last executing test programs: 4m54.215349208s ago: executing program 4 (id=1166): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m53.458845463s ago: executing program 4 (id=1170): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 4m53.155212822s ago: executing program 4 (id=1174): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000080)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x24008830) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x8001, 0x10}, 0xc) 4m52.919055463s ago: executing program 4 (id=1177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x28}}, 0x0) 4m52.568524407s ago: executing program 4 (id=1182): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 4m52.269290362s ago: executing program 4 (id=1185): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="0db1bb26") 4m37.542120456s ago: executing program 32 (id=1185): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="0db1bb26") 2m21.270890949s ago: executing program 0 (id=2553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x60}}, 0x0) 2m20.854723394s ago: executing program 0 (id=2557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff19}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) 2m20.090087905s ago: executing program 0 (id=2564): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 2m19.887510207s ago: executing program 0 (id=2565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000010280)={r1, 0x9, 0x0, 0x5}, 0x10) 2m18.840396331s ago: executing program 0 (id=2570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0xc048aeca, 0x0) 2m18.347541403s ago: executing program 0 (id=2573): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r2 = dup3(r1, r0, 0x80000) ioctl$NBD_DO_IT(r2, 0xab03) 2m3.932385944s ago: executing program 33 (id=2573): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r2 = dup3(r1, r0, 0x80000) ioctl$NBD_DO_IT(r2, 0xab03) 5.905154402s ago: executing program 5 (id=3996): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="40101a000000b6ac4ada95"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.946363062s ago: executing program 5 (id=4007): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0xf, 0x4c, {0x4c, 0x1, "001094d14d7bfca1b72d5caf1107014e769182d5f077de47988c965ddd43d4978b96d64c310cb62a0459086b84698492b0e7e80f9219802df69bcb4ab7cfd8707cbb75f2b6452197f450"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.680460921s ago: executing program 3 (id=4011): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000800)="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", 0x226}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319", 0x51}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 3.13518507s ago: executing program 3 (id=4013): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x1, 0x2}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000200070000000900010073797a300000000024000200140001"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 2.637068878s ago: executing program 2 (id=4016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000092000040"]) 2.417675127s ago: executing program 1 (id=4017): r0 = io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x40000005}) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000200)="f202302826", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000009c0)="a543", 0x2}], 0x1}}], 0x2, 0x44884) close_range(r0, 0xffffffffffffffff, 0x0) 2.400206217s ago: executing program 3 (id=4019): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000180)}, 0x20) 2.108129424s ago: executing program 5 (id=4023): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.932700512s ago: executing program 3 (id=4024): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0xbbfe}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 1.823393355s ago: executing program 2 (id=4025): setresuid(0x0, 0xee01, 0xee00) r0 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 1.605069074s ago: executing program 6 (id=4026): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 1.533161431s ago: executing program 1 (id=4027): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f00000072c0)=[{{&(0x7f0000000280)=@xdp={0x2c, 0x6, r1, 0x34}, 0x80, 0x0, 0x0, &(0x7f0000002800)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x1, 0x8840) 1.515662791s ago: executing program 2 (id=4028): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 1.515055585s ago: executing program 3 (id=4029): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1.325285366s ago: executing program 6 (id=4030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) 1.216353154s ago: executing program 1 (id=4031): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 938.425354ms ago: executing program 6 (id=4032): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x500, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 852.196083ms ago: executing program 3 (id=4033): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() 851.48016ms ago: executing program 1 (id=4034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0x8, 0xb, 0x3, 0xd0, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x3, 0x2, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3, 0x1}, {0x1, 0x4000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xe}, {0x4000, 0x2000, 0x10, 0x0, 0x15, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x1, 0x7}, {0xd000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x70}, {0x0, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0x18002, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x8000006, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x60, 0x3]}) 737.968383ms ago: executing program 5 (id=4035): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) read$FUSE(r1, 0x0, 0x0) 720.475876ms ago: executing program 6 (id=4036): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) 546.844974ms ago: executing program 5 (id=4037): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x8000a, 0x10, 0x3ffffffe, 0x1}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 512.072164ms ago: executing program 2 (id=4038): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 356.788884ms ago: executing program 6 (id=4039): socket$igmp(0x2, 0x3, 0x2) unshare(0x22020400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000040)) 351.145664ms ago: executing program 1 (id=4040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, [{0x22, 0x1, "60aeb59d3fb1"}]}}}}}}, 0x0) 105.915593ms ago: executing program 6 (id=4041): r0 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 0s ago: executing program 5 (id=4042): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) kernel console output (not intermixed with test programs): 10389 comm="syz.1.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7fc00000 [ 296.782896][ T37] audit: type=1326 audit(1757939395.210:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10389 comm="syz.1.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7fc00000 [ 296.809303][ T37] audit: type=1326 audit(1757939395.220:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10389 comm="syz.1.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7fc00000 [ 297.791663][ T37] audit: type=1326 audit(1757939396.259:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10432 comm="syz.5.1927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f0237eba9 code=0x0 [ 297.846579][T10433] input: syz1 as /devices/virtual/input/input16 [ 298.671250][T10461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.251681][T10465] cgroup: fork rejected by pids controller in /syz5 [ 299.689038][ T63] block nbd0: Possible stuck request ffff888024b17000: control (read@1024,1024B). Runtime 30 seconds [ 299.689978][ T63] block nbd0: Possible stuck request ffff888024b171c0: control (read@2048,1024B). Runtime 30 seconds [ 299.690020][ T63] block nbd0: Possible stuck request ffff888024b17380: control (read@3072,1024B). Runtime 30 seconds [ 299.690070][ T63] block nbd0: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 30 seconds [ 300.756061][T10551] vlan3: entered allmulticast mode [ 301.477999][T10575] bridge0: entered promiscuous mode [ 301.482097][T10575] macvlan2: entered promiscuous mode [ 302.124243][ T5927] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 302.267189][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 302.272077][ T5927] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.272108][ T5927] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.278995][ T5927] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 302.279025][ T5927] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 302.279046][ T5927] usb 4-1: Product: syz [ 302.279060][ T5927] usb 4-1: Manufacturer: syz [ 302.370403][ T5927] hub 4-1:4.0: USB hub found [ 302.573780][ T5927] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 302.877525][ T49] usb 4-1: USB disconnect, device number 15 [ 304.181114][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 305.268459][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1992'. [ 308.726352][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 310.432318][T10749] cgroup: fork rejected by pids controller in /syz0 [ 313.143744][T10859] loop6: detected capacity change from 0 to 524288000 [ 313.211108][ T5927] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 313.250413][T10861] loop6: detected capacity change from 524288000 to 1 [ 313.293960][T10259] Dev loop6: unable to read RDB block 1 [ 313.294011][T10259] loop6: unable to read partition table [ 313.294274][T10259] loop6: partition table beyond EOD, truncated [ 313.344474][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 313.350542][T10866] netlink: 'syz.3.2078': attribute type 25 has an invalid length. [ 313.350561][T10866] netlink: 'syz.3.2078': attribute type 8 has an invalid length. [ 313.369442][T10859] Dev loop6: unable to read RDB block 1 [ 313.369509][T10859] loop6: unable to read partition table [ 313.370157][T10859] loop6: partition table beyond EOD, truncated [ 313.370271][T10859] loop_reread_partitions: partition scan of loop6 (‰u0Av°Ë ) failed (rc=-5) [ 313.375418][ T5927] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 313.375451][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.375473][ T5927] usb 6-1: Product: syz [ 313.375489][ T5927] usb 6-1: Manufacturer: syz [ 313.375505][ T5927] usb 6-1: SerialNumber: syz [ 313.436497][ T5927] usb 6-1: config 0 descriptor?? [ 313.505304][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 313.505337][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.614657][ T10] usb 2-1: config 0 descriptor?? [ 313.691228][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 313.887823][ T10] gspca_spca508: reg_read err -71 [ 313.888241][ T10] gspca_spca508: reg_read err -71 [ 313.888613][ T10] gspca_spca508: reg_read err -71 [ 313.889043][ T10] gspca_spca508: reg_read err -71 [ 313.889442][ T10] gspca_spca508: reg_read err -71 [ 313.889847][ T10] gspca_spca508: reg write: error -71 [ 313.889944][ T10] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 313.913666][ T10] usb 2-1: USB disconnect, device number 21 [ 314.015397][ T5927] usb_8dev 6-1:0.0 can0: sending command message failed [ 314.015426][ T5927] usb_8dev 6-1:0.0 can0: can't get firmware version [ 314.252797][ T5927] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 314.296114][ T5927] usb 6-1: USB disconnect, device number 4 [ 314.638822][ T37] audit: type=1326 audit(1757939413.951:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10869 comm="syz.0.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff450d7eba9 code=0x7fc00000 [ 314.678118][T10895] input: syz0 as /devices/virtual/input/input17 [ 315.644159][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2103'. [ 316.214148][ T5207] Dev loop6: unable to read RDB block 1 [ 316.214198][ T5207] loop6: unable to read partition table [ 316.214432][ T5207] loop6: partition table beyond EOD, truncated [ 317.582739][ T990] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 317.680145][ T5927] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 317.737853][ T990] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 317.737894][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.742996][ T990] usb 4-1: config 0 descriptor?? [ 317.779047][ T990] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 317.821050][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 317.828602][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.828684][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.828717][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.828749][ T5927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 317.828776][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.833143][ T5927] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 317.833172][ T5927] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 317.833191][ T5927] usb 6-1: Manufacturer: syz [ 317.875308][ T5927] usb 6-1: config 0 descriptor?? [ 317.960786][ T990] gspca_sn9c2028: read1 error -32 [ 317.969035][ T990] gspca_sn9c2028: read1 error -32 [ 318.174118][ T10] usb 4-1: USB disconnect, device number 16 [ 318.288114][ T5927] rc_core: IR keymap rc-hauppauge not found [ 318.288142][ T5927] Registered IR keymap rc-empty [ 318.289168][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.307993][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.381874][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 318.410767][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 318.451295][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.453395][ C0] mceusb 6-1:0.0: long-range (0x1) receiver active [ 318.468832][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.488062][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.510401][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.537380][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.556581][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.574562][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.593456][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.611522][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.630422][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 318.736517][ T5927] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 318.736549][ T5927] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 318.784642][ T5927] usb 6-1: USB disconnect, device number 5 [ 319.151767][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.151856][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.640918][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2142'. [ 319.642616][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2142'. [ 320.182841][ T990] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 320.244294][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 320.288244][ T5928] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 320.357835][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.357878][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.357922][ T990] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 320.357959][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.363455][ T990] usb 6-1: config 0 descriptor?? [ 320.421264][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 320.423827][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.423859][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.423897][ T10] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 320.423916][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.459902][ T10] usb 2-1: config 0 descriptor?? [ 320.486120][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.486154][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.486243][ T5928] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 320.486268][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.548902][ T5928] usb 1-1: config 0 descriptor?? [ 320.715151][T11029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.765495][T11029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.880085][ T990] hid-led 0003:1D34:0004.0017: unknown main item tag 0x0 [ 320.972377][ T5928] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 320.972471][ T5928] isku 0003:1E7D:319C.0018: unknown main item tag 0x0 [ 320.975628][ T10] hid (null): unknown global tag 0xc [ 320.975676][ T10] hid (null): invalid report_count 47589 [ 321.014614][ T5928] isku 0003:1E7D:319C.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 321.038866][ T990] hid-led 0003:1D34:0004.0017: hidraw1: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.5-1/input0 [ 321.173157][ T990] hid-led 0003:1D34:0004.0017: Dream Cheeky Webmail Notifier initialized [ 321.188681][ T10] usb 2-1: string descriptor 0 read error: -71 [ 321.226548][ T10] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 321.226644][ T10] letsketch 0003:6161:4D15.0019: probe with driver letsketch failed with error -32 [ 321.264482][ T5928] usb 6-1: USB disconnect, device number 6 [ 321.286471][ T10] usb 2-1: USB disconnect, device number 22 [ 321.404532][ T49] usb 1-1: USB disconnect, device number 17 [ 321.500366][T11042] fido_id[11042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 322.189236][ T59] Bluetooth: hci2: link tx timeout [ 322.189819][ T59] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 322.193948][ T59] Bluetooth: hci2: link tx timeout [ 322.193961][ T59] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 322.225240][T11060] Invalid logical block size (7) [ 322.675135][T11081] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2168'. [ 323.192994][ T5924] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 323.364481][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 323.367397][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.367429][ T5924] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 323.367456][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.372215][ T5924] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 323.372248][ T5924] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 323.372269][ T5924] usb 1-1: Product: syz [ 323.372284][ T5924] usb 1-1: Manufacturer: syz [ 323.372299][ T5924] usb 1-1: SerialNumber: syz [ 323.390704][ T5924] usb 1-1: config 0 descriptor?? [ 323.824321][ T5924] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 324.173961][ T59] Bluetooth: hci2: command 0x0405 tx timeout [ 324.301782][ T5924] usb 1-1: USB disconnect, device number 18 [ 324.350063][T11123] input: syz0 as /devices/virtual/input/input21 [ 324.836570][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 325.888956][ T5924] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 326.031070][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 326.033665][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.033698][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.033756][ T5924] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 326.033780][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.093379][ T5924] usb 2-1: config 0 descriptor?? [ 326.307347][ T59] Bluetooth: hci2: command 0x0405 tx timeout [ 326.329383][T11168] mkiss: ax0: crc mode is auto. [ 326.513951][ T5924] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x4 [ 326.513993][ T5924] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 326.514022][ T5924] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 326.514049][ T5924] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 326.514076][ T5924] hid-rmi 0003:06CB:81A7.001A: unbalanced collection at end of report description [ 326.514977][ T5924] hid-rmi 0003:06CB:81A7.001A: parse failed [ 326.515081][ T5924] hid-rmi 0003:06CB:81A7.001A: probe with driver hid-rmi failed with error -22 [ 326.709141][ T5927] usb 2-1: USB disconnect, device number 23 [ 328.326485][ T63] block nbd0: Possible stuck request ffff888024b17000: control (read@1024,1024B). Runtime 60 seconds [ 328.326539][ T63] block nbd0: Possible stuck request ffff888024b171c0: control (read@2048,1024B). Runtime 60 seconds [ 328.326588][ T63] block nbd0: Possible stuck request ffff888024b17380: control (read@3072,1024B). Runtime 60 seconds [ 328.326616][ T63] block nbd0: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 60 seconds [ 328.774132][T11225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.736779][T11267] program syz.1.2253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.879491][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 331.021743][ T49] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 331.032728][T11274] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2258'. [ 331.186290][ T1423] wlan1: Trigger new scan to find an IBSS to join [ 331.235665][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.235698][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.246041][ T49] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.246100][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.246124][ T49] usb 4-1: SerialNumber: syz [ 331.526287][ T49] usb 4-1: 0:2 : does not exist [ 331.669766][ T49] usb 4-1: USB disconnect, device number 17 [ 331.876975][T10259] udevd[10259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.681129][T11296] ./file0: Can't open blockdev [ 335.574509][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 335.729944][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.730006][ T9] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 335.730029][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.790932][ T9] usb 6-1: config 0 descriptor?? [ 335.908376][ T67] wlan1: Trigger new scan to find an IBSS to join [ 336.239264][ T9] uclogic 0003:2179:0077.001B: interface is invalid, ignoring [ 336.243979][T11362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2295'. [ 336.258615][T11362] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.423911][ T5928] usb 6-1: USB disconnect, device number 7 [ 336.808631][ T1423] wlan1: Creating new IBSS network, BSSID 3a:58:1f:74:55:28 [ 337.489363][ T5207] Dev loop6: unable to read RDB block 1 [ 337.489418][ T5207] loop6: unable to read partition table [ 337.489650][ T5207] loop6: partition table beyond EOD, truncated [ 337.622532][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2312'. [ 338.541886][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'. [ 338.810514][T11427] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.114914][T11434] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 339.117291][T11434] team0: Port device batadv1 added [ 339.858463][T11453] erspan0: entered promiscuous mode [ 340.129546][T11462] netlink: 'syz.5.2340': attribute type 1 has an invalid length. [ 340.928020][ T5927] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 341.080398][ T5927] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.080434][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.080454][ T5927] usb 2-1: Product: syz [ 341.080469][ T5927] usb 2-1: Manufacturer: syz [ 341.080483][ T5927] usb 2-1: SerialNumber: syz [ 341.158675][ T5927] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 341.302498][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.062256][T11497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.071214][T11497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.384553][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 342.402008][ T10] ath9k_htc: Failed to initialize the device [ 342.484637][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 342.539853][ T5927] usb 2-1: USB disconnect, device number 24 [ 342.550149][ T12] wlan1: Trigger new scan to find an IBSS to join [ 344.601768][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 344.601800][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 345.337457][ T5927] IPVS: starting estimator thread 0... [ 345.365827][ T5924] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 345.423076][T11574] IPVS: using max 6 ests per chain, 14400 per kthread [ 345.443543][ T3104] wlan1: Trigger new scan to find an IBSS to join [ 345.524361][ T5924] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 345.524408][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.524440][ T5924] usb 6-1: Product: syz [ 345.524455][ T5924] usb 6-1: Manufacturer: syz [ 345.524469][ T5924] usb 6-1: SerialNumber: syz [ 345.561352][ T5924] usb 6-1: config 0 descriptor?? [ 346.302696][T11594] 9pnet_fd: p9_fd_create_unix (11594): problem connecting socket: ./file0: -30 [ 346.348849][ T1423] wlan1: Creating new IBSS network, BSSID 06:ae:bc:67:f0:ce [ 346.365361][ T5924] usb 6-1: Firmware version (0.0) predates our first public release. [ 346.365387][ T5924] usb 6-1: Please update to version 0.2 or newer [ 346.539182][ T5924] usb 6-1: USB disconnect, device number 8 [ 346.890119][T10259] udevd[10259]: setting mode of /dev/bus/usb/006/008 to 020664 failed: Read-only file system [ 346.890285][T10259] udevd[10259]: setting owner of /dev/bus/usb/006/008 to uid=0, gid=0 failed: Read-only file system [ 347.149702][ T37] audit: type=1326 audit(1757939448.062:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11612 comm="syz.0.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff450d7eba9 code=0x7ffc0000 [ 347.149758][ T37] audit: type=1326 audit(1757939448.083:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11612 comm="syz.0.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff450d7eba9 code=0x7ffc0000 [ 347.149800][ T37] audit: type=1326 audit(1757939448.083:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11612 comm="syz.0.2403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff450d7eba9 code=0x0 [ 347.167076][T11615] sctp: [Deprecated]: syz.5.2404 (pid 11615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.167076][T11615] Use struct sctp_sack_info instead [ 347.209619][T10259] udevd[10259]: symlink '../bus/usb/006/008' '/dev/char/189:647.tmp-c189:647' failed: Read-only file system [ 347.274725][T10259] udevd[10259]: symlink '../bus/usb/006/008' '/dev/char/189:647.tmp-c189:647' failed: Read-only file system [ 347.661401][ T5928] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 347.823435][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 347.825959][ T5928] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 347.825986][ T5928] usb 6-1: config 0 has no interface number 0 [ 347.826079][ T5928] usb 6-1: config 0 interface 12 has no altsetting 0 [ 347.834550][ T5928] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 347.834583][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.834606][ T5928] usb 6-1: Product: syz [ 347.834624][ T5928] usb 6-1: Manufacturer: syz [ 347.834639][ T5928] usb 6-1: SerialNumber: syz [ 347.866368][ T5928] usb 6-1: config 0 descriptor?? [ 348.248010][ T990] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 348.453898][ T990] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 348.453990][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.468704][ T990] usb 2-1: config 0 descriptor?? [ 348.682006][ T5928] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 348.682523][ T5928] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 348.682787][ T5928] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 348.684008][ T5928] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 348.709503][ T990] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 348.781633][ T5928] usb 6-1: USB disconnect, device number 9 [ 348.892759][ T990] [drm:udl_init] *ERROR* Selecting channel failed [ 348.977646][ T990] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 348.977677][ T990] [drm] Initialized udl on minor 2 [ 349.014447][ T990] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 349.014764][ T990] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 349.022262][ T49] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 349.063927][ T990] usb 2-1: USB disconnect, device number 25 [ 349.068089][ T49] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 349.068266][ T49] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 349.794787][ T49] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 349.973845][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.973910][ T49] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 349.973933][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.991020][ T49] usb 1-1: config 0 descriptor?? [ 350.038476][ T49] pwc: Askey VC010 type 2 USB webcam detected. [ 350.419652][ T49] pwc: recv_control_msg error -32 req 02 val 2b00 [ 350.635838][ T49] pwc: recv_control_msg error -71 req 02 val 2c00 [ 350.639642][ T49] pwc: recv_control_msg error -71 req 04 val 1000 [ 350.640122][ T49] pwc: recv_control_msg error -71 req 04 val 1300 [ 350.640605][ T49] pwc: recv_control_msg error -71 req 04 val 1400 [ 350.641201][ T49] pwc: recv_control_msg error -71 req 02 val 2000 [ 350.642776][ T49] pwc: recv_control_msg error -71 req 02 val 2100 [ 350.643278][ T49] pwc: recv_control_msg error -71 req 04 val 1500 [ 350.643763][ T49] pwc: recv_control_msg error -71 req 02 val 2500 [ 350.644317][ T49] pwc: recv_control_msg error -71 req 02 val 2400 [ 350.645300][ T49] pwc: recv_control_msg error -71 req 02 val 2600 [ 350.645860][ T49] pwc: recv_control_msg error -71 req 02 val 2900 [ 350.646549][ T49] pwc: recv_control_msg error -71 req 02 val 2800 [ 350.652197][ T49] pwc: recv_control_msg error -71 req 04 val 1100 [ 350.656569][ T49] pwc: recv_control_msg error -71 req 04 val 1200 [ 350.751394][ T49] pwc: Registered as video103. [ 350.754550][ T49] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 350.860509][ T49] usb 1-1: USB disconnect, device number 19 [ 351.172000][T11698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.160519][T11729] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2458'. [ 352.489360][ T5928] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 352.664965][ T5928] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 352.665002][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.690764][ T5928] usb 1-1: config 0 descriptor?? [ 352.698181][ T5928] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 352.709564][ T37] audit: type=1326 audit(1757939453.921:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11738 comm="syz.3.2463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x0 [ 352.918727][ T49] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 352.947639][ T5928] gp8psk: usb in 128 operation failed. [ 353.103012][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 353.103048][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.156897][ T49] usb 2-1: config 0 descriptor?? [ 353.163901][ T5928] gp8psk: FW Version = 244.249.196 (0xf4f9c4) Build 2015/223/09 [ 353.207189][ T49] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 353.336737][ T5928] gp8psk: usb in 149 operation failed. [ 353.336844][ T5928] gp8psk: failed to get FPGA version [ 353.338721][ T5928] gp8psk: usb in 138 operation failed. [ 353.338804][ T5928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 353.338873][ T5928] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 353.444263][ T5928] usb 1-1: USB disconnect, device number 20 [ 353.774997][T11761] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2472'. [ 353.848537][ T49] gspca_stv06xx: vv6410 sensor detected [ 354.116726][ T49] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 354.128734][ T49] usb 2-1: USB disconnect, device number 26 [ 355.258497][T11793] netlink: 'syz.5.2486': attribute type 1 has an invalid length. [ 355.258538][T11793] netlink: 'syz.5.2486': attribute type 2 has an invalid length. [ 356.123461][T11819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2499'. [ 356.372907][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.373119][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.373278][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.373464][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.373626][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.373792][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.373940][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.374092][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.374257][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.374411][T11823] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.976778][ T63] block nbd0: Possible stuck request ffff888024b17000: control (read@1024,1024B). Runtime 90 seconds [ 356.976852][ T63] block nbd0: Possible stuck request ffff888024b171c0: control (read@2048,1024B). Runtime 90 seconds [ 356.976889][ T63] block nbd0: Possible stuck request ffff888024b17380: control (read@3072,1024B). Runtime 90 seconds [ 356.976926][ T63] block nbd0: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 90 seconds [ 358.408009][T11860] input: syz1 as /devices/virtual/input/input23 [ 359.329593][ T37] audit: type=1326 audit(1757939460.882:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11879 comm="syz.2.2526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f978651eba9 code=0x0 [ 359.899400][T11899] netlink: 'syz.1.2534': attribute type 11 has an invalid length. [ 359.992600][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 360.471610][T11919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2543'. [ 360.862655][ T5924] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 361.005416][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 361.008201][ T5924] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 361.008227][ T5924] usb 4-1: config 0 has no interface number 0 [ 361.024843][ T5924] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 361.024874][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.024893][ T5924] usb 4-1: Product: syz [ 361.024917][ T5924] usb 4-1: Manufacturer: syz [ 361.024929][ T5924] usb 4-1: SerialNumber: syz [ 361.076106][ T5924] usb 4-1: config 0 descriptor?? [ 361.096669][ T5924] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 361.339398][ T5924] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 361.392650][ T5924] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 361.770180][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 361.771990][ T49] usb 4-1: USB disconnect, device number 18 [ 361.795885][ T49] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 361.868190][ T49] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 361.875178][ T49] quatech2 4-1:0.51: device disconnected [ 362.750530][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 362.891406][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 362.927088][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.927131][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.927158][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.927198][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 362.927234][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.984112][ T10] usb 6-1: config 0 descriptor?? [ 363.052176][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 363.205644][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 363.208996][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 363.209082][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 363.209109][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 363.256374][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 363.256476][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.256498][ T9] usb 4-1: Product: syz [ 363.256512][ T9] usb 4-1: Manufacturer: syz [ 363.256526][ T9] usb 4-1: SerialNumber: syz [ 363.317229][ T9] usb 4-1: config 0 descriptor?? [ 363.430213][ T10] cougar 0003:060B:500A.001C: unexpected long global item [ 363.433017][ T10] cougar 0003:060B:500A.001C: parse failed [ 363.433204][ T10] cougar 0003:060B:500A.001C: probe with driver cougar failed with error -22 [ 363.607881][ T5928] usb 6-1: USB disconnect, device number 10 [ 363.738062][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 364.120107][ T9] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 364.121004][ T9] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 364.121309][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 364.221016][ T9] usb 4-1: USB disconnect, device number 19 [ 364.463032][ T49] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 364.483839][ T1423] wlan1: Trigger new scan to find an IBSS to join [ 364.617374][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 364.629091][ T49] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 364.629125][ T49] usb 2-1: config 0 has no interface number 0 [ 364.629179][ T49] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 364.629207][ T49] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 364.633100][ T49] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 364.633148][ T49] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 364.633170][ T49] usb 2-1: Product: syz [ 364.633185][ T49] usb 2-1: SerialNumber: syz [ 364.644231][T11994] pimreg: tun_chr_ioctl cmd 1074025677 [ 364.646291][T11994] pimreg: linktype set to 769 [ 364.660716][ T49] usb 2-1: config 0 descriptor?? [ 364.688036][ T49] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 364.733150][ T49] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input24 [ 364.931273][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 364.932384][ T5924] usb 2-1: USB disconnect, device number 27 [ 364.936694][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 364.937376][ T5924] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 365.408500][ T69] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.930931][T12026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.183083][T12032] netlink: 642 bytes leftover after parsing attributes in process `syz.3.2593'. [ 366.320647][ T5223] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 366.396319][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 366.473451][ T5223] usb 6-1: Using ep0 maxpacket: 32 [ 366.478371][ T5223] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 366.478405][ T5223] usb 6-1: config 0 has no interface number 0 [ 366.483517][ T5223] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 366.483575][ T5223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.483606][ T5223] usb 6-1: Product: syz [ 366.483624][ T5223] usb 6-1: Manufacturer: syz [ 366.483642][ T5223] usb 6-1: SerialNumber: syz [ 366.550901][ T5223] usb 6-1: config 0 descriptor?? [ 366.804801][ T5223] radio-si470x 6-1:0.35: this is not a si470x device. [ 366.835603][T12044] Invalid ELF header magic: != ELF [ 366.835878][ T5223] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 366.962288][ T69] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.965417][ T69] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.965461][ T69] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.967261][ T69] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.074450][ T5223] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 367.211995][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2603'. [ 367.256359][ T5223] usb 6-1: USB disconnect, device number 11 [ 367.273461][ T5223] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 368.826363][T12099] netlink: 'syz.1.2624': attribute type 11 has an invalid length. [ 368.826393][T12099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2624'. [ 368.983157][T12101] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2625'. [ 369.218659][ T13] wlan1: Trigger new scan to find an IBSS to join [ 369.293004][ T990] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 369.457985][ T990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.458022][ T990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.459564][ T990] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.459593][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.459628][ T990] usb 2-1: SerialNumber: syz [ 369.623595][T12109] netlink: 'syz.5.2629': attribute type 1 has an invalid length. [ 369.623769][T12109] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2629'. [ 369.688916][ T990] usb 2-1: 0:2 : does not exist [ 369.783204][ T990] usb 2-1: USB disconnect, device number 28 [ 369.964857][T10259] udevd[10259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.193439][ T69] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 370.424811][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.434194][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.434252][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.434293][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.694922][T12138] netlink: 'syz.1.2641': attribute type 49 has an invalid length. [ 371.269803][T12158] debugfs: 'ttyS3' already exists in 'caif_serial' [ 371.662324][T12164] netlink: 'syz.1.2653': attribute type 83 has an invalid length. [ 372.475289][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2660'. [ 372.503318][T12188] 9pnet_fd: Insufficient options for proto=fd [ 374.733083][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 374.874793][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 374.881661][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.899598][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 374.899628][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 374.899647][ T9] usb 4-1: SerialNumber: syz [ 374.953518][ T9] usb 4-1: config 0 descriptor?? [ 374.979858][ T9] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 374.980951][ T9] usb 4-1: Failed to create links for entity 255 [ 374.980972][ T9] usb 4-1: Failed to register entities (-22). [ 375.162293][ T49] usb 4-1: USB disconnect, device number 20 [ 376.808396][ T37] audit: type=1326 audit(384.578:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 376.810173][ T37] audit: type=1326 audit(384.589:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 376.813432][ T37] audit: type=1326 audit(384.589:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 376.815272][ T37] audit: type=1326 audit(384.589:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 376.816327][ T37] audit: type=1326 audit(384.589:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 376.818039][ T37] audit: type=1326 audit(384.589:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 376.819011][ T37] audit: type=1326 audit(384.599:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 376.877201][ T37] audit: type=1326 audit(384.652:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 376.877274][ T37] audit: type=1326 audit(384.652:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.1.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 377.688617][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.688701][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.748555][T12335] net_ratelimit: 44 callbacks suppressed [ 377.748592][T12335] openvswitch: netlink: Multiple metadata blocks provided [ 378.432073][T12350] sock: sock_set_timeout: `syz.3.2719' (pid 12350) tries to set negative timeout [ 378.736697][T12361] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2723'. [ 379.610016][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.634311][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.636449][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.650366][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.653066][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.438179][ T5223] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 380.531125][T12381] chnl_net:caif_netlink_parms(): no params data found [ 380.618506][ T5223] usb 4-1: Using ep0 maxpacket: 32 [ 380.627717][ T5223] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 380.627754][ T5223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.627776][ T5223] usb 4-1: Product: syz [ 380.627965][ T5223] usb 4-1: Manufacturer: syz [ 380.627984][ T5223] usb 4-1: SerialNumber: syz [ 380.649869][ T5223] usb 4-1: config 0 descriptor?? [ 380.682959][ T5223] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 381.415081][T12381] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.417267][T12381] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.418917][T12381] bridge_slave_0: entered allmulticast mode [ 381.441904][T12381] bridge_slave_0: entered promiscuous mode [ 381.452409][ T5223] gspca_stk1135: reg_w 0x5 err -71 [ 381.453460][ T5223] gspca_stk1135: serial bus timeout: status=0x00 [ 381.453474][ T5223] gspca_stk1135: Sensor write failed [ 381.453509][ T5223] gspca_stk1135: serial bus timeout: status=0x00 [ 381.453519][ T5223] gspca_stk1135: Sensor write failed [ 381.453560][ T5223] gspca_stk1135: serial bus timeout: status=0x00 [ 381.453572][ T5223] gspca_stk1135: Sensor read failed [ 381.453605][ T5223] gspca_stk1135: serial bus timeout: status=0x00 [ 381.453614][ T5223] gspca_stk1135: Sensor read failed [ 381.453620][ T5223] gspca_stk1135: Detected sensor type unknown (0x0) [ 381.453659][ T5223] gspca_stk1135: serial bus timeout: status=0x00 [ 381.453669][ T5223] gspca_stk1135: Sensor read failed [ 381.453702][ T5223] gspca_stk1135: serial bus timeout: status=0x00 [ 381.453712][ T5223] gspca_stk1135: Sensor read failed [ 381.453745][ T5223] gspca_stk1135: serial bus timeout: status=0x00 [ 381.459885][ T5223] gspca_stk1135: Sensor write failed [ 381.459927][ T5223] gspca_stk1135: serial bus timeout: status=0x00 [ 381.459939][ T5223] gspca_stk1135: Sensor write failed [ 381.460049][ T5223] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 381.473503][T12381] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.473654][T12381] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.473902][T12381] bridge_slave_1: entered allmulticast mode [ 381.512633][T12381] bridge_slave_1: entered promiscuous mode [ 381.611587][ T5223] usb 4-1: USB disconnect, device number 21 [ 381.629165][ T59] Bluetooth: hci5: command tx timeout [ 381.927180][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 381.932577][T12381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.997091][T12381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.946973][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.947171][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.947339][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.947510][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.947695][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.947863][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.948036][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.948191][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.948329][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 382.948472][T12433] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 383.406025][T12381] team0: Port device team_slave_0 added [ 383.610455][ T59] Bluetooth: hci5: command tx timeout [ 383.611349][T12381] team0: Port device team_slave_1 added [ 383.981873][T12381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.981894][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.981922][T12381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.984295][T12381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.984307][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.984328][T12381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.438728][T12381] hsr_slave_0: entered promiscuous mode [ 384.442303][T12381] hsr_slave_1: entered promiscuous mode [ 384.444265][T12381] debugfs: 'hsr0' already exists in 'hsr' [ 384.444295][T12381] Cannot create hsr debugfs directory [ 385.398575][T12478] tun0: tun_chr_ioctl cmd 1074025678 [ 385.398602][T12478] tun0: group set to 0 [ 385.591782][ T59] Bluetooth: hci5: command tx timeout [ 385.629291][ T63] block nbd0: Possible stuck request ffff888024b17000: control (read@1024,1024B). Runtime 120 seconds [ 385.629346][ T63] block nbd0: Possible stuck request ffff888024b171c0: control (read@2048,1024B). Runtime 120 seconds [ 385.629377][ T63] block nbd0: Possible stuck request ffff888024b17380: control (read@3072,1024B). Runtime 120 seconds [ 385.629408][ T63] block nbd0: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 120 seconds [ 385.872018][T12381] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 385.912698][T12381] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 385.962500][T12381] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.046608][T12381] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.556233][T12381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.651609][T12381] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.661024][ T5223] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 386.718328][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.718544][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.761046][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.761264][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.824849][ T5223] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 386.824885][ T5223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.824906][ T5223] usb 4-1: Product: syz [ 386.824920][ T5223] usb 4-1: Manufacturer: syz [ 386.824933][ T5223] usb 4-1: SerialNumber: syz [ 386.872808][ T5223] r8152-cfgselector 4-1: Unknown version 0x0000 [ 386.872838][ T5223] r8152-cfgselector 4-1: config 0 descriptor?? [ 387.085822][ T5928] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 387.259300][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.259346][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.259398][ T5928] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 387.259420][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.325134][ T5928] usb 2-1: config 0 descriptor?? [ 387.395765][ T49] r8152-cfgselector 4-1: USB disconnect, device number 22 [ 387.509292][ T37] audit: type=1326 audit(395.811:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12508 comm="syz.2.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978651eba9 code=0x7fc00000 [ 387.509802][ T37] audit: type=1326 audit(395.811:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12508 comm="syz.2.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f978651eba9 code=0x7fc00000 [ 387.510123][ T37] audit: type=1326 audit(395.811:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12508 comm="syz.2.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978651eba9 code=0x7fc00000 [ 387.510441][ T37] audit: type=1326 audit(395.811:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12508 comm="syz.2.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978651eba9 code=0x7fc00000 [ 387.511080][ T37] audit: type=1326 audit(395.811:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12508 comm="syz.2.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978651eba9 code=0x7fc00000 [ 387.512050][ T37] audit: type=1326 audit(395.811:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12508 comm="syz.2.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978651eba9 code=0x7fc00000 [ 387.572857][ T59] Bluetooth: hci5: command tx timeout [ 388.264420][ T5928] hid-led 0003:0FC5:B080.001D: probe with driver hid-led failed with error -71 [ 388.266313][T12381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.372904][ T5928] usb 2-1: USB disconnect, device number 29 [ 389.385839][T12381] veth0_vlan: entered promiscuous mode [ 389.401290][ T49] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 389.440665][T12381] veth1_vlan: entered promiscuous mode [ 389.537811][T12381] veth0_macvtap: entered promiscuous mode [ 389.554266][ T49] usb 6-1: Using ep0 maxpacket: 8 [ 389.557100][T12381] veth1_macvtap: entered promiscuous mode [ 389.557168][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 389.563079][ T49] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 389.563110][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.563131][ T49] usb 6-1: Product: syz [ 389.563147][ T49] usb 6-1: Manufacturer: syz [ 389.563164][ T49] usb 6-1: SerialNumber: syz [ 389.592065][ T49] usb 6-1: config 0 descriptor?? [ 389.630840][ T49] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 389.672708][T12381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.724288][T12381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.851354][ T49] snd_usb_toneport 6-1:0.0: set_interface failed [ 389.851669][ T49] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 389.851957][ T49] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 389.886198][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.898418][ T49] usb 6-1: USB disconnect, device number 12 [ 389.902917][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.911537][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.912380][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.060273][T12568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2802'. [ 390.065700][T12568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2802'. [ 390.149961][T12568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2802'. [ 390.540183][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.540207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.639740][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.639780][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.703536][T12575] program syz.3.2806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.791444][T12579] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2808'. [ 391.367190][T10259] udevd[10259]: symlink '../../loop6' '/dev/disk/by-diskseq/75.tmp-b7:6' failed: Read-only file system [ 391.485489][T12595] netem: incorrect ge model size [ 391.485690][T12595] netem: change failed [ 391.751803][T10259] udevd[10259]: symlink '../../loop6' '/dev/disk/by-diskseq/75.tmp-b7:6' failed: Read-only file system [ 392.026365][T10259] udevd[10259]: symlink '../../loop6' '/dev/disk/by-diskseq/75.tmp-b7:6' failed: Read-only file system [ 392.223863][T12612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.434502][T10259] udevd[10259]: symlink '../../loop6' '/dev/disk/by-diskseq/75.tmp-b7:6' failed: Read-only file system [ 392.603770][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2830'. [ 392.775917][T10259] udevd[10259]: symlink '../../loop6' '/dev/disk/by-diskseq/75.tmp-b7:6' failed: Read-only file system [ 393.026001][T10259] udevd[10259]: symlink '../../loop6' '/dev/disk/by-diskseq/75.tmp-b7:6' failed: Read-only file system [ 393.058310][ T5207] udevd[5207]: worker [10259] terminated by signal 33 (Unknown signal 33) [ 393.058368][ T5207] udevd[5207]: worker [10259] failed while handling '/devices/virtual/block/loop6' [ 393.479387][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'. [ 393.583300][ T49] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 393.726079][ T49] usb 6-1: Using ep0 maxpacket: 16 [ 393.730402][ T49] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 393.730429][ T49] usb 6-1: config 0 has no interface number 0 [ 393.730473][ T49] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.730498][ T49] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 393.734347][ T49] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 393.734373][ T49] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 393.734393][ T49] usb 6-1: Product: syz [ 393.734407][ T49] usb 6-1: SerialNumber: syz [ 393.818876][ T49] usb 6-1: config 0 descriptor?? [ 393.832362][ T49] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 393.836293][ T49] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input25 [ 394.055779][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 394.279447][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.280229][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.280638][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.280871][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.281123][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.282711][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.282971][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.283318][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.283641][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.283979][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.371111][ T49] usb 6-1: USB disconnect, device number 13 [ 394.371206][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 394.399956][ T49] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 394.582296][T12671] sp0: Synchronizing with TNC [ 394.969094][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.374111][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 396.526370][ T5924] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 396.526630][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 396.531114][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.531165][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 396.531189][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.539262][ T9] usb 4-1: config 0 descriptor?? [ 396.603688][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26 [ 396.673046][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.673134][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.673173][ T5924] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 396.673195][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.752386][ T5924] usb 6-1: config 0 descriptor?? [ 396.784610][ T9] bcm5974 4-1:0.0: could not read from device [ 396.948653][ T9] input: failed to attach handler mousedev to device input26, error: -5 [ 397.081924][ T9] usb 4-1: USB disconnect, device number 23 [ 397.269149][ T5924] sony 0003:054C:024B.001E: unexpected long global item [ 397.289614][ T5924] sony 0003:054C:024B.001E: parse failed [ 397.289722][ T5924] sony 0003:054C:024B.001E: probe with driver sony failed with error -22 [ 397.451756][ T9] usb 6-1: USB disconnect, device number 14 [ 397.596061][T12719] ip6gretap1: entered allmulticast mode [ 397.702025][ T37] audit: type=1804 audit(406.508:105): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2873" name="bus" dev="tmpfs" ino=3191 res=1 errno=0 [ 397.729117][T12723] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2874'. [ 397.844853][T12726] netlink: 'syz.3.2877': attribute type 2 has an invalid length. [ 398.770012][ T69] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.832375][T12788] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 399.855373][T12788] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 401.278967][ T37] audit: type=1326 audit(410.267:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12820 comm="syz.2.2918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f978651eba9 code=0x0 [ 402.115692][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'. [ 402.115719][T12847] netlink: 'syz.5.2927': attribute type 1 has an invalid length. [ 402.115731][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2927'. [ 403.108057][ T37] audit: type=1326 audit(412.188:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.108139][ T37] audit: type=1326 audit(412.188:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.127933][ T5928] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 403.167681][ T37] audit: type=1326 audit(412.240:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.174710][ T37] audit: type=1326 audit(412.251:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.177526][ T37] audit: type=1326 audit(412.251:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.204056][ T37] audit: type=1326 audit(412.282:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.209681][ T37] audit: type=1326 audit(412.293:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.213949][ T37] audit: type=1326 audit(412.293:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.214391][ T37] audit: type=1326 audit(412.303:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.216440][ T37] audit: type=1326 audit(412.303:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12880 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 403.348464][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 403.348502][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.348559][ T5928] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 403.348581][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.353911][ T5928] usb 4-1: config 0 descriptor?? [ 403.773527][ T5928] elo 0003:04E7:0030.001F: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 403.928059][ T990] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 403.961362][ T5928] usb 4-1: USB disconnect, device number 24 [ 404.099182][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 404.101621][ T990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.101663][ T990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 404.101735][ T990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 404.101765][ T990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 404.101818][ T990] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 404.101842][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.191129][ T990] hub 2-1:1.0: bad descriptor, ignoring hub [ 404.191175][ T990] hub 2-1:1.0: probe with driver hub failed with error -5 [ 404.192199][ T990] cdc_wdm 2-1:1.0: skipping garbage [ 404.192214][ T990] cdc_wdm 2-1:1.0: skipping garbage [ 404.224720][ T990] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 404.224745][ T990] cdc_wdm 2-1:1.0: Unknown control protocol [ 404.490897][ T5927] usb 2-1: USB disconnect, device number 30 [ 404.871172][ T59] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 404.871204][ T5851] Bluetooth: hci6: command 0x1003 tx timeout [ 405.432763][ T5927] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 405.443578][T12922] 9pnet: Could not find request transport: ÿÿ· [ 405.579817][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.579853][ T5927] usb 4-1: config 0 has no interfaces? [ 405.579888][ T5927] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 405.579916][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.598016][ T5927] usb 4-1: config 0 descriptor?? [ 405.643228][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 405.801024][ T990] usb 4-1: USB disconnect, device number 25 [ 405.889993][ T5927] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 406.032873][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 406.039013][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 406.039046][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.047199][ T5927] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 406.047239][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.047265][ T5927] usb 6-1: Product: syz [ 406.047284][ T5927] usb 6-1: Manufacturer: syz [ 406.047302][ T5927] usb 6-1: SerialNumber: syz [ 406.068888][ T5927] usb 6-1: config 0 descriptor?? [ 406.141946][ T5927] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 406.141995][ T5927] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 406.555690][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 406.700461][ T5927] em28xx 6-1:0.0: chip ID is em2874 [ 406.920309][ T5927] usb 6-1: USB disconnect, device number 15 [ 406.936773][ T5927] em28xx 6-1:0.0: Disconnecting em28xx [ 407.018770][ T5927] em28xx 6-1:0.0: Freeing device [ 407.255778][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 407.478409][T12983] ptrace attach of "./syz-executor exec"[5842] was attempted by "TIPCv2 Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 407.642892][T12989] netlink: 'syz.5.2995': attribute type 1 has an invalid length. [ 407.642923][T12989] netlink: 'syz.5.2995': attribute type 4 has an invalid length. [ 407.642937][T12989] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2995'. [ 407.642969][T12989] NCSI netlink: No device for ifindex 458760 [ 407.883277][T12992] ipvlan3: entered promiscuous mode [ 407.883352][T12992] ipvlan3: entered allmulticast mode [ 407.883366][T12992] hsr0: entered allmulticast mode [ 407.883380][T12992] hsr_slave_0: entered allmulticast mode [ 407.883401][T12992] hsr_slave_1: entered allmulticast mode [ 407.937623][T12994] program syz.5.2997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.188780][T12999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.605190][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 408.700245][ T5927] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 408.750693][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.750727][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.784760][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.784795][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.784816][ T9] usb 4-1: Product: syz [ 408.784832][ T9] usb 4-1: Manufacturer: syz [ 408.784863][ T9] usb 4-1: SerialNumber: syz [ 408.787229][ T990] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 408.846405][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.846434][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 408.846554][ T5927] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 408.846577][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.888927][ T5927] usb 2-1: config 0 descriptor?? [ 408.941524][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 408.941583][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 408.964935][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.964971][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.965012][ T990] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 408.965034][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.982968][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 409.003328][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 409.003904][ T5927] usb 2-1: media controller created [ 409.043515][ T990] usb 6-1: config 0 descriptor?? [ 409.103826][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.233071][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 409.235142][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 409.297685][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 409.330178][ T9] usb 4-1: 0:2 : does not exist [ 409.356186][ T5927] dvb-usb: schedule remote query interval to 150 msecs. [ 409.356217][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 409.390124][ T5927] usb 2-1: USB disconnect, device number 31 [ 409.451527][T13014] netlink: 'syz.2.3006': attribute type 29 has an invalid length. [ 409.456620][T13014] netlink: 'syz.2.3006': attribute type 29 has an invalid length. [ 409.458864][T13014] netlink: 'syz.2.3006': attribute type 29 has an invalid length. [ 409.496322][ T990] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 409.496370][ T990] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 409.496396][ T990] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 409.496421][ T990] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 409.496445][ T990] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 409.588745][ T990] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 409.662779][ T990] playstation 0003:054C:0DF2.0020: Invalid byte count transferred, expected 20 got 0 [ 409.662828][ T990] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22 [ 409.662874][ T990] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense [ 409.662893][ T990] playstation 0003:054C:0DF2.0020: Failed to create dualsense. [ 409.668426][ T990] playstation 0003:054C:0DF2.0020: probe with driver playstation failed with error -22 [ 409.734459][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 409.845525][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 409.849107][ T5924] usb 4-1: USB disconnect, device number 26 [ 409.918040][ T9] usb 6-1: USB disconnect, device number 16 [ 411.387069][ T5924] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 411.566341][ T5924] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 411.566374][ T5924] usb 2-1: config 0 has no interface number 0 [ 411.572981][ T5924] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 411.573013][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.573032][ T5924] usb 2-1: Product: syz [ 411.573047][ T5924] usb 2-1: Manufacturer: syz [ 411.573061][ T5924] usb 2-1: SerialNumber: syz [ 411.599406][ T5924] usb 2-1: config 0 descriptor?? [ 411.850026][ T5924] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 411.925621][ T5924] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 411.925692][ T5924] dib0700: firmware download failed at 7 with -22 [ 411.955464][ T5924] usb 2-1: USB disconnect, device number 32 [ 412.074255][T13044] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3020'. [ 412.074286][T13044] net_ratelimit: 44 callbacks suppressed [ 412.074298][T13044] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 412.633389][T13070] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 414.093686][T10257] udevd[10257]: setting mode of /dev/comedi3_subd0 to 020600 failed: Read-only file system [ 414.093826][T10257] udevd[10257]: setting owner of /dev/comedi3_subd0 to uid=0, gid=0 failed: Read-only file system [ 414.282767][ T63] block nbd0: Possible stuck request ffff888024b17000: control (read@1024,1024B). Runtime 150 seconds [ 414.282829][ T63] block nbd0: Possible stuck request ffff888024b171c0: control (read@2048,1024B). Runtime 150 seconds [ 414.282864][ T63] block nbd0: Possible stuck request ffff888024b17380: control (read@3072,1024B). Runtime 150 seconds [ 414.282901][ T63] block nbd0: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 150 seconds [ 415.272759][ T5928] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 415.417731][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 415.421951][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.421983][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.422040][ T5928] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 415.422062][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.479245][ T5928] usb 6-1: config 0 descriptor?? [ 415.489279][ T5928] hub 6-1:0.0: USB hub found [ 415.683443][ T5928] hub 6-1:0.0: 1 port detected [ 416.073129][ T5928] usb 6-1: USB disconnect, device number 17 [ 417.188805][T13191] io-wq is not configured for unbound workers [ 417.466567][T13201] overlayfs: failed to clone lowerpath [ 418.124136][T13216] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.3097'. [ 418.363327][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 418.363350][ T37] audit: type=1326 audit(428.208:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 418.363400][ T37] audit: type=1326 audit(428.208:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 418.370600][ T37] audit: type=1326 audit(428.218:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 418.370667][ T37] audit: type=1326 audit(428.218:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 418.370720][ T37] audit: type=1326 audit(428.218:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 418.370781][ T37] audit: type=1326 audit(428.218:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 418.370831][ T37] audit: type=1326 audit(428.218:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 418.370882][ T37] audit: type=1326 audit(428.218:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.3.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 418.522445][T13227] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3103'. [ 418.835535][T13240] netlink: 'syz.5.3107': attribute type 1 has an invalid length. [ 420.283078][ T37] audit: type=1326 audit(430.213:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13296 comm="syz.1.3122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d6daeeba9 code=0x0 [ 421.486689][ T5851] Bluetooth: hci6: command 0x1003 tx timeout [ 421.487020][ T59] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 422.153019][ T5924] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 422.161365][ T5927] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 422.295950][ T5924] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.295987][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.303351][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 422.310208][ T5927] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 422.310240][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.310264][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.322953][ T5927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.322989][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.323012][ T5927] usb 2-1: Product: syz [ 422.323026][ T5927] usb 2-1: Manufacturer: syz [ 422.323041][ T5927] usb 2-1: SerialNumber: syz [ 422.355438][ T5924] usb 4-1: config 0 descriptor?? [ 422.389698][ T5924] cp210x 4-1:0.0: cp210x converter detected [ 422.664549][ T5928] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 422.801167][ T5924] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 422.809359][ T5924] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 422.825604][ T5928] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 422.825636][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.834715][ T5927] usb 2-1: 0:2 : does not exist [ 422.864989][ T5928] usb 6-1: config 0 descriptor?? [ 422.954016][ T5928] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 423.012457][ T5924] usb 4-1: cp210x converter now attached to ttyUSB0 [ 423.176166][ T5924] usb 4-1: USB disconnect, device number 27 [ 423.247427][ T5927] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 423.304873][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 423.305517][ T5924] cp210x 4-1:0.0: device disconnected [ 423.400667][ T5927] usb 2-1: USB disconnect, device number 33 [ 423.754312][ T5928] usb 6-1: USB disconnect, device number 18 [ 425.617703][ T5928] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 425.759746][T13420] program syz.3.3180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.791273][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.791309][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.791348][ T5928] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 425.791377][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.796279][ T5928] usb 2-1: config 0 descriptor?? [ 426.211141][ T5928] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 426.231500][ T5928] hid-thrustmaster 0003:044F:B65D.0021: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 426.231839][ T5928] hid-thrustmaster 0003:044F:B65D.0021: Wrong number of endpoints? [ 426.394497][ C1] hid-thrustmaster 0003:044F:B65D.0021: Unknown packet type 0x0, unable to proceed further with wheel init [ 426.601919][ T5928] usb 2-1: USB disconnect, device number 34 [ 427.002920][T13445] batadv_slave_1: entered promiscuous mode [ 427.010432][T13445] batman_adv: batadv0: Adding interface: macsec1 [ 427.010452][T13445] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.010486][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.010506][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.010523][T13445] batman_adv: batadv0: Interface activated: macsec1 [ 428.424365][T13264] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 429.422829][T13516] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3224'. [ 429.423716][T13516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3224'. [ 429.589865][ T990] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 429.742091][ T990] usb 2-1: Using ep0 maxpacket: 16 [ 429.748686][ T990] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 429.748721][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 429.751174][ T990] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 429.751202][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.751224][ T990] usb 2-1: Product: syz [ 429.751237][ T990] usb 2-1: Manufacturer: syz [ 429.751251][ T990] usb 2-1: SerialNumber: syz [ 429.824117][ T990] usb 2-1: config 0 descriptor?? [ 429.850162][ T990] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 429.850198][ T990] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 429.850902][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3231'. [ 430.430717][ T990] em28xx 2-1:0.0: chip ID is em2882/3 [ 430.541705][T13542] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 430.628164][ T990] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 430.628599][ T990] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 430.628616][ T990] em28xx 2-1:0.0: No AC97 audio processor [ 430.695446][ T990] usb 2-1: USB disconnect, device number 35 [ 430.698004][ T990] em28xx 2-1:0.0: Disconnecting em28xx [ 430.733053][ T990] em28xx 2-1:0.0: Freeing device [ 431.864978][T13582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3253'. [ 432.166933][T13589] gretap0: entered promiscuous mode [ 432.193402][T13589] gretap0: left promiscuous mode [ 433.099277][T10257] udevd[10257]: setting mode of /dev/comedi3_subd0 to 020600 failed: Read-only file system [ 433.099454][T10257] udevd[10257]: setting owner of /dev/comedi3_subd0 to uid=0, gid=0 failed: Read-only file system [ 433.528378][ T5928] IPVS: starting estimator thread 0... [ 433.644085][T13634] IPVS: using max 7 ests per chain, 16800 per kthread [ 434.001622][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 434.001837][T13652] netlink: 'syz.3.3278': attribute type 5 has an invalid length. [ 435.111297][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3291'. [ 435.111358][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3291'. [ 435.205350][T13687] bridge0: port 3(vlan3) entered blocking state [ 435.205527][T13687] bridge0: port 3(vlan3) entered disabled state [ 435.205817][T13687] vlan3: entered allmulticast mode [ 435.205835][T13687] bridge0: entered allmulticast mode [ 435.266085][T13687] vlan3: left allmulticast mode [ 435.266112][T13687] bridge0: left allmulticast mode [ 436.095559][ T59] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 436.202854][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.202935][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.506114][ T990] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 436.658452][ T990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.658487][ T990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.688195][ T990] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.688227][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.688248][ T990] usb 2-1: Product: syz [ 436.688263][ T990] usb 2-1: Manufacturer: syz [ 436.688278][ T990] usb 2-1: SerialNumber: syz [ 437.164853][ T990] usb 2-1: 0:2 : does not exist [ 437.188107][T10257] udevd[10257]: setting mode of /dev/comedi3_subd0 to 020600 failed: Read-only file system [ 437.188243][T10257] udevd[10257]: setting owner of /dev/comedi3_subd0 to uid=0, gid=0 failed: Read-only file system [ 437.481320][T13749] netem: invalid attributes len -3 [ 437.481341][T13749] netem: change failed [ 437.570971][ T990] usb 2-1: USB disconnect, device number 36 [ 437.629200][T10257] udevd[10257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.317738][T13775] ./file0: Can't open blockdev [ 438.961616][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3333'. [ 440.835185][ T37] audit: type=1326 audit(451.797:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.835242][ T37] audit: type=1326 audit(451.797:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.890488][ T37] audit: type=1326 audit(451.860:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.890913][ T37] audit: type=1326 audit(451.860:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.890967][ T37] audit: type=1326 audit(451.860:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.894973][ T37] audit: type=1326 audit(451.860:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.895020][ T37] audit: type=1326 audit(451.860:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.895060][ T37] audit: type=1326 audit(451.860:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.895098][ T37] audit: type=1326 audit(451.860:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 440.895138][ T37] audit: type=1326 audit(451.860:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13846 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 441.778730][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 441.851513][T13875] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3370'. [ 442.935346][ T63] block nbd0: Possible stuck request ffff888024b17000: control (read@1024,1024B). Runtime 180 seconds [ 442.935406][ T63] block nbd0: Possible stuck request ffff888024b171c0: control (read@2048,1024B). Runtime 180 seconds [ 442.935442][ T63] block nbd0: Possible stuck request ffff888024b17380: control (read@3072,1024B). Runtime 180 seconds [ 442.935484][ T63] block nbd0: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 180 seconds [ 443.320174][T13928] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 444.041494][ T5207] udevd[5207]: worker [9205] /devices/virtual/block/nbd0 timeout; kill it [ 444.041618][ T5207] udevd[5207]: seq 13991 '/devices/virtual/block/nbd0' killed [ 446.501209][T14016] netlink: 'syz.2.3432': attribute type 4 has an invalid length. [ 448.160646][T14054] sch_fq: defrate 0 ignored. [ 449.109214][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 449.109235][ T37] audit: type=1326 audit(460.489:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.109281][ T37] audit: type=1326 audit(460.489:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.170859][ T37] audit: type=1326 audit(460.489:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.171144][ T37] audit: type=1326 audit(460.542:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.171436][ T37] audit: type=1326 audit(460.542:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.182435][ T37] audit: type=1326 audit(460.552:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.218634][ T37] audit: type=1326 audit(460.563:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.218702][ T37] audit: type=1326 audit(460.594:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.241225][ T37] audit: type=1326 audit(460.615:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 449.241289][ T37] audit: type=1326 audit(460.615:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14083 comm="syz.1.3460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6daeeba9 code=0x7ffc0000 [ 451.784801][ T5927] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 451.928564][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 451.931383][ T5927] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 451.931412][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.953855][ T5927] usb 6-1: config 0 descriptor?? [ 452.185073][ T5927] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 452.210836][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 452.215285][ T5927] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 452.215351][ T5927] usb 6-1: media controller created [ 452.301100][T14170] netlink: 'syz.6.3495': attribute type 14 has an invalid length. [ 452.404666][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.539446][ T5927] az6027: usb out operation failed. (-71) [ 452.539900][ T5927] az6027: usb out operation failed. (-71) [ 452.539914][ T5927] stb0899_attach: Driver disabled by Kconfig [ 452.539923][ T5927] az6027: no front-end attached [ 452.539923][ T5927] [ 452.541770][ T5927] az6027: usb out operation failed. (-71) [ 452.541789][ T5927] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 452.545061][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 452.711665][ T5927] dvb-usb: schedule remote query interval to 400 msecs. [ 452.711692][ T5927] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 452.739740][ T5927] usb 6-1: USB disconnect, device number 19 [ 453.011919][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3498'. [ 453.197572][ T5927] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 453.816823][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 454.226027][T14199] batadv0: entered promiscuous mode [ 454.226454][T14199] macsec1: entered promiscuous mode [ 454.276760][T14199] batadv0: left promiscuous mode [ 455.176924][T14235] syz.6.3525 (14235): /proc/14234/oom_adj is deprecated, please use /proc/14234/oom_score_adj instead. [ 457.820980][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.824983][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.987656][T13266] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 460.290862][ T5911] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 460.431365][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3591'. [ 460.431439][T14379] netem: change failed [ 460.446083][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.446125][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.446168][ T5911] usb 2-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 460.446193][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.502401][ T5911] usb 2-1: config 0 descriptor?? [ 460.943219][ T5911] ntrig 0003:1B96:000F.0022: unknown main item tag 0x0 [ 460.978366][ T5911] ntrig 0003:1B96:000F.0022: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.1-1/input0 [ 461.129510][ T5911] ntrig 0003:1B96:000F.0022: Firmware version: 7.15.12.55.4 (3dbf fc9e) [ 461.324461][ T5927] usb 2-1: USB disconnect, device number 37 [ 461.886345][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/76.tmp-b7:6' failed: Read-only file system [ 461.994567][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 462.046018][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 462.072166][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/77.tmp-b7:6' failed: Read-only file system [ 462.945786][T14433] program syz.5.3616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.175200][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 463.453957][T14451] QAT: failed to copy from user cfg_data. [ 463.552628][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 463.601104][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3627'. [ 463.859356][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 464.055269][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 464.118644][T14481] vxcan0: tx address claim with dest, not broadcast [ 464.300091][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 464.816599][T14506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3651'. [ 464.944820][T14512] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3654'. [ 465.027973][T14514] netlink: 544 bytes leftover after parsing attributes in process `syz.5.3655'. [ 465.218065][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 465.473849][ T5924] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 465.615781][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 465.618653][ T5924] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 465.618681][ T5924] usb 6-1: config 0 has no interface number 0 [ 465.623014][ T5924] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 465.623038][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.623067][ T5924] usb 6-1: Product: syz [ 465.623080][ T5924] usb 6-1: Manufacturer: syz [ 465.623091][ T5924] usb 6-1: SerialNumber: syz [ 465.633064][ T5924] usb 6-1: config 0 descriptor?? [ 465.708885][ T5924] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 465.934612][ T5924] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 466.028957][ T5924] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 466.292010][ T59] Bluetooth: hci5: command tx timeout [ 466.324072][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 466.324763][ T5924] usb 6-1: USB disconnect, device number 20 [ 466.383902][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 466.417303][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 466.418371][ T5924] quatech2 6-1:0.51: device disconnected [ 467.142543][T14575] block device autoloading is deprecated and will be removed. [ 467.550147][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 467.597508][ T990] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 467.705106][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.705232][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.705258][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 467.705279][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.705322][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.705343][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.723653][ T9] usb 4-1: config 0 descriptor?? [ 467.753200][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 467.753238][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 467.753287][ T990] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 467.753315][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.775490][ T990] usb 2-1: config 0 descriptor?? [ 467.777094][T14588] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 468.283803][ T990] saitek 0003:06A3:0CCD.0024: item fetching failed at offset 0/2 [ 468.284498][ T990] saitek 0003:06A3:0CCD.0024: parse failed [ 468.284591][ T990] saitek 0003:06A3:0CCD.0024: probe with driver saitek failed with error -22 [ 468.322879][ T9] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 468.393009][ T990] usb 2-1: USB disconnect, device number 38 [ 468.408290][ T49] usb 4-1: USB disconnect, device number 28 [ 468.490391][T14608] fido_id[14608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 469.620740][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 469.873861][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 469.957063][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 470.019568][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.019600][ T10] usb 2-1: config 0 has no interface number 0 [ 470.051878][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 470.052740][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.052768][ T10] usb 2-1: Product: syz [ 470.052783][ T10] usb 2-1: Manufacturer: syz [ 470.052798][ T10] usb 2-1: SerialNumber: syz [ 470.113200][ T10] usb 2-1: config 0 descriptor?? [ 470.259744][T14650] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3718'. [ 470.352566][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 470.357068][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 470.357573][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 470.357753][ T10] usb 2-1: media controller created [ 470.450149][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.510437][ T9178] udevd[9178]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 470.544811][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 470.623086][ T10] usb 2-1: USB disconnect, device number 39 [ 471.091557][T14672] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3729'. [ 471.412952][T14676] input: syz0 as /devices/virtual/input/input31 [ 471.588602][ T63] block nbd0: Possible stuck request ffff888024b17000: control (read@1024,1024B). Runtime 210 seconds [ 471.588667][ T63] block nbd0: Possible stuck request ffff888024b171c0: control (read@2048,1024B). Runtime 210 seconds [ 471.588699][ T63] block nbd0: Possible stuck request ffff888024b17380: control (read@3072,1024B). Runtime 210 seconds [ 471.588730][ T63] block nbd0: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 210 seconds [ 471.676832][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 472.548873][T14719] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3747'. [ 472.566373][T14719] netlink: 'syz.5.3747': attribute type 12 has an invalid length. [ 472.566399][T14719] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3747'. [ 472.728446][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 472.941369][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 473.278248][T14745] @: renamed from vlan0 (while UP) [ 473.497593][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 473.681172][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 473.681194][ T37] audit: type=1326 audit(742.272:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63981aada9 code=0x7ffc0000 [ 473.681272][ T37] audit: type=1326 audit(742.272:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 473.681318][ T37] audit: type=1326 audit(742.272:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 473.681375][ T37] audit: type=1326 audit(742.272:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 473.681422][ T37] audit: type=1326 audit(742.272:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639820eba9 code=0x7ffc0000 [ 473.740417][ T37] audit: type=1326 audit(742.335:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63981aada9 code=0x7ffc0000 [ 473.740491][ T37] audit: type=1326 audit(742.335:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63981aada9 code=0x7ffc0000 [ 473.750075][ T37] audit: type=1326 audit(742.346:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63981aada9 code=0x7ffc0000 [ 473.750209][ T37] audit: type=1326 audit(742.346:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63981aada9 code=0x7ffc0000 [ 473.755802][ T37] audit: type=1326 audit(742.346:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.3.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f63981aada9 code=0x7ffc0000 [ 473.821519][ T990] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 473.908822][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 473.969720][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 473.974790][ T990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 473.981132][ T990] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 473.981170][ T990] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 473.981202][ T990] usb 2-1: Product: syz [ 473.981219][ T990] usb 2-1: Manufacturer: syz [ 473.981235][ T990] usb 2-1: SerialNumber: syz [ 474.225810][ T990] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 474.225841][ T990] usb 2-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 474.225863][ T990] usb 2-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 474.225892][ T990] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 474.419538][ T990] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 474.419627][ T990] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 474.454710][ T990] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 474.473760][ T990] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 474.510627][ T990] usb 2-1: USB disconnect, device number 40 [ 474.563519][ T990] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 474.638743][ T990] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 474.645085][ T990] visor 2-1:1.0: device disconnected [ 474.719737][ T9178] udevd[9178]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 474.795890][T14773] loop5: detected capacity change from 0 to 524255232 [ 475.197009][T10257] udevd[10257]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 475.361581][ T990] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 475.422758][ T5207] udevd[5207]: worker [9178] terminated by signal 33 (Unknown signal 33) [ 475.422841][ T5207] udevd[5207]: worker [9178] failed while handling '/devices/virtual/block/loop5' [ 475.470915][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3778'. [ 475.522831][ T990] usb 4-1: Using ep0 maxpacket: 8 [ 475.526001][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 475.531368][ T990] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 475.531401][ T990] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 475.531420][ T990] usb 4-1: config 3 has no interface number 0 [ 475.531573][ T990] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.531602][ T990] usb 4-1: config 3 interface 45 has no altsetting 0 [ 475.552271][ T990] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 475.552328][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.552356][ T990] usb 4-1: Product: syz [ 475.552371][ T990] usb 4-1: Manufacturer: syz [ 475.552389][ T990] usb 4-1: SerialNumber: syz [ 475.587172][T10257] udevd[10257]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 475.733363][T10257] udevd[10257]: symlink '../../loop5' '/dev/disk/by-diskseq/80.tmp-b7:5' failed: Read-only file system [ 475.824316][ T9192] udevd[9192]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 475.906702][ T5851] Bluetooth: hci6: command 0x1003 tx timeout [ 475.906925][ T59] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 476.053297][ T990] usb 4-1: USB disconnect, device number 29 [ 476.172008][T14797] bridge0: entered promiscuous mode [ 476.172167][T14797] macvlan2: entered promiscuous mode [ 476.332840][T10274] udevd[10274]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 476.333315][T10257] udevd[10257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.337494][ T9192] udevd[9192]: symlink '../../loop6' '/dev/disk/by-diskseq/78.tmp-b7:6' failed: Read-only file system [ 477.556282][T14829] bond0: option ad_select: unable to set because the bond device is up [ 478.324105][T14855] 9pnet_fd: Insufficient options for proto=fd [ 478.742424][ T5928] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 478.884942][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 478.889381][ T5928] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 478.889410][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.914869][ T5928] usb 6-1: config 0 descriptor?? [ 479.124682][ T5928] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 479.138175][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 479.144177][ T5928] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 479.144294][ T5928] usb 6-1: media controller created [ 479.229827][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.319138][ T5928] az6027: usb out operation failed. (-71) [ 479.331221][ T5928] az6027: usb out operation failed. (-71) [ 479.331270][ T5928] stb0899_attach: Driver disabled by Kconfig [ 479.331280][ T5928] az6027: no front-end attached [ 479.331280][ T5928] [ 479.342392][ T5928] az6027: usb out operation failed. (-71) [ 479.342415][ T5928] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 479.345690][ T5928] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 479.374969][ T5928] dvb-usb: schedule remote query interval to 400 msecs. [ 479.374996][ T5928] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 479.409137][ T5928] usb 6-1: USB disconnect, device number 21 [ 479.774147][ T5928] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 480.511766][ T10] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 480.945964][T14902] overlayfs: failed to clone upperpath [ 481.086393][T14907] tap0: tun_chr_ioctl cmd 35111 [ 481.617393][ T37] kauditd_printk_skb: 125 callbacks suppressed [ 481.617419][ T37] audit: type=1326 audit(750.597:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14920 comm="syz.6.3838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fa432eba9 code=0x0 [ 482.509337][T14948] can0: slcan on ttyS3. [ 482.640794][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3856'. [ 482.833882][T14952] can0 (unregistered): slcan off ttyS3. [ 482.932575][T14964] macvlan0: entered promiscuous mode [ 483.000201][T14964] netlink: 'syz.1.3857': attribute type 2 has an invalid length. [ 483.077794][T14972] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 483.921226][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3875'. [ 483.921334][T15001] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3875'. [ 483.924897][T15002] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 484.457310][ T5928] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 484.619396][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 484.626594][ T5928] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 484.626627][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.626646][ T5928] usb 6-1: config 0 has no interface number 0 [ 484.665526][ T5928] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 484.665558][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.665577][ T5928] usb 6-1: Product: syz [ 484.665590][ T5928] usb 6-1: Manufacturer: syz [ 484.665604][ T5928] usb 6-1: SerialNumber: syz [ 484.673508][ T5928] usb 6-1: config 0 descriptor?? [ 484.712632][ T5928] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 484.712670][ T5928] usb 6-1: No valid video chain found. [ 484.900763][ T990] usb 6-1: USB disconnect, device number 23 [ 485.362784][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 485.505683][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 485.508109][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.508142][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.508163][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.508203][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 485.508227][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.543280][ T5924] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 485.583210][ T10] usb 2-1: config 0 descriptor?? [ 485.686222][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 485.692865][ T5924] usb 4-1: config 0 has an invalid interface number: 24 but max is 0 [ 485.692901][ T5924] usb 4-1: config 0 has no interface number 0 [ 485.693024][ T5924] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.693051][ T5924] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.693089][ T5924] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 485.693165][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.762850][ T5924] usb 4-1: config 0 descriptor?? [ 485.999694][ T10] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 486.010463][ T10] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 486.010491][ T10] microsoft 0003:045E:07DA.0025: usage index exceeded [ 486.010505][ T10] microsoft 0003:045E:07DA.0025: item 0 0 2 2 parsing failed [ 486.012023][ T10] microsoft 0003:045E:07DA.0025: parse failed [ 486.012186][ T10] microsoft 0003:045E:07DA.0025: probe with driver microsoft failed with error -22 [ 486.199885][ T5924] hid (null): unknown global tag 0x39 [ 486.199922][ T5924] hid (null): report_id 0 is invalid [ 486.214809][ T5927] usb 2-1: USB disconnect, device number 41 [ 486.374991][ T5924] usb 4-1: USB disconnect, device number 30 [ 487.398774][T15080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.398796][T15080] IPv6: NLM_F_CREATE should be set when creating new route [ 487.398857][T15080] IPv6: NLM_F_CREATE should be set when creating new route [ 487.398890][T15080] IPv6: NLM_F_CREATE should be set when creating new route [ 487.399958][T15080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 489.271060][T15121] block nbd1: shutting down sockets [ 490.223132][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3942'. [ 490.223156][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3942'. [ 490.651184][T15160] tmpfs: Invalid gid '0x00000000ffffffff' [ 492.002211][T15181] use of bytesused == 0 is deprecated and will be removed in the future, [ 492.002236][T15181] use the actual size instead. [ 492.462395][T15199] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.462658][T15199] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.577638][ T5924] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 493.726293][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 493.731406][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.731464][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.731493][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 493.731514][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 493.731538][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.733098][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 493.733127][ T5924] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 493.733146][ T5924] usb 4-1: Manufacturer: syz [ 493.755482][ T5924] usb 4-1: config 0 descriptor?? [ 494.183311][ T5924] rc_core: IR keymap rc-hauppauge not found [ 494.183336][ T5924] Registered IR keymap rc-empty [ 494.183500][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.204448][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.226392][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 494.248077][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 494.281527][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.304436][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.319878][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.338893][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.354590][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.374207][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.395537][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.416158][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.431366][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.449815][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 494.511428][ T5924] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 494.512208][ T5924] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 494.571104][ T5924] usb 4-1: USB disconnect, device number 31 [ 494.602851][ T5927] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 494.735270][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.735351][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.745580][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 494.749575][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.749612][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.749653][ T5927] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 494.749679][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.766939][ T5927] usb 2-1: config 0 descriptor?? [ 495.181166][ T5927] ft260 0003:0403:6030.0027: unknown main item tag 0x7 [ 495.355381][ T5927] ft260 0003:0403:6030.0027: chip code: 6424 8183 [ 495.547368][ T5927] ft260 0003:0403:6030.0027: failed to retrieve system status [ 495.547842][ T5927] ft260 0003:0403:6030.0027: probe with driver ft260 failed with error -71 [ 495.558600][ T5927] usb 2-1: USB disconnect, device number 42 [ 496.917189][ T990] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 497.105238][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 497.105281][ T990] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 497.105310][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 497.144029][ T990] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 497.144060][ T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.144079][ T990] usb 6-1: Product: syz [ 497.144093][ T990] usb 6-1: Manufacturer: syz [ 497.144107][ T990] usb 6-1: SerialNumber: syz [ 497.181826][ T990] usb 6-1: config 0 descriptor?? [ 497.194086][T15268] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 497.194545][T15268] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 497.199326][ T990] usb 6-1: ucan: probing device on interface #0 [ 497.793625][ T990] ucan 6-1:0.0: probe with driver ucan failed with error -22 [ 498.001799][ T49] usb 6-1: USB disconnect, device number 24 [ 498.032813][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4004'. [ 498.637850][T15290] batman_adv: batadv0: Adding interface: macvlan3 [ 498.638036][T15290] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.638079][T15290] batman_adv: batadv0: Interface activated: macvlan3 [ 498.975909][ T49] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 499.141358][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 499.141442][ T49] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 499.141465][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.208108][ T49] usb 6-1: config 0 descriptor?? [ 499.209300][T15299] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 499.626768][ T49] ryos 0003:1E7D:3138.0028: unknown main item tag 0x0 [ 499.626810][ T49] ryos 0003:1E7D:3138.0028: unknown main item tag 0x1 [ 499.674489][ T49] ryos 0003:1E7D:3138.0028: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0 [ 499.841690][ T49] usb 6-1: USB disconnect, device number 25 [ 499.890619][T15318] netlink: 'syz.3.4013': attribute type 1 has an invalid length. [ 499.890649][T15318] netlink: 'syz.3.4013': attribute type 1 has an invalid length. [ 499.890662][T15318] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4013'. [ 499.890686][T15318] netlink: 'syz.3.4013': attribute type 1 has an invalid length. [ 499.890698][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4013'. [ 500.242905][ T63] block nbd0: Possible stuck request ffff888024b17000: control (read@1024,1024B). Runtime 240 seconds [ 500.242966][ T63] block nbd0: Possible stuck request ffff888024b171c0: control (read@2048,1024B). Runtime 240 seconds [ 500.243003][ T63] block nbd0: Possible stuck request ffff888024b17380: control (read@3072,1024B). Runtime 240 seconds [ 500.243040][ T63] block nbd0: Possible stuck request ffff888024b25080: control (read@0,1024B). Runtime 240 seconds [ 502.642521][ T38] INFO: task syz.0.2573:11989 blocked for more than 143 seconds. [ 502.642556][ T38] Not tainted syzkaller #0 [ 502.642566][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.642576][ T38] task:syz.0.2573 state:D stack:28264 pid:11989 tgid:11988 ppid:5847 task_flags:0x400040 flags:0x00004004 [ 502.642644][ T38] Call Trace: [ 502.642659][ T38] [ 502.642677][ T38] __schedule+0x16f3/0x4c20 [ 502.642737][ T38] ? sched_clock+0x3f/0x60 [ 502.642776][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 502.642807][ T38] ? __pfx___schedule+0x10/0x10 [ 502.642855][ T38] rt_mutex_schedule+0x77/0xf0 [ 502.642876][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 502.642913][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 502.642939][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 502.642964][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 502.642986][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 502.643174][ T38] ? __pfx_wait_on_inode+0x10/0x10 [ 502.643213][ T38] ? bdev_open+0xe0/0xcc0 [ 502.643235][ T38] mutex_lock_nested+0x16a/0x1d0 [ 502.643260][ T38] bdev_open+0xe0/0xcc0 [ 502.643289][ T38] blkdev_open+0x46c/0x610 [ 502.643315][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 502.643337][ T38] do_dentry_open+0x9ae/0x1350 [ 502.643369][ T38] vfs_open+0x3b/0x350 [ 502.643384][ T38] ? path_openat+0x2ed9/0x3840 [ 502.643414][ T38] path_openat+0x2ef1/0x3840 [ 502.643442][ T38] ? try_to_take_rt_mutex+0x840/0xb00 [ 502.643490][ T38] ? __pfx_path_openat+0x10/0x10 [ 502.643511][ T38] ? do_raw_spin_lock+0x121/0x290 [ 502.643543][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 502.643571][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.643601][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 502.643635][ T38] do_filp_open+0x1fa/0x410 [ 502.643658][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 502.643675][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 502.643719][ T38] ? alloc_fd+0x64f/0x6c0 [ 502.643754][ T38] do_sys_openat2+0x121/0x1c0 [ 502.643773][ T38] ? __se_sys_futex+0x36f/0x400 [ 502.643798][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.643824][ T38] ? rcu_is_watching+0x15/0xb0 [ 502.643858][ T38] __x64_sys_openat+0x138/0x170 [ 502.643883][ T38] do_syscall_64+0xfa/0x3b0 [ 502.643900][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.643927][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.643947][ T38] ? clear_bhb_loop+0x60/0xb0 [ 502.643971][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.643990][ T38] RIP: 0033:0x7ff450d7d510 [ 502.644018][ T38] RSP: 002b:00007ff44efe5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 502.644046][ T38] RAX: ffffffffffffffda RBX: 0000000000000200 RCX: 00007ff450d7d510 [ 502.644060][ T38] RDX: 0000000000000200 RSI: 00007ff44efe5c10 RDI: 00000000ffffff9c [ 502.644073][ T38] RBP: 00007ff44efe5c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 502.644087][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 502.644106][ T38] R13: 00007ff450fc6038 R14: 00007ff450fc5fa0 R15: 00007fffe731d908 [ 502.644137][ T38] [ 502.644190][ T38] [ 502.644190][ T38] Showing all locks held in the system: [ 502.644209][ T38] 1 lock held by khungtaskd/38: [ 502.644221][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 502.644328][ T38] 2 locks held by getty/5602: [ 502.644343][ T38] #0: ffff88823bf740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 502.644403][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 502.644466][ T38] 1 lock held by udevd/9205: [ 502.644477][ T38] #0: ffff8880249854c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 502.644526][ T38] 1 lock held by syz.0.2573/11989: [ 502.644537][ T38] #0: ffff8880249854c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 502.644585][ T38] 3 locks held by syz.3.3993/15264: [ 502.644596][ T38] 1 lock held by syz.3.4033/15357: [ 502.644606][ T38] #0: ffff888038d48250 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 [ 502.644660][ T38] 6 locks held by syz.3.4033/15359: [ 502.644671][ T38] 3 locks held by syz.1.4040/15373: [ 502.644680][ T38] #0: ffff88803ad596b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 502.644739][ T38] #1: ffffffff8ed379a0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 502.644799][ T38] #2: ffff88803a1cb8c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 502.644846][ T38] 1 lock held by syz.6.4041/15376: [ 502.644857][ T38] [ 502.644867][ T38] ============================================= [ 502.644867][ T38] [ 502.644884][ T38] NMI backtrace for cpu 1 [ 502.644911][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.644932][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.644945][ T38] Call Trace: [ 502.644953][ T38] [ 502.644961][ T38] dump_stack_lvl+0x189/0x250 [ 502.644996][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.645025][ T38] ? __pfx__printk+0x10/0x10 [ 502.645057][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 502.645089][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 502.645122][ T38] ? __pfx__printk+0x10/0x10 [ 502.645147][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.645175][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 502.645202][ T38] watchdog+0xf93/0xfe0 [ 502.645234][ T38] ? watchdog+0x1de/0xfe0 [ 502.645264][ T38] kthread+0x70e/0x8a0 [ 502.645297][ T38] ? __pfx_watchdog+0x10/0x10 [ 502.645322][ T38] ? __pfx_kthread+0x10/0x10 [ 502.645356][ T38] ? __pfx_kthread+0x10/0x10 [ 502.645385][ T38] ret_from_fork+0x439/0x7d0 [ 502.645413][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 502.645444][ T38] ? __switch_to_asm+0x39/0x70 [ 502.645461][ T38] ? __switch_to_asm+0x33/0x70 [ 502.645477][ T38] ? __pfx_kthread+0x10/0x10 [ 502.645507][ T38] ret_from_fork_asm+0x1a/0x30 [ 502.645541][ T38] [ 502.645548][ T38] Sending NMI from CPU 1 to CPUs 0: [ 502.645588][ C0] NMI backtrace for cpu 0 [ 502.645601][ C0] CPU: 0 UID: 0 PID: 15264 Comm: syz.3.3993 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.645620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.645630][ C0] RIP: 0010:rcu_is_watching+0x55/0xb0 [ 502.645661][ C0] Code: 2d 25 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 dc 90 78 00 48 c7 c3 18 74 f7 91 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 19 28 51 10 74 11 83 e0 [ 502.645679][ C0] RSP: 0018:ffffc9000cf2de38 EFLAGS: 00000a02 [ 502.645693][ C0] RAX: 1ffff11017106683 RBX: ffff8880b8833418 RCX: 38fca3dacbf9bf00 [ 502.645705][ C0] RDX: ffffc9000cf2df01 RSI: ffffffff8b6215e0 RDI: ffffffff8b6215a0 [ 502.645717][ C0] RBP: dffffc0000000000 R08: ffffc9000cf2e568 R09: 0000000000000000 [ 502.645729][ C0] R10: ffffc9000cf2df78 R11: fffff520019e5bf1 R12: ffffc9000cf2e578 [ 502.645740][ C0] R13: ffffc9000cf28000 R14: ffffffff8d252d10 R15: dffffc0000000000 [ 502.645753][ C0] FS: 00007f63964766c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 502.645767][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.645778][ C0] CR2: 0000200000000080 CR3: 00000000490c8000 CR4: 00000000003526f0 [ 502.645791][ C0] Call Trace: [ 502.645797][ C0] [ 502.645811][ C0] ? unwind_next_frame+0xa5/0x2390 [ 502.645834][ C0] unwind_next_frame+0x1965/0x2390 [ 502.645859][ C0] ? unwind_next_frame+0xa5/0x2390 [ 502.645881][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 502.645901][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.645920][ C0] arch_stack_walk+0x11c/0x150 [ 502.645947][ C0] ? alloc_pages_mpol+0xd1/0x380 [ 502.645973][ C0] stack_trace_save+0x9c/0xe0 [ 502.645989][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 502.646010][ C0] save_stack+0xf7/0x1f0 [ 502.646031][ C0] ? __pfx_save_stack+0x10/0x10 [ 502.646048][ C0] ? post_alloc_hook+0x240/0x2a0 [ 502.646070][ C0] ? get_page_from_freelist+0x2119/0x21b0 [ 502.646085][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 502.646107][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 502.646132][ C0] __set_page_owner+0x8d/0x490 [ 502.646152][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 502.646170][ C0] ? rt_spin_trylock+0xfa/0x180 [ 502.646189][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 502.646219][ C0] post_alloc_hook+0x240/0x2a0 [ 502.646243][ C0] get_page_from_freelist+0x2119/0x21b0 [ 502.646281][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 502.646299][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 502.646315][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 502.646342][ C0] ? policy_nodemask+0x27c/0x720 [ 502.646372][ C0] alloc_pages_mpol+0xd1/0x380 [ 502.646395][ C0] alloc_pages_noprof+0xcf/0x1e0 [ 502.646418][ C0] folio_alloc_noprof+0x22/0xc0 [ 502.646440][ C0] filemap_alloc_folio_noprof+0xdf/0x510 [ 502.646466][ C0] ? xa_load+0x60/0x210 [ 502.646483][ C0] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 502.646505][ C0] ? xa_load+0x60/0x210 [ 502.646519][ C0] ? xa_load+0x60/0x210 [ 502.646532][ C0] ? xa_load+0x60/0x210 [ 502.646546][ C0] ? xa_load+0x1ea/0x210 [ 502.646564][ C0] page_cache_ra_unbounded+0x237/0x740 [ 502.646597][ C0] filemap_fault+0x5a9/0x1210 [ 502.646616][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 502.646640][ C0] __do_fault+0x135/0x390 [ 502.646658][ C0] handle_mm_fault+0x23c6/0x3400 [ 502.646685][ C0] ? handle_mm_fault+0xdb/0x3400 [ 502.646711][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 502.646733][ C0] ? follow_page_pte+0xc00/0x1360 [ 502.646761][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 502.646784][ C0] ? vma_is_secretmem+0xd/0x50 [ 502.646808][ C0] __get_user_pages+0x16e4/0x2b60 [ 502.646855][ C0] get_dump_page+0x1ac/0x3f0 [ 502.646875][ C0] ? dump_user_range+0x19e/0xc90 [ 502.646921][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 502.646945][ C0] ? __asan_memset+0x22/0x50 [ 502.646965][ C0] ? iov_iter_bvec+0xb8/0x180 [ 502.646990][ C0] dump_user_range+0x1de/0xc90 [ 502.647022][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 502.647046][ C0] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 502.647074][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 502.647105][ C0] ? dump_emit+0xa6/0xe0 [ 502.647127][ C0] ? elf_core_dump+0x2cff/0x3990 [ 502.647156][ C0] elf_core_dump+0x337b/0x3990 [ 502.647193][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 502.647220][ C0] ? __lock_acquire+0xab9/0xd20 [ 502.647251][ C0] ? do_raw_spin_lock+0x121/0x290 [ 502.647297][ C0] ? 0xffffffffff600000 [ 502.647320][ C0] coredump_write+0x1174/0x1910 [ 502.647361][ C0] ? __pfx_coredump_write+0x10/0x10 [ 502.647394][ C0] ? unshare_files+0xa9/0x140 [ 502.647426][ C0] vfs_coredump+0x1daa/0x2a50 [ 502.647449][ C0] ? rep_stos_alternative+0xf/0x80 [ 502.647482][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 502.647504][ C0] ? __lock_acquire+0xab9/0xd20 [ 502.647532][ C0] ? __lock_acquire+0xab9/0xd20 [ 502.647563][ C0] ? __lock_acquire+0xab9/0xd20 [ 502.647599][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 502.647630][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 502.647655][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 502.647681][ C0] ? kernel_text_address+0xa5/0xe0 [ 502.647701][ C0] ? __kernel_text_address+0xd/0x40 [ 502.647719][ C0] ? unwind_get_return_address+0x4d/0x90 [ 502.647744][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 502.647764][ C0] ? arch_stack_walk+0xfc/0x150 [ 502.647799][ C0] ? stack_trace_save+0x9c/0xe0 [ 502.647817][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 502.647838][ C0] ? stack_depot_save_flags+0x40/0x860 [ 502.647869][ C0] ? __lock_acquire+0xab9/0xd20 [ 502.647897][ C0] ? do_raw_spin_lock+0x121/0x290 [ 502.647923][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 502.647951][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.647979][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 502.648030][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 502.648056][ C0] ? rt_spin_unlock+0x65/0x80 [ 502.648080][ C0] get_signal+0x10d9/0x1310 [ 502.648127][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 502.648149][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 502.648166][ C0] ? __bad_area_nosemaphore+0x3fb/0x780 [ 502.648196][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 502.648220][ C0] irqentry_exit_to_user_mode+0x81/0x120 [ 502.648244][ C0] exc_page_fault+0x9f/0xf0 [ 502.648268][ C0] asm_exc_page_fault+0x26/0x30 [ 502.648283][ C0] RIP: 0033:0x7f639820ebb1 [ 502.648296][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 502.648309][ C0] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 502.648321][ C0] RAX: 0000000000000000 RBX: 00007f6398455fa0 RCX: 00007f639820eba9 [ 502.648331][ C0] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 502.648341][ C0] RBP: 00007f6398291e19 R08: 0000000000000000 R09: 0000000000000000 [ 502.648355][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.648364][ C0] R13: 00007f6398456038 R14: 00007f6398455fa0 R15: 00007ffd7fe62038 [ 502.648384][ C0] [ 502.648582][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 502.648598][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.648619][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.648631][ T38] Call Trace: [ 502.648639][ T38] [ 502.648646][ T38] dump_stack_lvl+0x99/0x250 [ 502.648678][ T38] ? __asan_memcpy+0x40/0x70 [ 502.648699][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.648727][ T38] ? __pfx__printk+0x10/0x10 [ 502.648761][ T38] vpanic+0x281/0x750 [ 502.648792][ T38] ? __pfx_vpanic+0x10/0x10 [ 502.648818][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 502.648839][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.648877][ T38] panic+0xb9/0xc0 [ 502.648903][ T38] ? __pfx_panic+0x10/0x10 [ 502.648934][ T38] ? irq_work_queue+0xc3/0x140 [ 502.648963][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 502.648991][ T38] watchdog+0xfd2/0xfe0 [ 502.649021][ T38] ? watchdog+0x1de/0xfe0 [ 502.649059][ T38] kthread+0x70e/0x8a0 [ 502.649090][ T38] ? __pfx_watchdog+0x10/0x10 [ 502.649122][ T38] ? __pfx_kthread+0x10/0x10 [ 502.649155][ T38] ? __pfx_kthread+0x10/0x10 [ 502.649183][ T38] ret_from_fork+0x439/0x7d0 [ 502.649207][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 502.649236][ T38] ? __switch_to_asm+0x39/0x70 [ 502.649251][ T38] ? __switch_to_asm+0x33/0x70 [ 502.649266][ T38] ? __pfx_kthread+0x10/0x10 [ 502.649294][ T38] ret_from_fork_asm+0x1a/0x30 [ 502.649324][ T38] [ 502.649630][ T38] Kernel Offset: disabled