last executing test programs: 14m19.371394641s ago: executing program 32 (id=5956): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000240)={0x73, "1a3d478c84295431f55b9e307e28d46626929c81d982194a021e4ac451d2d193bc668022355ba1b139378d593f07837a6d61b0fcb913d4af49a70e29e0bded1780d1222b4c2ab9174c059cc1715cfdc1ed4678d9853aff1eb5477cbfab16b52f3d2b7e5231c94136cff7e36e5110d91abfe2ae96dc5c3f5944f2da3e7b3bcf0ca2a7c06882fd8d9a719c9c40ed9b1aadd17fe87e0846e4437b62897875382f209692ac5db7e75d411bc713a7bd01f6a5a2e013c8a4457f40f1111a1e10b80f7a777320329bf69964ab2b8b050b1b5b64d6c50ed786f386efde89904443f05afeb9ae0b1b3ac57e37138cd92d98da1e98114368516213f49827d836a321a578395c85f624ebb8c66a756201ac9ecce5bd44819fbef892f62493676f2016a64b463a424cfba47b45678fce3f5a51e1d27df403af44f3d9a3e1fb57a85f1638b2931d2524835827b8d83f5c2ce9e2d9d06e6e3683f2713d9ea1ec9de3b1eaa398459db889e4447b30cdf155b6ae17b214572371d5ac90ace1ef03982bb0cb98ebd06f3c574cf301343782f0e68c5c513e039fed81bfd282fe5154cce068fdaea8d055685465dd153588cef27e6114d74217e2788fae7a0f130e9b7bbbba2d41f35e1d79b3037b9daaeea1c28a860efb5682bc45a22fd44d7778075f472443ea2d3e9ccba00a7e1aae228412bdfa5a357da2adf2153b26e2258e440729c5684b1dee"}) 14m16.42981587s ago: executing program 33 (id=5982): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) 14m15.238118583s ago: executing program 34 (id=5995): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x8) 14m14.464263868s ago: executing program 35 (id=6006): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 13m22.289531503s ago: executing program 7 (id=7138): add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) 13m21.956493394s ago: executing program 7 (id=7143): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)=0x4f) 13m21.678316982s ago: executing program 7 (id=7148): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000600)=ANY=[], 0x0, 0x0}) 13m20.172013894s ago: executing program 8 (id=7164): r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) 13m19.809643099s ago: executing program 8 (id=7169): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x10) 13m19.75056136s ago: executing program 7 (id=7171): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 13m19.547690411s ago: executing program 6 (id=7175): r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) 13m19.509134438s ago: executing program 8 (id=7176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) 13m19.441775045s ago: executing program 7 (id=7177): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf7, 0x7fff7ffc}]}) exit(0x6) 13m19.252414663s ago: executing program 6 (id=7179): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}]}}}]}, 0x3c}}, 0x0) 13m19.116730179s ago: executing program 8 (id=7182): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000d5c000/0x1000)=nil, 0x1000, 0x4) 13m18.954407047s ago: executing program 5 (id=7183): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz 02000 '], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13m18.900587836s ago: executing program 6 (id=7184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 13m18.90001085s ago: executing program 8 (id=7185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x90}}, 0x20050800) 13m18.778331906s ago: executing program 5 (id=7187): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) 13m18.689757337s ago: executing program 5 (id=7188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x6b3a76ff6e6158b3}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 13m18.577496563s ago: executing program 6 (id=7190): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 13m18.509687381s ago: executing program 8 (id=7191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x0, 0x5, 0x2e}, @TCA_SKBMOD_DMAC={0x30, 0x3, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) 13m18.476068136s ago: executing program 7 (id=7192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x13, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 13m18.380063414s ago: executing program 6 (id=7193): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) 13m18.355324833s ago: executing program 5 (id=7195): rt_sigaction(0x40, &(0x7f0000000140)={0x0, 0x10000003, 0x0, {[0xb]}}, 0x0, 0x8, &(0x7f0000000480)) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13m18.081278028s ago: executing program 6 (id=7197): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x20, 0x13, 0xa29}, 0x20}}, 0x0) 13m17.976250683s ago: executing program 5 (id=7198): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xb88}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 13m17.84318294s ago: executing program 5 (id=7201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) 13m4.198387796s ago: executing program 36 (id=7191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x0, 0x5, 0x2e}, @TCA_SKBMOD_DMAC={0x30, 0x3, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) 13m4.071838155s ago: executing program 37 (id=7192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x13, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 13m3.738985545s ago: executing program 38 (id=7197): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x20, 0x13, 0xa29}, 0x20}}, 0x0) 13m3.469279134s ago: executing program 39 (id=7201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) 9m18.702223595s ago: executing program 0 (id=9878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r1, 0x1, 0xfffffffc, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 9m18.442278752s ago: executing program 0 (id=9884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000440), 0x0}, 0x20) 9m18.217443662s ago: executing program 0 (id=9889): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="00000108000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x15, 0x6, "dac3b431559e"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "0822f3c7c63a3468f4c1ce2b4da7dcb1a4b43785b8330eac3acb059b35e6159198cebb952bc8a54736aa7dc06d8227"}}) 9m16.553749448s ago: executing program 0 (id=9920): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r0, 0x0, 0xfe00}]) 9m16.347490833s ago: executing program 0 (id=9925): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x2c00) 9m16.142600759s ago: executing program 0 (id=9928): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$loop(&(0x7f0000003440), 0x5, 0x100) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 9m1.757333104s ago: executing program 40 (id=9928): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$loop(&(0x7f0000003440), 0x5, 0x100) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 6m17.883354767s ago: executing program 9 (id=12191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) 6m16.781474969s ago: executing program 9 (id=12194): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 6m14.616838536s ago: executing program 9 (id=12200): capset(&(0x7f0000000480)={0x19980330}, &(0x7f00000004c0)={0xfb, 0x7ff, 0x0, 0x1, 0x83}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 6m11.880288911s ago: executing program 9 (id=12206): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) 6m10.497523679s ago: executing program 9 (id=12211): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8880) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) poll(&(0x7f0000000240)=[{r0, 0x204}, {r1}], 0x2, 0x6) 6m8.145729733s ago: executing program 9 (id=12216): syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 5m53.084493518s ago: executing program 41 (id=12216): syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 4m14.372207891s ago: executing program 1 (id=12399): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={&(0x7f0000000400)='./cgroup/../file0/../file0\x00', r0}, 0x18) 4m11.71828661s ago: executing program 1 (id=12403): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xaf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000003c0)={0x40, 0x1, 0x5, {0x5, 0x2, "1a4e1a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m6.593585305s ago: executing program 1 (id=12410): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x31, &(0x7f0000000280)=0xd983, 0x4) 4m4.569784507s ago: executing program 1 (id=12413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd700002dcdf25010000000c0002000100000001000100100007800c000180", @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x800) 4m2.705497428s ago: executing program 1 (id=12415): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\b\x00']) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)={0x0, 0x4, 0xffffffa7}) 3m58.074854988s ago: executing program 1 (id=12420): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0xfffffff7, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m43.16345515s ago: executing program 42 (id=12420): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0xfffffff7, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m36.757270725s ago: executing program 3 (id=12445): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_sigtimedwait(&(0x7f0000000000)={[0x1]}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x8) 3m34.762198038s ago: executing program 3 (id=12449): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4002, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x8}}}}}, 0x0) 3m33.805938754s ago: executing program 3 (id=12451): r0 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x308}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) 3m30.894058215s ago: executing program 3 (id=12455): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m29.575057208s ago: executing program 3 (id=12459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 3m25.948674927s ago: executing program 3 (id=12462): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0xcc, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xec, 0x3, 0xd, 0x0, 0x8001, 0x7, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x2, 0x7d4, 0x10000000, 0x1, 0x0, 0x8001, 0x3}}, {0xa, 0x2, [0x600, 0x8000, 0x7]}}, {{0x1c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x1, 0x7, 0x9, 0x2}}, {0x8, 0x2, [0x1, 0xfff6]}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) 3m10.721356687s ago: executing program 43 (id=12462): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0xcc, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xec, 0x3, 0xd, 0x0, 0x8001, 0x7, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x2, 0x7d4, 0x10000000, 0x1, 0x0, 0x8001, 0x3}}, {0xa, 0x2, [0x600, 0x8000, 0x7]}}, {{0x1c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x1, 0x7, 0x9, 0x2}}, {0x8, 0x2, [0x1, 0xfff6]}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) 2m31.117692961s ago: executing program 4 (id=12511): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) 2m29.106748278s ago: executing program 4 (id=12515): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000380)) 2m28.330422225s ago: executing program 4 (id=12518): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)={0x60, 0x3, 0x7e, {0x7e, 0x3e, "3d91419d09660832827565614096a12bbac2704fcc0ce98ee25dd28e956f9af7e672ed4e50d9b3d2f422d4d1874fa493768bfe633f9ae289b5bbe36d157e485f4525995fefd9a98bdaec89f37e62e4d25f1e800d812d9afec823572a53725a968923e4ce4556a9cf54b93f1cbf03c518815a1a3d9d7ae36e3f4475ec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m22.812024615s ago: executing program 4 (id=12523): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xc6c01) 2m18.336344979s ago: executing program 4 (id=12528): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) recvfrom$l2tp(r0, 0x0, 0x936a7c09d3690928, 0x0, 0x0, 0x52) 2m16.210142475s ago: executing program 4 (id=12530): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', r1, 0x40, 0x7800, 0x2, 0x7, {{0x5, 0x4, 0x1, 0x3d, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1m59.568537291s ago: executing program 44 (id=12530): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', r1, 0x40, 0x7800, 0x2, 0x7, {{0x5, 0x4, 0x1, 0x3d, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 5.333790494s ago: executing program 2 (id=12626): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1d0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 4.598468385s ago: executing program 2 (id=12627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 4.311222306s ago: executing program 2 (id=12628): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x4000000000, 0x2, 0x8, 0x14, 0xffffffff7ffffffb, 0x7, 0x0, 0x9, 0xffffffffffffffff, 0x80, 0x100000009, 0x0, 0x8, 0x5fba, 0x7], 0x4, 0x2000c0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4.095164228s ago: executing program 2 (id=12629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000f2ffff9b00004000000000f7"]) 2.772179384s ago: executing program 2 (id=12630): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 0s ago: executing program 2 (id=12631): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fcntl$setstatus(r0, 0x4, 0x7c00) kernel console output (not intermixed with test programs): new high-speed USB device number 105 using dummy_hcd [ 801.342645][ T5923] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 801.352323][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 801.354591][ T9] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 801.354617][ T9] usb 2-1: config 0 has no interface number 0 [ 801.354664][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 801.354689][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 801.354714][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 801.354741][ T9] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.357675][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 801.357702][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.357723][ T9] usb 2-1: Product: syz [ 801.357738][ T9] usb 2-1: Manufacturer: syz [ 801.357753][ T9] usb 2-1: SerialNumber: syz [ 801.365776][ T9] usb 2-1: config 0 descriptor?? [ 801.533199][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 801.535843][ T5923] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 801.535869][ T5923] usb 4-1: config 0 has no interface number 0 [ 801.539686][ T5923] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 801.539715][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.539736][ T5923] usb 4-1: Product: syz [ 801.539752][ T5923] usb 4-1: Manufacturer: syz [ 801.539766][ T5923] usb 4-1: SerialNumber: syz [ 801.596810][ T5923] usb 4-1: config 0 descriptor?? [ 801.612830][ T5923] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 801.688072][ T9] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 801.834673][ T5923] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 801.863315][ T5923] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 801.882102][T30030] usb 2-1: USB disconnect, device number 105 [ 802.216123][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 802.222211][T30030] usb 4-1: USB disconnect, device number 109 [ 802.275217][T30030] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 802.298435][T30030] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 802.299491][T30030] quatech2 4-1:0.51: device disconnected [ 802.633947][ T4351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10082'. [ 803.513840][ T4393] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10100'. [ 803.513868][ T4393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10100'. [ 803.859727][ T4412] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10110'. [ 804.344992][ T4435] tipc: Enabling of bearer rejected, failed to enable media [ 804.454194][ T4442] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 804.685984][ T4451] fuse: Bad value for 'fd' [ 805.676649][ T5924] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 805.715516][T30030] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 805.838878][ T5924] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.838908][ T5924] usb 2-1: config 0 has no interface number 0 [ 805.838958][ T5924] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.838984][ T5924] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.839023][ T5924] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 805.839048][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.866767][ T5924] usb 2-1: config 0 descriptor?? [ 805.898270][T30030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.898305][T30030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.898378][T30030] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 805.898420][T30030] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 805.898444][T30030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.031612][T30030] usb 4-1: config 0 descriptor?? [ 806.328044][ T5924] prodikeys 0003:041E:2801.001F: item fetching failed at offset 3/7 [ 806.330694][ T5924] prodikeys 0003:041E:2801.001F: hid parse failed [ 806.331028][ T5924] prodikeys 0003:041E:2801.001F: probe with driver prodikeys failed with error -22 [ 806.442946][T30030] pantherlord 0003:0810:0002.0020: item fetching failed at offset 5/7 [ 806.465434][T30030] pantherlord 0003:0810:0002.0020: parse failed [ 806.465515][T30030] pantherlord 0003:0810:0002.0020: probe with driver pantherlord failed with error -22 [ 806.521114][T30030] usb 2-1: USB disconnect, device number 106 [ 806.623715][ T5923] usb 4-1: USB disconnect, device number 110 [ 807.077478][ T4566] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10157'. [ 807.940123][ T3150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 807.954666][ T3150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 807.956179][ T3150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 807.964090][ T3150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 807.965303][ T3150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 808.048366][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.462804][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.486160][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.713240][ T4621] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.713407][ T4621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.746529][ T4621] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.746688][ T4621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.934644][ T31] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 809.077830][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 809.080273][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.080333][ T31] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 809.080360][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 809.083300][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 809.083329][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.083351][ T31] usb 2-1: Product: syz [ 809.083367][ T31] usb 2-1: Manufacturer: syz [ 809.083383][ T31] usb 2-1: SerialNumber: syz [ 809.161185][ T31] usb 2-1: config 0 descriptor?? [ 809.162329][ T4638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 809.257497][ T4595] lo speed is unknown, defaulting to 1000 [ 809.257678][ T4663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10189'. [ 809.273653][ T43] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 809.391959][ T5875] usb 2-1: USB disconnect, device number 107 [ 809.413027][ T43] usb 10-1: config 0 interface 0 altsetting 146 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.413059][ T43] usb 10-1: config 0 interface 0 altsetting 146 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 809.413087][ T43] usb 10-1: config 0 interface 0 has no altsetting 0 [ 809.413120][ T43] usb 10-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 809.413146][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.482423][ T43] usb 10-1: config 0 descriptor?? [ 809.856716][ T1687] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.884195][ T5815] Bluetooth: hci0: command tx timeout [ 809.928622][ T43] saitek 0003:06A3:0CCD.0021: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.9-1/input0 [ 810.027370][ T4705] Invalid ELF header magic: != ELF [ 810.088250][ T43] usb 10-1: USB disconnect, device number 17 [ 810.200471][ T4706] fido_id[4706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 810.493210][ T1687] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.932053][ T1687] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.971687][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10218'. [ 811.077735][T24586] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 811.228885][T24586] usb 2-1: Using ep0 maxpacket: 16 [ 811.239076][T24586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.239111][T24586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.239152][T24586] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 811.239175][T24586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.286783][T24586] usb 2-1: config 0 descriptor?? [ 811.445016][ T1687] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.677683][ T5924] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 811.710706][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710745][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710773][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710801][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710826][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710850][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710876][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710901][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710925][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.710950][T24586] logitech 0003:046D:C50C.0022: unknown main item tag 0x0 [ 811.793490][T24586] logitech 0003:046D:C50C.0022: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 811.852439][ T5924] usb 10-1: Using ep0 maxpacket: 32 [ 811.860616][ T5924] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 811.860647][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.870551][ T5815] Bluetooth: hci0: command tx timeout [ 811.962640][ T5924] usb 10-1: config 0 descriptor?? [ 811.970135][ T5875] usb 2-1: USB disconnect, device number 108 [ 812.039572][ T5924] gspca_main: sq930x-2.14.0 probing 041e:403c [ 812.156590][ T4890] fido_id[4890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 812.198477][ T5924] gspca_sq930x: reg_r 001f failed -71 [ 812.198574][ T5924] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 812.281999][ T5924] usb 10-1: USB disconnect, device number 18 [ 812.387300][ T4595] chnl_net:caif_netlink_parms(): no params data found [ 812.647884][ T1687] bridge_slave_1: left allmulticast mode [ 812.647913][ T1687] bridge_slave_1: left promiscuous mode [ 812.648168][ T1687] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.727648][ T1687] bridge_slave_0: left allmulticast mode [ 812.727679][ T1687] bridge_slave_0: left promiscuous mode [ 812.727984][ T1687] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.325541][ T31] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 813.471075][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.471116][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.471156][ T31] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 813.471180][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.523113][ T31] usb 2-1: config 0 descriptor?? [ 813.766423][ T5018] Bluetooth: MGMT ver 1.23 [ 813.844516][ T5815] Bluetooth: hci0: command tx timeout [ 813.881572][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10260'. [ 814.115354][ T31] hid-led 0003:27B8:01ED.0023: probe with driver hid-led failed with error -71 [ 814.157496][ T31] usb 2-1: USB disconnect, device number 109 [ 815.240488][ T5923] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 815.408218][ T5923] usb 10-1: Using ep0 maxpacket: 16 [ 815.410478][ T5923] usb 10-1: config 0 interface 0 has no altsetting 0 [ 815.410520][ T5923] usb 10-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 815.410543][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.417757][ T5923] usb 10-1: config 0 descriptor?? [ 815.821617][ T5815] Bluetooth: hci0: command tx timeout [ 815.831563][ T5923] sony 0003:1345:3008.0024: item fetching failed at offset 3/5 [ 815.832413][ T5923] sony 0003:1345:3008.0024: parse failed [ 815.832519][ T5923] sony 0003:1345:3008.0024: probe with driver sony failed with error -22 [ 816.036034][ T5923] usb 10-1: USB disconnect, device number 19 [ 817.229132][ T5186] qnx6: unable to read the first superblock [ 817.315618][ T37] audit: type=1326 audit(2000000283.729:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5193 comm="syz.1.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 817.315940][ T37] audit: type=1326 audit(2000000283.729:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5193 comm="syz.1.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 817.316431][ T37] audit: type=1326 audit(2000000283.729:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5193 comm="syz.1.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 817.401601][ T37] audit: type=1326 audit(2000000283.771:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5193 comm="syz.1.10320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 817.490864][ T1687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.555657][ T1687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.600865][ T1687] bond0 (unregistering): Released all slaves [ 818.641097][T30030] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 818.813797][T30030] usb 4-1: Using ep0 maxpacket: 32 [ 818.817162][T30030] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 818.817188][T30030] usb 4-1: config 0 has no interface number 0 [ 818.820261][T30030] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 818.820290][T30030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.820312][T30030] usb 4-1: Product: syz [ 818.820326][T30030] usb 4-1: Manufacturer: syz [ 818.820341][T30030] usb 4-1: SerialNumber: syz [ 818.876748][T30030] usb 4-1: config 0 descriptor?? [ 818.893515][T30030] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 819.146140][T30030] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 819.260663][T30030] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 819.298353][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 819.496078][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 819.517989][T24586] usb 4-1: USB disconnect, device number 111 [ 819.556816][T24586] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 819.619327][T24586] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 819.620381][T24586] quatech2 4-1:0.51: device disconnected [ 819.850710][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.850845][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.851084][ T4595] bridge_slave_0: entered allmulticast mode [ 819.859449][ T4595] bridge_slave_0: entered promiscuous mode [ 819.907168][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.907299][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.912979][ T4595] bridge_slave_1: entered allmulticast mode [ 819.918992][ T4595] bridge_slave_1: entered promiscuous mode [ 820.250449][ T5373] netlink: 124 bytes leftover after parsing attributes in process `syz.1.10365'. [ 820.464787][ T4595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.680562][ T1687] hsr_slave_0: left promiscuous mode [ 820.718746][ T5412] netlink: 'syz.3.10372': attribute type 4 has an invalid length. [ 820.718770][ T5412] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10372'. [ 820.726932][ T1687] hsr_slave_1: left promiscuous mode [ 820.730240][ T1687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.730266][ T1687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.780394][ T1687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.780423][ T1687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.885804][ T1687] veth1_macvtap: left promiscuous mode [ 820.885912][ T1687] veth0_macvtap: left promiscuous mode [ 823.311502][ T1687] team0 (unregistering): Port device team_slave_1 removed [ 823.624563][ T1687] team0 (unregistering): Port device team_slave_0 removed [ 827.037177][ T4595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.678807][ T4595] team0: Port device team_slave_0 added [ 827.739974][ T4595] team0: Port device team_slave_1 added [ 828.254800][ T5689] syz.1.10496 (5689): drop_caches: 2 [ 828.825234][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.825251][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.825273][ T4595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.886624][ T4595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.886662][ T4595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.886704][ T4595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.323526][ T4595] hsr_slave_0: entered promiscuous mode [ 829.325051][ T4595] hsr_slave_1: entered promiscuous mode [ 830.011963][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10531'. [ 831.408358][ T5838] syz.3.10524 (5838): drop_caches: 2 [ 831.471899][T24586] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 831.614680][T24586] usb 2-1: Using ep0 maxpacket: 16 [ 831.617012][T24586] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.617064][T24586] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 831.617089][T24586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.682191][T24586] usb 2-1: config 0 descriptor?? [ 832.082622][T24586] cypress 0003:04B4:DE64.0025: report_id 0 is invalid [ 832.082647][T24586] cypress 0003:04B4:DE64.0025: item 0 0 1 8 parsing failed [ 832.083464][T24586] cypress 0003:04B4:DE64.0025: parse failed [ 832.083534][T24586] cypress 0003:04B4:DE64.0025: probe with driver cypress failed with error -22 [ 832.197945][T30030] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 832.300311][T24586] usb 2-1: USB disconnect, device number 110 [ 832.342806][T30030] usb 10-1: Using ep0 maxpacket: 16 [ 832.359936][T30030] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.359964][T30030] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.362460][T30030] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 832.362481][T30030] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.362492][T30030] usb 10-1: Product: syz [ 832.362500][T30030] usb 10-1: Manufacturer: syz [ 832.362508][T30030] usb 10-1: SerialNumber: syz [ 832.662817][T30030] usb 10-1: 0:2 : does not exist [ 832.676977][T30030] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 832.744603][T30030] usb 10-1: USB disconnect, device number 20 [ 832.958749][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.577207][T24586] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 833.749977][T24586] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 833.750009][T24586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.750030][T24586] usb 4-1: Product: syz [ 833.750046][T24586] usb 4-1: Manufacturer: syz [ 833.750061][T24586] usb 4-1: SerialNumber: syz [ 833.756386][T24586] usb 4-1: config 0 descriptor?? [ 833.930640][ T37] audit: type=1326 audit(2000000301.190:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.1.10568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x0 [ 833.930685][ T37] audit: type=1326 audit(2000000301.190:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.1.10568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x0 [ 833.997589][T24586] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 834.139344][ T37] audit: type=1326 audit(2000000301.379:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.1.10568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f8fd0b8f6c9 code=0x0 [ 834.218337][T24586] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 834.242475][T24586] usb 4-1: USB disconnect, device number 112 [ 834.338779][ T6131] new mount options do not match the existing superblock, will be ignored [ 834.352409][ T6131] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 834.414635][ T4595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 834.512115][ T4595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 834.560144][ T4595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 834.663913][ T4595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 835.173931][ T4595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.272297][ T4595] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.328863][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.345413][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.399599][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.415643][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.557431][ T4595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.367280][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10602'. [ 837.489553][ T4595] veth0_vlan: entered promiscuous mode [ 837.524073][ T4595] veth1_vlan: entered promiscuous mode [ 837.606990][ T4595] veth0_macvtap: entered promiscuous mode [ 837.641158][ T4595] veth1_macvtap: entered promiscuous mode [ 837.687906][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.726475][ T4595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.746253][ T3499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.746475][ T3499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.746530][ T3499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.746565][ T3499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.935434][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10609'. [ 838.284544][ T1507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.284565][ T1507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.525506][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.525537][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.320607][ T37] audit: type=1326 audit(2000000307.877:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.3.10644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 840.320662][ T37] audit: type=1326 audit(2000000307.888:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.3.10644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 840.340134][ T37] audit: type=1326 audit(2000000307.909:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.3.10644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 840.340186][ T37] audit: type=1326 audit(2000000307.909:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.3.10644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 840.341245][ T37] audit: type=1326 audit(2000000307.909:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.3.10644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 840.341292][ T37] audit: type=1326 audit(2000000307.919:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.3.10644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 840.341333][ T37] audit: type=1326 audit(2000000307.919:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.3.10644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 840.342321][ T37] audit: type=1326 audit(2000000307.919:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.3.10644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 840.903825][ T6392] syz.3.10652 (6392) used obsolete PPPIOCDETACH ioctl [ 841.973856][ T6457] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10674'. [ 842.476363][ T5924] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 842.645675][ T5924] usb 10-1: Using ep0 maxpacket: 16 [ 842.648112][ T5924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.648163][ T5924] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 842.648189][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.660988][ T5924] usb 10-1: config 0 descriptor?? [ 842.847784][ T43] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 843.008395][ T43] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 843.008427][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.008448][ T43] usb 2-1: Product: syz [ 843.008463][ T43] usb 2-1: Manufacturer: syz [ 843.008478][ T43] usb 2-1: SerialNumber: syz [ 843.051820][ T43] usb 2-1: config 0 descriptor?? [ 843.068147][ T43] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 843.106363][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 843.107238][ T43] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 843.107296][ T43] usb 2-1: media controller created [ 843.164995][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 843.270925][ T5924] hid-led 0003:1D34:000A.0026: probe with driver hid-led failed with error -71 [ 843.324703][ T43] DVB: Unable to find symbol mt352_attach() [ 843.350135][ T5924] usb 10-1: USB disconnect, device number 21 [ 843.396293][ T43] DVB: Unable to find symbol nxt6000_attach() [ 843.396309][ T43] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 843.421988][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 843.425732][ T43] dvb-usb: schedule remote query interval to 1000 msecs. [ 843.425752][ T43] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 843.425771][ T43] dvb-usb: bulk message failed: -22 (7/0) [ 843.425788][ T43] dvb-usb: bulk message failed: -22 (7/0) [ 843.474931][ T43] usb 2-1: USB disconnect, device number 111 [ 843.743550][ T43] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 844.197220][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10698'. [ 844.919448][ T6601] program syz.3.10705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 845.407535][ T6620] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 846.007371][ T5924] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 846.164475][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 846.164506][ T5924] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 846.164532][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 846.164556][ T5924] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 846.164598][ T5924] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 846.164621][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.245510][ T5924] usb 2-1: config 0 descriptor?? [ 846.453349][ T5924] hdpvr 2-1:0.0: firmware version 0x3e dated íXÂrðˆŒF„sT¹:ÝŽ¨æ¢fSV‰}Iµç@îª2ÕH [ 846.453372][ T5924] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 846.722411][ T5875] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 846.899480][ T5875] usb 10-1: unable to get BOS descriptor or descriptor too short [ 846.913472][ T5875] usb 10-1: config 6 has an invalid interface number: 144 but max is 0 [ 846.913497][ T5875] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 846.913514][ T5875] usb 10-1: config 6 has no interface number 0 [ 846.913557][ T5875] usb 10-1: config 6 interface 144 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 846.913580][ T5875] usb 10-1: config 6 interface 144 has no altsetting 0 [ 846.916606][ T5875] usb 10-1: New USB device found, idVendor=7f6e, idProduct=02fc, bcdDevice=20.c2 [ 846.916633][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.916653][ T5875] usb 10-1: Product: syz [ 846.916669][ T5875] usb 10-1: Manufacturer: syz [ 846.916683][ T5875] usb 10-1: SerialNumber: syz [ 847.062404][ T6704] tmpfs: Bad value for 'mpol' [ 847.227541][ T5875] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 847.227595][ T5875] usb 10-1: MIDIStreaming interface descriptor not found [ 847.258939][ T6702] tipc: Enabling of bearer rejected, failed to enable media [ 847.305880][ T5924] hdpvr 2-1:0.0: Could not setup controls [ 847.306652][ T5924] hdpvr 2-1:0.0: registering videodev failed [ 847.433808][ T5924] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 847.499683][ T5875] usb 10-1: USB disconnect, device number 22 [ 847.540920][ T5924] usb 2-1: USB disconnect, device number 112 [ 847.876651][ T6755] udevd[6755]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:6.144/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.895446][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 848.054280][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 848.057025][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.057096][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 848.058562][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.058587][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 848.058609][ T9] usb 4-1: SerialNumber: syz [ 848.104899][ T9] cdc_acm 4-1:1.0: skipping garbage [ 848.123128][ T5924] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 848.265557][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 848.275024][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.275056][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.275079][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 848.275113][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 848.275136][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.306108][ T5924] usb 2-1: config 0 descriptor?? [ 848.389018][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10753'. [ 848.466539][ T9] usb 4-1: USB disconnect, device number 113 [ 848.604110][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 848.604196][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 848.806578][ T5924] hid_parser_main: 154 callbacks suppressed [ 848.806600][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806628][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806650][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806680][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806705][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806730][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806754][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806778][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806802][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.806826][ T5924] apple 0003:05AC:0247.0027: unknown main item tag 0x0 [ 848.854159][ T5924] apple 0003:05AC:0247.0027: unexpected long global item [ 848.854984][ T5924] apple 0003:05AC:0247.0027: parse failed [ 848.855085][ T5924] apple 0003:05AC:0247.0027: probe with driver apple failed with error -22 [ 848.961757][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10756'. [ 848.961837][ T6825] netlink: 'syz.4.10756': attribute type 2 has an invalid length. [ 848.961853][ T6825] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10756'. [ 849.020177][ T43] usb 2-1: USB disconnect, device number 113 [ 849.573684][ T37] audit: type=1326 audit(2000000317.598:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.9.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 849.588872][ T37] audit: type=1326 audit(2000000317.609:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.9.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 849.599068][ T37] audit: type=1326 audit(2000000317.630:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.9.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 849.600419][ T37] audit: type=1326 audit(2000000317.640:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.9.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 849.609413][ T37] audit: type=1326 audit(2000000317.640:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.9.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 849.609464][ T37] audit: type=1326 audit(2000000317.640:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.9.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 849.609506][ T37] audit: type=1326 audit(2000000317.640:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.9.10765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 849.704196][ T43] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 849.869921][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 849.869973][ T43] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 849.869997][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.929157][ T43] usb 5-1: config 0 descriptor?? [ 849.939005][ T6862] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 850.385348][ T43] lenovo 0003:17EF:60B5.0028: hidraw0: USB HID v1.01 Device [HID 17ef:60b5] on usb-dummy_hcd.4-1/input0 [ 850.566074][ T5924] usb 5-1: USB disconnect, device number 110 [ 850.610839][ T6916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10776'. [ 850.612569][ T6912] fido_id[6912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 850.613532][ T6916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10776'. [ 851.591016][ T6978] xt_l2tp: v2 sid > 0xffff: 2162688 [ 851.952226][ T6995] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10802'. [ 851.952270][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10802'. [ 852.588870][ T7025] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 852.588912][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.952059][ T5924] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 853.123709][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 853.128052][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.128085][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.128126][ T5924] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 853.128150][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.139167][ T5924] usb 5-1: config 0 descriptor?? [ 853.601357][ T5924] ntrig 0003:1B96:0008.0029: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 853.795757][ T5924] usb 5-1: USB disconnect, device number 111 [ 854.012943][ T7080] fido_id[7080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 854.412244][ T7114] binder: 7113:7114 ioctl c018620c 0 returned -14 [ 854.669160][ T5875] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 854.812194][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 198, changing to 11 [ 854.812246][ T5875] usb 5-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 854.812271][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.819352][ T9] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 854.828877][ T5875] usb 5-1: config 0 descriptor?? [ 854.975937][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 854.975968][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.027379][ T9] usb 4-1: config 0 descriptor?? [ 855.229271][ T7157] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10849'. [ 855.337974][ T5875] hid_parser_main: 839 callbacks suppressed [ 855.337999][ T5875] hid-generic 0003:093A:8002.002A: unknown main item tag 0x0 [ 855.507826][ T5875] hid-generic 0003:093A:8002.002A: hidraw0: USB HID v0.00 Device [HID 093a:8002] on usb-dummy_hcd.4-1/input0 [ 855.526980][ T9] logitech-djreceiver 0003:046D:C70E.002B: unknown main item tag 0x0 [ 855.527020][ T9] logitech-djreceiver 0003:046D:C70E.002B: unknown main item tag 0x0 [ 855.527047][ T9] logitech-djreceiver 0003:046D:C70E.002B: unknown main item tag 0x0 [ 855.527071][ T9] logitech-djreceiver 0003:046D:C70E.002B: unknown main item tag 0x0 [ 855.527095][ T9] logitech-djreceiver 0003:046D:C70E.002B: unknown main item tag 0x0 [ 855.527121][ T9] logitech-djreceiver 0003:046D:C70E.002B: unknown main item tag 0x0 [ 855.527146][ T9] logitech-djreceiver 0003:046D:C70E.002B: unknown main item tag 0x0 [ 855.555271][ T5875] usb 5-1: USB disconnect, device number 112 [ 855.686847][ T43] usb 4-1: USB disconnect, device number 114 [ 855.765686][ T7178] fido_id[7178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 856.603333][ T37] audit: type=1326 audit(2000000324.989:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7234 comm="syz.3.10866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 856.603619][ T37] audit: type=1326 audit(2000000324.989:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7234 comm="syz.3.10866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 856.605837][ T37] audit: type=1326 audit(2000000324.989:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7234 comm="syz.3.10866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 856.607965][ T37] audit: type=1326 audit(2000000324.989:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7234 comm="syz.3.10866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 856.608299][ T37] audit: type=1326 audit(2000000324.989:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7234 comm="syz.3.10866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 856.818183][ T1507] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.821328][ T1507] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.821391][ T1507] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.821426][ T1507] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.918564][ T7252] hub 9-0:1.0: USB hub found [ 856.937227][ T7252] hub 9-0:1.0: 1 port detected [ 857.270259][ T7269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10875'. [ 857.619761][ T5875] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 857.776084][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 857.783605][ T5875] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 857.783656][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 857.783685][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 857.783728][ T5875] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 857.783751][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.816789][ T5875] usb 4-1: config 0 descriptor?? [ 858.275293][ T5875] lg-g15 0003:046D:C22E.002C: item fetching failed at offset 2/5 [ 858.276216][ T5875] lg-g15 0003:046D:C22E.002C: probe with driver lg-g15 failed with error -22 [ 858.294986][ T7322] netlink: 39 bytes leftover after parsing attributes in process `syz.4.10892'. [ 858.295015][ T7322] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10892'. [ 858.442489][ T43] usb 4-1: USB disconnect, device number 115 [ 858.590813][ T7344] tipc: Enabled bearer , priority 10 [ 859.915343][ T5888] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 860.058228][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 860.062381][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.062409][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 860.099202][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 860.099233][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.099255][ T5888] usb 5-1: Product: syz [ 860.099270][ T5888] usb 5-1: Manufacturer: syz [ 860.099286][ T5888] usb 5-1: SerialNumber: syz [ 860.345510][ T5888] usb 5-1: 0:2 : does not exist [ 860.360393][ T5888] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 860.373792][ T5888] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 860.418102][ T5888] usb 5-1: USB disconnect, device number 113 [ 860.519813][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.287806][ T5875] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 861.461662][ T5875] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 861.461695][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.461717][ T5875] usb 4-1: Product: syz [ 861.461732][ T5875] usb 4-1: Manufacturer: syz [ 861.461748][ T5875] usb 4-1: SerialNumber: syz [ 861.525705][ T5875] usb 4-1: config 0 descriptor?? [ 861.596410][ T5875] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 861.670519][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 861.675027][ T5875] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 861.675092][ T5875] usb 4-1: media controller created [ 861.845366][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 862.188893][ T5875] DVB: Unable to find symbol mt352_attach() [ 862.391599][ T5875] DVB: Unable to find symbol nxt6000_attach() [ 862.391615][ T5875] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 862.417187][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61 [ 862.421238][ T5875] dvb-usb: schedule remote query interval to 1000 msecs. [ 862.421259][ T5875] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 862.421276][ T5875] dvb-usb: bulk message failed: -22 (7/0) [ 862.421293][ T5875] dvb-usb: bulk message failed: -22 (7/0) [ 862.440163][ T5875] usb 4-1: USB disconnect, device number 116 [ 862.666210][ T7572] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10969'. [ 862.666238][ T7572] netlink: 19 bytes leftover after parsing attributes in process `syz.3.10969'. [ 862.666255][ T7572] netlink: 'syz.3.10969': attribute type 6 has an invalid length. [ 862.666269][ T7572] netlink: 'syz.3.10969': attribute type 4 has an invalid length. [ 862.989208][ T5875] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 863.134303][ T7600] team0: Device is already in use. [ 864.352599][ T7663] ucma_write: process 989 (syz.3.10997) changed security contexts after opening file descriptor, this is not allowed. [ 864.711843][ T7688] EXT4-fs: Conflicting test_dummy_encryption options [ 864.811995][ T5923] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 864.852818][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11011'. [ 864.964843][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.964878][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.964918][ T5923] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 864.964942][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.022188][ T5923] usb 2-1: config 0 descriptor?? [ 865.426930][ T5923] pyra 0003:1E7D:2CF6.002D: item fetching failed at offset 5/7 [ 865.427705][ T5923] pyra 0003:1E7D:2CF6.002D: parse failed [ 865.427776][ T5923] pyra 0003:1E7D:2CF6.002D: probe with driver pyra failed with error -22 [ 865.617410][ T5875] usb 2-1: USB disconnect, device number 114 [ 865.650699][ T7742] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11025'. [ 865.650829][ T7742] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11025'. [ 865.692965][ T5815] Bluetooth: hci7: unexpected event for opcode 0x0c38 [ 865.885484][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11029'. [ 866.099721][ T7766] gretap0: entered promiscuous mode [ 866.100211][ T7766] vlan2: entered promiscuous mode [ 866.517263][ T5888] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 866.680909][ T5888] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 866.680943][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 866.680976][ T5888] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 866.680999][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.742140][ T5888] usb 4-1: config 0 descriptor?? [ 866.744166][ T7781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 866.891949][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11053'. [ 867.148073][ T5888] cypress 0003:04B4:DE61.002E: unknown main item tag 0x0 [ 867.148111][ T5888] cypress 0003:04B4:DE61.002E: unknown main item tag 0x0 [ 867.148139][ T5888] cypress 0003:04B4:DE61.002E: unknown main item tag 0x0 [ 867.148165][ T5888] cypress 0003:04B4:DE61.002E: unknown main item tag 0x0 [ 867.148190][ T5888] cypress 0003:04B4:DE61.002E: unknown main item tag 0x0 [ 867.154606][ T5888] cypress 0003:04B4:DE61.002E: hidraw0: USB HID v0.05 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 867.212539][T27521] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 867.334573][ T992] usb 4-1: USB disconnect, device number 117 [ 867.374396][T27521] usb 10-1: Using ep0 maxpacket: 32 [ 867.381475][T27521] usb 10-1: config 0 has an invalid interface number: 83 but max is 0 [ 867.381502][T27521] usb 10-1: config 0 has no interface number 0 [ 867.400421][T27521] usb 10-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 867.400452][T27521] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.400473][T27521] usb 10-1: Product: syz [ 867.400488][T27521] usb 10-1: Manufacturer: syz [ 867.400503][T27521] usb 10-1: SerialNumber: syz [ 867.480008][T27521] usb 10-1: config 0 descriptor?? [ 867.520379][T27521] redrat3 10-1:0.83: Couldn't find all endpoints [ 867.733725][ T992] usb 10-1: USB disconnect, device number 23 [ 868.679497][ T992] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 868.851025][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 868.853800][ T992] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 868.853826][ T992] usb 2-1: config 0 has no interface number 0 [ 868.853875][ T992] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 868.872527][ T992] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 868.872558][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.872579][ T992] usb 2-1: Product: syz [ 868.872593][ T992] usb 2-1: Manufacturer: syz [ 868.872608][ T992] usb 2-1: SerialNumber: syz [ 868.886117][ T992] usb 2-1: config 0 descriptor?? [ 869.489731][ T992] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 869.516656][ T992] usb 2-1: USB disconnect, device number 115 [ 869.656479][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11088'. [ 870.424680][ T5923] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 870.571316][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.571347][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.571388][ T5923] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 870.571413][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.587491][ T5923] usb 5-1: config 0 descriptor?? [ 870.996946][ T5923] cp2112 0003:10C4:EA90.002F: item fetching failed at offset 5/7 [ 870.997734][ T5923] cp2112 0003:10C4:EA90.002F: parse failed [ 870.997868][ T5923] cp2112 0003:10C4:EA90.002F: probe with driver cp2112 failed with error -22 [ 871.185529][T27521] usb 5-1: USB disconnect, device number 114 [ 873.777961][T24586] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 873.928299][T24586] usb 5-1: Using ep0 maxpacket: 32 [ 873.930789][T24586] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.930820][T24586] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 873.930848][T24586] usb 5-1: config 0 interface 0 has no altsetting 0 [ 873.930884][T24586] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 873.930910][T24586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.998911][T24586] usb 5-1: config 0 descriptor?? [ 874.264698][ T8203] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 874.265455][ T8203] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 874.265764][ T8203] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 874.420579][T24586] kye 0003:0458:5014.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 874.444982][T24586] kye 0003:0458:5014.0030: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.4-1/input0 [ 874.445020][T24586] kye 0003:0458:5014.0030: tablet-enabling feature report not found [ 874.445036][T24586] kye 0003:0458:5014.0030: tablet enabling failed [ 874.609124][T24586] usb 5-1: USB disconnect, device number 115 [ 874.637840][ T8222] fido_id[8222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 874.848067][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11173'. [ 875.366206][ T992] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 875.530321][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.530370][ T992] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 875.530394][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.628146][ T992] usb 4-1: config 0 descriptor?? [ 876.062709][ T992] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 876.062748][ T992] isku 0003:1E7D:319C.0031: unknown main item tag 0x0 [ 876.066798][ T992] isku 0003:1E7D:319C.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 876.246311][T24586] usb 4-1: USB disconnect, device number 118 [ 876.346062][ T8306] fido_id[8306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 876.717881][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11197'. [ 877.035379][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11202'. [ 877.042963][T24586] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 877.191811][T24586] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 877.191846][T24586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.191867][T24586] usb 4-1: Product: syz [ 877.191883][T24586] usb 4-1: Manufacturer: syz [ 877.191899][T24586] usb 4-1: SerialNumber: syz [ 877.235325][T24586] usb 4-1: config 0 descriptor?? [ 877.257965][T24586] hub 4-1:0.0: bad descriptor, ignoring hub [ 877.258007][T24586] hub 4-1:0.0: probe with driver hub failed with error -5 [ 877.455769][T24586] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 877.472170][T24586] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 877.473015][T24586] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 877.473075][T24586] usb 4-1: media controller created [ 877.552412][T24586] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 877.789489][T24586] DVB: Unable to find symbol dib7000p_attach() [ 877.789505][T24586] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 877.890328][T24586] rc_core: IR keymap rc-dib0700-rc5 not found [ 877.890351][T24586] Registered IR keymap rc-empty [ 877.890687][T24586] dvb-usb: could not initialize remote control. [ 877.890697][T24586] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 878.094899][T24586] usb 4-1: USB disconnect, device number 119 [ 878.190488][T24586] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 878.584329][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11225'. [ 878.780644][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11232'. [ 878.983232][ T8452] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 879.340102][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11246'. [ 879.709582][ T43] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 879.852484][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 879.856157][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.856191][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.856233][ T43] usb 10-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 879.856265][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.928724][ T43] usb 10-1: config 0 descriptor?? [ 880.359965][ T43] chicony 0003:04F2:1236.0032: item fetching failed at offset 0/2 [ 880.360800][ T43] chicony 0003:04F2:1236.0032: Chicony hid parse failed: -22 [ 880.360880][ T43] chicony 0003:04F2:1236.0032: probe with driver chicony failed with error -22 [ 880.543539][ T5924] usb 10-1: USB disconnect, device number 24 [ 880.669809][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11276'. [ 881.231399][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11287'. [ 881.521376][ T8591] usb usb1: usbfs: process 8591 (syz.1.11292) did not claim interface 0 before use [ 881.582511][ T8588] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 881.931867][ T8611] tmpfs: Bad value for 'mpol' [ 882.213339][ T8630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.228999][ T8629] fuse: Bad value for 'user_id' [ 882.229019][ T8629] fuse: Bad value for 'user_id' [ 882.697558][ T8663] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11321'. [ 882.697725][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11321'. [ 882.711794][ T8661] Dead loop on virtual device ip6_vti0, fix it urgently! [ 882.833150][ T37] audit: type=1326 audit(2000000352.515:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 882.833214][ T37] audit: type=1326 audit(2000000352.515:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 882.833415][ T37] audit: type=1326 audit(2000000352.515:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 882.833688][ T37] audit: type=1326 audit(2000000352.515:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 882.833953][ T37] audit: type=1326 audit(2000000352.515:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 882.894741][ T37] audit: type=1326 audit(2000000352.588:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 882.894792][ T37] audit: type=1326 audit(2000000352.588:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 882.895601][ T37] audit: type=1326 audit(2000000352.588:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 882.895648][ T37] audit: type=1326 audit(2000000352.588:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8671 comm="syz.3.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe72b05f6c9 code=0x7ffc0000 [ 883.252260][ T8688] netlink: 'syz.4.11332': attribute type 62 has an invalid length. [ 883.594372][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11337'. [ 884.953582][ T8760] dvmrp0: entered allmulticast mode [ 884.957005][ T8759] dvmrp0: left allmulticast mode [ 886.828450][ T8882] program syz.1.11413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 886.925599][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 887.115986][ T9] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.116020][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 887.116054][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 887.116079][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.147844][ T9] usb 4-1: config 0 descriptor?? [ 887.528375][ T8917] netlink: 341 bytes leftover after parsing attributes in process `syz.1.11428'. [ 887.554485][ T9] apple 0003:05AC:027A.0033: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.3-1/input0 [ 887.740020][ T9] usb 4-1: USB disconnect, device number 120 [ 887.833972][ T8923] fido_id[8923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 888.096807][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11433'. [ 888.276551][ T8950] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 888.286400][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11438'. [ 888.353102][ T8950] bond1 (unregistering): Released all slaves [ 888.613946][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.756153][ T9103] netlink: 'syz.3.11475': attribute type 2 has an invalid length. [ 889.756177][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11475'. [ 890.624454][ T9138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11491'. [ 891.041371][ T9167] binder: 9166:9167 ioctl 400c620e 200000000000 returned -22 [ 891.112001][ T5896] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 891.254990][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 891.260092][ T5896] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 891.260120][ T5896] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 891.260141][ T5896] usb 4-1: config 8 has no interface number 0 [ 891.260190][ T5896] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 891.260216][ T5896] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 891.260244][ T5896] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 891.260273][ T5896] usb 4-1: config 8 interface 223 has no altsetting 0 [ 891.263357][ T5896] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 891.263392][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.263413][ T5896] usb 4-1: Product: syz [ 891.263430][ T5896] usb 4-1: Manufacturer: syz [ 891.263446][ T5896] usb 4-1: SerialNumber: syz [ 891.381084][ T9156] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 891.492965][ T43] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 891.615659][ T5896] usb 4-1: USB disconnect, device number 121 [ 891.631002][ T5690] udevd[5690]: setting mode of /dev/bus/usb/004/121 to 020664 failed: No such file or directory [ 891.631236][ T5690] udevd[5690]: setting owner of /dev/bus/usb/004/121 to uid=0, gid=0 failed: No such file or directory [ 891.640543][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 891.655314][ T43] usb 10-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.655347][ T43] usb 10-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 891.655375][ T43] usb 10-1: config 0 interface 0 has no altsetting 0 [ 891.655410][ T43] usb 10-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 891.655434][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.719355][ T43] usb 10-1: config 0 descriptor?? [ 892.083538][ T5896] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 892.155472][ T43] saitek 0003:0738:1705.0034: hidraw0: USB HID v0.00 Device [HID 0738:1705] on usb-dummy_hcd.9-1/input0 [ 892.232274][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 892.235864][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.235914][ T5896] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 892.235938][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.281218][ T5896] usb 5-1: config 0 descriptor?? [ 892.340803][ T9] usb 10-1: USB disconnect, device number 25 [ 892.528920][ T9235] fido_id[9235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 892.704881][ T5896] kye 0003:0458:5011.0035: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 892.706019][ T5896] kye 0003:0458:5011.0035: item fetching failed at offset 2/5 [ 892.706837][ T5896] kye 0003:0458:5011.0035: parse failed [ 892.706911][ T5896] kye 0003:0458:5011.0035: probe with driver kye failed with error -22 [ 892.944902][ T992] usb 5-1: USB disconnect, device number 116 [ 892.966038][ C1] sd 0:0:1:0: [sda] tag#1717 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 892.966105][ C1] sd 0:0:1:0: [sda] tag#1717 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 893.076223][ T9288] netlink: 'syz.9.11537': attribute type 6 has an invalid length. [ 893.076248][ T9288] netlink: 112 bytes leftover after parsing attributes in process `syz.9.11537'. [ 893.146884][ T9294] netlink: 'syz.1.11539': attribute type 28 has an invalid length. [ 893.782421][ T9337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.923655][ T5896] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 894.067335][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.067386][ T5896] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 894.067410][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.105894][ T5896] usb 2-1: config 0 descriptor?? [ 894.253306][ T9362] team_slave_0: entered promiscuous mode [ 894.264937][ T9362] team_slave_1: entered promiscuous mode [ 894.270540][ T9362] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 894.520352][ T5896] kovaplus 0003:1E7D:2D50.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 894.696152][ T5924] usb 2-1: USB disconnect, device number 116 [ 894.859871][ T9386] fido_id[9386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 895.329302][ T9432] netlink: 'syz.9.11590': attribute type 29 has an invalid length. [ 895.341513][ T9432] netlink: 'syz.9.11590': attribute type 29 has an invalid length. [ 895.519352][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11593'. [ 895.521906][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11593'. [ 895.846314][ T9456] IPv6: sit1: Disabled Multicast RS [ 895.985561][ T9468] netlink: 'syz.3.11603': attribute type 11 has an invalid length. [ 896.591074][ T37] audit: type=1326 audit(2000000366.971:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 896.592305][ T37] audit: type=1326 audit(2000000366.971:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 896.595227][ T37] audit: type=1326 audit(2000000366.971:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 896.595740][ T37] audit: type=1326 audit(2000000366.971:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 896.596190][ T37] audit: type=1326 audit(2000000366.971:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 896.596480][ T37] audit: type=1326 audit(2000000366.971:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 896.596908][ T37] audit: type=1326 audit(2000000366.971:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 896.597819][ T37] audit: type=1326 audit(2000000366.971:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615088f6c9 code=0x7ffc0000 [ 896.617916][ T5896] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 896.773210][ T5896] usb 4-1: config index 0 descriptor too short (expected 38445, got 45) [ 896.773240][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.773291][ T5896] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.773318][ T5896] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.773342][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 896.773375][ T5896] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 896.773399][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.785693][ T5896] usb 4-1: config 0 descriptor?? [ 897.201188][ T5896] hid (null): unknown global tag 0xc [ 897.208064][ T5896] waterforce 0003:1044:7A4D.0037: unknown global tag 0xc [ 897.208088][ T5896] waterforce 0003:1044:7A4D.0037: item 0 2 1 12 parsing failed [ 897.226054][ T5896] waterforce 0003:1044:7A4D.0037: hid parse failed with -22 [ 897.226166][ T5896] waterforce 0003:1044:7A4D.0037: probe with driver waterforce failed with error -22 [ 897.397639][ T5896] usb 4-1: USB disconnect, device number 122 [ 897.707088][ T9551] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 898.494234][ T43] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 898.642002][ T43] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 898.642040][ T43] usb 2-1: config 0 has no interface number 0 [ 898.664496][ T43] usb 2-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=32.06 [ 898.664527][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.664547][ T43] usb 2-1: Product: syz [ 898.664562][ T43] usb 2-1: Manufacturer: syz [ 898.664577][ T43] usb 2-1: SerialNumber: syz [ 898.688257][ T43] usb 2-1: config 0 descriptor?? [ 898.908403][ T43] dvb-usb: found a 'ASUS My Cinema U3000 Mini DVBT Tuner' in warm state. [ 898.927038][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.930545][ T43] dvbdev: DVB: registering new adapter (ASUS My Cinema U3000 Mini DVBT Tuner) [ 898.930607][ T43] usb 2-1: media controller created [ 899.052972][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.330469][ T43] DVB: Unable to find symbol dib7000p_attach() [ 899.330485][ T43] dvb-usb: no frontend was attached by 'ASUS My Cinema U3000 Mini DVBT Tuner' [ 899.453014][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 899.453042][ T43] Registered IR keymap rc-empty [ 899.453363][ T43] dvb-usb: could not initialize remote control. [ 899.453374][ T43] dvb-usb: ASUS My Cinema U3000 Mini DVBT Tuner successfully initialized and connected. [ 899.473306][ T43] usb 2-1: USB disconnect, device number 117 [ 899.716713][ T43] dvb-usb: ASUS My Cinema U3000 Mini DVBT Tuner successfully deinitialized and disconnected. [ 899.771134][ T9660] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 899.771195][ T9660] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 899.958493][ T9629] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 899.958521][ T9629] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 899.960079][ T9635] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 899.960293][ T9635] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 899.960473][ T9635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 899.960550][ T9635] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 899.960732][ T9629] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 899.960748][ T9629] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 900.024953][ T9629] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 900.024978][ T9629] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 900.106555][ T9635] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 900.293784][ T9629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 900.293809][ T9629] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 900.836806][ T57] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.836858][ T57] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.836903][ T57] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.836939][ T57] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.230040][ T37] audit: type=1326 audit(2000000372.891:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9788 comm="syz.4.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc385f6c9 code=0x7ffc0000 [ 902.232601][ T37] audit: type=1326 audit(2000000372.891:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9788 comm="syz.4.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f8bc385f6c9 code=0x7ffc0000 [ 902.232968][ T37] audit: type=1326 audit(2000000372.891:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9788 comm="syz.4.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc385f6c9 code=0x7ffc0000 [ 902.233235][ T37] audit: type=1326 audit(2000000372.891:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9788 comm="syz.4.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc385f6c9 code=0x7ffc0000 [ 902.233664][ T37] audit: type=1326 audit(2000000372.891:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9788 comm="syz.4.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8bc385f6c9 code=0x7ffc0000 [ 902.234043][ T37] audit: type=1326 audit(2000000372.891:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9788 comm="syz.4.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc385f6c9 code=0x7ffc0000 [ 902.234308][ T37] audit: type=1326 audit(2000000372.891:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9788 comm="syz.4.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc385f6c9 code=0x7ffc0000 [ 902.254828][ T9793] netlink: 6 bytes leftover after parsing attributes in process `syz.9.11722'. [ 902.847360][ T992] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 902.888597][ T9824] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11733'. [ 902.980702][ T992] usb 4-1: Using ep0 maxpacket: 16 [ 902.983167][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.983200][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.983240][ T992] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 902.983265][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.039369][ T992] usb 4-1: config 0 descriptor?? [ 903.445078][ T992] apple 0003:05AC:024B.0038: unknown main item tag 0x7 [ 903.445163][ T992] apple 0003:05AC:024B.0038: unbalanced collection at end of report description [ 903.446152][ T992] apple 0003:05AC:024B.0038: parse failed [ 903.446258][ T992] apple 0003:05AC:024B.0038: probe with driver apple failed with error -22 [ 903.624261][ T9] usb 4-1: USB disconnect, device number 123 [ 904.807838][ T9938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11776'. [ 906.096520][T10014] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 906.096579][T10014] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 906.096627][T10014] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 906.340065][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11815'. [ 906.619763][ T43] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 906.729622][T10054] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 906.729660][T10054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.762607][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 906.765179][ T43] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.765210][ T43] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 906.765239][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 906.765274][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 906.765299][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.796346][ T43] usb 4-1: config 0 descriptor?? [ 906.970183][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11830'. [ 907.131215][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 907.131338][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.224715][ T43] kye 0003:0458:5014.0039: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 907.239864][ T43] kye 0003:0458:5014.0039: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 907.239899][ T43] kye 0003:0458:5014.0039: tablet-enabling feature report not found [ 907.239915][ T43] kye 0003:0458:5014.0039: tablet enabling failed [ 907.467834][ T43] usb 4-1: USB disconnect, device number 124 [ 907.537416][T10079] fido_id[10079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 908.296249][ T5896] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 908.375259][ T43] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 908.444054][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.444089][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.444129][ T5896] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 908.444204][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.461541][ T5896] usb 4-1: config 0 descriptor?? [ 908.526050][ T43] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 908.526151][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 908.526188][ T43] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 908.526213][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.606367][ T43] usb 5-1: config 0 descriptor?? [ 908.611648][T10119] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 908.952195][ T5896] pyra 0003:1E7D:2CF6.003A: item fetching failed at offset 5/7 [ 908.962215][ T5896] pyra 0003:1E7D:2CF6.003A: parse failed [ 908.962293][ T5896] pyra 0003:1E7D:2CF6.003A: probe with driver pyra failed with error -22 [ 909.019526][ T43] cypress 0003:04B4:DE61.003B: unknown main item tag 0x0 [ 909.019562][ T43] cypress 0003:04B4:DE61.003B: unknown main item tag 0x0 [ 909.019590][ T43] cypress 0003:04B4:DE61.003B: unknown main item tag 0x0 [ 909.019620][ T43] cypress 0003:04B4:DE61.003B: unknown main item tag 0x0 [ 909.019647][ T43] cypress 0003:04B4:DE61.003B: unknown main item tag 0x0 [ 909.051932][ T43] cypress 0003:04B4:DE61.003B: hidraw0: USB HID v0.05 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 909.143862][ T992] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 909.152854][ T43] usb 4-1: USB disconnect, device number 125 [ 909.224854][ T5896] usb 5-1: USB disconnect, device number 117 [ 909.252386][T10164] fido_id[10164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 909.310559][ T992] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 909.310591][ T992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.310613][ T992] usb 10-1: Product: syz [ 909.310629][ T992] usb 10-1: Manufacturer: syz [ 909.310645][ T992] usb 10-1: SerialNumber: syz [ 909.350647][ T992] usb 10-1: config 0 descriptor?? [ 909.373262][ T992] hub 10-1:0.0: bad descriptor, ignoring hub [ 909.373313][ T992] hub 10-1:0.0: probe with driver hub failed with error -5 [ 909.552099][ T992] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 909.574183][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 909.579262][ T992] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 909.579322][ T992] usb 10-1: media controller created [ 909.642719][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.761933][ T992] DVB: Unable to find symbol dib7000p_attach() [ 909.761950][ T992] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 909.946022][ T992] rc_core: IR keymap rc-dib0700-rc5 not found [ 909.946044][ T992] Registered IR keymap rc-empty [ 909.946368][ T992] dvb-usb: could not initialize remote control. [ 909.946378][ T992] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 910.220734][ T43] usb 10-1: USB disconnect, device number 26 [ 910.363744][ T43] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 911.536884][T10294] Dead loop on virtual device ip6_vti0, fix it urgently! [ 911.744888][T10303] usb usb1: usbfs: process 10303 (syz.3.11903) did not claim interface 0 before use [ 911.893614][T10308] netlink: 'syz.9.11906': attribute type 62 has an invalid length. [ 912.015020][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11909'. [ 912.117795][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11916'. [ 912.646630][T10345] fuse: Bad value for 'user_id' [ 912.646651][T10345] fuse: Bad value for 'user_id' [ 912.893293][T10356] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11926'. [ 912.893315][T10356] tc_dump_action: action bad kind [ 912.930622][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11928'. [ 912.930650][T10357] netlink: 'syz.1.11928': attribute type 1 has an invalid length. [ 912.930665][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11928'. [ 913.180607][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.523600][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.588422][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.158394][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.440233][ T992] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 914.464641][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.490877][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.611920][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 914.620524][ T992] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 914.645743][ T992] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 914.645775][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.645797][ T992] usb 5-1: Product: syz [ 914.645813][ T992] usb 5-1: Manufacturer: syz [ 914.645829][ T992] usb 5-1: SerialNumber: syz [ 914.694121][ T992] usb 5-1: config 0 descriptor?? [ 914.711378][ T992] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 914.711451][ T992] usb 5-1: setting power ON [ 914.711473][ T992] dvb-usb: bulk message failed: -22 (2/0) [ 914.737174][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 914.738105][ T992] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 914.738165][ T992] usb 5-1: media controller created [ 914.799522][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 914.841483][ T992] usb 5-1: selecting invalid altsetting 6 [ 914.841507][ T992] usb 5-1: digital interface selection failed (-22) [ 914.841524][ T992] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 914.852460][ T992] usb 5-1: setting power OFF [ 914.852710][ T992] dvb-usb: bulk message failed: -22 (2/0) [ 914.852731][ T992] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 914.852745][ T992] (NULL device *): no alternate interface [ 915.011918][ T992] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 915.019129][ T992] usb 5-1: USB disconnect, device number 118 [ 915.040368][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 915.159980][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.192527][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 915.194959][ T9] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 915.194985][ T9] usb 4-1: config 0 has no interface number 0 [ 915.198153][ T9] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 915.198181][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.198202][ T9] usb 4-1: Product: syz [ 915.198217][ T9] usb 4-1: Manufacturer: syz [ 915.198233][ T9] usb 4-1: SerialNumber: syz [ 915.270894][ T9] usb 4-1: config 0 descriptor?? [ 915.289770][ T9] redrat3 4-1:0.83: Couldn't find all endpoints [ 915.514326][ T9] usb 4-1: USB disconnect, device number 126 [ 916.431902][T10477] dvmrp0: entered allmulticast mode [ 916.456531][T10472] dvmrp0: left allmulticast mode [ 916.965778][T10496] netlink: 341 bytes leftover after parsing attributes in process `syz.4.11984'. [ 917.355182][T10508] EXT4-fs: Conflicting test_dummy_encryption options [ 917.721811][T10519] program syz.4.11980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 918.041742][T30030] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 918.204791][T30030] usb 2-1: Using ep0 maxpacket: 32 [ 918.207133][T30030] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 918.207161][T30030] usb 2-1: config 0 has no interface number 0 [ 918.217416][T30030] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 918.217444][T30030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.217464][T30030] usb 2-1: Product: syz [ 918.217478][T30030] usb 2-1: Manufacturer: syz [ 918.217492][T30030] usb 2-1: SerialNumber: syz [ 918.257176][T30030] usb 2-1: config 0 descriptor?? [ 918.335324][T30030] redrat3 2-1:0.83: Couldn't find all endpoints [ 918.477741][T10541] EXT4-fs: Conflicting test_dummy_encryption options [ 918.567154][ T9] usb 2-1: USB disconnect, device number 118 [ 919.593950][T30030] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 919.773692][T30030] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 919.773724][T30030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.773745][T30030] usb 5-1: Product: syz [ 919.773761][T30030] usb 5-1: Manufacturer: syz [ 919.773776][T30030] usb 5-1: SerialNumber: syz [ 919.810472][T30030] usb 5-1: config 0 descriptor?? [ 919.890394][T30030] gspca_main: sq930x-2.14.0 probing 2770:930c [ 920.493922][T30030] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 920.698732][T30030] gspca_sq930x: Sensor ov9630 not yet treated [ 920.698838][T30030] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 920.820921][T30030] usb 5-1: USB disconnect, device number 119 [ 921.751571][T10651] tipc: Started in network mode [ 921.751604][T10651] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 921.752717][T10651] tipc: Enabled bearer , priority 0 [ 922.042105][ T5924] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 922.044984][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12033'. [ 922.194528][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 922.197699][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 922.199296][ T5924] usb 2-1: config 120 has an invalid interface number: 218 but max is 0 [ 922.199321][ T5924] usb 2-1: config 120 has no interface number 0 [ 922.209448][ T5924] usb 2-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=f2.bb [ 922.209478][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.209498][ T5924] usb 2-1: Product: syz [ 922.209513][ T5924] usb 2-1: Manufacturer: syz [ 922.209527][ T5924] usb 2-1: SerialNumber: syz [ 922.486743][ T5924] usb 2-1: Could not find all expected endpoints [ 922.535784][ T5924] usb 2-1: USB disconnect, device number 119 [ 922.699549][T30030] tipc: Node number set to 10463914 [ 923.886206][T10722] netlink: 'syz.3.12061': attribute type 6 has an invalid length. [ 923.886238][T10722] netlink: 112 bytes leftover after parsing attributes in process `syz.3.12061'. [ 927.101539][T10798] hugetlbfs: Bad value for 'size' [ 927.545794][T10808] netlink: 'syz.1.12091': attribute type 29 has an invalid length. [ 927.546969][T10808] netlink: 'syz.1.12091': attribute type 29 has an invalid length. [ 930.077598][ T43] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 930.805381][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 930.810903][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.810955][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 930.810980][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.913603][ T43] usb 4-1: config 0 descriptor?? [ 932.071540][ T43] kye 0003:0458:5011.003C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 932.204017][ T43] kye 0003:0458:5011.003C: item fetching failed at offset 2/5 [ 932.204871][ T43] kye 0003:0458:5011.003C: parse failed [ 932.204947][ T43] kye 0003:0458:5011.003C: probe with driver kye failed with error -22 [ 932.291619][ T43] usb 4-1: USB disconnect, device number 127 [ 935.444097][T24586] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 935.819081][T24586] usb 4-1: Using ep0 maxpacket: 16 [ 936.585198][T24586] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.585225][T24586] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.636668][T24586] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 936.636699][T24586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.636720][T24586] usb 4-1: Product: syz [ 936.636735][T24586] usb 4-1: Manufacturer: syz [ 936.636751][T24586] usb 4-1: SerialNumber: syz [ 937.645762][T24586] usb 4-1: cannot find UAC_HEADER [ 937.866512][T24586] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 937.987245][T24586] usb 4-1: USB disconnect, device number 2 [ 938.565871][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.331598][ T5923] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 945.117450][ T37] audit: type=1326 audit(2000000417.907:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.1.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 945.117506][ T37] audit: type=1326 audit(2000000417.907:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.1.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 945.168990][ T37] audit: type=1326 audit(2000000417.959:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.1.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 945.170351][ T5923] usb 10-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 945.170403][ T5923] usb 10-1: config 8 interface 0 has no altsetting 0 [ 945.175562][ T5923] usb 10-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93 [ 945.175590][ T5923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.175611][ T5923] usb 10-1: Product: syz [ 945.175649][ T5923] usb 10-1: Manufacturer: syz [ 945.175664][ T5923] usb 10-1: SerialNumber: syz [ 945.178742][ T37] audit: type=1326 audit(2000000417.970:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.1.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 945.184424][ T37] audit: type=1326 audit(2000000417.980:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.1.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 945.184953][ T37] audit: type=1326 audit(2000000417.980:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.1.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 945.184996][ T37] audit: type=1326 audit(2000000417.980:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.1.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 945.185035][ T37] audit: type=1326 audit(2000000417.980:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.1.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 945.557186][T10953] netlink: 'syz.4.12134': attribute type 3 has an invalid length. [ 947.681211][ T5923] usb 10-1: USB disconnect, device number 27 [ 956.267187][T11000] pim6reg: entered allmulticast mode [ 956.524086][T11000] pim6reg: left allmulticast mode [ 960.124951][ T5923] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 960.287352][T11039] netlink: 'syz.1.12162': attribute type 3 has an invalid length. [ 960.293128][ T5923] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 960.293163][ T5923] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.293187][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 960.293222][ T5923] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 960.293247][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.401619][ T5923] usb 4-1: config 0 descriptor?? [ 961.308248][ T5923] megaworld 0003:07B5:0312.003D: unbalanced collection at end of report description [ 961.309088][ T5923] megaworld 0003:07B5:0312.003D: parse failed [ 961.309160][ T5923] megaworld 0003:07B5:0312.003D: probe with driver megaworld failed with error -22 [ 961.601428][ T5923] usb 4-1: USB disconnect, device number 3 [ 965.762286][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 965.762358][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.394187][T30030] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 967.720632][T30030] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 967.720669][T30030] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.720693][T30030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 967.720758][T30030] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 967.720783][T30030] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.731324][T30030] usb 10-1: config 0 descriptor?? [ 969.354042][T30030] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 969.354080][T30030] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 969.354108][T30030] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 969.354135][T30030] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 969.354162][T30030] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 969.446947][T30030] hid-steam 0003:28DE:1102.003E: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0 [ 970.195362][T30030] usb 10-1: USB disconnect, device number 28 [ 971.903078][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12192'. [ 971.903109][T11145] block nbd0: Unsupported socket: should be TCP or UNIX. [ 972.946808][T11149] IPv6: NLM_F_CREATE should be specified when creating new route [ 974.482889][T11143] fido_id[11143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 976.030263][ T5896] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 977.480687][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 977.694549][ T5896] usb 2-1: device descriptor read/all, error -71 [ 977.789669][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12207'. [ 980.834486][T11204] netlink: 14 bytes leftover after parsing attributes in process `syz.9.12216'. [ 984.681521][ T37] audit: type=1326 audit(2000000459.437:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11222 comm="syz.1.12234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fd0b8f6c9 code=0x0 [ 985.968133][ T5896] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 986.244401][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 986.247468][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 986.248965][ T5896] usb 4-1: config 120 has an invalid interface number: 218 but max is 0 [ 986.248991][ T5896] usb 4-1: config 120 has no interface number 0 [ 986.252017][ T5896] usb 4-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=f2.bb [ 986.252045][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.252066][ T5896] usb 4-1: Product: syz [ 986.252081][ T5896] usb 4-1: Manufacturer: syz [ 986.252096][ T5896] usb 4-1: SerialNumber: syz [ 988.615899][T11244] netlink: 'syz.1.12228': attribute type 4 has an invalid length. [ 988.615921][T11244] netlink: 'syz.1.12228': attribute type 2 has an invalid length. [ 988.719444][ T5896] usb 4-1: Could not find all expected endpoints [ 988.795916][ T5896] usb 4-1: USB disconnect, device number 4 [ 989.070559][T11253] overlayfs: workdir and upperdir must be separate subtrees [ 989.084240][T11260] vivid-001: ================= START STATUS ================= [ 989.084342][T11260] vivid-001: Radio HW Seek Mode: Bounded [ 989.084375][T11260] vivid-001: Radio Programmable HW Seek: false [ 989.084395][T11260] vivid-001: RDS Rx I/O Mode: Block I/O [ 989.084415][T11260] vivid-001: Generate RBDS Instead of RDS: false [ 989.084458][T11260] vivid-001: RDS Reception: true [ 989.084478][T11260] vivid-001: RDS Program Type: 0 inactive [ 989.084529][T11260] vivid-001: RDS PS Name: inactive [ 989.084554][T11260] vivid-001: RDS Radio Text: inactive [ 989.084577][T11260] vivid-001: RDS Traffic Announcement: false inactive [ 989.084600][T11260] vivid-001: RDS Traffic Program: false inactive [ 989.084625][T11260] vivid-001: RDS Music: false inactive [ 989.084650][T11260] vivid-001: ================== END STATUS ================== [ 991.621765][T11274] kAFS: unable to lookup cell 'sy@jz1' [ 991.739506][T11277] sock: sock_timestamping_bind_phc: sock not bind to device [ 996.099076][T11289] [U] zÍ [ 996.465567][ T37] audit: type=1326 audit(2000000471.636:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.1.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 996.465624][ T37] audit: type=1326 audit(2000000471.783:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.1.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 996.465669][ T37] audit: type=1326 audit(2000000471.783:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.1.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 996.465710][ T37] audit: type=1326 audit(2000000471.783:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.1.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 996.465751][ T37] audit: type=1326 audit(2000000471.783:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.1.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 996.465791][ T37] audit: type=1326 audit(2000000471.783:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.1.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 996.465834][ T37] audit: type=1326 audit(2000000471.783:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11296 comm="syz.1.12249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd0b8f6c9 code=0x7ffc0000 [ 1000.961091][T11204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.772777][T11204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.234753][T11204] bond0 (unregistering): Released all slaves [ 1003.050366][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.069235][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.090596][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.092746][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.094206][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1003.781387][ T3150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.803146][ T3150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.803574][ T3150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.825113][ T3150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.842140][ T3150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1003.885043][T11278] tipc: Started in network mode [ 1003.885077][T11278] tipc: Node identity ac141441, cluster identity 64 [ 1003.889651][T11278] tipc: Enabled bearer , priority 10 [ 1004.876663][T30030] tipc: Node number set to 2886997057 [ 1005.407200][T11331] lo speed is unknown, defaulting to 1000 [ 1005.801256][ T3150] Bluetooth: hci1: command tx timeout [ 1007.781967][ T3150] Bluetooth: hci1: command tx timeout [ 1008.505748][T24586] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1009.401384][T24586] usb 4-1: Using ep0 maxpacket: 16 [ 1009.403672][T24586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1009.403711][T24586] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1009.403735][T24586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.409092][T24586] usb 4-1: config 0 descriptor?? [ 1010.008872][ T3150] Bluetooth: hci1: command tx timeout [ 1010.562055][T24586] hid (null): report_id 0 is invalid [ 1011.078247][T24586] usb 4-1: USB disconnect, device number 5 [ 1011.984551][ T3150] Bluetooth: hci1: command tx timeout [ 1016.779045][T24586] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1017.145731][T24586] usb 5-1: Using ep0 maxpacket: 16 [ 1017.149957][T24586] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1017.149984][T24586] usb 5-1: config 0 has no interface number 0 [ 1017.150035][T24586] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1017.153094][T24586] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1017.153123][T24586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.153143][T24586] usb 5-1: Product: syz [ 1017.153158][T24586] usb 5-1: Manufacturer: syz [ 1017.153174][T24586] usb 5-1: SerialNumber: syz [ 1017.252740][T24586] usb 5-1: config 0 descriptor?? [ 1019.364996][T24586] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1019.593775][T24586] usb 5-1: USB disconnect, device number 120 [ 1024.178964][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1024.179065][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1032.063182][T30030] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1033.226577][T30030] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1033.226606][T30030] usb 2-1: config 0 has no interface number 0 [ 1033.226655][T30030] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.226725][T30030] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.226768][T30030] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1033.226791][T30030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.345168][T30030] usb 2-1: config 0 descriptor?? [ 1035.771827][T18210] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.771864][T18210] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.216932][T30030] usbhid 2-1:0.1: can't add hid device: -71 [ 1036.217063][T30030] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1036.686080][T30030] usb 2-1: USB disconnect, device number 122 [ 1037.540416][T11331] chnl_net:caif_netlink_parms(): no params data found [ 1048.726261][T18210] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.726296][T18210] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.842551][T18210] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.842587][T18210] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.472194][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1064.517299][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1064.523677][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1064.543977][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1064.567569][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1066.535724][ T5815] Bluetooth: hci2: command tx timeout [ 1067.440297][T18210] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.440334][T18210] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.226133][ T5967] kworker/0:8 (5967) used greatest stack depth: 15896 bytes left [ 1068.233782][T11781] netlink: 'syz.3.12356': attribute type 12 has an invalid length. [ 1068.233805][T11781] netlink: 248 bytes leftover after parsing attributes in process `syz.3.12356'. [ 1068.536970][ T5815] Bluetooth: hci2: command tx timeout [ 1069.683226][T11761] lo speed is unknown, defaulting to 1000 [ 1070.500516][ T5815] Bluetooth: hci2: command tx timeout [ 1072.480416][ T5815] Bluetooth: hci2: command tx timeout [ 1082.892440][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1082.892513][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.191517][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12397'. [ 1095.659675][T18210] bridge_slave_1: left allmulticast mode [ 1095.659706][T18210] bridge_slave_1: left promiscuous mode [ 1095.659958][T18210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.469260][ T5923] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1098.014517][T18210] bridge_slave_0: left allmulticast mode [ 1098.014548][T18210] bridge_slave_0: left promiscuous mode [ 1098.014802][T18210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.051635][ T5923] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1098.051665][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.174350][ T5923] usb 2-1: config 0 descriptor?? [ 1101.810365][ T5923] viewsonic 0003:2133:0018.0040: hidraw0: USB HID v1.00 Device [HID 2133:0018] on usb-dummy_hcd.1-1/input0 [ 1101.842983][ T5923] usb 2-1: USB disconnect, device number 123 [ 1104.858911][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12413'. [ 1104.858971][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12413'. [ 1104.894897][T12060] fido_id[12060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1104.924437][ T5923] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1105.176875][ T5923] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1105.176930][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1105.176959][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1105.177002][ T5923] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1105.177026][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.413298][ T5923] usb 4-1: config 0 descriptor?? [ 1105.414340][T12065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1109.289834][T12084] program syz.1.12415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1109.339476][T12091] program syz.1.12415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1109.941335][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 1109.941441][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1110.037835][ T5923] usb 4-1: USB disconnect, device number 6 [ 1124.751436][ T3150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1124.768833][ T3150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1124.770577][ T3150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1124.772010][ T3150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1124.772943][ T3150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1127.322274][T12152] mmap: syz.3.12439 (12152): VmData 37466112 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1127.366869][ T5815] Bluetooth: hci1: command tx timeout [ 1128.633854][T24586] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1129.228968][T24586] usb 4-1: Using ep0 maxpacket: 16 [ 1129.375575][ T5815] Bluetooth: hci1: command tx timeout [ 1129.735800][T24586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.735836][T24586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.735859][T24586] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1129.735999][T24586] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1129.736023][T24586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.310210][ T5815] Bluetooth: hci1: command tx timeout [ 1131.406146][T24586] usb 4-1: config 0 descriptor?? [ 1131.567032][T24586] usb 4-1: can't set config #0, error -71 [ 1131.727819][T24586] usb 4-1: USB disconnect, device number 7 [ 1133.501489][ T5815] Bluetooth: hci1: command tx timeout [ 1136.021518][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1136.649212][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1136.654557][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1136.667000][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1136.667888][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1138.940304][ T3150] Bluetooth: hci3: command tx timeout [ 1140.977669][ T3150] Bluetooth: hci3: command tx timeout [ 1141.692110][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1141.709748][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1142.969677][ T3150] Bluetooth: hci3: command tx timeout [ 1144.973186][ T3150] Bluetooth: hci3: command tx timeout [ 1147.486875][T12229] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1157.338218][T11761] chnl_net:caif_netlink_parms(): no params data found [ 1157.385331][T12105] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12420'. [ 1162.749742][T18210] tipc: Disabling bearer [ 1162.750372][T18210] tipc: Left network mode [ 1162.913064][T12189] lo speed is unknown, defaulting to 1000 [ 1167.389457][T18210] IPVS: stopping master sync thread 4442 ... [ 1167.489095][T18210] IPVS: stopping backup sync thread 6620 ... [ 1170.613670][T12300] ALSA: mixer_oss: invalid OSS volume '°ï' [ 1171.855469][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1171.899865][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1171.903262][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1171.913020][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1171.913783][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1174.794732][ T5815] Bluetooth: hci5: command tx timeout [ 1176.728453][ T5815] Bluetooth: hci5: command tx timeout [ 1177.180626][ T37] audit: type=1800 audit(2000000661.502:244): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.12488" name="bus" dev="tmpfs" ino=1604 res=0 errno=0 [ 1177.180679][ T37] audit: type=1804 audit(2000000661.534:245): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.12488" name="/newroot/313/bus" dev="tmpfs" ino=1604 res=1 errno=0 [ 1178.116876][T12135] lo speed is unknown, defaulting to 1000 [ 1178.198785][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12490'. [ 1178.781703][ T5815] Bluetooth: hci5: command tx timeout [ 1180.955300][ T5815] Bluetooth: hci5: command tx timeout [ 1185.598407][ T3150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1185.605341][ T3150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1185.623064][ T3150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1185.653394][ T3150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1185.669129][ T3150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1187.773378][ T3150] Bluetooth: hci2: command tx timeout [ 1189.683626][ T3150] Bluetooth: hci2: command tx timeout [ 1191.664746][ T3150] Bluetooth: hci2: command tx timeout [ 1193.646106][ T5815] Bluetooth: hci2: command tx timeout [ 1194.556969][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1195.069485][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1195.111312][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1195.139973][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1195.141005][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1197.227644][ T3150] Bluetooth: hci6: command tx timeout [ 1199.239307][ T3150] Bluetooth: hci6: command tx timeout [ 1199.756009][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1199.756081][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1200.936266][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.999233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.034871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.190120][ T3150] Bluetooth: hci6: command tx timeout [ 1201.539126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.964597][ T992] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1203.173942][ T3150] Bluetooth: hci6: command tx timeout [ 1203.504100][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.504152][ T992] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a51, bcdDevice= 0.00 [ 1203.504177][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.540030][ T992] usb 5-1: config 0 descriptor?? [ 1203.863745][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.889438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.603001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.845013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.615437][ T992] usbhid 5-1:0.0: can't add hid device: -71 [ 1205.615574][ T992] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1205.708427][ T992] usb 5-1: USB disconnect, device number 121 [ 1207.991573][ T5923] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1211.321439][ T5923] usb 5-1: device descriptor read/all, error -71 [ 1212.097880][T12299] lo speed is unknown, defaulting to 1000 [ 1216.135951][T18210] hsr_slave_0: left promiscuous mode [ 1216.384354][T18210] hsr_slave_1: left promiscuous mode [ 1216.386853][T18210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.386879][T18210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.755958][T18210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.755986][T18210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.769983][T18210] veth1_macvtap: left promiscuous mode [ 1218.892696][T18210] veth0_macvtap: left promiscuous mode [ 1218.893014][T18210] veth1_vlan: left promiscuous mode [ 1218.893200][T18210] veth0_vlan: left promiscuous mode [ 1225.689917][ T5815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1225.715263][ T5815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1225.726163][ T5815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1225.727318][ T5815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1225.833086][ T5815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1229.538629][ T5815] Bluetooth: hci7: command tx timeout [ 1231.625100][ T5815] Bluetooth: hci7: command tx timeout [ 1233.577866][ T5815] Bluetooth: hci7: command tx timeout [ 1235.468028][T18210] pim6reg (unregistering): left allmulticast mode [ 1235.577418][ T5815] Bluetooth: hci7: command tx timeout [ 1237.199292][ T3150] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1237.224430][ T3150] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1237.235367][ T3150] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1237.236591][ T3150] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1237.237372][ T3150] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1238.957873][ T3150] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1238.984788][ T3150] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1238.986661][ T3150] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1239.118642][ T3150] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1239.119467][ T3150] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1239.216818][ T5815] Bluetooth: hci8: command tx timeout [ 1241.131454][ T5815] Bluetooth: hci9: command tx timeout [ 1241.236004][ T5815] Bluetooth: hci8: command tx timeout [ 1243.106578][ T5815] Bluetooth: hci9: command tx timeout [ 1243.311308][ T5815] Bluetooth: hci8: command tx timeout [ 1245.084408][T12592] Bluetooth: hci9: command tx timeout [ 1245.490591][T12592] Bluetooth: hci8: command tx timeout [ 1245.694071][T12146] Bluetooth: hci1: command 0x0406 tx timeout [ 1247.065701][T12146] Bluetooth: hci9: command tx timeout [ 1253.747126][T12592] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1253.777102][T12592] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1253.778704][T12592] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1253.779876][T12592] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1253.984593][T12592] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1255.373514][T12592] Bluetooth: hci3: command 0x0406 tx timeout [ 1256.134206][T12146] Bluetooth: hci10: command tx timeout [ 1258.134694][T12146] Bluetooth: hci10: command tx timeout [ 1258.424081][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1258.432548][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1260.103515][T12146] Bluetooth: hci10: command tx timeout [ 1262.278125][T12146] Bluetooth: hci10: command tx timeout [ 1283.304226][T12592] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1283.328511][T12592] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1283.337174][T12592] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1283.338441][T12592] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1283.354870][T12592] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1283.421051][T18210] team0 (unregistering): Port device team_slave_1 removed [ 1285.470916][T12592] Bluetooth: hci11: command tx timeout [ 1287.454285][T12592] Bluetooth: hci11: command tx timeout [ 1288.413954][T18210] team0 (unregistering): Port device team_slave_0 removed [ 1289.471262][T12592] Bluetooth: hci11: command tx timeout [ 1289.545878][ T3150] Bluetooth: hci5: command 0x0406 tx timeout [ 1291.660661][T12146] Bluetooth: hci11: command tx timeout [ 1296.232506][T12592] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1296.349444][T12592] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1296.382652][T12592] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1296.383969][T12592] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1296.384766][T12592] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1298.352083][T12146] Bluetooth: hci12: command tx timeout [ 1300.333027][T12146] Bluetooth: hci12: command tx timeout [ 1301.563589][T12592] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1301.575982][T12592] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1301.607824][T12592] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1301.611854][T12592] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1301.612593][T12592] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1302.328272][ T3150] Bluetooth: hci12: command tx timeout [ 1303.771826][ T3150] Bluetooth: hci13: command tx timeout [ 1304.152573][ T3150] Bluetooth: hci2: command 0x0406 tx timeout [ 1304.295661][ T3150] Bluetooth: hci12: command tx timeout [ 1305.743621][T12146] Bluetooth: hci13: command tx timeout [ 1307.931104][T12146] Bluetooth: hci13: command tx timeout [ 1309.940768][ T3150] Bluetooth: hci13: command tx timeout [ 1309.952851][ T3150] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1309.974550][ T3150] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1309.976144][ T3150] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1309.978649][ T3150] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1309.979451][ T3150] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1312.001802][T12146] Bluetooth: hci14: command tx timeout [ 1313.921421][T12146] Bluetooth: hci6: command 0x0406 tx timeout [ 1314.992885][T12146] Bluetooth: hci14: command tx timeout [ 1316.803537][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1316.803611][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1316.945740][T12592] Bluetooth: hci14: command tx timeout [ 1319.003414][T12592] Bluetooth: hci14: command tx timeout [ 1340.744029][T12146] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1340.916563][T12146] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1341.554113][T12146] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1341.617418][T12146] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1341.622238][T12146] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1343.941258][T12592] Bluetooth: hci15: command tx timeout [ 1345.922963][T12592] Bluetooth: hci15: command tx timeout [ 1347.885030][T12592] Bluetooth: hci15: command tx timeout [ 1348.966758][T12592] Bluetooth: hci7: command 0x0406 tx timeout [ 1349.724198][ T38] INFO: task syz-executor:12189 blocked for more than 143 seconds. [ 1349.724236][ T38] Not tainted syzkaller #0 [ 1349.724247][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1349.724257][ T38] task:syz-executor state:D stack:22384 pid:12189 tgid:12189 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1349.724316][ T38] Call Trace: [ 1349.724327][ T38] [ 1349.724343][ T38] __schedule+0x16f3/0x4c20 [ 1349.724402][ T38] ? __pfx___schedule+0x10/0x10 [ 1349.724447][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.724476][ T38] rt_mutex_schedule+0x77/0xf0 [ 1349.724498][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1349.724520][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1349.724562][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1349.724586][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1349.724609][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1349.724660][ T38] ? mpls_net_exit+0x79/0x270 [ 1349.724677][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1349.724705][ T38] mpls_net_exit+0x79/0x270 [ 1349.724727][ T38] ops_undo_list+0x49a/0x990 [ 1349.724754][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1349.724773][ T38] ? ops_init+0x469/0x5c0 [ 1349.724803][ T38] setup_net+0x2d6/0x320 [ 1349.724825][ T38] ? __pfx_setup_net+0x10/0x10 [ 1349.724846][ T38] ? __mutex_rt_init+0x3b/0x50 [ 1349.724870][ T38] ? preinit_net+0x4ab/0x770 [ 1349.724891][ T38] copy_net_ns+0x34e/0x4e0 [ 1349.724915][ T38] create_new_namespaces+0x3f3/0x720 [ 1349.724944][ T38] ? security_capable+0x7e/0x2e0 [ 1349.724976][ T38] unshare_nsproxy_namespaces+0x11c/0x170 [ 1349.725011][ T38] ksys_unshare+0x4c8/0x8c0 [ 1349.725044][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 1349.725067][ T38] ? dnotify_flush+0x1e8/0x5c0 [ 1349.725088][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1349.725122][ T38] __x64_sys_unshare+0x38/0x50 [ 1349.725148][ T38] do_syscall_64+0xfa/0xfa0 [ 1349.725171][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1349.725196][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.725216][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1349.725241][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.725260][ T38] RIP: 0033:0x7f3cf38d0ec7 [ 1349.725285][ T38] RSP: 002b:00007fffd456d448 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1349.725305][ T38] RAX: ffffffffffffffda RBX: 00007f3cf3b25f40 RCX: 00007f3cf38d0ec7 [ 1349.725320][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1349.725334][ T38] RBP: 00007f3cf3b267b8 R08: 0000000000000000 R09: 0000000000000000 [ 1349.725347][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1349.725360][ T38] R13: 0000000000000003 R14: 00007fffd456d718 R15: 0000000000000000 [ 1349.725394][ T38] [ 1349.725404][ T38] INFO: task syz-executor:12358 blocked for more than 143 seconds. [ 1349.725418][ T38] Not tainted syzkaller #0 [ 1349.725428][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1349.725438][ T38] task:syz-executor state:D stack:25864 pid:12358 tgid:12358 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1349.725491][ T38] Call Trace: [ 1349.725498][ T38] [ 1349.725511][ T38] __schedule+0x16f3/0x4c20 [ 1349.725564][ T38] ? __pfx___schedule+0x10/0x10 [ 1349.725609][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.725637][ T38] rt_mutex_schedule+0x77/0xf0 [ 1349.725656][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1349.725679][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1349.725720][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1349.725744][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1349.725767][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1349.725787][ T38] ? __lock_acquire+0xab9/0xd20 [ 1349.725833][ T38] ? ib_get_eth_speed+0x151/0x7b0 [ 1349.725875][ T38] ? ib_get_eth_speed+0x151/0x7b0 [ 1349.725900][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1349.725928][ T38] ib_get_eth_speed+0x151/0x7b0 [ 1349.725954][ T38] ? __lock_acquire+0xab9/0xd20 [ 1349.725979][ T38] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1349.726029][ T38] ? ib_query_port+0x384/0x830 [ 1349.726056][ T38] siw_query_port+0x3c/0x4a0 [ 1349.726084][ T38] ib_setup_port_attrs+0x24e/0x2070 [ 1349.726110][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1349.726145][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1349.726170][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1349.726207][ T38] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1349.726228][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1349.726255][ T38] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1349.726276][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1349.726313][ T38] ? device_add+0x70b/0xb50 [ 1349.726344][ T38] add_one_compat_dev+0x3d6/0x5c0 [ 1349.726373][ T38] rdma_dev_init_net+0x1dd/0x270 [ 1349.726395][ T38] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1349.726430][ T38] ops_init+0x35c/0x5c0 [ 1349.726461][ T38] setup_net+0xfe/0x320 [ 1349.726483][ T38] ? __pfx_setup_net+0x10/0x10 [ 1349.726505][ T38] ? __mutex_rt_init+0x3b/0x50 [ 1349.726527][ T38] ? preinit_net+0x4ab/0x770 [ 1349.726549][ T38] copy_net_ns+0x34e/0x4e0 [ 1349.726573][ T38] create_new_namespaces+0x3f3/0x720 [ 1349.726601][ T38] ? security_capable+0x7e/0x2e0 [ 1349.726632][ T38] unshare_nsproxy_namespaces+0x11c/0x170 [ 1349.726659][ T38] ksys_unshare+0x4c8/0x8c0 [ 1349.726692][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 1349.726733][ T38] __x64_sys_unshare+0x38/0x50 [ 1349.726758][ T38] do_syscall_64+0xfa/0xfa0 [ 1349.726784][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.726804][ T38] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1349.726824][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1349.726848][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.726867][ T38] RIP: 0033:0x7f0256930ec7 [ 1349.726883][ T38] RSP: 002b:00007ffd360dc528 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1349.726902][ T38] RAX: ffffffffffffffda RBX: 00007f0256b85f40 RCX: 00007f0256930ec7 [ 1349.726918][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1349.726931][ T38] RBP: 00007f0256b867b8 R08: 0000000000000000 R09: 0000000000000000 [ 1349.726944][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1349.726957][ T38] R13: 0000000000000003 R14: 00007ffd360dc7f8 R15: 0000000000000000 [ 1349.726995][ T38] [ 1349.727004][ T38] INFO: task syz-executor:12392 blocked for more than 143 seconds. [ 1349.727018][ T38] Not tainted syzkaller #0 [ 1349.727028][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1349.727037][ T38] task:syz-executor state:D stack:25864 pid:12392 tgid:12392 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1349.727089][ T38] Call Trace: [ 1349.727096][ T38] [ 1349.727109][ T38] __schedule+0x16f3/0x4c20 [ 1349.727142][ T38] ? sched_clock+0x3f/0x60 [ 1349.727164][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1349.727198][ T38] ? __pfx___schedule+0x10/0x10 [ 1349.727249][ T38] rt_mutex_schedule+0x77/0xf0 [ 1349.727268][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1349.727304][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1349.727331][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1349.727355][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1349.727378][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1349.727428][ T38] ? add_one_compat_dev+0xee/0x5c0 [ 1349.727447][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1349.727475][ T38] add_one_compat_dev+0xee/0x5c0 [ 1349.727504][ T38] rdma_dev_init_net+0x1dd/0x270 [ 1349.727525][ T38] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1349.727559][ T38] ops_init+0x35c/0x5c0 [ 1349.727590][ T38] setup_net+0xfe/0x320 [ 1349.727612][ T38] ? __pfx_setup_net+0x10/0x10 [ 1349.727633][ T38] ? __mutex_rt_init+0x3b/0x50 [ 1349.727655][ T38] ? preinit_net+0x4ab/0x770 [ 1349.727676][ T38] copy_net_ns+0x34e/0x4e0 [ 1349.727701][ T38] create_new_namespaces+0x3f3/0x720 [ 1349.727729][ T38] ? security_capable+0x7e/0x2e0 [ 1349.727760][ T38] unshare_nsproxy_namespaces+0x11c/0x170 [ 1349.727787][ T38] ksys_unshare+0x4c8/0x8c0 [ 1349.727820][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 1349.727863][ T38] __x64_sys_unshare+0x38/0x50 [ 1349.727887][ T38] do_syscall_64+0xfa/0xfa0 [ 1349.727910][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1349.727935][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.727955][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1349.727979][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.728003][ T38] RIP: 0033:0x7fd235800ec7 [ 1349.728018][ T38] RSP: 002b:00007ffdf3c1bcc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1349.728038][ T38] RAX: ffffffffffffffda RBX: 00007fd235a55f40 RCX: 00007fd235800ec7 [ 1349.728053][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1349.728066][ T38] RBP: 00007fd235a567b8 R08: 0000000000000000 R09: 0000000000000000 [ 1349.728079][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1349.728092][ T38] R13: 0000000000000003 R14: 00007ffdf3c1bf98 R15: 0000000000000000 [ 1349.728125][ T38] [ 1349.728134][ T38] INFO: task syz.4.12530:12522 blocked for more than 143 seconds. [ 1349.728147][ T38] Not tainted syzkaller #0 [ 1349.728157][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1349.728167][ T38] task:syz.4.12530 state:D stack:28808 pid:12522 tgid:12521 ppid:4595 task_flags:0x400040 flags:0x00080002 [ 1349.728221][ T38] Call Trace: [ 1349.728228][ T38] [ 1349.728241][ T38] __schedule+0x16f3/0x4c20 [ 1349.728297][ T38] ? stack_depot_save_flags+0x40/0x860 [ 1349.728338][ T38] ? __pfx___schedule+0x10/0x10 [ 1349.728382][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.728411][ T38] rt_mutex_schedule+0x77/0xf0 [ 1349.728430][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1349.728452][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1349.728493][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1349.728518][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1349.728541][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1349.728575][ T38] ? dev_ioctl+0x83c/0x1150 [ 1349.728609][ T38] ? dev_ioctl+0x83c/0x1150 [ 1349.728624][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1349.728652][ T38] dev_ioctl+0x83c/0x1150 [ 1349.728676][ T38] sock_ioctl+0x71c/0x790 [ 1349.728705][ T38] ? __pfx_sock_ioctl+0x10/0x10 [ 1349.728734][ T38] ? __fget_files+0x3a6/0x420 [ 1349.728758][ T38] ? __fget_files+0x2a/0x420 [ 1349.728787][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1349.728807][ T38] ? __pfx_sock_ioctl+0x10/0x10 [ 1349.728831][ T38] __se_sys_ioctl+0xff/0x170 [ 1349.728857][ T38] do_syscall_64+0xfa/0xfa0 [ 1349.728881][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1349.728905][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.728925][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1349.728948][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.728968][ T38] RIP: 0033:0x7f8bc385f6c9 [ 1349.728995][ T38] RSP: 002b:00007f8bc1ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.729014][ T38] RAX: ffffffffffffffda RBX: 00007f8bc3ab5fa0 RCX: 00007f8bc385f6c9 [ 1349.729029][ T38] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1349.729042][ T38] RBP: 00007f8bc38e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1349.729055][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1349.729068][ T38] R13: 00007f8bc3ab6038 R14: 00007f8bc3ab5fa0 R15: 00007ffe368b5c08 [ 1349.729104][ T38] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1349.729127][ T38] [ 1349.729127][ T38] Showing all locks held in the system: [ 1349.729141][ T38] 2 locks held by ksoftirqd/0/15: [ 1349.729155][ T38] 5 locks held by ksoftirqd/1/30: [ 1349.729167][ T38] 1 lock held by khungtaskd/38: [ 1349.729178][ T38] #0: ffffffff8d5aa840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1349.729231][ T38] 3 locks held by kworker/u8:4/70: [ 1349.729242][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1349.729297][ T38] #1: ffffc9000155fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1349.729345][ T38] #2: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1349.729398][ T38] 3 locks held by kworker/0:2/992: [ 1349.729409][ T38] #0: ffff888019b8c938 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1349.729457][ T38] #1: ffffc9000468fba0 ((work_completion)(&work->work)#3){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1349.729510][ T38] #2: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 1349.729564][ T38] 4 locks held by kworker/u8:8/1507: [ 1349.729587][ T38] 4 locks held by kworker/u8:12/3499: [ 1349.729598][ T38] #0: ffff888019f38138 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1349.729646][ T38] #1: ffffc9000db5fba0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1349.729694][ T38] #2: ffff888035048750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1349.729739][ T38] #3: ffffffff8e5cbf00 (devices_rwsem){++++}-{4:4}, at: disable_device+0xb7/0x320 [ 1349.729783][ T38] 3 locks held by kworker/u8:14/4243: [ 1349.729794][ T38] #0: ffff888019f39138 ((wq_completion)gid-cache-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1349.729842][ T38] #1: ffffc9000ecefba0 ((work_completion)(&ndev_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1349.729890][ T38] #2: ffffffff8e5cbf00 (devices_rwsem){++++}-{4:4}, at: ib_enum_all_roce_netdevs+0x8c/0x160 [ 1349.729936][ T38] 1 lock held by syslogd/5156: [ 1349.729947][ T38] #0: ffff8881498e4818 (&ei->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0 [ 1349.730001][ T38] 3 locks held by klogd/5163: [ 1349.730013][ T38] 2 locks held by dhcpcd/5469: [ 1349.730024][ T38] #0: ffff88805f35c920 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 1349.730069][ T38] #1: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1349.730111][ T38] 2 locks held by getty/5560: [ 1349.730123][ T38] #0: ffff88823bf8e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1349.730170][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1349.730224][ T38] 4 locks held by kworker/u8:13/18210: [ 1349.730236][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1349.730283][ T38] #1: ffffc9001e3cfba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1349.730331][ T38] #2: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1349.730375][ T38] #3: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x2f0 [ 1349.730435][ T38] 3 locks held by kworker/u8:2/11787: [ 1349.730446][ T38] #0: ffff88802f985138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1349.730493][ T38] #1: ffffc9000d5cfba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1349.730542][ T38] #2: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1349.730589][ T38] 2 locks held by syz-executor/12135: [ 1349.730600][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1349.730643][ T38] #1: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1349.730689][ T38] 6 locks held by kworker/u9:1/12146: [ 1349.730701][ T38] #0: ffff888057e15138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1349.730747][ T38] #1: ffffc9000d69fba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1349.730795][ T38] #2: ffff888071cc0e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1349.730839][ T38] #3: ffff888071cc00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1349.730889][ T38] #4: ffffffff8e9cb7b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1349.730938][ T38] #5: ffff88802346c358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1349.730998][ T38] 2 locks held by syz-executor/12189: [ 1349.731009][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1349.731052][ T38] #1: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 1349.731094][ T38] 3 locks held by syz-executor/12299: [ 1349.731106][ T38] 5 locks held by syz-executor/12358: [ 1349.731117][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1349.731159][ T38] #1: ffffffff8e5cbf00 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1349.731205][ T38] #2: ffffffff8e5cc140 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1349.731250][ T38] #3: ffff888035049118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 1349.731296][ T38] #4: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 1349.731347][ T38] 4 locks held by syz-executor/12392: [ 1349.731358][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1349.731401][ T38] #1: ffffffff8e5cbf00 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1349.731446][ T38] #2: ffffffff8e5cc140 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1349.731492][ T38] #3: ffff888035049118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 1349.731538][ T38] 1 lock held by syz.4.12530/12522: [ 1349.731549][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1349.731592][ T38] 1 lock held by syz.4.12530/12523: [ 1349.731603][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1349.731645][ T38] 1 lock held by syz-executor/12541: [ 1349.731657][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.731706][ T38] 1 lock held by syz-executor/12566: [ 1349.731718][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.731767][ T38] 1 lock held by syz-executor/12578: [ 1349.731778][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.731828][ T38] 1 lock held by syz-executor/12609: [ 1349.731839][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.731887][ T38] 1 lock held by syz-executor/12669: [ 1349.731899][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.731947][ T38] 1 lock held by syz-executor/12704: [ 1349.731959][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.732013][ T38] 1 lock held by syz-executor/12717: [ 1349.732025][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.732073][ T38] 1 lock held by syz-executor/12742: [ 1349.732085][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.732131][ T38] 1 lock held by syz-executor/12793: [ 1349.732140][ T38] #0: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1349.732185][ T38] 4 locks held by syz-executor/12816: [ 1349.732197][ T38] [ 1349.732203][ T38] ============================================= [ 1349.732203][ T38] [ 1349.732211][ T38] NMI backtrace for cpu 0 [ 1349.732232][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1349.732254][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1349.732265][ T38] Call Trace: [ 1349.732273][ T38] [ 1349.732281][ T38] dump_stack_lvl+0x189/0x250 [ 1349.732310][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1349.732336][ T38] ? __pfx__printk+0x10/0x10 [ 1349.732369][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1349.732393][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1349.732414][ T38] ? __pfx__printk+0x10/0x10 [ 1349.732438][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1349.732460][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1349.732481][ T38] watchdog+0xf60/0xfa0 [ 1349.732511][ T38] ? watchdog+0x1e2/0xfa0 [ 1349.732540][ T38] kthread+0x711/0x8a0 [ 1349.732566][ T38] ? __pfx_watchdog+0x10/0x10 [ 1349.732590][ T38] ? __pfx_kthread+0x10/0x10 [ 1349.732612][ T38] ? rt_spin_unlock+0x150/0x200 [ 1349.732636][ T38] ? rt_spin_unlock+0x161/0x200 [ 1349.732654][ T38] ? __pfx_kthread+0x10/0x10 [ 1349.732680][ T38] ret_from_fork+0x4bc/0x870 [ 1349.732707][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1349.732731][ T38] ? __switch_to_asm+0x39/0x70 [ 1349.732747][ T38] ? __switch_to_asm+0x33/0x70 [ 1349.732762][ T38] ? __pfx_kthread+0x10/0x10 [ 1349.732786][ T38] ret_from_fork_asm+0x1a/0x30 [ 1349.732820][ T38] [ 1349.732863][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1349.732896][ C1] NMI backtrace for cpu 1 [ 1349.732911][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1349.732931][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1349.732941][ C1] RIP: 0010:unwind_next_frame+0x17c4/0x2390 [ 1349.732966][ C1] Code: fb 0a 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 0e 0b 00 00 49 0f bf 04 24 48 01 c6 4c 89 f7 48 89 da e8 4c 0e 00 00 <84> c0 0f 84 47 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 [ 1349.732982][ C1] RSP: 0018:ffffc90000a4ea38 EFLAGS: 00000286 [ 1349.732996][ C1] RAX: 1ffff92000149d01 RBX: ffffffff8fd97f50 RCX: 0000000000000001 [ 1349.733007][ C1] RDX: ffffc90000a4eb48 RSI: dffffc0000000000 RDI: ffffc90000a4f8f0 [ 1349.733020][ C1] RBP: dffffc0000000000 R08: ffffc90000a4f8f0 R09: 0000000000000000 [ 1349.733032][ C1] R10: ffffc90000a4eb58 R11: fffff52000149d6d R12: ffffc90000a4f8f0 [ 1349.733045][ C1] R13: ffffc90000a4eb58 R14: ffffc90000a4eb08 R15: 1ffffffff1fb2fea [ 1349.733059][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 1349.733074][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1349.733086][ C1] CR2: 00007f2a5e6acf2a CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 1349.733102][ C1] Call Trace: [ 1349.733109][ C1] [ 1349.733120][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1349.733141][ C1] ? __napi_poll+0xb6/0x540 [ 1349.733164][ C1] ? skb_release_data+0x62d/0x7c0 [ 1349.733181][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1349.733200][ C1] arch_stack_walk+0x11c/0x150 [ 1349.733223][ C1] ? net_rx_action+0x5f7/0xda0 [ 1349.733241][ C1] stack_trace_save+0x9c/0xe0 [ 1349.733258][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1349.733278][ C1] ? __lock_acquire+0xab9/0xd20 [ 1349.733299][ C1] kasan_save_track+0x3e/0x80 [ 1349.733318][ C1] ? kasan_save_track+0x3e/0x80 [ 1349.733335][ C1] ? __kasan_save_free_info+0x46/0x50 [ 1349.733352][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1349.733370][ C1] ? kmem_cache_free+0x19a/0x910 [ 1349.733390][ C1] ? skb_release_data+0x62d/0x7c0 [ 1349.733406][ C1] ? consume_skb+0x9e/0xf0 [ 1349.733421][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 1349.733441][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 1349.733461][ C1] ? nft_do_chain+0x40c/0x1920 [ 1349.733480][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1349.733498][ C1] ? nf_hook_slow+0xc5/0x220 [ 1349.733515][ C1] ? NF_HOOK+0x206/0x3a0 [ 1349.733529][ C1] ? NF_HOOK+0x30c/0x3a0 [ 1349.733542][ C1] ? __netif_receive_skb+0x143/0x380 [ 1349.733562][ C1] ? process_backlog+0x31e/0x900 [ 1349.733576][ C1] ? __napi_poll+0xb6/0x540 [ 1349.733617][ C1] __kasan_save_free_info+0x46/0x50 [ 1349.733633][ C1] __kasan_slab_free+0x5c/0x80 [ 1349.733653][ C1] kmem_cache_free+0x19a/0x910 [ 1349.733672][ C1] ? skb_release_data+0x62d/0x7c0 [ 1349.733693][ C1] skb_release_data+0x62d/0x7c0 [ 1349.733716][ C1] consume_skb+0x9e/0xf0 [ 1349.733732][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 1349.733762][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1349.733785][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1349.733806][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1349.733830][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1349.733860][ C1] nft_do_chain+0x40c/0x1920 [ 1349.733887][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1349.733921][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1349.733947][ C1] nft_do_chain_inet+0x25d/0x340 [ 1349.733966][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1349.733986][ C1] ? __lock_acquire+0xab9/0xd20 [ 1349.734011][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1349.734026][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1349.734047][ C1] nf_hook_slow+0xc5/0x220 [ 1349.734066][ C1] NF_HOOK+0x206/0x3a0 [ 1349.734083][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1349.734099][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1349.734113][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1349.734126][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1349.734144][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1349.734161][ C1] ? skb_dst+0x4f/0xd0 [ 1349.734177][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1349.734194][ C1] NF_HOOK+0x30c/0x3a0 [ 1349.734210][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1349.734226][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1349.734240][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1349.734256][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1349.734277][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1349.734291][ C1] __netif_receive_skb+0x143/0x380 [ 1349.734315][ C1] ? process_backlog+0x27b/0x900 [ 1349.734330][ C1] process_backlog+0x31e/0x900 [ 1349.734351][ C1] __napi_poll+0xb6/0x540 [ 1349.734374][ C1] net_rx_action+0x5f7/0xda0 [ 1349.734397][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1349.734415][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1349.734439][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1349.734464][ C1] handle_softirqs+0x22f/0x710 [ 1349.734488][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1349.734512][ C1] run_ksoftirqd+0xac/0x210 [ 1349.734532][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1349.734553][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1349.734572][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 1349.734592][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1349.734610][ C1] smpboot_thread_fn+0x542/0xa60 [ 1349.734629][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1349.734652][ C1] kthread+0x711/0x8a0 [ 1349.734675][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1349.734693][ C1] ? __pfx_kthread+0x10/0x10 [ 1349.734713][ C1] ? rt_spin_unlock+0x150/0x200 [ 1349.734733][ C1] ? rt_spin_unlock+0x161/0x200 [ 1349.734754][ C1] ? __pfx_kthread+0x10/0x10 [ 1349.734775][ C1] ret_from_fork+0x4bc/0x870 [ 1349.734795][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1349.734816][ C1] ? __switch_to_asm+0x39/0x70 [ 1349.734832][ C1] ? __switch_to_asm+0x33/0x70 [ 1349.734847][ C1] ? __pfx_kthread+0x10/0x10 [ 1349.734868][ C1] ret_from_fork_asm+0x1a/0x30 [ 1349.734893][ C1] [ 1349.866691][T12592] Bluetooth: hci15: command tx timeout [ 1350.085261][T12358] lo speed is unknown, defaulting to 1000 [ 1353.455831][ T992] lo speed is unknown, defaulting to 1000 [ 1353.455879][ T992] syz2: Port: 1 Link DOWN [ 1356.549163][T12392] lo speed is unknown, defaulting to 1000 [ 1357.799984][T12841] Bluetooth: hci9: command 0x0406 tx timeout [ 1357.800025][T12841] Bluetooth: hci8: command 0x0406 tx timeout