last executing test programs: 27.690627807s ago: executing program 1 (id=2608): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f00000000c0)={0xa, 0x4e1f, 0x3, @remote, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="cc", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x80, 0xe2, 0x800000, 0x9, 0x4}, &(0x7f0000000440)=0x20) 27.415040017s ago: executing program 1 (id=2613): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x38, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "000000fa08"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 27.265601472s ago: executing program 1 (id=2615): capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) r0 = socket(0x1, 0x3, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x3000001f}) 27.198335683s ago: executing program 1 (id=2616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000000a0601020000000000000000000000000900020073797a310000000005000100070000001c0007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086650b35f0b4c2dc04a95e352f55e8204db1e72262099a4daa6bd5d598d1ecdb24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e24ac1e0001000000000000000008000300000000009c0009801c000080060001000200000008000200e0000002050003"], 0x1d8}}, 0x0) 26.77159085s ago: executing program 1 (id=2621): syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x2000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.730530013s ago: executing program 0 (id=2622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, 0x8013, 0x5b2bb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000) 26.585007317s ago: executing program 0 (id=2623): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x1e0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x1b0, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xfd}}, @TCA_CHOKE_STAB={0x104, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b2655c782b363a11645a0c78a39fab8c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f437992"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x3, 0xe, 0x1e, 0x12, 0x11, 0x6}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4002, 0x7, 0x4, 0x12, 0x17, 0x7}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x76, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x7f, 0x9, 0xc, 0x4, 0x6, 0x4}}]}}]}, 0x1e0}}, 0x0) 26.39427057s ago: executing program 0 (id=2626): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f9000800", @ANYRES16, @ANYBLOB="02002cbd7000fddbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB="040005"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007000390230bd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0c000180"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 26.283508697s ago: executing program 0 (id=2628): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) 26.00167586s ago: executing program 0 (id=2631): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x1, 0x7, 0x10001, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x40008, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x5, 0x400002, 0xfffffff9, 0x0, 0x9, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x800100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0xb, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 25.872648054s ago: executing program 1 (id=2634): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x10000, 0x116000, 0x8}) 25.409991133s ago: executing program 3 (id=2636): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) 24.931484372s ago: executing program 4 (id=2637): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008cb31bf7c7bc79c971e94b03469d87f980003400000000a0800024000000015080001400000000b08000140"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 24.166790856s ago: executing program 2 (id=2640): r0 = msgget(0x1, 0x64d) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) msgsnd(r0, &(0x7f0000004200)={0x1}, 0x8, 0x0) 23.196252739s ago: executing program 2 (id=2641): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 23.003658821s ago: executing program 2 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x440) 20.050617774s ago: executing program 3 (id=2643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x1}], 0x1, 0x40800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580"], 0x5c}}, 0x0) 20.03765131s ago: executing program 4 (id=2644): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 19.92036901s ago: executing program 0 (id=2645): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x49}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x80d, 0x6, 0xe40c, 0xb, 0x1, 0x4, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) 19.882402208s ago: executing program 2 (id=2646): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000004, 0x5, 0xffffffffffffffff, 0xffff, 0x6, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 19.630518129s ago: executing program 3 (id=2647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xffec) 19.606750369s ago: executing program 4 (id=2648): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x100) 19.027013604s ago: executing program 4 (id=2649): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0xffffffff}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 18.991905816s ago: executing program 3 (id=2650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) 18.718722869s ago: executing program 2 (id=2651): creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x141402, 0xe8) sendfile(r1, r0, 0x0, 0x3ffff) 18.698967061s ago: executing program 4 (id=2652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1a, 0x0, 0x9}, 0x28) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 18.682542923s ago: executing program 3 (id=2653): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'aio_iiro_16\x00', [0x4f27, 0xb, 0x2, 0x10, 0x5, 0x6, 0xc, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0xfffffffd, 0x20001, 0x6, 0x101, 0x3, 0x80000000, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x36]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f00000000c0)) 18.337567235s ago: executing program 2 (id=2654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r1, 0x221, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x3}}, 0xe4c5, 0x4e, @default, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0x8000, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x6, 0xec}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x44014) 18.320305674s ago: executing program 4 (id=2655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[], 0x38}, 0x300}, 0x0) 18.137746191s ago: executing program 3 (id=2656): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10.181803072s ago: executing program 32 (id=2634): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x10000, 0x116000, 0x8}) 4.75595554s ago: executing program 33 (id=2645): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x49}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x80d, 0x6, 0xe40c, 0xb, 0x1, 0x4, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) 3.228879821s ago: executing program 34 (id=2654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r1, 0x221, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x3}}, 0xe4c5, 0x4e, @default, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0x8000, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x6, 0xec}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x44014) 3.116414274s ago: executing program 35 (id=2655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[], 0x38}, 0x300}, 0x0) 0s ago: executing program 36 (id=2656): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): mber 10 using dummy_hcd [ 203.250375][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 203.252970][ T5925] usb 5-1: config 0 has an invalid interface number: 24 but max is 0 [ 203.253007][ T5925] usb 5-1: config 0 has no interface number 0 [ 203.253058][ T5925] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.253086][ T5925] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.253128][ T5925] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 203.253155][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.279907][ T5925] usb 5-1: config 0 descriptor?? [ 203.501849][ T5945] usb 1-1: USB disconnect, device number 10 [ 203.600503][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 203.761558][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 203.769153][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.769184][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.769221][ T46] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 203.769243][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.788646][ T5925] hid (null): unknown global tag 0x39 [ 203.788696][ T5925] hid (null): report_id 0 is invalid [ 203.804498][ T46] usb 4-1: config 0 descriptor?? [ 203.816238][ T7902] CIFS: VFS: Malformed UNC in devname [ 204.007976][ T1826] usb 5-1: USB disconnect, device number 10 [ 204.143299][ T991] usb 1-1: Service connection timeout for: 256 [ 204.143323][ T991] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 204.144960][ T991] ath9k_htc: Failed to initialize the device [ 204.148144][ T5945] usb 1-1: ath9k_htc: USB layer deinitialized [ 204.283066][ T46] hid (null): invalid report_size -301085748 [ 204.444920][ T46] usb 4-1: string descriptor 0 read error: -71 [ 204.477595][ T46] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 204.477687][ T46] letsketch 0003:6161:4D15.000A: probe with driver letsketch failed with error -32 [ 204.531020][ T46] usb 4-1: USB disconnect, device number 7 [ 204.620214][ T38] audit: type=1326 audit(1757449090.969:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7914 comm="syz.4.842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1280debe9 code=0x0 [ 204.726941][ T7913] sp0: Synchronizing with TNC [ 204.729896][ T7917] sp0: Found TNC [ 204.990267][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.140124][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 205.144232][ T10] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 205.144261][ T10] usb 1-1: config 4 has no interface number 0 [ 205.144322][ T10] usb 1-1: config 4 interface 9 has no altsetting 0 [ 205.179441][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 205.179468][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.179487][ T10] usb 1-1: Product: syz [ 205.179501][ T10] usb 1-1: Manufacturer: syz [ 205.179514][ T10] usb 1-1: SerialNumber: syz [ 205.256879][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 205.521897][ T46] usb 1-1: USB disconnect, device number 11 [ 205.530771][ T3613] usb 1-1: Failed to submit usb control message: -71 [ 205.530809][ T3613] usb 1-1: unable to send the bmi data to the device: -71 [ 205.530827][ T3613] usb 1-1: unable to get target info from device [ 205.530871][ T3613] usb 1-1: could not get target info (-71) [ 205.530902][ T3613] usb 1-1: could not probe fw (-71) [ 206.008041][ T7952] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 206.008061][ T7952] netlink: 'syz.1.855': attribute type 4 has an invalid length. [ 206.008074][ T7952] netlink: 212 bytes leftover after parsing attributes in process `syz.1.855'. [ 207.149725][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 208.563230][ T8016] netlink: 44 bytes leftover after parsing attributes in process `syz.3.881'. [ 208.563628][ T8016] netem: unknown loss type 12 [ 208.563645][ T8016] netem: change failed [ 210.380207][ T5925] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.431430][ T5945] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 210.540258][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 210.544649][ T5925] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 210.544678][ T5925] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 210.544701][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 210.544725][ T5925] usb 4-1: config 1 has no interface number 0 [ 210.544795][ T5925] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.544825][ T5925] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 210.544870][ T5925] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 210.544895][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.580263][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 210.588610][ T5945] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 210.588640][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.633077][ T5945] usb 5-1: config 0 descriptor?? [ 210.639944][ T5945] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 210.643475][ T5925] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 210.871440][ T5925] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 210.879628][ T8047] netlink: 'syz.1.898': attribute type 7 has an invalid length. [ 210.879650][ T8047] netlink: 'syz.1.898': attribute type 8 has an invalid length. [ 210.879665][ T8047] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 210.879679][ T8047] netlink: 212 bytes leftover after parsing attributes in process `syz.1.898'. [ 211.161283][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.900'. [ 211.315891][ T9] usb 4-1: USB disconnect, device number 8 [ 211.319861][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 211.441287][ T38] audit: type=1326 audit(1757449097.799:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8052 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 211.441341][ T38] audit: type=1326 audit(1757449097.799:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8052 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 211.489427][ T5945] gspca_vc032x: reg_w err -71 [ 211.489458][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489472][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489483][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489493][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489504][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489514][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489526][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489537][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489547][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489557][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489568][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489579][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489589][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489601][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489611][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489621][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489632][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489642][ T5945] gspca_vc032x: I2c Bus Busy Wait 00 [ 211.489652][ T5945] gspca_vc032x: Unknown sensor... [ 211.489753][ T5945] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 211.496004][ T38] audit: type=1326 audit(1757449097.829:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8052 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 211.496360][ T38] audit: type=1326 audit(1757449097.849:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8052 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 211.496665][ T38] audit: type=1326 audit(1757449097.849:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8052 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 211.497375][ T38] audit: type=1326 audit(1757449097.849:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8052 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 211.506125][ T5945] usb 5-1: USB disconnect, device number 11 [ 211.557589][ T38] audit: type=1326 audit(1757449097.909:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8052 comm="syz.1.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 211.751519][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.903'. [ 212.199563][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 212.488294][ T8073] bond0: (slave bond_slave_1): Releasing backup interface [ 213.301524][ T38] audit: type=1326 audit(1757449099.659:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8108 comm="syz.2.927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6055ddebe9 code=0x0 [ 215.080479][ T991] kernel read not supported for file /dsp1 (pid: 991 comm: kworker/0:2) [ 215.567943][ T8147] netlink: 92 bytes leftover after parsing attributes in process `syz.1.943'. [ 215.802845][ T8151] vxlan0: entered promiscuous mode [ 215.802878][ T8151] vxlan0: entered allmulticast mode [ 215.804216][ T3613] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.804262][ T3613] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.804298][ T3613] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.804333][ T3613] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.994666][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 215.994687][ T8154] netlink: 120 bytes leftover after parsing attributes in process `syz.1.947'. [ 215.994709][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 216.640875][ T1826] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 216.807976][ T1826] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 216.808006][ T1826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.808029][ T1826] usb 5-1: Product: syz [ 216.808044][ T1826] usb 5-1: Manufacturer: syz [ 216.808059][ T1826] usb 5-1: SerialNumber: syz [ 216.860581][ T1826] usb 5-1: config 0 descriptor?? [ 217.153121][ T1826] usb 5-1: USB disconnect, device number 12 [ 217.319421][ T6169] udevd[6169]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.073477][ T8206] netlink: 27 bytes leftover after parsing attributes in process `syz.3.969'. [ 218.160069][ T5925] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.322698][ T5925] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.322733][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.328700][ T5925] usb 3-1: config 0 descriptor?? [ 218.364454][ T5925] cp210x 3-1:0.0: cp210x converter detected [ 218.732225][ T8220] sp0: Synchronizing with TNC [ 218.768646][ T5925] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 218.913669][ T8227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.973996][ T5925] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 218.974024][ T5925] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 218.978390][ T5925] usb 3-1: cp210x converter now attached to ttyUSB0 [ 219.008897][ T5925] usb 3-1: USB disconnect, device number 10 [ 219.021918][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.022677][ T5925] cp210x 3-1:0.0: device disconnected [ 219.575470][ T5925] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.668844][ T38] audit: type=1326 audit(1757449106.019:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8243 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 219.668910][ T38] audit: type=1326 audit(1757449106.019:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8243 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 219.668956][ T38] audit: type=1326 audit(1757449106.019:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8243 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 219.669022][ T38] audit: type=1326 audit(1757449106.019:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8243 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 219.669067][ T38] audit: type=1326 audit(1757449106.019:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8243 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 219.720084][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 219.723823][ T5925] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 219.723851][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.815725][ T5925] usb 4-1: config 0 descriptor?? [ 219.890187][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 220.025398][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 220.040228][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.043051][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 220.043105][ T5925] usb 4-1: media controller created [ 220.048125][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.048148][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.052618][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.052648][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.052670][ T9] usb 2-1: Product: syz [ 220.052686][ T9] usb 2-1: Manufacturer: syz [ 220.052702][ T9] usb 2-1: SerialNumber: syz [ 220.143008][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.238050][ T5925] az6027: usb out operation failed. (-71) [ 220.239206][ T5925] az6027: usb out operation failed. (-71) [ 220.239238][ T5925] stb0899_attach: Driver disabled by Kconfig [ 220.239249][ T5925] az6027: no front-end attached [ 220.239249][ T5925] [ 220.239656][ T5925] az6027: usb out operation failed. (-71) [ 220.239671][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 220.263144][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 220.303589][ T5925] dvb-usb: schedule remote query interval to 400 msecs. [ 220.303613][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 220.325637][ T5925] usb 4-1: USB disconnect, device number 9 [ 220.551713][ T5925] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 220.642078][ T9] usb 2-1: 0:2 : does not exist [ 220.898530][ T8264] netlink: 'syz.2.995': attribute type 15 has an invalid length. [ 221.062387][ T5925] usb 2-1: USB disconnect, device number 8 [ 221.890161][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 221.893428][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 221.893477][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 223.070720][ T8314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1018'. [ 223.282598][ T8319] macvtap0: refused to change device tx_queue_len [ 223.816762][ T8336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.932023][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 224.436924][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 225.100163][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 225.260135][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 225.262622][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.262701][ T5925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 225.262727][ T5925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.262764][ T5925] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.322629][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.322663][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.322686][ T5925] usb 4-1: Product: syz [ 225.322702][ T5925] usb 4-1: Manufacturer: syz [ 225.322717][ T5925] usb 4-1: SerialNumber: syz [ 225.589868][ T5925] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 225.589906][ T5925] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 225.589927][ T5925] usb 4-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 225.590690][ T5925] usb 4-1: 2:1 : invalid channels 0 [ 225.800472][ T5925] usb 4-1: USB disconnect, device number 10 [ 226.011270][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.140114][ T991] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 226.299628][ T991] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.299662][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.360717][ T991] usb 3-1: config 0 descriptor?? [ 226.376044][ T991] cp210x 3-1:0.0: cp210x converter detected [ 226.811374][ T991] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 226.858501][ T991] usb 3-1: cp210x converter now attached to ttyUSB0 [ 227.054848][ T991] usb 3-1: USB disconnect, device number 11 [ 227.101095][ T991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.242307][ T991] cp210x 3-1:0.0: device disconnected [ 227.425390][ T38] audit: type=1326 audit(1757449113.769:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 227.425444][ T38] audit: type=1326 audit(1757449113.769:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 227.430224][ T38] audit: type=1326 audit(1757449113.779:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 227.606008][ T38] audit: type=1326 audit(1757449113.949:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 227.606059][ T38] audit: type=1326 audit(1757449113.959:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.0.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x7ffc0000 [ 228.276383][ T5207] udevd[5207]: worker [6169] terminated by signal 33 (Unknown signal 33) [ 228.276439][ T5207] udevd[5207]: worker [6169] failed while handling '/devices/virtual/block/loop4' [ 229.179400][ T8465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.690215][ T5925] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.836103][ T8465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.843564][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 229.856239][ T5925] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 229.856270][ T5925] usb 5-1: config 0 has no interface number 0 [ 229.878102][ T5925] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 229.878134][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.878154][ T5925] usb 5-1: Product: syz [ 229.878167][ T5925] usb 5-1: Manufacturer: syz [ 229.878180][ T5925] usb 5-1: SerialNumber: syz [ 229.925946][ T5925] usb 5-1: config 0 descriptor?? [ 229.943067][ T5925] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 230.164155][ T5925] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 230.219576][ T5925] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 230.488227][ T8465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.590790][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 230.591500][ T5925] usb 5-1: USB disconnect, device number 13 [ 230.655986][ T5925] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 230.710817][ T5925] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 230.711878][ T5925] quatech2 5-1:0.51: device disconnected [ 231.189565][ T8465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.894733][ T1442] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.960162][ T5925] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 231.983637][ T1442] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.099257][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.099308][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.113223][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.113251][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.118701][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.118734][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.118755][ T5925] usb 2-1: Product: syz [ 232.118771][ T5925] usb 2-1: Manufacturer: syz [ 232.118805][ T5925] usb 2-1: SerialNumber: syz [ 232.585402][ T5925] usb 2-1: 0:2 : does not exist [ 233.032993][ T5925] usb 2-1: USB disconnect, device number 9 [ 234.300109][ T5147] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 234.454786][ T5147] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.454823][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.454850][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.454874][ T5147] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.454918][ T5147] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.454943][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.542471][ T5147] usb 1-1: config 0 descriptor?? [ 235.074454][ T5147] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 235.157194][ T8592] vlan2: entered allmulticast mode [ 235.157218][ T8592] batadv0: entered allmulticast mode [ 235.273751][ T5911] usb 1-1: USB disconnect, device number 12 [ 235.971144][ T8610] macvtap1: entered allmulticast mode [ 235.971168][ T8610] bridge0: entered allmulticast mode [ 235.972857][ T8610] bridge0: port 3(macvtap1) entered blocking state [ 235.979494][ T8610] bridge0: port 3(macvtap1) entered disabled state [ 236.085282][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 236.095321][ T8610] bridge0: left allmulticast mode [ 236.173898][ T8618] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 236.173898][ T8618] The task syz.4.1143 (8618) triggered the difference, watch for misbehavior. [ 236.896903][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'. [ 237.117887][ T8631] veth1_macvtap: left promiscuous mode [ 238.450090][ T5147] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 238.630505][ T5147] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.640592][ T5147] usb 1-1: config 6 has an invalid interface number: 158 but max is 0 [ 238.640621][ T5147] usb 1-1: config 6 has no interface number 0 [ 238.640674][ T5147] usb 1-1: config 6 interface 158 has no altsetting 0 [ 238.659152][ T5147] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 238.659180][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.659198][ T5147] usb 1-1: Product: syz [ 238.659212][ T5147] usb 1-1: Manufacturer: syz [ 238.659225][ T5147] usb 1-1: SerialNumber: syz [ 239.700932][ T5147] rtsx_usb 1-1:6.158: probe with driver rtsx_usb failed with error -71 [ 239.749624][ T5147] usb 1-1: USB disconnect, device number 13 [ 239.863427][ T8688] Dead loop on virtual device ip6_vti0, fix it urgently! [ 240.295145][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.402162][ T8717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.444569][ T8771] QAT: failed to copy from user cfg_data. [ 243.550103][ T5945] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 243.703042][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 243.713576][ T5945] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 243.713601][ T5945] usb 4-1: config 0 has no interface number 0 [ 243.724977][ T5945] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 243.725007][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.725028][ T5945] usb 4-1: Product: syz [ 243.725043][ T5945] usb 4-1: Manufacturer: syz [ 243.725058][ T5945] usb 4-1: SerialNumber: syz [ 243.778236][ T5945] usb 4-1: config 0 descriptor?? [ 243.795293][ T5945] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.021081][ T5945] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 244.060323][ T5945] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 244.433809][ T8792] netlink: 'syz.4.1222': attribute type 2 has an invalid length. [ 244.449121][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 244.450876][ T10] usb 4-1: USB disconnect, device number 11 [ 244.504675][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 244.539140][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 244.559094][ T10] quatech2 4-1:0.51: device disconnected [ 244.830243][ T991] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 244.939373][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 244.939591][ T8807] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1230'. [ 245.001078][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.001127][ T991] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 245.001152][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.041518][ T991] usb 2-1: config 0 descriptor?? [ 245.587012][ T991] nintendo 0003:057E:200E.000C: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 245.674391][ T991] nintendo 0003:057E:200E.000C: Failed charging grip handshake [ 245.674418][ T991] nintendo 0003:057E:200E.000C: Failed to initialize controller; ret=-110 [ 245.711881][ T991] nintendo 0003:057E:200E.000C: probe - fail = -110 [ 245.712107][ T991] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -110 [ 245.757883][ T991] usb 2-1: USB disconnect, device number 10 [ 246.045008][ T8824] fido_id[8824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 246.099479][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.320123][ T5945] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 246.487976][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.488013][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.488054][ T5945] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 246.488098][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.534307][ T5945] usb 3-1: config 0 descriptor?? [ 247.396415][ T5945] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 247.523660][ T5945] usb 3-1: USB disconnect, device number 12 [ 248.470568][ T38] audit: type=1326 audit(1757449134.819:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.471588][ T38] audit: type=1326 audit(1757449134.829:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.472343][ T38] audit: type=1326 audit(1757449134.829:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.474563][ T38] audit: type=1326 audit(1757449134.829:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.475725][ T38] audit: type=1326 audit(1757449134.829:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.476478][ T38] audit: type=1326 audit(1757449134.829:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.479425][ T38] audit: type=1326 audit(1757449134.829:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.570636][ T38] audit: type=1326 audit(1757449134.929:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.572422][ T38] audit: type=1326 audit(1757449134.929:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 248.574216][ T38] audit: type=1326 audit(1757449134.929:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd96b70adb9 code=0x7ffc0000 [ 250.258058][ T8926] syz.4.1271 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 251.143004][ T8954] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1283'. [ 252.036475][ T8968] program syz.2.1290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.221240][ T5925] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 252.374024][ T5925] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 252.374059][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.379129][ T5925] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 252.379169][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.379192][ T5925] usb 5-1: Product: syz [ 252.379208][ T5925] usb 5-1: Manufacturer: syz [ 252.379223][ T5925] usb 5-1: SerialNumber: syz [ 252.396296][ T5925] usb 5-1: config 0 descriptor?? [ 252.422509][ T5925] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 252.638444][ T8983] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1297'. [ 253.044303][ T8997] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 253.044325][ T8997] netlink: 'syz.1.1301': attribute type 2 has an invalid length. [ 253.292080][ T5925] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 253.292186][ T5925] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 253.301927][ T5925] usb 5-1: USB disconnect, device number 14 [ 253.851684][ T5925] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.002668][ T5925] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 254.002730][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.004334][ T5925] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 254.004364][ T5925] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 254.004388][ T5925] usb 1-1: Manufacturer: syz [ 254.022326][ T5925] usb 1-1: config 0 descriptor?? [ 254.290334][ T5925] rc_core: IR keymap rc-hauppauge not found [ 254.290356][ T5925] Registered IR keymap rc-empty [ 254.291942][ T5925] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 254.312266][ T5925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 254.348645][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 254.430171][ T5925] usb 1-1: USB disconnect, device number 14 [ 254.885934][ T1442] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.045694][ T5147] Process accounting resumed [ 255.341950][ T9047] syz.0.1323 (9047) used greatest stack depth: 16696 bytes left [ 255.700085][ T5147] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 255.853066][ T5147] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 255.853100][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.871523][ T5147] usb 1-1: config 0 descriptor?? [ 255.891208][ T5147] gspca_main: spca508-2.14.0 probing 8086:0110 [ 256.089692][ T5147] gspca_spca508: reg_read err -32 [ 256.093001][ T5147] gspca_spca508: reg_read err -32 [ 256.300256][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 256.305860][ T5147] gspca_spca508: reg_read err -71 [ 256.308269][ T5147] gspca_spca508: reg_read err -71 [ 256.308845][ T5147] gspca_spca508: reg write: error -71 [ 256.308946][ T5147] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 256.315931][ T5147] usb 1-1: USB disconnect, device number 15 [ 256.930229][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 257.550206][ T5911] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 257.646958][ T9127] vlan2: entered allmulticast mode [ 257.720268][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 257.723071][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 257.723104][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.726422][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 257.726452][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.726472][ T5911] usb 4-1: Product: syz [ 257.726487][ T5911] usb 4-1: Manufacturer: syz [ 257.726502][ T5911] usb 4-1: SerialNumber: syz [ 258.042809][ T5911] usbhid 4-1:1.0: can't add hid device: -71 [ 258.042943][ T5911] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 258.073587][ T5911] usb 4-1: USB disconnect, device number 12 [ 258.247779][ T9140] loop7: detected capacity change from 0 to 7 [ 258.284365][ T9140] Dev loop7: unable to read RDB block 7 [ 258.284416][ T9140] loop7: AHDI p1 p2 [ 258.284457][ T9140] loop7: partition table partially beyond EOD, truncated [ 258.284573][ T9140] loop7: p1 start 1702000233 is beyond EOD, truncated [ 259.250160][ T5925] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 259.412359][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.412396][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.412437][ T5925] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 259.412462][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.424389][ T5925] usb 5-1: config 0 descriptor?? [ 259.578705][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'. [ 259.885340][ T5925] ntrig 0003:1B96:000F.000E: unknown main item tag 0x0 [ 259.901342][ T5925] ntrig 0003:1B96:000F.000E: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.4-1/input0 [ 259.922142][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 260.083671][ T5925] ntrig 0003:1B96:000F.000E: Firmware version: 7.15.12.55.4 (3dbf fc9e) [ 260.290949][ T5945] usb 5-1: USB disconnect, device number 15 [ 260.565850][ T5925] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 260.632186][ T9216] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1402'. [ 260.730133][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.730172][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.730216][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 260.730242][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.743429][ T5925] usb 1-1: config 0 descriptor?? [ 260.778843][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.778910][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.810873][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 260.970130][ T991] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 261.089344][ T9225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 261.124079][ T991] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 261.124109][ T991] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 261.124129][ T991] usb 3-1: config 0 has no interface number 0 [ 261.124175][ T991] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.124201][ T991] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 261.124229][ T991] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.124256][ T991] usb 3-1: config 0 interface 52 has no altsetting 0 [ 261.126863][ T991] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 261.126892][ T991] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 261.126913][ T991] usb 3-1: Product: syz [ 261.126927][ T991] usb 3-1: SerialNumber: syz [ 261.247702][ T991] usb 3-1: config 0 descriptor?? [ 261.272688][ T5925] logitech-hidpp-device 0003:046D:C262.000F: item fetching failed at offset 0/3 [ 261.290460][ T5925] logitech-hidpp-device 0003:046D:C262.000F: hidpp_probe:parse failed [ 261.290579][ T5925] logitech-hidpp-device 0003:046D:C262.000F: probe with driver logitech-hidpp-device failed with error -22 [ 261.428472][ T5925] usb 1-1: USB disconnect, device number 16 [ 261.473757][ T991] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input13 [ 261.710782][ T991] usb 3-1: USB disconnect, device number 13 [ 261.710859][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 262.555995][ T9270] netlink: 642 bytes leftover after parsing attributes in process `syz.0.1428'. [ 262.732424][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 263.290234][ T991] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 263.450176][ T991] usb 4-1: Using ep0 maxpacket: 8 [ 263.452943][ T991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.452998][ T991] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.453023][ T991] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 263.456296][ T991] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 263.456330][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.456369][ T991] usb 4-1: Product: syz [ 263.456385][ T991] usb 4-1: Manufacturer: syz [ 263.456400][ T991] usb 4-1: SerialNumber: syz [ 263.554628][ T991] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 263.556492][ T991] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 263.556585][ T991] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 263.795626][ T5911] usb 4-1: USB disconnect, device number 13 [ 263.908498][ T9303] netlink: 'syz.4.1443': attribute type 3 has an invalid length. [ 263.908522][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 263.908545][ T9303] netlink: 'syz.4.1443': attribute type 3 has an invalid length. [ 263.908559][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 264.680147][ T5911] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 264.853233][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 264.867196][ T5911] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 264.867227][ T5911] usb 2-1: config 0 has no interface number 0 [ 264.867279][ T5911] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 264.880181][ T5911] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 264.880213][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.880235][ T5911] usb 2-1: Product: syz [ 264.880252][ T5911] usb 2-1: Manufacturer: syz [ 264.880267][ T5911] usb 2-1: SerialNumber: syz [ 264.932432][ T5911] usb 2-1: config 0 descriptor?? [ 265.566179][ T5911] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input14 [ 265.646389][ T9357] sock: sock_set_timeout: `syz.3.1467' (pid 9357) tries to set negative timeout [ 265.771938][ T5911] usb 2-1: USB disconnect, device number 11 [ 265.934736][ T9364] program syz.3.1470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.942652][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 266.225391][ T9373] batman_adv: batadv0: Adding interface: gretap1 [ 266.225412][ T9373] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.225450][ T9373] batman_adv: batadv0: Interface activated: gretap1 [ 266.607284][ T9388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1480'. [ 267.141784][ T9402] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1487'. [ 267.141813][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1487'. [ 267.544815][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 267.544847][ T9413] netlink: 'syz.0.1492': attribute type 9 has an invalid length. [ 267.589350][ T9413] macvlan2: entered allmulticast mode [ 267.589374][ T9413] veth0_macvtap: entered allmulticast mode [ 268.301526][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 268.335075][ T9442] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.759705][ T9456] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 268.759729][ T9456] netlink: 'syz.0.1512': attribute type 4 has an invalid length. [ 268.759745][ T9456] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1512'. [ 268.759773][ T9456] NCSI netlink: No device for ifindex 458760 [ 268.890386][ T5911] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 268.952334][ T5147] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 268.956875][ T38] kauditd_printk_skb: 230 callbacks suppressed [ 268.956894][ T38] audit: type=1326 audit(268.745:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 268.961103][ T38] audit: type=1326 audit(268.745:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 268.961544][ T38] audit: type=1326 audit(268.755:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 268.962573][ T38] audit: type=1326 audit(268.755:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 268.963741][ T38] audit: type=1326 audit(268.755:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 268.964085][ T38] audit: type=1326 audit(268.755:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 268.965115][ T38] audit: type=1326 audit(268.755:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 268.967594][ T38] audit: type=1326 audit(268.755:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 269.110268][ T5147] usb 5-1: Using ep0 maxpacket: 32 [ 269.120236][ T5147] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 269.120270][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.120292][ T5147] usb 5-1: Product: syz [ 269.120309][ T5147] usb 5-1: Manufacturer: syz [ 269.120326][ T5147] usb 5-1: SerialNumber: syz [ 269.153631][ T5147] usb 5-1: config 0 descriptor?? [ 269.160082][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 269.175471][ T5147] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 269.204852][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 269.205066][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 269.205093][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.243196][ T5911] usb 4-1: config 0 descriptor?? [ 269.271989][ T5911] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 269.520175][ T5192] bcm5974 4-1:0.0: could not read from device [ 269.573458][ T5911] bcm5974 4-1:0.0: could not read from device [ 269.605090][ T5192] bcm5974 4-1:0.0: could not read from device [ 269.671966][ T5911] input: failed to attach handler mousedev to device input15, error: -5 [ 269.710697][ T5911] usb 4-1: USB disconnect, device number 14 [ 269.726223][ T5192] bcm5974 4-1:0.0: could not read from device [ 270.023940][ T5147] gspca_stk1135: reg_w 0x5 err -71 [ 270.025021][ T5147] gspca_stk1135: serial bus timeout: status=0x00 [ 270.025036][ T5147] gspca_stk1135: Sensor write failed [ 270.025073][ T5147] gspca_stk1135: serial bus timeout: status=0x00 [ 270.025084][ T5147] gspca_stk1135: Sensor write failed [ 270.025120][ T5147] gspca_stk1135: serial bus timeout: status=0x00 [ 270.025131][ T5147] gspca_stk1135: Sensor read failed [ 270.025167][ T5147] gspca_stk1135: serial bus timeout: status=0x00 [ 270.025178][ T5147] gspca_stk1135: Sensor read failed [ 270.025186][ T5147] gspca_stk1135: Detected sensor type unknown (0x0) [ 270.025232][ T5147] gspca_stk1135: serial bus timeout: status=0x00 [ 270.025243][ T5147] gspca_stk1135: Sensor read failed [ 270.025280][ T5147] gspca_stk1135: serial bus timeout: status=0x00 [ 270.025291][ T5147] gspca_stk1135: Sensor read failed [ 270.025327][ T5147] gspca_stk1135: serial bus timeout: status=0x00 [ 270.025337][ T5147] gspca_stk1135: Sensor write failed [ 270.025374][ T5147] gspca_stk1135: serial bus timeout: status=0x00 [ 270.025384][ T5147] gspca_stk1135: Sensor write failed [ 270.025477][ T5147] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 270.050738][ T5147] usb 5-1: USB disconnect, device number 16 [ 270.208552][ T9482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.480108][ T9491] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1527'. [ 271.010657][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 271.180196][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 271.185590][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.185616][ T10] usb 1-1: config 0 has no interface number 0 [ 271.188964][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 271.188992][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.189013][ T10] usb 1-1: Product: syz [ 271.189028][ T10] usb 1-1: Manufacturer: syz [ 271.189044][ T10] usb 1-1: SerialNumber: syz [ 271.260888][ T10] usb 1-1: config 0 descriptor?? [ 271.265180][ T10] quatech2 1-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 271.509482][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 271.535843][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 271.907673][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 271.920322][ T10] usb 1-1: USB disconnect, device number 17 [ 271.933792][ T9515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.985949][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 272.013833][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 272.014479][ T10] quatech2 1-1:0.1: device disconnected [ 272.463635][ T9515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.120965][ T38] audit: type=1804 audit(272.895:648): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1553" name="/newroot/305/bus" dev="tmpfs" ino=1565 res=1 errno=0 [ 273.188033][ T9515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.526320][ T9515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.660175][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 273.700177][ T991] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 273.823516][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 273.826054][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.826079][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.829516][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.829546][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.829568][ T10] usb 5-1: Product: syz [ 273.829584][ T10] usb 5-1: Manufacturer: syz [ 273.829601][ T10] usb 5-1: SerialNumber: syz [ 273.880121][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 273.885076][ T8891] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.905870][ T991] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 273.905896][ T991] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 273.905914][ T991] usb 1-1: config 3 has no interface number 0 [ 273.905960][ T991] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.905987][ T991] usb 1-1: config 3 interface 45 has no altsetting 0 [ 273.950146][ T991] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 273.950177][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.950197][ T991] usb 1-1: Product: syz [ 273.950212][ T991] usb 1-1: Manufacturer: syz [ 273.950226][ T991] usb 1-1: SerialNumber: syz [ 273.978732][ T1442] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.056105][ T8891] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.134933][ T8886] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.215169][ T10] usb 5-1: 0:2 : does not exist [ 274.258933][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 274.323961][ T10] usb 5-1: USB disconnect, device number 17 [ 274.377687][ T991] usb 1-1: USB disconnect, device number 18 [ 274.780054][ T5911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.930153][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 274.948688][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.961480][ T5911] usb 3-1: config 9 has an invalid interface number: 48 but max is 0 [ 274.961511][ T5911] usb 3-1: config 9 has no interface number 0 [ 274.961547][ T5911] usb 3-1: config 9 interface 48 has no altsetting 0 [ 274.964897][ T5911] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 274.964927][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.964949][ T5911] usb 3-1: Product: syz [ 274.964963][ T5911] usb 3-1: Manufacturer: syz [ 274.964978][ T5911] usb 3-1: SerialNumber: syz [ 275.295875][ T5911] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 275.842505][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'. [ 275.842535][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1582'. [ 275.842555][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'. [ 275.842800][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1582'. [ 275.842821][ T9614] netlink: 'syz.1.1582': attribute type 6 has an invalid length. [ 275.897777][ T5911] gspca_vc032x: reg_r err -71 [ 275.897796][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897806][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897815][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897824][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897832][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897841][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897849][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897859][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897868][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897877][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897886][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897895][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897904][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897913][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897921][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897931][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897939][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897948][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897957][ T5911] gspca_vc032x: I2c Bus Busy Wait 00 [ 275.897965][ T5911] gspca_vc032x: Unknown sensor... [ 275.898046][ T5911] vc032x 3-1:9.48: probe with driver vc032x failed with error -22 [ 275.910325][ T5911] usb 3-1: USB disconnect, device number 14 [ 276.580471][ T5911] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 276.742214][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 276.744886][ T5911] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 276.744913][ T5911] usb 5-1: config 0 has no interface number 0 [ 276.749299][ T5911] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 276.749331][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.749355][ T5911] usb 5-1: Product: syz [ 276.749371][ T5911] usb 5-1: Manufacturer: syz [ 276.749387][ T5911] usb 5-1: SerialNumber: syz [ 276.827504][ T5911] usb 5-1: config 0 descriptor?? [ 276.842576][ T5911] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 277.056910][ T5911] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 277.082208][ T5911] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 277.481731][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 277.483121][ T5931] usb 5-1: USB disconnect, device number 18 [ 277.506205][ T5931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 277.554329][ T5931] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 277.554968][ T5931] quatech2 5-1:0.51: device disconnected [ 277.654970][ T9669] program syz.0.1606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.894974][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 279.490445][ T5925] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 279.536678][ T9735] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1634'. [ 279.536713][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 279.643457][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 279.645915][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.645949][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.645992][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.646019][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.662037][ T5925] usb 5-1: config 0 descriptor?? [ 279.683076][ T5925] hub 5-1:0.0: USB hub found [ 279.880097][ T5911] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 279.906893][ T5925] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 280.030034][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 280.033323][ T5911] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 280.033345][ T5911] usb 4-1: config 0 has no interface number 0 [ 280.033383][ T5911] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 280.033407][ T5911] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 280.036846][ T5911] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 280.036877][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.036901][ T5911] usb 4-1: Product: syz [ 280.036917][ T5911] usb 4-1: Manufacturer: syz [ 280.036933][ T5911] usb 4-1: SerialNumber: syz [ 280.131439][ T5911] usb 4-1: config 0 descriptor?? [ 280.138595][ T9739] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 280.138894][ T9739] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 280.350666][ T5925] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 280.377623][ T5147] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 280.384852][ T9739] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 280.384986][ T9739] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 280.540210][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 280.552240][ T5147] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 280.552271][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 280.552294][ T5147] usb 1-1: Product: syz [ 280.552309][ T5147] usb 1-1: Manufacturer: syz [ 280.552323][ T5147] usb 1-1: SerialNumber: syz [ 280.562223][ T5147] usb 1-1: config 0 descriptor?? [ 280.621869][ T46] usb 5-1: USB disconnect, device number 19 [ 280.791018][ T5911] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 280.791384][ T5911] asix 4-1:0.251: probe with driver asix failed with error -524 [ 280.819157][ T46] usb 1-1: USB disconnect, device number 19 [ 281.016958][ T5925] usb 4-1: USB disconnect, device number 15 [ 281.638643][ T9785] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1657'. [ 281.860208][ T991] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 282.030220][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 282.034514][ T991] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 282.034547][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 282.034569][ T991] usb 3-1: SerialNumber: syz [ 282.042359][ T991] usb 3-1: config 0 descriptor?? [ 282.054470][ T991] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 282.056306][ T991] usb 3-1: Detected FT232A [ 282.062021][ T991] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 282.260220][ T5911] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 282.268184][ T991] usb 3-1: USB disconnect, device number 15 [ 282.288976][ T991] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 282.289431][ T991] ftdi_sio 3-1:0.0: device disconnected [ 282.424338][ T5911] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 282.424370][ T5911] usb 2-1: config 0 has no interface number 0 [ 282.424405][ T5911] usb 2-1: config 0 interface 106 has no altsetting 0 [ 282.427524][ T5911] usb 2-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 282.427577][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.427601][ T5911] usb 2-1: Product: syz [ 282.427617][ T5911] usb 2-1: Manufacturer: syz [ 282.427633][ T5911] usb 2-1: SerialNumber: syz [ 282.445427][ T5911] usb 2-1: config 0 descriptor?? [ 282.707201][ T5911] usb 2-1: USB disconnect, device number 12 [ 283.880095][ T5911] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 283.976565][ T9851] netlink: 'syz.0.1689': attribute type 11 has an invalid length. [ 283.976590][ T9851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1689'. [ 284.053131][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 284.055658][ T5911] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 284.055693][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.092073][ T5911] pvrusb2: Hardware description: Terratec Grabster AV400 [ 284.092096][ T5911] pvrusb2: ********** [ 284.092103][ T5911] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 284.092117][ T5911] pvrusb2: Important functionality might not be entirely working. [ 284.092127][ T5911] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 284.092140][ T5911] pvrusb2: ********** [ 284.320710][ T2369] pvrusb2: Invalid write control endpoint [ 284.530435][ T5925] usb 5-1: USB disconnect, device number 20 [ 284.583591][ T2369] pvrusb2: Invalid write control endpoint [ 284.583609][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 284.583620][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 284.583636][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 284.583664][ T2369] pvrusb2: Device being rendered inoperable [ 284.589638][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 284.637714][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 284.670251][ T2369] pvrusb2: Attached sub-driver cx25840 [ 284.670278][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 284.670291][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 285.603274][ T9881] input: syz1 as /devices/virtual/input/input16 [ 286.780270][ T5911] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 286.952672][ T5911] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 286.952699][ T5911] usb 3-1: config 0 has no interface number 0 [ 286.955270][ T5911] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 286.955297][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.955316][ T5911] usb 3-1: Product: syz [ 286.955331][ T5911] usb 3-1: Manufacturer: syz [ 286.955344][ T5911] usb 3-1: SerialNumber: syz [ 287.006883][ T5911] usb 3-1: config 0 descriptor?? [ 287.247767][ T5911] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 287.308357][ T9923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1722'. [ 287.326234][ T5911] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 287.326314][ T5911] dib0700: firmware download failed at 7 with -22 [ 287.348892][ T5911] usb 3-1: USB disconnect, device number 16 [ 287.685300][ T9939] vivid-003: disconnect [ 287.714336][ T9938] vivid-003: reconnect [ 287.882322][ T9941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.886029][ T9941] bond0: (slave bond1): Enslaving as an active interface with an up link [ 289.079540][ T9987] dummy0: entered promiscuous mode [ 289.930232][ T46] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 290.084932][ T46] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 290.084961][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.112381][ T46] usb 1-1: config 0 descriptor?? [ 290.124507][ T46] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 290.351162][ T46] gspca_sn9c2028: read1 error -32 [ 290.351830][ T46] gspca_sn9c2028: read1 error -32 [ 290.429297][ T38] audit: type=1326 audit(290.215:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 290.429596][ T38] audit: type=1326 audit(290.215:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 290.429874][ T38] audit: type=1326 audit(290.215:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 290.498551][ T38] audit: type=1326 audit(290.235:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 290.499009][ T38] audit: type=1326 audit(290.285:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 290.499056][ T38] audit: type=1326 audit(290.285:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 290.499101][ T38] audit: type=1326 audit(290.285:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 290.530197][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 290.570844][ T46] usb 1-1: USB disconnect, device number 20 [ 290.679077][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1769'. [ 290.690278][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 290.692951][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 290.692982][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.696128][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 290.696158][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.696180][ T9] usb 4-1: Product: syz [ 290.696196][ T9] usb 4-1: Manufacturer: syz [ 290.696212][ T9] usb 4-1: SerialNumber: syz [ 290.762323][ T9] usb 4-1: config 0 descriptor?? [ 290.768868][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 290.768917][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 291.110498][ T46] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 291.271262][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.271300][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 291.271368][ T46] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 291.271395][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.279314][ T46] usb 5-1: config 0 descriptor?? [ 291.301228][T10037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 291.380578][ T9] em28xx 4-1:0.0: chip ID is em2874 [ 291.597594][ T5911] usb 4-1: USB disconnect, device number 16 [ 291.599759][ T5911] em28xx 4-1:0.0: Disconnecting em28xx [ 291.631456][ T5911] em28xx 4-1:0.0: Freeing device [ 291.742623][ T46] glorious 0003:22D4:1503.0011: item fetching failed at offset 5/7 [ 291.746756][ T46] glorious 0003:22D4:1503.0011: probe with driver glorious failed with error -22 [ 291.949551][ T5925] usb 5-1: USB disconnect, device number 21 [ 292.027784][T10061] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 292.122048][T10067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.368043][T10078] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 292.590846][T10075] cgroup: fork rejected by pids controller in /syz3 [ 292.772604][ T5911] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 292.931350][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 292.934296][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 292.934332][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.972432][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.972566][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.972591][ T5911] usb 5-1: Product: syz [ 292.972607][ T5911] usb 5-1: Manufacturer: syz [ 292.972624][ T5911] usb 5-1: SerialNumber: syz [ 293.032238][ T5911] usb 5-1: config 0 descriptor?? [ 293.056518][ T5911] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 293.056554][ T5911] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 293.781172][ T5911] em28xx 5-1:0.0: chip ID is em2765 [ 293.969499][ T5911] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 293.970298][ T5911] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 293.970336][ T5911] em28xx 5-1:0.0: No AC97 audio processor [ 294.010156][ T5911] usb 5-1: USB disconnect, device number 22 [ 294.012415][ T5911] em28xx 5-1:0.0: Disconnecting em28xx [ 294.040888][ T5911] em28xx 5-1:0.0: Freeing device [ 294.276977][T10471] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1804'. [ 294.392659][T10470] tap0: tun_chr_ioctl cmd 2147767520 [ 294.879523][T10491] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 294.879549][T10491] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1813'. [ 294.879568][T10491] netlink: 97 bytes leftover after parsing attributes in process `syz.4.1813'. [ 295.110110][ T991] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 295.272597][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.272653][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.272695][ T991] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 295.272722][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.323735][ T991] usb 2-1: config 0 descriptor?? [ 295.753834][ T991] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 295.753875][ T991] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 295.790371][ T991] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 296.140942][ T5147] usb 2-1: USB disconnect, device number 13 [ 296.269434][T10525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1829'. [ 296.269462][T10525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1829'. [ 297.210208][ T5147] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 297.241053][T10555] program syz.3.1843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.361018][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 297.363812][ T5147] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 297.363846][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.378024][ T5147] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 297.378057][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.378081][ T5147] usb 1-1: Product: syz [ 297.378098][ T5147] usb 1-1: Manufacturer: syz [ 297.378114][ T5147] usb 1-1: SerialNumber: syz [ 297.402390][ T5147] usb 1-1: config 0 descriptor?? [ 297.427043][ T5147] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 297.427086][ T5147] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 297.790161][ T46] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 297.948416][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.948453][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.948551][ T46] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 297.948577][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.986525][ T46] usb 3-1: config 0 descriptor?? [ 298.018417][ T5147] em28xx 1-1:0.0: unknown em28xx chip ID (41) [ 298.219357][ T5147] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 298.220623][ T5147] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 298.220644][ T5147] em28xx 1-1:0.0: No AC97 audio processor [ 298.255715][ T5147] usb 1-1: USB disconnect, device number 21 [ 298.272030][ T5147] em28xx 1-1:0.0: Disconnecting em28xx [ 298.296513][ T5147] em28xx 1-1:0.0: Freeing device [ 298.429915][T10569] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1849'. [ 298.434701][ T46] sony 0003:054C:024B.0013: unexpected long global item [ 298.435724][ T46] sony 0003:054C:024B.0013: parse failed [ 298.435840][ T46] sony 0003:054C:024B.0013: probe with driver sony failed with error -22 [ 298.573499][T10573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.646283][ T46] usb 3-1: USB disconnect, device number 17 [ 299.270088][ T5147] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 299.430146][ T5147] usb 4-1: Using ep0 maxpacket: 32 [ 299.433073][ T5147] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 299.433103][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.439227][ T5147] usb 4-1: config 0 descriptor?? [ 299.473525][ T5147] gspca_main: sq930x-2.14.0 probing 041e:403c [ 300.310070][ T5147] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 300.370165][ T5147] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 300.375905][ T5147] usb 4-1: USB disconnect, device number 17 [ 300.470216][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 300.626388][ T46] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 300.626423][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.626447][ T46] usb 3-1: Product: syz [ 300.626464][ T46] usb 3-1: Manufacturer: syz [ 300.626480][ T46] usb 3-1: SerialNumber: syz [ 300.657990][ T46] usb 3-1: config 0 descriptor?? [ 300.666381][ T46] ch341 3-1:0.0: ch341-uart converter detected [ 301.482109][ T46] usb 3-1: failed to send control message: -71 [ 301.482164][ T46] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 301.502181][ T46] usb 3-1: USB disconnect, device number 18 [ 301.504846][ T46] ch341 3-1:0.0: device disconnected [ 302.428100][T10641] sp0: Synchronizing with TNC [ 302.464974][T10638] [U] è`` [ 302.597648][T10647] ucma_write: process 803 (syz.2.1884) changed security contexts after opening file descriptor, this is not allowed. [ 302.624199][T10648] netlink: 'syz.0.1885': attribute type 2 has an invalid length. [ 303.630295][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 303.790288][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 303.792579][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 303.792605][ T9] usb 1-1: config 0 has no interface number 0 [ 303.792653][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 303.792682][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 303.795935][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 303.795963][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.795984][ T9] usb 1-1: Product: syz [ 303.796000][ T9] usb 1-1: Manufacturer: syz [ 303.796015][ T9] usb 1-1: SerialNumber: syz [ 303.882307][ T9] usb 1-1: config 0 descriptor?? [ 303.883512][T10668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.522557][ T9] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 304.587757][ T9] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 304.712389][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 304.750809][ T46] usb 1-1: USB disconnect, device number 22 [ 304.980604][ T46] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 305.199058][T10704] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1909'. [ 305.865443][T10725] team0: Device macvlan3 is already an upper device of the team interface [ 306.571518][T10739] ptrace attach of "./syz-executor exec"[5848] was attempted by "TIPCv2 Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 307.530058][ T5911] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 307.694006][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.694060][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.694103][ T5911] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 307.694140][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.740175][ T5911] usb 4-1: config 0 descriptor?? [ 308.159765][ T5911] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 308.159804][ T5911] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 308.159830][ T5911] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 308.159857][ T5911] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 308.159882][ T5911] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 308.159908][ T5911] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 308.211731][ T5911] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 308.217063][ T5911] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 308.356724][T10788] mkiss: ax0: crc mode is auto. [ 308.555798][ T5911] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 308.555854][ T5911] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 308.558882][ T5911] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 308.609321][ T5911] usb 4-1: USB disconnect, device number 18 [ 308.654220][ T38] audit: type=1326 audit(308.445:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10794 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6055ddebe9 code=0x7ffc0000 [ 308.659908][ T38] audit: type=1326 audit(308.445:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10794 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6055ddebe9 code=0x7ffc0000 [ 308.661045][ T38] audit: type=1326 audit(308.455:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10794 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6055ddebe9 code=0x7ffc0000 [ 308.667172][ T38] audit: type=1326 audit(308.455:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10794 comm="syz.2.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6055ddebe9 code=0x7ffc0000 [ 309.120130][ T5945] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 309.140185][T10809] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1955'. [ 309.286507][ T5945] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 309.286541][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.286563][ T5945] usb 3-1: Product: syz [ 309.286580][ T5945] usb 3-1: Manufacturer: syz [ 309.286595][ T5945] usb 3-1: SerialNumber: syz [ 309.298230][ T5945] usb 3-1: config 0 descriptor?? [ 309.500237][ T5147] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 309.538124][ T5945] usb 3-1: ignoring: probably an ADSL modem [ 309.650123][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 309.653825][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.653859][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.653969][ T5147] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 309.653997][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.660163][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 309.687479][ T5147] usb 1-1: config 0 descriptor?? [ 309.820382][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 309.831347][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 309.831375][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.831396][ T9] usb 2-1: Product: syz [ 309.831411][ T9] usb 2-1: Manufacturer: syz [ 309.831425][ T9] usb 2-1: SerialNumber: syz [ 309.874148][ T9] usb 2-1: config 0 descriptor?? [ 309.889695][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 309.952062][ T5945] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 310.148994][ T5147] corsair 0003:1B1C:1B02.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 310.177981][ T5945] usb 3-1: USB disconnect, device number 19 [ 310.328402][ T9] gspca_se401: ExtraFeatures: 24 [ 310.531944][ T9] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 310.540379][ T5945] usb 1-1: USB disconnect, device number 23 [ 310.608550][ T9] usb 2-1: USB disconnect, device number 14 [ 313.458713][T10911] misc userio: Can't change port type on an already running userio instance [ 313.921229][T10920] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2007'. [ 314.362504][ T5945] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 314.530494][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 314.545527][ T5945] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.545565][ T5945] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.545597][ T5945] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.545626][ T5945] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.545678][ T5945] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.545708][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.786321][ T5945] usb 4-1: GET_CAPABILITIES returned 0 [ 314.786374][ T5945] usbtmc 4-1:16.0: can't read capabilities [ 314.984983][ T991] usb 4-1: USB disconnect, device number 19 [ 315.340218][ T5945] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 315.496925][ T5945] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 315.496960][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.496984][ T5945] usb 2-1: Product: syz [ 315.496999][ T5945] usb 2-1: Manufacturer: syz [ 315.497017][ T5945] usb 2-1: SerialNumber: syz [ 315.517886][ T5945] usb 2-1: config 0 descriptor?? [ 316.392230][ T5945] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 316.392264][ T5945] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 316.392550][ T5945] asix 2-1:0.0: probe with driver asix failed with error -71 [ 316.414605][ T5945] usb 2-1: USB disconnect, device number 15 [ 316.673984][ T9] kernel write not supported for file /uhid (pid: 9 comm: kworker/0:0) [ 316.804772][T11000] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2043'. [ 317.520183][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 317.620130][ T46] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 317.702899][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.702930][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.704535][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.704566][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.704589][ T10] usb 3-1: SerialNumber: syz [ 317.770233][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 317.798711][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.800388][ T46] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 317.800444][ T46] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 317.800473][ T46] usb 5-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0 [ 317.800496][ T46] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.805147][ T46] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 317.805177][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.805198][ T46] usb 5-1: Product: syz [ 317.805212][ T46] usb 5-1: Manufacturer: syz [ 317.805225][ T46] usb 5-1: SerialNumber: syz [ 317.976815][ T10] usb 3-1: 0:2 : does not exist [ 318.033402][ T10] usb 3-1: USB disconnect, device number 20 [ 318.121659][ T46] usb 5-1: USB disconnect, device number 23 [ 318.800142][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 318.871349][T11057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2069'. [ 318.871397][T11057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2069'. [ 318.953411][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 318.955866][ T46] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 318.955895][ T46] usb 1-1: config 0 has no interface number 0 [ 318.955955][ T46] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.955987][ T46] usb 1-1: config 0 interface 85 has no altsetting 0 [ 318.964663][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 318.964700][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.964726][ T46] usb 1-1: Product: syz [ 318.964745][ T46] usb 1-1: Manufacturer: syz [ 318.964761][ T46] usb 1-1: SerialNumber: syz [ 318.982159][ T46] usb 1-1: config 0 descriptor?? [ 319.619046][ T46] appletouch 1-1:0.85: Geyser mode initialized. [ 319.622873][ T46] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input20 [ 319.755420][T11072] hsr0: entered promiscuous mode [ 319.755792][T11072] macsec1: entered allmulticast mode [ 319.755808][T11072] hsr0: entered allmulticast mode [ 319.755831][T11072] hsr_slave_0: entered allmulticast mode [ 319.755856][T11072] hsr_slave_1: entered allmulticast mode [ 319.785868][T11072] hsr0: left allmulticast mode [ 319.785906][T11072] hsr_slave_0: left allmulticast mode [ 319.785933][T11072] hsr_slave_1: left allmulticast mode [ 319.834398][ T5925] usb 1-1: USB disconnect, device number 24 [ 319.834495][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 319.945107][ T5925] appletouch 1-1:0.85: input: appletouch disconnected [ 320.475108][ T5925] IPVS: starting estimator thread 0... [ 320.487681][T11087] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 320.560133][T11088] IPVS: using max 7 ests per chain, 16800 per kthread [ 321.363239][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2101'. [ 321.462455][T11126] sp0: Synchronizing with TNC [ 321.580205][ T991] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 321.760185][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 321.763546][ T991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.763574][ T991] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.778934][ T991] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.778966][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.778989][ T991] usb 3-1: Product: syz [ 321.779005][ T991] usb 3-1: Manufacturer: syz [ 321.779021][ T991] usb 3-1: SerialNumber: syz [ 322.221723][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.221921][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.251115][ T991] usb 3-1: 0:2 : does not exist [ 322.671149][ T991] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 322.790423][ T991] usb 3-1: USB disconnect, device number 21 [ 324.579651][T11230] misc userio: Invalid payload size [ 325.218042][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'. [ 325.915525][T11264] netlink: 'syz.2.2153': attribute type 2 has an invalid length. [ 326.641000][T11286] input: syz0 as /devices/virtual/input/input21 [ 326.980151][ T991] kernel write not supported for file /media1 (pid: 991 comm: kworker/0:2) [ 327.641395][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.644120][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.414078][ T46] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 328.572674][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 328.572716][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 328.572739][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.606698][ T46] usb 4-1: config 0 descriptor?? [ 328.834041][ T38] audit: type=1400 audit(329.627:660): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=11348 comm="syz.1.2193" key_serial=1030528191 key_desc="_uid_ses.0" [ 329.490637][ T46] video4linux radio48: keene_cmd_main failed (-71) [ 329.490666][ T46] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 329.496855][ T46] usb 4-1: USB disconnect, device number 20 [ 329.563961][ T10] kernel write not supported for file /input/event0 (pid: 10 comm: kworker/0:1) [ 329.653415][T11375] input: syz0 as /devices/virtual/input/input22 [ 329.930139][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 330.080522][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 330.088040][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 330.088073][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.088097][ T10] usb 2-1: Product: syz [ 330.088113][ T10] usb 2-1: Manufacturer: syz [ 330.088129][ T10] usb 2-1: SerialNumber: syz [ 330.125245][ T10] usb 2-1: config 0 descriptor?? [ 330.166198][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 330.396439][ T38] audit: type=1800 audit(331.157:661): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2214" name="nullb0" dev="devtmpfs" ino=3142 res=0 errno=0 [ 330.881860][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 330.977811][ T10] gspca_sonixj: reg_r err -71 [ 330.977919][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 331.002471][ T10] usb 2-1: USB disconnect, device number 16 [ 331.148659][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 331.314864][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2225'. [ 331.314973][T11417] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2225'. [ 331.689523][T11424] cgroup: fork rejected by pids controller in /syz4 [ 332.143225][ T46] kernel read not supported for file /usbmon9 (pid: 46 comm: kworker/1:1) [ 332.972151][T12052] tmpfs: Cannot retroactively limit size [ 333.690082][ T991] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 333.860077][ T991] usb 1-1: Using ep0 maxpacket: 32 [ 333.866244][ T991] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.866279][ T991] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.866304][ T991] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.867869][ T991] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 333.867897][ T991] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 333.867919][ T991] usb 1-1: Product: syz [ 333.874096][ T991] usb 1-1: config 0 descriptor?? [ 334.078173][T12079] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 334.375771][ T991] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 334.375817][ T991] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 334.375845][ T991] waterforce 0003:1044:7A4D.0016: item fetching failed at offset 2/5 [ 334.376685][ T991] waterforce 0003:1044:7A4D.0016: hid parse failed with -22 [ 334.376799][ T991] waterforce 0003:1044:7A4D.0016: probe with driver waterforce failed with error -22 [ 334.490973][T12092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.628940][ T10] usb 1-1: USB disconnect, device number 25 [ 334.987084][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 335.420666][T12116] netlink: 564 bytes leftover after parsing attributes in process `syz.2.2273'. [ 335.420710][T12116] netlink: 564 bytes leftover after parsing attributes in process `syz.2.2273'. [ 336.629425][T12165] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 336.629451][T12165] syzkaller1: owner set to 778 [ 336.750161][ T5945] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 336.910202][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 336.913536][ T5945] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.913564][ T5945] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.913589][ T5945] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.913614][ T5945] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.913657][ T5945] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.913680][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.152520][ T5945] usb 5-1: GET_CAPABILITIES returned 0 [ 337.152567][ T5945] usbtmc 5-1:16.0: can't read capabilities [ 337.341644][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 337.346178][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 337.346427][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 337.381460][ T10] usb 5-1: USB disconnect, device number 24 [ 338.382248][ T5945] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 338.557602][T12215] program syz.0.2318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.560068][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 338.563001][ T5945] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 338.569242][ T5945] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 338.569273][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.569297][ T5945] usb 3-1: Product: syz [ 338.569311][ T5945] usb 3-1: Manufacturer: syz [ 338.569328][ T5945] usb 3-1: SerialNumber: syz [ 338.588227][ T5945] usb 3-1: config 0 descriptor?? [ 338.604926][ T5945] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 338.605018][ T5945] usb 3-1: setting power ON [ 338.605830][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 338.655172][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.655932][ T5945] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 338.655986][ T5945] usb 3-1: media controller created [ 338.829774][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.837757][T12205] dvb-usb: bulk message failed: -22 (3/0) [ 338.837781][T12205] dvb-usb: bulk message failed: -22 (5/0) [ 338.863031][T12205] dvb-usb: bulk message failed: -22 (3/0) [ 338.900702][ T5945] usb 3-1: selecting invalid altsetting 6 [ 338.900725][ T5945] usb 3-1: digital interface selection failed (-22) [ 338.900741][ T5945] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 338.902094][ T5945] usb 3-1: setting power OFF [ 338.902277][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 338.902299][ T5945] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 338.902313][ T5945] (NULL device *): no alternate interface [ 339.062365][ T5945] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 339.097418][ T5945] usb 3-1: USB disconnect, device number 22 [ 340.850310][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 341.000149][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 341.002811][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.002838][ T10] usb 5-1: config 0 has no interface number 0 [ 341.002896][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.002925][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.002968][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 341.003005][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.071051][ T10] usb 5-1: config 0 descriptor?? [ 341.420479][T12288] tun0: tun_chr_ioctl cmd 1074025680 [ 341.700739][ T10] uclogic 0003:28BD:0094.0017: pen parameters not found [ 341.700769][ T10] uclogic 0003:28BD:0094.0017: interface is invalid, ignoring [ 341.897918][ T5945] usb 5-1: USB disconnect, device number 25 [ 342.391919][T12321] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2367'. [ 342.391946][T12321] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 342.391963][T12321] openvswitch: netlink: Message has 8454 unknown bytes. [ 342.860606][ T38] audit: type=1326 audit(343.637:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.860666][ T38] audit: type=1326 audit(343.647:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.931039][ T38] audit: type=1326 audit(343.727:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.931105][ T38] audit: type=1326 audit(343.727:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.931146][ T38] audit: type=1326 audit(343.727:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.932173][ T38] audit: type=1326 audit(343.727:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.932216][ T38] audit: type=1326 audit(343.727:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.932250][ T38] audit: type=1326 audit(343.727:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.932451][ T38] audit: type=1326 audit(343.727:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd96b76ebe9 code=0x7ffc0000 [ 342.936209][ T38] audit: type=1326 audit(343.727:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 343.189345][T12353] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 344.191997][T12386] Invalid logical block size (5) [ 344.630084][ T5945] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 344.797289][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 344.806334][ T5945] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 344.806370][ T5945] usb 4-1: config 0 has no interface number 0 [ 344.806426][ T5945] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.806457][ T5945] usb 4-1: config 0 interface 85 has no altsetting 0 [ 344.814534][ T5945] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 344.814564][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.814585][ T5945] usb 4-1: Product: syz [ 344.814601][ T5945] usb 4-1: Manufacturer: syz [ 344.814616][ T5945] usb 4-1: SerialNumber: syz [ 344.883035][ T5945] usb 4-1: config 0 descriptor?? [ 345.016245][T12413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.067363][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'. [ 345.511963][ T5945] appletouch 4-1:0.85: Geyser mode initialized. [ 345.515221][ T5945] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input23 [ 345.727600][ T9] usb 4-1: USB disconnect, device number 21 [ 345.727688][ C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 345.877693][ T9] appletouch 4-1:0.85: input: appletouch disconnected [ 346.370100][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 346.900310][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 347.484068][T12470] input: syz0 as /devices/virtual/input/input24 [ 351.097224][T12582] netlink: 'syz.3.2485': attribute type 2 has an invalid length. [ 351.097258][T12582] netlink: 'syz.3.2485': attribute type 1 has an invalid length. [ 351.325300][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 351.775581][T12604] hsr0: left promiscuous mode [ 351.775777][T12604] ipvlan2: entered promiscuous mode [ 351.775845][T12604] ipvlan2: entered allmulticast mode [ 351.775860][T12604] hsr0: entered allmulticast mode [ 351.775875][T12604] hsr_slave_0: entered allmulticast mode [ 351.775898][T12604] hsr_slave_1: entered allmulticast mode [ 352.455949][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 352.455968][ T38] audit: type=1326 audit(353.247:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12622 comm="syz.0.2505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3167ffebe9 code=0x0 [ 353.205299][T12652] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2516'. [ 353.750254][ T46] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 353.920135][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 353.922882][ T46] usb 1-1: config 0 has an invalid interface number: 203 but max is 0 [ 353.922911][ T46] usb 1-1: config 0 has no interface number 0 [ 353.922998][ T46] usb 1-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 353.960036][ T46] usb 1-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 353.960071][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.960097][ T46] usb 1-1: Product: syz [ 353.960114][ T46] usb 1-1: Manufacturer: syz [ 353.960133][ T46] usb 1-1: SerialNumber: syz [ 353.993468][ T46] usb 1-1: config 0 descriptor?? [ 353.997523][T12660] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.032682][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.533054][ T38] audit: type=1326 audit(355.327:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12679 comm="syz.2.2530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6055ddebe9 code=0x0 [ 355.026480][T12690] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2531'. [ 355.901669][ T10] usb 1-1: USB disconnect, device number 26 [ 356.346287][ T5925] kernel read not supported for file /dsp (pid: 5925 comm: kworker/1:4) [ 356.820576][ T38] audit: type=1326 audit(357.607:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12719 comm="syz.1.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x7fc00000 [ 356.916165][T12728] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 356.916192][T12728] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2549'. [ 358.577103][T12786] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2577'. [ 358.610284][ T46] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 358.760144][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 358.775806][ T46] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 358.775839][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.775861][ T46] usb 3-1: Product: syz [ 358.775876][ T46] usb 3-1: Manufacturer: syz [ 358.775891][ T46] usb 3-1: SerialNumber: syz [ 358.803405][ T46] usb 3-1: config 0 descriptor?? [ 359.024442][ T46] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 359.378582][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378622][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378652][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378682][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378712][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378742][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378773][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378802][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378832][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.378861][ T9] hid-generic 0000:0006:0007.0018: unknown main item tag 0x0 [ 359.475319][ T9] hid-generic 0000:0006:0007.0018: hidraw0: HID v0.0b Device [syz1] on syz1 [ 359.628122][ T46] usb write operation failed. (-71) [ 359.634904][ T46] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 359.635735][ T46] dvbdev: DVB: registering new adapter (Terratec H7) [ 359.635793][ T46] usb 3-1: media controller created [ 359.653458][ T46] usb read operation failed. (-71) [ 359.654065][ T46] usb write operation failed. (-71) [ 359.666187][ T46] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 359.698640][ T46] usb 3-1: USB disconnect, device number 23 [ 359.814571][T12802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.814829][T12802] FAT-fs (loop1): unable to read boot sector [ 360.048091][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 360.239454][T12813] netlink: 'syz.3.2588': attribute type 83 has an invalid length. [ 360.596419][T12826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.599521][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'. [ 360.864089][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 360.907368][T12839] : entered promiscuous mode [ 361.189853][T12849] netlink: 'syz.0.2607': attribute type 1 has an invalid length. [ 361.424165][ T38] audit: type=1326 audit(362.217:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12855 comm="syz.2.2610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6055ddebe9 code=0x0 [ 362.073795][ T38] audit: type=1326 audit(362.867:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12879 comm="syz.1.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd96b76ebe9 code=0x0 [ 362.268773][T12885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2623'. [ 362.383975][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2624'. [ 362.649212][T12895] sp0: Synchronizing with TNC [ 363.485630][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2636'. [ 368.296152][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 368.970138][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2643'. [ 368.970178][T12929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2643'. [ 369.031235][ T1826] kernel write not supported for file /snd/seq (pid: 1826 comm: kworker/0:3) [ 375.389955][ C1] sched: DL replenish lagged too much [ 379.026197][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.048768][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.057624][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.059523][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.077737][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.170127][ T5856] Bluetooth: hci5: command tx timeout [ 383.250140][ T5856] Bluetooth: hci5: command tx timeout [ 383.671804][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.671879][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.921268][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 384.924929][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 384.926421][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 384.927973][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 384.928838][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.330189][ T59] Bluetooth: hci5: command tx timeout [ 387.190380][ T59] Bluetooth: hci6: command tx timeout [ 387.263437][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 387.268471][ T5856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 387.269983][ T5856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 387.293056][ T5856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 387.310609][ T5856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.430119][ T5156] Bluetooth: hci5: command tx timeout [ 389.361943][ T5156] Bluetooth: hci6: command tx timeout [ 389.411249][ T5156] Bluetooth: hci7: command tx timeout [ 389.747098][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 389.753961][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 389.758129][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 389.761210][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 389.770307][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 391.149607][ T5156] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 391.172267][ T5156] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 391.173693][ T5156] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 391.184035][ T5156] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 391.185517][ T5156] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 391.410176][ T59] Bluetooth: hci6: command tx timeout [ 391.500232][ T59] Bluetooth: hci7: command tx timeout [ 391.675082][T12977] chnl_net:caif_netlink_parms(): no params data found [ 391.725693][T12973] chnl_net:caif_netlink_parms(): no params data found [ 391.751626][T12969] chnl_net:caif_netlink_parms(): no params data found [ 392.213177][ T59] Bluetooth: hci8: command tx timeout [ 393.330186][ T59] Bluetooth: hci9: command tx timeout [ 393.500108][ T59] Bluetooth: hci6: command tx timeout [ 393.577894][ T59] Bluetooth: hci7: command tx timeout [ 394.290263][ T59] Bluetooth: hci8: command tx timeout [ 395.418623][ T59] Bluetooth: hci9: command tx timeout [ 395.658912][ T59] Bluetooth: hci7: command tx timeout [ 396.393394][ T59] Bluetooth: hci8: command tx timeout [ 397.502065][ T59] Bluetooth: hci9: command tx timeout [ 398.450141][ T59] Bluetooth: hci8: command tx timeout [ 399.570068][ T59] Bluetooth: hci9: command tx timeout [ 439.412623][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.416391][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.417827][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.419784][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.427272][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.490314][ T59] Bluetooth: hci0: command tx timeout [ 443.570411][ T59] Bluetooth: hci0: command tx timeout [ 445.101517][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.101603][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.494790][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.501038][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.502593][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.503815][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.504651][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.650574][ T59] Bluetooth: hci0: command tx timeout [ 447.312927][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.332204][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.335497][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.337173][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.338032][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.472983][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.500422][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.501907][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.503966][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.504814][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 447.571175][ T59] Bluetooth: hci1: command tx timeout [ 447.730124][ T59] Bluetooth: hci0: command tx timeout [ 449.410238][ T59] Bluetooth: hci2: command tx timeout [ 449.570308][ T59] Bluetooth: hci3: command tx timeout [ 449.654320][ T59] Bluetooth: hci1: command tx timeout [ 451.517933][ T5156] Bluetooth: hci2: command tx timeout [ 451.519067][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.539746][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.543136][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.544301][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.546695][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.662619][ T59] Bluetooth: hci3: command tx timeout [ 451.734853][ T59] Bluetooth: hci1: command tx timeout [ 453.650116][ T59] Bluetooth: hci4: command tx timeout [ 453.739447][ T59] Bluetooth: hci3: command tx timeout [ 453.810385][ T59] Bluetooth: hci1: command tx timeout [ 454.402388][ T5156] Bluetooth: hci2: command tx timeout [ 455.731837][ T5156] Bluetooth: hci4: command tx timeout [ 455.810398][ T5156] Bluetooth: hci3: command tx timeout [ 456.450050][ T5156] Bluetooth: hci2: command tx timeout [ 457.810378][ T5156] Bluetooth: hci4: command tx timeout [ 459.894767][ T5156] Bluetooth: hci4: command tx timeout [ 500.039746][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 500.154342][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 500.155923][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 500.157244][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 500.158153][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 502.290206][ T5856] Bluetooth: hci10: command tx timeout [ 503.490937][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 504.370213][ T5856] Bluetooth: hci10: command tx timeout [ 505.971869][ T5156] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 505.996515][ T5156] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 505.998026][ T5156] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 505.999265][ T5156] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 506.022658][ T5156] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 506.450167][ T5156] Bluetooth: hci10: command tx timeout [ 508.153471][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.153552][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.545910][ T5156] Bluetooth: hci10: command tx timeout [ 508.612323][ T5156] Bluetooth: hci6: command 0x0406 tx timeout [ 509.903391][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 509.922273][ T5856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 509.923761][ T5856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 509.927995][ T5856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 509.954722][ T5856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 510.023610][ T5852] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 510.063720][ T5852] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 510.066244][ T5852] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 510.067574][ T5852] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 510.069119][ T5852] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 510.530077][ T5852] Bluetooth: hci11: command tx timeout [ 511.677367][T13033] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 511.708999][T13035] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 511.713349][T13035] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 511.741995][T13035] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 511.742926][T13035] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 512.635353][T13035] Bluetooth: hci11: command tx timeout [ 513.746329][T13034] Bluetooth: hci9: command 0x0406 tx timeout [ 513.749313][T13035] Bluetooth: hci8: command 0x0406 tx timeout [ 514.690221][ T59] Bluetooth: hci11: command tx timeout [ 516.770138][ T59] Bluetooth: hci11: command tx timeout [ 533.170734][ T5857] Bluetooth: hci13: command tx timeout [ 533.171456][ T5857] Bluetooth: hci12: command tx timeout [ 534.408174][ T8248] Bluetooth: hci7: command tx timeout [ 535.250573][ T8248] Bluetooth: hci12: command tx timeout [ 535.250622][ T8248] Bluetooth: hci13: command tx timeout [ 536.450230][ T5857] Bluetooth: hci7: command tx timeout [ 537.330259][ T5857] Bluetooth: hci13: command tx timeout [ 537.330292][ T5857] Bluetooth: hci12: command tx timeout [ 538.530167][ T8248] Bluetooth: hci7: command tx timeout [ 539.410241][ T8248] Bluetooth: hci12: command tx timeout [ 539.410276][ T8248] Bluetooth: hci13: command tx timeout [ 540.610043][ T5843] Bluetooth: hci7: command tx timeout [ 546.627796][T12969] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 553.148281][ T44] kworker/u8:3 (44) used greatest stack depth: 12360 bytes left [ 559.701514][ T5857] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 559.726351][ T5857] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 559.727861][ T5857] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 559.729577][ T5857] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 559.755301][ T5857] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 563.895177][ T5857] Bluetooth: hci14: command tx timeout [ 564.930038][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 565.970107][ T5857] Bluetooth: hci14: command tx timeout [ 566.121362][ T8248] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 566.125998][ T8248] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 566.127441][ T8248] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 566.128759][ T8248] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 566.161924][ T8248] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 568.050240][ T8248] Bluetooth: hci14: command tx timeout [ 568.696285][ T5856] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 568.722379][ T5856] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 568.725027][ T5856] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 568.726340][ T5856] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 568.768583][ T5856] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 569.034096][T13035] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 569.060333][T13035] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 569.083078][T13035] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 569.084354][T13035] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 569.085238][T13035] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 570.000966][ T5857] Bluetooth: hci15: command tx timeout [ 570.130107][T13035] Bluetooth: hci14: command tx timeout [ 570.210153][T13035] Bluetooth: hci1: command 0x0406 tx timeout [ 570.210190][T13035] Bluetooth: hci2: command 0x0406 tx timeout [ 570.210214][T13035] Bluetooth: hci3: command 0x0406 tx timeout [ 572.051687][ T59] Bluetooth: hci16: command tx timeout [ 572.052418][ T59] Bluetooth: hci15: command tx timeout [ 572.052747][ T5843] Bluetooth: hci17: command tx timeout [ 572.211769][T13035] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 572.245051][T13035] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.247775][T13035] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.249169][T13035] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.273575][T13035] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.104005][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.104096][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.131672][ T5843] Bluetooth: hci17: command tx timeout [ 574.131710][ T5843] Bluetooth: hci15: command tx timeout [ 574.131734][ T5843] Bluetooth: hci16: command tx timeout [ 575.181365][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 576.210235][ T5856] Bluetooth: hci15: command tx timeout [ 576.210271][ T5856] Bluetooth: hci17: command tx timeout [ 576.211851][ T5843] Bluetooth: hci16: command tx timeout [ 578.296307][ T5843] Bluetooth: hci16: command tx timeout [ 578.296361][ T5843] Bluetooth: hci17: command tx timeout [ 582.079370][ T39] INFO: task kworker/u8:15:8886 blocked for more than 144 seconds. [ 582.079403][ T39] Not tainted syzkaller #0 [ 582.079416][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 582.079431][ T39] task:kworker/u8:15 state:D stack:21384 pid:8886 tgid:8886 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 582.079498][ T39] Workqueue: events_unbound linkwatch_event SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 582.079551][ T39] Call Trace: [ 582.079559][ T39] [ 582.079576][ T39] __schedule+0x16f3/0x4c20 [ 582.079642][ T39] ? __pfx___schedule+0x10/0x10 [ 582.079697][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.079736][ T39] rt_mutex_schedule+0x77/0xf0 [ 582.079759][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 582.079788][ T39] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 582.080085][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 582.080120][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 582.080150][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 582.080192][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 582.080236][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 582.080271][ T39] ? linkwatch_event+0xe/0x60 [ 582.080293][ T39] mutex_lock_nested+0x16a/0x1d0 [ 582.080320][ T39] ? linkwatch_event+0xe/0x60 [ 582.080343][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 582.080375][ T39] linkwatch_event+0xe/0x60 [ 582.080404][ T39] process_scheduled_works+0xade/0x17b0 [ 582.080469][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 582.080521][ T39] worker_thread+0x8a0/0xda0 [ 582.080584][ T39] kthread+0x70e/0x8a0 [ 582.080625][ T39] ? __pfx_worker_thread+0x10/0x10 [ 582.080655][ T39] ? __pfx_kthread+0x10/0x10 [ 582.080697][ T39] ? __pfx_kthread+0x10/0x10 [ 582.080748][ T39] ret_from_fork+0x3f9/0x770 [ 582.080781][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 582.080819][ T39] ? __switch_to_asm+0x39/0x70 [ 582.080840][ T39] ? __switch_to_asm+0x33/0x70 [ 582.080861][ T39] ? __pfx_kthread+0x10/0x10 [ 582.080897][ T39] ret_from_fork_asm+0x1a/0x30 [ 582.080939][ T39] [ 582.080955][ [ 582.080955][ T39] INFO: task syz.4.2655:12956 blocked for more than 144 seconds. [ 582.080973][ T39] Not tainted syzkaller #0 [ 582.080984][ T39] Blocked by coredump. [ 582.080991][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 582.081002][ T39] task:syz.4.2655 state:D stack:25128 pid:12956 tgid:12956 ppid:5850 task_flags:0x40044c flags:0x00004006 [ 582.081064][ T39] Call Trace: [ 582.081072][ T39] [ 582.081086][ T39] __schedule+0x16f3/0x4c20 [ 582.081125][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 582.081151][ T39] ? arch_stack_walk+0xfc/0x150 [ 582.081201][ T39] ? __pfx___schedule+0x10/0x10 [ 582.081256][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.081293][ T39] rt_mutex_schedule+0x77/0xf0 [ 582.081316][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 582.081344][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 582.081391][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 582.081429][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 582.081458][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 582.081506][ T39] ? __pfx___fsnotify_parent+0x10/0x10 [ 582.081545][ T39] ? tun_chr_close+0x41/0x1c0 [ 582.081577][ T39] mutex_lock_nested+0x16a/0x1d0 [ 582.081606][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 582.081640][ T39] tun_chr_close+0x41/0x1c0 [ 582.081675][ T39] __fput+0x45b/0xa80 [ 582.081712][ T39] task_work_run+0x1d4/0x260 [ 582.081740][ T39] ? __pfx_task_work_run+0x10/0x10 [ 582.081764][ T39] ? do_exit+0x6b0/0x2300 [ 582.081784][ T39] ? kmem_cache_free+0x195/0x510 [ 582.081823][ T39] do_exit+0x6b5/0x2300 [ 582.081844][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 582.081884][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.081918][ T39] ? __pfx_do_exit+0x10/0x10 [ 582.081935][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 582.081968][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 582.082006][ T39] do_group_exit+0x21c/0x2d0 [ 582.082036][ T39] get_signal+0x125e/0x1310 [ 582.082089][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 582.082118][ T39] ? task_work_run+0x1d4/0x260 [ 582.082139][ T39] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 582.082166][ T39] ? kmem_cache_free+0x402/0x510 [ 582.082198][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 582.082245][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 582.082280][ T39] exit_to_user_mode_loop+0x75/0x110 [ 582.082312][ T39] do_syscall_64+0x2bd/0x3b0 [ 582.082332][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.082365][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.082388][ T39] ? clear_bhb_loop+0x60/0xb0 [ 582.082426][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.082456][ T39] RIP: 0033:0x7fc1280debe9 [ 582.082481][ T39] RSP: 002b:00007ffdf39034f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 582.082504][ T39] RAX: 0000000000000000 RBX: 000000000005a71e RCX: 00007fc1280debe9 [ 582.082520][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 582.082534][ T39] RBP: 00007fc128317da0 R08: 0000000000000001 R09: 00000004f39037ef [ 582.082550][ T39] R10: 0000001b30d20000 R11: 0000000000000246 R12: 00007fc128315fac [ 582.082565][ T39] R13: 00007fc128315fa0 R14: ffffffffffffffff R15: 00007ffdf3903610 [ 582.082602][ T39] [ 582.082615][ T39] INFO: task syz-executor:12973 blocked for more than 144 seconds. [ 582.082630][ T39] Not tainted syzkaller #0 [ 582.082642][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 582.082652][ T39] task:syz-executor state:D stack:19800 pid:12973 tgid:12973 ppid:1 task_flags:0x400140 flags:0x00004004 [ 582.082711][ T39] Call Trace: [ 582.082718][ T39] [ 582.082733][ T39] __schedule+0x16f3/0x4c20 [ 582.082786][ T39] ? __kernel_text_address+0xd/0x40 [ 582.082815][ T39] ? __pfx___schedule+0x10/0x10 [ 582.082868][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.082905][ T39] rt_mutex_schedule+0x77/0xf0 [ 582.082927][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 582.082953][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 582.083016][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 582.083065][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 582.083095][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 582.083121][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.083165][ T39] ? rtnl_newlink+0x8db/0x1c70 [ 582.083198][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 582.083231][ T39] ? bpf_lsm_capable+0x9/0x20 [ 582.083261][ T39] ? security_capable+0x7e/0x2e0 [ 582.083300][ T39] ? rtnl_newlink+0x8db/0x1c70 [ 582.083330][ T39] mutex_lock_nested+0x16a/0x1d0 [ 582.083364][ T39] rtnl_newlink+0x8db/0x1c70 [ 582.083411][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.083445][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 582.083488][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.083528][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.083575][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.083632][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 582.083672][ T39] ? is_bpf_text_address+0x292/0x2b0 [ 582.083705][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 582.083748][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.083810][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 582.083843][ T39] rtnetlink_rcv_msg+0x7cf/0xb70 [ 582.083875][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.083908][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 582.083940][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.083993][ T39] netlink_rcv_skb+0x205/0x470 [ 582.084023][ T39] ? __lock_acquire+0xab9/0xd20 [ 582.084055][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.084091][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.084137][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 582.084182][ T39] netlink_unicast+0x843/0xa10 [ 582.084233][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 582.084277][ T39] ? netlink_sendmsg+0x642/0xb30 [ 582.084304][ T39] ? skb_put+0x11b/0x210 [ 582.084341][ T39] netlink_sendmsg+0x805/0xb30 [ 582.084382][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.084427][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.084448][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.084480][ T39] __sock_sendmsg+0x219/0x270 [ 582.084527][ T39] __sys_sendto+0x3c7/0x520 [ 582.084564][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 582.084614][ T39] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 582.084660][ T39] ? rcu_is_watching+0x15/0xb0 [ 582.084701][ T39] __x64_sys_sendto+0xde/0x100 [ 582.084740][ T39] do_syscall_64+0xfa/0x3b0 [ 582.084760][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.084793][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.084816][ T39] ? clear_bhb_loop+0x60/0xb0 [ 582.084845][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.084867][ T39] RIP: 0033:0x7f6af8260a7c [ 582.084885][ T39] RSP: 002b:00007ffc22e68490 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 582.084908][ T39] RAX: ffffffffffffffda RBX: 00007f6af8fc4620 RCX: 00007f6af8260a7c [ 582.084925][ T39] RDX: 000000000000003c RSI: 00007f6af8fc4670 RDI: 0000000000000003 [ 582.084940][ T39] RBP: 0000000000000000 R08: 00007ffc22e684e4 R09: 000000000000000c [ 582.084955][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 582.084970][ T39] R13: 0000000000000000 R14: 00007f6af8fc4670 R15: 0000000000000000 [ 582.085004][ T39] [ 582.085043][ T39] [ 582.085043][ T39] Showing all locks held in the system: [ 582.085054][ T39] 4 locks held by kworker/0:0/9: [ 582.085067][ T39] #0: ffff8880361f3938 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.085134][ T39] #1: ffffc900000e7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.085194][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.085251][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.085321][ T39] 4 locks held by kworker/0:1/10: [ 582.085335][ T39] 2 locks held by ksoftirqd/0/15: [ 582.085346][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.085407][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.085461][ T39] 7 locks held by ktimers/0/16: [ 582.085476][ T39] 1 lock held by khungtaskd/39: [ 582.085487][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 582.085539][ T39] 5 locks held by kworker/u9:0/59: [ 582.085551][ T39] #0: ffff88803dc3f938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.085605][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.085660][ T39] #2: ffff888060614e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 582.085710][ T39] #3: ffff8880606140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 582.085768][ T39] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 582.085834][ T39] 4 locks held by kworker/0:2/991: [ 582.085846][ T39] #0: ffff88802ffc8938 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.085899][ T39] #1: ffffc900046f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.085975][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.086029][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.086088][ T39] 3 locks held by kworker/u8:6/1433: [ 582.086100][ T39] #0: ffff88814d0cb938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.086155][ T39] #1: ffffc90005217bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.086210][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 582.086263][ T39] 5 locks held by kworker/u8:7/1442: [ 582.086293][ T39] 6 locks held by kworker/u9:1/5156: [ 582.086305][ T39] #0: ffff88803495c138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.086358][ T39] #1: ffffc9000f87fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.086420][ T39] #2: ffff888023d6ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 582.086470][ T39] #3: ffff888023d6c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 582.086547][ T39] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 582.086611][ T39] #5: ffff88803495ab58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 582.086683][ T39] 2 locks held by getty/5601: [ 582.086695][ T39] #0: ffff88823bf6c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 582.086763][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 582.086822][ T39] 5 locks held by kworker/u9:3/5852: [ 582.086836][ T39] #0: ffff888034efb138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.086896][ T39] #1: ffffc90004d77bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.086956][ T39] #2: ffff88803bb8ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 582.087011][ T39] #3: ffff88803bb8c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 582.087074][ T39] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 582.087142][ T39] 4 locks held by kworker/0:4/5910: [ 582.087156][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.087216][ T39] #1: ffffc900050c7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.087278][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.087337][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.087406][ T39] 4 locks held by kworker/0:6/5926: [ 582.087419][ T39] #0: ffff8880361f0d38 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.087479][ T39] #1: ffffc900051c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.087563][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.087622][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.087693][ T39] 4 locks held by kworker/u9:6/8248: [ 582.087705][ T39] #0: ffff888066889938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.087768][ T39] #1: ffffc9000cbf7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.087820][ T39] #2: ffff88806c4e8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 582.087867][ T39] #3: ffff88806c4e80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 582.087918][ T39] 4 locks held by kworker/u8:13/8884: [ 582.087930][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.087980][ T39] #1: ffffc900051d7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.088047][ T39] #2: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 582.088104][ T39] #3: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 582.088155][ T39] 3 locks held by kworker/u8:15/8886: [ 582.088167][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.088221][ T39] #1: ffffc90004be7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.088275][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 582.088323][ T39] 2 locks held by kworker/u8:26/8898: [ 582.088338][ T39] 1 lock held by syz.1.2634/12910: [ 582.088349][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 582.088407][ T39] 1 lock held by syz.4.2655/12956: [ 582.088419][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 582.088477][ T39] 1 lock held by syz.3.2656/12959: [ 582.088488][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 582.088547][ T39] 1 lock held by syz-executor/12969: [ 582.088559][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 582.088617][ T39] 2 locks held by syz-executor/12973: [ 582.088629][ T39] #0: ffffffff8f1d73e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 582.088691][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 582.088746][ T39] 1 lock held by syz-executor/12977: [ 582.088759][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 582.088816][ T39] 2 locks held by syz-executor/12980: [ 582.088828][ T39] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 582.088882][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 582.088933][ T39] 2 locks held by syz-executor/12989: [ 582.088944][ T39] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 582.088999][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 582.089050][ T39] 4 locks held by kworker/0:8/12994: [ 582.089061][ T39] #0: ffff888032adf938 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.089121][ T39] #1: ffffc90005d0fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.089194][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.089270][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.089328][ T39] 4 locks held by kworker/0:9/12995: [ 582.089341][ T39] #0: ffff88805b104d38 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.089417][ T39] #1: ffffc90004917bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.089498][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.089555][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.089613][ T39] 4 locks held by kworker/0:10/12996: [ 582.089625][ T39] #0: ffff88805b38a938 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.089688][ T39] #1: ffffc90005cdfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.089769][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.330399][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.330467][ T39] 1 lock held by syz-executor/12999: [ 582.330481][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.330538][ T39] 1 lock held by syz-executor/13002: [ 582.330551][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.330606][ T39] 1 lock held by syz-executor/13006: [ 582.330620][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.330676][ T39] 4 locks held by kworker/0:11/13008: [ 582.330689][ T39] #0: ffff88805b389138 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.330756][ T39] #1: ffffc900048f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.330839][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.330898][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.330959][ T39] 1 lock held by syz-executor/13009: [ 582.330972][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.331027][ T39] 1 lock held by syz-executor/13012: [ 582.331041][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.331096][ T39] 4 locks held by kworker/0:12/13015: [ 582.331110][ T39] #0: ffff88802ffc8938 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.331172][ T39] #1: ffffc90004067bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.331233][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.331291][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.331352][ T39] 4 locks held by kworker/0:14/13017: [ 582.331365][ T39] #0: ffff88805b389138 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.331441][ T39] #1: ffffc90003eafbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.331502][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 582.331562][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 582.331621][ T39] 1 lock held by syz-executor/13019: [ 582.331635][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.331691][ T39] 1 lock held by syz-executor/13022: [ 582.331704][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.331759][ T39] 1 lock held by syz-executor/13026: [ 582.331784][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.331837][ T39] 1 lock held by syz-executor/13027: [ 582.331850][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.331902][ T39] 1 lock held by syz-executor/13031: [ 582.331915][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.331970][ T39] 4 locks held by kworker/u9:9/13035: [ 582.331982][ T39] #0: ffff888061178938 ((wq_completion)hci5#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 582.332045][ T39] #1: ffffc90003b4fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 582.332103][ T39] #2: ffff8880321900a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 582.332177][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 582.332237][ T39] 1 lock held by syz-executor/13039: [ 582.332251][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.332305][ T39] 1 lock held by syz-executor/13042: [ 582.332318][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.332383][ T39] 1 lock held by syz-executor/13046: [ 582.332397][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.332452][ T39] 1 lock held by syz-executor/13048: [ 582.332465][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.332521][ T39] 1 lock held by syz-executor/13051: [ 582.332533][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 582.332590][ T39] [ 582.332595][ T39] ============================================= [ 582.332595][ T39] [ 582.332617][ T39] NMI backtrace for cpu 1 [ 582.332647][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 582.332673][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.332687][ T39] Call Trace: [ 582.332695][ T39] [ 582.332706][ T39] dump_stack_lvl+0x189/0x250 [ 582.332744][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.332779][ T39] ? __pfx__printk+0x10/0x10 [ 582.332819][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 582.332853][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 582.332886][ T39] ? __pfx__printk+0x10/0x10 [ 582.332916][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 582.332948][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 582.332981][ T39] watchdog+0xf93/0xfe0 [ 582.333017][ T39] ? watchdog+0x1de/0xfe0 [ 582.333054][ T39] kthread+0x70e/0x8a0 [ 582.333093][ T39] ? __pfx_watchdog+0x10/0x10 [ 582.333121][ T39] ? __pfx_kthread+0x10/0x10 [ 582.333163][ T39] ? __pfx_kthread+0x10/0x10 [ 582.333200][ T39] ret_from_fork+0x3f9/0x770 [ 582.333233][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 582.333270][ T39] ? __switch_to_asm+0x39/0x70 [ 582.333292][ T39] ? __switch_to_asm+0x33/0x70 [ 582.333312][ T39] ? __pfx_kthread+0x10/0x10 [ 582.333348][ T39] ret_from_fork_asm+0x1a/0x30 [ 582.333394][ T39] [ 582.333403][ T39] Sending NMI from CPU 1 to CPUs 0: [ 582.333432][ C0] NMI backtrace for cpu 0 [ 582.333447][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 582.333468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.333479][ C0] RIP: 0010:lock_acquire+0x7/0x360 [ 582.333506][ C0] Code: 90 90 90 f3 0f 1e fa b0 01 c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 [ 582.333522][ C0] RSP: 0018:ffffc900001568f8 EFLAGS: 00000246 [ 582.333549][ C0] RAX: 0000000000000005 RBX: ffffffff88e30be7 RCX: 0000000000000002 [ 582.333561][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d9a8bc0 [ 582.333573][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.333585][ C0] R10: ffffc90000156a38 R11: ffffffff81aae2f0 R12: 1ffff9200002ad3d [ 582.333610][ C0] R13: ffffc90000156a20 R14: ffffc900001569e8 R15: ffffffff8172b165 [ 582.333623][ C0] FS: 0000000000000000(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 582.333637][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.333648][ C0] CR2: 00007f587ba5fa75 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 582.333664][ C0] Call Trace: [ 582.333670][ C0] [ 582.333676][ C0] ? unwind_next_frame+0xa5/0x2390 [ 582.333700][ C0] unwind_next_frame+0xc2/0x2390 [ 582.333724][ C0] ? unwind_next_frame+0xa5/0x2390 [ 582.333751][ C0] ? unwind_next_frame+0xa5/0x2390 [ 582.333775][ C0] ? __napi_poll+0xb3/0x540 [ 582.333798][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 582.333817][ C0] arch_stack_walk+0x11c/0x150 [ 582.333845][ C0] ? net_rx_action+0x707/0xe00 [ 582.333869][ C0] stack_trace_save+0x9c/0xe0 [ 582.333886][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 582.333903][ C0] ? do_raw_spin_lock+0x121/0x290 [ 582.333929][ C0] kasan_save_track+0x3e/0x80 [ 582.333948][ C0] ? kasan_save_track+0x3e/0x80 [ 582.333966][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 582.333985][ C0] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 582.334008][ C0] ? kmalloc_reserve+0xbd/0x290 [ 582.334032][ C0] ? __alloc_skb+0x142/0x2d0 [ 582.334054][ C0] ? synproxy_send_client_synack+0x16c/0xe20 [ 582.334078][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 582.334095][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 582.334113][ C0] ? nft_do_chain+0x409/0x1920 [ 582.334134][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 582.334168][ C0] ? nf_hook_slow+0xc2/0x220 [ 582.334193][ C0] ? NF_HOOK+0x206/0x3a0 [ 582.334216][ C0] ? NF_HOOK+0x30c/0x3a0 [ 582.334237][ C0] ? __netif_receive_skb+0x143/0x380 [ 582.334258][ C0] ? process_backlog+0x31e/0x900 [ 582.334299][ C0] ? __napi_poll+0xb3/0x540 [ 582.334320][ C0] ? net_rx_action+0x707/0xe00 [ 582.334366][ C0] ? kmalloc_reserve+0xbd/0x290 [ 582.334394][ C0] __kasan_slab_alloc+0x6c/0x80 [ 582.334417][ C0] ? kmalloc_reserve+0xbd/0x290 [ 582.334443][ C0] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 582.334473][ C0] kmalloc_reserve+0xbd/0x290 [ 582.334503][ C0] __alloc_skb+0x142/0x2d0 [ 582.334532][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 582.334567][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 582.334594][ C0] ? nft_jhash_dump+0x230/0x400 [ 582.334621][ C0] ? synproxy_pernet+0x45/0x270 [ 582.334644][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 582.334668][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 582.334689][ C0] ? nf_ip_checksum+0x13c/0x510 [ 582.334711][ C0] nft_synproxy_do_eval+0x345/0x570 [ 582.334734][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 582.334754][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 582.334786][ C0] nft_do_chain+0x409/0x1920 [ 582.334814][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 582.334837][ C0] ? __lock_acquire+0xab9/0xd20 [ 582.334872][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 582.334900][ C0] nft_do_chain_inet+0x25d/0x340 [ 582.334919][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 582.334938][ C0] ? __lock_acquire+0xab9/0xd20 [ 582.334968][ C0] ? NF_HOOK+0x9a/0x3a0 [ 582.334992][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 582.335012][ C0] nf_hook_slow+0xc2/0x220 [ 582.335041][ C0] NF_HOOK+0x206/0x3a0 [ 582.335066][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 582.335092][ C0] ? NF_HOOK+0x9a/0x3a0 [ 582.335117][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 582.335146][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 582.335174][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 582.335201][ C0] ? skb_dst+0x4f/0xd0 [ 582.335225][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 582.335252][ C0] NF_HOOK+0x30c/0x3a0 [ 582.335279][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 582.335303][ C0] ? NF_HOOK+0x9a/0x3a0 [ 582.335327][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 582.335353][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 582.335386][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 582.335410][ C0] __netif_receive_skb+0x143/0x380 [ 582.335433][ C0] ? rt_spin_unlock+0x65/0x80 [ 582.335457][ C0] ? process_backlog+0x27b/0x900 [ 582.335481][ C0] process_backlog+0x31e/0x900 [ 582.335512][ C0] __napi_poll+0xb3/0x540 [ 582.335537][ C0] net_rx_action+0x707/0xe00 [ 582.335573][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 582.335619][ C0] handle_softirqs+0x22f/0x710 [ 582.335648][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 582.335678][ C0] run_ktimerd+0xcf/0x190 [ 582.335704][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 582.335731][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 582.335755][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 582.335778][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 582.335801][ C0] smpboot_thread_fn+0x53f/0xa60 [ 582.335837][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 582.335864][ C0] kthread+0x70e/0x8a0 [ 582.335893][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 582.335916][ C0] ? __pfx_kthread+0x10/0x10 [ 582.335945][ C0] ? __pfx_kthread+0x10/0x10 [ 582.335973][ C0] ret_from_fork+0x3f9/0x770 [ 582.335997][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 582.336024][ C0] ? __switch_to_asm+0x39/0x70 [ 582.336041][ C0] ? __switch_to_asm+0x33/0x70 [ 582.336057][ C0] ? __pfx_kthread+0x10/0x10 [ 582.336085][ C0] ret_from_fork_asm+0x1a/0x30 [ 582.336111][ C0] [ 582.336434][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 582.336450][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 582.336475][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.336488][ T39] Call Trace: [ 582.336514][ T39] [ 582.336523][ T39] dump_stack_lvl+0x99/0x250 [ 582.336559][ T39] ? __asan_memcpy+0x40/0x70 [ 582.336584][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.336620][ T39] ? __pfx__printk+0x10/0x10 [ 582.336659][ T39] vpanic+0x281/0x750 [ 582.336696][ T39] ? __pfx_vpanic+0x10/0x10 [ 582.336728][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 582.336752][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.336798][ T39] panic+0xb9/0xc0 [ 582.336832][ T39] ? __pfx_panic+0x10/0x10 [ 582.336869][ T39] ? irq_work_queue+0xc3/0x140 [ 582.336903][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 582.336935][ T39] watchdog+0xfd2/0xfe0 [ 582.336972][ T39] ? watchdog+0x1de/0xfe0 [ 582.337009][ T39] kthread+0x70e/0x8a0 [ 582.337048][ T39] ? __pfx_watchdog+0x10/0x10 [ 582.337077][ T39] ? __pfx_kthread+0x10/0x10 [ 582.337118][ T39] ? __pfx_kthread+0x10/0x10 [ 582.337155][ T39] ret_from_fork+0x3f9/0x770 [ 582.337188][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 582.337226][ T39] ? __switch_to_asm+0x39/0x70 [ 582.337248][ T39] ? __switch_to_asm+0x33/0x70 [ 582.337268][ T39] ? __pfx_kthread+0x10/0x10 [ 582.337304][ T39] ret_from_fork_asm+0x1a/0x30 [ 582.337345][ T39] [ 582.337604][ T39] Kernel Offset: disabled