last executing test programs: 7.710772182s ago: executing program 2 (id=8523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 7.492827356s ago: executing program 2 (id=8524): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 7.25461244s ago: executing program 2 (id=8527): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x8, {0x2, 0x4e21, @dev}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x42, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 7.128515404s ago: executing program 2 (id=8528): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000000000)={0xf}, 0x20) 7.109439198s ago: executing program 2 (id=8529): r0 = io_uring_setup(0x368f, &(0x7f0000000100)={0x0, 0x2b1f, 0x2, 0x3, 0x1e8}) r1 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 6.723158012s ago: executing program 2 (id=8534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xb, 0x5}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) 5.620964965s ago: executing program 3 (id=8547): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/97) 4.255503881s ago: executing program 1 (id=8557): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.725431495s ago: executing program 3 (id=8562): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 3.620891814s ago: executing program 3 (id=8564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000049c0)={0x2020}, 0xb3b) 3.501936673s ago: executing program 3 (id=8565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251200000408000100", @ANYRES32=r2, @ANYBLOB="080015"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) 3.340929799s ago: executing program 1 (id=8566): timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) 3.340268062s ago: executing program 3 (id=8568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x2f, 0xb0, 0x66, 0x0, 0x4, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x4e24, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "db421421da3ac14a9eb500ddad2ea58eebc64075583e8bc9ba86ee9da289a6dc", "77aea82e203c483d08ec420bea08b95c6ec4d89c008b06ba534c76af1b50fb2ae38574ebbcc8de052fe47fc8c15ba848", "644e7c034a17bdc9b47026c8b750bee136766a07e5fb20652ccf2c43", {"a1335910484476d304d627f7174e5ca7", "d5c5cc9caa9cdaa25526109f5b67fdfe"}}}}}}}, 0x0) 3.161878259s ago: executing program 3 (id=8569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.390119498s ago: executing program 1 (id=8578): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.359774048s ago: executing program 4 (id=8579): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x42, 0x0, 0x0}, &(0x7f0000000380)="379374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.208973345s ago: executing program 1 (id=8580): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x26020400) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x2020000) 2.208635992s ago: executing program 4 (id=8581): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fanotify_init(0xf00, 0x0) 2.012155327s ago: executing program 1 (id=8584): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) socket(0x2c, 0x4, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.969037247s ago: executing program 0 (id=8585): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 1.820205956s ago: executing program 0 (id=8586): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x4}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x30}, 0x10) 1.670771385s ago: executing program 0 (id=8587): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xaf1f, 0x80, 0x44, 0x1a8}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.442939545s ago: executing program 4 (id=8588): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="58cd68385e0a2070"], 0xb8) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.241600679s ago: executing program 0 (id=8589): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x4c09) 1.164901801s ago: executing program 4 (id=8590): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 976.44016ms ago: executing program 4 (id=8591): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) listen(r0, 0x2) 955.568421ms ago: executing program 0 (id=8592): r0 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040), 0x80, 0x0}, 0x40000110) 797.549794ms ago: executing program 4 (id=8593): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a85fe0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 88.821463ms ago: executing program 1 (id=8594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029060000fbdbdf254a000000080001000900000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0xc080) 0s ago: executing program 0 (id=8595): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) fcntl$getflags(r0, 0x401) kernel console output (not intermixed with test programs): r: syz [ 462.721937][ T2151] usb 4-1: USB disconnect, device number 49 [ 462.827270][ T5953] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 463.006648][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 463.016889][ T5953] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 463.026879][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.035004][ T5953] usb 3-1: Product: syz [ 463.039767][ T5953] usb 3-1: Manufacturer: syz [ 463.044436][ T5953] usb 3-1: SerialNumber: syz [ 463.053849][ T5953] usb 3-1: config 0 descriptor?? [ 463.294817][ T5953] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 463.702969][ T5953] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 463.726730][ T5953] usb 3-1: USB disconnect, device number 51 [ 463.980541][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6246'. [ 463.994761][T19261] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6246'. [ 464.004395][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'. [ 466.044379][T19367] tmpfs: Bad value for 'mpol' [ 466.053747][T19368] validate_nla: 42 callbacks suppressed [ 466.053766][T19368] netlink: 'syz.4.6297': attribute type 3 has an invalid length. [ 467.051123][T19417] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 467.127618][ T5909] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 467.289715][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.305871][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.321207][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 467.342815][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.372029][ T5909] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.383095][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.399268][ T5909] usb 3-1: config 0 descriptor?? [ 467.570267][T19438] netlink: 'syz.4.6331': attribute type 1 has an invalid length. [ 467.579967][T19438] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6331'. [ 467.821393][ T5909] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 467.844625][ T5909] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 468.038271][ T5909] usb 3-1: USB disconnect, device number 52 [ 468.063115][T19457] futex_wake_op: syz.4.6340 tries to shift op by -1; fix this program [ 468.732347][T19475] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6348'. [ 469.129117][T19475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.158957][T19475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.183306][T19475] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 469.210409][T19475] bond0 (unregistering): Released all slaves [ 469.251814][T19482] veth1_macvtap: left promiscuous mode [ 469.259702][T19482] macsec0: entered promiscuous mode [ 469.273660][T19495] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 469.901906][T19532] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6375'. [ 470.285914][T19532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.302052][T19532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.315259][T19532] bond0 (unregistering): Released all slaves [ 470.362822][T19535] veth1_macvtap: left promiscuous mode [ 470.378702][T19535] macsec0: entered promiscuous mode [ 470.388556][T19537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6376'. [ 470.398443][T19534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6376'. [ 471.108257][T19586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6401'. [ 471.140289][T19586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6401'. [ 471.445607][ T30] audit: type=1326 audit(1754994065.675:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 471.520240][ T30] audit: type=1326 audit(1754994065.705:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 471.599029][ T30] audit: type=1326 audit(1754994065.725:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff688b8d550 code=0x7ffc0000 [ 471.659036][ T30] audit: type=1326 audit(1754994065.725:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 471.759486][ T30] audit: type=1326 audit(1754994065.725:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 471.838670][ T30] audit: type=1326 audit(1754994065.725:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 471.860175][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.908455][ T30] audit: type=1326 audit(1754994065.725:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 471.930068][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.982363][ T30] audit: type=1326 audit(1754994065.725:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 472.076638][ T30] audit: type=1326 audit(1754994065.785:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.2.6414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 472.120429][ T30] audit: type=1326 audit(1754994065.785:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.2.6414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 472.274982][ T5841] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 472.776999][T19662] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6436'. [ 472.835682][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6435'. [ 473.123661][T19679] program syz.0.6443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.178385][T19662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.198561][T19662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.218739][T19662] bond0 (unregistering): Released all slaves [ 473.265709][T19667] veth1_macvtap: left promiscuous mode [ 473.272119][T19667] macsec0: entered promiscuous mode [ 473.520619][T19696] bridge_slave_0: default FDB implementation only supports local addresses [ 473.561146][T19700] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 473.702538][T19704] max out of range [ 474.023841][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6462'. [ 474.802692][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6483'. [ 474.998177][T19775] loop6: detected capacity change from 0 to 524287999 [ 475.017896][T19775] buffer_io_error: 5 callbacks suppressed [ 475.017917][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.044096][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.063232][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.071839][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.080503][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.089514][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.098348][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.107102][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.117278][T19775] ldm_validate_partition_table(): Disk read failed. [ 475.124065][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.132920][T19775] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.144063][T19775] Dev loop6: unable to read RDB block 0 [ 475.150874][T19775] loop6: unable to read partition table [ 475.157500][ T5848] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 475.157773][T19775] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 475.296778][ T2151] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 475.319451][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.331368][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.345955][ T5848] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 475.357756][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.370544][ T5848] usb 2-1: config 0 descriptor?? [ 475.456656][ T2151] usb 3-1: Using ep0 maxpacket: 32 [ 475.464063][ T2151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.475949][ T2151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.488429][ T2151] usb 3-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 475.503393][ T2151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.513331][ T2151] usb 3-1: config 0 descriptor?? [ 475.794576][ T5848] semitek 0003:1EA7:0907.0069: unknown main item tag 0x0 [ 475.810182][ T5848] semitek 0003:1EA7:0907.0069: hidraw0: USB HID vf5.a3 Device [HID 1ea7:0907] on usb-dummy_hcd.1-1/input0 [ 475.944946][ T2151] asus 0003:0B05:1866.006A: hidraw1: USB HID v0.00 Device [HID 0b05:1866] on usb-dummy_hcd.2-1/input0 [ 475.957806][ T2151] asus 0003:0B05:1866.006A: Asus input not registered [ 475.966663][ T2151] asus 0003:0B05:1866.006A: probe with driver asus failed with error -12 [ 475.998608][ T5909] usb 2-1: USB disconnect, device number 45 [ 476.116942][ T5848] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 476.140462][ T5910] usb 3-1: USB disconnect, device number 53 [ 476.267839][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 476.275711][ T5848] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.284968][ T5848] usb 5-1: config 0 has no interface number 0 [ 476.291981][ T5848] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.304283][ T5848] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.315627][ T5848] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 476.325488][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.338867][ T5848] usb 5-1: config 0 descriptor?? [ 476.348392][ T5841] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 476.359188][ T5841] Bluetooth: hci0: Injecting HCI hardware error event [ 476.370690][ T51] Bluetooth: hci0: hardware error 0x00 [ 476.527346][T19808] netlink: 'syz.3.6504': attribute type 4 has an invalid length. [ 476.720138][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'. [ 476.915463][T19821] netlink: 'syz.2.6508': attribute type 7 has an invalid length. [ 476.925246][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6510'. [ 476.944837][T19823] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6511'. [ 476.954366][T19821] netlink: 'syz.2.6508': attribute type 8 has an invalid length. [ 476.989346][ T5848] uclogic 0003:28BD:0094.006B: failed retrieving string descriptor #100: -71 [ 477.006404][ T5848] uclogic 0003:28BD:0094.006B: failed retrieving pen parameters: -71 [ 477.015885][ T5848] uclogic 0003:28BD:0094.006B: pen probing failed: -71 [ 477.057317][ T5848] uclogic 0003:28BD:0094.006B: failed probing parameters: -71 [ 477.064992][ T5848] uclogic 0003:28BD:0094.006B: probe with driver uclogic failed with error -71 [ 477.104541][ T5848] usb 5-1: USB disconnect, device number 47 [ 477.122549][T19827] ntfs3: Bad value for 'gid' [ 477.137737][T19827] ntfs3: Bad value for 'gid' [ 478.340665][T19878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6538'. [ 478.426795][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 478.768191][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6545'. [ 478.775695][T19892] dummy0: entered promiscuous mode [ 478.911542][T19892] dummy0: left promiscuous mode [ 478.943113][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6546'. [ 479.485863][T19922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6559'. [ 479.556766][ T5949] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 479.712984][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64 [ 479.713038][ T5949] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 479.713065][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.728658][ T5949] usb 5-1: config 0 descriptor?? [ 479.778361][T19911] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 479.840370][ T2151] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 479.999824][ T2151] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 479.999888][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.003483][ T2151] usb 2-1: config 0 descriptor?? [ 480.006904][ T2151] cp210x 2-1:0.0: cp210x converter detected [ 480.217310][ T5949] uclogic 0003:5543:0003.006C: hidraw0: USB HID v4.01 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 480.425683][ T5848] usb 5-1: USB disconnect, device number 48 [ 480.617309][ T2151] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 480.625881][ T2151] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 480.636637][ T2151] usb 2-1: cp210x converter now attached to ttyUSB0 [ 480.665972][ T2151] usb 2-1: USB disconnect, device number 46 [ 480.688327][ T2151] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 480.702848][ T2151] cp210x 2-1:0.0: device disconnected [ 481.018221][T19953] veth1_macvtap: entered promiscuous mode [ 481.027318][T19953] macsec0: left promiscuous mode [ 481.190527][T19963] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6579'. [ 481.260208][T19967] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 481.346261][ T5848] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 481.527143][ T5848] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 481.535539][ T5848] usb 5-1: config 0 has no interface number 0 [ 481.564922][ T5848] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.607478][ T5848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 481.630405][ T5848] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 481.659663][ T5848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 481.676992][ T5848] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 481.690448][ T5848] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.715403][T19986] vlan2: entered promiscuous mode [ 481.735166][T19986] macvtap0: entered promiscuous mode [ 481.743206][ T5848] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 481.761577][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.795108][ T5848] usb 5-1: config 0 descriptor?? [ 481.802508][T19960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 481.810914][T19960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 481.825984][ T5848] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 482.036561][ T5953] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 482.063610][ T5848] usb 5-1: USB disconnect, device number 49 [ 482.079315][T20002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6597'. [ 482.080649][ T5848] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 482.089640][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6597'. [ 482.113440][ T5910] kernel write not supported for file /vcs (pid: 5910 comm: kworker/0:5) [ 482.113988][T20002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6597'. [ 482.201551][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.212789][ T5953] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 482.229430][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.248356][ T5953] usb 2-1: config 0 descriptor?? [ 482.668497][ T5953] kye 0003:0458:5017.006D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 482.682139][ T5953] kye 0003:0458:5017.006D: unknown main item tag 0x0 [ 482.689128][ T5953] kye 0003:0458:5017.006D: unknown main item tag 0x0 [ 482.698599][ T5953] kye 0003:0458:5017.006D: unknown main item tag 0x0 [ 482.705525][ T5953] kye 0003:0458:5017.006D: unknown main item tag 0x0 [ 482.716864][ T2151] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 482.739574][ T5953] kye 0003:0458:5017.006D: unknown main item tag 0x0 [ 482.754294][ T5953] kye 0003:0458:5017.006D: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.1-1/input0 [ 482.771228][T20020] netlink: 'syz.4.6606': attribute type 41 has an invalid length. [ 482.777332][ T5953] kye 0003:0458:5017.006D: tablet-enabling feature report not found [ 482.794137][ T5953] kye 0003:0458:5017.006D: tablet enabling failed [ 482.871308][ T5953] usb 2-1: USB disconnect, device number 47 [ 482.898719][ T2151] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 482.909164][ T2151] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.931781][ T2151] usb 3-1: config 0 has no interface number 0 [ 482.945412][ T2151] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 482.956742][ T2151] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.976890][ T2151] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 482.986538][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.994732][ T2151] usb 3-1: Product: syz [ 482.999687][ T2151] usb 3-1: Manufacturer: syz [ 483.027001][ T2151] usb 3-1: SerialNumber: syz [ 483.040072][ T2151] usb 3-1: config 0 descriptor?? [ 483.427080][ T5953] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 483.633982][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.659599][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.672416][ T2151] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 483.691085][ T5953] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 483.697860][T20059] CUSE: unknown device info "€" [ 483.705320][T20059] CUSE: zero length info key specified [ 483.711213][ T2151] usb 3-1: USB disconnect, device number 54 [ 483.728461][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.741194][ T5848] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 483.749637][ T5953] usb 5-1: config 0 descriptor?? [ 483.820960][T20062] delete_channel: no stack [ 483.828894][T20060] delete_channel: no stack [ 483.908447][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.924754][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.948431][ T5848] usb 2-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 483.959425][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.976047][ T5848] usb 2-1: config 0 descriptor?? [ 484.040055][T20069] netlink: 'syz.0.6629': attribute type 18 has an invalid length. [ 484.062940][T20069] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.071976][T20071] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 484.072720][T20069] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.089523][T20069] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.098383][T20069] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.183613][ T5953] hid-led 0003:0FC5:B080.006E: unknown main item tag 0x0 [ 484.379672][ T5953] hid-led 0003:0FC5:B080.006E: probe with driver hid-led failed with error -71 [ 484.399258][ T5953] usb 5-1: USB disconnect, device number 50 [ 484.539863][T20089] netlink: 'syz.3.6639': attribute type 66 has an invalid length. [ 484.613427][ T5953] usb 2-1: USB disconnect, device number 48 [ 485.077712][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6650'. [ 485.091995][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6650'. [ 485.430389][T20125] netlink: 'syz.1.6657': attribute type 1 has an invalid length. [ 486.237138][T20168] netlink: 'syz.1.6677': attribute type 7 has an invalid length. [ 486.257663][T20168] netlink: 'syz.1.6677': attribute type 8 has an invalid length. [ 487.197111][T20214] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.205928][T20214] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.207091][ T5848] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 487.215572][T20214] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.233039][T20214] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.390101][ T5848] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 487.409416][ T5848] usb 4-1: config 0 has no interface number 0 [ 487.420422][ T5848] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 487.432023][ T5910] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 487.445494][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.454264][ T5848] usb 4-1: Product: syz [ 487.459427][ T5848] usb 4-1: Manufacturer: syz [ 487.464067][ T5848] usb 4-1: SerialNumber: syz [ 487.472350][ T5848] usb 4-1: config 0 descriptor?? [ 487.597977][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 487.615275][ T5910] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 487.652379][ T5910] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 487.663802][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.673338][ T5910] usb 3-1: Product: syz [ 487.695701][ T5910] usb 3-1: Manufacturer: syz [ 487.695967][ T5848] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 487.716871][ T5910] usb 3-1: SerialNumber: syz [ 487.728755][ T5910] usb 3-1: config 0 descriptor?? [ 487.733092][T20230] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6709'. [ 487.748676][ T5910] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 487.758892][ T5848] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 487.769016][ T5848] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 487.779342][ T5910] usb 3-1: setting power ON [ 487.783922][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 487.793883][ T5848] usb 4-1: media controller created [ 487.808029][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.821180][T20232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6711'. [ 487.823291][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.847081][T20232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6711'. [ 487.861230][ T5910] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 487.871548][ T5910] usb 3-1: media controller created [ 487.938666][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.989311][ T5848] DVB: Unable to find symbol dib7000p_attach() [ 487.998581][ T5848] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 488.029246][ T5910] usb 3-1: selecting invalid altsetting 6 [ 488.040763][ T5910] usb 3-1: digital interface selection failed (-22) [ 488.048255][ T5848] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 488.059140][ T5910] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 488.069507][ T5848] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 488.069667][ T5910] usb 3-1: setting power OFF [ 488.104264][ T5848] usb 4-1: media controller created [ 488.114665][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.128177][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 488.134028][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 488.150728][ T5910] (NULL device *): no alternate interface [ 488.160384][ T5848] dib0700: the master dib7090 has to be initialized first [ 488.205574][ T5848] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 488.251532][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 488.293143][ T5910] usb 3-1: USB disconnect, device number 55 [ 488.348497][ T5848] rc_core: IR keymap rc-dib0700-rc5 not found [ 488.354774][ T5848] Registered IR keymap rc-empty [ 488.397968][ T5848] dvb-usb: could not initialize remote control. [ 488.404293][ T5848] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 488.439434][ T5848] usb 4-1: USB disconnect, device number 50 [ 488.493042][ T5848] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 488.782398][T20271] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6727'. [ 488.791870][T20271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6727'. [ 489.322168][T20298] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6740'. [ 490.092291][T20340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6760'. [ 490.970659][T20386] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 490.970659][T20386] program syz.4.6783 not setting count and/or reply_len properly [ 491.717524][ T5848] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 491.876822][ T5910] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 491.890368][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.906800][ T5848] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 491.915032][T20440] support for cryptoloop has been removed. Use dm-crypt instead. [ 491.915742][ T5848] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 491.960816][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.983434][ T5848] usb 5-1: config 0 descriptor?? [ 492.000281][ T5848] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 492.007918][ T5848] dvb-usb: bulk message failed: -22 (3/0) [ 492.018858][ T5848] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 492.028917][ T5848] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 492.040706][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 492.051849][ T5848] usb 5-1: media controller created [ 492.061403][ T5910] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 492.079311][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.096280][ T5910] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 492.122427][ T5848] dvb-usb: bulk message failed: -22 (6/0) [ 492.129059][ T5910] usb 4-1: config 0 interface 0 has no altsetting 0 [ 492.146891][ T5848] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 492.154153][ T5910] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 492.177109][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.189261][ T5848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 492.209356][T20416] dibusb: i2c wr: len=61 is too big! [ 492.209356][T20416] [ 492.220899][ T5910] usb 4-1: config 0 descriptor?? [ 492.240118][ T5848] dvb-usb: schedule remote query interval to 150 msecs. [ 492.253065][ T5848] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 492.279720][ T5848] usb 5-1: USB disconnect, device number 51 [ 492.358139][ T5848] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 492.489557][T20462] team0: entered allmulticast mode [ 492.494857][T20462] team_slave_0: entered allmulticast mode [ 492.503165][T20462] team_slave_1: entered allmulticast mode [ 492.514379][T20462] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 492.675876][ T5910] corsair-cpro 0003:1B1C:0C10.0070: unknown main item tag 0x0 [ 492.696953][ T5910] corsair-cpro 0003:1B1C:0C10.0070: unknown main item tag 0x0 [ 492.713428][ T5910] corsair-cpro 0003:1B1C:0C10.0070: unknown main item tag 0x0 [ 492.722384][ T5910] corsair-cpro 0003:1B1C:0C10.0070: unknown main item tag 0x0 [ 492.765298][ T5910] corsair-cpro 0003:1B1C:0C10.0070: unknown main item tag 0x0 [ 492.799868][ T5910] corsair-cpro 0003:1B1C:0C10.0070: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 492.842619][T20474] ptrace attach of "./syz-executor exec"[20475] was attempted by "./syz-executor exec"[20474] [ 492.902645][ T5910] corsair-cpro 0003:1B1C:0C10.0070: probe with driver corsair-cpro failed with error -90 [ 492.947768][ T5910] usb 4-1: USB disconnect, device number 51 [ 493.249977][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 493.430775][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 493.452653][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 493.477016][ T9] usb 3-1: config 0 has no interface number 0 [ 493.491286][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 493.522931][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 493.539525][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.549310][ T9] usb 3-1: Product: syz [ 493.554186][ T9] usb 3-1: Manufacturer: syz [ 493.559417][ T9] usb 3-1: SerialNumber: syz [ 493.572911][ T9] usb 3-1: config 0 descriptor?? [ 493.792793][T20524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6845'. [ 493.846526][T20524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6845'. [ 493.869050][T20524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6845'. [ 493.892777][T20524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6845'. [ 494.232935][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 494.252161][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 494.261351][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 494.289334][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 494.319771][ T9] usb 3-1: USB disconnect, device number 56 [ 494.416245][ T5949] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 494.552346][T20557] netlink: 'syz.4.6863': attribute type 29 has an invalid length. [ 494.568448][T20557] netlink: 'syz.4.6863': attribute type 29 has an invalid length. [ 494.578801][ T5949] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 494.589649][ T5949] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 494.616539][ T5949] usb 4-1: config 0 has no interface number 0 [ 494.622841][ T5949] usb 4-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.651214][ T5949] usb 4-1: config 0 interface 30 has no altsetting 0 [ 494.658552][ T5949] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 494.672367][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.687880][ T5949] usb 4-1: config 0 descriptor?? [ 494.699518][ T5949] usb 4-1: unknown interface protocol 0x41, assuming v1 [ 494.715259][ T5949] usb 4-1: 30:2 : does not exist [ 494.913689][ T5949] usb 4-1: USB disconnect, device number 52 [ 495.123569][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 495.123588][ T30] audit: type=1326 audit(1754994089.355:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20585 comm="syz.1.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 495.174402][ T30] audit: type=1326 audit(1754994089.355:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20585 comm="syz.1.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 495.216554][ T30] audit: type=1326 audit(1754994089.385:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20585 comm="syz.1.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 495.245683][ T30] audit: type=1326 audit(1754994089.385:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20585 comm="syz.1.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 495.308930][ T30] audit: type=1326 audit(1754994089.385:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20585 comm="syz.1.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 495.449526][T20600] netlink: 'syz.2.6881': attribute type 5 has an invalid length. [ 495.467569][T20600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6881'. [ 495.976607][ T5949] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 495.979420][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6897'. [ 496.152227][ T5949] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 496.176336][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.194730][ T5949] usb 3-1: Product: syz [ 496.200175][ T5949] usb 3-1: Manufacturer: syz [ 496.215048][ T5949] usb 3-1: SerialNumber: syz [ 496.250377][ T5949] usb 3-1: config 0 descriptor?? [ 496.422688][T20651] mkiss: ax0: crc mode is auto. [ 496.674186][ T5949] mos7840 3-1:0.0: required endpoints missing [ 496.705921][ T5949] usb 3-1: USB disconnect, device number 57 [ 497.090948][T20685] syz.3.6923 uses old SIOCAX25GETINFO [ 497.217168][ T5949] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 497.388858][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.406562][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.440227][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.466748][ T5949] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 497.486969][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.517301][ T5949] usb 5-1: config 0 descriptor?? [ 497.953882][ T5949] chicony 0003:04F2:1236.0071: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.4-1/input0 [ 498.162591][ T5949] usb 5-1: USB disconnect, device number 52 [ 498.876585][ T5953] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 498.929520][T20771] netlink: 'syz.2.6963': attribute type 1 has an invalid length. [ 499.032919][ T5953] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 499.059520][ T5953] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.093928][ T5953] usb 4-1: config 2 interface 0 has no altsetting 0 [ 499.115409][ T5953] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 499.137029][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.155359][ T5953] usb 4-1: Product: syz [ 499.160634][ T5953] usb 4-1: Manufacturer: syz [ 499.165286][ T5953] usb 4-1: SerialNumber: syz [ 499.250762][T20782] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6969'. [ 499.398952][ T5953] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 499.419287][ T5953] usb 4-1: USB disconnect, device number 53 [ 499.572452][ T30] audit: type=1326 audit(1754994093.805:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20796 comm="syz.1.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 499.594139][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.612893][ T5949] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 499.628104][ T30] audit: type=1326 audit(1754994093.805:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20796 comm="syz.1.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 499.657639][ T30] audit: type=1326 audit(1754994093.805:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20796 comm="syz.1.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda3f98d69f code=0x7ffc0000 [ 499.711898][ T30] audit: type=1326 audit(1754994093.815:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20796 comm="syz.1.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 499.737674][ T30] audit: type=1326 audit(1754994093.815:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20796 comm="syz.1.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3f98ebe9 code=0x7ffc0000 [ 499.759369][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.787176][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 499.795642][ T5949] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 499.807228][ T5949] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 499.820975][ T5949] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.833807][ T5949] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.843814][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.853079][ T5949] usb 3-1: Product: syz [ 499.858083][ T5949] usb 3-1: Manufacturer: syz [ 499.862747][ T5949] usb 3-1: SerialNumber: syz [ 500.093633][ T5949] usb 3-1: 0:2 : does not exist [ 500.140927][ T5949] usb 3-1: USB disconnect, device number 58 [ 500.187933][ T55] wlan1: Trigger new scan to find an IBSS to join [ 500.770804][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6992'. [ 500.770833][T20830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6992'. [ 500.838036][T20833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6993'. [ 501.332849][T20853] netlink: 'syz.4.7002': attribute type 1 has an invalid length. [ 501.365073][T20853] netlink: 'syz.4.7002': attribute type 2 has an invalid length. [ 501.387546][T20853] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.7002'. [ 501.482990][T20861] program syz.4.7006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.597215][T20867] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7008'. [ 502.101696][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 502.136866][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 502.267623][ T5949] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 502.320780][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7030'. [ 502.332513][T20909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7030'. [ 502.342184][T20909] netlink: 'syz.1.7030': attribute type 14 has an invalid length. [ 502.352997][T20909] netlink: 'syz.1.7030': attribute type 13 has an invalid length. [ 502.449135][ T5949] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 502.468540][ T5949] usb 5-1: config 0 has no interface number 0 [ 502.478445][ T5949] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.491502][ T5949] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.502056][ T5949] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 502.521671][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.539390][ T5949] usb 5-1: config 0 descriptor?? [ 502.804974][T20927] sctp: [Deprecated]: syz.2.7039 (pid 20927) Use of int in max_burst socket option. [ 502.804974][T20927] Use struct sctp_assoc_value instead [ 502.971836][ T5949] uclogic 0003:256C:006D.0072: interface is invalid, ignoring [ 503.187144][ T5949] usb 5-1: USB disconnect, device number 53 [ 503.237729][ T12] wlan1: Trigger new scan to find an IBSS to join [ 503.517482][ T5848] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 503.673626][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.695151][ T5848] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 503.713865][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.727660][ T5848] usb 2-1: config 0 descriptor?? [ 503.935549][T20972] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 503.942688][T20972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 503.961451][T20972] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 503.968041][T20972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 503.975839][T20972] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 503.982352][T20972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 503.992099][T20972] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 503.998597][T20972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 504.006034][T20972] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 504.012675][T20972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 504.162999][ T5848] kye 0003:0458:5017.0073: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 504.179071][ T5848] kye 0003:0458:5017.0073: unknown main item tag 0x0 [ 504.185849][ T5848] kye 0003:0458:5017.0073: unknown main item tag 0x0 [ 504.193939][ T5848] kye 0003:0458:5017.0073: unknown main item tag 0x0 [ 504.223067][ T5848] kye 0003:0458:5017.0073: unknown main item tag 0x0 [ 504.246892][ T5848] kye 0003:0458:5017.0073: unknown main item tag 0x0 [ 504.253680][ T5848] kye 0003:0458:5017.0073: unknown main item tag 0x0 [ 504.293279][ T5848] kye 0003:0458:5017.0073: unknown main item tag 0x0 [ 504.317674][ T5848] kye 0003:0458:5017.0073: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.1-1/input0 [ 504.356818][ T5848] kye 0003:0458:5017.0073: tablet-enabling feature report not found [ 504.368019][ T5848] kye 0003:0458:5017.0073: tablet enabling failed [ 504.391382][ T5848] usb 2-1: USB disconnect, device number 49 [ 504.519616][T20987] netlink: 'syz.2.7067': attribute type 8 has an invalid length. [ 505.228349][ T5848] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 505.400912][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 505.419121][ T5848] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 505.430506][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.443961][ T5848] usb 4-1: Product: syz [ 505.461137][ T5848] usb 4-1: Manufacturer: syz [ 505.465815][ T5848] usb 4-1: SerialNumber: syz [ 505.496758][ T5848] usb 4-1: config 0 descriptor?? [ 505.509527][ T5848] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 505.521874][ T5848] usb 4-1: setting power ON [ 505.527753][ T5848] dvb-usb: bulk message failed: -22 (2/0) [ 505.538180][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.553902][ T5848] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 505.583034][ T5848] usb 4-1: media controller created [ 505.652306][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.679341][ T5848] usb 4-1: selecting invalid altsetting 6 [ 505.685285][ T5848] usb 4-1: digital interface selection failed (-22) [ 505.693464][ T5848] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 505.704176][ T5848] usb 4-1: setting power OFF [ 505.714086][ T5848] dvb-usb: bulk message failed: -22 (2/0) [ 505.727755][ T5848] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 505.728056][T21010] dvb-usb: bulk message failed: -22 (3/0) [ 505.737191][ T5848] (NULL device *): no alternate interface [ 505.749341][T21010] dvb-usb: bulk message failed: -22 (3/0) [ 505.795545][ T5848] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 505.811550][ T5848] usb 4-1: USB disconnect, device number 54 [ 505.827259][ T5949] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 505.986595][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 505.993978][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.007459][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.019930][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.038515][ T5949] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 506.049318][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.064536][ T5949] usb 5-1: config 0 descriptor?? [ 506.111277][T21058] gfs2: path_lookup on c:::!(>ˆìy¢o™=O-ŽÄFm×SH_Y8yÿu [ 506.111277][T21058] FãzR× ¶#ŸxI™6BçÙYCg)ß'!µAØ{g¥ [ 506.111277][T21058] ¹}ÐmŒ]x®ïÏ%{qΗmÍ*©ºPNäȺ~%U5JëhBoGhÛN÷]î”.L›.`¾º$Ž returned error -2 [ 506.188668][ T1159] wlan1: Trigger new scan to find an IBSS to join [ 506.484732][ T5949] HID 045e:07da: Invalid code 65791 type 1 [ 506.497363][ T5949] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0074/input/input49 [ 506.516025][ T5949] microsoft 0003:045E:07DA.0074: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 506.686566][ T5949] usb 5-1: USB disconnect, device number 54 [ 506.910599][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.920607][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.125283][ T55] wlan1: Creating new IBSS network, BSSID 86:9c:c7:56:d4:b7 [ 507.646565][ T5949] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 507.829206][ T5949] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.876543][ T5949] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.888107][ T5949] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.894823][ T5949] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 507.924924][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.941024][ T5949] usb 4-1: config 0 descriptor?? [ 508.092201][T21148] __nla_validate_parse: 3 callbacks suppressed [ 508.092222][T21148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7143'. [ 508.374734][ T5949] holtek_mouse 0003:04D9:A067.0075: unknown main item tag 0x0 [ 508.396958][ T5949] holtek_mouse 0003:04D9:A067.0075: unknown main item tag 0x0 [ 508.415161][ T5949] holtek_mouse 0003:04D9:A067.0075: unknown main item tag 0x0 [ 508.432460][ T5949] holtek_mouse 0003:04D9:A067.0075: unknown main item tag 0x0 [ 508.450765][ T5949] holtek_mouse 0003:04D9:A067.0075: unknown main item tag 0x0 [ 508.466550][ T5949] holtek_mouse 0003:04D9:A067.0075: unknown main item tag 0x0 [ 508.486538][ T5949] holtek_mouse 0003:04D9:A067.0075: unknown main item tag 0x0 [ 508.500914][ T5949] holtek_mouse 0003:04D9:A067.0075: unknown main item tag 0x0 [ 508.535480][ T5949] holtek_mouse 0003:04D9:A067.0075: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.3-1/input0 [ 508.588725][ T5949] usb 4-1: USB disconnect, device number 55 [ 510.293054][T21234] lo speed is unknown, defaulting to 1000 [ 510.306928][T21234] lo speed is unknown, defaulting to 1000 [ 510.325447][T21234] lo speed is unknown, defaulting to 1000 [ 510.369405][T21234] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 510.389799][T21234] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 510.441465][T21234] lo speed is unknown, defaulting to 1000 [ 510.450183][T21234] lo speed is unknown, defaulting to 1000 [ 510.458185][T21234] lo speed is unknown, defaulting to 1000 [ 510.468624][T21234] lo speed is unknown, defaulting to 1000 [ 510.477412][T21234] lo speed is unknown, defaulting to 1000 [ 510.837981][T21257] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 511.087496][ T5848] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 511.225326][T21283] netlink: 'syz.3.7207': attribute type 49 has an invalid length. [ 511.286788][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 511.311467][ T5848] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 511.326780][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.334864][ T5848] usb 5-1: Product: syz [ 511.357057][ T5848] usb 5-1: Manufacturer: syz [ 511.364539][ T5848] usb 5-1: SerialNumber: syz [ 511.374161][T21289] program syz.1.7209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.388959][ T5848] usb 5-1: config 0 descriptor?? [ 511.407212][ T5848] gspca_main: sq930x-2.14.0 probing 2770:930c [ 511.807602][ T5949] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 511.985672][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 512.000151][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 512.014686][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 512.031637][T21319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7224'. [ 512.041320][ T5949] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 512.056644][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.057917][ T5848] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 512.064775][ T5949] usb 2-1: Product: syz [ 512.064797][ T5949] usb 2-1: Manufacturer: syz [ 512.064814][ T5949] usb 2-1: SerialNumber: syz [ 512.078815][ T5949] usb 2-1: config 0 descriptor?? [ 512.088805][ T5848] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 512.097582][T21298] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 512.097737][T21298] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 512.100025][ T5949] usb 2-1: ucan: probing device on interface #0 [ 512.112346][ T5848] usb 5-1: USB disconnect, device number 55 [ 512.322792][ T5949] usb 2-1: ucan: device protocol version 42020 is not supported [ 512.338138][ T5949] usb 2-1: ucan: probe failed; try to update the device firmware [ 512.447179][ T5848] kernel write not supported for file /comedi4 (pid: 5848 comm: kworker/0:3) [ 512.541749][ T5949] usb 2-1: USB disconnect, device number 50 [ 512.679978][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'. [ 512.986567][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 513.321571][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 513.321591][ T30] audit: type=1800 audit(1754994107.557:206): pid=21374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.7248" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 513.477792][T21380] net_ratelimit: 1052 callbacks suppressed [ 513.477830][T21380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.658427][T21389] netlink: 'syz.2.7255': attribute type 29 has an invalid length. [ 513.668943][T21389] netlink: 'syz.2.7255': attribute type 29 has an invalid length. [ 513.907880][ T5848] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 514.080928][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 514.098106][ T5848] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.120144][ T5848] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 514.132568][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.150832][ T5848] usb 4-1: config 0 descriptor?? [ 514.598290][ T5848] hid-u2fzero 0003:20A0:4287.0076: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 514.637276][ T5848] hid-u2fzero 0003:20A0:4287.0076: NitroKey U2F LED initialised [ 514.665674][ T5848] hid-u2fzero 0003:20A0:4287.0076: NitroKey U2F RNG initialised [ 514.817884][ T5848] usb 4-1: USB disconnect, device number 56 [ 515.210975][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7286'. [ 515.456866][ T5848] libceph: connect (1)[c::]:6789 error -101 [ 515.463383][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 515.760088][ T9] libceph: connect (1)[c::]:6789 error -101 [ 515.768040][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 515.819317][T21495] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[21495] [ 515.850441][T21498] netlink: 'syz.2.7301': attribute type 29 has an invalid length. [ 515.875026][T21498] netlink: 'syz.2.7301': attribute type 29 has an invalid length. [ 515.917741][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7303'. [ 516.228196][T21475] ceph: No mds server is up or the cluster is laggy [ 517.304629][T21565] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 517.333673][T21565] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 517.350368][T21565] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 517.362034][T21565] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 517.369681][T21565] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 517.377605][T21565] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 517.389398][T21565] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 517.396003][T21565] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 517.416949][T21565] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 517.436376][T21565] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 517.443869][T21565] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 517.453732][T21565] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 517.689899][T21582] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7342'. [ 517.707639][T21582] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 517.724195][T21582] openvswitch: netlink: Message has 1 unknown bytes. [ 517.974260][T21594] binder: 21593:21594 ioctl c0306201 2000000001c0 returned -22 [ 518.463042][T21626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7362'. [ 519.915534][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7404'. [ 519.973168][T21713] netlink: 'syz.4.7405': attribute type 58 has an invalid length. [ 519.993879][T21713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7405'. [ 520.264566][T21729] netlink: 'syz.1.7413': attribute type 1 has an invalid length. [ 520.341324][T21731] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 520.488239][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 520.658581][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 520.660566][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.660617][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.660648][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 520.660680][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 520.660705][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.661906][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 520.661937][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 520.661967][ T9] usb 5-1: Manufacturer: syz [ 520.664991][ T9] usb 5-1: config 0 descriptor?? [ 521.028418][ T9] rc_core: IR keymap rc-hauppauge not found [ 521.028440][ T9] Registered IR keymap rc-empty [ 521.028593][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.060293][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.078355][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 521.091622][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 521.104337][ T5953] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 521.115242][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.138470][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.167164][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.186949][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.209528][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.236015][T21766] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.7430'. [ 521.239451][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.258877][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.260390][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 521.291267][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.296444][ T5953] usb 3-1: config 0 interface 0 has no altsetting 0 [ 521.309243][ T5953] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 521.329967][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.334394][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.346591][ T5953] usb 3-1: Product: syz [ 521.351500][ T5953] usb 3-1: Manufacturer: syz [ 521.361093][ T5953] usb 3-1: SerialNumber: syz [ 521.379496][ T5953] usb 3-1: config 0 descriptor?? [ 521.410730][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 521.442475][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 521.461523][ T9] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 521.489181][ T9] usb 5-1: USB disconnect, device number 56 [ 521.797766][ T5953] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 521.810688][ T5953] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 522.035272][ T5953] usb 3-1: USB disconnect, device number 59 [ 522.900830][T21836] syz.0.7464 (21836) used obsolete PPPIOCDETACH ioctl [ 523.449102][T21860] netlink: 'syz.0.7477': attribute type 2 has an invalid length. [ 523.519120][T21860] k›*·]‘: entered promiscuous mode [ 524.013477][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7491'. [ 524.211836][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7497'. [ 524.423117][T21913] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 524.501866][ T30] audit: type=1326 audit(1754994118.737:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21915 comm="syz.2.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 524.523502][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.577724][ T30] audit: type=1326 audit(1754994118.737:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21915 comm="syz.2.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 524.628751][ T30] audit: type=1326 audit(1754994118.767:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21915 comm="syz.2.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 524.673064][ T30] audit: type=1326 audit(1754994118.767:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21915 comm="syz.2.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 524.741433][ T30] audit: type=1326 audit(1754994118.767:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21915 comm="syz.2.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 524.806311][ T30] audit: type=1326 audit(1754994118.767:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21915 comm="syz.2.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 524.866632][ T30] audit: type=1326 audit(1754994118.767:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21915 comm="syz.2.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 524.867850][T21928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7508'. [ 524.889545][ T30] audit: type=1326 audit(1754994118.767:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21915 comm="syz.2.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2198ebe9 code=0x7ffc0000 [ 525.342920][T21952] netlink: 'syz.1.7521': attribute type 29 has an invalid length. [ 525.395101][T21956] netlink: 'syz.1.7521': attribute type 29 has an invalid length. [ 526.050558][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 526.152286][T21993] sp0: Synchronizing with TNC [ 526.218618][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.244051][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.259388][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 526.279377][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 526.300227][ T9] usb 5-1: SerialNumber: syz [ 526.306286][ T5953] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 526.480880][ T5953] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 526.498835][ T5953] usb 2-1: config 0 has no interface number 0 [ 526.510386][ T5953] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 526.530409][ T9] usb 5-1: 0:2 : does not exist [ 526.531661][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.560508][ T5953] usb 2-1: Product: syz [ 526.586864][ T9] usb 5-1: USB disconnect, device number 57 [ 526.588153][ T5953] usb 2-1: Manufacturer: syz [ 526.608737][ T5953] usb 2-1: SerialNumber: syz [ 526.634004][ T5953] usb 2-1: config 0 descriptor?? [ 526.700182][T22009] tipc: Enabling of bearer rejected, failed to enable media [ 527.260907][ T5953] usb 2-1: Firmware version (0.0) predates our first public release. [ 527.288640][ T5953] usb 2-1: Please update to version 0.2 or newer [ 527.414413][ T5953] usb 2-1: USB disconnect, device number 51 [ 527.627109][T22045] syz.0.7561 (22045) used greatest stack depth: 17992 bytes left [ 527.641223][ T9] libceph: connect (1)[c::]:6789 error -22 [ 527.652227][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 527.697440][T22059] netlink: 'syz.0.7566': attribute type 3 has an invalid length. [ 527.867503][T22067] tmpfs: Cannot retroactively limit inodes [ 527.917267][ T9] libceph: connect (1)[c::]:6789 error -22 [ 527.923390][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 528.437173][ T9] libceph: connect (1)[c::]:6789 error -22 [ 528.443123][T22053] ceph: No mds server is up or the cluster is laggy [ 528.462047][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 528.961060][T22117] Bluetooth: MGMT ver 1.23 [ 529.426985][T22141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7607'. [ 530.181650][T22183] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 530.287114][ T5953] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 530.448001][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 530.486237][ T5953] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 530.494416][ T5953] usb 5-1: config 8 has no interface number 0 [ 530.525992][ T5953] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 530.542344][ T5953] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 530.553229][ T5953] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 530.565073][ T5953] usb 5-1: config 8 interface 39 has no altsetting 0 [ 530.581044][ T5953] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 530.591600][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.636723][ T5953] usb 5-1: Product: syz [ 530.641008][ T5953] usb 5-1: Manufacturer: syz [ 530.645655][ T5953] usb 5-1: SerialNumber: syz [ 530.704705][T22208] program syz.2.7640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.730373][T22211] fuse: Unexpected value for 'allow_other' [ 531.047639][ T5848] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 531.207402][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 531.214726][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.227347][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.238533][ T5848] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 531.248237][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.264492][ T5848] usb 4-1: config 0 descriptor?? [ 531.297865][ T5953] ipheth 5-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 531.332039][ T5953] ipheth 5-1:8.39: Apple iPhone USB Ethernet device attached [ 531.346815][ T5953] usb 5-1: USB disconnect, device number 58 [ 531.418035][ T5953] ipheth 5-1:8.39: Apple iPhone USB Ethernet now disconnected [ 531.690236][ T5848] gt683r_led 0003:1770:FF00.0077: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 531.893789][ T5848] usb 4-1: USB disconnect, device number 57 [ 531.907809][ T5910] gt683r_led 0003:1770:FF00.0077: failed to send set report request: -19 [ 531.946928][ T5910] gt683r_led 0003:1770:FF00.0077: failed to send set report request: -19 [ 532.291753][T22269] gretap0: entered promiscuous mode [ 532.299437][T22269] vlan3: entered promiscuous mode [ 532.476237][ T5953] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 532.638559][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.660475][ T5953] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 532.670729][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.690396][ T5953] usb 2-1: config 0 descriptor?? [ 532.915356][T22300] overlayfs: failed to resolve './file1': -2 [ 533.123718][ T5953] elecom 0003:056E:00FE.0078: item fetching failed at offset 0/3 [ 533.148250][ T5953] elecom 0003:056E:00FE.0078: probe with driver elecom failed with error -22 [ 533.331133][ T5848] usb 2-1: USB disconnect, device number 52 [ 533.604234][T22331] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 533.791528][T22342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7705'. [ 534.539191][T22383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7724'. [ 534.751292][T22398] tipc: Enabled bearer , priority 10 [ 534.897481][ T5848] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 534.925731][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7735'. [ 535.066937][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 535.084456][T22417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7740'. [ 535.086983][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.108519][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.135230][ T5848] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 535.158641][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.181580][ T5848] usb 3-1: config 0 descriptor?? [ 535.203302][ T5848] hub 3-1:0.0: USB hub found [ 535.246424][T22421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7742'. [ 535.274208][T22421] tipc: Invalid UDP bearer configuration [ 535.274295][T22421] tipc: Enabling of bearer rejected, failed to enable media [ 535.320472][T22425] fuse: Bad value for 'user_id' [ 535.325478][T22425] fuse: Bad value for 'user_id' [ 535.416906][ T5848] hub 3-1:0.0: 1 port detected [ 535.614009][ T5848] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 535.627432][ T5848] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 535.659716][ T5848] usbhid 3-1:0.0: can't add hid device: -71 [ 535.667071][ T5848] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 535.727897][ T5848] usb 3-1: USB disconnect, device number 60 [ 535.953829][T22455] netlink: 'syz.0.7760': attribute type 16 has an invalid length. [ 535.969650][T22455] netlink: 'syz.0.7760': attribute type 3 has an invalid length. [ 535.984230][T22455] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.7760'. [ 536.316775][T22475] sp0: Synchronizing with TNC [ 536.325862][T22473] [U] è [ 536.557501][ T5848] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 536.673419][T22497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7779'. [ 536.691857][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7779'. [ 536.711277][T22497] netlink: 'syz.0.7779': attribute type 19 has an invalid length. [ 536.720037][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 536.731203][ T5848] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 536.746803][ T5848] usb 4-1: config 0 has no interface number 0 [ 536.753111][T22497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7779'. [ 536.767621][ T5848] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 536.781012][ T5848] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 536.811809][ T5848] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 536.822120][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 536.845600][ T5848] usb 4-1: Product: syz [ 536.866221][ T5848] usb 4-1: SerialNumber: syz [ 536.874059][ T5848] usb 4-1: config 0 descriptor?? [ 536.891071][ T5848] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 536.907159][ T5848] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input52 [ 537.095137][T22513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7787'. [ 537.140023][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 537.141206][ T5953] usb 4-1: USB disconnect, device number 58 [ 537.147020][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 537.190314][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 537.209330][ T5953] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 537.353384][T22524] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7791'. [ 537.617262][T22532] hugetlbfs: Bad value '%' for mount option 'size' [ 537.617262][T22532] [ 537.891504][T22544] sp0: Synchronizing with TNC [ 538.027899][ T5848] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 538.095307][T22558] netlink: 'syz.3.7808': attribute type 12 has an invalid length. [ 538.168146][T22564] input input53: cannot allocate more than FF_MAX_EFFECTS effects [ 538.218180][ T5848] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 538.240275][ T5848] usb 5-1: config 0 interface 0 has no altsetting 0 [ 538.256168][ T5848] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 538.277533][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.319365][ T5848] usb 5-1: config 0 descriptor?? [ 538.736007][ T5848] kye 0003:0458:5016.0079: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 538.764654][ T5848] kye 0003:0458:5016.0079: hidraw0: USB HID v0.0f Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 538.779117][ T5848] kye 0003:0458:5016.0079: tablet-enabling feature report not found [ 538.789383][ T5848] kye 0003:0458:5016.0079: tablet enabling failed [ 538.938754][ T5848] usb 5-1: USB disconnect, device number 59 [ 538.959054][T22601] netlink: 'syz.0.7827': attribute type 4 has an invalid length. [ 539.811523][T22649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.653442][T22694] netlink: 'syz.3.7873': attribute type 16 has an invalid length. [ 540.686288][ T2151] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 540.836483][ T2151] usb 3-1: Using ep0 maxpacket: 16 [ 540.842963][T22704] __nla_validate_parse: 3 callbacks suppressed [ 540.842981][T22704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7878'. [ 540.877930][ T2151] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 540.886312][ T2151] usb 3-1: config 0 has no interface number 0 [ 540.906391][ T2151] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 540.936169][ T2151] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 540.959865][ T2151] usb 3-1: config 0 interface 41 has no altsetting 0 [ 540.982727][ T2151] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 540.996344][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.016607][ T2151] usb 3-1: Product: syz [ 541.026456][ T2151] usb 3-1: Manufacturer: syz [ 541.033026][ T2151] usb 3-1: SerialNumber: syz [ 541.040963][ T2151] usb 3-1: config 0 descriptor?? [ 541.047277][T22684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 541.055160][T22684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 541.268190][T22684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 541.275625][T22684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 541.317460][ T5848] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 541.416873][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 541.476845][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 541.484784][ T5848] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.495560][ T5848] usb 4-1: config 0 has no interface number 0 [ 541.502436][ T5848] usb 4-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.514549][ T5848] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 541.527094][ T5848] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 541.538900][ T5848] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 541.549184][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.561295][ T5848] usb 4-1: config 0 descriptor?? [ 541.569091][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.583937][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.596753][ T5848] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 541.607737][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 541.622343][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.634179][ T9] usb 5-1: config 0 descriptor?? [ 541.693252][ T2151] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 541.712010][ T2151] usb 3-1: USB disconnect, device number 61 [ 541.791822][ T5848] usb 4-1: USB disconnect, device number 59 [ 542.052061][ T9] hid-steam 0003:28DE:1142.007A: unknown main item tag 0x0 [ 542.060938][ T9] hid-steam 0003:28DE:1142.007A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 542.107731][ T5910] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 542.127167][ T9] hid-steam 0003:28DE:1142.007A: Steam wireless receiver connected [ 542.135987][ T9] hid-steam 0003:28DE:1142.007A: No HID_FEATURE_REPORT submitted - nothing to read [ 542.150133][ T9] hid-steam 0003:28DE:1142.007B: unknown main item tag 0x0 [ 542.164122][ T9] hid-steam 0003:28DE:1142.007B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 542.253932][ T9] usb 5-1: USB disconnect, device number 60 [ 542.275977][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 542.285658][ T9] hid-steam 0003:28DE:1142.007A: Steam wireless receiver disconnected [ 542.314601][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.337375][ T5910] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 542.352685][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.368608][ T5910] usb 2-1: config 0 descriptor?? [ 542.807850][ T5910] cypress 0003:04B4:07B1.007C: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.1-1/input0 [ 543.021918][ T5953] usb 2-1: USB disconnect, device number 53 [ 543.454394][T22777] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 543.854552][T22798] Mount JFS Failure: -22 [ 544.075036][T22811] netlink: 'syz.2.7931': attribute type 5 has an invalid length. [ 544.957433][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7952'. [ 544.989051][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7952'. [ 544.999814][T22857] netlink: 'syz.3.7952': attribute type 15 has an invalid length. [ 545.013986][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7953'. [ 545.868716][ T5917] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 546.049821][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.098241][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.121698][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.152363][ T5917] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.182908][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.217899][ T5917] usb 2-1: config 0 descriptor?? [ 546.417479][T22918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7981'. [ 546.665045][ T5917] plantronics 0003:047F:FFFF.007D: collection stack underflow [ 546.683472][ T5917] plantronics 0003:047F:FFFF.007D: item 0 2 0 12 parsing failed [ 546.694536][ T5917] plantronics 0003:047F:FFFF.007D: parse failed [ 546.703526][ T5917] plantronics 0003:047F:FFFF.007D: probe with driver plantronics failed with error -22 [ 546.858384][ T2151] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 546.885149][ T5949] usb 2-1: USB disconnect, device number 54 [ 547.048326][ T2151] usb 5-1: config 0 has an invalid interface number: 139 but max is 0 [ 547.061856][ T2151] usb 5-1: config 0 has no interface number 0 [ 547.072240][ T2151] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 547.087914][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.103805][ T2151] usb 5-1: Product: syz [ 547.108189][ T2151] usb 5-1: Manufacturer: syz [ 547.113363][ T2151] usb 5-1: SerialNumber: syz [ 547.123671][ T2151] usb 5-1: config 0 descriptor?? [ 547.337134][ T2151] mct_u232 5-1:0.139: MCT U232 converter detected [ 547.351388][ T2151] mct_u232 ttyUSB0: expected endpoint missing [ 547.376636][ T2151] usb 5-1: USB disconnect, device number 61 [ 547.390633][ T2151] mct_u232 5-1:0.139: device disconnected [ 547.676339][ T5949] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 547.786549][ T5953] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 547.848865][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.860220][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.871989][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 547.885150][ T5949] usb 4-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 547.894409][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.906336][ T5949] usb 4-1: config 0 descriptor?? [ 547.966377][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 547.979339][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 547.992665][ T5953] usb 3-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 548.005247][ T5953] usb 3-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 548.022110][ T5953] usb 3-1: config 4 interface 0 has no altsetting 0 [ 548.034603][ T5953] usb 3-1: string descriptor 0 read error: -22 [ 548.041561][ T5953] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 548.053299][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.084183][ T5953] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 548.097340][ T5953] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 548.121964][ T5953] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 548.131641][ T5953] usb 3-1: media controller created [ 548.173062][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 548.313173][T22986] netlink: 'syz.4.8014': attribute type 2 has an invalid length. [ 548.333127][ T5949] hid-generic 0003:045E:008E.007E: unbalanced collection at end of report description [ 548.353557][ T5949] hid-generic 0003:045E:008E.007E: probe with driver hid-generic failed with error -22 [ 548.531748][ T5949] usb 4-1: USB disconnect, device number 60 [ 548.772299][ T5917] kernel write not supported for file /dsp1 (pid: 5917 comm: kworker/0:6) [ 548.798651][T23004] can0: slcan on ptm0. [ 548.858321][T23003] can0 (unregistered): slcan off ptm0. [ 548.929981][T23006] netlink: 'syz.4.8024': attribute type 21 has an invalid length. [ 548.943797][T23006] netlink: 'syz.4.8024': attribute type 21 has an invalid length. [ 548.953662][T23006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8024'. [ 549.239930][T22971] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 549.247256][ T5953] zl10353_read_register: readreg error (reg=127, ret==0) [ 549.337397][ T5953] usb 3-1: USB disconnect, device number 62 [ 549.558511][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8036'. [ 549.571097][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8036'. [ 549.583718][T23034] netlink: 'syz.3.8036': attribute type 7 has an invalid length. [ 549.795141][T23047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8042'. [ 550.166685][ T5953] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 550.316586][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 550.323771][ T5953] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.338462][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.352644][ T5953] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.362528][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.373772][ T5953] usb 3-1: Product: syz [ 550.379135][ T5953] usb 3-1: Manufacturer: syz [ 550.384000][ T5953] usb 3-1: SerialNumber: syz [ 550.484035][T23071] veth1_macvtap: left promiscuous mode [ 550.491248][T23071] macsec0: entered allmulticast mode [ 550.508809][T23071] veth1_macvtap: entered promiscuous mode [ 550.514818][T23071] veth1_macvtap: entered allmulticast mode [ 550.521202][T23071] macsec0: left allmulticast mode [ 550.536298][T23071] veth1_macvtap: left allmulticast mode [ 550.605736][ T5953] usb 3-1: 0:2 : does not exist [ 550.620871][ T5953] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 550.667987][ T5953] usb 3-1: USB disconnect, device number 63 [ 551.206277][ T5953] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 551.376223][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 551.386258][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.406528][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.416891][ T5953] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 551.427620][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.445688][ T5953] usb 2-1: config 0 descriptor?? [ 551.881868][ T5953] hid-multitouch 0003:1FD2:6007.007F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 551.993771][T23141] nbd: socks must be embedded in a SOCK_ITEM attr [ 552.093869][ T5953] usb 2-1: USB disconnect, device number 55 [ 552.162975][T23148] netlink: 'syz.3.8091': attribute type 1 has an invalid length. [ 552.376853][ T30] audit: type=1326 audit(1754994146.597:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23151 comm="syz.3.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 552.424045][ T30] audit: type=1326 audit(1754994146.597:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23151 comm="syz.3.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 552.489300][ T30] audit: type=1326 audit(1754994146.607:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23151 comm="syz.3.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 552.557985][ T30] audit: type=1326 audit(1754994146.607:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23151 comm="syz.3.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 552.617705][ T30] audit: type=1326 audit(1754994146.607:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23151 comm="syz.3.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff688b8ebe9 code=0x7ffc0000 [ 552.886966][T23170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8101'. [ 552.941540][T23170] vxcan5: entered promiscuous mode [ 553.083869][T23180] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8106'. [ 553.098221][T23180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8106'. [ 553.187867][ T5953] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 553.351894][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.374746][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.398911][ T5953] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 553.419484][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.439017][ T5953] usb 4-1: config 0 descriptor?? [ 553.885795][ T5953] logitech 0003:046D:C29C.0080: unknown main item tag 0x0 [ 553.903496][ T5953] logitech 0003:046D:C29C.0080: unknown main item tag 0x0 [ 553.921894][ T5953] logitech 0003:046D:C29C.0080: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 554.109068][ T5953] logitech 0003:046D:C29C.0080: no inputs found [ 554.125012][ T5953] usb 4-1: USB disconnect, device number 61 [ 554.611595][ T30] audit: type=1326 audit(1754994148.847:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23241 comm="syz.4.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 554.633259][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.635668][T23244] loop4: detected capacity change from 0 to 524255232 [ 554.645076][ T30] audit: type=1326 audit(1754994148.847:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23241 comm="syz.4.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 554.670774][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.684078][ T30] audit: type=1326 audit(1754994148.887:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23241 comm="syz.4.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 554.709200][ T30] audit: type=1326 audit(1754994148.907:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23241 comm="syz.4.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 554.802932][ T30] audit: type=1326 audit(1754994148.907:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23245 comm="syz.4.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14addc14a5 code=0x7ffc0000 [ 555.055535][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.064634][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.082655][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.097018][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.113384][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.135452][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.155793][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.173365][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.182852][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.191959][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.200634][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.208719][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.242408][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.255577][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.266992][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.275030][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.287298][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.295609][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.311923][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.325771][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.333936][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.344972][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.353178][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.375859][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.393688][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.402824][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.412441][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.421878][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.441837][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.451970][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.462547][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.470529][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.478535][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.486821][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.494730][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.504624][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.526314][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.542389][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.556192][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.573946][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.594448][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.605635][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.613524][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.622685][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.630769][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.642810][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.653249][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.663249][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.673030][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.681217][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.689845][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.698295][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.705827][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.714801][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.727822][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.735338][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.743535][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.755022][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.762865][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.772249][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.780243][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.788603][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.796052][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.804420][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.834796][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.842995][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.856647][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.867504][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.875737][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.905510][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.919658][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.928474][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.936064][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.943903][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.951562][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.959392][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.968035][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.975719][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.983693][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 555.991710][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 556.000712][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 556.009377][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 556.017678][ T5953] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 556.033970][ T5953] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz0] on syz0 [ 556.307775][T23297] program syz.2.8158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.867059][T23322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8173'. [ 557.197135][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8181'. [ 557.606359][ T5949] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 557.754933][T23363] netlink: 'syz.0.8195': attribute type 7 has an invalid length. [ 557.775296][T23363] netlink: 'syz.0.8195': attribute type 8 has an invalid length. [ 557.786240][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 557.795977][T23363] netlink: 'syz.0.8195': attribute type 4 has an invalid length. [ 557.803397][ T5949] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 557.825518][T23363] netlink: 212 bytes leftover after parsing attributes in process `syz.0.8195'. [ 557.832674][ T5949] usb 3-1: config 0 has no interface number 0 [ 557.863430][ T5949] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 557.906231][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.936506][ T5949] usb 3-1: Product: syz [ 557.940788][ T5949] usb 3-1: Manufacturer: syz [ 557.945419][ T5949] usb 3-1: SerialNumber: syz [ 557.973906][ T5949] usb 3-1: config 0 descriptor?? [ 558.017977][ T5949] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 558.259574][ T5949] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 558.310768][ T5949] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 558.452536][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 558.656630][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 558.665748][ T5949] usb 3-1: USB disconnect, device number 64 [ 558.679405][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 558.679422][ T30] audit: type=1326 audit(1754994152.917:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23397 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a038ebe9 code=0x7ffc0000 [ 558.707123][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.707866][ T5949] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 558.711442][ T5949] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 558.717364][ T9] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 558.748305][ T5949] quatech2 3-1:0.51: device disconnected [ 558.786878][ T30] audit: type=1326 audit(1754994152.917:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23397 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a038ebe9 code=0x7ffc0000 [ 558.929205][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.940042][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 558.957470][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 559.006775][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.040170][ T9] usb 2-1: config 0 descriptor?? [ 559.072425][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 559.080975][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 559.099827][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 559.134507][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 559.156615][ T9] usb 2-1: media controller created [ 559.174157][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 559.209987][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 559.223203][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 559.249791][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 559.274975][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 559.298326][T23390] dvb-usb: bulk message failed: -22 (2/0) [ 559.314268][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 559.342105][ T9] usb 2-1: USB disconnect, device number 56 [ 559.403859][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 559.972480][T23445] netlink: 'syz.3.8233': attribute type 1 has an invalid length. [ 560.041509][T23445] netlink: 'syz.3.8233': attribute type 2 has an invalid length. [ 561.102961][T23487] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8252'. [ 561.136781][ T5949] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 561.297340][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 561.310809][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.321769][ T5949] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 561.329456][ T30] audit: type=1326 audit(1754994155.567:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23488 comm="syz.0.8254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a038ebe9 code=0x0 [ 561.331782][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.403441][ T5949] usb 2-1: Product: syz [ 561.417090][ T5949] usb 2-1: Manufacturer: syz [ 561.421760][ T5949] usb 2-1: SerialNumber: syz [ 561.429937][ T5949] usb 2-1: config 0 descriptor?? [ 561.847114][ T5949] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 562.097165][T23511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8263'. [ 562.251229][ T5949] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 562.294067][ T5949] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 562.369879][ T5949] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 562.398556][ T5949] usb 2-1: USB disconnect, device number 57 [ 562.721813][T23522] program syz.4.8268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.880498][T23529] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 563.372224][T23554] input: syz1 as /devices/virtual/input/input55 [ 563.551643][T23561] wireguard: wg0: Could not create IPv4 socket [ 564.004518][ T51] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 564.079824][T23587] evm: overlay not supported [ 564.080274][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8301'. [ 564.586411][ T5949] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 564.621829][T23612] random: crng reseeded on system resumption [ 564.748421][ T5949] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 564.762353][ T5949] usb 5-1: config 0 has no interface number 0 [ 564.776544][ T5949] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.796880][ T5949] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.826153][ T5949] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.842642][ T5949] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 564.851842][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.863089][ T5949] usb 5-1: config 0 descriptor?? [ 565.116285][ T2151] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 565.177634][T23631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8320'. [ 565.187233][T23631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8320'. [ 565.276585][ T2151] usb 3-1: Using ep0 maxpacket: 8 [ 565.284865][ T5949] hid (null): report_id 35660 is invalid [ 565.293005][ T2151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.307515][ T2151] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 565.317792][ T2151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.329629][ T2151] usb 3-1: config 0 descriptor?? [ 565.507941][ T5949] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0082/input/input56 [ 565.516885][ T5917] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 565.582850][ T5949] uclogic 0003:28BD:0042.0082: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 565.602745][ T5949] usb 5-1: USB disconnect, device number 62 [ 565.686770][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 565.732883][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 565.752042][ T2151] hid-multitouch 0003:0EEF:72C4.0083: unknown main item tag 0x0 [ 565.757024][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 565.776687][ T2151] hid-multitouch 0003:0EEF:72C4.0083: unknown main item tag 0x0 [ 565.795769][ T2151] hid-multitouch 0003:0EEF:72C4.0083: unknown main item tag 0x0 [ 565.801429][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 565.813872][ T2151] hid-multitouch 0003:0EEF:72C4.0083: unknown main item tag 0x0 [ 565.822526][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.832429][ T2151] hid-multitouch 0003:0EEF:72C4.0083: unknown main item tag 0x0 [ 565.835683][ T2151] hid-multitouch 0003:0EEF:72C4.0083: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 565.869944][ T5917] usb 2-1: Product: syz [ 565.878353][ T5917] usb 2-1: Manufacturer: syz [ 565.883019][ T5917] usb 2-1: SerialNumber: syz [ 565.909349][ T5917] usb 2-1: config 0 descriptor?? [ 565.920641][ T5917] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 565.947811][ T5917] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 566.052073][ T5910] usb 3-1: USB disconnect, device number 65 [ 566.523366][ T5917] em28xx 2-1:0.0: chip ID is em2870 [ 566.740164][ T2151] usb 2-1: USB disconnect, device number 58 [ 566.752335][ T2151] em28xx 2-1:0.0: Disconnecting em28xx [ 566.772828][ T2151] em28xx 2-1:0.0: Freeing device [ 567.530655][T23698] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.540820][T23698] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.550438][T23698] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.559713][T23698] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.219314][T23678] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 568.357603][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.364069][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.370887][T23779] program syz.1.8379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.474313][T23785] input: syz1 as /devices/virtual/input/input57 [ 569.477110][ T5910] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 569.640650][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 569.653201][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.670250][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 569.682437][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.698264][ T5910] usb 5-1: config 0 descriptor?? [ 569.708686][ T5910] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 570.347083][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 570.507597][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 570.522068][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.530245][ T5910] gspca_vc032x: reg_w err -71 [ 570.535048][ T5910] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 570.546880][ T9] usb 2-1: config 9 has an invalid interface number: 48 but max is 0 [ 570.558399][ T5910] usb 5-1: USB disconnect, device number 63 [ 570.564481][ T9] usb 2-1: config 9 has no interface number 0 [ 570.597545][ T9] usb 2-1: config 9 interface 48 has no altsetting 0 [ 570.615274][ T9] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 570.625943][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.651176][ T9] usb 2-1: Product: syz [ 570.655427][ T9] usb 2-1: Manufacturer: syz [ 570.675542][ T9] usb 2-1: SerialNumber: syz [ 570.922268][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 570.951283][T23819] hsr0: entered promiscuous mode [ 570.957820][T23819] macvtap1: entered promiscuous mode [ 570.963972][T23819] macvtap1: entered allmulticast mode [ 570.970291][T23819] hsr0: entered allmulticast mode [ 570.975451][T23819] hsr_slave_0: entered allmulticast mode [ 570.992667][T23819] hsr_slave_1: entered allmulticast mode [ 571.003193][T23819] hsr0: left allmulticast mode [ 571.009197][T23819] hsr_slave_0: left allmulticast mode [ 571.015680][T23819] hsr_slave_1: left allmulticast mode [ 571.525266][ T9] gspca_vc032x: reg_r err -71 [ 571.534973][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.557711][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.563167][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.606840][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.612224][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.637156][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.642534][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.658830][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.664199][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.688948][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.698466][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.703818][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.726746][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.737445][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.742802][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.767697][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.773182][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.787181][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.793580][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 571.827609][ T9] gspca_vc032x: Unknown sensor... [ 571.832867][ T9] vc032x 2-1:9.48: probe with driver vc032x failed with error -22 [ 571.859783][ T9] usb 2-1: USB disconnect, device number 59 [ 572.162091][T23861] macsec1: entered allmulticast mode [ 572.182800][T23861] hsr0: entered allmulticast mode [ 572.191950][T23861] hsr_slave_0: entered allmulticast mode [ 572.200785][T23861] hsr_slave_1: entered allmulticast mode [ 572.221167][T23861] hsr0: left allmulticast mode [ 572.233747][T23861] hsr_slave_0: left allmulticast mode [ 572.241484][T23861] hsr_slave_1: left allmulticast mode [ 572.265637][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8420'. [ 572.314900][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8420'. [ 572.945801][T23896] tap0: tun_chr_ioctl cmd 2147767521 [ 573.266680][ T2151] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 573.436666][ T2151] usb 4-1: Using ep0 maxpacket: 16 [ 573.452014][ T2151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.472545][ T2151] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 573.488674][T23924] syz_tun: entered allmulticast mode [ 573.489957][ T2151] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 573.504429][ T2151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.533787][ T2151] usb 4-1: config 0 descriptor?? [ 573.762587][ T2151] usbhid 4-1:0.0: can't add hid device: -71 [ 573.777874][ T2151] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 573.829423][ T2151] usb 4-1: USB disconnect, device number 62 [ 573.946906][T23939] block device autoloading is deprecated and will be removed. [ 574.400590][T23960] input: syz0 as /devices/virtual/input/input58 [ 574.941432][T23988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8474'. [ 575.046881][ T5917] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 575.101533][ T30] audit: type=1326 audit(1754994169.337:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 575.148187][ T30] audit: type=1326 audit(1754994169.337:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 575.206204][ T30] audit: type=1326 audit(1754994169.337:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 575.260817][ T30] audit: type=1326 audit(1754994169.337:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 575.312521][ T30] audit: type=1326 audit(1754994169.337:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 575.376725][ T30] audit: type=1326 audit(1754994169.357:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14add8ebe9 code=0x7ffc0000 [ 575.400983][ T5917] usb 3-1: device not accepting address 66, error -71 [ 575.436651][ T30] audit: type=1326 audit(1754994169.357:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14add85ba7 code=0x7ffc0000 [ 575.463522][ T30] audit: type=1326 audit(1754994169.357:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14add2add9 code=0x7ffc0000 [ 575.490572][ T30] audit: type=1326 audit(1754994169.357:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14add85ba7 code=0x7ffc0000 [ 575.513626][ T30] audit: type=1326 audit(1754994169.357:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23992 comm="syz.4.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14add2add9 code=0x7ffc0000 [ 575.833165][T24015] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 575.851681][T24014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8485'. [ 575.867662][T24014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8485'. [ 576.301562][T24036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8497'. [ 576.717090][T24058] tap0: tun_chr_ioctl cmd 2147767520 [ 576.835107][T24066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8511'. [ 576.877406][ T5917] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 576.956711][T24070] overlayfs: failed to resolve './file0': -2 [ 577.039430][ T5917] usb 2-1: config 107 has an invalid interface number: 170 but max is 0 [ 577.061731][ T5917] usb 2-1: config 107 has no interface number 0 [ 577.078454][ T5917] usb 2-1: config 107 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 1056, setting to 64 [ 577.106893][ T5917] usb 2-1: config 107 interface 170 altsetting 5 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 577.159807][ T5917] usb 2-1: config 107 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 577.191273][ T5917] usb 2-1: config 107 interface 170 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 577.225121][ T5917] usb 2-1: config 107 interface 170 has no altsetting 0 [ 577.258296][ T5917] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=25.b6 [ 577.277144][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.290433][ T5917] usb 2-1: Product: syz [ 577.294783][ T5917] usb 2-1: Manufacturer: syz [ 577.300033][ T5917] usb 2-1: SerialNumber: syz [ 577.528143][ T5917] keyspan 2-1:107.170: Keyspan 1 port adapter converter detected [ 577.552475][ T5917] keyspan 2-1:107.170: found no endpoint descriptor for endpoint 87 [ 577.569526][ T5917] keyspan 2-1:107.170: found no endpoint descriptor for endpoint 7 [ 577.581350][ T5910] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 577.620001][ T5917] keyspan 2-1:107.170: found no endpoint descriptor for endpoint 81 [ 577.633109][ T5917] keyspan 2-1:107.170: found no endpoint descriptor for endpoint 1 [ 577.645439][ T5917] keyspan 2-1:107.170: unsupported endpoint type 0 [ 577.654634][ T5917] keyspan 2-1:107.170: found no endpoint descriptor for endpoint 85 [ 577.668614][ T5917] keyspan 2-1:107.170: found no endpoint descriptor for endpoint 5 [ 577.679609][ T5917] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 577.726325][T24095] input: syz0 as /devices/virtual/input/input59 [ 577.729483][ T5917] usb 2-1: USB disconnect, device number 60 [ 577.766756][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 577.775118][ T5910] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 577.789991][ T5917] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 577.804357][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.815591][ T5917] keyspan 2-1:107.170: device disconnected [ 577.844116][ T5910] usb 5-1: config 0 descriptor?? [ 577.861662][ T5910] gspca_main: sq930x-2.14.0 probing 041e:403c [ 578.572011][T23668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.711336][T23668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.722877][ T5910] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 578.786873][ T5910] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 578.809612][ T5910] usb 5-1: USB disconnect, device number 64 [ 578.832478][T23668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.982907][T23668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.717036][T22862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 579.737843][T22862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 579.746507][T22862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 579.754698][T22862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 579.769507][T22862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 579.776748][ T5949] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 579.948950][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.979738][ T5949] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 579.999116][ T5949] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 580.008765][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.037090][ T5949] usb 4-1: config 0 descriptor?? [ 580.049595][ T5949] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 580.068263][ T5949] dvb-usb: bulk message failed: -22 (3/0) [ 580.094955][ T5949] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 580.111532][ T5949] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 580.120447][T23668] team0: Port device bridge1 removed [ 580.130683][ T5949] usb 4-1: media controller created [ 580.137818][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.150418][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 580.156438][ T5949] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 580.166589][ T5949] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60 [ 580.183360][ T5949] dvb-usb: schedule remote query interval to 150 msecs. [ 580.190646][ T5949] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 580.225594][T24140] netlink: 'syz.0.8545': attribute type 29 has an invalid length. [ 580.257842][T24154] hsr0: entered promiscuous mode [ 580.263067][T24154] macvtap1: entered promiscuous mode [ 580.285096][T24154] macvtap1: entered allmulticast mode [ 580.293789][T24154] hsr0: entered allmulticast mode [ 580.316983][T24154] hsr_slave_0: entered allmulticast mode [ 580.346238][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 580.346810][T24154] hsr_slave_1: entered allmulticast mode [ 580.353200][ T5949] dvb-usb: error while querying for an remote control event. [ 580.367506][T24154] hsr0: left allmulticast mode [ 580.372322][T24154] hsr_slave_0: left allmulticast mode [ 580.397447][T24154] hsr_slave_1: left allmulticast mode [ 580.454582][T24145] netlink: 'syz.0.8545': attribute type 29 has an invalid length. [ 580.477424][T23668] tipc: Left network mode [ 580.484594][T24147] vxcan1 speed is unknown, defaulting to 1000 [ 580.526167][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 580.537481][ T5949] dvb-usb: error while querying for an remote control event. [ 580.598258][T23668] IPVS: stopping master sync thread 17789 ... [ 580.618877][ T5949] usb 4-1: USB disconnect, device number 63 [ 580.740523][ T5949] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 580.976737][ T5910] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 581.073305][T24147] lo speed is unknown, defaulting to 1000 [ 581.138323][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 581.160831][ T5910] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 581.210765][ T5910] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 581.238806][ T5910] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 581.294302][ T5910] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 581.357983][ T5910] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 581.406978][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.671807][ T5910] usb 5-1: GET_CAPABILITIES returned 0 [ 581.716976][ T5910] usbtmc 5-1:16.0: can't read capabilities [ 581.811687][T23668] hsr_slave_0: left promiscuous mode [ 581.823920][T23668] hsr_slave_1: left promiscuous mode [ 581.866716][T22862] Bluetooth: hci4: command tx timeout [ 581.884626][ T5949] usb 5-1: USB disconnect, device number 65 [ 581.905414][T23668] veth0_macvtap: left promiscuous mode [ 581.925697][T23668] veth1_vlan: left promiscuous mode [ 581.947078][T23668] veth0_vlan: left promiscuous mode [ 582.013726][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8569'. [ 582.979950][T23668] team0 (unregistering): Port device team_slave_1 removed [ 583.112838][T23668] team0 (unregistering): Port device team_slave_0 removed [ 583.456807][ T5848] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 583.607030][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 583.620027][ T5848] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 583.636897][ T5848] usb 2-1: config 0 has no interface number 0 [ 583.643578][ T5848] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 583.672343][ T5848] usb 2-1: config 0 interface 196 has no altsetting 0 [ 583.697571][ T5848] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 583.712191][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.729312][ T5848] usb 2-1: Product: syz [ 583.744285][ T5848] usb 2-1: Manufacturer: syz [ 583.757686][ T5848] usb 2-1: SerialNumber: syz [ 583.774100][ T5848] usb 2-1: config 0 descriptor?? [ 583.790793][T23668] vxcan1 (unregistering): left allmulticast mode [ 583.793777][T24231] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 583.818407][T24240] ALSA: mixer_oss: invalid OSS volume 'XÍh8^' [ 583.835076][T24240] ALSA: mixer_oss: invalid OSS volume 'p' [ 583.951832][T22862] Bluetooth: hci4: command tx timeout [ 584.057572][T24244] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 584.271032][ T5848] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 584.302869][ T5848] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 584.486148][ T5848] usb 2-1: USB disconnect, device number 61 [ 585.090343][T24252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8594'. [ 585.174193][T24254] [ 585.176611][T24254] ===================================================== [ 585.183613][T24254] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 585.191111][T24254] 6.16.0-syzkaller #0 Not tainted [ 585.196162][T24254] ----------------------------------------------------- [ 585.203119][T24254] syz.0.8595/24254 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 585.210876][T24254] ffff888011871c20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 585.219572][T24254] [ 585.219572][T24254] and this task is already holding: [ 585.226988][T24254] ffff8880279ee2b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 585.235760][T24254] which would create a new lock dependency: [ 585.241677][T24254] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 585.249324][T24254] [ 585.249324][T24254] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 585.258841][T24254] (&dev->event_lock#2){..-.}-{3:3} [ 585.258894][T24254] [ 585.258894][T24254] ... which became SOFTIRQ-irq-safe at: [ 585.271859][T24254] lock_acquire+0x120/0x360 [ 585.276488][T24254] _raw_spin_lock_irqsave+0xa7/0xf0 [ 585.281827][T24254] input_inject_event+0xab/0x320 [ 585.286903][T24254] led_trigger_event+0x138/0x210 [ 585.292065][T24254] kbd_bh+0x1c6/0x2e0 [ 585.296178][T24254] tasklet_action_common+0x369/0x580 [ 585.301606][T24254] handle_softirqs+0x283/0x870 [ 585.306492][T24254] run_ksoftirqd+0x9b/0x100 [ 585.311132][T24254] smpboot_thread_fn+0x53f/0xa60 [ 585.316195][T24254] kthread+0x70e/0x8a0 [ 585.320395][T24254] ret_from_fork+0x3fc/0x770 [ 585.325090][T24254] ret_from_fork_asm+0x1a/0x30 [ 585.330068][T24254] [ 585.330068][T24254] to a SOFTIRQ-irq-unsafe lock: [ 585.337095][T24254] (tasklist_lock){.+.+}-{3:3} [ 585.337125][T24254] [ 585.337125][T24254] ... which became SOFTIRQ-irq-unsafe at: [ 585.349776][T24254] ... [ 585.349786][T24254] lock_acquire+0x120/0x360 [ 585.356979][T24254] _raw_read_lock+0x36/0x50 [ 585.361670][T24254] __do_wait+0xde/0x740 [ 585.366016][T24254] do_wait+0x1f8/0x520 [ 585.370201][T24254] kernel_wait+0xab/0x170 [ 585.374655][T24254] call_usermodehelper_exec_work+0xbe/0x230 [ 585.380648][T24254] process_scheduled_works+0xade/0x17b0 [ 585.386307][T24254] worker_thread+0x8a0/0xda0 [ 585.391000][T24254] kthread+0x70e/0x8a0 [ 585.395188][T24254] ret_from_fork+0x3fc/0x770 [ 585.399878][T24254] ret_from_fork_asm+0x1a/0x30 [ 585.404759][T24254] [ 585.404759][T24254] other info that might help us debug this: [ 585.404759][T24254] [ 585.414998][T24254] Chain exists of: [ 585.414998][T24254] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 585.414998][T24254] [ 585.428009][T24254] Possible interrupt unsafe locking scenario: [ 585.428009][T24254] [ 585.436343][T24254] CPU0 CPU1 [ 585.441721][T24254] ---- ---- [ 585.447100][T24254] lock(tasklist_lock); [ 585.451364][T24254] local_irq_disable(); [ 585.458133][T24254] lock(&dev->event_lock#2); [ 585.465355][T24254] lock(&new->fa_lock); [ 585.472140][T24254] [ 585.475619][T24254] lock(&dev->event_lock#2); [ 585.480529][T24254] [ 585.480529][T24254] *** DEADLOCK *** [ 585.480529][T24254] [ 585.488678][T24254] 4 locks held by syz.0.8595/24254: [ 585.493878][T24254] #0: ffffffff8e2aebf0 (file_rwsem){++++}-{0:0}, at: __break_lease+0x37f/0x1620 [ 585.503057][T24254] #1: ffff888029f72bc8 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x387/0x1620 [ 585.512602][T24254] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 585.521692][T24254] #3: ffff8880279ee2b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 585.530874][T24254] [ 585.530874][T24254] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 585.541301][T24254] -> (&dev->event_lock#2){..-.}-{3:3} { [ 585.547067][T24254] IN-SOFTIRQ-W at: [ 585.551252][T24254] lock_acquire+0x120/0x360 [ 585.557765][T24254] _raw_spin_lock_irqsave+0xa7/0xf0 [ 585.565001][T24254] input_inject_event+0xab/0x320 [ 585.571972][T24254] led_trigger_event+0x138/0x210 [ 585.578936][T24254] kbd_bh+0x1c6/0x2e0 [ 585.584933][T24254] tasklet_action_common+0x369/0x580 [ 585.592239][T24254] handle_softirqs+0x283/0x870 [ 585.599027][T24254] run_ksoftirqd+0x9b/0x100 [ 585.605553][T24254] smpboot_thread_fn+0x53f/0xa60 [ 585.612506][T24254] kthread+0x70e/0x8a0 [ 585.618585][T24254] ret_from_fork+0x3fc/0x770 [ 585.625187][T24254] ret_from_fork_asm+0x1a/0x30 [ 585.631972][T24254] INITIAL USE at: [ 585.636058][T24254] lock_acquire+0x120/0x360 [ 585.642524][T24254] _raw_spin_lock_irqsave+0xa7/0xf0 [ 585.649668][T24254] input_inject_event+0xab/0x320 [ 585.656536][T24254] kbd_led_trigger_activate+0xbc/0x100 [ 585.663932][T24254] led_trigger_set+0x52d/0x950 [ 585.670634][T24254] led_trigger_set_default+0x260/0x2a0 [ 585.678027][T24254] led_classdev_register_ext+0x73d/0x930 [ 585.685602][T24254] input_leds_connect+0x517/0x790 [ 585.692556][T24254] input_register_device+0xceb/0x10b0 [ 585.699896][T24254] atkbd_connect+0x70e/0x9c0 [ 585.706416][T24254] serio_driver_probe+0x82/0xa0 [ 585.713195][T24254] really_probe+0x26a/0x9a0 [ 585.719619][T24254] __driver_probe_device+0x18c/0x2f0 [ 585.726841][T24254] driver_probe_device+0x4f/0x430 [ 585.733813][T24254] __driver_attach+0x452/0x700 [ 585.740494][T24254] bus_for_each_dev+0x230/0x2b0 [ 585.747268][T24254] serio_handle_event+0x1a2/0x860 [ 585.754229][T24254] process_scheduled_works+0xade/0x17b0 [ 585.761702][T24254] worker_thread+0x8a0/0xda0 [ 585.768223][T24254] kthread+0x70e/0x8a0 [ 585.774226][T24254] ret_from_fork+0x3fc/0x770 [ 585.780738][T24254] ret_from_fork_asm+0x1a/0x30 [ 585.787434][T24254] } [ 585.790111][T24254] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 585.799331][T24254] -> (&client->buffer_lock){....}-{3:3} { [ 585.805166][T24254] INITIAL USE at: [ 585.809160][T24254] lock_acquire+0x120/0x360 [ 585.815409][T24254] _raw_spin_lock+0x2e/0x40 [ 585.821688][T24254] evdev_pass_values+0xb9/0xbd0 [ 585.828288][T24254] evdev_events+0x1e6/0x340 [ 585.834570][T24254] input_pass_values+0x285/0x890 [ 585.841264][T24254] input_event_dispose+0x330/0x6b0 [ 585.848159][T24254] input_inject_event+0x1fe/0x320 [ 585.854948][T24254] evdev_write+0x2fc/0x480 [ 585.861141][T24254] vfs_write+0x27e/0xa90 [ 585.867140][T24254] ksys_write+0x145/0x250 [ 585.873219][T24254] do_syscall_64+0xfa/0x3b0 [ 585.879486][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.887207][T24254] } [ 585.889817][T24254] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 585.898097][T24254] ... acquired at: [ 585.902013][T24254] lock_acquire+0x120/0x360 [ 585.906716][T24254] _raw_spin_lock+0x2e/0x40 [ 585.911426][T24254] evdev_pass_values+0xb9/0xbd0 [ 585.916476][T24254] evdev_events+0x1e6/0x340 [ 585.921194][T24254] input_pass_values+0x285/0x890 [ 585.926350][T24254] input_event_dispose+0x330/0x6b0 [ 585.931666][T24254] input_inject_event+0x1fe/0x320 [ 585.936899][T24254] evdev_write+0x2fc/0x480 [ 585.941513][T24254] vfs_write+0x27e/0xa90 [ 585.945948][T24254] ksys_write+0x145/0x250 [ 585.950473][T24254] do_syscall_64+0xfa/0x3b0 [ 585.955190][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.961284][T24254] [ 585.963623][T24254] -> (&new->fa_lock){....}-{3:3} { [ 585.968803][T24254] INITIAL USE at: [ 585.972708][T24254] lock_acquire+0x120/0x360 [ 585.978797][T24254] _raw_write_lock_irq+0xa2/0xf0 [ 585.985332][T24254] fasync_remove_entry+0xf1/0x1c0 [ 585.991987][T24254] lease_modify+0x1ca/0x3c0 [ 585.998091][T24254] locks_remove_file+0x4bf/0xea0 [ 586.004638][T24254] __fput+0x3ab/0xa70 [ 586.010202][T24254] task_work_run+0x1d1/0x260 [ 586.016487][T24254] exit_to_user_mode_loop+0xec/0x110 [ 586.023353][T24254] do_syscall_64+0x2bd/0x3b0 [ 586.029534][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.037009][T24254] INITIAL READ USE at: [ 586.041354][T24254] lock_acquire+0x120/0x360 [ 586.047880][T24254] _raw_read_lock_irqsave+0xaf/0x100 [ 586.055183][T24254] kill_fasync+0x199/0x4d0 [ 586.061625][T24254] sock_wake_async+0x137/0x160 [ 586.068415][T24254] sk_wake_async+0x184/0x280 [ 586.075032][T24254] unix_shutdown+0x2f5/0x3f0 [ 586.081644][T24254] __x64_sys_shutdown+0x13c/0x1a0 [ 586.088786][T24254] do_syscall_64+0xfa/0x3b0 [ 586.095339][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.103437][T24254] } [ 586.105962][T24254] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 586.114701][T24254] ... acquired at: [ 586.118520][T24254] lock_acquire+0x120/0x360 [ 586.123209][T24254] _raw_read_lock_irqsave+0xaf/0x100 [ 586.128692][T24254] kill_fasync+0x199/0x4d0 [ 586.133308][T24254] evdev_pass_values+0x627/0xbd0 [ 586.138442][T24254] evdev_events+0x1e6/0x340 [ 586.143159][T24254] input_pass_values+0x285/0x890 [ 586.148308][T24254] input_event_dispose+0x330/0x6b0 [ 586.153633][T24254] input_inject_event+0x1fe/0x320 [ 586.158866][T24254] evdev_write+0x2fc/0x480 [ 586.163479][T24254] vfs_write+0x27e/0xa90 [ 586.167928][T24254] ksys_write+0x145/0x250 [ 586.172463][T24254] do_syscall_64+0xfa/0x3b0 [ 586.177167][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.183278][T24254] [ 586.185617][T24254] [ 586.185617][T24254] the dependencies between the lock to be acquired [ 586.185628][T24254] and SOFTIRQ-irq-unsafe lock: [ 586.199277][T24254] -> (tasklist_lock){.+.+}-{3:3} { [ 586.204548][T24254] HARDIRQ-ON-R at: [ 586.208635][T24254] lock_acquire+0x120/0x360 [ 586.215017][T24254] _raw_read_lock+0x36/0x50 [ 586.221366][T24254] __do_wait+0xde/0x740 [ 586.227378][T24254] do_wait+0x1f8/0x520 [ 586.233295][T24254] kernel_wait+0xab/0x170 [ 586.239480][T24254] call_usermodehelper_exec_work+0xbe/0x230 [ 586.247313][T24254] process_scheduled_works+0xade/0x17b0 [ 586.254748][T24254] worker_thread+0x8a0/0xda0 [ 586.261196][T24254] kthread+0x70e/0x8a0 [ 586.267121][T24254] ret_from_fork+0x3fc/0x770 [ 586.273557][T24254] ret_from_fork_asm+0x1a/0x30 [ 586.280174][T24254] SOFTIRQ-ON-R at: [ 586.284269][T24254] lock_acquire+0x120/0x360 [ 586.290693][T24254] _raw_read_lock+0x36/0x50 [ 586.297071][T24254] __do_wait+0xde/0x740 [ 586.303093][T24254] do_wait+0x1f8/0x520 [ 586.309016][T24254] kernel_wait+0xab/0x170 [ 586.315210][T24254] call_usermodehelper_exec_work+0xbe/0x230 [ 586.322977][T24254] process_scheduled_works+0xade/0x17b0 [ 586.330368][T24254] worker_thread+0x8a0/0xda0 [ 586.336809][T24254] kthread+0x70e/0x8a0 [ 586.342729][T24254] ret_from_fork+0x3fc/0x770 [ 586.349168][T24254] ret_from_fork_asm+0x1a/0x30 [ 586.355780][T24254] INITIAL USE at: [ 586.359809][T24254] lock_acquire+0x120/0x360 [ 586.366078][T24254] _raw_write_lock_irq+0xa2/0xf0 [ 586.372796][T24254] copy_process+0x21d5/0x3b80 [ 586.379242][T24254] kernel_clone+0x224/0x7f0 [ 586.385514][T24254] user_mode_thread+0xdd/0x140 [ 586.392041][T24254] rest_init+0x23/0x300 [ 586.397962][T24254] start_kernel+0x47d/0x500 [ 586.404313][T24254] x86_64_start_reservations+0x24/0x30 [ 586.411552][T24254] x86_64_start_kernel+0x143/0x1c0 [ 586.418427][T24254] common_startup_64+0x13e/0x147 [ 586.425122][T24254] INITIAL READ USE at: [ 586.429577][T24254] lock_acquire+0x120/0x360 [ 586.436279][T24254] _raw_read_lock+0x36/0x50 [ 586.442979][T24254] __do_wait+0xde/0x740 [ 586.449358][T24254] do_wait+0x1f8/0x520 [ 586.455623][T24254] kernel_wait+0xab/0x170 [ 586.462164][T24254] call_usermodehelper_exec_work+0xbe/0x230 [ 586.470337][T24254] process_scheduled_works+0xade/0x17b0 [ 586.478179][T24254] worker_thread+0x8a0/0xda0 [ 586.484996][T24254] kthread+0x70e/0x8a0 [ 586.491274][T24254] ret_from_fork+0x3fc/0x770 [ 586.498165][T24254] ret_from_fork_asm+0x1a/0x30 [ 586.505134][T24254] } [ 586.507729][T24254] ... key at: [] tasklist_lock+0x18/0x40 [ 586.515565][T24254] ... acquired at: [ 586.519484][T24254] lock_acquire+0x120/0x360 [ 586.524176][T24254] _raw_read_lock+0x36/0x50 [ 586.528867][T24254] send_sigurg+0x12b/0x420 [ 586.533480][T24254] sk_send_sigurg+0x6c/0x2e0 [ 586.538287][T24254] queue_oob+0x490/0x5a0 [ 586.542725][T24254] unix_stream_sendmsg+0xaf9/0xc90 [ 586.548032][T24254] __sock_sendmsg+0x21c/0x270 [ 586.552931][T24254] ____sys_sendmsg+0x52d/0x830 [ 586.557887][T24254] ___sys_sendmsg+0x21f/0x2a0 [ 586.562774][T24254] __sys_sendmmsg+0x227/0x430 [ 586.567676][T24254] __x64_sys_sendmmsg+0xa0/0xc0 [ 586.572734][T24254] do_syscall_64+0xfa/0x3b0 [ 586.577458][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.583548][T24254] [ 586.585883][T24254] -> (&f_owner->lock){....}-{3:3} { [ 586.591137][T24254] INITIAL USE at: [ 586.595044][T24254] lock_acquire+0x120/0x360 [ 586.601123][T24254] _raw_write_lock_irq+0xa2/0xf0 [ 586.607638][T24254] __f_setown+0x67/0x370 [ 586.613470][T24254] fcntl_dirnotify+0x3fa/0x6a0 [ 586.619848][T24254] do_fcntl+0x6d0/0x1910 [ 586.625677][T24254] __se_sys_fcntl+0xc8/0x150 [ 586.631960][T24254] do_syscall_64+0xfa/0x3b0 [ 586.638079][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.645555][T24254] INITIAL READ USE at: [ 586.649914][T24254] lock_acquire+0x120/0x360 [ 586.656433][T24254] _raw_read_lock_irqsave+0xaf/0x100 [ 586.663733][T24254] send_sigurg+0x55/0x420 [ 586.670086][T24254] sk_send_sigurg+0x6c/0x2e0 [ 586.676696][T24254] queue_oob+0x490/0x5a0 [ 586.682956][T24254] unix_stream_sendmsg+0xaf9/0xc90 [ 586.690079][T24254] __sock_sendmsg+0x21c/0x270 [ 586.696770][T24254] ____sys_sendmsg+0x52d/0x830 [ 586.703574][T24254] ___sys_sendmsg+0x21f/0x2a0 [ 586.710285][T24254] __sys_sendmmsg+0x227/0x430 [ 586.716997][T24254] __x64_sys_sendmmsg+0xa0/0xc0 [ 586.723892][T24254] do_syscall_64+0xfa/0x3b0 [ 586.730435][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.738349][T24254] } [ 586.740860][T24254] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 586.749738][T24254] ... acquired at: [ 586.753677][T24254] lock_acquire+0x120/0x360 [ 586.758378][T24254] _raw_read_lock_irqsave+0xaf/0x100 [ 586.763882][T24254] send_sigio+0x38/0x370 [ 586.768332][T24254] kill_fasync+0x24d/0x4d0 [ 586.772960][T24254] lease_break_callback+0x26/0x30 [ 586.778201][T24254] __break_lease+0x6a5/0x1620 [ 586.783078][T24254] do_dentry_open+0xd62/0x1970 [ 586.788099][T24254] vfs_open+0x3b/0x340 [ 586.792384][T24254] path_openat+0x2ee5/0x3830 [ 586.797176][T24254] do_filp_open+0x1fa/0x410 [ 586.801905][T24254] do_sys_openat2+0x121/0x1c0 [ 586.806853][T24254] __x64_sys_openat+0x138/0x170 [ 586.811901][T24254] do_syscall_64+0xfa/0x3b0 [ 586.816597][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.822694][T24254] [ 586.825035][T24254] [ 586.825035][T24254] stack backtrace: [ 586.830952][T24254] CPU: 0 UID: 0 PID: 24254 Comm: syz.0.8595 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 586.830973][T24254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.830988][T24254] Call Trace: [ 586.831002][T24254] [ 586.831011][T24254] dump_stack_lvl+0x189/0x250 [ 586.831038][T24254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.831058][T24254] ? __pfx__printk+0x10/0x10 [ 586.831084][T24254] validate_chain+0x1f05/0x2140 [ 586.831115][T24254] __lock_acquire+0xab9/0xd20 [ 586.831134][T24254] ? send_sigio+0x38/0x370 [ 586.831157][T24254] lock_acquire+0x120/0x360 [ 586.831172][T24254] ? send_sigio+0x38/0x370 [ 586.831200][T24254] _raw_read_lock_irqsave+0xaf/0x100 [ 586.831218][T24254] ? send_sigio+0x38/0x370 [ 586.831240][T24254] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 586.831257][T24254] ? _raw_read_lock_irqsave+0xbb/0x100 [ 586.831273][T24254] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 586.831291][T24254] send_sigio+0x38/0x370 [ 586.831323][T24254] kill_fasync+0x24d/0x4d0 [ 586.831347][T24254] ? kill_fasync+0x53/0x4d0 [ 586.831370][T24254] lease_break_callback+0x26/0x30 [ 586.831397][T24254] __break_lease+0x6a5/0x1620 [ 586.831419][T24254] ? smk_tskacc+0x2fc/0x370 [ 586.831450][T24254] ? __pfx___break_lease+0x10/0x10 [ 586.831474][T24254] ? mnt_get_write_access+0x68/0x2a0 [ 586.831499][T24254] ? tomoyo_file_open+0x166/0x220 [ 586.831526][T24254] do_dentry_open+0xd62/0x1970 [ 586.831555][T24254] vfs_open+0x3b/0x340 [ 586.831574][T24254] ? path_openat+0x2ecd/0x3830 [ 586.831601][T24254] path_openat+0x2ee5/0x3830 [ 586.831625][T24254] ? arch_stack_walk+0xfc/0x150 [ 586.831659][T24254] ? __pfx_path_openat+0x10/0x10 [ 586.831683][T24254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.831726][T24254] do_filp_open+0x1fa/0x410 [ 586.831751][T24254] ? __lock_acquire+0xab9/0xd20 [ 586.831774][T24254] ? __pfx_do_filp_open+0x10/0x10 [ 586.831809][T24254] ? _raw_spin_unlock+0x28/0x50 [ 586.831848][T24254] ? alloc_fd+0x64c/0x6c0 [ 586.831870][T24254] do_sys_openat2+0x121/0x1c0 [ 586.831893][T24254] ? __se_sys_futex+0x36f/0x400 [ 586.831915][T24254] ? __pfx_do_sys_openat2+0x10/0x10 [ 586.831941][T24254] ? rcu_is_watching+0x15/0xb0 [ 586.831962][T24254] __x64_sys_openat+0x138/0x170 [ 586.831987][T24254] do_syscall_64+0xfa/0x3b0 [ 586.832006][T24254] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.832026][T24254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.832043][T24254] ? clear_bhb_loop+0x60/0xb0 [ 586.832062][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.832080][T24254] RIP: 0033:0x7fd7a038ebe9 [ 586.832096][T24254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.832113][T24254] RSP: 002b:00007fd7a1117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 586.832132][T24254] RAX: ffffffffffffffda RBX: 00007fd7a05b5fa0 RCX: 00007fd7a038ebe9 [ 586.832145][T24254] RDX: 0000000000020001 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 586.832158][T24254] RBP: 00007fd7a0411e19 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 586.832169][T24254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.832180][T24254] R13: 00007fd7a05b6038 R14: 00007fd7a05b5fa0 R15: 00007ffd3632be08 [ 586.832200][T24254] [ 587.149773][T22862] Bluetooth: hci4: command tx timeout [ 588.082896][T24252] syz_tun (unregistering): left allmulticast mode [ 588.133833][T23668] IPVS: stop unused estimator thread 0... [ 588.264480][T23668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.301911][T23668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.372499][T23668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.383722][T23668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.451690][T23668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.462090][T23668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.522448][T23668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.532854][T23668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.612144][T23668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.622923][T23668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.670811][T23668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.681357][T23668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.720995][T23668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.731467][T23668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.787604][T23668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.798585][T23668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.953083][T23668] smc: removing net device bond0 with user defined pnetid S [ 588.967998][T23668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.981090][T23668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.990937][T23668] bond0 (unregistering): Released all slaves [ 589.000851][T23668] bond1 (unregistering): Released all slaves [ 589.111034][T23668] k›*·]‘: left promiscuous mode [ 589.160708][T23668] tipc: Disabling bearer [ 589.167763][T23668] tipc: Left network mode [ 589.492974][T23668] hsr_slave_0: left promiscuous mode [ 589.499234][T23668] hsr_slave_1: left promiscuous mode [ 589.513723][T23668] hsr_slave_0: left promiscuous mode [ 589.520220][T23668] hsr_slave_1: left promiscuous mode [ 589.525914][T23668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.533709][T23668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.542732][T23668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.550669][T23668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.563817][T23668] veth1_macvtap: left promiscuous mode [ 589.570366][T23668] veth0_macvtap: left promiscuous mode [ 589.575974][T23668] veth1_vlan: left promiscuous mode [ 589.581904][T23668] veth0_vlan: left promiscuous mode [ 589.588544][T23668] veth0_macvtap: left promiscuous mode [ 589.594108][T23668] veth1_vlan: left promiscuous mode [ 589.600724][T23668] veth0_vlan: left promiscuous mode [ 589.703948][T23668] pimreg3 (unregistering): left allmulticast mode [ 589.840669][T23668] team_slave_1 (unregistering): left allmulticast mode [ 589.852468][T23668] team0 (unregistering): Port device team_slave_1 removed [ 589.877123][T23668] team_slave_0 (unregistering): left allmulticast mode [ 589.884595][T23668] team0 (unregistering): Port device team_slave_0 removed [ 589.973189][ T4248] smc: removing ib device syz0 [ 590.149482][T23668] pim6reg527 (unregistering): left allmulticast mode [ 590.391944][T23668] team0 (unregistering): Port device team_slave_1 removed [ 590.403767][T23668] team0 (unregistering): Port device C removed [ 590.548353][ T5910] vxcan1 speed is unknown, defaulting to 1000 [ 590.554475][ T5910] syz0: Port: 1 Link DOWN [ 590.559852][ T5848] lo speed is unknown, defaulting to 1000 [ 590.565613][ T5848] infiniband syz2: ib_query_port failed (-19) [ 590.912418][T23668] ------------[ cut here ]------------ [ 590.918019][T23668] WARNING: CPU: 1 PID: 23668 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100 [ 590.928314][T23668] Modules linked in: [ 590.932250][T23668] CPU: 1 UID: 0 PID: 23668 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 590.942491][T23668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.952691][T23668] Workqueue: netns cleanup_net [ 590.957638][T23668] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100 [ 590.963659][T23668] Code: 55 82 ef f7 4b 83 3c 2c 00 75 19 e8 09 9b 8f f7 49 81 fd f8 07 00 00 74 1d e8 fb 9a 8f f7 49 83 c5 08 eb c9 e8 f0 9a 8f f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 590.983591][T23668] RSP: 0018:ffffc9000f1f78b0 EFLAGS: 00010293 [ 590.990013][T23668] RAX: ffffffff8a308ad0 RBX: ffff888077d7c000 RCX: ffff88803086da00 [ 590.998114][T23668] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888077d7c0b8 [ 591.006175][T23668] RBP: ffffc9000f1f79b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 591.014172][T23668] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff888077d7c000 [ 591.022249][T23668] R13: 00000000000000b8 R14: ffff888079a88000 R15: dffffc0000000000 [ 591.030397][T23668] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 591.039438][T23668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.046161][T23668] CR2: 0000558489f04000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 591.054286][T23668] Call Trace: [ 591.057626][T23668] [ 591.060602][T23668] ops_undo_list+0x497/0x990 [ 591.065212][T23668] ? __pfx_ops_undo_list+0x10/0x10 [ 591.070425][T23668] cleanup_net+0x4c5/0x800 [ 591.074982][T23668] ? __pfx_cleanup_net+0x10/0x10 [ 591.080180][T23668] ? rcu_is_watching+0x15/0xb0 [ 591.084981][T23668] ? process_scheduled_works+0x9ef/0x17b0 [ 591.090779][T23668] ? process_scheduled_works+0x9ef/0x17b0 [ 591.096591][T23668] process_scheduled_works+0xade/0x17b0 [ 591.102176][T23668] ? __pfx_process_scheduled_works+0x10/0x10 [ 591.108213][T23668] worker_thread+0x8a0/0xda0 [ 591.112842][T23668] kthread+0x70e/0x8a0 [ 591.116992][T23668] ? __pfx_worker_thread+0x10/0x10 [ 591.122132][T23668] ? __pfx_kthread+0x10/0x10 [ 591.126792][T23668] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.132032][T23668] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.137294][T23668] ? __pfx_kthread+0x10/0x10 [ 591.141913][T23668] ret_from_fork+0x3fc/0x770 [ 591.146645][T23668] ? __pfx_ret_from_fork+0x10/0x10 [ 591.151780][T23668] ? __switch_to_asm+0x39/0x70 [ 591.156706][T23668] ? __switch_to_asm+0x33/0x70 [ 591.161540][T23668] ? __pfx_kthread+0x10/0x10 [ 591.166406][T23668] ret_from_fork_asm+0x1a/0x30 [ 591.171258][T23668] [ 591.174307][T23668] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 591.181627][T23668] CPU: 1 UID: 0 PID: 23668 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 591.191794][T23668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.201871][T23668] Workqueue: netns cleanup_net [ 591.206663][T23668] Call Trace: [ 591.209982][T23668] [ 591.212953][T23668] dump_stack_lvl+0x99/0x250 [ 591.217569][T23668] ? __asan_memcpy+0x40/0x70 [ 591.222174][T23668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.227432][T23668] ? __pfx__printk+0x10/0x10 [ 591.232069][T23668] panic+0x2db/0x790 [ 591.235988][T23668] ? __pfx_panic+0x10/0x10 [ 591.240429][T23668] ? ret_from_fork_asm+0x1a/0x30 [ 591.245397][T23668] __warn+0x31b/0x4b0 [ 591.249406][T23668] ? xfrm6_tunnel_net_exit+0x81/0x100 [ 591.254801][T23668] ? xfrm6_tunnel_net_exit+0x81/0x100 [ 591.260195][T23668] report_bug+0x2be/0x4f0 [ 591.264555][T23668] ? xfrm6_tunnel_net_exit+0x81/0x100 [ 591.269947][T23668] ? xfrm6_tunnel_net_exit+0x81/0x100 [ 591.275335][T23668] ? xfrm6_tunnel_net_exit+0x83/0x100 [ 591.280756][T23668] handle_bug+0x84/0x160 [ 591.285021][T23668] exc_invalid_op+0x1a/0x50 [ 591.289555][T23668] asm_exc_invalid_op+0x1a/0x20 [ 591.294420][T23668] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100 [ 591.300421][T23668] Code: 55 82 ef f7 4b 83 3c 2c 00 75 19 e8 09 9b 8f f7 49 81 fd f8 07 00 00 74 1d e8 fb 9a 8f f7 49 83 c5 08 eb c9 e8 f0 9a 8f f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 591.320467][T23668] RSP: 0018:ffffc9000f1f78b0 EFLAGS: 00010293 [ 591.326565][T23668] RAX: ffffffff8a308ad0 RBX: ffff888077d7c000 RCX: ffff88803086da00 [ 591.334569][T23668] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff888077d7c0b8 [ 591.342558][T23668] RBP: ffffc9000f1f79b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 591.350549][T23668] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff888077d7c000 [ 591.358541][T23668] R13: 00000000000000b8 R14: ffff888079a88000 R15: dffffc0000000000 [ 591.366534][T23668] ? xfrm6_tunnel_net_exit+0x80/0x100 [ 591.371935][T23668] ops_undo_list+0x497/0x990 [ 591.376556][T23668] ? __pfx_ops_undo_list+0x10/0x10 [ 591.381703][T23668] cleanup_net+0x4c5/0x800 [ 591.386147][T23668] ? __pfx_cleanup_net+0x10/0x10 [ 591.391108][T23668] ? rcu_is_watching+0x15/0xb0 [ 591.395882][T23668] ? process_scheduled_works+0x9ef/0x17b0 [ 591.401611][T23668] ? process_scheduled_works+0x9ef/0x17b0 [ 591.407349][T23668] process_scheduled_works+0xade/0x17b0 [ 591.412927][T23668] ? __pfx_process_scheduled_works+0x10/0x10 [ 591.418925][T23668] worker_thread+0x8a0/0xda0 [ 591.423539][T23668] kthread+0x70e/0x8a0 [ 591.427638][T23668] ? __pfx_worker_thread+0x10/0x10 [ 591.432769][T23668] ? __pfx_kthread+0x10/0x10 [ 591.437385][T23668] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.442595][T23668] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.447809][T23668] ? __pfx_kthread+0x10/0x10 [ 591.452418][T23668] ret_from_fork+0x3fc/0x770 [ 591.457030][T23668] ? __pfx_ret_from_fork+0x10/0x10 [ 591.462158][T23668] ? __switch_to_asm+0x39/0x70 [ 591.466938][T23668] ? __switch_to_asm+0x33/0x70 [ 591.471731][T23668] ? __pfx_kthread+0x10/0x10 [ 591.476345][T23668] ret_from_fork_asm+0x1a/0x30 [ 591.481156][T23668] [ 591.484349][T23668] Kernel Offset: disabled [ 591.488686][T23668] Rebooting in 86400 seconds..