last executing test programs: 29.782931945s ago: executing program 2 (id=13254): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000067080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r0}, 0xc) 29.114125291s ago: executing program 2 (id=13261): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 27.676332153s ago: executing program 0 (id=13280): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r2, 0x7}}]}, 0x144}}, 0x0) 27.503491539s ago: executing program 0 (id=13282): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 27.232944333s ago: executing program 0 (id=13284): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast2, 0xd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hopopts={{0x18, 0x29, 0x34, {0x2b}}}], 0x18}, 0xc0) 27.042814872s ago: executing program 0 (id=13286): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 26.7873236s ago: executing program 0 (id=13288): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="eb43ef45c546a50bc7cc12129d130100000033302925ff007332e4228741e90a762873abfee765d1", 0x28, 0x4048804, 0x0, 0x0) 26.386154495s ago: executing program 0 (id=13290): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) 19.278126137s ago: executing program 4 (id=13319): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000fc0)={0x2c, 0x0, &(0x7f0000000e40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x98, @string={0x98, 0x3, "b9b792c24feb16e9b08146ef98bcc07bcf5b918d3d652704ada6a734e5c3b46ff6a21885a196011e35ee71441eb6f17227d49d4c277207b09da65cf9a38b33900255c8d34f1371f7a1b91397077d84913ddabc54577fb08b7ba924a796a58ef630bcc380cf1f9c9baa57598ea99c42a6a9fc7887b1df1123b6d4d5481f7f14faef24ea4d71c6ccf5cec5978fe7cb25f0676d1bdb83dc"}}, 0x0, 0x0, 0x0}, 0x0) 17.183375947s ago: executing program 4 (id=13329): r0 = fsopen(&(0x7f0000000380)='hfsplus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='silent\x00', 0x0, 0x0) 17.140284756s ago: executing program 1 (id=13330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x25, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x2, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x16, 0x0, 0x0, 0x76}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x0}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 17.071423531s ago: executing program 4 (id=13331): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xffff, r0, 0x0}]) 16.947707861s ago: executing program 1 (id=13332): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x4e22, @loopback=0x7f000000}}) 16.801901731s ago: executing program 4 (id=13333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) 16.629338523s ago: executing program 4 (id=13334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000082c0004802800018007000100637400001c00028008000140000000010500030500000000080002400000000e0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) 16.3490075s ago: executing program 1 (id=13335): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x48}}, 0x0) 16.194222126s ago: executing program 4 (id=13336): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x4, 0x64}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x28}}, 0x4000) 15.951742403s ago: executing program 1 (id=13338): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) 15.844270344s ago: executing program 1 (id=13339): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) 15.458218035s ago: executing program 1 (id=13340): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}]}]}, 0x44}}, 0x0) 5.139736311s ago: executing program 3 (id=13362): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 1.029603694s ago: executing program 2 (id=13263): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1}, 0xc) close(r0) 1.028667381s ago: executing program 3 (id=13369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 477.882951ms ago: executing program 2 (id=13363): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x40000001) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x3) 477.624739ms ago: executing program 3 (id=13364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x48}}, 0x0) 314.017714ms ago: executing program 3 (id=13365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 243.553334ms ago: executing program 2 (id=13366): open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}) 118.219259ms ago: executing program 3 (id=13367): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3}) 13.996722ms ago: executing program 2 (id=13368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000f"]) 0s ago: executing program 3 (id=13370): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/32, 0x20}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): b 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 775.992562][ T5625] usb 2-1: Manufacturer: syz [ 776.001155][ T5625] usb 2-1: config 0 descriptor?? [ 776.080399][ T5625] rc_core: IR keymap rc-hauppauge not found [ 776.086379][ T5625] Registered IR keymap rc-empty [ 776.123875][T31013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11952'. [ 776.129212][ T5625] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 776.151207][ T5625] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input188 [ 776.446972][ C0] igorplugusb 2-1:0.0: receive overflow, at least 7 lost [ 776.592041][T31035] x_tables: duplicate underflow at hook 4 [ 776.656680][ T5625] usb 2-1: USB disconnect, device number 61 [ 777.887785][T31098] openvswitch: netlink: Actions may not be safe on all matching packets [ 778.037502][T31104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11992'. [ 778.102119][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11993'. [ 778.191448][ T5569] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 778.495439][ T5569] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 778.505018][ T5569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.514152][ T5569] usb 3-1: Product: syz [ 778.518360][ T5569] usb 3-1: Manufacturer: syz [ 778.524051][ T5569] usb 3-1: SerialNumber: syz [ 778.535494][ T5569] usb 3-1: config 0 descriptor?? [ 778.544457][ T5569] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 778.953741][ T5569] usb 3-1: USB disconnect, device number 61 [ 779.239719][ T5381] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 779.430806][ T5381] usb 4-1: Using ep0 maxpacket: 16 [ 779.440961][ T5381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.476015][ T5381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.519852][ T5381] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 779.593980][ T5381] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 779.616501][ T5381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.646013][ T5381] usb 4-1: config 0 descriptor?? [ 779.685501][T31165] [U] ßjx [ 780.068930][ T5381] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 780.078781][ T5569] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 780.086653][ T5381] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 780.111340][ T5381] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 780.131101][ T5381] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 780.138394][ T5381] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 780.176528][ T5381] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 780.190705][ T5381] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 780.220782][ T5381] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 780.231267][ T5381] microsoft 0003:045E:07DA.00A0: No inputs registered, leaving [ 780.239001][ T5569] usb 2-1: Using ep0 maxpacket: 16 [ 780.244900][ T5381] microsoft 0003:045E:07DA.00A0: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 780.257330][ T5381] microsoft 0003:045E:07DA.00A0: no inputs found [ 780.264788][ T5381] microsoft 0003:045E:07DA.00A0: could not initialize ff, continuing anyway [ 780.271085][ T5569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.297785][ T5381] usb 4-1: USB disconnect, device number 47 [ 780.328763][ T5569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.353870][ T5569] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 780.370467][ T5569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.398320][ T5569] usb 2-1: config 0 descriptor?? [ 780.690031][T31196] loop6: detected capacity change from 0 to 524287999 [ 780.836536][ T5569] samsung 0003:0419:0001.00A1: unknown main item tag 0x1 [ 780.846105][ T5569] samsung 0003:0419:0001.00A1: unknown main item tag 0x0 [ 780.860497][ T5569] samsung 0003:0419:0001.00A1: item fetching failed at offset 3/5 [ 780.889173][ T5569] samsung 0003:0419:0001.00A1: parse failed [ 780.895215][ T5569] samsung 0003:0419:0001.00A1: probe with driver samsung failed with error -22 [ 780.938406][T31200] netlink: 'syz.2.12038': attribute type 15 has an invalid length. [ 781.008696][ T5485] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 781.058558][ T46] usb 2-1: USB disconnect, device number 62 [ 781.172866][ T5485] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 781.192688][ T5485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.209050][ T5381] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 781.238172][ T5485] usb 5-1: config 0 descriptor?? [ 781.275841][ T5485] gspca_main: spca508-2.14.0 probing 8086:0110 [ 781.372280][ T5381] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 781.381846][ T5381] usb 4-1: config 0 has no interface number 0 [ 781.388188][ T5381] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 781.412829][ T5381] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.433724][ T5381] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 781.446450][ T5381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.456605][ T5381] usb 4-1: Product: syz [ 781.461887][ T5381] usb 4-1: Manufacturer: syz [ 781.466900][ T5381] usb 4-1: SerialNumber: syz [ 781.474535][ T5381] usb 4-1: config 0 descriptor?? [ 781.483118][T31202] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 781.490692][ T5485] gspca_spca508: reg_read err -32 [ 781.499057][ T5381] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 781.511679][ T5381] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 781.558878][ T5569] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 781.755153][ T5485] gspca_spca508: reg_read err -71 [ 781.768883][ T5569] usb 3-1: Using ep0 maxpacket: 16 [ 781.776162][ T5569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.782052][ T5485] gspca_spca508: reg_read err -71 [ 781.791613][ T5569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.803349][ T5569] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 781.812777][ T5569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.823730][ T5569] usb 3-1: config 0 descriptor?? [ 781.859954][ T5485] gspca_spca508: reg_read err -71 [ 781.866264][ T5485] gspca_spca508: reg write: error -71 [ 781.888774][ T5485] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 781.959130][ T5485] usb 5-1: USB disconnect, device number 33 [ 781.963694][ T5384] usb 4-1: USB disconnect, device number 48 [ 782.029923][ T5384] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 782.050878][ T5384] cyberjack 4-1:0.69: device disconnected [ 782.179756][T31222] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 782.346542][ T5569] apple 0003:05AC:027D.00A2: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0 [ 782.548981][ T5485] usb 3-1: USB disconnect, device number 62 [ 783.036849][T31257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12065'. [ 783.123158][T31260] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 783.581756][ T5384] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 783.721611][ T29] audit: type=1326 audit(1729121416.275:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31292 comm="syz.3.12082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 783.778199][ T29] audit: type=1326 audit(1729121416.305:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31292 comm="syz.3.12082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 783.810144][ T5384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.822264][ T5384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.840491][ T5384] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 783.851402][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.863570][ T29] audit: type=1326 audit(1729121416.305:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31292 comm="syz.3.12082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 783.887212][ T5384] usb 5-1: config 0 descriptor?? [ 783.910826][ T29] audit: type=1326 audit(1729121416.305:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31292 comm="syz.3.12082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 783.933834][ T29] audit: type=1326 audit(1729121416.305:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31292 comm="syz.3.12082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 783.957034][ T29] audit: type=1326 audit(1729121416.305:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31292 comm="syz.3.12082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 783.979471][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.988411][ T29] audit: type=1326 audit(1729121416.305:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31292 comm="syz.3.12082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 784.010888][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.017296][ T29] audit: type=1326 audit(1729121416.305:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31292 comm="syz.3.12082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 784.019098][T31299] dvmrp0: entered allmulticast mode [ 784.099721][T31298] dvmrp0: left allmulticast mode [ 784.337674][ T5384] kone 0003:1E7D:2CED.00A3: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 784.545792][ T5485] usb 5-1: USB disconnect, device number 34 [ 784.668729][ T5384] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 784.866939][ T5384] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 784.893006][ T5384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.904145][ T5384] usb 3-1: Product: syz [ 784.908378][ T5384] usb 3-1: Manufacturer: syz [ 784.913654][ T5384] usb 3-1: SerialNumber: syz [ 784.944424][ T5384] r8152-cfgselector 3-1: Unknown version 0x0000 [ 784.960362][ T5384] r8152-cfgselector 3-1: config 0 descriptor?? [ 785.417868][ T5625] r8152-cfgselector 3-1: USB disconnect, device number 63 [ 787.362480][T31416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12139'. [ 787.711806][ T29] audit: type=1326 audit(1729121420.265:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31437 comm="syz.4.12152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18eed7dff9 code=0x0 [ 788.428740][ T5625] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 788.578718][ T5625] usb 2-1: Using ep0 maxpacket: 16 [ 788.619729][ T5625] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 788.627808][ T5625] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.641260][ T5625] usb 2-1: config 1 has no interface number 0 [ 788.647417][ T5625] usb 2-1: too many endpoints for config 1 interface 8 altsetting 0: 255, using maximum allowed: 30 [ 788.659222][ T5625] usb 2-1: config 1 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 788.675039][ T5625] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.684491][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 788.692662][ T5625] usb 2-1: SerialNumber: syz [ 788.969478][ T5625] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 788.974673][ T5569] usb 2-1: USB disconnect, device number 63 [ 789.127179][ T5625] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 789.153439][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.182455][ T5625] usb 4-1: config 0 descriptor?? [ 789.211322][ T5625] cp210x 4-1:0.0: cp210x converter detected [ 789.575956][T31500] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 789.610275][T31500] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.617863][T31500] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.632222][T31500] bridge0: entered allmulticast mode [ 789.692694][ T5625] usb 4-1: cp210x converter now attached to ttyUSB0 [ 789.838495][ T29] audit: type=1326 audit(1729121422.385:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31509 comm="syz.2.12186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49777dff9 code=0x7ffc0000 [ 789.885296][ T5569] usb 4-1: USB disconnect, device number 49 [ 789.903728][ T29] audit: type=1326 audit(1729121422.395:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31509 comm="syz.2.12186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49777dff9 code=0x7ffc0000 [ 789.936939][ T5569] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 789.987130][ T5569] cp210x 4-1:0.0: device disconnected [ 790.024747][ T29] audit: type=1326 audit(1729121422.415:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31509 comm="syz.2.12186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe49777dff9 code=0x7ffc0000 [ 790.060330][ T5625] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 790.073674][T31516] netlink: 'syz.1.12189': attribute type 2 has an invalid length. [ 790.075922][ T29] audit: type=1326 audit(1729121422.415:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31509 comm="syz.2.12186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49777dff9 code=0x7ffc0000 [ 790.137851][ T29] audit: type=1326 audit(1729121422.415:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31509 comm="syz.2.12186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe49777dff9 code=0x7ffc0000 [ 790.168732][ T5384] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 790.183786][ T29] audit: type=1326 audit(1729121422.415:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31509 comm="syz.2.12186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49777dff9 code=0x7ffc0000 [ 790.227003][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.249011][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.268715][ T5625] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.314662][ T5625] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 790.324944][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.335700][ T5625] usb 5-1: config 0 descriptor?? [ 790.340897][ T5384] usb 3-1: Using ep0 maxpacket: 32 [ 790.354767][ T5384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.377034][ T5384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.387882][ T5384] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 790.400928][ T5384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.416514][ T5384] usb 3-1: config 0 descriptor?? [ 790.539319][ T5485] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 790.574705][ T5625] usbhid 5-1:0.0: can't add hid device: -71 [ 790.587031][ T5625] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 790.600150][ T5625] usb 5-1: USB disconnect, device number 35 [ 790.700256][ T5485] usb 2-1: Using ep0 maxpacket: 8 [ 790.710492][T31527] veth1_macvtap: left promiscuous mode [ 790.718727][T31527] macsec0: entered promiscuous mode [ 790.720529][ T5485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.764490][T31528] veth1_macvtap: entered promiscuous mode [ 790.779862][ T5485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.781099][T31528] macsec0: left promiscuous mode [ 790.820662][ T5485] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.851929][ T5485] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 790.865713][ T5384] savu 0003:1E7D:2D5A.00A4: unbalanced delimiter at end of report description [ 790.870878][ T5485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.883571][ T5384] savu 0003:1E7D:2D5A.00A4: parse failed [ 790.889740][ T5384] savu 0003:1E7D:2D5A.00A4: probe with driver savu failed with error -22 [ 790.922278][ T5485] usb 2-1: config 0 descriptor?? [ 791.087385][ T5381] usb 3-1: USB disconnect, device number 64 [ 791.219928][ T5384] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 791.341636][ T5485] kye 0003:0458:5010.00A5: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 791.363619][ T5485] kye 0003:0458:5010.00A5: unknown main item tag 0x0 [ 791.374470][ T5485] kye 0003:0458:5010.00A5: unknown main item tag 0x0 [ 791.382731][ T5485] kye 0003:0458:5010.00A5: unknown main item tag 0x0 [ 791.391481][ T5485] kye 0003:0458:5010.00A5: unknown main item tag 0x0 [ 791.399614][ T5485] kye 0003:0458:5010.00A5: unknown main item tag 0x0 [ 791.400068][ T5384] usb 4-1: Using ep0 maxpacket: 32 [ 791.406475][ T5485] kye 0003:0458:5010.00A5: unknown main item tag 0x0 [ 791.419897][ T5485] kye 0003:0458:5010.00A5: unknown main item tag 0x0 [ 791.432897][ T5485] kye 0003:0458:5010.00A5: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 791.446021][ T5485] kye 0003:0458:5010.00A5: tablet-enabling feature report not found [ 791.455958][ T5485] kye 0003:0458:5010.00A5: tablet enabling failed [ 791.463163][ T5384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.518689][ T5384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.529212][ T5384] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 791.538303][ T5384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.564713][ T5384] usb 4-1: config 0 descriptor?? [ 791.604078][ T5625] usb 2-1: USB disconnect, device number 64 [ 791.992362][ T5384] belkin 0003:050D:3201.00A6: item fetching failed at offset 5/7 [ 792.042926][ T5384] belkin 0003:050D:3201.00A6: parse failed [ 792.068817][ T5384] belkin 0003:050D:3201.00A6: probe with driver belkin failed with error -22 [ 792.195975][ T5384] usb 4-1: USB disconnect, device number 50 [ 792.377297][T31564] Invalid logical block size (65534) [ 792.422435][T31566] netlink: 'syz.2.12212': attribute type 11 has an invalid length. [ 792.431245][T31566] netlink: 'syz.2.12212': attribute type 1 has an invalid length. [ 792.442501][T31566] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.12212'. [ 794.030996][T31623] sock: sock_set_timeout: `syz.0.12239' (pid 31623) tries to set negative timeout [ 794.805380][T31661] netlink: 'syz.3.12254': attribute type 1 has an invalid length. [ 794.814808][T31661] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.12254'. [ 794.830034][ T5625] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 795.001615][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.011832][ T5625] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00 [ 795.021363][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.035884][ T5625] usb 3-1: config 0 descriptor?? [ 795.135513][T31670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12259'. [ 795.339353][T31677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12263'. [ 795.346341][T31677] Êü: entered promiscuous mode [ 795.531316][ T5625] apple 0003:05AC:024E.00A7: unknown main item tag 0x0 [ 795.531361][ T5625] apple 0003:05AC:024E.00A7: unknown main item tag 0xe [ 795.531394][ T5625] apple 0003:05AC:024E.00A7: unknown main item tag 0x5 [ 795.531425][ T5625] apple 0003:05AC:024E.00A7: unknown main item tag 0x4 [ 795.531458][ T5625] apple 0003:05AC:024E.00A7: ignoring exceeding usage max [ 795.533080][ T5625] apple 0003:05AC:024E.00A7: usage index exceeded [ 795.533101][ T5625] apple 0003:05AC:024E.00A7: item 0 0 2 0 parsing failed [ 795.533675][ T5625] apple 0003:05AC:024E.00A7: parse failed [ 795.533754][ T5625] apple 0003:05AC:024E.00A7: probe with driver apple failed with error -22 [ 795.834382][ T5384] usb 3-1: USB disconnect, device number 65 [ 796.472229][T31723] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12283'. [ 797.498847][ T5381] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 797.689006][ T5381] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 797.697814][ T5381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.715030][ T5381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.740294][ T5381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.753910][ T5381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.763493][ T5381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.775149][ T5381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.783508][ T5381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.793810][ T5381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.806219][ T5381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.817234][ T5381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.826712][ T5381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.838645][ T5381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.851221][ T5381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.861373][ T5381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.872736][ T5381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.886495][ T5381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.895774][ T5381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.907206][ T5381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.924225][ T5381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.933343][ T5381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.947149][ T5381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.973740][ T5381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 797.987765][ T5381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 797.999397][ T5381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 798.018940][ T5397] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 798.021106][ T5381] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 798.027906][ T5397] Bluetooth: hci2: Injecting HCI hardware error event [ 798.047158][ T5397] Bluetooth: hci2: hardware error 0x00 [ 798.119456][ T5381] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 798.128159][ T5381] usb 3-1: Product: syz [ 798.176088][ T5381] usb 3-1: Manufacturer: syz [ 798.215221][ T5381] usb 3-1: SerialNumber: syz [ 798.265364][ T5381] usb 3-1: config 0 descriptor?? [ 798.283023][ T5381] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 798.744847][ T5381] usb 3-1: USB disconnect, device number 66 [ 798.759544][ T5381] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 798.860438][T31801] tipc: Enabling not permitted [ 798.880563][T31801] tipc: Enabling of bearer rejected, failed to enable media [ 799.100594][ T5402] Bluetooth: hci6: command 0x0405 tx timeout [ 800.138851][ T5397] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 800.668814][ T5381] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 800.841443][ T5381] usb 3-1: Using ep0 maxpacket: 16 [ 800.863522][ T5381] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 800.905518][ T5381] usb 3-1: config 0 has no interface number 0 [ 800.916344][ T5381] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 800.929932][ T5381] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 800.944611][ T5381] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 800.954788][ T5381] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 800.964386][ T5381] usb 3-1: Product: syz [ 800.968874][ T5381] usb 3-1: SerialNumber: syz [ 800.977705][ T5381] usb 3-1: config 0 descriptor?? [ 800.993323][ T5381] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 801.008730][ T5381] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input189 [ 801.068935][ T5625] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 801.198710][ T5397] Bluetooth: hci6: command 0x0405 tx timeout [ 801.256003][ T5625] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 801.265568][ T5625] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 801.277555][ T5625] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 801.286734][ T5625] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 801.302911][ T5625] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 801.317090][ T5625] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 801.326456][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 801.334605][ T5625] usb 5-1: Product: syz [ 801.339423][ T5625] usb 5-1: Manufacturer: syz [ 801.360641][ T5625] cdc_wdm 5-1:1.0: skipping garbage [ 801.365970][ T5625] cdc_wdm 5-1:1.0: skipping garbage [ 801.391488][ T5625] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 801.405859][ T5625] cdc_wdm 5-1:1.0: Unknown control protocol [ 801.505433][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 801.512722][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 801.514813][ T5625] usb 3-1: USB disconnect, device number 67 [ 801.520224][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 801.543814][ T5625] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 801.675560][ T5489] usb 5-1: USB disconnect, device number 36 [ 801.831527][ T29] audit: type=1326 audit(1729121434.385:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31909 comm="syz.3.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 801.907983][ T29] audit: type=1326 audit(1729121434.405:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31909 comm="syz.3.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 801.945063][ T29] audit: type=1326 audit(1729121434.405:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31909 comm="syz.3.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 801.973685][ T29] audit: type=1326 audit(1729121434.405:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31909 comm="syz.3.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 802.000421][ T29] audit: type=1326 audit(1729121434.405:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31909 comm="syz.3.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 802.025576][ T29] audit: type=1326 audit(1729121434.405:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31909 comm="syz.3.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 802.063909][ T29] audit: type=1326 audit(1729121434.405:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31909 comm="syz.3.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fd7dff9 code=0x7ffc0000 [ 802.219552][ T5489] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 802.245772][T31920] netlink: 'syz.3.12375': attribute type 4 has an invalid length. [ 802.273577][T31920] netlink: 17 bytes leftover after parsing attributes in process `syz.3.12375'. [ 802.389065][ T5489] usb 2-1: Using ep0 maxpacket: 16 [ 802.412576][ T5489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.455789][ T5489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.469652][ T5489] usb 2-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 802.480429][ T5489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.506271][ T5489] usb 2-1: config 0 descriptor?? [ 802.548706][ T5381] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 802.719531][ T5381] usb 3-1: Using ep0 maxpacket: 32 [ 802.727073][ T5381] usb 3-1: unable to get BOS descriptor or descriptor too short [ 802.748349][ T5381] usb 3-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice=ca.76 [ 802.768316][ T5381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.783195][ T5381] usb 3-1: Product: syz [ 802.787427][ T5381] usb 3-1: Manufacturer: syz [ 802.794727][ T5381] usb 3-1: SerialNumber: syz [ 802.803437][ T5381] usb 3-1: config 0 descriptor?? [ 802.816618][ T5381] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input190 [ 802.932281][ T5489] wacom 0003:056A:010D.00A8: hidraw0: USB HID v0.00 Device [HID 056a:010d] on usb-dummy_hcd.1-1/input0 [ 803.025009][ T4671] bcm5974 3-1:0.0: could not read from device [ 803.043166][ T4671] bcm5974 3-1:0.0: could not read from device [ 803.057865][ T5381] usb 3-1: USB disconnect, device number 68 [ 803.200387][ T5485] usb 2-1: USB disconnect, device number 65 [ 803.259903][T28744] udevd[28744]: Error opening device "/dev/input/event4": No such file or directory [ 803.283099][T28744] udevd[28744]: Unable to EVIOCGABS device "/dev/input/event4" [ 803.309655][T28744] udevd[28744]: Unable to EVIOCGABS device "/dev/input/event4" [ 803.318311][T28744] udevd[28744]: Unable to EVIOCGABS device "/dev/input/event4" [ 803.338086][T28744] udevd[28744]: Unable to EVIOCGABS device "/dev/input/event4" [ 803.745879][T31955] CUSE: DEVNAME unspecified [ 804.172241][T31971] openvswitch: netlink: Actions may not be safe on all matching packets [ 804.691266][T31996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12410'. [ 804.764377][ T5625] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 804.942191][ T5625] usb 2-1: Using ep0 maxpacket: 8 [ 804.985742][ T5625] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 804.996905][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.998792][ T5381] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 805.005051][ T5625] usb 2-1: Product: syz [ 805.016845][ T5625] usb 2-1: Manufacturer: syz [ 805.022688][ T5625] usb 2-1: SerialNumber: syz [ 805.030438][ T5625] usb 2-1: config 0 descriptor?? [ 805.044345][ T5625] gspca_main: sq930x-2.14.0 probing 2770:930c [ 805.172345][ T5381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.195526][ T5381] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 805.214653][ T5381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.269663][ T5381] usb 4-1: config 0 descriptor?? [ 805.693394][ T5381] petalynx 0003:18B1:0037.00A9: unknown main item tag 0xd [ 805.698790][ T5625] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 805.719200][ T5381] petalynx 0003:18B1:0037.00A9: unexpected long global item [ 805.727115][ T5381] petalynx 0003:18B1:0037.00A9: parse failed [ 805.733407][ T5381] petalynx 0003:18B1:0037.00A9: probe with driver petalynx failed with error -22 [ 805.918790][ T5625] gspca_sq930x: Sensor ov9630 not yet treated [ 805.924449][T27757] usb 4-1: USB disconnect, device number 51 [ 805.925024][ T5625] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 805.954551][ T5625] usb 2-1: USB disconnect, device number 66 [ 806.042024][ T5569] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 806.069805][T32034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12428'. [ 806.216782][ T5569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.240153][ T5569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.258863][ T5569] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 806.270709][ T5569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.282409][ T5569] usb 5-1: config 0 descriptor?? [ 806.640433][T32050] netlink: 'syz.2.12435': attribute type 1 has an invalid length. [ 806.743631][ T5569] corsair-psu 0003:1B1C:1C0D.00AA: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0 [ 806.937563][ T5569] corsair-psu 0003:1B1C:1C0D.00AA: unable to initialize device (-71) [ 806.956653][ T5569] corsair-psu 0003:1B1C:1C0D.00AA: probe with driver corsair-psu failed with error -71 [ 806.977727][ T5569] usb 5-1: USB disconnect, device number 37 [ 807.029636][ T5384] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 807.181766][ T5384] usb 3-1: Using ep0 maxpacket: 8 [ 807.203283][ T5384] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 807.220171][ T5384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.228802][ T5384] usb 3-1: Product: syz [ 807.233077][ T5384] usb 3-1: Manufacturer: syz [ 807.247781][ T5384] usb 3-1: SerialNumber: syz [ 807.255067][ T5384] usb 3-1: config 0 descriptor?? [ 807.263918][ T5384] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 807.885941][T32074] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12446'. [ 807.895531][ T5384] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 807.924338][ T5384] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 807.948319][ T5384] usb 3-1: USB disconnect, device number 69 [ 808.023968][T32078] netlink: 'syz.3.12447': attribute type 10 has an invalid length. [ 808.033065][T32078] tipc: Resetting bearer [ 808.096704][T32078] tipc: Resetting bearer [ 808.103512][T32078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.116838][T32078] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 808.398886][ T29] audit: type=1326 audit(1729121440.935:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32089 comm="syz.1.12453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556657dff9 code=0x7ffc0000 [ 808.422572][ T29] audit: type=1326 audit(1729121440.935:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32089 comm="syz.1.12453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556657dff9 code=0x7ffc0000 [ 808.445006][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.452459][ T29] audit: type=1326 audit(1729121440.935:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32089 comm="syz.1.12453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f556657dff9 code=0x7ffc0000 [ 808.475386][ T29] audit: type=1326 audit(1729121440.935:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32089 comm="syz.1.12453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556657dff9 code=0x7ffc0000 [ 808.497821][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.504575][ T29] audit: type=1326 audit(1729121440.935:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32089 comm="syz.1.12453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556657dff9 code=0x7ffc0000 [ 808.527048][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.864592][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.871139][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.508836][ T5381] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 809.808633][ T5381] usb 5-1: Using ep0 maxpacket: 16 [ 809.918671][ T5381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.931258][ T5381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.948951][ T5381] usb 5-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 809.959888][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.983111][ T5381] usb 5-1: config 0 descriptor?? [ 810.144588][T32147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 810.411477][ T5381] ortek 0003:05A4:1700.00AB: unknown main item tag 0x0 [ 810.425473][ T5381] ortek 0003:05A4:1700.00AB: unknown main item tag 0x0 [ 810.433078][T27757] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 810.443592][ T5381] ortek 0003:05A4:1700.00AB: unknown main item tag 0x0 [ 810.462500][ T5381] ortek 0003:05A4:1700.00AB: unknown main item tag 0x0 [ 810.485870][ T5381] ortek 0003:05A4:1700.00AB: hidraw0: USB HID v0.00 Device [HID 05a4:1700] on usb-dummy_hcd.4-1/input0 [ 810.582345][ T5485] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 810.609292][T27757] usb 2-1: Using ep0 maxpacket: 16 [ 810.636583][T27757] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 810.662785][T27757] usb 2-1: config 0 has no interface number 0 [ 810.676938][ T5381] usb 5-1: USB disconnect, device number 38 [ 810.690713][T27757] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 810.704340][T27757] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 810.737654][T27757] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 810.748454][T27757] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 810.756809][T27757] usb 2-1: Product: syz [ 810.761099][ T5485] usb 4-1: Using ep0 maxpacket: 16 [ 810.766369][T27757] usb 2-1: SerialNumber: syz [ 810.774612][ T5485] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 810.784260][T27757] usb 2-1: config 0 descriptor?? [ 810.789644][ T5485] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.804070][T27757] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 810.812978][T27757] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input194 [ 810.825134][ T5485] usb 4-1: config 0 has no interface number 0 [ 810.835612][ T5485] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 810.849034][ T5485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.857124][ T5485] usb 4-1: Product: syz [ 810.869188][ T5485] usb 4-1: Manufacturer: syz [ 810.886249][ T5485] usb 4-1: SerialNumber: syz [ 810.916132][ T5485] usb 4-1: config 0 descriptor?? [ 810.940150][ T5485] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 810.946622][ T5485] usb 4-1: No valid video chain found. [ 811.049051][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.056296][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.064345][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.071601][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.089001][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.096602][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.103903][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.111127][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.118345][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.125564][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.139642][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 811.148784][ T5485] usb 2-1: USB disconnect, device number 67 [ 811.162099][ T5381] usb 4-1: USB disconnect, device number 52 [ 811.169824][ T5485] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 811.791632][T32194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12502'. [ 811.829000][T32194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12502'. [ 811.852406][T32194] netlink: 'syz.3.12502': attribute type 25 has an invalid length. [ 811.909138][ T5485] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 812.080751][ T5485] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 812.117289][ T5485] usb 2-1: config 0 has no interface number 0 [ 812.127732][ T5485] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 812.146238][ T5485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.161219][ T5485] usb 2-1: Product: syz [ 812.166874][ T5485] usb 2-1: Manufacturer: syz [ 812.181509][ T5485] usb 2-1: SerialNumber: syz [ 812.195092][ T5485] usb 2-1: config 0 descriptor?? [ 812.428302][ T5485] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 812.442904][ T5485] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 812.458309][ T5485] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 812.468998][T27757] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 812.480598][ T5485] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 812.491911][ T5485] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 812.642460][T27757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.658294][T27757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.668945][T27757] usb 4-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 812.678620][T27757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.691083][T27757] usb 4-1: config 0 descriptor?? [ 812.881153][ T5384] usb 2-1: USB disconnect, device number 68 [ 812.908174][ T5384] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 812.950182][ T5384] keyspan 2-1:0.133: device disconnected [ 813.115681][T27757] wacom 0003:056A:00BC.00AC: unknown main item tag 0x0 [ 813.124527][T27757] wacom 0003:056A:00BC.00AC: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 813.136457][T27757] wacom 0003:056A:00BC.00AC: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.3-1/input0 [ 813.156600][T27757] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BC.00AC/input/input195 [ 813.358231][ T5384] usb 4-1: USB disconnect, device number 53 [ 816.144497][ T29] audit: type=1400 audit(1729121448.695:555): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A02CE0B213EC78A7CE9AE50600E4EBC08727116666D121F8CC9C8F42A53EA359612E288C9F2953FEC644A165FE94D261EE817B543788F3BAED6AB141A9B8061C4414D646B68CCEDC534B04891946ABF6E84425E1ACC2F076F5D51EA6F745937ABBE7D0CCBE371B518C24BBF041F976277ECDEB3CE3D5E5EF73B6FA47BEA4E01601C1C626D6214BA3EC062B37250F7D6EC61311B972857831CAB3F87EC83E9B5BBB2933B9EA476F00D26DD16D5713C741F89257F22566D990626CED6B0AA8351222454B3E0FE985C7CE4EF380CF29293B3177F4BB75ADCC8DA8080E0457424A97712A5F849245FF1A5E6E62DC19D14 pid=32297 comm="syz.3.12549" [ 816.399102][T32307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12554'. [ 816.598682][ T5381] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 816.781285][ T5381] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 816.791846][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.803805][ T5381] usb 5-1: config 0 descriptor?? [ 816.826731][ T5381] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 816.905611][T32327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12563'. [ 817.444538][ T5381] gspca_cpia1: usb_control_msg 01, error -71 [ 817.450993][ T5381] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 817.461742][ T5381] usb 5-1: USB disconnect, device number 39 [ 817.987244][ T5381] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 818.170597][ T5381] usb 4-1: Using ep0 maxpacket: 16 [ 818.184739][ T5381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.234054][ T5381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.245677][ T5381] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 818.259228][ T5381] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 818.268645][ T5381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.281722][ T5381] usb 4-1: config 0 descriptor?? [ 818.710312][ T5381] microsoft 0003:045E:07DA.00AD: unbalanced collection at end of report description [ 818.720593][ T5381] microsoft 0003:045E:07DA.00AD: parse failed [ 818.726788][ T5381] microsoft 0003:045E:07DA.00AD: probe with driver microsoft failed with error -22 [ 818.923961][ T5381] usb 4-1: USB disconnect, device number 54 [ 819.339505][ T5395] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 819.864258][ T5395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.875409][ T5395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.885863][ T5395] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 819.896305][ T5395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.908983][ T5395] usb 2-1: config 0 descriptor?? [ 820.198942][ T5625] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 820.359372][ T5625] usb 5-1: Using ep0 maxpacket: 16 [ 820.380254][T32430] netlink: 'syz.0.12611': attribute type 1 has an invalid length. [ 820.383555][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.401244][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.412630][ T5625] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 820.422008][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.434668][ T5625] usb 5-1: config 0 descriptor?? [ 820.561523][ T5395] hid-led 0003:27B8:01ED.00AE: probe with driver hid-led failed with error -71 [ 820.594705][ T5395] usb 2-1: USB disconnect, device number 69 [ 820.850446][ T5625] kye 0003:0458:5019.00AF: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 820.866203][ T5625] kye 0003:0458:5019.00AF: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 820.879008][ T5625] kye 0003:0458:5019.00AF: tablet-enabling feature report not found [ 820.887055][ T5625] kye 0003:0458:5019.00AF: tablet enabling failed [ 821.054138][ T5395] usb 5-1: USB disconnect, device number 40 [ 821.889319][T32475] "syz.3.12632" (32475) uses obsolete ecb(arc4) skcipher [ 822.030093][T32488] rtc_cmos 00:00: Alarms can be up to one day in the future [ 822.608159][T32513] loop6: detected capacity change from 0 to 524287999 [ 822.658940][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.668472][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.687443][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.696714][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.708109][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.717373][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.735964][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.745255][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.755416][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.764668][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.776650][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.785978][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.859291][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.868607][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.876959][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.886231][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.894260][T32513] ldm_validate_partition_table(): Disk read failed. [ 822.960087][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.969357][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.991904][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 823.001177][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 823.032533][T32513] Dev loop6: unable to read RDB block 0 [ 823.072989][T32513] loop6: unable to read partition table [ 823.096083][T32513] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 823.845908][T32549] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 824.467444][T32572] netlink: 'syz.0.12675': attribute type 63 has an invalid length. [ 824.572238][T32579] netlink: 'syz.0.12675': attribute type 63 has an invalid length. [ 825.579733][ T5625] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 825.733937][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.766272][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.816663][ T5625] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 825.829739][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.842016][ T5625] usb 5-1: config 0 descriptor?? [ 826.465055][ T5625] hid-led 0003:27B8:01ED.00B0: probe with driver hid-led failed with error -71 [ 826.496051][ T5625] usb 5-1: USB disconnect, device number 41 [ 827.362565][T32674] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 827.362565][T32674] program syz.4.12722 not setting count and/or reply_len properly [ 827.456184][T32678] openvswitch: netlink: Actions may not be safe on all matching packets [ 827.618959][ T5625] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 827.655557][T32688] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 827.778795][ T5625] usb 2-1: Using ep0 maxpacket: 16 [ 827.789343][ T5625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.822984][ T5625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.848726][ T5625] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 827.858048][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.876709][ T5625] usb 2-1: config 0 descriptor?? [ 827.945678][T32697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12732'. [ 828.188988][T32705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12736'. [ 828.202523][ T5384] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 828.293155][ T5625] holtek_kbd 0003:04D9:A055.00B1: unknown main item tag 0x0 [ 828.311678][ T5625] holtek_kbd 0003:04D9:A055.00B1: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 828.326763][T32709] tipc: Enabling of bearer rejected, already enabled [ 828.378726][ T5384] usb 5-1: Using ep0 maxpacket: 16 [ 828.400381][ T5384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.418764][ T5384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.429889][ T5384] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 828.439142][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.462333][ T5384] usb 5-1: config 0 descriptor?? [ 828.504822][ T5395] usb 2-1: USB disconnect, device number 70 [ 828.924519][ T5384] cypress 0003:04B4:DE61.00B2: unknown main item tag 0x0 [ 828.935551][ T5384] cypress 0003:04B4:DE61.00B2: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 828.948613][ T5569] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 829.088716][ T5395] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 829.122922][ T5569] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 829.130482][ T46] usb 5-1: USB disconnect, device number 42 [ 829.149550][ T5569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.162968][ T5569] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 829.174560][ T5569] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 829.182959][ T5569] usb 4-1: Manufacturer: syz [ 829.189950][ T5569] usb 4-1: config 0 descriptor?? [ 829.259225][ T5395] usb 3-1: Using ep0 maxpacket: 32 [ 829.310680][ T5395] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 829.353141][ T5395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.371133][ T5395] usb 3-1: Product: syz [ 829.375371][ T5395] usb 3-1: Manufacturer: syz [ 829.379868][ T5569] rc_core: IR keymap rc-hauppauge not found [ 829.384505][ T5395] usb 3-1: SerialNumber: syz [ 829.390629][ T5569] Registered IR keymap rc-empty [ 829.391439][ T5569] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 829.401420][ T5395] usb 3-1: config 0 descriptor?? [ 829.418448][ T5395] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 829.476169][ T5569] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input200 [ 829.499583][ T5569] usb 4-1: USB disconnect, device number 55 [ 829.617904][T32733] netlink: 'syz.1.12749': attribute type 1 has an invalid length. [ 829.640856][T32733] openvswitch: netlink: Actions may not be safe on all matching packets [ 829.830537][T32737] bridge1: entered promiscuous mode [ 829.836015][T32737] bridge1: entered allmulticast mode [ 829.855408][T32737] team0: Port device bridge1 added [ 830.075734][ T5395] gspca_ov534_9: reg_w failed -71 [ 830.368975][ T5384] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 830.378601][ T5395] gspca_ov534_9: Unknown sensor 0000 [ 830.378674][ T5395] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 830.437791][ T5395] usb 3-1: USB disconnect, device number 70 [ 830.583577][ T5384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.599501][ T5384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.609496][ T5384] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 830.632858][ T5384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.645484][ T5384] usb 4-1: config 0 descriptor?? [ 831.045668][T32760] netlink: 'syz.4.12762': attribute type 10 has an invalid length. [ 831.076222][T32760] bridge0: left allmulticast mode [ 831.084426][T32760] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.091697][T32760] bridge0: port 2(bridge_slave_1) entered listening state [ 831.099107][T32760] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.101534][ T5384] wacom 0003:056A:002A.00B3: unknown main item tag 0x0 [ 831.106254][T32760] bridge0: port 1(bridge_slave_0) entered listening state [ 831.128011][T32760] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 831.149812][ T5384] wacom 0003:056A:002A.00B3: unknown main item tag 0x0 [ 831.156786][ T5384] wacom 0003:056A:002A.00B3: unknown main item tag 0x0 [ 831.164081][ T5384] wacom 0003:056A:002A.00B3: unknown main item tag 0x0 [ 831.171456][ T5384] wacom 0003:056A:002A.00B3: unknown main item tag 0x0 [ 831.179561][ T5384] wacom 0003:056A:002A.00B3: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 831.196355][ T5384] wacom 0003:056A:002A.00B3: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0 [ 831.209197][ T5384] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.00B3/input/input201 [ 831.252769][T32764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12762'. [ 831.305235][ T5384] usb 4-1: USB disconnect, device number 56 [ 831.319007][T32764] bridge_slave_1: left allmulticast mode [ 831.325294][T32764] bridge_slave_1: left promiscuous mode [ 831.333047][T32764] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.476042][T32764] bridge_slave_0: left allmulticast mode [ 831.508835][T32764] bridge_slave_0: left promiscuous mode [ 831.516595][ T29] audit: type=1326 audit(1729121464.065:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=302 comm="syz.1.12766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f556657dff9 code=0x0 [ 831.551205][T32764] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.758720][T32764] bond0: (slave bridge0): Releasing backup interface [ 833.238827][ T380] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 833.537014][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12810'. [ 833.739625][ T407] program syz.4.12814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.358678][ T5569] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 834.528455][ T5569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.559964][ T446] tipc: Started in network mode [ 834.564923][ T446] tipc: Node identity 00003a3a000000000000000000000001, cluster identity 4711 [ 834.585825][ T5569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.608715][ T446] tipc: Enabling of bearer rejected, failed to enable media [ 834.609655][ T5569] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.636571][ T5569] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 834.646881][ T5569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.657348][ T5569] usb 4-1: config 0 descriptor?? [ 834.908935][ T5625] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 834.958698][ T5384] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 835.058668][ T5395] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 835.073672][ T5625] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 835.087207][ T5569] lenovo 0003:17EF:6047.00B4: unknown main item tag 0x0 [ 835.098327][ T5569] lenovo 0003:17EF:6047.00B4: unknown main item tag 0x0 [ 835.107575][ T5569] lenovo 0003:17EF:6047.00B4: unknown main item tag 0x0 [ 835.116164][ T5625] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 835.127057][ T5569] lenovo 0003:17EF:6047.00B4: unknown main item tag 0x0 [ 835.135660][ T5384] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 835.149404][ T5569] lenovo 0003:17EF:6047.00B4: unknown main item tag 0x0 [ 835.156649][ T5384] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.167548][ T5625] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 835.177997][ T5384] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 835.189528][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 835.197574][ T5625] usb 2-1: SerialNumber: syz [ 835.202774][ T5384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.213604][ T5569] lenovo 0003:17EF:6047.00B4: hidraw0: USB HID v0.06 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 835.233653][ T5625] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 835.243648][ T5384] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.253727][ T5395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.256533][ T5625] usb-storage 2-1:1.0: USB Mass Storage device detected [ 835.275672][ T5384] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 835.287703][ T5384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.297048][ T5384] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.306832][ T5384] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 835.317864][ T5384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.325403][ T5625] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 835.333189][ T5395] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 835.333223][ T5395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.353451][ T5395] usb 3-1: config 0 descriptor?? [ 835.374579][ T8] usb 4-1: USB disconnect, device number 57 [ 835.405446][ T5384] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.415916][ T5384] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 835.432852][ T5384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.439796][ T5625] scsi host1: usb-storage 2-1:1.0 [ 835.453090][ T5384] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.463094][ T5384] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 835.474810][ T5384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.483936][ T5384] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.496726][ T5384] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 835.509764][ T5384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.520673][ T5384] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.530491][ T5384] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 835.542382][ T5384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.557162][ T5384] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 835.566879][ T5384] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 835.579559][ T5384] usb 5-1: config 0 interface 0 has no altsetting 0 [ 835.591328][ T5384] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 835.600769][ T5384] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 835.609241][ T5384] usb 5-1: Product: syz [ 835.614512][ T5384] usb 5-1: Manufacturer: syz [ 835.621283][ T5384] usb 5-1: SerialNumber: syz [ 835.630373][ T5384] usb 5-1: config 0 descriptor?? [ 835.643911][ T5384] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 835.821982][ T5395] aquacomputer_d5next 0003:0C70:F001.00B5: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.2-1/input0 [ 835.902470][ T5384] usb 5-1: USB disconnect, device number 43 [ 835.951987][ T5384] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 836.020209][ T5395] usb 3-1: USB disconnect, device number 71 [ 836.728722][ T5395] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 836.918709][ T5395] usb 4-1: Using ep0 maxpacket: 32 [ 836.930428][ T5395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.958615][ T5395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.984371][ T5395] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 837.008477][ T5395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.064192][ T5395] usb 4-1: config 0 descriptor?? [ 837.504310][ T46] usb 2-1: USB disconnect, device number 71 [ 837.525269][ T5395] kone 0003:1E7D:2CED.00B6: item fetching failed at offset 2/5 [ 837.555327][ T5395] kone 0003:1E7D:2CED.00B6: parse failed [ 837.561495][ T5395] kone 0003:1E7D:2CED.00B6: probe with driver kone failed with error -22 [ 837.753556][ T5384] usb 4-1: USB disconnect, device number 58 [ 838.280315][ T535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12875'. [ 838.452831][ T537] netlink: 'syz.1.12878': attribute type 10 has an invalid length. [ 838.546907][ T537] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 838.550834][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12878'. [ 838.550893][ T543] bridge_slave_1: left allmulticast mode [ 838.550916][ T543] bridge_slave_1: left promiscuous mode [ 838.551091][ T543] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.555711][ T543] bridge_slave_0: left allmulticast mode [ 838.555737][ T543] bridge_slave_0: left promiscuous mode [ 838.555901][ T543] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.670134][ T8] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 838.828899][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 838.840150][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.863336][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.875710][ T543] bond0: (slave bridge0): Releasing backup interface [ 838.886874][ T8] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 838.903577][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.940995][ T8] usb 3-1: config 0 descriptor?? [ 839.029168][ T555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12884'. [ 839.413740][ T8] razer 0003:1532:011B.00B7: unknown main item tag 0x0 [ 839.426138][ T8] razer 0003:1532:011B.00B7: unknown main item tag 0x0 [ 839.433954][ T8] razer 0003:1532:011B.00B7: item fetching failed at offset 4/5 [ 839.444345][ T8] razer 0003:1532:011B.00B7: probe with driver razer failed with error -22 [ 839.644754][ T8] usb 3-1: USB disconnect, device number 72 [ 839.758590][ T46] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 839.913257][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12896'. [ 839.929951][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 839.959827][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 839.981691][ T46] usb 4-1: config 0 has no interface number 0 [ 839.987913][ T46] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.018926][ T46] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 840.028075][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.073411][ T46] usb 4-1: config 0 descriptor?? [ 840.082377][ T46] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 840.279015][ T8] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 840.307431][ T46] usb 4-1: USB disconnect, device number 59 [ 840.309919][ T46] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 840.430442][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.430485][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.430513][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 840.430556][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 840.430586][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.438866][ T8] usb 2-1: config 0 descriptor?? [ 840.942314][ T612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12910'. [ 840.978367][ T8] plantronics 0003:047F:FFFF.00B8: ignoring exceeding usage max [ 840.995543][ T8] plantronics 0003:047F:FFFF.00B8: unbalanced collection at end of report description [ 841.006271][ T8] plantronics 0003:047F:FFFF.00B8: parse failed [ 841.018741][ T8] plantronics 0003:047F:FFFF.00B8: probe with driver plantronics failed with error -22 [ 841.215152][ T8] usb 2-1: USB disconnect, device number 72 [ 841.218590][ T623] dlm: non-version read from control device 36 [ 841.244919][ T624] netlink: 'syz.2.12915': attribute type 10 has an invalid length. [ 841.289493][ T624] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.297094][ T624] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.349239][ T624] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.356471][ T624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.363998][ T624] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.371276][ T624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.387787][ T624] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 841.413501][ T627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12915'. [ 841.446457][ T627] bridge_slave_1: left allmulticast mode [ 841.463570][ T627] bridge_slave_1: left promiscuous mode [ 841.476677][ T627] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.498189][ T627] bridge_slave_0: left allmulticast mode [ 841.504323][ T627] bridge_slave_0: left promiscuous mode [ 841.511393][ T627] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.599058][ T627] bond0: (slave bridge0): Releasing backup interface [ 842.934453][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12944'. [ 843.359326][ T8] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 843.549248][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 843.571775][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.585644][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.595622][ T8] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 843.604747][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.617026][ T8] usb 2-1: config 0 descriptor?? [ 843.719084][ T5395] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 843.747683][ T723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12959'. [ 843.898725][ T5395] usb 5-1: Using ep0 maxpacket: 32 [ 843.926150][ T5395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.939688][ T5395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.950242][ T5395] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 843.959439][ T5395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.969785][ T5395] usb 5-1: config 0 descriptor?? [ 844.031912][ T733] trusted_key: encrypted_key: key trusted:syz not found [ 844.057539][ T8] bigben 0003:146B:0902.00B9: unexpected rdesc, please submit for review [ 844.095249][ T8] bigben 0003:146B:0902.00B9: unknown main item tag 0x2 [ 844.111824][ T8] bigben 0003:146B:0902.00B9: unbalanced collection at end of report description [ 844.128410][ T8] bigben 0003:146B:0902.00B9: parse failed [ 844.134457][ T8] bigben 0003:146B:0902.00B9: probe with driver bigben failed with error -22 [ 844.271160][ T8] usb 2-1: USB disconnect, device number 73 [ 844.392172][ T5395] koneplus 0003:1E7D:2D51.00BA: unknown main item tag 0x0 [ 844.412525][ T5395] koneplus 0003:1E7D:2D51.00BA: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 844.602459][ T8] usb 5-1: USB disconnect, device number 44 [ 844.619139][ T5381] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 844.808660][ T5381] usb 3-1: Using ep0 maxpacket: 16 [ 844.817100][ T5381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.843475][ T5381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.878112][ T5381] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.893426][ T5381] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 844.902894][ T5381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.919352][ T5381] usb 3-1: config 0 descriptor?? [ 845.434064][ T5381] koneplus 0003:1E7D:2E22.00BB: item fetching failed at offset 0/2 [ 845.443810][ T5381] koneplus 0003:1E7D:2E22.00BB: parse failed [ 845.458851][ T5381] koneplus 0003:1E7D:2E22.00BB: probe with driver koneplus failed with error -22 [ 845.675890][ T8] usb 3-1: USB disconnect, device number 73 [ 846.657477][ T839] netlink: 'syz.1.13013': attribute type 2 has an invalid length. [ 846.670149][ T839] netlink: 'syz.1.13013': attribute type 2 has an invalid length. [ 846.688731][ T839] netlink: 206648 bytes leftover after parsing attributes in process `syz.1.13013'. [ 846.826421][ T849] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 847.048634][ T8] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 847.203510][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 847.213592][ T8] usb 2-1: config 0 has no interface number 0 [ 847.225822][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.237547][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.259461][ T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 847.268797][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.280267][ T8] usb 2-1: config 0 descriptor?? [ 847.714000][ T8] uclogic 0003:256C:006D.00BC: unknown main item tag 0x0 [ 847.721239][ T8] uclogic 0003:256C:006D.00BC: unknown main item tag 0x0 [ 847.728332][ T8] uclogic 0003:256C:006D.00BC: unknown main item tag 0x0 [ 847.762505][ T8] uclogic 0003:256C:006D.00BC: unknown main item tag 0x0 [ 847.798434][ T8] uclogic 0003:256C:006D.00BC: unknown main item tag 0x0 [ 847.816457][ T8] uclogic 0003:256C:006D.00BC: No inputs registered, leaving [ 847.826355][ T8] uclogic 0003:256C:006D.00BC: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 847.879898][ T5384] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 847.934415][ T5625] usb 2-1: USB disconnect, device number 74 [ 847.955625][ T901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13032'. [ 848.052718][ T5384] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 848.058710][ T5395] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 848.079430][ T5384] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 848.093366][ T5384] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 848.155418][ T5384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.194591][ T887] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 848.206419][ T5384] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.222430][ T5395] usb 3-1: Using ep0 maxpacket: 16 [ 848.245427][ T5395] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.282906][ T5395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 848.329235][ T5395] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 848.358113][ T5395] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 848.374968][ T5395] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 848.404182][ T5395] usb 3-1: Manufacturer: syz [ 848.420543][ T5381] usb 4-1: USB disconnect, device number 60 [ 848.440772][ T5395] usb 3-1: config 0 descriptor?? [ 848.742901][ T5384] usb 3-1: USB disconnect, device number 74 [ 848.930416][ T926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13043'. [ 849.857199][ T958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13057'. [ 850.046545][ T965] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13060'. [ 850.119960][ T965] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 850.128748][ T5381] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 850.309714][ T5381] usb 2-1: Using ep0 maxpacket: 8 [ 850.316807][ T5381] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 850.338271][ T5381] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.380022][ T5381] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 850.409899][ T5381] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.423218][ T5381] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 850.432575][ T5381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.653531][ T5381] usb 2-1: GET_CAPABILITIES returned 0 [ 850.660213][ T5381] usbtmc 2-1:16.0: can't read capabilities [ 850.862667][ T5395] usb 2-1: USB disconnect, device number 75 [ 851.238639][ T5384] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 851.388679][ T5384] usb 5-1: Using ep0 maxpacket: 32 [ 851.412148][ T5384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.439669][ T5384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.458595][ T5384] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 851.467689][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.490677][ T5384] usb 5-1: config 0 descriptor?? [ 851.572482][ T995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13072'. [ 851.618820][ T995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13072'. [ 851.701995][ T999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13073'. [ 851.919698][ T5384] wacom 0003:056A:5000.00BD: unknown main item tag 0x0 [ 851.953644][ T5384] wacom 0003:056A:5000.00BD: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.4-1/input0 [ 852.176573][ T5381] usb 5-1: USB disconnect, device number 45 [ 852.347386][ T5395] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 852.585006][ T5395] usb 2-1: Using ep0 maxpacket: 8 [ 852.594871][ T5395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.594913][ T5395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.594972][ T5395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.595019][ T5395] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 852.595073][ T5395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.597183][ T5395] usb 2-1: config 0 descriptor?? [ 853.017299][ T5395] wacom 0003:056A:0000.00BE: unknown main item tag 0x0 [ 853.053054][ T5395] wacom 0003:056A:0000.00BE: unknown main item tag 0x0 [ 853.062296][ T5395] wacom 0003:056A:0000.00BE: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 853.080364][ T5395] wacom 0003:056A:0000.00BE: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 853.095062][ T5395] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.00BE/input/input207 [ 853.252394][ T5384] usb 2-1: USB disconnect, device number 76 [ 853.845702][ T1051] IPv6: addrconf: prefix option has invalid lifetime [ 853.852496][ T1051] IPv6: addrconf: prefix option has invalid lifetime [ 854.602032][ T1079] binder: 1078:1079 ioctl c018620c 20000000 returned -22 [ 854.953283][ T1094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13112'. [ 856.669004][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 856.879498][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 856.899629][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.927985][ T8] usb 3-1: config 0 descriptor?? [ 856.961902][ T8] cp210x 3-1:0.0: cp210x converter detected [ 857.440993][ T8] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 857.497873][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 857.756755][ T5625] usb 3-1: USB disconnect, device number 75 [ 857.768353][ T5625] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 857.787312][ T5625] cp210x 3-1:0.0: device disconnected [ 858.173996][ T1177] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 858.460678][ T5395] IPVS: starting estimator thread 0... [ 858.563676][ T1188] IPVS: using max 16 ests per chain, 38400 per kthread [ 859.106306][ T1213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13156'. [ 859.841823][ T1238] netlink: 'syz.2.13167': attribute type 10 has an invalid length. [ 859.888137][ T1238] netlink: 'syz.2.13167': attribute type 4 has an invalid length. [ 859.899649][ T1238] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13167'. [ 860.044603][ T1238] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 861.316433][ T2953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.593893][ T2953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.744771][ T2953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.950448][ T5397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 861.965333][ T5397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 861.976751][ T5397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 861.985270][ T5397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 861.993271][ T5397] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 862.001208][ T5397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 862.081264][ T2953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.552526][ T1302] chnl_net:caif_netlink_parms(): no params data found [ 862.863638][ T2953] bridge_slave_1: left allmulticast mode [ 862.887492][ T2953] bridge_slave_1: left promiscuous mode [ 862.921802][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.083079][ T2953] bridge_slave_0: left allmulticast mode [ 863.090739][ T2953] bridge_slave_0: left promiscuous mode [ 863.098102][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.144819][ T5397] Bluetooth: hci0: command tx timeout [ 865.004488][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.037619][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.074426][ T2953] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 865.095780][ T2953] tipc: Resetting bearer [ 865.139291][ T2953] tipc: Resetting bearer [ 865.146619][ T2953] bond0 (unregistering): Released all slaves [ 865.434916][ T2953] tipc: Disabling bearer [ 865.520913][ T2953] tipc: Disabling bearer [ 865.542122][ T2953] tipc: Left network mode [ 865.733339][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.754698][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.776951][ T1302] bridge_slave_0: entered allmulticast mode [ 865.810372][ T1302] bridge_slave_0: entered promiscuous mode [ 865.973828][ T1382] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 866.037055][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.054817][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.074870][ T1302] bridge_slave_1: entered allmulticast mode [ 866.088780][ T1302] bridge_slave_1: entered promiscuous mode [ 866.219903][ T5397] Bluetooth: hci0: command tx timeout [ 866.465807][ T1302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.504386][ T1390] netlink: 100 bytes leftover after parsing attributes in process `syz.2.13223'. [ 866.539980][ T8] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 866.563638][ T1405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13227'. [ 866.581393][ T1405] vlan2: entered allmulticast mode [ 866.596462][ T1405] bridge_slave_0: entered allmulticast mode [ 866.670154][ T1302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.708640][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 866.730462][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.741675][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 866.768633][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 866.791640][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 866.803750][ T2953] hsr_slave_0: left promiscuous mode [ 866.820336][ T2953] hsr_slave_1: left promiscuous mode [ 866.836738][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.870157][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.900503][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 866.900879][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.916610][ T8] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 866.929573][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.940098][ T8] usb 5-1: Manufacturer: syz [ 866.960095][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.965425][ T8] usb 5-1: config 0 descriptor?? [ 867.098196][ T2953] veth1_macvtap: left promiscuous mode [ 867.134046][ T2953] veth0_macvtap: left promiscuous mode [ 867.155345][ T2953] veth1_vlan: left promiscuous mode [ 867.167990][ T2953] veth0_vlan: left promiscuous mode [ 867.338765][ T8] rc_core: IR keymap rc-hauppauge not found [ 867.344932][ T8] Registered IR keymap rc-empty [ 867.354548][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.378665][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.425773][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 867.467999][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input211 [ 867.487444][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.527564][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.558734][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.581548][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.608731][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.649193][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.671613][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.698817][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.729528][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.791988][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.823366][ T8] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 867.846366][ T8] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 867.897049][ T8] usb 5-1: USB disconnect, device number 46 [ 868.302528][ T5397] Bluetooth: hci0: command tx timeout [ 868.612935][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 868.806194][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 868.838372][ T1433] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13236'. [ 870.168067][ T1302] team0: Port device team_slave_0 added [ 870.238963][ T1302] team0: Port device team_slave_1 added [ 870.309055][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.315445][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.378808][ T5397] Bluetooth: hci0: command tx timeout [ 870.459548][ T1302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.496603][ T1302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.576599][ T1302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.614305][ T1302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.674382][ T1302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.713020][ T1302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.950813][ T1302] hsr_slave_0: entered promiscuous mode [ 870.996819][ T1302] hsr_slave_1: entered promiscuous mode [ 871.075713][ T1302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.084240][ T1302] Cannot create hsr debugfs directory [ 872.844991][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.180324][T29270] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 873.238184][T29270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 873.247381][T29270] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 873.257138][T29270] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 873.267807][T29270] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 873.276533][T29270] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 873.347927][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.437864][ T1521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13269'. [ 873.693178][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.863779][ T1302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 873.882143][ T1302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 873.956386][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.004471][ T1302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 874.021461][ T1302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 874.398857][ T5485] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 874.523993][ T1520] chnl_net:caif_netlink_parms(): no params data found [ 874.598606][ T5485] usb 2-1: Using ep0 maxpacket: 8 [ 874.605389][ T5485] usb 2-1: config 0 has no interfaces? [ 874.617477][ T5485] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 874.627733][ T5485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.679893][ T5485] usb 2-1: Product: syz [ 874.684141][ T5485] usb 2-1: Manufacturer: syz [ 874.699786][ T5485] usb 2-1: SerialNumber: syz [ 874.740218][ T5485] usb 2-1: config 0 descriptor?? [ 874.849414][ T1302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.858348][ T1572] tipc: New replicast peer: 255.255.255.255 [ 874.868315][ T1572] tipc: Enabled bearer , priority 10 [ 875.037475][ T5485] usb 2-1: USB disconnect, device number 77 [ 875.149650][ T29] audit: type=1326 audit(1729121507.705:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1581 comm="syz.4.13289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eed7dff9 code=0x7ffc0000 [ 875.186008][ T29] audit: type=1326 audit(1729121507.735:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1581 comm="syz.4.13289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eed7dff9 code=0x7ffc0000 [ 875.211332][ T29] audit: type=1326 audit(1729121507.735:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1581 comm="syz.4.13289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18eed7dff9 code=0x7ffc0000 [ 875.235602][ T1520] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.239072][ T29] audit: type=1326 audit(1729121507.735:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1581 comm="syz.4.13289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eed7dff9 code=0x7ffc0000 [ 875.265315][ T29] audit: type=1326 audit(1729121507.735:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1581 comm="syz.4.13289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eed7dff9 code=0x7ffc0000 [ 875.300492][ T1520] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.307835][ T1520] bridge_slave_0: entered allmulticast mode [ 875.320079][ T1520] bridge_slave_0: entered promiscuous mode [ 875.348941][T29270] Bluetooth: hci6: command tx timeout [ 875.356479][ T29] audit: type=1326 audit(1729121507.735:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1581 comm="syz.4.13289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f18eed7dff9 code=0x7ffc0000 [ 875.446187][ T29] audit: type=1326 audit(1729121507.735:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1581 comm="syz.4.13289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eed7dff9 code=0x7ffc0000 [ 875.470486][ T29] audit: type=1326 audit(1729121507.735:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1581 comm="syz.4.13289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eed7dff9 code=0x7ffc0000 [ 875.926350][ T1600] trusted_key: syz.1.13292 sent an empty control message without MSG_MORE. [ 876.546307][ T5397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 876.556626][ T5397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 876.582460][ T5397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 876.603668][ T5397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 876.614775][ T5397] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 876.625145][ T5397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 877.337924][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.396373][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.418670][ T5397] Bluetooth: hci6: command tx timeout [ 877.426884][ T35] bond0 (unregistering): Released all slaves [ 877.481770][ T35] bond1 (unregistering): Released all slaves [ 877.526864][ T1520] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.565692][ T1520] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.587409][ T1520] bridge_slave_1: entered allmulticast mode [ 877.602024][ T1520] bridge_slave_1: entered promiscuous mode [ 877.727621][ T35] Êü: left promiscuous mode [ 877.803959][ T1520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.815836][ T1520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.896609][ T1302] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.032762][ T35] tipc: Left network mode [ 878.041301][ T1520] team0: Port device team_slave_0 added [ 878.122335][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.129571][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.169127][ T1520] team0: Port device team_slave_1 added [ 878.294005][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.301318][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.418795][ T5485] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 878.599362][ T5485] usb 2-1: Using ep0 maxpacket: 32 [ 878.651246][ T1520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.674826][ T5485] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 878.686927][ T5485] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 878.700115][ T5397] Bluetooth: hci2: command tx timeout [ 878.707011][ T5485] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.710134][ T1520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.729780][ T5485] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.742575][ T1520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.764990][ T1520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.772198][ T1520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.798362][ T1520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.852572][ T5485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.873646][ T35] hsr_slave_0: left promiscuous mode [ 878.917121][ T35] hsr_slave_1: left promiscuous mode [ 878.948213][ T5485] usb 2-1: Product: syz [ 878.973266][ T5485] usb 2-1: Manufacturer: syz [ 878.978448][ T5485] usb 2-1: SerialNumber: syz [ 879.038292][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.048331][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.082595][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.093208][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.125748][ T1683] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.13309'. [ 879.201040][ T29] audit: type=1326 audit(1729121511.755:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1684 comm="syz.4.13310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18eed7dff9 code=0x0 [ 879.216654][ T5485] usb 2-1: 0:2 : does not exist [ 879.234613][ T35] veth1_macvtap: left promiscuous mode [ 879.249304][ T5485] usb 2-1: USB disconnect, device number 78 [ 879.256225][ T35] veth0_macvtap: left promiscuous mode [ 879.265381][ T35] veth1_vlan: left promiscuous mode [ 879.279249][ T35] veth0_vlan: left promiscuous mode [ 879.306272][T28694] udevd[28694]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.509449][ T5397] Bluetooth: hci6: command tx timeout [ 880.129562][ T1690] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.13312'. [ 880.139203][ T1690] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 880.457993][ T35] team0 (unregistering): Port device team_slave_1 removed [ 880.527127][ T35] team0 (unregistering): Port device team_slave_0 removed [ 880.784238][ T5397] Bluetooth: hci2: command tx timeout [ 881.592807][ T5397] Bluetooth: hci6: command tx timeout [ 882.153556][ T1520] hsr_slave_0: entered promiscuous mode [ 882.195221][ T1520] hsr_slave_1: entered promiscuous mode [ 882.228822][ T1520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 882.239587][ T1520] Cannot create hsr debugfs directory [ 882.474172][ T1623] chnl_net:caif_netlink_parms(): no params data found [ 882.638656][ T5569] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 882.848726][ T5569] usb 5-1: Using ep0 maxpacket: 8 [ 882.859254][ T5397] Bluetooth: hci2: command tx timeout [ 882.890063][ T5569] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 882.906298][ T5569] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 882.906315][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.906389][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.916639][ T5569] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.919143][ T5569] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 882.952256][ T5569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.961179][ T5569] usb 5-1: Product: syz [ 882.965389][ T5569] usb 5-1: Manufacturer: syz [ 882.970890][ T5569] usb 5-1: SerialNumber: syz [ 883.006377][ T1623] bridge_slave_0: entered allmulticast mode [ 883.027545][ T1623] bridge_slave_0: entered promiscuous mode [ 883.078101][ T1623] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.116969][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.148919][ T1623] bridge_slave_1: entered allmulticast mode [ 883.188098][ T1623] bridge_slave_1: entered promiscuous mode [ 883.314331][ T1623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.330980][ T1623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.535173][ T1302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.596653][ T5569] usb 5-1: 0:2 : does not exist [ 883.740826][ T1623] team0: Port device team_slave_0 added [ 883.848143][ T5569] usb 5-1: USB disconnect, device number 47 [ 884.014024][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.026463][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.072699][ T1623] team0: Port device team_slave_1 added [ 884.262285][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.276660][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.553118][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.613798][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.669599][ T1623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.677616][ T1623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.716047][ T1623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.743703][ T1623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.768697][ T1623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.815253][ T1623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.939775][ T5397] Bluetooth: hci2: command tx timeout [ 885.075204][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.110676][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.347601][ T1623] hsr_slave_0: entered promiscuous mode [ 885.387636][ T1623] hsr_slave_1: entered promiscuous mode [ 885.430914][ T1623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.466325][ T1623] Cannot create hsr debugfs directory [ 885.623030][ T1302] veth0_vlan: entered promiscuous mode [ 885.891242][ T1302] veth1_vlan: entered promiscuous mode [ 886.022672][ T1520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 886.054525][ T1520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 886.062563][T29270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 886.074618][T29270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 886.086705][T29270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 886.100326][T29270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 886.120971][T29270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 886.131144][T29270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 886.179079][ T1520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 886.230206][ T1520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 886.346201][ T1302] veth0_macvtap: entered promiscuous mode [ 886.390835][ T1302] veth1_macvtap: entered promiscuous mode [ 886.551385][ T35] bridge_slave_1: left allmulticast mode [ 886.557108][ T35] bridge_slave_1: left promiscuous mode [ 886.582583][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.631104][ T35] bridge_slave_0: left allmulticast mode [ 886.636822][ T35] bridge_slave_0: left promiscuous mode [ 886.674533][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.684928][T29270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 886.697737][T29270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 886.710458][T29270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 886.729084][T29270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 886.748090][T29270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 886.783377][T29270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 887.374726][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.397438][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.414361][ T35] bond0 (unregistering): Released all slaves [ 887.533365][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.546186][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.566860][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.595802][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.606885][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.619024][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.629340][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.640438][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.650608][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.662551][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.683137][ T1302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.722131][ T35] tipc: Disabling bearer [ 887.748712][ T35] tipc: Left network mode [ 887.982738][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.003325][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.027305][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.047025][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.057319][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.069286][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.079764][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.092659][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.105232][ T1302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.117222][ T1302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.130102][ T1302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.218926][T29270] Bluetooth: hci3: command tx timeout [ 888.356211][ T1302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.383314][ T1302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.394735][ T1302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.405812][ T1302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.612386][ T35] hsr_slave_0: left promiscuous mode [ 888.628081][ T35] hsr_slave_1: left promiscuous mode [ 888.641618][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.651019][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.669017][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.676488][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.720522][ T35] veth1_macvtap: left promiscuous mode [ 888.735924][ T35] veth0_macvtap: left promiscuous mode [ 888.743652][ T35] veth0_vlan: left promiscuous mode [ 888.860669][ T5397] Bluetooth: hci1: command tx timeout [ 889.682973][ T35] team0 (unregistering): Port device team_slave_1 removed [ 889.761643][ T35] team0 (unregistering): Port device team_slave_0 removed [ 890.299301][T29270] Bluetooth: hci3: command tx timeout [ 890.847036][ T1520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.940243][T29270] Bluetooth: hci1: command tx timeout [ 891.082864][ T3045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.115631][ T3045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.253556][ T1769] chnl_net:caif_netlink_parms(): no params data found [ 891.375114][ T1772] chnl_net:caif_netlink_parms(): no params data found [ 891.426055][ T1520] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.506832][ T1623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 891.554649][ T3045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.589668][ T3045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.738820][ T1623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 891.763032][ T1623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 891.785419][ T1623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 891.806133][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.813349][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.835106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.842309][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.935148][ T35] IPVS: stop unused estimator thread 0... [ 892.037437][ T1769] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.064615][ T1769] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.075824][ T1769] bridge_slave_0: entered allmulticast mode [ 892.086843][ T1769] bridge_slave_0: entered promiscuous mode [ 892.153023][ T1769] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.172255][ T1769] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.189969][ T1769] bridge_slave_1: entered allmulticast mode [ 892.201842][ T1769] bridge_slave_1: entered promiscuous mode [ 892.289214][ T5569] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 892.345842][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.368721][ T1772] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.377028][ T1772] bridge_slave_0: entered allmulticast mode [ 892.386472][T29270] Bluetooth: hci3: command tx timeout [ 892.399704][ T1772] bridge_slave_0: entered promiscuous mode [ 892.432869][ T1769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.452776][ T1769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.467294][ T5569] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.478368][ T5569] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.490819][ T5569] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 892.501134][ T5569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 892.510548][ T5569] usb 4-1: SerialNumber: syz [ 892.570013][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.583296][ T1772] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.599062][ T1772] bridge_slave_1: entered allmulticast mode [ 892.638970][ T1772] bridge_slave_1: entered promiscuous mode [ 892.742133][ T5569] usb 4-1: 0:2 : does not exist [ 892.760542][ T5569] usb 4-1: USB disconnect, device number 61 [ 892.813850][ T1710] udevd[1710]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.944432][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.989123][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.021646][T29270] Bluetooth: hci1: command tx timeout [ 893.087497][ T1772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.122700][ T1769] team0: Port device team_slave_0 added [ 893.146150][ T1772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.253163][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.265563][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.304622][ T1769] team0: Port device team_slave_1 added [ 893.427172][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.444549][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.597895][ T1772] team0: Port device team_slave_0 added [ 893.636971][ T1772] team0: Port device team_slave_1 added [ 893.710881][ T35] bond0: (slave netdevsim0): Releasing backup interface [ 893.744751][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.778648][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.815409][ T1769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.825051][ T1769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.862458][ T1769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.930745][ T1769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.940294][ T1769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.976507][ T1769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.054371][ T1772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.080059][ T1772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.121814][ T1772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.169145][ T1772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.176146][ T1772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.203451][ T1772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.232000][ T1520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.461174][T29270] Bluetooth: hci3: command tx timeout [ 894.486645][ T1623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.581711][ T1769] hsr_slave_0: entered promiscuous mode [ 894.626090][ T1769] hsr_slave_1: entered promiscuous mode [ 894.647479][ T1769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.655314][ T1769] Cannot create hsr debugfs directory [ 894.706581][ T1772] hsr_slave_0: entered promiscuous mode [ 894.737839][ T1772] hsr_slave_1: entered promiscuous mode [ 894.761569][ T1772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.794807][ T1772] Cannot create hsr debugfs directory [ 894.915688][ T1520] veth0_vlan: entered promiscuous mode [ 895.002491][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.100750][T29270] Bluetooth: hci1: command tx timeout [ 895.256910][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.305277][ T1520] veth1_vlan: entered promiscuous mode [ 895.532521][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.623020][ T1623] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.716488][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.867440][ T1520] veth0_macvtap: entered promiscuous mode [ 895.991497][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.998869][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.104580][ T1520] veth1_macvtap: entered promiscuous mode [ 896.152422][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.159660][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.356900][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.409400][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.438871][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.506283][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.540245][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.584078][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.609689][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.668658][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.683562][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.696229][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.753069][ T1520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.864820][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.906650][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.917837][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.928840][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.961518][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.989621][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.019649][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.038628][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.071665][ T1520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.084183][ T1520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.097139][ T1520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.226281][ T1520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.236504][ T1520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.247092][ T1520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.258445][ T1520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.278194][ T1623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 898.303746][ T35] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 898.626865][ T35] team0: Port device bridge1 removed [ 898.894768][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.909339][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.926555][ T35] bond0 (unregistering): Released all slaves [ 899.153077][ T35] bond1 (unregistering): Released all slaves [ 899.181399][ T35] bond2 (unregistering): Released all slaves [ 899.203910][ T35] bond3 (unregistering): Released all slaves [ 899.223042][ T35] bond4 (unregistering): Released all slaves [ 899.242861][ T35] bond5 (unregistering): Released all slaves [ 899.475763][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.498311][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.517960][ T35] bond0 (unregistering): Released all slaves [ 899.791649][ T35] ÊügáG: left promiscuous mode [ 899.914128][ T35] Êü: left promiscuous mode [ 900.000593][ T1623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.046716][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.056032][ T35] tipc: Disabling bearer [ 900.061916][ T35] tipc: Disabling bearer [ 900.101566][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.109384][ T35] tipc: Left network mode [ 900.153073][ T35] tipc: Disabling bearer [ 900.178686][ T35] tipc: Disabling bearer [ 900.188121][ T35] tipc: Left network mode [ 900.255890][ T3045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.286268][ T3045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.762872][ T1623] veth0_vlan: entered promiscuous mode [ 900.800672][ T1919] pim6reg: entered allmulticast mode [ 900.957247][ T1918] pim6reg: left allmulticast mode [ 901.075114][ T1623] veth1_vlan: entered promiscuous mode [ 901.253120][ T1623] veth0_macvtap: entered promiscuous mode [ 901.416094][ T1623] veth1_macvtap: entered promiscuous mode [ 901.511883][ T1772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 901.554006][ T1772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 901.639583][ T1772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 901.659499][ T30] INFO: task syz.2.11594:30230 blocked for more than 143 seconds. [ 901.667390][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 901.708171][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 901.745906][ T30] task:syz.2.11594 state:D stack:27360 pid:30230 tgid:30227 ppid:25466 flags:0x00000004 [ 901.767022][ T30] Call Trace: [ 901.799027][ T30] [ 901.808727][ T30] __schedule+0x1895/0x4b30 [ 901.813357][ T30] ? __pfx___schedule+0x10/0x10 [ 901.818266][ T30] ? __pfx_lock_release+0x10/0x10 [ 901.825012][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 901.833848][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 901.841599][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 901.848043][ T30] ? schedule+0x90/0x320 [ 901.853748][ T30] schedule+0x14b/0x320 [ 901.859411][ T30] schedule_preempt_disabled+0x13/0x30 [ 901.867028][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 901.873239][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 901.879443][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 901.885664][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 901.891716][ T30] ? __might_fault+0xaa/0x120 [ 901.922726][ T30] ? __pfx_lock_release+0x10/0x10 [ 901.927873][ T30] down_write+0x1d7/0x220 [ 901.932660][ T30] ? __pfx_down_write+0x10/0x10 [ 901.937657][ T30] ? __might_fault+0xc6/0x120 [ 901.942893][ T30] blkdev_common_ioctl+0x150b/0x2480 [ 901.948259][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 901.966463][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 901.973563][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 901.980338][ T30] ? file_to_blk_mode+0xcc/0x140 [ 901.985764][ T30] blkdev_ioctl+0x4ca/0x6a0 [ 901.990628][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 901.995708][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 902.002345][ T30] __se_sys_ioctl+0xf9/0x170 [ 902.008939][ T30] do_syscall_64+0xf3/0x230 [ 902.013505][ T30] ? clear_bhb_loop+0x35/0x90 [ 902.018220][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.025055][ T30] RIP: 0033:0x7f2ecbf7dff9 [ 902.030557][ T30] RSP: 002b:00007f2eccd2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 902.039473][ T30] RAX: ffffffffffffffda RBX: 00007f2ecc135f80 RCX: 00007f2ecbf7dff9 [ 902.049781][ T30] RDX: 0000000020000240 RSI: 000000000000127f RDI: 0000000000000003 [ 902.057822][ T30] RBP: 00007f2ecbff0296 R08: 0000000000000000 R09: 0000000000000000 [ 902.067976][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.076442][ T30] R13: 0000000000000000 R14: 00007f2ecc135f80 R15: 00007f2ecc25fa28 [ 902.094951][ T30] [ 902.098280][ T30] [ 902.098280][ T30] Showing all locks held in the system: [ 902.114795][ T30] 3 locks held by kworker/u8:1/12: [ 902.135346][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 902.149667][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 902.162301][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 902.172996][ T30] 1 lock held by khungtaskd/30: [ 902.177890][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 902.189106][ T30] 4 locks held by kworker/u8:2/35: [ 902.195303][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 902.206468][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 902.221539][ T30] #2: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 902.235562][ T30] #3: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 902.246822][ T30] 2 locks held by kworker/u8:3/52: [ 902.252055][ T30] 3 locks held by kworker/u8:7/2997: [ 902.257375][ T30] #0: ffff88801bff1148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 902.268981][ T30] #1: ffffc9000a477d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 902.283826][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 902.294870][ T30] 3 locks held by kworker/u8:8/3045: [ 902.301137][ T30] #0: ffff88814bae3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 902.313173][ T30] #1: ffffc9000a5e7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 902.327225][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 902.339737][ T30] 2 locks held by dhcpcd/4900: [ 902.344563][ T30] #0: ffff88806c69c6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 902.355826][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 902.366113][ T30] 2 locks held by getty/4982: [ 902.372197][ T30] #0: ffff88814c2620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 902.383723][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 902.396782][ T30] 3 locks held by kworker/1:5/5485: [ 902.403295][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 902.415315][ T30] #1: ffffc900041b7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 902.430064][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 902.443673][ T30] 1 lock held by syz.2.9355/25114: [ 902.450143][ T30] 1 lock held by syz.2.11594/30230: [ 902.456391][ T30] #0: ffff888148c870c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480 [ 902.486715][ T30] 1 lock held by syz-executor/1623: [ 902.498647][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 902.508330][ T30] 7 locks held by syz-executor/1769: [ 902.515492][ T30] #0: ffff8880325de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 902.526046][ T30] #1: ffff888063a3ec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 902.536264][ T30] #2: ffff88802692fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 902.546791][ T30] #3: ffffffff8f570ce8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 902.559907][ T30] #4: ffff88806c6990e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 902.571327][ T30] #5: ffff88806c69a250 (&devlink->lock_key#17){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 902.582930][ T30] #6: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: fib_seq_sum+0x31/0x290 [ 902.596844][ T30] 1 lock held by syz-executor/1772: [ 902.605810][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 902.615761][ T30] 1 lock held by syz.2.13368/1934: [ 902.622995][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 902.689998][ T30] [ 902.692397][ T30] ============================================= [ 902.692397][ T30] [ 902.714764][ T30] NMI backtrace for cpu 1 [ 902.719262][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 902.729815][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 902.739918][ T30] Call Trace: [ 902.743227][ T30] [ 902.746184][ T30] dump_stack_lvl+0x241/0x360 [ 902.750912][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 902.756155][ T30] ? __pfx__printk+0x10/0x10 [ 902.760799][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 902.765799][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 902.771303][ T30] ? _printk+0xd5/0x120 [ 902.775493][ T30] ? __pfx__printk+0x10/0x10 [ 902.780119][ T30] ? __wake_up_klogd+0xcc/0x110 [ 902.785025][ T30] ? __pfx__printk+0x10/0x10 [ 902.789655][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 902.794719][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 902.800739][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 902.806738][ T30] watchdog+0xff4/0x1040 [ 902.811010][ T30] ? watchdog+0x1ea/0x1040 [ 902.815450][ T30] ? __pfx_watchdog+0x10/0x10 [ 902.820142][ T30] kthread+0x2f0/0x390 [ 902.824219][ T30] ? __pfx_watchdog+0x10/0x10 [ 902.828923][ T30] ? __pfx_kthread+0x10/0x10 [ 902.833541][ T30] ret_from_fork+0x4b/0x80 [ 902.838024][ T30] ? __pfx_kthread+0x10/0x10 [ 902.842645][ T30] ret_from_fork_asm+0x1a/0x30 [ 902.847452][ T30] [ 902.851110][ T30] Sending NMI from CPU 1 to CPUs 0: [ 902.856404][ C0] NMI backtrace for cpu 0 [ 902.856420][ C0] CPU: 0 UID: 0 PID: 4675 Comm: klogd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 902.856443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 902.856455][ C0] RIP: 0010:do_syslog+0x10/0x810 [ 902.856481][ C0] Code: 82 0b 8c e9 b2 f6 15 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 48 83 e4 e0 48 81 ec 60 01 00 00 89 cb 48 89 54 24 18 48 89 74 [ 902.856498][ C0] RSP: 0018:ffffc900031dfeb8 EFLAGS: 00000246 [ 902.856518][ C0] RAX: 1ffff9200063bff7 RBX: ffffc900031dffb8 RCX: 0000000000000000 [ 902.856532][ C0] RDX: 00000000000003ff RSI: 00007f95e41e64a0 RDI: 0000000000000002 [ 902.856545][ C0] RBP: ffffc900031dfed8 R08: ffffffff901cfe6f R09: 1ffffffff2039fcd [ 902.856560][ C0] R10: dffffc0000000000 R11: fffffbfff2039fce R12: dffffc0000000000 [ 902.856574][ C0] R13: 0000000000000000 R14: 0000000000000002 R15: 00007f95e41e64a0 [ 902.856588][ C0] FS: 00007f95e3ee6380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 902.856605][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.856618][ C0] CR2: 000056375b8bd058 CR3: 000000002f292000 CR4: 00000000003526f0 [ 902.856635][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 902.856647][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 902.856659][ C0] Call Trace: [ 902.856666][ C0] [ 902.856674][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 902.856699][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 902.856730][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 902.856762][ C0] ? nmi_handle+0x2a/0x5a0 [ 902.856789][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 902.856815][ C0] ? nmi_handle+0x14f/0x5a0 [ 902.856835][ C0] ? nmi_handle+0x2a/0x5a0 [ 902.856855][ C0] ? do_syslog+0x10/0x810 [ 902.856874][ C0] ? default_do_nmi+0x63/0x160 [ 902.856899][ C0] ? exc_nmi+0x123/0x1f0 [ 902.856922][ C0] ? end_repeat_nmi+0xf/0x53 [ 902.856947][ C0] ? do_syslog+0x10/0x810 [ 902.856967][ C0] ? do_syslog+0x10/0x810 [ 902.856989][ C0] ? do_syslog+0x10/0x810 [ 902.857009][ C0] [ 902.857016][ C0] [ 902.857024][ C0] __x64_sys_syslog+0x7c/0x90 [ 902.857046][ C0] do_syscall_64+0xf3/0x230 [ 902.857066][ C0] ? clear_bhb_loop+0x35/0x90 [ 902.857086][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.857116][ C0] RIP: 0033:0x7f95e4047fa7 [ 902.857132][ C0] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48 [ 902.857148][ C0] RSP: 002b:00007ffcb43ef098 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 902.857167][ C0] RAX: ffffffffffffffda RBX: 00007f95e41e64a0 RCX: 00007f95e4047fa7 [ 902.857182][ C0] RDX: 00000000000003ff RSI: 00007f95e41e64a0 RDI: 0000000000000002 [ 902.857195][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: e193c938f5210e7d [ 902.857208][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f95e41e64a0 [ 902.857221][ C0] R13: 00007f95e41d6212 R14: 00007f95e41e6877 R15: 00007f95e41e6877 [ 902.857254][ C0] [ 903.248687][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 903.255620][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 903.266175][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 903.276266][ T30] Call Trace: [ 903.279571][ T30] [ 903.282537][ T30] dump_stack_lvl+0x241/0x360 [ 903.287251][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.292569][ T30] ? __pfx__printk+0x10/0x10 [ 903.297190][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 903.303247][ T30] ? vscnprintf+0x5d/0x90 [ 903.307630][ T30] panic+0x349/0x880 [ 903.311571][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 903.317775][ T30] ? __pfx_panic+0x10/0x10 [ 903.322226][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 903.327640][ T30] ? __irq_work_queue_local+0x137/0x410 [ 903.333241][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 903.338651][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 903.344845][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 903.351039][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 903.357231][ T30] watchdog+0x1033/0x1040 [ 903.361612][ T30] ? watchdog+0x1ea/0x1040 [ 903.366074][ T30] ? __pfx_watchdog+0x10/0x10 [ 903.370803][ T30] kthread+0x2f0/0x390 [ 903.374908][ T30] ? __pfx_watchdog+0x10/0x10 [ 903.379635][ T30] ? __pfx_kthread+0x10/0x10 [ 903.384271][ T30] ret_from_fork+0x4b/0x80 [ 903.388731][ T30] ? __pfx_kthread+0x10/0x10 [ 903.393357][ T30] ret_from_fork_asm+0x1a/0x30 [ 903.398176][ T30] [ 903.401540][ T30] Kernel Offset: disabled [ 903.405873][ T30] Rebooting in 86400 seconds..