.071904][ T119] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1060.264173][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.300067][T30284] usb 2-1: USB disconnect, device number 71 [ 1060.306955][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.316859][ T119] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1060.345332][ T119] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1060.354762][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.376833][ T119] usb 6-1: config 0 descriptor?? [ 1060.855337][ T119] smartjoyplus 0003:0B43:0003.0066: unknown main item tag 0x0 [ 1060.884531][ T119] smartjoyplus 0003:0B43:0003.0066: unknown main item tag 0x0 [ 1060.894863][ T119] smartjoyplus 0003:0B43:0003.0066: unknown main item tag 0x0 [ 1060.902430][ T119] smartjoyplus 0003:0B43:0003.0066: unknown main item tag 0x0 [ 1060.943545][ T119] smartjoyplus 0003:0B43:0003.0066: unknown main item tag 0x0 [ 1060.970310][ T119] smartjoyplus 0003:0B43:0003.0066: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.5-1/input0 [ 1060.997152][ T30] audit: type=1326 audit(2000001043.544:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8932 comm="syz.1.16648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1061.020192][ T119] smartjoyplus 0003:0B43:0003.0066: no output reports found [ 1061.041310][ T30] audit: type=1326 audit(2000001043.544:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8932 comm="syz.1.16648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1061.132706][ T30] audit: type=1326 audit(2000001043.553:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8932 comm="syz.1.16648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1061.174351][ T5954] usb 6-1: USB disconnect, device number 6 [ 1061.209204][ T30] audit: type=1326 audit(2000001043.553:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8932 comm="syz.1.16648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1061.257254][ T8937] ptrace attach of "./syz-executor exec"[5858] was attempted by ""[8937] [ 1061.277595][ T30] audit: type=1326 audit(2000001043.553:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8932 comm="syz.1.16648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1061.366680][ T30] audit: type=1326 audit(2000001043.581:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8932 comm="syz.1.16648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1061.408478][ T30] audit: type=1326 audit(2000001043.581:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8932 comm="syz.1.16648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1061.461566][ T30] audit: type=1326 audit(2000001043.581:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8932 comm="syz.1.16648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1061.854746][ T30] audit: type=1400 audit(2000001044.348:531): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8959 comm="syz.2.16661" daddr=::ffff:127.0.0.1 [ 1061.933035][ T8966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16664'. [ 1063.172314][ T9007] tipc: Enabled bearer , priority 0 [ 1063.207592][ T9009] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.16685'. [ 1063.236282][ T9009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.300828][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16702'. [ 1064.595260][ T119] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1064.769213][ T119] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1064.786257][ T119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1064.804441][ T119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1064.816877][ T119] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1064.838021][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.846271][ T119] usb 2-1: Product: syz [ 1064.859237][ T119] usb 2-1: Manufacturer: syz [ 1064.864054][ T119] usb 2-1: SerialNumber: syz [ 1064.871407][ T119] usb 2-1: config 0 descriptor?? [ 1065.129506][ T119] usb 2-1: USB disconnect, device number 72 [ 1065.347589][T28472] udevd[28472]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.935656][ T119] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1067.139406][ T119] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1067.175192][ T119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.218847][ T119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.232669][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16744'. [ 1067.250437][ T119] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1067.296501][ T119] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1067.333773][ T5876] Bluetooth: hci5: command 0x0405 tx timeout [ 1067.347123][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.376511][ T119] usb 3-1: config 0 descriptor?? [ 1067.468424][ T9143] netlink: 'syz.0.16747': attribute type 1 has an invalid length. [ 1067.587292][T30284] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1067.794210][T30284] usb 2-1: Using ep0 maxpacket: 32 [ 1067.813004][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.850538][ T119] nintendo 0003:057E:2009.0067: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.2-1/input0 [ 1067.865527][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.908835][T30284] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1067.947746][T30284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.991622][T30284] usb 2-1: config 0 descriptor?? [ 1067.998749][ T119] nintendo 0003:057E:2009.0067: Failed to get joycon info; ret=-38 [ 1068.032213][ T119] nintendo 0003:057E:2009.0067: Failed to retrieve controller info; ret=-38 [ 1068.055540][ T9160] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 1068.055540][ T9160] [ 1068.075880][ T119] nintendo 0003:057E:2009.0067: Failed to initialize controller; ret=-38 [ 1068.096953][ T119] nintendo 0003:057E:2009.0067: probe - fail = -38 [ 1068.134388][ T119] nintendo 0003:057E:2009.0067: probe with driver nintendo failed with error -38 [ 1068.167230][ T119] usb 3-1: USB disconnect, device number 67 [ 1068.518029][T30284] viewsonic 0003:2133:0018.0068: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.1-1/input0 [ 1068.781570][ T8] usb 2-1: USB disconnect, device number 73 [ 1069.169355][T30284] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1069.366277][T30284] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1069.394748][T30284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.402910][T30284] usb 3-1: Product: syz [ 1069.425974][T30284] usb 3-1: Manufacturer: syz [ 1069.430688][T30284] usb 3-1: SerialNumber: syz [ 1069.453197][T30284] usb 3-1: config 0 descriptor?? [ 1069.479951][T30284] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 068 [ 1069.868576][ T9216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16782'. [ 1070.140849][T30284] i2c i2c-2: failure reading functionality [ 1070.159121][T30284] i2c i2c-2: connected i2c-tiny-usb device [ 1070.195791][T30284] usb 3-1: USB disconnect, device number 68 [ 1070.677968][ T9246] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1071.282809][ T9266] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 19971 - 0 [ 1071.302810][ T9266] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 19971 - 0 [ 1071.329906][ T9266] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 19971 - 0 [ 1071.349724][ T9266] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 19971 - 0 [ 1071.557148][ T9276] Invalid logical block size (63) [ 1072.462340][ T5954] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1072.569320][ T8] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1072.577261][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16829'. [ 1072.622557][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 1072.631063][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.660945][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.682909][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1072.701208][ T5954] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1072.723339][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.758397][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 1072.770653][ T5954] usb 3-1: config 0 descriptor?? [ 1072.780136][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1072.791878][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.808971][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1072.841553][ T8] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1072.851300][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.863575][ T8] usb 2-1: config 0 descriptor?? [ 1073.244756][ T5954] ryos 0003:1E7D:31CE.0069: unknown main item tag 0x0 [ 1073.256341][ T5954] ryos 0003:1E7D:31CE.0069: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.2-1/input0 [ 1073.334011][ T8] corsair-cpro 0003:1B1C:0C10.006A: hidraw1: USB HID v0.03 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 1073.339799][ T9314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16832'. [ 1073.427092][ T8] corsair-cpro 0003:1B1C:0C10.006A: probe with driver corsair-cpro failed with error -38 [ 1073.487148][ T8] usb 3-1: USB disconnect, device number 69 [ 1073.562149][T30284] usb 2-1: USB disconnect, device number 74 [ 1074.426819][ T9334] team0: Device gtp0 is of different type [ 1075.074934][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16852'. [ 1075.093023][ T9355] nbd: socks must be embedded in a SOCK_ITEM attr [ 1075.335509][ T9363] vivid-000: disconnect [ 1075.346669][ T9362] vivid-000: reconnect [ 1075.735357][ T8] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1075.926025][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1075.951312][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1075.966414][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 1075.980597][ T8] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 1075.990726][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.000028][ T8] usb 3-1: Product: syz [ 1076.005357][ T8] usb 3-1: Manufacturer: syz [ 1076.010018][ T8] usb 3-1: SerialNumber: syz [ 1076.019556][ T8] usb 3-1: config 0 descriptor?? [ 1076.028335][ T8] opticon 3-1:0.0: opticon converter detected [ 1076.040288][ T8] usb 3-1: opticon converter now attached to ttyUSB0 [ 1076.190045][ T9379] netlink: 'syz.1.16864': attribute type 5 has an invalid length. [ 1076.256937][T30284] usb 3-1: USB disconnect, device number 70 [ 1076.279190][T30284] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1076.298879][T30284] opticon 3-1:0.0: device disconnected [ 1076.878669][T30284] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1077.063669][T30284] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1077.072813][T30284] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1077.112543][T30284] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1077.121809][T30284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1077.166496][T30284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1077.191599][T30284] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1077.208699][T30284] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1077.229960][T30284] usb 2-1: Product: syz [ 1077.241526][T30284] usb 2-1: Manufacturer: syz [ 1077.274580][T30284] cdc_wdm 2-1:1.0: skipping garbage [ 1077.283527][T30284] cdc_wdm 2-1:1.0: skipping garbage [ 1077.303517][T30284] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1077.333448][T30284] cdc_wdm 2-1:1.0: Unknown control protocol [ 1077.444089][ T9399] netlink: 1240 bytes leftover after parsing attributes in process `syz.0.16874'. [ 1077.475615][ T9399] openvswitch: netlink: Message has 16 unknown bytes. [ 1077.532069][ T46] usb 2-1: USB disconnect, device number 75 [ 1077.629635][ T9401] netlink: 'syz.2.16875': attribute type 61 has an invalid length. [ 1078.491672][ T5954] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1078.675401][ T5954] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1078.684155][ T5954] usb 2-1: config 0 has no interface number 0 [ 1078.690317][ T5954] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1078.748524][ T5954] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1078.772142][ T5954] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1078.799576][ T5954] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 1078.833270][ T5954] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1078.865804][ T5954] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1078.892494][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.914137][ T5954] usb 2-1: config 0 descriptor?? [ 1078.928037][ T9418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1078.973409][ T5954] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1080.364259][ T30] audit: type=1326 audit(2000001061.672:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.16908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f332e38cda9 code=0x0 [ 1081.417270][ T9487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.456965][ T46] usb 2-1: USB disconnect, device number 76 [ 1081.496243][ T46] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1082.566195][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16929'. [ 1083.390533][ T9530] sit0 speed is unknown, defaulting to 1000 [ 1084.881216][ T9566] netlink: 312 bytes leftover after parsing attributes in process `syz.3.16953'. [ 1084.896834][T30425] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 1085.408618][ T9586] netlink: 72 bytes leftover after parsing attributes in process `syz.0.16961'. [ 1085.451393][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16964'. [ 1085.463270][T30425] Bluetooth: hci5: command 0x0405 tx timeout [ 1086.590655][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16980'. [ 1086.833593][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16983'. [ 1087.650967][ T9652] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16995'. [ 1087.679727][ T9652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16995'. [ 1087.761642][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1087.787128][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1087.798837][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1087.808323][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1087.816828][ T5876] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1087.827111][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1087.904544][ T9653] sit0 speed is unknown, defaulting to 1000 [ 1087.952035][ T9659] netlink: 'syz.1.16997': attribute type 10 has an invalid length. [ 1087.970591][ T9659] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1088.006407][ T9659] team0: Device netdevsim0 is of different type [ 1088.030789][ T9660] netlink: 'syz.1.16997': attribute type 10 has an invalid length. [ 1088.051642][ T9660] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1088.439227][ T9653] chnl_net:caif_netlink_parms(): no params data found [ 1088.519447][ T8] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1088.542029][ T9677] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 1088.645122][ T9653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.645317][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.645509][ T9653] bridge_slave_0: entered allmulticast mode [ 1088.646987][ T9653] bridge_slave_0: entered promiscuous mode [ 1088.663687][ T9653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.663773][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.664146][ T9653] bridge_slave_1: entered allmulticast mode [ 1088.665448][ T9653] bridge_slave_1: entered promiscuous mode [ 1088.700995][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1088.701033][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.703431][ T8] usb 2-1: config 0 descriptor?? [ 1088.710995][ T9683] program syz.0.17006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1088.782418][ T9653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.786342][ T9653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.893024][ T9653] team0: Port device team_slave_0 added [ 1088.913510][ T9653] team0: Port device team_slave_1 added [ 1088.919887][ C1] sd 0:0:1:0: [sda] tag#2720 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1088.919954][ C1] sd 0:0:1:0: [sda] tag#2720 CDB: Write(6) 0a 00 00 00 00 00 [ 1089.052168][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.052192][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.052229][ T9653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.055725][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.110686][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.110761][ T9653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.178492][ T8] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 1089.178541][ T8] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 1089.178574][ T8] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 1089.178606][ T8] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 1089.178636][ T8] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 1089.182536][ T8] isku 0003:1E7D:319C.006B: hidraw0: USB HID v1.01 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 1089.392259][ T9653] hsr_slave_0: entered promiscuous mode [ 1089.393170][ T9653] hsr_slave_1: entered promiscuous mode [ 1089.393755][ T9653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.393906][ T9653] Cannot create hsr debugfs directory [ 1089.399308][ T8] usb 2-1: USB disconnect, device number 77 [ 1089.836753][ T9653] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1089.857550][ T9653] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1089.903563][ T9653] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1089.935548][ T9653] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1090.090414][ T5876] Bluetooth: hci5: command tx timeout [ 1090.214206][ T9717] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1090.240744][T30284] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 1090.240764][T30284] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1090.296583][ T9653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.350870][ T9653] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.393021][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.404543][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.467805][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.476399][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.534497][ T30] audit: type=1326 audit(2000001071.185:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9731 comm="syz.0.17029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1090.576897][ T30] audit: type=1326 audit(2000001071.213:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9731 comm="syz.0.17029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1090.639471][ T30] audit: type=1326 audit(2000001071.222:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9731 comm="syz.0.17029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1090.689594][ T30] audit: type=1326 audit(2000001071.222:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9731 comm="syz.0.17029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1090.722186][ T8] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1090.766479][ T30] audit: type=1326 audit(2000001071.222:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9731 comm="syz.0.17029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1090.832940][ T30] audit: type=1326 audit(2000001071.222:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9731 comm="syz.0.17029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1090.904135][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1090.904280][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1090.917241][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1090.929365][ T9653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.950426][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1091.018983][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1091.057720][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1091.107036][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1091.162151][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1091.191549][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.235068][ T8] usb 2-1: Product: syz [ 1091.239694][ T8] usb 2-1: Manufacturer: syz [ 1091.250983][ T8] usb 2-1: SerialNumber: syz [ 1091.267977][ T8] usb 2-1: config 0 descriptor?? [ 1091.566644][ T8] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 1091.591427][ T8] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 1091.619240][ T9653] veth0_vlan: entered promiscuous mode [ 1091.663740][ T9653] veth1_vlan: entered promiscuous mode [ 1091.701817][ T8] usb 2-1: USB disconnect, device number 78 [ 1091.760613][ T9653] veth0_macvtap: entered promiscuous mode [ 1091.772262][ T9653] veth1_macvtap: entered promiscuous mode [ 1091.792152][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.806414][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.818232][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.829416][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.840815][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.852144][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.887336][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.903676][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.916827][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.972074][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.985661][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.996970][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.009081][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.024422][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.053791][ T9653] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.064196][ T9653] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.100772][ T9653] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.119211][ T9653] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.306561][ T5876] Bluetooth: hci5: command tx timeout [ 1092.316366][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17044'. [ 1092.360838][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.374951][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.467302][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.496136][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.691456][ T9782] tipc: Enabling of bearer rejected, failed to enable media [ 1093.388548][ T9808] xt_hashlimit: max too large, truncated to 1048576 [ 1093.529755][ T30] audit: type=1326 audit(2000001073.981:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.1.17063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1093.585623][ T30] audit: type=1326 audit(2000001073.981:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.1.17063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1093.629499][ T30] audit: type=1326 audit(2000001073.981:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.1.17063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1093.653098][ T9816] sit0 speed is unknown, defaulting to 1000 [ 1093.662847][ T30] audit: type=1326 audit(2000001073.981:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.1.17063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1094.527861][ T5876] Bluetooth: hci5: command tx timeout [ 1094.675751][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17083'. [ 1095.908071][T30284] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1095.977194][ T9894] bridge7: entered promiscuous mode [ 1096.109782][T30284] usb 2-1: Using ep0 maxpacket: 32 [ 1096.117907][T30284] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1096.141759][T30284] usb 2-1: config 0 has no interface number 0 [ 1096.173553][T30284] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1096.192811][T30284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.215270][T30284] usb 2-1: Product: syz [ 1096.225561][T30284] usb 2-1: Manufacturer: syz [ 1096.236775][T30284] usb 2-1: SerialNumber: syz [ 1096.253262][T30284] usb 2-1: config 0 descriptor?? [ 1096.264264][T30284] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1096.503205][T30284] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1096.564978][T30284] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1096.752145][ T5876] Bluetooth: hci5: command tx timeout [ 1097.000177][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1097.001297][ T9] usb 2-1: USB disconnect, device number 79 [ 1097.031778][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1097.072398][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1097.103086][ T9] quatech2 2-1:0.51: device disconnected [ 1097.374491][ T9920] devpts: called with bogus options [ 1098.012946][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17119'. [ 1098.355310][T30284] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 1098.527587][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1098.541803][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.575070][T30284] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 1098.599260][T30284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.615380][T30284] usb 2-1: config 0 descriptor?? [ 1099.077078][T30284] wacom 0003:056A:00E5.006C: unknown main item tag 0x0 [ 1099.095352][T30284] wacom 0003:056A:00E5.006C: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.1-1/input0 [ 1099.310595][T30284] usb 2-1: USB disconnect, device number 80 [ 1101.016761][T30284] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1101.189460][T30284] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1101.220779][T30284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.243348][T30284] usb 2-1: config 0 descriptor?? [ 1101.261921][T30284] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1101.899402][T30284] gspca_sunplus: reg_w_riv err -71 [ 1101.905308][T30284] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1101.918979][T30284] usb 2-1: USB disconnect, device number 81 [ 1103.455558][T10011] Process accounting resumed [ 1103.483669][T10014] sit0 speed is unknown, defaulting to 1000 [ 1103.575514][T10011] Process accounting resumed [ 1107.636919][T10116] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1107.986138][T10124] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.17210'. [ 1108.015137][T10124] openvswitch: netlink: Flow key attribute not present in set flow. [ 1108.524242][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17215'. [ 1108.543283][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17215'. [ 1108.583967][T10140] netlink: 'syz.1.17215': attribute type 11 has an invalid length. [ 1109.391727][T10166] tipc: Enabling of bearer rejected, already enabled [ 1111.117456][T10217] kAFS: No cell specified [ 1111.817645][T30425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1111.834318][T30425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1111.844601][T30425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1111.859856][T30425] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1111.870791][T30425] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1111.886656][T30425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1112.024054][T10227] sit0 speed is unknown, defaulting to 1000 [ 1112.104181][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17258'. [ 1112.823694][T10227] chnl_net:caif_netlink_parms(): no params data found [ 1112.838848][T10257] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1112.838848][T10257] program syz.0.17268 not setting count and/or reply_len properly [ 1113.081186][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.089392][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.098294][T10227] bridge_slave_0: entered allmulticast mode [ 1113.108317][T10227] bridge_slave_0: entered promiscuous mode [ 1113.126864][T10227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.135471][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.145400][T10227] bridge_slave_1: entered allmulticast mode [ 1113.155999][T10227] bridge_slave_1: entered promiscuous mode [ 1113.304398][T10227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.346092][T10227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.541616][T10227] team0: Port device team_slave_0 added [ 1113.586272][T10227] team0: Port device team_slave_1 added [ 1113.837301][T10227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.850361][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.905277][T10227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.935499][T10227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.955358][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.003137][T10227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.123674][ T5876] Bluetooth: hci1: command tx timeout [ 1114.466836][T10227] hsr_slave_0: entered promiscuous mode [ 1114.497893][T10227] hsr_slave_1: entered promiscuous mode [ 1114.504416][T10227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.514636][T10227] Cannot create hsr debugfs directory [ 1114.815371][T10316] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1114.958210][T10227] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1115.003552][T10227] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1115.030939][T10227] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1115.056539][T10227] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1115.157967][T10328] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17300'. [ 1115.229599][T10328] netlink: 'syz.3.17300': attribute type 6 has an invalid length. [ 1115.266003][T10328] netlink: 'syz.3.17300': attribute type 5 has an invalid length. [ 1115.299356][T10328] netlink: 'syz.3.17300': attribute type 4 has an invalid length. [ 1115.343027][T10227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.389757][T10227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.455362][ T4005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.463491][ T4005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.474691][ T4005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.482171][ T4005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.560610][T10227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1115.856252][T10227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.169436][T10227] veth0_vlan: entered promiscuous mode [ 1116.189993][T10227] veth1_vlan: entered promiscuous mode [ 1116.236807][T10227] veth0_macvtap: entered promiscuous mode [ 1116.262489][T10227] veth1_macvtap: entered promiscuous mode [ 1116.287264][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.299034][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.310201][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.322406][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.332896][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.344772][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.346868][ T5876] Bluetooth: hci1: command tx timeout [ 1116.366557][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.386960][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.412477][T10227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.441299][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.453827][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.467434][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.479659][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.491265][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.504317][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.517631][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.530151][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.542233][T10227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.562896][T10227] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.572988][T10227] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.581847][T10227] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.592658][T10227] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.756439][T10374] input: syz0 as /devices/virtual/input/input143 [ 1116.788586][ T9730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.814275][ T9730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.911530][ T4005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.926744][ T4005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.625701][T10398] netlink: 1268 bytes leftover after parsing attributes in process `syz.7.17326'. [ 1118.560393][ T5876] Bluetooth: hci1: command tx timeout [ 1118.834165][T10436] x_tables: duplicate underflow at hook 4 [ 1119.185274][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17348'. [ 1119.400960][T10460] netlink: 'syz.1.17355': attribute type 9 has an invalid length. [ 1120.346063][T10493] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1120.699683][ T5954] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1120.784173][ T5876] Bluetooth: hci1: command tx timeout [ 1120.879807][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1120.889511][ T5954] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1120.910847][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1120.928630][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 1120.943286][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 1120.968597][ T5954] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1120.979082][ T5954] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1120.989002][ T5954] usb 2-1: Manufacturer: syz [ 1121.003614][ T5954] usb 2-1: config 0 descriptor?? [ 1121.013547][T10497] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1121.263088][ T5954] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1121.299704][ T5954] usb 2-1: USB disconnect, device number 82 [ 1121.427423][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1121.427447][ T30] audit: type=1326 audit(2000001100.070:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10498 comm="syz.6.17374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98cda9 code=0x7fc00000 [ 1121.762342][T10532] tipc: Started in network mode [ 1121.767988][T10532] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1121.775759][T10532] tipc: Enabled bearer , priority 0 [ 1121.779963][T10533] netlink: 332 bytes leftover after parsing attributes in process `syz.6.17390'. [ 1122.016016][T10542] program syz.1.17394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1122.978205][T10372] tipc: Node number set to 8432298 [ 1124.287892][ T30] audit: type=1326 audit(2000001102.754:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.0.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1124.376152][ T30] audit: type=1326 audit(2000001102.754:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.0.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1124.442261][ T30] audit: type=1326 audit(2000001102.782:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.0.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1124.464067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.536151][ T30] audit: type=1326 audit(2000001102.782:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.0.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1124.577766][ T30] audit: type=1326 audit(2000001102.782:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.0.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1124.603033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.770636][ T30] audit: type=1326 audit(2000001102.782:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.0.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1124.859896][ T30] audit: type=1326 audit(2000001102.782:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.0.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1124.865891][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17449'. [ 1124.944137][T10658] IPVS: Error joining to the multicast group [ 1124.945548][ T30] audit: type=1326 audit(2000001102.782:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10636 comm="syz.0.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ecd8cda9 code=0x7ffc0000 [ 1125.119869][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17453'. [ 1126.996288][ T30] audit: type=1400 audit(2000001105.280:556): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10734 comm="syz.7.17486" src=20000 daddr=224.0.0.1 dest=20000 [ 1127.037226][T10737] random: crng reseeded on system resumption [ 1128.230727][T10767] netlink: 40 bytes leftover after parsing attributes in process `syz.7.17501'. [ 1128.407437][T10771] netlink: 1256 bytes leftover after parsing attributes in process `syz.7.17503'. [ 1128.438609][T10771] openvswitch: netlink: Unknown key attributes 20 [ 1129.409747][T10796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17515'. [ 1129.465697][T10796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17515'. [ 1129.557983][T10799] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1129.829754][T10806] netlink: 'syz.1.17520': attribute type 2 has an invalid length. [ 1130.244253][T10818] usb usb8: usbfs: process 10818 (syz.1.17526) did not claim interface 0 before use [ 1130.301940][T10822] input input144: cannot allocate more than FF_MAX_EFFECTS effects [ 1130.534911][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17530'. [ 1130.651274][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17532'. [ 1130.699036][T10830] gretap0: entered promiscuous mode [ 1130.728552][T10830] gretap0: left promiscuous mode [ 1131.282157][T10848] program syz.1.17540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1131.325927][T10848] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1131.538627][T10856] netlink: 120 bytes leftover after parsing attributes in process `syz.7.17544'. [ 1131.548020][T10856] netlink: 128 bytes leftover after parsing attributes in process `syz.7.17544'. [ 1131.681612][T10860] ptrace attach of "./syz-executor exec"[5870] was attempted by " [ 1131.886336][T10868] nbd: illegal input index -1174405120 [ 1132.151119][T10872] netlink: 'syz.3.17552': attribute type 1 has an invalid length. [ 1132.336752][T10876] CUSE: zero length info key specified [ 1133.005904][T10892] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1133.046107][T10892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1133.147783][T10894] netlink: 412 bytes leftover after parsing attributes in process `syz.0.17563'. [ 1133.660940][T10907] netlink: 324 bytes leftover after parsing attributes in process `syz.0.17569'. [ 1133.821405][T10912] [U]  [ 1134.072026][ T5954] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1134.250159][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1134.271003][ T5954] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1134.285890][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.293964][ T5954] usb 2-1: Product: syz [ 1134.317864][ T5954] usb 2-1: Manufacturer: syz [ 1134.322730][ T5954] usb 2-1: SerialNumber: syz [ 1134.342466][ T5954] usb 2-1: config 0 descriptor?? [ 1134.362597][ T5954] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1134.790974][ T5954] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1135.019203][T10930] IPVS: ip_vs_add_dest(): server weight less than zero [ 1135.032015][T30284] usb 2-1: USB disconnect, device number 83 [ 1135.047023][T30284] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1135.066935][T30284] visor 2-1:0.0: device disconnected [ 1135.386047][T10936] sp0: Synchronizing with TNC [ 1135.572641][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17586'. [ 1136.137755][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17594'. [ 1136.440738][T10969] netlink: 'syz.0.17600': attribute type 10 has an invalid length. [ 1136.744879][ T5984] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1136.887870][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17604'. [ 1136.915820][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17604'. [ 1136.939012][ T5984] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1136.951566][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.971821][ T5984] usb 2-1: config 0 descriptor?? [ 1136.991810][ T5984] cp210x 2-1:0.0: cp210x converter detected [ 1137.633982][ T5984] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1137.645139][T10991] delete_channel: no stack [ 1137.650698][T10990] delete_channel: no stack [ 1137.654616][ T5984] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1137.679206][ T5984] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1137.699166][ T5984] usb 2-1: USB disconnect, device number 84 [ 1137.719883][ T5984] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1137.740220][ T5984] cp210x 2-1:0.0: device disconnected [ 1138.766970][T11010] bond0: option mode: unable to set because the bond device has slaves [ 1140.594183][ T30] audit: type=1326 audit(2000001118.011:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1140.651857][ T30] audit: type=1326 audit(2000001118.029:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1140.702463][ T30] audit: type=1326 audit(2000001118.039:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1140.726504][ T30] audit: type=1326 audit(2000001118.039:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f977ff8cde3 code=0x7ffc0000 [ 1140.748016][ C0] vkms_vblank_simulate: vblank timer overrun [ 1140.788884][ T30] audit: type=1326 audit(2000001118.039:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f977ff8cde3 code=0x7ffc0000 [ 1140.847939][ T30] audit: type=1326 audit(2000001118.039:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1140.919686][ T30] audit: type=1326 audit(2000001118.039:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1140.941604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1140.984399][ T30] audit: type=1326 audit(2000001118.039:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1141.084760][ T30] audit: type=1326 audit(2000001118.039:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11057 comm="syz.1.17642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ff8cda9 code=0x7ffc0000 [ 1141.134784][ T30] audit: type=1800 audit(2000001118.104:566): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.17644" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1141.155953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1141.347800][T11078] netlink: 'syz.1.17653': attribute type 1 has an invalid length. [ 1141.649025][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17657'. [ 1142.290692][T11103] sp0: Synchronizing with TNC [ 1142.578813][T11114] program syz.1.17670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1142.644545][T30425] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1142.659218][T30425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1142.672746][T30425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1142.702671][T30425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1142.713426][T30425] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1142.721451][T30425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1142.864495][T11115] sit0 speed is unknown, defaulting to 1000 [ 1143.458851][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17685'. [ 1143.540568][T11115] chnl_net:caif_netlink_parms(): no params data found [ 1143.758415][T11115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.786071][T11115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.794700][T11115] bridge_slave_0: entered allmulticast mode [ 1143.802393][T11115] bridge_slave_0: entered promiscuous mode [ 1143.812189][T11115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.819662][T11115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.827146][T11115] bridge_slave_1: entered allmulticast mode [ 1143.834922][T11115] bridge_slave_1: entered promiscuous mode [ 1143.947800][T11115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.004062][T11115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.121327][T11115] team0: Port device team_slave_0 added [ 1144.141499][T11115] team0: Port device team_slave_1 added [ 1144.251443][T11115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.258567][T11115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.299124][T11115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.322352][T11115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.329802][T11115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.406603][T11115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.532553][T11115] hsr_slave_0: entered promiscuous mode [ 1144.550041][T11115] hsr_slave_1: entered promiscuous mode [ 1144.558722][T11115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1144.559629][T30284] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1144.600091][T11115] Cannot create hsr debugfs directory [ 1144.751977][T30284] usb 2-1: Using ep0 maxpacket: 16 [ 1144.758855][T30284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.775226][T30284] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1144.787116][T30284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.805469][T30284] usb 2-1: Product: syz [ 1144.813409][T30284] usb 2-1: Manufacturer: syz [ 1144.837790][T30284] usb 2-1: SerialNumber: syz [ 1144.861731][T30284] usb 2-1: config 0 descriptor?? [ 1144.885720][T30284] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1144.987522][ T5876] Bluetooth: hci5: command tx timeout [ 1145.221153][T11115] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1145.234397][T11115] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1145.258281][T11115] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1145.281213][T11115] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1145.495138][T11115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.532979][T30284] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1145.541146][T30284] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1145.570967][T11115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.603396][T30284] usb 2-1: USB disconnect, device number 85 [ 1145.623224][ T4005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.630743][ T4005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.704725][ T4005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.712915][ T4005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.276585][T11115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.945946][T11115] veth0_vlan: entered promiscuous mode [ 1147.015802][T11115] veth1_vlan: entered promiscuous mode [ 1147.127145][T11115] veth0_macvtap: entered promiscuous mode [ 1147.184397][T11115] veth1_macvtap: entered promiscuous mode [ 1147.212708][ T5876] Bluetooth: hci5: command tx timeout [ 1147.259582][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.288480][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.318522][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.338031][T11266] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1147.362271][T10372] kernel write not supported for file task/216/attr/keycreate (pid: 10372 comm: kworker/0:2) [ 1147.376384][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.442540][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.475918][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.509664][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.529848][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.543916][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.558599][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.572751][T11115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.632604][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.673424][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.722755][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.737480][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.753687][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.767200][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.778319][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.779355][T11279] netlink: 304 bytes leftover after parsing attributes in process `syz.1.17743'. [ 1147.789732][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.789763][T11115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.789783][T11115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.791185][T11115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.849173][T11279] unsupported nla_type 145 [ 1147.929672][T11115] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.958301][T11115] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.006671][T11115] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.019966][T11284] netlink: 'syz.1.17745': attribute type 27 has an invalid length. [ 1148.042184][T11115] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.131081][T11289] netlink: 64 bytes leftover after parsing attributes in process `syz.7.17746'. [ 1148.145080][T11284] syz_tun: left promiscuous mode [ 1148.282125][T11284] 0X: left allmulticast mode [ 1148.439220][T11284] bridge_slave_0: left allmulticast mode [ 1148.642536][T11307] atomic_op ffff888028826998 conn xmit_atomic 0000000000000000 [ 1148.746227][T11284] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.767149][T11284] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.785919][T11284] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.808502][T11284] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.876344][T11284] ipip0: left promiscuous mode [ 1148.882017][T11284] ipip0: left allmulticast mode [ 1149.171923][T11284] bridge4: left promiscuous mode [ 1149.213655][T11284] bridge5: left promiscuous mode [ 1149.241657][T11284] bridge5: left allmulticast mode [ 1149.267681][T11284] vlan2: left allmulticast mode [ 1149.314630][T11308] mkiss: ax0: crc mode is auto. [ 1149.445534][ T5876] Bluetooth: hci5: command tx timeout [ 1149.773912][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.810862][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.906005][ T4005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.936973][ T4005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.274854][T11358] "syz.8.17663" (11358) uses obsolete ecb(arc4) skcipher [ 1150.747664][T11374] program syz.8.17770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1151.658678][ T5876] Bluetooth: hci5: command tx timeout [ 1151.715759][T11400] can0: slcan on ptm0. [ 1151.798627][T11399] can0 (unregistered): slcan off ptm0. [ 1151.930726][T11402] netlink: 'syz.8.17784': attribute type 5 has an invalid length. [ 1152.260607][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1152.260628][ T30] audit: type=1326 audit(2000001128.918:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11409 comm="syz.8.17788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaed98cda9 code=0x0 [ 1152.343041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.599288][ T30] audit: type=1326 audit(2000001129.245:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11418 comm="syz.7.17792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b5fb8cda9 code=0x0 [ 1153.022016][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17797'. [ 1153.640180][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17809'. [ 1153.820825][ C1] sd 0:0:1:0: [sda] tag#2713 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1153.831729][ C1] sd 0:0:1:0: [sda] tag#2713 CDB: Read(6) 08 00 0c 6a 08 48 [ 1154.886750][T11501] netlink: 'syz.1.17830': attribute type 29 has an invalid length. [ 1155.551901][T11525] sg_write: data in/out 2031668/92 bytes for SCSI command 0x26-- guessing data in; [ 1155.551901][T11525] program syz.7.17843 not setting count and/or reply_len properly [ 1155.667561][ T5954] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1155.741843][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17848'. [ 1155.846667][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1155.879435][ T5954] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.00 [ 1155.927550][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.971224][ T5954] usb 2-1: config 0 descriptor?? [ 1156.420816][ T5954] corsair-psu 0003:1B1C:1C04.006D: unknown main item tag 0x0 [ 1156.432823][ T5954] corsair-psu 0003:1B1C:1C04.006D: unknown main item tag 0x0 [ 1156.448721][ T5954] corsair-psu 0003:1B1C:1C04.006D: hidraw0: USB HID vd.61 Device [HID 1b1c:1c04] on usb-dummy_hcd.1-1/input0 [ 1156.534038][ T5954] corsair-psu 0003:1B1C:1C04.006D: unable to initialize device (-38) [ 1156.561084][ T5954] corsair-psu 0003:1B1C:1C04.006D: probe with driver corsair-psu failed with error -38 [ 1156.658982][ T5939] usb 2-1: USB disconnect, device number 86 [ 1156.988300][T11575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.381638][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17872'. [ 1157.397893][T11587] program syz.1.17873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1157.409651][T11587] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1157.539569][T11591] netlink: 24 bytes leftover after parsing attributes in process `syz.8.17875'. [ 1158.383957][T11622] openvswitch: netlink: nsh attr 223 is out of range max 3 [ 1158.391752][T11622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.585751][T30284] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1158.762593][T30284] usb 2-1: Using ep0 maxpacket: 16 [ 1158.785657][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.814600][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.839975][T30284] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1158.866415][T30284] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1158.885368][T30284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.905245][T30284] usb 2-1: config 0 descriptor?? [ 1159.319961][T11648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17901'. [ 1159.353678][T30284] microsoft 0003:045E:07DA.006E: item 0 4 0 8 parsing failed [ 1159.388119][T30284] microsoft 0003:045E:07DA.006E: parse failed [ 1159.394350][T30284] microsoft 0003:045E:07DA.006E: probe with driver microsoft failed with error -22 [ 1159.579600][ T46] usb 2-1: USB disconnect, device number 87 [ 1159.693613][T11654] gtp0: entered promiscuous mode [ 1159.704080][T11654] gtp0: entered allmulticast mode [ 1160.043210][T11664] netlink: 'syz.8.17909': attribute type 10 has an invalid length. [ 1160.062894][ T30] audit: type=1800 audit(2000001136.223:577): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.17910" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1160.064789][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.090408][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.121845][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17909'. [ 1160.152399][T11664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.159665][T11664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.167273][T11664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.174507][T11664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.198978][T11664] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1160.210181][T11667] bridge_slave_1: left allmulticast mode [ 1160.222874][T11667] bridge_slave_1: left promiscuous mode [ 1160.228773][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.278094][T11667] bridge_slave_0: left allmulticast mode [ 1160.283848][T11667] bridge_slave_0: left promiscuous mode [ 1160.296240][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.365588][T11667] bond0: (slave bridge0): Releasing backup interface [ 1162.348254][ T5852] kernel write not supported for file /amidi2 (pid: 5852 comm: kworker/0:3) [ 1164.540009][T11841] netlink: 'syz.3.17991': attribute type 29 has an invalid length. [ 1164.540415][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17991'. [ 1164.600018][T11841] netlink: 'syz.3.17991': attribute type 29 has an invalid length. [ 1164.600049][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17991'. [ 1164.775459][ T5852] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1164.981080][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.013333][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.031022][T11858] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18002'. [ 1165.056009][ T5852] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1165.082048][T11858] netlink: 80 bytes leftover after parsing attributes in process `syz.1.18002'. [ 1165.096252][ T5852] usb 9-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1165.114595][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.145493][ T5852] usb 9-1: config 0 descriptor?? [ 1165.536136][T11876] vivid-002: disconnect [ 1165.543473][T11875] vivid-002: reconnect [ 1165.596998][ T5852] betop 0003:11C0:5506.006F: ignoring exceeding usage max [ 1165.631753][ T5852] betop 0003:11C0:5506.006F: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.8-1/input0 [ 1165.652135][ T5852] betop 0003:11C0:5506.006F: no inputs found [ 1165.821503][ T5852] usb 9-1: USB disconnect, device number 2 [ 1165.898082][ T5939] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1166.070991][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1166.084196][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1166.097961][ T5939] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1166.108040][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.118272][ T5939] usb 2-1: config 0 descriptor?? [ 1166.128750][ T5939] appletouch 2-1:0.0: Could not find int-in endpoint [ 1166.136496][ T5939] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 1166.146114][ T5939] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1166.358627][ T46] usb 2-1: USB disconnect, device number 88 [ 1166.462670][T11893] netlink: 'syz.8.18019': attribute type 61 has an invalid length. [ 1167.119814][T11906] sp0: Synchronizing with TNC [ 1167.132394][T11905] [U] ` [ 1167.924645][T11933] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1168.017689][ T5852] hid-generic 0000:0003:0000.0070: unknown main item tag 0x0 [ 1168.056388][ T5852] hid-generic 0000:0003:0000.0070: unknown main item tag 0x0 [ 1168.067617][ T5852] hid-generic 0000:0003:0000.0070: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1168.417866][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18046'. [ 1168.507889][T11955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1168.806061][T11967] netlink: 208 bytes leftover after parsing attributes in process `syz.0.18054'. [ 1168.832574][T11967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18054'. [ 1169.223206][T11982] netlink: 'syz.7.18061': attribute type 10 has an invalid length. [ 1169.233063][T11982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.240656][T11982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.275856][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18061'. [ 1169.283214][T11982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.292034][T11982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.299658][T11982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.306838][T11982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.335900][T11982] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1169.347682][T11984] bridge_slave_1: left allmulticast mode [ 1169.373058][T11984] bridge_slave_1: left promiscuous mode [ 1169.415786][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.494965][T11984] bridge_slave_0: left allmulticast mode [ 1169.511553][T11984] bridge_slave_0: left promiscuous mode [ 1169.517756][T11984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.589222][T11984] bond0: (slave bridge0): Releasing backup interface [ 1169.693744][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18065'. [ 1169.722260][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18065'. [ 1169.747518][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18065'. [ 1169.759580][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18065'. [ 1170.239026][T30311] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1170.311173][T12015] netlink: 'syz.7.18076': attribute type 27 has an invalid length. [ 1170.455688][T30311] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.523159][T30311] usb 9-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1170.577462][T30311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.608747][T30311] usb 9-1: config 0 descriptor?? [ 1170.677904][T12015] tipc: Resetting bearer [ 1171.003189][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.059156][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.107723][T30311] nzxt-kraken2 0003:1E71:170E.0071: unknown main item tag 0x0 [ 1171.124282][T30311] nzxt-kraken2 0003:1E71:170E.0071: unknown main item tag 0x0 [ 1171.135102][T30311] nzxt-kraken2 0003:1E71:170E.0071: unknown main item tag 0x0 [ 1171.147845][T30311] nzxt-kraken2 0003:1E71:170E.0071: unknown main item tag 0x0 [ 1171.202990][T30311] nzxt-kraken2 0003:1E71:170E.0071: unknown main item tag 0x0 [ 1171.243792][T30311] nzxt-kraken2 0003:1E71:170E.0071: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.8-1/input0 [ 1171.420255][T30311] usb 9-1: USB disconnect, device number 3 [ 1171.551320][T12015] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.582032][T12015] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.613829][T12015] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.643316][T12015] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.408777][T30311] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1172.623370][T30311] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.654612][T30311] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.685862][T30311] usb 9-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 1172.717321][T30311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.752741][T30311] usb 9-1: config 0 descriptor?? [ 1173.187861][T12078] netlink: 'syz.1.18104': attribute type 10 has an invalid length. [ 1173.222199][T30311] logitech 0003:046D:C101.0072: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.8-1/input0 [ 1173.252037][T12078] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1173.253804][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18104'. [ 1173.399082][T12082] bond0: (slave bridge0): Releasing backup interface [ 1173.455480][T30311] usb 9-1: USB disconnect, device number 4 [ 1173.905519][ T30] audit: type=1326 audit(2000001149.169:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12105 comm="syz.1.18117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f977ff8cda9 code=0x0 [ 1176.032974][ T5852] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1176.094436][T12171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18148'. [ 1176.154301][T12173] netlink: 'syz.7.18150': attribute type 3 has an invalid length. [ 1176.164158][T30284] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1176.176835][T12173] netlink: 126468 bytes leftover after parsing attributes in process `syz.7.18150'. [ 1176.214513][ T5852] usb 9-1: Using ep0 maxpacket: 32 [ 1176.222364][ T5852] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1176.248495][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.279784][ T5852] usb 9-1: config 0 descriptor?? [ 1176.295676][ T5852] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1176.342782][T30284] usb 2-1: Using ep0 maxpacket: 16 [ 1176.355183][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.378428][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.399514][T30284] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1176.429635][T30284] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1176.450795][T30284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.475555][T30284] usb 2-1: config 0 descriptor?? [ 1176.934748][T30284] microsoft 0003:045E:07DA.0073: No inputs registered, leaving [ 1176.945016][T30284] microsoft 0003:045E:07DA.0073: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1176.958546][ T5852] gspca_nw80x: reg_w err -71 [ 1176.965330][T30284] microsoft 0003:045E:07DA.0073: no inputs found [ 1176.972365][T30284] microsoft 0003:045E:07DA.0073: could not initialize ff, continuing anyway [ 1176.976430][ T5852] nw80x 9-1:0.0: probe with driver nw80x failed with error -71 [ 1177.027211][ T5852] usb 9-1: USB disconnect, device number 5 [ 1177.152764][T30284] usb 2-1: USB disconnect, device number 89 [ 1177.486009][T12209] 8021q: VLANs not supported on lo [ 1178.512260][T12253] QAT: Invalid ioctl 21531 [ 1178.908490][T30284] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1179.068912][T30284] usb 2-1: Using ep0 maxpacket: 32 [ 1179.087006][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.140564][T30284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.165474][T30284] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1179.177855][T30284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.195183][T30284] usb 2-1: config 0 descriptor?? [ 1179.578815][T12276] netlink: 'syz.8.18200': attribute type 27 has an invalid length. [ 1179.668998][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.688043][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.695755][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.703262][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.711657][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.718892][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.726428][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.733646][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.740915][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.748660][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.755947][T30284] saitek 0003:0738:1705.0074: unknown main item tag 0x0 [ 1179.781901][T30284] saitek 0003:0738:1705.0074: hidraw0: USB HID vb7.be Device [HID 0738:1705] on usb-dummy_hcd.1-1/input0 [ 1179.868270][T12276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.894639][T12276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.911197][ T5852] usb 2-1: USB disconnect, device number 90 [ 1180.026389][T12276] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.036219][T12276] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.045429][T12276] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.055734][T12276] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.395510][ T31] INFO: task syz.4.15925:7366 blocked for more than 143 seconds. [ 1180.404577][ T31] Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1180.421526][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1180.431479][ T31] task:syz.4.15925 state:D stack:24344 pid:7366 tgid:7364 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 1180.447618][ T31] Call Trace: [ 1180.462564][ T31] [ 1180.465996][ T31] __schedule+0x18bc/0x4c40 [ 1180.479498][ T31] ? __pfx___schedule+0x10/0x10 [ 1180.488698][ T31] ? __pfx_lock_release+0x10/0x10 [ 1180.501220][ T31] ? schedule+0x90/0x320 [ 1180.505566][ T31] schedule+0x14b/0x320 [ 1180.509800][ T31] schedule_timeout+0xb0/0x290 [ 1180.527738][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1180.539477][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1180.548906][ T31] ? wait_for_completion+0x2fe/0x620 [ 1180.554278][ T31] ? wait_for_completion+0x2fe/0x620 [ 1180.571074][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1180.582687][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 1180.590292][ T31] ? wait_for_completion+0x2fe/0x620 [ 1180.595670][ T31] wait_for_completion+0x355/0x620 [ 1180.612440][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1180.617412][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1180.623457][ T31] ? __pfx_ib_mad_remove_device+0x10/0x10 [ 1180.629366][ T31] ? remove_client_context+0x19f/0x1e0 [ 1180.635459][ T31] disable_device+0x1c7/0x360 [ 1180.640368][ T31] ? __pfx_disable_device+0x10/0x10 [ 1180.645779][ T31] __ib_unregister_device+0x2ac/0x3d0 [ 1180.652131][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1180.658126][ T31] ib_unregister_device_and_put+0xb9/0xf0 [ 1180.664128][ T5852] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1180.672451][ T31] nldev_dellink+0x2c6/0x310 [ 1180.677555][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1180.683113][ T31] ? rcu_is_watching+0x15/0xb0 [ 1180.687953][ T31] ? cap_capable+0x139/0x450 [ 1180.692608][ T31] ? safesetid_security_capable+0xb2/0x1d0 [ 1180.699663][ T31] ? safesetid_security_capable+0xb2/0x1d0 [ 1180.705717][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1180.710540][ T31] ? security_capable+0x7e/0x2d0 [ 1180.715692][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1180.720869][ T31] rdma_nl_rcv+0x6dd/0x9e0 [ 1180.725897][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1180.730940][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1180.736216][ T31] netlink_unicast+0x7f6/0x990 [ 1180.741295][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1180.746630][ T31] ? __virt_addr_valid+0x45f/0x530 [ 1180.752532][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 1180.758241][ T31] ? __check_object_size+0x47a/0x730 [ 1180.763605][ T31] netlink_sendmsg+0x8e4/0xcb0 [ 1180.768654][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.774030][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.779513][ T31] __sock_sendmsg+0x221/0x270 [ 1180.784253][ T31] ____sys_sendmsg+0x52a/0x7e0 [ 1180.789074][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1180.794570][ T31] ? __fget_files+0x2a/0x410 [ 1180.799312][ T31] ? __fget_files+0x2a/0x410 [ 1180.804070][ T31] __sys_sendmsg+0x269/0x350 [ 1180.809200][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1180.815702][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1180.822451][ T31] ? do_syscall_64+0x100/0x230 [ 1180.827465][ T31] ? do_syscall_64+0xb6/0x230 [ 1180.832729][ T5852] usb 9-1: Using ep0 maxpacket: 32 [ 1180.838123][ T31] do_syscall_64+0xf3/0x230 [ 1180.842867][ T31] ? clear_bhb_loop+0x35/0x90 [ 1180.848081][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.854939][ T31] RIP: 0033:0x7fe23778cda9 [ 1180.859998][ T31] RSP: 002b:00007fe2385cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.869682][ T5852] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.881293][ T5852] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.891447][ T31] RAX: ffffffffffffffda RBX: 00007fe2379a5fa0 RCX: 00007fe23778cda9 [ 1180.899646][ T31] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1180.909059][ T5852] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1180.915728][ T5852] usb 9-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 1180.925484][ T31] RBP: 00007fe23780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.933606][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.941815][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.950212][ T31] R13: 0000000000000000 R14: 00007fe2379a5fa0 R15: 00007fff44e86808 [ 1180.958261][ T31] [ 1180.963450][ T5852] usb 9-1: config 0 descriptor?? [ 1180.968760][ T31] [ 1180.968760][ T31] Showing all locks held in the system: [ 1180.977967][ T31] 1 lock held by khungtaskd/31: [ 1180.987227][ T31] #0: ffffffff8e939ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1180.997520][ T31] 4 locks held by kworker/u8:4/80: [ 1181.002724][ T31] #0: ffff88801baf3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1181.013822][ T31] #1: ffffc9000213fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1181.025256][ T31] #2: ffffffff8fca51d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 1181.034843][ T31] #3: ffff8880483f86c0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x3a/0x2f0 [ 1181.046339][ T31] 3 locks held by kworker/1:2/119: [ 1181.051699][ T31] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1181.063045][ T31] #1: ffffc90002dc7c60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1181.075853][ T31] #2: ffff8880244f1240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x2d1/0x4130 [ 1181.093160][ T31] 2 locks held by getty/5568: [ 1181.097935][ T31] #0: ffff888030e250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1181.107959][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1181.118324][ T31] 5 locks held by kworker/0:3/5852: [ 1181.123673][ T31] #0: ffff888144289d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1181.135429][ T31] #1: ffffc9000405fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1181.148167][ T31] #2: ffff888145bae190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 1181.157382][ T31] #3: ffff8880609f9190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 1181.167099][ T31] #4: ffff888059a06160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 1181.176622][ T31] 4 locks held by udevd/28418: [ 1181.181462][ T31] #0: ffff88805ea2cc30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 [ 1181.190488][ T31] #1: ffff8880312e9888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 1181.200961][ T31] #2: ffff88803572eb48 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 1181.211022][ T31] #3: ffff8880609f9190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 1181.220716][ T31] 2 locks held by syz.4.15925/7366: [ 1181.225982][ T31] #0: ffffffff9a78b7f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32d/0x9e0 [ 1181.236174][ T31] #1: ffff8880483f86c0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x264/0x3d0 [ 1181.247808][ T31] [ 1181.250590][ T31] ============================================= [ 1181.250590][ T31] [ 1181.259096][ T31] NMI backtrace for cpu 0 [ 1181.259119][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1181.259149][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1181.259163][ T31] Call Trace: [ 1181.259176][ T31] [ 1181.259187][ T31] dump_stack_lvl+0x241/0x360 [ 1181.259216][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1181.259239][ T31] ? __pfx__printk+0x10/0x10 [ 1181.259284][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 1181.259313][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1181.259333][ T31] ? _printk+0xd5/0x120 [ 1181.259363][ T31] ? __pfx__printk+0x10/0x10 [ 1181.259394][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1181.259419][ T31] ? __pfx__printk+0x10/0x10 [ 1181.259449][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 1181.259472][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1181.259494][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1181.259519][ T31] watchdog+0x1058/0x10a0 [ 1181.259547][ T31] ? watchdog+0x1ea/0x10a0 [ 1181.259577][ T31] ? __pfx_watchdog+0x10/0x10 [ 1181.259603][ T31] kthread+0x7a9/0x920 [ 1181.259627][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.259655][ T31] ? __pfx_watchdog+0x10/0x10 [ 1181.259681][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.259706][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.259737][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.259763][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1181.259786][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 1181.259811][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.259841][ T31] ret_from_fork+0x4b/0x80 [ 1181.259865][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.259894][ T31] ret_from_fork_asm+0x1a/0x30 [ 1181.259933][ T31] [ 1181.259971][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1181.433879][ C1] NMI backtrace for cpu 1 [ 1181.433895][ C1] CPU: 1 UID: 0 PID: 9730 Comm: kworker/u8:6 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1181.433915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1181.433928][ C1] Workqueue: bat_events batadv_purge_orig [ 1181.433956][ C1] RIP: 0010:batadv_purge_orig_ref+0x15e/0x1660 [ 1181.433980][ C1] Code: 24 80 00 00 00 48 c7 c0 00 ff 7e 9a 48 c1 e8 03 48 89 84 24 b0 00 00 00 48 89 54 24 38 48 8b 84 24 98 00 00 00 42 80 3c 30 00 <4c> 8b 74 24 70 74 0d 4c 89 f7 e8 83 38 6a f6 48 8b 54 24 38 48 8b [ 1181.433995][ C1] RSP: 0018:ffffc9000bdf79a0 EFLAGS: 00000246 [ 1181.434010][ C1] RAX: 1ffff1100b0fc9f0 RBX: ffff8880493d44c8 RCX: ffff888026d2da00 [ 1181.434024][ C1] RDX: ffff8880587e4f88 RSI: 0000000000000400 RDI: 0000000000000000 [ 1181.434036][ C1] RBP: ffffc9000bdf7b00 R08: ffffffff8bb93165 R09: 1ffffffff2034c6e [ 1181.434050][ C1] R10: dffffc0000000000 R11: ffffffff8bb8ddf0 R12: ffff888043574ec8 [ 1181.434063][ C1] R13: ffffffff8188eeb6 R14: dffffc0000000000 R15: 0000000002000000 [ 1181.434076][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1181.434091][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1181.434105][ C1] CR2: 0000001b3171fffc CR3: 0000000026f4a000 CR4: 00000000003526f0 [ 1181.434123][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1181.434134][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1181.434145][ C1] Call Trace: [ 1181.434152][ C1] [ 1181.434160][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1181.434179][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1181.434205][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1181.434222][ C1] ? nmi_handle+0x2a/0x5a0 [ 1181.434258][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1181.434280][ C1] ? nmi_handle+0x14f/0x5a0 [ 1181.434304][ C1] ? nmi_handle+0x2a/0x5a0 [ 1181.434329][ C1] ? batadv_purge_orig_ref+0x15e/0x1660 [ 1181.434349][ C1] ? default_do_nmi+0x63/0x160 [ 1181.434376][ C1] ? exc_nmi+0x123/0x1f0 [ 1181.434404][ C1] ? end_repeat_nmi+0xf/0x53 [ 1181.434431][ C1] ? process_scheduled_works+0x976/0x1840 [ 1181.434451][ C1] ? __pfx_batadv_purge_orig+0x10/0x10 [ 1181.434469][ C1] ? batadv_purge_orig_ref+0xe5/0x1660 [ 1181.434490][ C1] ? batadv_purge_orig_ref+0x15e/0x1660 [ 1181.434511][ C1] ? batadv_purge_orig_ref+0x15e/0x1660 [ 1181.434532][ C1] ? batadv_purge_orig_ref+0x15e/0x1660 [ 1181.434555][ C1] [ 1181.434562][ C1] [ 1181.434580][ C1] ? __pfx_batadv_purge_orig_ref+0x10/0x10 [ 1181.434605][ C1] ? process_scheduled_works+0x976/0x1840 [ 1181.434625][ C1] batadv_purge_orig+0x19/0x60 [ 1181.434642][ C1] process_scheduled_works+0xa66/0x1840 [ 1181.434676][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1181.434703][ C1] ? assign_work+0x364/0x3d0 [ 1181.434727][ C1] worker_thread+0x870/0xd30 [ 1181.434751][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1181.434772][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1181.434795][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1181.434814][ C1] kthread+0x7a9/0x920 [ 1181.434843][ C1] ? __pfx_kthread+0x10/0x10 [ 1181.434871][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1181.434890][ C1] ? __pfx_kthread+0x10/0x10 [ 1181.434911][ C1] ? __pfx_kthread+0x10/0x10 [ 1181.434935][ C1] ? __pfx_kthread+0x10/0x10 [ 1181.434956][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1181.434974][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1181.434996][ C1] ? __pfx_kthread+0x10/0x10 [ 1181.435022][ C1] ret_from_fork+0x4b/0x80 [ 1181.435043][ C1] ? __pfx_kthread+0x10/0x10 [ 1181.435065][ C1] ret_from_fork_asm+0x1a/0x30 [ 1181.435093][ C1] [ 1181.555687][ T5852] wacom 0003:056A:4001.0075: unknown main item tag 0x0 [ 1181.563673][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1181.563698][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 1181.563726][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1181.563741][ T31] Call Trace: [ 1181.563752][ T31] [ 1181.563764][ T31] dump_stack_lvl+0x241/0x360 [ 1181.563798][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1181.563821][ T31] ? __pfx__printk+0x10/0x10 [ 1181.563857][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1181.563894][ T31] ? vscnprintf+0x5d/0x90 [ 1181.563921][ T31] panic+0x349/0x880 [ 1181.563956][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1181.563983][ T31] ? __pfx_panic+0x10/0x10 [ 1181.564012][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1181.564050][ T31] ? __irq_work_queue_local+0x137/0x410 [ 1181.564080][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 1181.564111][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1181.564142][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1181.564171][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1181.564199][ T31] watchdog+0x1097/0x10a0 [ 1181.564230][ T31] ? watchdog+0x1ea/0x10a0 [ 1181.564262][ T31] ? __pfx_watchdog+0x10/0x10 [ 1181.564287][ T31] kthread+0x7a9/0x920 [ 1181.564315][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.564346][ T31] ? __pfx_watchdog+0x10/0x10 [ 1181.564373][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.564397][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.564428][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.564453][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1181.564475][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 1181.564500][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.564529][ T31] ret_from_fork+0x4b/0x80 [ 1181.564554][ T31] ? __pfx_kthread+0x10/0x10 [ 1181.564582][ T31] ret_from_fork_asm+0x1a/0x30 [ 1181.564619][ T31] [ 1181.564925][ T31] Kernel Offset: disabled