last executing test programs: 6m18.01771719s ago: executing program 4 (id=12747): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) fsync(r0) 6m17.831042266s ago: executing program 4 (id=12750): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m17.445505886s ago: executing program 4 (id=12755): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 6m17.311868127s ago: executing program 4 (id=12758): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 6m17.163037433s ago: executing program 4 (id=12760): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 6m17.110278898s ago: executing program 4 (id=12763): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0xd0) 6m0.885599422s ago: executing program 32 (id=12763): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0xd0) 4m42.213197802s ago: executing program 5 (id=14048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x40000) 4m42.092222934s ago: executing program 5 (id=14051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m41.926466665s ago: executing program 5 (id=14056): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1}, 0x2}, 0x18) 4m41.811694519s ago: executing program 5 (id=14060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000100000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x40}, 0x0) 4m41.606899484s ago: executing program 5 (id=14063): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 4m41.506759057s ago: executing program 5 (id=14065): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf252000000009001f007068793000000000050022"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4m25.385313771s ago: executing program 33 (id=14065): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf252000000009001f007068793000000000050022"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m31.010209128s ago: executing program 1 (id=16061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000108000440000000050900010073797a30000000000900020073797a32"], 0xcb}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) 2m30.839501239s ago: executing program 1 (id=16063): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @remote}], 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740), &(0x7f0000000000)=0x8) 2m30.775384805s ago: executing program 1 (id=16064): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xf) cachestat(r0, &(0x7f0000000680)={0xe2, 0xfffffffffffffff9}, 0x0, 0x0) 2m30.693913446s ago: executing program 1 (id=16066): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 2m30.62909648s ago: executing program 1 (id=16067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8e}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2m30.480771381s ago: executing program 1 (id=16069): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m15.454102485s ago: executing program 34 (id=16069): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m31.001837928s ago: executing program 3 (id=17084): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r1}) 1m30.911597028s ago: executing program 3 (id=17086): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m30.794998121s ago: executing program 3 (id=17089): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m30.574939189s ago: executing program 3 (id=17092): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m30.466216102s ago: executing program 3 (id=17096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1m29.759812387s ago: executing program 3 (id=17099): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x8910, &(0x7f0000000100)={0x9, 0x6, 0x8cc5, 0x6, 0x8, "d7c1ed55e1ae00ba994409ef44039c19e2c6be"}) 1m29.580112717s ago: executing program 35 (id=17099): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x8910, &(0x7f0000000100)={0x9, 0x6, 0x8cc5, 0x6, 0x8, "d7c1ed55e1ae00ba994409ef44039c19e2c6be"}) 1m12.559093859s ago: executing program 0 (id=17370): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m11.719087946s ago: executing program 0 (id=17392): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m10.740416957s ago: executing program 0 (id=17408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) 1m10.658993825s ago: executing program 0 (id=17400): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1m10.526931866s ago: executing program 0 (id=17402): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 1m10.524872719s ago: executing program 0 (id=17404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5af, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.174889136s ago: executing program 36 (id=17404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5af, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.655873352s ago: executing program 6 (id=18177): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16.43104867s ago: executing program 6 (id=18181): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 15.856163569s ago: executing program 6 (id=18187): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r1}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'wp256\x00'}}) 15.563825129s ago: executing program 6 (id=18189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) 15.406809006s ago: executing program 6 (id=18191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 15.24152954s ago: executing program 6 (id=18194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14040040}, 0x4000004) 2.700067534s ago: executing program 7 (id=18361): mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 2.34286304s ago: executing program 7 (id=18364): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 2.158602747s ago: executing program 7 (id=18368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.81546275s ago: executing program 7 (id=18371): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) time(0x0) 1.639643582s ago: executing program 7 (id=18374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000240)={0xc1, 0x0, 0x1}) 1.439386108s ago: executing program 8 (id=18377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x873345bc433655ab}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) 1.222023917s ago: executing program 7 (id=18381): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000013c0)={0x2c, &(0x7f00000011c0)={0x40, 0x11, 0x4, "30d27cfa"}, 0x0, 0x0, 0x0, 0x0}) 1.134950825s ago: executing program 8 (id=18382): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1.105083219s ago: executing program 2 (id=18383): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="48a89e22f58ffafff6998ccd930e3b15bfd2929cbc4b697624a36b1c5864911da0e401caaeb903205b59ed5a5848c3965bc8ccf87b3650b643e847583e2a64cc3716671c8d5a8d4047dfc848c4945ab35b6f022da30c3113dfd4f072c52c766d3f2cb0b75cde93f8e6eba9872166d5c54b4ca74eeb6855bbaf88d137977bda5a", 0x80}], 0x1}}], 0x1, 0x24008000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0}) 1.08144925s ago: executing program 9 (id=18384): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000440)="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", 0x4a7}, {&(0x7f00000002c0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc906dc9b1477866b7882c57bb6f7f7c3ee17c420000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a0748", 0xde}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 918.855004ms ago: executing program 8 (id=18385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x294}}, 0x4048010) 917.631097ms ago: executing program 2 (id=18386): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 854.101078ms ago: executing program 37 (id=18194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14040040}, 0x4000004) 833.076956ms ago: executing program 9 (id=18388): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffc, 0x6, 0x93, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="bda0a15ac720", 0x0, 0x8, 0x10004, 0x2, 0x0}) 761.049ms ago: executing program 9 (id=18389): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x81, 0xfffffffb}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) 646.874192ms ago: executing program 8 (id=18390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 646.740599ms ago: executing program 2 (id=18391): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0xa, @local}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000002ec0)="c5", 0x1}], 0x1}}], 0x2, 0x60000000) 577.236566ms ago: executing program 9 (id=18392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x820, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 506.231634ms ago: executing program 2 (id=18393): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 436.207007ms ago: executing program 8 (id=18394): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x20000490) 291.777608ms ago: executing program 2 (id=18395): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x12, 0x7c5, 0x0, 0x3, 0xd59f80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x4, 0x596, 0x7, 0x0, 0x2e, 0xd, {0xffff945a, 0x1}, 0x3, 0xed}}) 194.935262ms ago: executing program 9 (id=18396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0x14}]}]}, 0x30}}, 0x0) 75.016298ms ago: executing program 8 (id=18397): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 32.417921ms ago: executing program 2 (id=18398): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000002d80)=[{}, {0x0, 0x80000000}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000009c0)={{0x80000000, r2, 0x4, [0xc, 0x2]}, {r1, 0x0, 0x3, [0xfffffff9, 0xffffff79]}, 0x2, [0x3]}) 0s ago: executing program 9 (id=18399): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 94][T16952] Buffer I/O error on dev loop7, logical block 0, async page read [ 1092.516401][T16952] Buffer I/O error on dev loop7, logical block 0, async page read [ 1092.516512][T16952] Buffer I/O error on dev loop7, logical block 0, async page read [ 1092.516680][T16952] Dev loop7: unable to read RDB block 0 [ 1092.517837][T16947] [U] [ 1092.525654][T16952] loop7: unable to read partition table [ 1092.525884][T16952] loop7: partition table beyond EOD, truncated [ 1092.525919][T16952] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1093.100514][T16988] netlink: 'syz.2.16328': attribute type 1 has an invalid length. [ 1093.242431][T16998] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16333'. [ 1094.098347][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1094.098365][ T37] audit: type=1326 audit(2000001034.462:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17048 comm="syz.3.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa088a2eec9 code=0x7ffc0000 [ 1094.145931][ T37] audit: type=1326 audit(2000001034.515:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17048 comm="syz.3.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa088a2eec9 code=0x7ffc0000 [ 1094.146791][ T37] audit: type=1326 audit(2000001034.515:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17048 comm="syz.3.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa088a2ef03 code=0x7ffc0000 [ 1094.147205][ T37] audit: type=1326 audit(2000001034.515:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17048 comm="syz.3.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa088a2ef03 code=0x7ffc0000 [ 1094.162636][ T37] audit: type=1326 audit(2000001034.536:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17048 comm="syz.3.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa088a2eec9 code=0x7ffc0000 [ 1094.162686][ T37] audit: type=1326 audit(2000001034.536:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17048 comm="syz.3.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa088a2eec9 code=0x7ffc0000 [ 1095.319026][ T6806] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1095.346555][ T5130] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1095.384974][ T5130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1095.394393][ T5130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1095.419248][ T5130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1095.420934][ T5130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1095.445937][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16372'. [ 1095.477297][ T6806] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.477323][ T6806] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.480194][ T6806] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1095.480218][ T6806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1095.480237][ T6806] usb 3-1: SerialNumber: syz [ 1095.533147][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16374'. [ 1095.731314][T17103] wg1 speed is unknown, defaulting to 1000 [ 1095.744932][ T6806] usb 3-1: 0:2 : does not exist [ 1095.815621][ T6806] usb 3-1: USB disconnect, device number 54 [ 1095.955422][T10641] udevd[10641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1096.476152][T17103] chnl_net:caif_netlink_parms(): no params data found [ 1097.141399][T17103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.143106][T17103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.143355][T17103] bridge_slave_0: entered allmulticast mode [ 1097.147324][T17103] bridge_slave_0: entered promiscuous mode [ 1097.182662][T17103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.182862][T17103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.212901][T17103] bridge_slave_1: entered allmulticast mode [ 1097.223230][T17103] bridge_slave_1: entered promiscuous mode [ 1097.413829][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16397'. [ 1097.450365][T17103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.467453][T17103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.501156][T15256] Bluetooth: hci5: command tx timeout [ 1097.662463][ T6806] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1097.666710][T17103] team0: Port device team_slave_0 added [ 1097.669035][T17103] team0: Port device team_slave_1 added [ 1097.809387][ T6806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.809418][ T6806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.809453][ T6806] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1097.809475][ T6806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.817503][ T6806] usb 3-1: config 0 descriptor?? [ 1097.861436][T17103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.861451][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.861477][T17103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.916158][T17103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.916177][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.916203][T17103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.169618][T17103] hsr_slave_0: entered promiscuous mode [ 1098.170916][T17103] hsr_slave_1: entered promiscuous mode [ 1098.171838][T17103] debugfs: 'hsr0' already exists in 'hsr' [ 1098.171862][T17103] Cannot create hsr debugfs directory [ 1098.236223][ T6806] hid_mf 0003:0079:1846.004E: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 1098.236259][ T6806] hid_mf 0003:0079:1846.004E: Invalid report, this should never happen! [ 1098.236274][ T6806] hid_mf 0003:0079:1846.004E: Force feedback init failed. [ 1098.410660][ T5939] usb 3-1: USB disconnect, device number 55 [ 1098.947240][T17103] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1098.973045][T17103] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1099.013606][T17103] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1099.067453][T17103] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1099.164685][T17551] netlink: 536 bytes leftover after parsing attributes in process `syz.3.16406'. [ 1099.168580][T17551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16406'. [ 1099.385191][T17103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.417695][T17103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.435483][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.435586][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.462334][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.462500][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.482390][T15256] Bluetooth: hci5: command tx timeout [ 1099.599854][ T5939] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1099.764230][ T5939] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1099.764261][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.764280][ T5939] usb 7-1: Product: syz [ 1099.764294][ T5939] usb 7-1: Manufacturer: syz [ 1099.764307][ T5939] usb 7-1: SerialNumber: syz [ 1099.811019][ T5939] usb 7-1: config 0 descriptor?? [ 1100.354339][T17613] dvmrp0: left allmulticast mode [ 1100.407971][ T5939] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1100.408257][ T5939] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1100.454321][ T5939] usb 7-1: USB disconnect, device number 17 [ 1100.493996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.689071][T17103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.275899][T17103] veth0_vlan: entered promiscuous mode [ 1101.279633][T17660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16441'. [ 1101.291879][T17660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16441'. [ 1101.314380][T17103] veth1_vlan: entered promiscuous mode [ 1101.444739][T17103] veth0_macvtap: entered promiscuous mode [ 1101.465814][T17103] veth1_macvtap: entered promiscuous mode [ 1101.473304][T15256] Bluetooth: hci5: command tx timeout [ 1101.526589][T17103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.577082][T17103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.642307][ T1173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.642929][ T1173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.643646][ T1173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.643687][ T1173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.262360][ T1429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.262384][ T1429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.316967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.406128][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.572031][ T4035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.572053][ T4035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.863421][ T49] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1103.042243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.078708][ T49] usb 4-1: config index 0 descriptor too short (expected 2084, got 36) [ 1103.078766][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.078791][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.078826][ T49] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1103.078847][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.090069][ T49] usb 4-1: config 0 descriptor?? [ 1103.101711][ T1690] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1103.244387][ T1690] usb 7-1: Using ep0 maxpacket: 8 [ 1103.247479][ T1690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1103.247563][ T1690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1103.247583][ T1690] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1103.247605][ T1690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1103.247632][ T1690] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1103.247715][ T1690] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1103.247739][ T1690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.277632][ T1690] usb 7-1: config 0 descriptor?? [ 1103.279960][T17725] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1103.455241][ T5939] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1103.455387][T15256] Bluetooth: hci5: command tx timeout [ 1103.583264][ T49] dragonrise 0003:0079:0006.004F: unknown main item tag 0x0 [ 1103.583303][ T49] dragonrise 0003:0079:0006.004F: unknown main item tag 0x0 [ 1103.612361][ T49] dragonrise 0003:0079:0006.004F: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 1103.612396][ T49] dragonrise 0003:0079:0006.004F: no inputs found [ 1103.612410][ T49] dragonrise 0003:0079:0006.004F: force feedback init failed [ 1103.615875][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 1103.619056][ T5939] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1103.619108][ T5939] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1103.619135][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1103.619226][ T5939] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1103.619248][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.711726][ T5939] usb 3-1: config 0 descriptor?? [ 1103.812132][ T6806] usb 4-1: USB disconnect, device number 44 [ 1103.932976][T15256] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1103.948699][ T10] usb 7-1: USB disconnect, device number 18 [ 1104.134722][ T5939] gt683r_led 0003:1770:FF00.0050: unknown main item tag 0x1 [ 1104.134761][ T5939] gt683r_led 0003:1770:FF00.0050: unknown main item tag 0x0 [ 1104.134789][ T5939] gt683r_led 0003:1770:FF00.0050: unknown main item tag 0x0 [ 1104.177246][T17777] fido_id[17777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1104.200695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.201981][ T5939] gt683r_led 0003:1770:FF00.0050: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 1104.320311][ T5939] usb 3-1: USB disconnect, device number 56 [ 1104.337547][ T10] gt683r_led 0003:1770:FF00.0050: failed to send set report request: -19 [ 1104.354756][ T10] gt683r_led 0003:1770:FF00.0050: failed to send set report request: -19 [ 1104.369607][ T10] gt683r_led 0003:1770:FF00.0050: failed to send set report request: -19 [ 1104.467301][T17817] fido_id[17817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1105.179747][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1105.346474][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1105.346506][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.346529][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1105.346569][ T10] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1105.346592][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.391171][ T10] usb 3-1: config 0 descriptor?? [ 1105.644387][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16492'. [ 1105.806581][ T10] steelseries 0003:1038:1410.0051: not enough fields in HID_OUTPUT_REPORT 0 [ 1105.994083][ T10] usb 3-1: USB disconnect, device number 57 [ 1106.295423][ T37] audit: type=1326 audit(2000001047.280:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17954 comm="syz.6.16505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1106.297023][ T37] audit: type=1326 audit(2000001047.280:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17954 comm="syz.6.16505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1106.301897][ T37] audit: type=1326 audit(2000001047.280:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17954 comm="syz.6.16505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1106.313763][ T37] audit: type=1326 audit(2000001047.301:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17954 comm="syz.6.16505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1106.313811][ T37] audit: type=1326 audit(2000001047.301:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17954 comm="syz.6.16505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1106.321387][ T37] audit: type=1326 audit(2000001047.301:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17954 comm="syz.6.16505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1106.321439][ T37] audit: type=1326 audit(2000001047.301:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17954 comm="syz.6.16505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1107.112178][T17992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1107.114839][T17992] team0: Port device bond1 added [ 1107.216982][ T10] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1107.361246][ T10] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 1107.361274][ T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.361293][ T10] usb 3-1: config 8 has no interface number 0 [ 1107.361325][ T10] usb 3-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1107.361348][ T10] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1107.361360][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.425200][ T10] usb 3-1: NFC: intf ffff888039e06000 id ffffffff8dc81d00 [ 1107.567103][ T6806] usb 3-1: USB disconnect, device number 58 [ 1108.741127][ T5947] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1108.870838][T18126] syz_tun: entered promiscuous mode [ 1108.871008][T18125] syz_tun: left promiscuous mode [ 1108.895028][ T5947] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1108.895060][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1108.895084][ T5947] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1108.895096][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.898879][ T5947] usb 3-1: config 0 descriptor?? [ 1108.902740][T18108] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1108.978950][ T1690] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1109.128109][ T1690] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.128142][ T1690] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1109.128176][ T1690] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 1109.128198][ T1690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.147587][ T1690] usb 4-1: config 0 descriptor?? [ 1109.317909][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1109.335575][ T5947] waltop 0003:172F:0500.0052: collection stack underflow [ 1109.335608][ T5947] waltop 0003:172F:0500.0052: item 0 2 0 12 parsing failed [ 1109.336431][ T5947] waltop 0003:172F:0500.0052: probe with driver waltop failed with error -22 [ 1109.537893][ T6806] usb 3-1: USB disconnect, device number 59 [ 1109.599465][ T1690] asus 0003:0B05:1822.0053: unknown main item tag 0x0 [ 1109.599502][ T1690] asus 0003:0B05:1822.0053: unknown main item tag 0x0 [ 1109.635694][ T1690] asus 0003:0B05:1822.0053: hidraw0: USB HID v0.04 Device [HID 0b05:1822] on usb-dummy_hcd.3-1/input0 [ 1109.635729][ T1690] asus 0003:0B05:1822.0053: Asus input not registered [ 1109.650798][ T1690] asus 0003:0B05:1822.0053: probe with driver asus failed with error -12 [ 1109.773455][ T10] usb 4-1: USB disconnect, device number 45 [ 1109.878323][ T6806] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x4 [ 1109.878347][ T6806] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x2 [ 1109.878385][ T6806] hid-generic 0000:3000000:0000.0054: unknown main item tag 0x3 [ 1109.892927][ T6806] hid-generic 0000:3000000:0000.0054: hidraw0: HID v0.00 Device [sy] on syz0 [ 1109.988647][T18192] fido_id[18192]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1110.055690][ T5939] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1110.210150][ T5939] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1110.210185][ T5939] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1110.210217][ T5939] usb 7-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1110.210239][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.216903][ T5939] usb 7-1: config 0 descriptor?? [ 1110.667427][ T5939] nintendo 0003:057E:2009.0055: unbalanced collection at end of report description [ 1110.668205][ T5939] nintendo 0003:057E:2009.0055: HID parse failed [ 1110.703359][ T5939] nintendo 0003:057E:2009.0055: probe - fail = -22 [ 1110.703476][ T5939] nintendo 0003:057E:2009.0055: probe with driver nintendo failed with error -22 [ 1110.741307][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.829147][ T6806] usb 7-1: USB disconnect, device number 19 [ 1112.239849][ T5947] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1112.392130][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.392173][ T5947] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1112.392185][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.396800][ T5947] usb 4-1: config 0 descriptor?? [ 1112.793010][ T5947] kye 0003:0458:5010.0056: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1112.793976][ T5947] kye 0003:0458:5010.0056: unknown main item tag 0x0 [ 1112.794007][ T5947] kye 0003:0458:5010.0056: unknown main item tag 0x0 [ 1112.794034][ T5947] kye 0003:0458:5010.0056: unknown main item tag 0x0 [ 1112.798477][ T5947] kye 0003:0458:5010.0056: hidraw0: USB HID v0.08 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 1112.798507][ T5947] kye 0003:0458:5010.0056: tablet-enabling feature report not found [ 1112.798969][ T5947] kye 0003:0458:5010.0056: tablet enabling failed [ 1113.003054][ T5947] usb 4-1: USB disconnect, device number 46 [ 1113.554334][T18345] netlink: 88 bytes leftover after parsing attributes in process `syz.2.16623'. [ 1113.732825][T22152] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1113.879185][T22152] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1113.879226][T22152] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1113.879246][T22152] usb 7-1: Product: syz [ 1113.879261][T22152] usb 7-1: Manufacturer: syz [ 1113.879275][T22152] usb 7-1: SerialNumber: syz [ 1113.913874][T22152] usb 7-1: config 0 descriptor?? [ 1113.996130][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16620'. [ 1114.118857][T18368] vlan3: entered promiscuous mode [ 1114.127525][T22152] peak_usb 7-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1114.322188][T22152] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1114.322214][T22152] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1114.322233][T22152] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1114.391736][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16629'. [ 1114.479316][T22152] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1114.518529][T18401] team0: Device ip6gre3 is of different type [ 1114.557374][T22152] usb 7-1: USB disconnect, device number 20 [ 1115.044955][T18443] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16640'. [ 1115.045103][T18443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16640'. [ 1115.891780][ T37] audit: type=1326 audit(2000001057.348:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18489 comm="syz.2.16663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cf4a1eec9 code=0x0 [ 1116.004709][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16666'. [ 1116.004736][T18498] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16666'. [ 1116.004752][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16666'. [ 1117.550262][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16707'. [ 1118.087492][T18616] program syz.0.16723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1118.457251][T22152] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1118.600030][T22152] usb 4-1: Using ep0 maxpacket: 8 [ 1118.602903][T22152] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.602934][T22152] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.602957][T22152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1118.602987][T22152] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1118.603008][T22152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.615926][T22152] usb 4-1: config 0 descriptor?? [ 1119.022863][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.022902][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.022930][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.022957][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.022983][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.023009][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.023035][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.023061][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.023088][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.023113][T22152] smartjoyplus 0003:0B43:0003.0057: unknown main item tag 0x0 [ 1119.071914][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16740'. [ 1119.089687][T22152] smartjoyplus 0003:0B43:0003.0057: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.3-1/input0 [ 1119.089720][T22152] smartjoyplus 0003:0B43:0003.0057: no output reports found [ 1119.250270][ T5947] usb 4-1: USB disconnect, device number 47 [ 1119.313232][T18670] fido_id[18670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1119.476487][T18688] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 1119.476598][T18688] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 1119.476648][T18688] ALSA: mixer_oss: invalid OSS volume 'GJJ³f_ٮ,<_eF" [ 1129.008948][T19207] CUSE: unknown device info "3ܟ,̘" [ 1129.008960][T19207] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 1129.008960][T19207] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1129.008977][T19207] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|0htvw 7:" [ 1129.008989][T19207] CUSE: DEVNAME unspecified [ 1129.105987][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 1129.110300][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.110331][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.110354][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1129.110395][ T5939] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1129.110416][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.139162][ T5939] usb 4-1: config 0 descriptor?? [ 1129.344672][ T6806] vhci_hcd: vhci_device speed not set [ 1129.517407][ T49] kernel write not supported for file /143/clear_refs (pid: 49 comm: kworker/1:1) [ 1129.587357][ T5939] microsoft 0003:045E:07DA.005A: ignoring exceeding usage max [ 1129.615472][ T5939] microsoft 0003:045E:07DA.005A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1129.615510][ T5939] microsoft 0003:045E:07DA.005A: no inputs found [ 1129.615523][ T5939] microsoft 0003:045E:07DA.005A: could not initialize ff, continuing anyway [ 1129.823979][ T5939] usb 4-1: USB disconnect, device number 48 [ 1129.836989][T19249] sg_write: data in/out 134217696/14 bytes for SCSI command 0x0-- guessing data in; [ 1129.836989][T19249] program syz.7.16917 not setting count and/or reply_len properly [ 1130.416973][T19292] vlan3: entered allmulticast mode [ 1130.416996][T19292] bond0: entered allmulticast mode [ 1130.417009][T19292] : entered allmulticast mode [ 1130.417029][T19292] syz_tun: entered allmulticast mode [ 1130.417047][T19292] macvlan0: entered allmulticast mode [ 1130.417060][T19292] veth1_vlan: entered allmulticast mode [ 1130.417785][T19292] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1130.928365][T19328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16944'. [ 1131.208219][T19344] netlink: 'syz.6.16952': attribute type 3 has an invalid length. [ 1131.589860][T19366] ptrace attach of "./syz-executor exec"[9725] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 1132.040377][ T5947] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1132.183331][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 1132.186657][ T5947] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1132.186706][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1132.186748][ T5947] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1132.186771][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.194903][ T5947] usb 3-1: config 0 descriptor?? [ 1132.599936][ T5947] hid_parser_main: 1 callbacks suppressed [ 1132.599961][ T5947] saitek 0003:06A3:0621.005B: unknown main item tag 0x0 [ 1132.599990][ T5947] saitek 0003:06A3:0621.005B: unknown main item tag 0x0 [ 1132.600014][ T5947] saitek 0003:06A3:0621.005B: unknown main item tag 0x0 [ 1132.603689][ T5947] saitek 0003:06A3:0621.005B: unknown main item tag 0x0 [ 1132.603720][ T5947] saitek 0003:06A3:0621.005B: unknown main item tag 0x0 [ 1132.607971][ T5947] saitek 0003:06A3:0621.005B: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 1132.779089][T22152] usb 3-1: USB disconnect, device number 63 [ 1132.936532][ T5947] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1133.008882][T19424] vivid-000: disconnect [ 1133.011402][T19422] vivid-000: reconnect [ 1133.091897][ T5947] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1133.091928][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.091948][ T5947] usb 4-1: Product: syz [ 1133.091962][ T5947] usb 4-1: Manufacturer: syz [ 1133.091977][ T5947] usb 4-1: SerialNumber: syz [ 1133.544711][ T5947] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1133.544768][ T5947] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1133.544788][ T5947] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1133.604913][ T5947] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1133.628610][ T5947] usb 4-1: USB disconnect, device number 49 [ 1133.804385][T19465] netlink: 332 bytes leftover after parsing attributes in process `syz.2.16991'. [ 1133.804480][T19465] netlink: 196 bytes leftover after parsing attributes in process `syz.2.16991'. [ 1133.856874][ T37] audit: type=1326 audit(2000001076.202:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19470 comm="syz.0.16993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1133.857048][ T37] audit: type=1326 audit(2000001076.202:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19470 comm="syz.0.16993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1133.866225][ T37] audit: type=1326 audit(2000001076.213:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19470 comm="syz.0.16993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1133.885367][ T37] audit: type=1326 audit(2000001076.234:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19470 comm="syz.0.16993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1133.885514][ T37] audit: type=1326 audit(2000001076.234:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19470 comm="syz.0.16993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1133.886921][ T37] audit: type=1326 audit(2000001076.234:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19470 comm="syz.0.16993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1133.887523][ T37] audit: type=1326 audit(2000001076.234:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19470 comm="syz.0.16993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1134.817488][T19511] netlink: 11 bytes leftover after parsing attributes in process `syz.2.17012'. [ 1134.817515][T19511] netlink: 11 bytes leftover after parsing attributes in process `syz.2.17012'. [ 1134.818480][T19511] netlink: 11 bytes leftover after parsing attributes in process `syz.2.17012'. [ 1134.818501][T19511] netlink: 11 bytes leftover after parsing attributes in process `syz.2.17012'. [ 1135.910859][ T37] audit: type=1326 audit(2000001078.355:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19564 comm="syz.6.17031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x0 [ 1136.021779][T19573] genirq: Flags mismatch irq 1. 00202000 (pcmmio) vs. 00202080 (i8042) [ 1136.808571][ T37] audit: type=1326 audit(2000001079.310:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19607 comm="syz.2.17045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4a1eec9 code=0x0 [ 1136.841443][ T6806] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1136.993722][ T6806] usb 4-1: Using ep0 maxpacket: 16 [ 1137.001094][ T6806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.001126][ T6806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.001148][ T6806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1137.001186][ T6806] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1137.001207][ T6806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.011425][ T6806] usb 4-1: config 0 descriptor?? [ 1137.188180][T19620] netlink: 'syz.6.17049': attribute type 3 has an invalid length. [ 1137.434041][ T6806] microsoft 0003:045E:07DA.005C: ignoring exceeding usage max [ 1137.435043][ T6806] microsoft 0003:045E:07DA.005C: ignoring exceeding usage max [ 1137.435062][ T6806] microsoft 0003:045E:07DA.005C: usage index exceeded [ 1137.435075][ T6806] microsoft 0003:045E:07DA.005C: item 0 0 2 2 parsing failed [ 1137.448730][ T6806] microsoft 0003:045E:07DA.005C: parse failed [ 1137.448821][ T6806] microsoft 0003:045E:07DA.005C: probe with driver microsoft failed with error -22 [ 1137.478584][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17053'. [ 1137.478615][T19632] netlink: 'syz.6.17053': attribute type 5 has an invalid length. [ 1137.478631][T19632] netlink: 'syz.6.17053': attribute type 8 has an invalid length. [ 1137.478643][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17053'. [ 1137.506451][T19632] geneve2: entered promiscuous mode [ 1137.506476][T19632] geneve2: entered allmulticast mode [ 1137.515930][ T1429] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1137.532219][ T4035] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1137.532267][ T4035] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1137.532302][ T4035] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1137.677521][ T6806] usb 4-1: USB disconnect, device number 50 [ 1137.757480][T19649] qrtr: Invalid version 255 [ 1138.457042][T19696] ptrace attach of "./syz-executor exec"[5816] was attempted by "\x09   0 "[19696] [ 1138.469483][T19698] netlink: 44 bytes leftover after parsing attributes in process `syz.6.17073'. [ 1138.469507][T19698] netlink: 'syz.6.17073': attribute type 1 has an invalid length. [ 1139.003625][ T5947] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1139.074990][T19736] bridge0: entered promiscuous mode [ 1139.075254][T19736] macsec1: entered promiscuous mode [ 1139.150792][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.150856][ T5947] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.150882][ T5947] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.150903][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1139.150936][ T5947] usb 7-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1139.150958][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.216449][ T5947] usb 7-1: config 0 descriptor?? [ 1139.241375][T19747] netlink: 10 bytes leftover after parsing attributes in process `syz.3.17089'. [ 1139.662390][ T5947] kye 0003:0458:5015.005D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1139.663359][ T5947] kye 0003:0458:5015.005D: unknown main item tag 0x1 [ 1139.694050][ T5947] kye 0003:0458:5015.005D: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.6-1/input0 [ 1139.694084][ T5947] kye 0003:0458:5015.005D: tablet-enabling feature report not found [ 1139.694099][ T5947] kye 0003:0458:5015.005D: tablet enabling failed [ 1139.705164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1139.718778][ T1690] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1139.810240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1139.830589][ T5947] usb 7-1: USB disconnect, device number 23 [ 1139.893467][ T5816] bond0: (slave syz_tun): Releasing backup interface [ 1139.911757][ T1690] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1139.911783][ T1690] usb 3-1: config 0 has no interface number 0 [ 1139.911829][ T1690] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1139.911841][ T1690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.915513][ T1690] usb 3-1: config 0 descriptor?? [ 1139.923186][ T1690] usb 3-1: selecting invalid altsetting 1 [ 1139.923352][ T1690] dvb_ttusb_budget: ttusb_init_controller: error [ 1139.923366][ T1690] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1139.961108][ T5816] syz_tun (unregistering): left allmulticast mode [ 1140.035761][ T1690] DVB: Unable to find symbol cx22700_attach() [ 1140.067483][ T1690] DVB: Unable to find symbol tda10046_attach() [ 1140.067493][ T1690] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1140.118385][ T1690] usb 3-1: USB disconnect, device number 64 [ 1140.799984][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1140.808704][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1140.810939][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1140.812609][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1140.813315][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1140.980615][T19827] wg1 speed is unknown, defaulting to 1000 [ 1141.022056][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17109'. [ 1141.328234][ T5947] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1141.470988][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 1141.478833][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.478866][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.478887][ T5947] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1141.478928][ T5947] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1141.478950][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.562580][ T5947] usb 7-1: config 0 descriptor?? [ 1141.879115][ T37] audit: type=1326 audit(2000001084.629:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19975 comm="syz.2.17122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4a1eec9 code=0x7ffc0000 [ 1141.903403][ T37] audit: type=1326 audit(2000001084.629:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19975 comm="syz.2.17122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4a1eec9 code=0x7ffc0000 [ 1141.907909][ T37] audit: type=1326 audit(2000001084.661:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19975 comm="syz.2.17122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9cf4a1eec9 code=0x7ffc0000 [ 1141.915617][T19827] chnl_net:caif_netlink_parms(): no params data found [ 1141.954930][ T37] audit: type=1326 audit(2000001084.703:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19975 comm="syz.2.17122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4a1eec9 code=0x7ffc0000 [ 1142.007390][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.007427][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.007455][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.007480][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.007505][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.007530][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.007554][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.007579][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.007604][ T5947] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 1142.105202][ T5947] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.005E/input/input122 [ 1142.137859][ T5947] microsoft 0003:045E:07DA.005E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1142.231394][ T5939] usb 7-1: USB disconnect, device number 24 [ 1142.350256][T20008] fido_id[20008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1142.627306][T20070] bridge0: entered promiscuous mode [ 1142.627523][T20070] macsec1: entered promiscuous mode [ 1142.628042][T19827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.628266][T19827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.628469][T19827] bridge_slave_0: entered allmulticast mode [ 1142.631433][T19827] bridge_slave_0: entered promiscuous mode [ 1142.675269][T19827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.675475][T19827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.675852][T19827] bridge_slave_1: entered allmulticast mode [ 1142.678812][T19827] bridge_slave_1: entered promiscuous mode [ 1142.766233][T15256] Bluetooth: hci0: command tx timeout [ 1142.890261][T14111] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1142.919421][T19827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.926628][T19827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.015785][T20127] netlink: 'syz.6.17134': attribute type 83 has an invalid length. [ 1143.125245][T20116] fido_id[20116]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1143.247594][T19827] team0: Port device team_slave_0 added [ 1143.251359][T19827] team0: Port device team_slave_1 added [ 1143.526803][T19827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.526821][T19827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.526848][T19827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.575344][T19827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.575360][T19827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.575385][T19827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.894097][T20191] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1143.934050][T20212] netlink: 79 bytes leftover after parsing attributes in process `syz.2.17153'. [ 1143.934171][T20212] netlink: 79 bytes leftover after parsing attributes in process `syz.2.17153'. [ 1144.064758][T14111] kernel write not supported for file /sequencer (pid: 14111 comm: kworker/1:8) [ 1144.115507][T20233] netlink: 116 bytes leftover after parsing attributes in process `syz.2.17157'. [ 1144.275704][T20246] netlink: 'syz.6.17158': attribute type 1 has an invalid length. [ 1144.275727][T20246] netlink: 'syz.6.17158': attribute type 2 has an invalid length. [ 1144.355111][T19827] hsr_slave_0: entered promiscuous mode [ 1144.364828][T19827] hsr_slave_1: entered promiscuous mode [ 1144.365943][T19827] debugfs: 'hsr0' already exists in 'hsr' [ 1144.365967][T19827] Cannot create hsr debugfs directory [ 1144.557298][T14111] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1144.703680][T14111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.703713][T14111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1144.703734][T14111] usb 3-1: config 1 has no interface number 0 [ 1144.703793][T14111] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1144.712832][T14111] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1144.712860][T14111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.712878][T14111] usb 3-1: Product: syz [ 1144.712892][T14111] usb 3-1: Manufacturer: syz [ 1144.712906][T14111] usb 3-1: SerialNumber: syz [ 1144.728516][T14111] usb 3-1: selecting invalid altsetting 1 [ 1144.748006][T15256] Bluetooth: hci0: command tx timeout [ 1145.180567][T14111] usb 3-1: selecting invalid altsetting 1 [ 1145.180625][T14111] cdc_ncm 3-1:1.1: bind() failure [ 1145.239951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.372264][ T1690] usb 3-1: USB disconnect, device number 65 [ 1145.923233][T19827] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1145.963457][T19827] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1146.067688][T19827] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1146.126595][T19827] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1146.504230][T20412] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 1146.519169][T20412] macvtap1: entered promiscuous mode [ 1146.579659][T20412] mac80211_hwsim hwsim37 wlan1: left promiscuous mode [ 1146.645166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.729502][T15256] Bluetooth: hci0: command tx timeout [ 1146.795498][T14111] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1146.951020][T14111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.951052][T14111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.951074][T14111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.951122][T14111] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.951144][T14111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.962384][T14111] usb 3-1: config 0 descriptor?? [ 1146.989199][T20433] netlink: 'syz.7.17194': attribute type 5 has an invalid length. [ 1147.056253][T19827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.157279][ T5939] hid_parser_main: 7 callbacks suppressed [ 1147.157301][ T5939] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 1147.184719][ T5939] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1147.262692][T19827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.316473][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.316679][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.364229][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.364402][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.422066][T14111] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x2 [ 1147.422105][T14111] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x6 [ 1147.534351][T20449] fido_id[20449]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1147.678132][T14111] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1147.713442][T14111] usb 3-1: USB disconnect, device number 66 [ 1147.987877][T20476] fido_id[20476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1148.326929][T19827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.713967][T15256] Bluetooth: hci0: command tx timeout [ 1148.988531][T19827] veth0_vlan: entered promiscuous mode [ 1149.012989][T19827] veth1_vlan: entered promiscuous mode [ 1149.089212][T19827] veth0_macvtap: entered promiscuous mode [ 1149.116575][T19827] veth1_macvtap: entered promiscuous mode [ 1149.192778][T19827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.230535][T19827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.264661][T30659] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.272565][T30659] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.272798][T30659] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.273027][T30659] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.364868][ T37] audit: type=1326 audit(2000001092.492:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20533 comm="syz.0.17221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1149.379189][ T37] audit: type=1326 audit(2000001092.503:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20533 comm="syz.0.17221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1149.379240][ T37] audit: type=1326 audit(2000001092.503:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20533 comm="syz.0.17221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1149.379279][ T37] audit: type=1326 audit(2000001092.503:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20533 comm="syz.0.17221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1149.379987][ T37] audit: type=1326 audit(2000001092.503:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20533 comm="syz.0.17221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1149.380031][ T37] audit: type=1326 audit(2000001092.503:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20533 comm="syz.0.17221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1149.380072][ T37] audit: type=1326 audit(2000001092.503:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20533 comm="syz.0.17221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abf84eec9 code=0x7ffc0000 [ 1149.463279][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17223'. [ 1149.463315][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17223'. [ 1149.917369][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.917392][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.685397][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17236'. [ 1150.712399][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.712421][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.921036][T20601] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1151.845044][T14111] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1151.997488][T14111] usb 7-1: Using ep0 maxpacket: 8 [ 1152.002069][T14111] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1152.020491][T14111] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1152.020517][T14111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.020535][T14111] usb 7-1: Product: syz [ 1152.020550][T14111] usb 7-1: Manufacturer: syz [ 1152.020563][T14111] usb 7-1: SerialNumber: syz [ 1152.046545][T14111] usb 7-1: config 0 descriptor?? [ 1152.080848][T14111] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1152.080901][T14111] usb 7-1: setting power ON [ 1152.080922][T14111] dvb-usb: bulk message failed: -22 (2/0) [ 1152.148107][T14111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1152.163572][T14111] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1152.163646][T14111] usb 7-1: media controller created [ 1152.265428][T14111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1152.397744][T14111] usb 7-1: selecting invalid altsetting 6 [ 1152.397766][T14111] usb 7-1: digital interface selection failed (-22) [ 1152.397782][T14111] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1152.401785][T14111] usb 7-1: setting power OFF [ 1152.402013][T14111] dvb-usb: bulk message failed: -22 (2/0) [ 1152.402031][T14111] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1152.402044][T14111] (NULL device *): no alternate interface [ 1152.557458][T14111] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1152.574362][T20700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17276'. [ 1152.592210][T14111] usb 7-1: USB disconnect, device number 25 [ 1153.173162][T20739] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1153.188340][T20739] @0: renamed from bond_slave_1 (while UP) [ 1153.336370][ T5901] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1153.481893][T20751] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17291'. [ 1153.482984][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 1153.536357][ T5901] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 8 [ 1153.536389][ T5901] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1153.536413][ T5901] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1153.539203][ T5901] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1153.539230][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.539249][ T5901] usb 7-1: Product: syz [ 1153.539263][ T5901] usb 7-1: Manufacturer: syz [ 1153.539277][ T5901] usb 7-1: SerialNumber: syz [ 1153.598252][T20731] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1153.598379][T20731] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1153.823252][ T5901] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1153.854604][ T5901] usb 7-1: USB disconnect, device number 26 [ 1154.205300][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17303'. [ 1154.205324][T20797] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17303'. [ 1154.205350][T20797] netlink: 'syz.7.17303': attribute type 7 has an invalid length. [ 1154.330827][ T5901] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1154.503509][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 1154.518454][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1154.518502][ T5901] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1154.518526][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.563138][ T5901] usb 3-1: config 0 descriptor?? [ 1154.739855][T20823] netlink: 44 bytes leftover after parsing attributes in process `syz.7.17312'. [ 1154.937619][T20833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.966420][ T5901] kye 0003:0458:4018.0062: unbalanced collection at end of report description [ 1154.967250][ T5901] kye 0003:0458:4018.0062: parse failed [ 1154.967321][ T5901] kye 0003:0458:4018.0062: probe with driver kye failed with error -22 [ 1155.000096][T20833] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 1155.152510][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17321'. [ 1155.153933][ T5901] usb 3-1: USB disconnect, device number 67 [ 1155.201042][T20844] [U]  [ 1155.431668][ C1] vkms_vblank_simulate: vblank timer overrun [ 1155.849105][T20889] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1155.986527][T20899] Invalid source name [ 1155.986546][T20899] UBIFS error (pid: 20899): cannot open "usrquota", error -22 [ 1156.575820][T20931] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1156.575971][T20931] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1156.576131][T20931] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1156.576178][T20931] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1156.576224][T20931] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1156.576268][T20931] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 1156.576314][T20931] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1156.607025][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17351'. [ 1156.607047][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17351'. [ 1156.607071][T20932] netlink: 'syz.6.17351': attribute type 11 has an invalid length. [ 1156.823958][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17355'. [ 1156.875340][ T37] audit: type=1326 audit(2000001100.376:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.17359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa25af3eec9 code=0x0 [ 1158.308894][T21038] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3 [ 1158.361357][ T37] audit: type=1326 audit(2000001101.940:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21042 comm="syz.2.17396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4a1eec9 code=0x0 [ 1160.397989][T21109] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1161.126580][T21141] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17433'. [ 1161.376658][T21153] Invalid ELF header magic: != ELF [ 1161.913226][ T5901] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1162.017998][T21187] autofs: Bad value for 'fd' [ 1162.065215][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 1162.067556][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1162.067588][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1162.067612][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1162.067636][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.072615][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1162.072644][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.072663][ T5901] usb 3-1: Product: syz [ 1162.072677][ T5901] usb 3-1: Manufacturer: syz [ 1162.072691][ T5901] usb 3-1: SerialNumber: syz [ 1162.178763][ T5901] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1162.192597][ T5901] usbtest 3-1:1.0: Linux user mode ISO test driver [ 1162.192617][ T5901] usbtest 3-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 1162.355633][ T49] usb 3-1: USB disconnect, device number 68 [ 1162.390236][T21202] netlink: 48 bytes leftover after parsing attributes in process `syz.6.17456'. [ 1163.015742][T21234] netlink: 'syz.7.17464': attribute type 21 has an invalid length. [ 1163.015764][T21234] netlink: 128 bytes leftover after parsing attributes in process `syz.7.17464'. [ 1163.015866][T21234] netlink: 'syz.7.17464': attribute type 4 has an invalid length. [ 1163.015882][T21234] netlink: 'syz.7.17464': attribute type 5 has an invalid length. [ 1163.015895][T21234] netlink: 3 bytes leftover after parsing attributes in process `syz.7.17464'. [ 1163.257701][T21243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.389355][ T49] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1163.536508][ T49] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 1163.570603][ T49] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1163.570632][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.570649][ T49] usb 7-1: Product: syz [ 1163.570663][ T49] usb 7-1: Manufacturer: syz [ 1163.570675][ T49] usb 7-1: SerialNumber: syz [ 1163.584472][ T49] usb 7-1: config 0 descriptor?? [ 1163.610210][ T49] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1163.640559][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1163.653103][ T49] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1163.653164][ T49] usb 7-1: media controller created [ 1163.689382][T21258] netlink: 'syz.7.17470': attribute type 10 has an invalid length. [ 1163.699392][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.936502][ T49] DVB: Unable to find symbol mt352_attach() [ 1164.085650][ T49] DVB: Unable to find symbol nxt6000_attach() [ 1164.085668][ T49] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1164.092599][ T49] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input125 [ 1164.097775][ T49] dvb-usb: schedule remote query interval to 1000 msecs. [ 1164.097796][ T49] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1164.097813][ T49] dvb-usb: bulk message failed: -22 (7/0) [ 1164.097829][ T49] dvb-usb: bulk message failed: -22 (7/0) [ 1164.112647][ T49] usb 7-1: USB disconnect, device number 27 [ 1164.118870][ T37] audit: type=1326 audit(2000001107.977:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21272 comm="syz.7.17473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb03524eec9 code=0x0 [ 1164.374024][ T49] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1164.629630][T21297] netlink: 'syz.2.17477': attribute type 11 has an invalid length. [ 1165.441626][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17489'. [ 1165.676809][T21334] netlink: 'syz.6.17492': attribute type 3 has an invalid length. [ 1165.765368][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17497'. [ 1165.765400][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17497'. [ 1167.294350][T21403] : entered promiscuous mode [ 1167.382810][ T5901] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1167.542655][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 1167.547886][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1167.547910][ T5901] usb 3-1: config 0 has no interface number 0 [ 1167.554390][ T5901] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1167.554418][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.554437][ T5901] usb 3-1: Product: syz [ 1167.554451][ T5901] usb 3-1: Manufacturer: syz [ 1167.554465][ T5901] usb 3-1: SerialNumber: syz [ 1167.573170][ T5901] usb 3-1: config 0 descriptor?? [ 1167.595053][ T5901] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1167.595079][ T5901] usb 3-1: selecting invalid altsetting 1 [ 1167.595094][ T5901] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1167.606936][ T5901] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1167.618567][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1167.618621][ T5901] usb 3-1: media controller created [ 1167.698094][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1167.804711][ T5901] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1167.804769][ T5901] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1167.805229][ T5901] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1167.843402][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1168.001317][ T5901] usb 3-1: USB disconnect, device number 69 [ 1168.379337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1168.946229][ T37] audit: type=1326 audit(2000001113.047:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21458 comm="syz.8.17536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1168.946371][ T37] audit: type=1326 audit(2000001113.047:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21458 comm="syz.8.17536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1168.986834][ T37] audit: type=1326 audit(2000001113.089:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21458 comm="syz.8.17536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1168.986886][ T37] audit: type=1326 audit(2000001113.089:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21458 comm="syz.8.17536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1168.986940][ T37] audit: type=1326 audit(2000001113.089:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21458 comm="syz.8.17536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1168.986981][ T37] audit: type=1326 audit(2000001113.089:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21458 comm="syz.8.17536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1168.987021][ T37] audit: type=1326 audit(2000001113.089:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21458 comm="syz.8.17536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1168.987059][ T37] audit: type=1326 audit(2000001113.089:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21458 comm="syz.8.17536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1169.247430][T14111] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1169.412606][T14111] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.412642][T14111] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1169.412677][T14111] usb 7-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 1169.412699][T14111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.438442][T14111] usb 7-1: config 0 descriptor?? [ 1169.828890][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 1169.847348][T14111] hid (null): invalid report_count -110192854 [ 1169.859974][T14111] wacom 0003:056A:0343.0063: invalid report_count -110192854 [ 1169.859999][T14111] wacom 0003:056A:0343.0063: item 0 4 1 9 parsing failed [ 1169.860782][T14111] wacom 0003:056A:0343.0063: parse failed [ 1169.860882][T14111] wacom 0003:056A:0343.0063: probe with driver wacom failed with error -22 [ 1169.951273][ T37] audit: type=1326 audit(2000001114.097:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21487 comm="syz.8.17544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1169.953949][ T37] audit: type=1326 audit(2000001114.097:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21487 comm="syz.8.17544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf38eec9 code=0x7ffc0000 [ 1170.058790][ T5947] usb 7-1: USB disconnect, device number 28 [ 1170.770413][T21529] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1170.913854][T21535] netlink: 60 bytes leftover after parsing attributes in process `syz.8.17559'. [ 1171.091778][T21544] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17562'. [ 1171.713675][T21569] netlink: 36 bytes leftover after parsing attributes in process `syz.8.17573'. [ 1172.048131][T21583] bond0: option miimon: invalid value (18446744072937799680) [ 1172.048156][T21583] bond0: option miimon: allowed values 0 - 2147483647 [ 1172.402043][T21598] ucma_write: process 129 (syz.8.17583) changed security contexts after opening file descriptor, this is not allowed. [ 1174.826189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.966939][ C1] vkms_vblank_simulate: vblank timer overrun [ 1175.000105][ T5130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1175.037004][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1175.060890][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1175.068242][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1175.075528][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1175.173754][ C1] vkms_vblank_simulate: vblank timer overrun [ 1175.343863][ T49] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1175.402808][T21706] tipc: Started in network mode [ 1175.402839][T21706] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1175.403041][T21706] tipc: Enabled bearer , priority 0 [ 1175.469752][T21707] wg1 speed is unknown, defaulting to 1000 [ 1175.531559][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.531606][ T49] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1175.531630][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.567188][ T49] usb 7-1: config 0 descriptor?? [ 1176.016040][ T49] lenovo 0003:17EF:6047.0064: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 1176.130508][T21707] chnl_net:caif_netlink_parms(): no params data found [ 1176.172774][ T49] lenovo 0003:17EF:6047.0064: Failed to switch F7/9/11 mode: -71 [ 1176.173309][ T49] lenovo 0003:17EF:6047.0064: Failed to switch middle button: -71 [ 1176.173828][ T49] lenovo 0003:17EF:6047.0064: Fn-lock setting failed: -71 [ 1176.174410][ T49] lenovo 0003:17EF:6047.0064: Sensitivity setting failed: -71 [ 1176.214038][ T49] usb 7-1: USB disconnect, device number 29 [ 1176.363460][T14111] tipc: Node number set to 10136234 [ 1176.614268][T21707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.614481][T21707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.614709][T21707] bridge_slave_0: entered allmulticast mode [ 1176.617755][T21707] bridge_slave_0: entered promiscuous mode [ 1176.625526][T21707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.625717][T21707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.625928][T21707] bridge_slave_1: entered allmulticast mode [ 1176.630587][T21707] bridge_slave_1: entered promiscuous mode [ 1176.849243][T14111] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1176.857364][T21707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.858238][T21960] autofs: Bad value for 'fd' [ 1176.866023][T21707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.984893][T14111] usb 3-1: Using ep0 maxpacket: 32 [ 1176.990943][T14111] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1176.990969][T14111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.990990][T14111] usb 3-1: Product: syz [ 1176.991004][T14111] usb 3-1: Manufacturer: syz [ 1176.991018][T14111] usb 3-1: SerialNumber: syz [ 1177.036663][T14111] usb 3-1: config 0 descriptor?? [ 1177.147248][T15256] Bluetooth: hci1: command tx timeout [ 1177.151318][T21707] team0: Port device team_slave_0 added [ 1177.156601][T21991] TCP: TCP_TX_DELAY enabled [ 1177.174500][T21707] team0: Port device team_slave_1 added [ 1177.430800][T14111] airspy 3-1:0.0: Board ID: 00 [ 1177.430814][T14111] airspy 3-1:0.0: Firmware version: [ 1177.625640][T14111] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 1177.652984][T14111] airspy 3-1:0.0: Registered as swradio24 [ 1177.653005][T14111] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1177.683058][T14111] usb 3-1: USB disconnect, device number 70 [ 1177.762879][T21707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.762897][T21707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.762924][T21707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.825956][T21707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.825974][T21707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.825998][T21707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.943577][T22046] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17651'. [ 1178.233990][T22069] ipvlan0: default FDB implementation only supports local addresses [ 1178.265515][T21707] hsr_slave_0: entered promiscuous mode [ 1178.272739][T21707] hsr_slave_1: entered promiscuous mode [ 1178.280135][T21707] debugfs: 'hsr0' already exists in 'hsr' [ 1178.280161][T21707] Cannot create hsr debugfs directory [ 1178.413528][T22091] Bluetooth: MGMT ver 1.23 [ 1178.732713][T22121] binder: 22110:22121 ioctl c0306201 2000000001c0 returned -22 [ 1179.126055][T15256] Bluetooth: hci1: command tx timeout [ 1179.211068][T22166] tipc: Enabling of bearer rejected, media not registered [ 1179.241051][ T5939] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1179.385743][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.385776][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.385811][ T5939] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1179.385833][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.466830][ T5939] usb 7-1: config 0 descriptor?? [ 1179.568350][T21707] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1179.607813][T21707] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1179.647749][T21707] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1179.718928][T21707] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1179.890832][ T5939] samsung 0003:0419:0600.0065: item fetching failed at offset 5/7 [ 1179.891731][ T5939] samsung 0003:0419:0600.0065: parse failed [ 1179.891801][ T5939] samsung 0003:0419:0600.0065: probe with driver samsung failed with error -22 [ 1179.973567][T14111] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1180.073523][T21707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.132730][T14111] usb 3-1: Using ep0 maxpacket: 16 [ 1180.133424][ T5939] usb 7-1: USB disconnect, device number 30 [ 1180.150539][T14111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.150571][T14111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.150609][T14111] usb 3-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 1180.150632][T14111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.199103][T21707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.250796][T14111] usb 3-1: config 0 descriptor?? [ 1180.259992][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.260163][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.372663][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.399358][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.417859][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17679'. [ 1180.668706][T14111] logitech-hidpp-device 0003:046D:C091.0066: unknown main item tag 0x0 [ 1180.668746][T14111] logitech-hidpp-device 0003:046D:C091.0066: unknown main item tag 0x0 [ 1180.668773][T14111] logitech-hidpp-device 0003:046D:C091.0066: unknown main item tag 0x0 [ 1180.668799][T14111] logitech-hidpp-device 0003:046D:C091.0066: unknown main item tag 0x0 [ 1180.668826][T14111] logitech-hidpp-device 0003:046D:C091.0066: unknown main item tag 0x0 [ 1180.695456][T14111] logitech-hidpp-device 0003:046D:C091.0066: hidraw0: USB HID v0.00 Device [HID 046d:c091] on usb-dummy_hcd.2-1/input0 [ 1180.870785][T14111] usb 3-1: USB disconnect, device number 71 [ 1180.943217][T22263] fido_id[22263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1181.107978][T15256] Bluetooth: hci1: command tx timeout [ 1181.194219][T22288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17688'. [ 1181.256109][T21707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.300154][T22290] [U] [ 1181.477161][T22298] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17691'. [ 1181.669727][T21707] veth0_vlan: entered promiscuous mode [ 1181.687689][T21707] veth1_vlan: entered promiscuous mode [ 1181.809892][T21707] veth0_macvtap: entered promiscuous mode [ 1181.825624][T21707] veth1_macvtap: entered promiscuous mode [ 1181.856480][T21707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.919916][T21707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.935521][ T1173] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.936435][ T1173] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.939695][ T1464] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.940050][ T1464] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.252917][ T49] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1182.323370][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.323390][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.411952][T11049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.411981][T11049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.436633][ T49] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1182.436667][ T49] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1182.436700][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1182.436731][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.484665][ T49] usb 3-1: config 0 descriptor?? [ 1182.882273][ T49] logitech-djreceiver 0003:046D:C534.0067: unknown main item tag 0x0 [ 1182.882309][ T49] logitech-djreceiver 0003:046D:C534.0067: unknown main item tag 0x0 [ 1182.882337][ T49] logitech-djreceiver 0003:046D:C534.0067: unknown main item tag 0x0 [ 1182.996649][T22352] netlink: 1 bytes leftover after parsing attributes in process `syz.6.17705'. [ 1183.083805][ T49] usb 3-1: USB disconnect, device number 72 [ 1183.088733][T15256] Bluetooth: hci1: command tx timeout [ 1183.190305][T22366] delete_channel: no stack [ 1183.310892][T22374] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17710'. [ 1183.598467][T22392] siw: device registration error -23 [ 1183.631555][ T5901] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1183.794318][ T5901] usb 10-1: Using ep0 maxpacket: 32 [ 1183.796631][ T5901] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1183.796658][ T5901] usb 10-1: config 0 has no interface number 0 [ 1183.796710][ T5901] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1183.799887][ T5901] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1183.799915][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.799936][ T5901] usb 10-1: Product: syz [ 1183.799950][ T5901] usb 10-1: Manufacturer: syz [ 1183.799964][ T5901] usb 10-1: SerialNumber: syz [ 1183.872452][ T5901] usb 10-1: config 0 descriptor?? [ 1184.090438][ T49] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1184.262540][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 1184.265244][ T49] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.265278][ T49] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1184.265312][ T49] usb 7-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1184.265334][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.347677][ T49] usb 7-1: config 0 descriptor?? [ 1184.460221][ T5901] f81534 10-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 1184.460272][ T5901] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1184.460339][ T5901] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1184.460427][ T5901] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1184.520092][ T5901] usb 10-1: USB disconnect, device number 2 [ 1184.980466][ T10] usb 7-1: USB disconnect, device number 31 [ 1186.491398][T22532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17758'. [ 1186.621500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1186.824995][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1186.825013][ T37] audit: type=1326 audit(2000001131.818:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22547 comm="syz.9.17764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e119eec9 code=0x0 [ 1186.903060][T22555] Bluetooth: MGMT ver 1.23 [ 1187.161156][T22565] netlink: 'syz.2.17772': attribute type 1 has an invalid length. [ 1188.003621][T22152] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1188.149484][T22152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1188.149523][T22152] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1188.149536][T22152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.152532][T22152] usb 3-1: config 0 descriptor?? [ 1188.153195][T22580] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1188.222485][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1188.346415][ T5939] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1188.367545][ T10] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1188.367634][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1188.367659][ T10] usb 10-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1188.367671][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.377092][ T10] usb 10-1: config 0 descriptor?? [ 1188.491464][ T5939] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1188.491495][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.491507][ T5939] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1188.491571][ T5939] usb 7-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1188.491584][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.500562][ T5939] usb 7-1: config 0 descriptor?? [ 1188.590848][T22152] logitech 0003:046D:CA04.0069: unknown main item tag 0x0 [ 1188.591199][T22152] logitech 0003:046D:CA04.0069: unknown main item tag 0x0 [ 1188.591216][T22152] logitech 0003:046D:CA04.0069: unknown main item tag 0x0 [ 1188.591231][T22152] logitech 0003:046D:CA04.0069: unknown main item tag 0x0 [ 1188.591246][T22152] logitech 0003:046D:CA04.0069: unknown main item tag 0x0 [ 1188.623448][T22152] logitech 0003:046D:CA04.0069: hidraw0: USB HID v81.01 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 1188.623496][T22152] logitech 0003:046D:CA04.0069: no inputs found [ 1188.765213][ T49] usb 3-1: USB disconnect, device number 73 [ 1188.837782][ T10] kye 0003:0458:0138.006A: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.9-1/input0 [ 1188.922568][ T5939] sony 0003:054C:042F.006B: unbalanced collection at end of report description [ 1188.926125][ T5939] sony 0003:054C:042F.006B: parse failed [ 1188.926228][ T5939] sony 0003:054C:042F.006B: probe with driver sony failed with error -22 [ 1188.977698][ T49] usb 10-1: USB disconnect, device number 3 [ 1189.109204][ T6806] usb 7-1: USB disconnect, device number 32 [ 1190.762033][T22722] program syz.9.17804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1192.700346][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1192.851982][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1192.854498][ T10] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1192.854544][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1192.854566][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1192.854589][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1192.854609][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1192.854631][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1192.856118][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1192.856144][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1192.856163][ T10] usb 3-1: SerialNumber: syz [ 1192.929546][ T10] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1192.929775][ T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 1192.997832][T22826] netlink: 822 bytes leftover after parsing attributes in process `syz.7.17841'. [ 1193.172997][ T6806] usb 3-1: USB disconnect, device number 74 [ 1193.643547][T22865] delete_channel: no stack [ 1193.643944][T22864] delete_channel: no stack [ 1194.444707][T22912] netlink: 'syz.7.17871': attribute type 8 has an invalid length. [ 1194.705945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.707044][ T49] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1194.873794][ T49] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.873829][ T49] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1194.873862][ T49] usb 7-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1194.873885][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.899586][ T49] usb 7-1: config 0 descriptor?? [ 1195.334728][ T49] viewsonic 0003:0543:E621.006C: unknown main item tag 0x0 [ 1195.334765][ T49] viewsonic 0003:0543:E621.006C: unknown main item tag 0x0 [ 1195.334792][ T49] viewsonic 0003:0543:E621.006C: unknown main item tag 0x0 [ 1195.334818][ T49] viewsonic 0003:0543:E621.006C: unknown main item tag 0x0 [ 1195.334845][ T49] viewsonic 0003:0543:E621.006C: unknown main item tag 0x0 [ 1195.334880][ T49] viewsonic 0003:0543:E621.006C: unknown main item tag 0x0 [ 1195.334907][ T49] viewsonic 0003:0543:E621.006C: unknown main item tag 0x0 [ 1195.374976][ T49] viewsonic 0003:0543:E621.006C: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.6-1/input0 [ 1195.565664][ T6806] usb 7-1: USB disconnect, device number 33 [ 1195.590551][T22973] fido_id[22973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1197.023364][T23058] netlink: 'syz.8.17920': attribute type 298 has an invalid length. [ 1197.224175][ T37] audit: type=1326 audit(2000001142.725:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23067 comm="syz.9.17924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e119eec9 code=0x0 [ 1197.470819][T23082] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17930'. [ 1197.478661][T23083] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1198.342765][T23124] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1198.342822][T23124] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1198.342914][T23124] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1198.343046][T23124] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1198.343095][T23124] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1198.343143][T23124] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1198.343280][T23124] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1198.343328][T23124] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1198.343375][T23124] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1198.343462][T23124] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1198.343509][T23124] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1198.343556][T23124] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1198.343642][T23124] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 1198.343695][T23124] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1199.377125][ T5939] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1199.522285][ T5939] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.522334][ T5939] usb 10-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1199.522358][ T5939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.527961][ T5939] usb 10-1: config 0 descriptor?? [ 1199.710756][ T49] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1199.882145][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 1199.884560][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.884606][ T49] usb 7-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1199.884628][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.889878][ T49] usb 7-1: config 0 descriptor?? [ 1199.962527][ T5939] kye 0003:0458:501B.006D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1199.982693][ T5939] kye 0003:0458:501B.006D: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.9-1/input0 [ 1199.982725][ T5939] kye 0003:0458:501B.006D: tablet-enabling feature report not found [ 1199.982739][ T5939] kye 0003:0458:501B.006D: tablet enabling failed [ 1200.189429][ T5939] usb 10-1: USB disconnect, device number 4 [ 1200.314450][T23215] fido_id[23215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1200.344489][ T49] cypress 0003:04B4:07B1.006E: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.6-1/input0 [ 1200.516821][ T49] usb 7-1: USB disconnect, device number 34 [ 1200.777393][ T5939] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1200.920579][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 1200.922837][ T5939] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.922865][ T5939] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.924768][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1200.924793][ T5939] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1200.924814][ T5939] usb 3-1: Product: syz [ 1200.924828][ T5939] usb 3-1: Manufacturer: syz [ 1201.003565][ T5939] hub 3-1:4.0: USB hub found [ 1201.205156][ T5939] hub 3-1:4.0: 2 ports detected [ 1201.624760][ T5939] hub 3-1:4.0: set hub depth failed [ 1201.656955][ T5939] usb 3-1: USB disconnect, device number 75 [ 1202.818106][T23372] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18021'. [ 1203.319776][T23393] tipc: Enabling of bearer rejected, already enabled [ 1203.884540][T23420] [U]  [ 1203.884555][T23420] [U] K{ [ 1203.884564][T23420] [U] t 1ŠFfˊ`GJgo/mC [ 1203.884588][T23420] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1203.884608][T23420] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1203.884637][T23420] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1203.884686][T23420] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1203.884710][T23420] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1203.884726][T23420] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1203.884748][T23420] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1203.884868][T23420] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1203.884883][T23420] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1203.884897][T23420] [U] 22Ʃx?0;3u [ 1203.884917][T23420] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1203.884940][T23420] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1203.884955][T23420] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1203.884967][T23420] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1203.884982][T23420] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1203.884995][T23420] [U] ec [ 1203.885008][T23420] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1203.888927][T23418] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1204.547558][T23441] netlink: 128 bytes leftover after parsing attributes in process `syz.9.18050'. [ 1204.547583][T23441] netlink: 'syz.9.18050': attribute type 1 has an invalid length. [ 1204.741066][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1204.842088][T23450] sp0: Synchronizing with TNC [ 1204.856218][T23449] [U] [ 1204.886309][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.886368][ T10] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.886396][ T10] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1204.889350][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1204.889377][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.889397][ T10] usb 3-1: Product: syz [ 1204.889411][ T10] usb 3-1: Manufacturer: syz [ 1204.889425][ T10] usb 3-1: SerialNumber: syz [ 1205.060078][T23463] netlink: 'syz.6.18056': attribute type 2 has an invalid length. [ 1205.223958][ T10] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 1205.248500][ T10] usb 3-1: USB disconnect, device number 76 [ 1205.485430][T23491] vlan3: entered promiscuous mode [ 1205.485452][T23491] syz_tun: entered promiscuous mode [ 1207.619761][T23586] netlink: 'syz.2.18098': attribute type 6 has an invalid length. [ 1209.988635][ T37] audit: type=1326 audit(2000001156.131:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23688 comm="syz.6.18136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1209.988683][ T37] audit: type=1326 audit(2000001156.131:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23688 comm="syz.6.18136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1209.990345][ T37] audit: type=1326 audit(2000001156.141:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23688 comm="syz.6.18136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1209.990941][ T37] audit: type=1326 audit(2000001156.141:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23688 comm="syz.6.18136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1209.994007][ T37] audit: type=1326 audit(2000001156.141:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23688 comm="syz.6.18136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25af3eec9 code=0x7ffc0000 [ 1210.027747][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1210.036677][T23692] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18137'. [ 1210.042858][T23692] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18137'. [ 1210.046424][T22152] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1210.173439][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1210.173468][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.191977][T22152] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1210.192037][T22152] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1210.195467][T22152] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1210.195493][T22152] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1210.195512][T22152] usb 10-1: Product: syz [ 1210.195526][T22152] usb 10-1: Manufacturer: syz [ 1210.195540][T22152] usb 10-1: SerialNumber: syz [ 1210.259624][ T10] usb 3-1: config 0 descriptor?? [ 1210.262785][T22152] usb 10-1: config 0 descriptor?? [ 1210.286847][ T10] cp210x 3-1:0.0: cp210x converter detected [ 1210.289583][T22152] hub 10-1:0.0: bad descriptor, ignoring hub [ 1210.289670][T22152] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1210.328452][T22152] usb 10-1: selecting invalid altsetting 0 [ 1210.613584][T22152] usb 10-1: USB disconnect, device number 5 [ 1210.810994][T12114] udevd[12114]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1210.853686][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1210.853741][ T10] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1210.882181][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1210.944802][ T10] usb 3-1: USB disconnect, device number 77 [ 1211.008254][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1211.015329][ T10] cp210x 3-1:0.0: device disconnected [ 1211.382226][T23766] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18149'. [ 1211.599700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1211.779458][ T1690] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1211.953527][ T1690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.953577][ T1690] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1211.953600][ T1690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.007137][ T1690] usb 7-1: config 0 descriptor?? [ 1212.085100][ T5947] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1212.203936][T23808] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1212.230796][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 1212.234837][ T5947] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.234865][ T5947] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1212.234891][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1212.234923][ T5947] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1212.234945][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.253161][ T5947] usb 3-1: config 0 descriptor?? [ 1212.412205][ T1690] saitek 0003:06A3:0621.006F: unknown main item tag 0x7 [ 1212.412243][ T1690] saitek 0003:06A3:0621.006F: item fetching failed at offset 6/7 [ 1212.413022][ T1690] saitek 0003:06A3:0621.006F: parse failed [ 1212.413123][ T1690] saitek 0003:06A3:0621.006F: probe with driver saitek failed with error -22 [ 1212.620328][T22152] usb 7-1: USB disconnect, device number 35 [ 1212.699465][ T5947] magicmouse 0003:05AC:0324.0070: unknown main item tag 0x0 [ 1212.699502][ T5947] magicmouse 0003:05AC:0324.0070: unknown main item tag 0x0 [ 1212.699526][ T5947] magicmouse 0003:05AC:0324.0070: unknown main item tag 0x0 [ 1212.699550][ T5947] magicmouse 0003:05AC:0324.0070: unknown main item tag 0x0 [ 1212.699575][ T5947] magicmouse 0003:05AC:0324.0070: unknown main item tag 0x0 [ 1212.749499][ T5947] magicmouse 0003:05AC:0324.0070: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 1212.749561][ T5947] magicmouse 0003:05AC:0324.0070: magicmouse input not registered [ 1212.783636][ T5947] magicmouse 0003:05AC:0324.0070: probe with driver magicmouse failed with error -12 [ 1212.931058][ T5947] usb 3-1: USB disconnect, device number 78 [ 1213.126744][T23853] fido_id[23853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1213.630652][T23888] sp0: Synchronizing with TNC [ 1213.646661][ T1690] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1213.713524][T23786] Bluetooth: hci5: command 0x0406 tx timeout [ 1213.819400][ T1690] usb 10-1: Using ep0 maxpacket: 32 [ 1213.835062][ T1690] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1213.835098][ T1690] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1213.835133][ T1690] usb 10-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 1213.835157][ T1690] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.862051][ T1690] usb 10-1: config 0 descriptor?? [ 1213.883480][ T1690] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input126 [ 1214.530319][T10859] bcm5974 10-1:0.0: could not read from device [ 1214.536170][ T1690] usb 10-1: USB disconnect, device number 6 [ 1214.673272][T10859] udevd[10859]: Error opening device "/dev/input/event4": No such device [ 1214.673402][T10859] udevd[10859]: Unable to EVIOCGABS device "/dev/input/event4" [ 1214.673519][T10859] udevd[10859]: Unable to EVIOCGABS device "/dev/input/event4" [ 1214.673671][T10859] udevd[10859]: Unable to EVIOCGABS device "/dev/input/event4" [ 1214.673780][T10859] udevd[10859]: Unable to EVIOCGABS device "/dev/input/event4" [ 1214.981043][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18198'. [ 1214.981067][T23953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18198'. [ 1215.341767][T23962] sp0: Synchronizing with TNC [ 1216.810601][T24032] program syz.9.18226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1217.749810][T24076] netlink: 'syz.9.18244': attribute type 2 has an invalid length. [ 1217.749831][T24076] netlink: 'syz.9.18244': attribute type 8 has an invalid length. [ 1217.749845][T24076] netlink: 132 bytes leftover after parsing attributes in process `syz.9.18244'. [ 1218.113956][ T1690] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1218.289091][ T1690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.289123][ T1690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.289161][ T1690] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1218.289182][ T1690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.331588][ T1690] usb 3-1: config 0 descriptor?? [ 1218.732351][ T1690] stadia 0003:18D1:9400.0071: unexpected long global item [ 1218.733117][ T1690] stadia 0003:18D1:9400.0071: parse failed [ 1218.733187][ T1690] stadia 0003:18D1:9400.0071: probe with driver stadia failed with error -22 [ 1218.952618][ T10] usb 3-1: USB disconnect, device number 79 [ 1218.973682][T24124] tipc: Started in network mode [ 1218.973702][T24124] tipc: Node identity 4, cluster identity 4711 [ 1218.973714][T24124] tipc: Node number set to 4 [ 1219.141406][T24137] tipc: Invalid UDP bearer configuration [ 1219.141453][T24137] tipc: Enabling of bearer rejected, failed to enable media [ 1219.857296][ T1690] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1220.000369][ T1690] usb 10-1: Using ep0 maxpacket: 16 [ 1220.002915][ T1690] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1220.002940][ T1690] usb 10-1: config 0 has no interface number 0 [ 1220.002986][ T1690] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.003012][ T1690] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.003047][ T1690] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1220.003071][ T1690] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.016747][ T1690] usb 10-1: config 0 descriptor?? [ 1220.599460][ T1690] uclogic 0003:28BD:0071.0072: failed retrieving string descriptor #100: -71 [ 1220.599528][ T1690] uclogic 0003:28BD:0071.0072: failed retrieving pen parameters: -71 [ 1220.599546][ T1690] uclogic 0003:28BD:0071.0072: pen probing failed: -71 [ 1220.599562][ T1690] uclogic 0003:28BD:0071.0072: failed probing parameters: -71 [ 1220.599665][ T1690] uclogic 0003:28BD:0071.0072: probe with driver uclogic failed with error -71 [ 1220.638062][ T1690] usb 10-1: USB disconnect, device number 7 [ 1220.963164][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1221.074739][T24211] support for the xor transformation has been removed. [ 1221.108245][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.108293][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 1221.108315][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.146245][ T10] usb 3-1: config 0 descriptor?? [ 1221.467118][ T5901] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1221.534585][T24226] netlink: 56 bytes leftover after parsing attributes in process `syz.8.18287'. [ 1221.539394][ T10] hid (null): unknown global tag 0xd [ 1221.561218][ T10] itetech 0003:06CB:73F4.0073: ignoring exceeding usage max [ 1221.570394][ T10] itetech 0003:06CB:73F4.0073: unknown global tag 0xd [ 1221.570418][ T10] itetech 0003:06CB:73F4.0073: item 0 2 1 13 parsing failed [ 1221.571396][ T10] itetech 0003:06CB:73F4.0073: probe with driver itetech failed with error -22 [ 1221.621001][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.621034][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.621069][ T5901] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1221.621091][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.634789][ T5901] usb 10-1: config 0 descriptor?? [ 1221.764587][ T10] usb 3-1: USB disconnect, device number 80 [ 1222.270802][ T5901] hid-led 0003:1D34:000A.0074: probe with driver hid-led failed with error -71 [ 1222.298038][ T5901] usb 10-1: USB disconnect, device number 8 [ 1223.204954][T24290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18300'. [ 1223.276150][T24292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18301'. [ 1223.566203][T24298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18304'. [ 1223.677784][T24302] Bluetooth: MGMT ver 1.23 [ 1224.197754][T24323] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18313'. [ 1224.210422][ T5901] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1224.378624][T24330] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18315'. [ 1224.383659][ T5901] usb 10-1: Using ep0 maxpacket: 32 [ 1224.387494][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.387524][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.387561][ T5901] usb 10-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1224.387583][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.405290][ T5901] usb 10-1: config 0 descriptor?? [ 1224.892112][ T5901] betop 0003:20BC:5500.0075: hidraw0: USB HID v0.07 Device [HID 20bc:5500] on usb-dummy_hcd.9-1/input0 [ 1224.892147][ T5901] betop 0003:20BC:5500.0075: no inputs found [ 1224.980052][T24356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18320'. [ 1224.980455][T24352] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18320'. [ 1225.093261][T22152] usb 10-1: USB disconnect, device number 9 [ 1226.380489][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1226.706501][T24437] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1227.934117][T24490] netlink: 'syz.9.18369': attribute type 7 has an invalid length. [ 1227.934138][T24490] netlink: 'syz.9.18369': attribute type 8 has an invalid length. [ 1229.651144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1229.844362][T24563] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18396'. [ 1229.981549][T23786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1230.004209][T23786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1230.007848][T23786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1230.009110][T23786] Bluetooth: hci6: unexpected cc 0x0c23 len[ 1230.009110][T23786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1230.010247][T23786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1230.030817][ T38] INFO: task kworker/u8:2:43 blocked for more than 143 seconds. [ 1230.030837][ T38] Not tainted syzkaller #0 [ 1230.030848][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1230.030858][ T38] task:kworker/u8:2 state:D stack:21096 pid:43 tgid:43 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1230.030910][ T38] Workqueue: netns cleanup_net [ 1230.030943][ T38] Call Trace: [ 1230.030951][ T38] [ 1230.030969][ T38] __schedule+0x16f3/0x4c20 [ 1230.031025][ T38] ? __pfx___schedule+0x10/0x10 [ 1230.031075][ T38] rt_mutex_schedule+0x77/0xf0 [ 1230.031098][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1230.031134][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1230.031159][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1230.031183][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1230.031204][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1230.031237][ T38] ? rdma_dev_change_netns+0x39/0x300 [ 1230.031270][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.031301][ T38] ? rdma_dev_change_netns+0x39/0x300 [ 1230.031322][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1230.031349][ T38] rdma_dev_change_netns+0x39/0x300 [ 1230.031380][ T38] rdma_dev_exit_net+0x203/0x340 [ 1230.031407][ T38] ? __pfx___might_resched+0x10/0x10 [ 1230.031435][ T38] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1230.031459][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 1230.031484][ T38] ? rtnl_is_locked+0x9/0x20 [ 1230.031513][ T38] ops_undo_list+0x497/0x990 [ 1230.031545][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1230.031567][ T38] ? rt_spin_unlock+0x150/0x200 [ 1230.031641][ T38] ? rt_spin_unlock+0x161/0x200 [ 1230.031664][ T38] cleanup_net+0x4de/0x820 [ 1230.031691][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1230.031718][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1230.031740][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1230.031763][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1230.031789][ T38] process_scheduled_works+0xae1/0x17b0 [ 1230.031840][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1230.031882][ T38] worker_thread+0x8a0/0xda0 [ 1230.031934][ T38] kthread+0x711/0x8a0 [ 1230.031957][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1230.031979][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.031995][ T38] ? rt_spin_unlock+0x150/0x200 [ 1230.032017][ T38] ? rt_spin_unlock+0x161/0x200 [ 1230.032033][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.032054][ T38] ret_from_fork+0x439/0x7d0 [ 1230.032080][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.032109][ T38] ? __switch_to_asm+0x39/0x70 [ 1230.032127][ T38] ? __switch_to_asm+0x33/0x70 [ 1230.032144][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.032165][ T38] ret_from_fork_asm+0x1a/0x30 [ 1230.032202][ T38] [ 1230.032379][ T38] INFO: task syz.1.16069:16213 blocked for more than 143 seconds. [ 1230.032394][ T38] Not tainted syzkaller #0 [ 1230.032403][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1230.032413][ T38] task:syz.1.16069 state:D stack:23784 pid:16213 tgid:16212 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 1230.032461][ T38] Call Trace: [ 1230.032468][ T38] [ 1230.032481][ T38] __schedule+0x16f3/0x4c20 [ 1230.032514][ T38] ? validate_chain+0x897/0x2140 [ 1230.032546][ T38] ? __lock_acquire+0xab9/0xd20 [ 1230.032571][ T38] ? __pfx___schedule+0x10/0x10 [ 1230.032619][ T38] ? schedule+0x91/0x360 [ 1230.032643][ T38] schedule+0x165/0x360 [ 1230.032668][ T38] schedule_timeout+0x9a/0x270 [ 1230.032691][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1230.032727][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1230.032751][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.032771][ T38] ? wait_for_completion+0x267/0x5d0 [ 1230.032797][ T38] wait_for_completion+0x2bf/0x5d0 [ 1230.032834][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1230.032861][ T38] ? disable_device+0x137/0x320 [ 1230.032894][ T38] disable_device+0x1c6/0x320 [ 1230.032919][ T38] ? __pfx_disable_device+0x10/0x10 [ 1230.032950][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 1230.032969][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 1230.032997][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 1230.033020][ T38] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1230.033050][ T38] ib_unregister_device_and_put+0xb8/0xf0 [ 1230.033076][ T38] nldev_dellink+0x2d1/0x320 [ 1230.033100][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 1230.033206][ T38] ? rcu_is_watching+0x15/0xb0 [ 1230.033228][ T38] ? cap_capable+0x11f/0x460 [ 1230.033255][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1230.033285][ T38] ? bpf_lsm_capable+0x9/0x20 [ 1230.033306][ T38] ? security_capable+0x7e/0x2e0 [ 1230.033329][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 1230.033351][ T38] rdma_nl_rcv+0x6ab/0x980 [ 1230.033385][ T38] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1230.033405][ T38] ? __lock_acquire+0xab9/0xd20 [ 1230.033449][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1230.033483][ T38] netlink_unicast+0x843/0xa10 [ 1230.033513][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1230.033538][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1230.033560][ T38] ? skb_put+0x11b/0x210 [ 1230.033595][ T38] netlink_sendmsg+0x805/0xb30 [ 1230.033629][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.033660][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1230.033685][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.033711][ T38] __sock_sendmsg+0x219/0x270 [ 1230.033735][ T38] ____sys_sendmsg+0x508/0x820 [ 1230.033768][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1230.033804][ T38] ? import_iovec+0x74/0xa0 [ 1230.033827][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 1230.033855][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.033924][ T38] ? __fget_files+0x2a/0x420 [ 1230.033949][ T38] ? __fget_files+0x3a6/0x420 [ 1230.033987][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 1230.034017][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1230.034056][ T38] ? rcu_is_watching+0x15/0xb0 [ 1230.034083][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1230.034113][ T38] do_syscall_64+0xfa/0x3b0 [ 1230.034135][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.034158][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.034178][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1230.034201][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.034218][ T38] RIP: 0033:0x7fd7f0d1eec9 [ 1230.034241][ T38] RSP: 002b:00007fd7eef7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1230.034257][ T38] RAX: ffffffffffffffda RBX: 00007fd7f0f75fa0 RCX: 00007fd7f0d1eec9 [ 1230.034269][ T38] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1230.034279][ T38] RBP: 00007fd7f0da1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1230.034289][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.034299][ T38] R13: 00007fd7f0f76038 R14: 00007fd7f0f75fa0 R15: 00007ffd662e7038 [ 1230.034325][ T38] [ 1230.034364][ T38] [ 1230.034364][ T38] Showing all locks held in the system: [ 1230.034374][ T38] 4 locks held by pr/legacy/17: [ 1230.034387][ T38] 1 lock held by khungtaskd/38: [ 1230.034398][ T38] #0: ffffffff8d3aa400 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1230.034449][ T38] 4 locks held by kworker/u8:2/43: [ 1230.034460][ T38] #0: ffff888019a94938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1230.034511][ T38] #1: ffffc90000b57bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1230.034559][ T38] #2: ffffffff8e65aea0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1230.034614][ T38] #3: ffff8880391bc750 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1230.034686][ T38] 2 locks held by getty/5570: [ 1230.034697][ T38] #0: ffff88823bf268a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1230.034746][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1230.034791][ T38] 4 locks held by syz-executor/5828: [ 1230.034810][ T38] 1 lock held by udevd/10641: [ 1230.034822][ T38] 2 locks held by kworker/u8:13/11049: [ 1230.034833][ T38] #0: ffff88813ff29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1230.034886][ T38] #1: ffffc90005c27bc0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1230.034934][ T38] 2 locks held by syz.1.16069/16213: [ 1230.034946][ T38] #0: ffffffff98cdce38 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 1230.034989][ T38] #1: ffff8880391bc750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1230.035037][ T38] 2 locks held by kworker/u8:15/20436: [ 1230.035049][ T38] 9 locks held by syz-executor/21707: [ 1230.035062][ T38] 2 locks held by syz.8.18397/24565: [ 1230.035073][ T38] 1 lock held by syz-executor/24566: [ 1230.035084][ T38] [ 1230.035090][ T38] ============================================= [ 1230.035090][ T38] [ 1230.035099][ T38] NMI backtrace for cpu 1 [ 1230.035118][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1230.035137][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1230.035147][ T38] Call Trace: [ 1230.035154][ T38] [ 1230.035162][ T38] dump_stack_lvl+0x189/0x250 [ 1230.035193][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1230.035218][ T38] ? __pfx__printk+0x10/0x10 [ 1230.035252][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1230.035276][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1230.035296][ T38] ? __pfx__printk+0x10/0x10 [ 1230.035317][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1230.035338][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1230.035358][ T38] watchdog+0xf60/0xfa0 [ 1230.035384][ T38] ? watchdog+0x1e2/0xfa0 [ 1230.035410][ T38] kthread+0x711/0x8a0 [ 1230.035428][ T38] ? __pfx_watchdog+0x10/0x10 [ 1230.035449][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.035462][ T38] ? rt_spin_unlock+0x150/0x200 [ 1230.035482][ T38] ? rt_spin_unlock+0x161/0x200 [ 1230.035495][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.035512][ T38] ret_from_fork+0x439/0x7d0 [ 1230.035534][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.035558][ T38] ? __switch_to_asm+0x39/0x70 [ 1230.035573][ T38] ? __switch_to_asm+0x33/0x70 [ 1230.035595][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.035611][ T38] ret_from_fork_asm+0x1a/0x30 [ 1230.035639][ T38] [ 1230.035650][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1230.035673][ C0] NMI backtrace for cpu 0 [ 1230.035687][ C0] CPU: 0 UID: 0 PID: 20436 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1230.035709][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1230.035721][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1230.035747][ C0] RIP: 0010:__lock_acquire+0x50c/0xd20 [ 1230.035773][ C0] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 b4 00 ed 10 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 a3 28 92 eb 40 83 3d 5b 90 [ 1230.035790][ C0] RSP: 0018:ffffc900050d7450 EFLAGS: 00000003 [ 1230.035805][ C0] RAX: 0000000000000004 RBX: 0000000000000002 RCX: 0000000000000006 [ 1230.035817][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff888056920000 [ 1230.035835][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff820b9d3e [ 1230.035848][ C0] R10: dffffc0000000000 R11: fffff940000109b9 R12: 00000000ffffff05 [ 1230.035862][ C0] R13: 0000000000000003 R14: ffff888056920c50 R15: ffff888056920bd0 [ 1230.035875][ C0] FS: 0000000000000000(0000) GS:ffff888127020000(0000) knlGS:0000000000000000 [ 1230.035891][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1230.035904][ C0] CR2: 00007f5baf710300 CR3: 000000000d1a6000 CR4: 00000000003526f0 [ 1230.035921][ C0] Call Trace: [ 1230.035928][ C0] [ 1230.035940][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 1230.035962][ C0] lock_acquire+0x120/0x360 [ 1230.035986][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 1230.036016][ C0] rt_spin_lock+0x88/0x3e0 [ 1230.036033][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 1230.036060][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1230.036081][ C0] ? ___pte_offset_map+0x173/0x200 [ 1230.036105][ C0] __pte_offset_map_lock+0x13e/0x210 [ 1230.036130][ C0] ? kmem_cache_alloc_node_noprof+0x91/0x6e0 [ 1230.036153][ C0] __text_poke+0x2e6/0xa10 [ 1230.036174][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1230.036192][ C0] ? kmem_cache_alloc_node_noprof+0x91/0x6e0 [ 1230.036214][ C0] ? __pfx___text_poke+0x10/0x10 [ 1230.036239][ C0] smp_text_poke_batch_finish+0x90a/0x1130 [ 1230.036263][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1230.036287][ C0] ? mutex_lock_nested+0x154/0x1d0 [ 1230.036303][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 1230.036327][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1230.036349][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 1230.036373][ C0] static_key_disable+0x1a/0x20 [ 1230.036394][ C0] toggle_allocation_gate+0x1a1/0x240 [ 1230.036418][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1230.036442][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1230.036469][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1230.036492][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1230.036515][ C0] process_scheduled_works+0xae1/0x17b0 [ 1230.036551][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1230.036581][ C0] worker_thread+0x8a0/0xda0 [ 1230.036606][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1230.036633][ C0] ? __kthread_parkme+0x7b/0x200 [ 1230.036661][ C0] kthread+0x711/0x8a0 [ 1230.036679][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1230.036702][ C0] ? __pfx_kthread+0x10/0x10 [ 1230.036718][ C0] ? rt_spin_unlock+0x150/0x200 [ 1230.036737][ C0] ? rt_spin_unlock+0x161/0x200 [ 1230.036754][ C0] ? __pfx_kthread+0x10/0x10 [ 1230.036771][ C0] ret_from_fork+0x439/0x7d0 [ 1230.036794][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.036819][ C0] ? __switch_to_asm+0x39/0x70 [ 1230.036841][ C0] ? __switch_to_asm+0x33/0x70 [ 1230.036857][ C0] ? __pfx_kthread+0x10/0x10 [ 1230.036874][ C0] ret_from_fork_asm+0x1a/0x30 [ 1230.036899][ C0] [ 1230.037677][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1230.037693][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1230.037715][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1230.037726][ T38] Call Trace: [ 1230.037735][ T38] [ 1230.037744][ T38] dump_stack_lvl+0x99/0x250 [ 1230.037772][ T38] ? __asan_memcpy+0x40/0x70 [ 1230.037794][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1230.037821][ T38] ? __pfx__printk+0x10/0x10 [ 1230.037855][ T38] vpanic+0x237/0x6d0 [ 1230.037873][ T38] ? __pfx_vpanic+0x10/0x10 [ 1230.037902][ T38] panic+0xb9/0xc0 [ 1230.037923][ T38] ? __pfx_panic+0x10/0x10 [ 1230.037945][ T38] ? irq_work_queue+0xc3/0x140 [ 1230.037975][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1230.037999][ T38] watchdog+0xf9f/0xfa0 [ 1230.038031][ T38] ? watchdog+0x1e2/0xfa0 [ 1230.038062][ T38] kthread+0x711/0x8a0 [ 1230.038084][ T38] ? __pfx_watchdog+0x10/0x10 [ 1230.038109][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.038125][ T38] ? rt_spin_unlock+0x150/0x200 [ 1230.038149][ T38] ? rt_spin_unlock+0x161/0x200 [ 1230.038167][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.038187][ T38] ret_from_fork+0x439/0x7d0 [ 1230.038213][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.038243][ T38] ? __switch_to_asm+0x39/0x70 [ 1230.038260][ T38] ? __switch_to_asm+0x33/0x70 [ 1230.038277][ T38] ? __pfx_kthread+0x10/0x10 [ 1230.038298][ T38] ret_from_fork_asm+0x1a/0x30 [ 1230.038333][ T38] [ 1230.038593][ T38] Kernel Offset: disabled