last executing test programs: 2m0.583163495s ago: executing program 3 (id=528): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "c2c48bc5"}, @local=@item_4={0x3, 0x2, 0xa, "c0e828b9"}, @global]}}, 0x0}, 0x0) 1m58.625852016s ago: executing program 3 (id=553): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m58.092974987s ago: executing program 3 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001300), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001340)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x36}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8085}, 0x10) 1m57.786217092s ago: executing program 3 (id=567): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000040)) 1m57.593415116s ago: executing program 3 (id=569): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 1m57.360187007s ago: executing program 3 (id=574): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m50.327550212s ago: executing program 2 (id=629): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x9, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0xff}) 1m50.039529576s ago: executing program 2 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000108000340000000000800024000000000080006400019000208000840000000000900010073797a30000000000900020073797a320000"], 0x9c}}, 0x4000) 1m49.731428122s ago: executing program 2 (id=635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}}, 0x0) 1m49.477718122s ago: executing program 2 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 1m49.252222093s ago: executing program 2 (id=639): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r0) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 1m48.565602187s ago: executing program 2 (id=641): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000840)={0x20, 0x5, 0x2, "e16b"}, 0x0, 0x0}) 1m48.050972703s ago: executing program 32 (id=641): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000840)={0x20, 0x5, 0x2, "e16b"}, 0x0, 0x0}) 1m42.037742777s ago: executing program 33 (id=574): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.965616505s ago: executing program 1 (id=1311): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) writev(r0, &(0x7f0000001240)=[{&(0x7f0000000040)="b15c4fb7a64801ea174be9275e57dff101", 0x11}, {&(0x7f0000000080)="ea2fa575b6e9fcc5eac1ddec959a7acc469c46fc6033b675692b11ef3cbe30f1f66eec9252e121f6ae4ea9e45fadd2b97208491056c9bc29aaa106236961d565376e970554091ee4a9b27f947395ee4fa9ad729c64da03aa06a632be2bb92c09c085704fbe76234cdb1553a1c2a154", 0x6f}, {&(0x7f0000000100)="e2385e49daa5b98e5d71646ef5b7262df74e82e47890873a48967323e694a1e8271239313191bb80171453a2200d1bd6a3362c997fe52c5ff60f1766be9389c663788d00", 0x44}, {&(0x7f0000000180)="d17dd0f59f9d2c2abe8a29cf5fe7aa8b95ce047c354269d110d717ea187787d7dec176faad55d9ac3e6a02103ce121b8ec975421ec4518110b6e6585481ef6fe1e65e005b7a07339941554e3b8f1d2151a09a432589a165599060eb69299", 0x5e}, {&(0x7f0000000200)="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", 0xedf}], 0x5) 29.477817106s ago: executing program 1 (id=1317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xaea3, 0x0) 29.027109895s ago: executing program 1 (id=1320): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 27.875032583s ago: executing program 5 (id=1334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000009000000800b0001006272696467650000100002800c0021000000eaa10004"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 27.372267434s ago: executing program 1 (id=1339): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfb9c, 0x10000}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) 27.371764714s ago: executing program 5 (id=1340): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 27.085604114s ago: executing program 5 (id=1343): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 27.019663468s ago: executing program 5 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xed}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 26.962373832s ago: executing program 5 (id=1345): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xfffffec8, 0x0}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 26.85270694s ago: executing program 1 (id=1346): r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000200)={0x0, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x3, 0xcd5, 0x4, 0x4, 0x6, 0x4}) 26.846951494s ago: executing program 5 (id=1348): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0x1, &(0x7f00000000c0)) io_setup(0xa79, &(0x7f0000000180)=0x0) io_destroy(r0) 26.523959338s ago: executing program 0 (id=1350): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x135}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7220]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x64}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 26.523659692s ago: executing program 1 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0x30, 0x40, 0x7, 0xfffff018}, {0x6, 0x2, 0x4, 0x4}]}) 26.353720927s ago: executing program 4 (id=1354): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xad92, 0x1000, 0x4}, &(0x7f0000000300), &(0x7f0000000280)) r1 = eventfd2(0x210d28e2, 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) 26.129677608s ago: executing program 4 (id=1356): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x81, 0xfffffffb}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) 25.941885674s ago: executing program 4 (id=1357): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) 25.775995813s ago: executing program 4 (id=1359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0, 0x0, 0xbe}, 0x18) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 25.344727666s ago: executing program 4 (id=1361): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io(r0, 0x0, 0x0) 24.636528263s ago: executing program 0 (id=1362): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "b0ecfded"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x1, "1020e851"}]}}, 0x0}, 0x0) 24.636201393s ago: executing program 6 (id=1364): r0 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x5, 0x8, 0x2, 0x0, 0x7f}) 24.507174124s ago: executing program 6 (id=1365): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 23.319485763s ago: executing program 6 (id=1366): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) 23.13048532s ago: executing program 6 (id=1367): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 22.996897624s ago: executing program 0 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8b"]) 22.885698744s ago: executing program 6 (id=1369): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) fcntl$notify(r0, 0x402, 0x0) 22.737284088s ago: executing program 0 (id=1370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 22.648386269s ago: executing program 6 (id=1371): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0xfffffffc}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xffff, 0x101, 0x4, 0x1, 0xffffff26, 0xff, 0x1, 0x101]}}, 0x5c) 22.07528526s ago: executing program 4 (id=1372): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 15.704332043s ago: executing program 0 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000600)={0x18, r1, 0x1, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c051}, 0xc0) 15.418672007s ago: executing program 0 (id=1374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x3, 0x0, @ioapic={0x4, 0x1, 0xffffffff, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0xfd, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x5, 0x6, 0x0, '\x00', 0x4}, {0xa, 0x6, 0x5, '\x00', 0x40}, {0xb8, 0xda, 0xb, '\x00', 0x59}, {0xb, 0x3, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x0, 0x6, 0x4, '\x00', 0x5}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0xb, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x6, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0xfd}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x6, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x1}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x1}, {0x8a, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x1, 0x4, '\x00', 0x7b}]}}) 11.497888185s ago: executing program 34 (id=1348): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0x1, &(0x7f00000000c0)) io_setup(0xa79, &(0x7f0000000180)=0x0) io_destroy(r0) 11.005868375s ago: executing program 35 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0x30, 0x40, 0x7, 0xfffff018}, {0x6, 0x2, 0x4, 0x4}]}) 7.036532836s ago: executing program 36 (id=1371): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0xfffffffc}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xffff, 0x101, 0x4, 0x1, 0xffffff26, 0xff, 0x1, 0x101]}}, 0x5c) 6.782745291s ago: executing program 37 (id=1372): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 0s ago: executing program 38 (id=1374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x3, 0x0, @ioapic={0x4, 0x1, 0xffffffff, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0xfd, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x5, 0x6, 0x0, '\x00', 0x4}, {0xa, 0x6, 0x5, '\x00', 0x40}, {0xb8, 0xda, 0xb, '\x00', 0x59}, {0xb, 0x3, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x0, 0x6, 0x4, '\x00', 0x5}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0xb, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x6, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0xfd}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x6, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x1}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x1}, {0x8a, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x1, 0x4, '\x00', 0x7b}]}}) kernel console output (not intermixed with test programs): batadv0: Interface activated: batadv_slave_1 [ 96.944496][ T5845] veth0_vlan: entered promiscuous mode [ 96.949093][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.986029][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.010704][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.023557][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.046131][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.046154][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.069809][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.086286][ T5845] veth1_vlan: entered promiscuous mode [ 97.155132][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.299978][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.299997][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.317246][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.320754][ T5844] veth0_vlan: entered promiscuous mode [ 97.321208][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.349636][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.359340][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.497405][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.497424][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.508854][ T5844] veth1_vlan: entered promiscuous mode [ 97.641962][ T5845] veth0_macvtap: entered promiscuous mode [ 97.849175][ T5845] veth1_macvtap: entered promiscuous mode [ 97.881617][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.881633][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.060832][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.060852][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.074108][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.156780][ T5844] veth0_macvtap: entered promiscuous mode [ 98.160520][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.253406][ T5844] veth1_macvtap: entered promiscuous mode [ 98.273236][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.275057][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.275073][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.283885][ T3649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.316271][ T3649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.357632][ T3649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.525039][ T5961] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 98.525093][ T5961] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 98.525177][ T5961] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 98.525304][ T5961] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 98.525351][ T5961] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 98.525395][ T5961] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 98.525437][ T5961] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 98.525509][ T5961] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 98.525551][ T5961] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 98.525593][ T5961] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 98.525679][ T5961] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 98.525720][ T5961] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 98.525764][ T5961] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 98.525841][ T5961] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 98.525884][ T5961] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 98.525929][ T5961] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 98.525970][ T5961] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 98.526014][ T5961] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 98.568756][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.766343][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.807266][ T992] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 98.847394][ T161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.878268][ T161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.913226][ T161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.919542][ T161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.932232][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.932250][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.017982][ T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.018007][ T992] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 99.018061][ T992] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 99.018081][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.089444][ T992] usb 3-1: config 0 descriptor?? [ 99.190713][ T992] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 99.191026][ T992] dvb-usb: bulk message failed: -22 (3/0) [ 99.237606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.237625][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.335980][ T992] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 99.353139][ T992] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 99.353565][ T992] usb 3-1: media controller created [ 99.395059][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.551112][ T992] dvb-usb: bulk message failed: -22 (6/0) [ 99.551240][ T992] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 99.608747][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.608767][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.670497][ T992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 99.721156][ T992] dvb-usb: schedule remote query interval to 150 msecs. [ 99.721175][ T992] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 99.873608][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 99.873657][ T5899] dvb-usb: error while querying for an remote control event. [ 99.878578][ T992] usb 3-1: USB disconnect, device number 2 [ 100.111575][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.111594][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.353242][ T992] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 100.925871][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 101.180849][ T6003] process 'syz.1.26' launched '/dev/fd/3' with NULL argv: empty string added [ 101.533931][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.694146][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.694175][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.694194][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.694231][ T5917] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 101.694251][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.736302][ T5917] usb 1-1: config 0 descriptor?? [ 102.045089][ T6024] capability: warning: `syz.2.34' uses deprecated v2 capabilities in a way that may be insecure [ 102.176431][ T5917] hid (null): invalid report_size -150992896 [ 102.287989][ T6028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.309382][ T5917] hid-multitouch 0003:0EEF:72D0.0001: invalid report_size -150992896 [ 102.309405][ T5917] hid-multitouch 0003:0EEF:72D0.0001: item 0 4 1 7 parsing failed [ 102.310278][ T5917] hid-multitouch 0003:0EEF:72D0.0001: probe with driver hid-multitouch failed with error -22 [ 102.452114][ T49] usb 1-1: USB disconnect, device number 2 [ 103.570119][ T6052] tipc: Enabling not permitted [ 103.570153][ T6052] tipc: Enabling of bearer rejected, failed to enable media [ 104.279212][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 104.622505][ T992] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 104.774174][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.774203][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.774236][ T992] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 104.774256][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.845860][ T992] usb 2-1: config 0 descriptor?? [ 104.951545][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.087545][ T6095] program syz.3.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.116149][ T5922] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 105.116176][ T5922] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 105.116193][ T5922] usb 1-1: Product: syz [ 105.116205][ T5922] usb 1-1: Manufacturer: syz [ 105.116217][ T5922] usb 1-1: SerialNumber: syz [ 105.142882][ T6096] program syz.3.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.155408][ T5922] usb 1-1: config 0 descriptor?? [ 105.165609][ T6096] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 105.184790][ T5922] ch341 1-1:0.0: ch341-uart converter detected [ 105.353933][ T992] samsung 0003:0419:0001.0002: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 105.478739][ T6098] binder: 6097:6098 ioctl c0306201 2000000001c0 returned -22 [ 105.532342][ T992] usb 2-1: USB disconnect, device number 2 [ 105.698154][ T6092] syz.2.67 (6092) used greatest stack depth: 18392 bytes left [ 105.786984][ T5922] usb 1-1: failed to send control message: -71 [ 105.787041][ T5922] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 105.815417][ T5922] usb 1-1: USB disconnect, device number 3 [ 105.818434][ T5922] ch341 1-1:0.0: device disconnected [ 105.845252][ T6099] fido_id[6099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 105.918056][ T6105] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 106.508128][ T6121] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 106.881008][ T6135] ======================================================= [ 106.881008][ T6135] WARNING: The mand mount option has been deprecated and [ 106.881008][ T6135] and is ignored by this kernel. Remove the mand [ 106.881008][ T6135] option from the mount to silence this warning. [ 106.881008][ T6135] ======================================================= [ 106.886147][ T5922] kernel write not supported for file /binder/state (pid: 5922 comm: kworker/1:6) [ 107.100428][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.251548][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 107.254115][ T5920] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.254139][ T5920] usb 3-1: config 0 has no interface number 0 [ 107.285890][ T5920] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.285917][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.285934][ T5920] usb 3-1: Product: syz [ 107.285946][ T5920] usb 3-1: Manufacturer: syz [ 107.285958][ T5920] usb 3-1: SerialNumber: syz [ 107.393454][ T5920] usb 3-1: config 0 descriptor?? [ 107.398646][ T5920] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 107.734156][ T5920] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 107.809610][ T5920] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.108276][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.131813][ T5899] usb 3-1: USB disconnect, device number 3 [ 108.171677][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.201037][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.227810][ T5899] quatech2 3-1:0.51: device disconnected [ 108.893030][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.066953][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.066977][ T5899] usb 1-1: config 0 has no interface number 0 [ 109.067022][ T5899] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.067044][ T5899] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.067063][ T5899] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.067110][ T5899] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 109.067130][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.098068][ T6190] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.178272][ T5899] usb 1-1: config 0 descriptor?? [ 109.211626][ T992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.361532][ T992] usb 3-1: Using ep0 maxpacket: 32 [ 109.363610][ T992] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 109.363632][ T992] usb 3-1: config 0 has no interface number 0 [ 109.364772][ T992] usb 3-1: config 0 interface 184 has no altsetting 0 [ 109.369426][ T992] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 109.369661][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.369680][ T992] usb 3-1: Product: syz [ 109.369692][ T992] usb 3-1: Manufacturer: syz [ 109.369703][ T992] usb 3-1: SerialNumber: syz [ 109.487235][ T992] usb 3-1: config 0 descriptor?? [ 109.537601][ T992] smsc75xx v1.0.0 [ 109.598223][ T5899] hid (null): report_id 35660 is invalid [ 109.796222][ T5899] uclogic 0003:28BD:0042.0003: failed retrieving string descriptor #100: -71 [ 109.796284][ T5899] uclogic 0003:28BD:0042.0003: failed retrieving pen parameters: -71 [ 109.796308][ T5899] uclogic 0003:28BD:0042.0003: pen probing failed: -71 [ 109.796715][ T5899] uclogic 0003:28BD:0042.0003: failed probing parameters: -71 [ 109.797047][ T5899] uclogic 0003:28BD:0042.0003: probe with driver uclogic failed with error -71 [ 109.825967][ T6202] CUSE: unknown device info "" [ 109.825982][ T6202] CUSE: zero length info key specified [ 109.894313][ T5899] usb 1-1: USB disconnect, device number 4 [ 110.133087][ T992] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 110.133114][ T992] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 110.133130][ T992] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 110.133741][ T992] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 110.203349][ T6210] syz.1.120 uses obsolete (PF_INET,SOCK_PACKET) [ 110.204280][ T992] usb 3-1: USB disconnect, device number 4 [ 110.609266][ T6222] trusted_key: encrypted_key: insufficient parameters specified [ 111.064680][ T5920] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 111.216813][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.216844][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.216863][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.216899][ T5920] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 111.216919][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.231550][ T6245] veth0_to_bond: entered allmulticast mode [ 111.304120][ T5920] usb 3-1: config 0 descriptor?? [ 111.532137][ T6251] comedi: No check for data length of config insn id 3 is implemented [ 111.532162][ T6251] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 111.532174][ T6251] comedi: Assuming n=15 is correct [ 111.761870][ T5920] acrux 0003:1A34:0802.0004: unbalanced collection at end of report description [ 111.762731][ T5920] acrux 0003:1A34:0802.0004: parse failed [ 111.762798][ T5920] acrux 0003:1A34:0802.0004: probe with driver acrux failed with error -22 [ 111.942107][ T5920] usb 3-1: USB disconnect, device number 5 [ 112.047118][ T6267] netlink: 'syz.3.146': attribute type 10 has an invalid length. [ 112.105071][ T6268] netlink: 'syz.3.146': attribute type 10 has an invalid length. [ 112.105092][ T6268] netlink: 2 bytes leftover after parsing attributes in process `syz.3.146'. [ 112.144957][ T6267] batman_adv: batadv0: Adding interface: team0 [ 112.144973][ T6267] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.144997][ T6267] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 112.156879][ T6268] team0: entered promiscuous mode [ 112.156897][ T6268] team_slave_0: entered promiscuous mode [ 112.157121][ T6268] team_slave_1: entered promiscuous mode [ 112.198285][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.198556][ T6268] batman_adv: batadv0: Interface activated: team0 [ 112.198593][ T6268] batman_adv: batadv0: Interface deactivated: team0 [ 112.198612][ T6268] batman_adv: batadv0: Removing interface: team0 [ 112.255253][ T6268] bridge0: port 3(team0) entered blocking state [ 112.255679][ T6268] bridge0: port 3(team0) entered disabled state [ 112.255920][ T6268] team0: entered allmulticast mode [ 112.255935][ T6268] team_slave_0: entered allmulticast mode [ 112.255957][ T6268] team_slave_1: entered allmulticast mode [ 112.300011][ T6268] bridge0: port 3(team0) entered blocking state [ 112.300429][ T6268] bridge0: port 3(team0) entered forwarding state [ 112.878457][ T5922] kernel write not supported for file /sg0 (pid: 5922 comm: kworker/1:6) [ 112.920576][ T6293] capability: warning: `syz.3.158' uses 32-bit capabilities (legacy support in use) [ 113.421588][ T992] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.531566][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.581516][ T992] usb 1-1: Using ep0 maxpacket: 8 [ 113.584042][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.584069][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.584102][ T992] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 113.584122][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.611636][ T992] usb 1-1: config 0 descriptor?? [ 113.725936][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.725982][ T5920] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 113.726002][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.764580][ T5920] usb 4-1: config 0 descriptor?? [ 113.767569][ T6283] syz.4.153 (6283): drop_caches: 2 [ 113.940286][ T992] usbhid 1-1:0.0: can't add hid device: -71 [ 113.940483][ T992] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.961948][ T992] usb 1-1: USB disconnect, device number 5 [ 114.237621][ T5920] lenovo 0003:17EF:60A3.0005: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 114.394071][ T5899] usb 4-1: USB disconnect, device number 2 [ 114.466325][ T6317] fido_id[6317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 114.491558][ T992] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.651581][ T992] usb 1-1: Using ep0 maxpacket: 8 [ 114.669881][ T992] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 114.669909][ T992] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 256 [ 114.669932][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.669953][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.712194][ T992] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 114.712221][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.712238][ T992] usb 1-1: SerialNumber: syz [ 114.722743][ T992] usb 1-1: config 0 descriptor?? [ 114.762384][ T992] hso 1-1:0.0: Can't find BULK OUT endpoint [ 114.966728][ T992] usb 1-1: USB disconnect, device number 6 [ 116.009593][ T6363] tipc: Enabling of bearer rejected, failed to enable media [ 117.296420][ T6409] netlink: 196 bytes leftover after parsing attributes in process `syz.2.213'. [ 117.471692][ T6417] netlink: 'syz.0.216': attribute type 30 has an invalid length. [ 117.501539][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.676437][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.676481][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 117.676501][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.735248][ T5920] usb 5-1: config 0 descriptor?? [ 117.988000][ T6430] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.214801][ T5920] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 118.414950][ T992] usb 5-1: USB disconnect, device number 2 [ 119.433133][ T6472] netlink: 48 bytes leftover after parsing attributes in process `syz.0.240'. [ 119.598305][ T6478] program syz.1.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.051645][ T5920] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.211845][ T5920] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 120.211873][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.217487][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.253'. [ 120.265583][ T5920] usb 2-1: config 0 descriptor?? [ 120.317055][ T5920] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 120.366219][ T6498] gretap0: entered promiscuous mode [ 120.423708][ T6498] gretap0: left promiscuous mode [ 120.931308][ T5920] gspca_sunplus: reg_w_riv err -71 [ 120.936676][ T5920] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 120.957473][ T5920] usb 2-1: USB disconnect, device number 3 [ 121.356425][ T6520] can0: slcan on ptm0. [ 121.582994][ T6519] can0 (unregistered): slcan off ptm0. [ 121.622149][ T5920] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.771568][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 121.775545][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.777087][ T5920] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 121.777108][ T5920] usb 3-1: config 4 has no interface number 0 [ 121.777163][ T5920] usb 3-1: config 4 interface 30 has no altsetting 0 [ 121.817777][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 121.817925][ T5920] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 121.817945][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.866120][ T5920] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 121.866171][ T5920] dw2102: su3000_power_ctrl: 1, initialized 0 [ 121.866668][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 121.902192][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.903229][ T5920] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 121.903288][ T5920] usb 3-1: media controller created [ 121.903456][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 121.903469][ T5920] dw2102: i2c transfer failed. [ 121.903487][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 121.903498][ T5920] dw2102: i2c transfer failed. [ 121.903513][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 121.903525][ T5920] dw2102: i2c transfer failed. [ 121.903541][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 121.903553][ T5920] dw2102: i2c transfer failed. [ 121.903568][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 121.903580][ T5920] dw2102: i2c transfer failed. [ 121.903595][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 121.903607][ T5920] dw2102: i2c transfer failed. [ 121.903616][ T5920] dvb-usb: MAC address: 02:02:02:02:02:02 [ 122.045237][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.076965][ T6525] dw2102: i2c wr: len=66 is too big! [ 122.076965][ T6525] [ 122.121976][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 122.121999][ T5920] dw2102: command 0x0e transfer failed. [ 122.122007][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 122.122017][ T5920] dw2102: command 0x0e transfer failed. [ 122.444039][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 122.444060][ T5920] dw2102: command 0x0e transfer failed. [ 122.444069][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 122.444080][ T5920] dw2102: command 0x0e transfer failed. [ 122.444089][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 122.444100][ T5920] dw2102: command 0x51 transfer failed. [ 122.444109][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 122.444120][ T5920] dw2102: i2c probe for address 0x68 failed. [ 122.444130][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 122.444142][ T5920] dw2102: i2c probe for address 0x69 failed. [ 122.444152][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 122.444163][ T5920] dw2102: i2c probe for address 0x6a failed. [ 122.444173][ T5920] dw2102: probing for demodulator failed. Is the external power switched on? [ 122.444181][ T5920] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 122.822029][ T5920] rc_core: IR keymap rc-tt-1500 not found [ 122.822048][ T5920] Registered IR keymap rc-empty [ 122.824359][ T5920] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 122.863849][ T5920] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 122.903297][ T5920] dvb-usb: schedule remote query interval to 250 msecs. [ 122.903320][ T5920] dw2102: su3000_power_ctrl: 0, initialized 1 [ 122.903330][ T5920] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 122.945809][ T5920] usb 3-1: USB disconnect, device number 6 [ 123.261668][ T5920] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 123.781669][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.861749][ T5154] Bluetooth: to_multiplier 53684 > 3200 [ 123.932890][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 123.936192][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.936221][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.936255][ T5917] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 123.936273][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.002450][ T5917] usb 5-1: config 0 descriptor?? [ 124.435370][ T5917] hid_mf 0003:0079:1801.0007: item fetching failed at offset 0/2 [ 124.436101][ T5917] hid_mf 0003:0079:1801.0007: HID parse failed. [ 124.436179][ T5917] hid_mf 0003:0079:1801.0007: probe with driver hid_mf failed with error -22 [ 124.653778][ T10] usb 5-1: USB disconnect, device number 3 [ 125.103015][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 125.481790][ T6634] ucma_write: process 129 (syz.4.315) changed security contexts after opening file descriptor, this is not allowed. [ 125.706075][ T6638] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 125.706140][ T6638] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 125.706232][ T6638] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 125.706360][ T6638] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 125.844372][ T37] audit: type=1400 audit(1756964762.911:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6643 comm="syz.0.322" src=1 dest=20000 netif=wpan0 [ 125.941821][ T5154] Bluetooth: hci4: command tx timeout [ 127.201605][ T5922] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.370437][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.370483][ T5922] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 127.370504][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.413755][ T5922] usb 1-1: config 0 descriptor?? [ 127.460226][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 127.906888][ T5922] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0 [ 127.906927][ T5922] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0 [ 127.906949][ T5922] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0 [ 127.906972][ T5922] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0 [ 127.906997][ T5922] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0 [ 127.907020][ T5922] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0 [ 127.907045][ T5922] prodikeys 0003:041E:2801.0008: unknown main item tag 0x0 [ 127.967330][ T5922] prodikeys 0003:041E:2801.0008: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 127.980992][ T6702] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 128.118933][ T10] usb 1-1: USB disconnect, device number 7 [ 128.234595][ T5205] udevd[5205]: worker [5988] terminated by signal 33 (Unknown signal 33) [ 128.234645][ T5205] udevd[5205]: worker [5988] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:2801.0008/hidraw/hidraw0' [ 128.801801][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.361'. [ 129.587778][ T37] audit: type=1326 audit(1756964766.661:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 129.587828][ T37] audit: type=1326 audit(1756964766.661:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 129.646043][ T37] audit: type=1326 audit(1756964766.731:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 129.684030][ T37] audit: type=1326 audit(1756964766.771:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb483cbec23 code=0x7ffc0000 [ 129.684079][ T37] audit: type=1326 audit(1756964766.771:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb483cbec23 code=0x7ffc0000 [ 129.684119][ T37] audit: type=1326 audit(1756964766.771:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 129.723140][ T37] audit: type=1326 audit(1756964766.801:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 129.723188][ T37] audit: type=1326 audit(1756964766.801:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 129.817702][ T6751] xt_socket: unknown flags 0xd0 [ 130.092554][ T6758] vim2m vim2m.0: vidioc_s_fmt queue busy [ 130.311560][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.466274][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.468106][ T5917] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 130.480254][ T5917] usb 2-1: string descriptor 0 read error: -22 [ 130.480407][ T5917] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 130.480510][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.701868][ T5917] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 131.471625][ T5917] usb 2-1: device descriptor read/64, error -71 [ 131.741634][ T5917] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 131.916497][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.951098][ T5917] usb 2-1: device firmware changed [ 131.973580][ T5917] usb 2-1: USB disconnect, device number 4 [ 132.051541][ T5899] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.218867][ T5899] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 132.218894][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.218911][ T5899] usb 1-1: Product: syz [ 132.218923][ T5899] usb 1-1: Manufacturer: syz [ 132.218934][ T5899] usb 1-1: SerialNumber: syz [ 132.238196][ T5899] usb 1-1: config 0 descriptor?? [ 132.611571][ T992] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 132.655773][ T6801] tmpfs: Cannot disable swap on remount [ 132.671713][ T5899] mos7840 1-1:0.0: required endpoints missing [ 132.680670][ T5899] usb 1-1: USB disconnect, device number 8 [ 132.764162][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 132.764194][ T992] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.764231][ T992] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 132.764251][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.780009][ T992] usb 3-1: config 0 descriptor?? [ 132.784610][ T6799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.920410][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920504][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.422080][ T992] usb 3-1: string descriptor 0 read error: -71 [ 133.422599][ T992] uclogic 0003:5543:0047.0009: failed retrieving string descriptor #200: -71 [ 133.422653][ T992] uclogic 0003:5543:0047.0009: failed retrieving pen parameters: -71 [ 133.422667][ T992] uclogic 0003:5543:0047.0009: failed probing pen v2 parameters: -71 [ 133.422717][ T992] uclogic 0003:5543:0047.0009: failed probing parameters: -71 [ 133.422816][ T992] uclogic 0003:5543:0047.0009: probe with driver uclogic failed with error -71 [ 133.436438][ T992] usb 3-1: USB disconnect, device number 7 [ 133.722017][ T5899] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 133.907733][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.907766][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.907804][ T5899] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 133.907825][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.941952][ T5899] usb 1-1: config 0 descriptor?? [ 134.123129][ T6825] max out of range [ 134.434203][ T5899] mcp2200 0003:04D8:00DF.000A: item fetching failed at offset 5/7 [ 134.434994][ T5899] mcp2200 0003:04D8:00DF.000A: can't parse reports [ 134.435092][ T5899] mcp2200 0003:04D8:00DF.000A: probe with driver mcp2200 failed with error -22 [ 134.609258][ T6841] program syz.3.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.675972][ T10] usb 1-1: USB disconnect, device number 9 [ 135.841520][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.855837][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 135.855919][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 135.991805][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 135.994150][ T10] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.994179][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.994211][ T10] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 135.994232][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.013826][ T10] usb 3-1: config 0 descriptor?? [ 136.502910][ T10] hid-u2fzero 0003:20A0:4287.000B: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.2-1/input0 [ 136.507789][ T10] hid-u2fzero 0003:20A0:4287.000B: NitroKey U2F LED initialised [ 136.508124][ T10] hid-u2fzero 0003:20A0:4287.000B: NitroKey U2F RNG initialised [ 136.540489][ T5920] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.684538][ T10] usb 3-1: USB disconnect, device number 8 [ 136.703420][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 136.710324][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.710353][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.710389][ T5920] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 136.710409][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.727264][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 136.788033][ T5906] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.807804][ T5920] usb 4-1: config 0 descriptor?? [ 136.941594][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 136.945409][ T5906] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 136.945434][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.987211][ T5906] usb 1-1: config 0 descriptor?? [ 137.254080][ T5920] koneplus 0003:1E7D:2D51.000C: item fetching failed at offset 1/5 [ 137.254852][ T5920] koneplus 0003:1E7D:2D51.000C: parse failed [ 137.254920][ T5920] koneplus 0003:1E7D:2D51.000C: probe with driver koneplus failed with error -22 [ 137.456961][ T5920] usb 4-1: USB disconnect, device number 3 [ 137.561599][ T5906] magicmouse 0003:05AC:0269.000D: reserved main item tag 0xd [ 137.561640][ T5906] magicmouse 0003:05AC:0269.000D: item fetching failed at offset 4/5 [ 137.562529][ T5906] magicmouse 0003:05AC:0269.000D: magicmouse hid parse failed [ 137.562642][ T5906] magicmouse 0003:05AC:0269.000D: probe with driver magicmouse failed with error -22 [ 137.679545][ T5922] usb 1-1: USB disconnect, device number 10 [ 137.947557][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 138.414250][ T6941] netlink: 'syz.0.462': attribute type 3 has an invalid length. [ 138.638216][ T6953] tipc: Enabling of bearer rejected, failed to enable media [ 138.989574][ T992] kernel write not supported for file /amidi2 (pid: 992 comm: kworker/0:2) [ 139.251721][ T5922] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 139.404083][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.404121][ T5922] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 139.404141][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.467549][ T5922] usb 4-1: config 0 descriptor?? [ 139.931956][ T5922] kye 0003:0458:5013.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 139.938172][ T5922] kye 0003:0458:5013.000E: hidraw0: USB HID v0.06 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 139.938200][ T5922] kye 0003:0458:5013.000E: tablet-enabling feature report not found [ 139.938214][ T5922] kye 0003:0458:5013.000E: tablet enabling failed [ 140.093241][ T6985] netlink: 'syz.2.481': attribute type 30 has an invalid length. [ 140.135052][ T5922] usb 4-1: USB disconnect, device number 4 [ 140.507131][ T6988] fido_id[6988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 140.681546][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.765463][ T5906] IPVS: starting estimator thread 0... [ 140.831741][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 140.839773][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.839796][ T10] usb 3-1: config 0 has no interface number 0 [ 140.843306][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 140.843331][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.843348][ T10] usb 3-1: Product: syz [ 140.843360][ T10] usb 3-1: Manufacturer: syz [ 140.843372][ T10] usb 3-1: SerialNumber: syz [ 140.861751][ T6999] IPVS: using max 8 ests per chain, 19200 per kthread [ 140.878476][ T10] usb 3-1: config 0 descriptor?? [ 140.933632][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 140.933666][ T10] usb 3-1: selecting invalid altsetting 1 [ 140.933680][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 140.987917][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.992920][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 140.992980][ T10] usb 3-1: media controller created [ 141.172394][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.283302][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 141.283358][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 141.284120][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 141.442880][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 141.614883][ T10] usb 3-1: USB disconnect, device number 9 [ 141.688726][ T5922] kernel write not supported for file /sg0 (pid: 5922 comm: kworker/1:6) [ 141.952408][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.501'. [ 141.952762][ T7029] Zero length message leads to an empty skb [ 142.316915][ T7043] overlayfs: failed to resolve './file1': -2 [ 142.581044][ T37] audit: type=1326 audit(1756964779.661:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fe8bebe9 code=0x7ffc0000 [ 142.581095][ T37] audit: type=1326 audit(1756964779.661:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fe8bebe9 code=0x7ffc0000 [ 142.591788][ T37] audit: type=1326 audit(1756964779.671:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe4fe8bebe9 code=0x7ffc0000 [ 142.598489][ T37] audit: type=1326 audit(1756964779.681:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fe8bebe9 code=0x7ffc0000 [ 142.598535][ T37] audit: type=1326 audit(1756964779.681:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fe4fe8bebe9 code=0x7ffc0000 [ 142.598572][ T37] audit: type=1326 audit(1756964779.681:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fe8bebe9 code=0x7ffc0000 [ 142.598642][ T37] audit: type=1326 audit(1756964779.681:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fe8bebe9 code=0x7ffc0000 [ 143.127060][ T7066] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 144.130549][ T7092] overlayfs: missing 'workdir' [ 144.263495][ T5920] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.441599][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 144.444887][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 144.444931][ T5920] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 144.444951][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.502157][ T5920] usb 4-1: config 0 descriptor?? [ 144.952920][ T5920] corsair 0003:1B1C:1B09.000F: unbalanced delimiter at end of report description [ 144.953715][ T5920] corsair 0003:1B1C:1B09.000F: parse failed [ 144.953810][ T5920] corsair 0003:1B1C:1B09.000F: probe with driver corsair failed with error -22 [ 145.161631][ T5922] usb 4-1: USB disconnect, device number 5 [ 145.438087][ T7132] ieee802154 phy0 wpan0: encryption failed: -126 [ 147.211546][ T5920] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.364136][ T5920] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 147.364161][ T5920] usb 1-1: config 0 has no interface number 0 [ 147.364191][ T5920] usb 1-1: config 0 interface 98 has no altsetting 0 [ 147.367126][ T5920] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 147.367149][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.367165][ T5920] usb 1-1: Product: syz [ 147.367176][ T5920] usb 1-1: Manufacturer: syz [ 147.367187][ T5920] usb 1-1: SerialNumber: syz [ 147.411545][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.467804][ T5920] usb 1-1: config 0 descriptor?? [ 147.561666][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 147.578977][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 147.579003][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.579020][ T10] usb 5-1: Product: syz [ 147.579032][ T10] usb 5-1: Manufacturer: syz [ 147.579044][ T10] usb 5-1: SerialNumber: syz [ 147.616444][ T10] usb 5-1: config 0 descriptor?? [ 147.655387][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 147.710673][ T5920] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 148.281037][ T10] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 148.333501][ T5920] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 148.336718][ T10] usb 5-1: USB disconnect, device number 4 [ 148.735973][ T5920] usb 1-1: failed to restore interface 98 altsetting 4 (error=-71) [ 148.736535][ T5920] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 148.736613][ T5920] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 148.787326][ T5922] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 148.787349][ T5922] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 148.923672][ T5920] usb 1-1: USB disconnect, device number 11 [ 151.000131][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.599'. [ 151.309247][ T7253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.571523][ T1238] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.721520][ T1238] usb 1-1: Using ep0 maxpacket: 16 [ 151.723881][ T1238] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.734830][ T1238] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 151.734856][ T1238] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 151.734874][ T1238] usb 1-1: Product: syz [ 151.734886][ T1238] usb 1-1: Manufacturer: syz [ 151.734899][ T1238] usb 1-1: SerialNumber: syz [ 151.786556][ T1238] usb 1-1: config 0 descriptor?? [ 152.240439][ T1238] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 152.269376][ T1238] usb 1-1: USB disconnect, device number 12 [ 152.336182][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.485091][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 153.485270][ T7292] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 153.485298][ T7292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.964014][ T7206] syz.2.583 (7206): drop_caches: 1 [ 154.861577][ T5920] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.013854][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 155.016544][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.016571][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.016596][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.016634][ T5920] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 155.016654][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.028445][ T5920] usb 1-1: config 0 descriptor?? [ 155.489368][ T5920] hid-multitouch 0003:0457:07DA.0010: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 155.666401][ T5920] usb 1-1: USB disconnect, device number 13 [ 156.024040][ T7330] fido_id[7330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 157.018674][ T7343] netlink: 260 bytes leftover after parsing attributes in process `syz.0.646'. [ 157.018697][ T7343] netlink: 260 bytes leftover after parsing attributes in process `syz.0.646'. [ 157.056754][ T3608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.226310][ T7347] warning: `syz.0.648' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.671457][ T7353] mmap: syz.0.651 (7353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.844356][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.847028][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.849167][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.895512][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.908661][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.958507][ T3608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.526850][ T3608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.125068][ T3608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.211550][ T1238] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.383708][ T1238] usb 1-1: Using ep0 maxpacket: 32 [ 159.386382][ T1238] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.386404][ T1238] usb 1-1: config 0 has no interface number 0 [ 159.402002][ T1238] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 159.402028][ T1238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.402045][ T1238] usb 1-1: Product: syz [ 159.402057][ T1238] usb 1-1: Manufacturer: syz [ 159.402068][ T1238] usb 1-1: SerialNumber: syz [ 159.434069][ T1238] usb 1-1: config 0 descriptor?? [ 159.439186][ T1238] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 159.439209][ T1238] usb 1-1: selecting invalid altsetting 1 [ 159.439223][ T1238] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 159.491294][ T1238] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.494326][ T1238] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 159.494378][ T1238] usb 1-1: media controller created [ 159.582133][ T1238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.743983][ T1238] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 159.744037][ T1238] zl10353_read_register: readreg error (reg=127, ret==-71) [ 159.744486][ T1238] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 159.926275][ T1238] usb 1-1: USB disconnect, device number 14 [ 159.942804][ T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.101708][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 160.101916][ T5154] Bluetooth: hci2: command tx timeout [ 160.105975][ T49] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 160.110679][ T49] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 160.110704][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.110720][ T49] usb 2-1: Product: syz [ 160.110732][ T49] usb 2-1: Manufacturer: syz [ 160.110744][ T49] usb 2-1: SerialNumber: syz [ 160.227398][ T49] usb 2-1: config 0 descriptor?? [ 160.304691][ T49] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 160.304747][ T49] usb 2-1: setting power ON [ 160.304769][ T49] dvb-usb: bulk message failed: -22 (2/0) [ 160.364957][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.382014][ T49] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 160.382072][ T49] usb 2-1: media controller created [ 160.492507][ T7392] dvb-usb: bulk message failed: -22 (3/0) [ 160.492531][ T7392] dvb-usb: bulk message failed: -22 (3/0) [ 160.613413][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.796239][ T49] usb 2-1: selecting invalid altsetting 6 [ 160.796262][ T49] usb 2-1: digital interface selection failed (-22) [ 160.796275][ T49] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 160.802742][ T49] usb 2-1: setting power OFF [ 160.802956][ T49] dvb-usb: bulk message failed: -22 (2/0) [ 160.802971][ T49] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 160.802982][ T49] (NULL device *): no alternate interface [ 160.903808][ T7403] syz.0.673 (7403) used greatest stack depth: 16760 bytes left [ 161.012789][ T7411] use of bytesused == 0 is deprecated and will be removed in the future, [ 161.012804][ T7411] use the actual size instead. [ 161.045038][ T3608] bridge_slave_1: left allmulticast mode [ 161.045606][ T3608] bridge_slave_1: left promiscuous mode [ 161.094343][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.177460][ T49] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 161.228920][ T49] usb 2-1: USB disconnect, device number 5 [ 161.295557][ T7415] tmpfs: Bad value for 'mpol' [ 161.311985][ T7415] tmpfs: Bad value for 'mpol' [ 161.348848][ T3608] bridge_slave_0: left allmulticast mode [ 161.348876][ T3608] bridge_slave_0: left promiscuous mode [ 161.349089][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.961528][ T992] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 162.083104][ T49] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 162.116423][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.116469][ T992] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 162.116489][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.154297][ T992] usb 2-1: config 0 descriptor?? [ 162.182283][ T5154] Bluetooth: hci2: command tx timeout [ 162.241645][ T5921] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 162.266143][ T49] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 162.266239][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.267938][ T49] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 162.267962][ T49] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 162.267979][ T49] usb 1-1: Manufacturer: syz [ 162.304556][ T49] usb 1-1: config 0 descriptor?? [ 162.405872][ T5921] usb 5-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 162.405917][ T5921] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.405936][ T5921] usb 5-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 162.405956][ T5921] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.405985][ T5921] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 162.406004][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.438127][ T5921] usb 5-1: config 0 descriptor?? [ 162.601107][ T992] hid-corsair-void 0003:1B1C:0A0F.0011: item fetching failed at offset 0/3 [ 162.611876][ T992] hid-corsair-void 0003:1B1C:0A0F.0011: parse failed (reason: -22) [ 162.611984][ T992] hid-corsair-void 0003:1B1C:0A0F.0011: probe with driver hid-corsair-void failed with error -22 [ 162.654203][ T49] rc_core: IR keymap rc-hauppauge not found [ 162.654222][ T49] Registered IR keymap rc-empty [ 162.712430][ T49] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 162.770727][ T49] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 162.845030][ T1238] usb 2-1: USB disconnect, device number 6 [ 163.004893][ T7442] rc rc0: two consecutive events of type space [ 163.141011][ T5921] nzxt-kraken2 0003:1E71:170E.0012: unknown main item tag 0x0 [ 163.141165][ T5921] nzxt-kraken2 0003:1E71:170E.0012: unknown main item tag 0x0 [ 163.141193][ T5921] nzxt-kraken2 0003:1E71:170E.0012: unknown main item tag 0x0 [ 163.141274][ T5921] nzxt-kraken2 0003:1E71:170E.0012: unknown main item tag 0x0 [ 163.141301][ T5921] nzxt-kraken2 0003:1E71:170E.0012: unknown main item tag 0x0 [ 163.289717][ T5921] nzxt-kraken2 0003:1E71:170E.0012: hidraw0: USB HID v8.00 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0 [ 163.555277][ T5921] usb 5-1: USB disconnect, device number 5 [ 163.589509][ T49] usb 1-1: USB disconnect, device number 15 [ 163.665727][ T7445] fido_id[7445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 163.821794][ T6012] udevd[6012]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 163.821963][ T6012] udevd[6012]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 163.872880][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.885824][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.887140][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.889031][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.894527][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.268946][ T5154] Bluetooth: hci2: command tx timeout [ 164.811662][ T7472] netlink: 'syz.0.697': attribute type 2 has an invalid length. [ 166.021708][ T5154] Bluetooth: hci5: command tx timeout [ 166.341732][ T5154] Bluetooth: hci2: command tx timeout [ 166.595029][ T3608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.611638][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 166.712793][ T3608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.761601][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 166.763868][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.763891][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.766436][ T3608] bond0 (unregistering): Released all slaves [ 166.768121][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.768144][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.768161][ T10] usb 1-1: Product: syz [ 166.768173][ T10] usb 1-1: Manufacturer: syz [ 166.768185][ T10] usb 1-1: SerialNumber: syz [ 167.083699][ T10] usb 1-1: 0:2 : does not exist [ 167.109112][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 167.198524][ T10] usb 1-1: USB disconnect, device number 16 [ 167.267451][ T7483] team_slave_0: entered promiscuous mode [ 167.267981][ T7483] team_slave_1: entered promiscuous mode [ 167.325347][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.813081][ T7356] chnl_net:caif_netlink_parms(): no params data found [ 168.102785][ T5154] Bluetooth: hci5: command tx timeout [ 169.305472][ T3608] hsr_slave_0: left promiscuous mode [ 169.371582][ T3608] hsr_slave_1: left promiscuous mode [ 169.372657][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.372743][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.482010][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.482041][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.724831][ T3608] veth1_macvtap: left promiscuous mode [ 169.725155][ T3608] veth0_macvtap: left promiscuous mode [ 169.725485][ T3608] veth1_vlan: left promiscuous mode [ 169.748342][ T3608] veth0_vlan: left promiscuous mode [ 170.181597][ T5154] Bluetooth: hci5: command tx timeout [ 171.711772][ T5921] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.864132][ T5921] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 171.864158][ T5921] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 171.864174][ T5921] usb 2-1: config 0 has no interface number 0 [ 171.864218][ T5921] usb 2-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.864242][ T5921] usb 2-1: config 0 interface 30 has no altsetting 0 [ 171.864274][ T5921] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 171.864294][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.873371][ T5921] usb 2-1: config 0 descriptor?? [ 171.879812][ T5921] usb 2-1: unknown interface protocol 0x41, assuming v1 [ 171.879833][ T5921] usb 2-1: 30:2 : does not exist [ 172.089076][ T5921] usb 2-1: USB disconnect, device number 7 [ 172.262872][ T5154] Bluetooth: hci5: command tx timeout [ 173.012823][ T3608] team0 (unregistering): Port device team_slave_1 removed [ 173.351369][ T3608] team0 (unregistering): Port device team_slave_0 removed [ 173.377697][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 173.377720][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 173.377743][ T7617] netlink: 'syz.1.756': attribute type 11 has an invalid length. [ 173.377756][ T7617] netlink: 'syz.1.756': attribute type 13 has an invalid length. [ 175.971752][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.971896][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.972130][ T7356] bridge_slave_0: entered allmulticast mode [ 176.004358][ T7356] bridge_slave_0: entered promiscuous mode [ 176.079191][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.079414][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.079635][ T7356] bridge_slave_1: entered allmulticast mode [ 176.102581][ T7356] bridge_slave_1: entered promiscuous mode [ 176.477233][ T7638] futex_wake_op: syz.0.766 tries to shift op by 32; fix this program [ 176.641511][ T5920] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 176.695217][ T7356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.810512][ T7356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.834918][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.834962][ T5920] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 176.834982][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.884364][ T5920] usb 5-1: config 0 descriptor?? [ 177.197129][ T7356] team0: Port device team_slave_0 added [ 177.252089][ T7356] team0: Port device team_slave_1 added [ 177.304266][ T37] audit: type=1326 audit(1756964814.381:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7650 comm="syz.0.771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff732b4ebe9 code=0x0 [ 177.357471][ T5920] aquacomputer_d5next 0003:0C70:F00B.0013: unknown main item tag 0x1 [ 177.357507][ T5920] aquacomputer_d5next 0003:0C70:F00B.0013: unknown main item tag 0x0 [ 177.357534][ T5920] aquacomputer_d5next 0003:0C70:F00B.0013: unknown main item tag 0x0 [ 177.397528][ T5920] aquacomputer_d5next 0003:0C70:F00B.0013: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.4-1/input0 [ 177.523247][ T5920] usb 5-1: USB disconnect, device number 6 [ 177.589088][ T7654] fido_id[7654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 177.631786][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.787075][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.787104][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.790845][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.790859][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.790881][ T7356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.798093][ T10] usb 2-1: config 0 descriptor?? [ 177.816409][ T10] cp210x 2-1:0.0: cp210x converter detected [ 178.002056][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.002072][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.002095][ T7356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.352430][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 178.452955][ T10] usb 2-1: USB disconnect, device number 8 [ 178.497817][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 178.692220][ T10] cp210x 2-1:0.0: device disconnected [ 178.872514][ T7356] hsr_slave_0: entered promiscuous mode [ 178.873978][ T7356] hsr_slave_1: entered promiscuous mode [ 178.874889][ T7356] debugfs: 'hsr0' already exists in 'hsr' [ 178.874912][ T7356] Cannot create hsr debugfs directory [ 179.273952][ T3608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.388039][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 179.797606][ T7699] netlink: 'syz.4.787': attribute type 4 has an invalid length. [ 179.797624][ T7699] netlink: 17 bytes leftover after parsing attributes in process `syz.4.787'. [ 179.884218][ T3608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.946102][ T10] hid-generic 0001:0009:0001.0014: item fetching failed at offset 0/4 [ 179.946873][ T10] hid-generic 0001:0009:0001.0014: probe with driver hid-generic failed with error -22 [ 180.459095][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 180.521294][ T3608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.561907][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.729208][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.729238][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.729274][ T10] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 180.729294][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.786242][ T10] usb 2-1: config 0 descriptor?? [ 180.939256][ T3608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.218470][ T10] elo 0003:04E7:0030.0015: item fetching failed at offset 5/7 [ 181.219257][ T10] elo 0003:04E7:0030.0015: parse failed [ 181.219356][ T10] elo 0003:04E7:0030.0015: probe with driver elo failed with error -22 [ 181.345155][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.349948][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.350136][ T7448] bridge_slave_0: entered allmulticast mode [ 181.374813][ T7448] bridge_slave_0: entered promiscuous mode [ 181.409975][ T5921] usb 2-1: USB disconnect, device number 9 [ 181.492033][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.492241][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.492466][ T7448] bridge_slave_1: entered allmulticast mode [ 181.495188][ T7448] bridge_slave_1: entered promiscuous mode [ 181.952007][ T5921] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 182.090702][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.111785][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 182.114399][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.114440][ T5921] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 182.114460][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.136466][ T5921] usb 1-1: config 0 descriptor?? [ 182.187927][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.331651][ T7441] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.488637][ T7441] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 182.488662][ T7441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.488679][ T7441] usb 2-1: config 0 has no interface number 0 [ 182.488784][ T7441] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 182.488804][ T7441] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.518232][ T7441] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 182.519152][ T7441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.519171][ T7441] usb 2-1: Product: syz [ 182.519183][ T7441] usb 2-1: Manufacturer: syz [ 182.519195][ T7441] usb 2-1: SerialNumber: syz [ 182.604178][ T5921] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 182.604219][ T5921] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 182.604245][ T5921] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 182.604271][ T5921] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 182.604296][ T5921] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 182.627761][ T7441] usb 2-1: config 0 descriptor?? [ 182.635123][ T5921] arvo 0003:1E7D:30D4.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 182.827734][ T992] usb 1-1: USB disconnect, device number 17 [ 183.106799][ T7448] team0: Port device team_slave_0 added [ 183.156004][ T7752] fido_id[7752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 183.163171][ T7448] team0: Port device team_slave_1 added [ 183.321191][ T7759] Illegal XDP return value 4294967274 on prog (id 59) dev N/A, expect packet loss! [ 183.344487][ T10] usb 2-1: USB disconnect, device number 10 [ 183.561827][ T7763] devpts: Bad value for 'max' [ 183.874572][ T3608] team0: left allmulticast mode [ 183.874593][ T3608] team_slave_0: left allmulticast mode [ 183.874616][ T3608] team_slave_1: left allmulticast mode [ 183.875060][ T3608] bridge0: port 3(team0) entered disabled state [ 184.034499][ T3608] bridge_slave_1: left allmulticast mode [ 184.034531][ T3608] bridge_slave_1: left promiscuous mode [ 184.035429][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.211003][ T3608] bridge_slave_0: left allmulticast mode [ 184.211033][ T3608] bridge_slave_0: left promiscuous mode [ 184.211266][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.873334][ T3608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.932421][ T3608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.958492][ T3608] bond0 (unregistering): Released all slaves [ 186.994336][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.994351][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.994374][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.196880][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.196895][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.196917][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.405431][ T7356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.821308][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 187.925782][ T7356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.067987][ T7859] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 188.213468][ T7356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.905842][ T7356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.994512][ T7448] hsr_slave_0: entered promiscuous mode [ 188.997881][ T7448] hsr_slave_1: entered promiscuous mode [ 189.000183][ T7448] debugfs: 'hsr0' already exists in 'hsr' [ 189.000207][ T7448] Cannot create hsr debugfs directory [ 189.000461][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 189.025384][ T7880] pimreg: entered allmulticast mode [ 189.311607][ T7900] netlink: 44 bytes leftover after parsing attributes in process `syz.4.864'. [ 189.311632][ T7900] netlink: 43 bytes leftover after parsing attributes in process `syz.4.864'. [ 189.311646][ T7900] netlink: 'syz.4.864': attribute type 6 has an invalid length. [ 189.311657][ T7900] netlink: 'syz.4.864': attribute type 5 has an invalid length. [ 189.311669][ T7900] netlink: 43 bytes leftover after parsing attributes in process `syz.4.864'. [ 189.562369][ T3608] hsr_slave_0: left promiscuous mode [ 189.601666][ T3608] hsr_slave_1: left promiscuous mode [ 189.603068][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.603093][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.662895][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.662924][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.766505][ T3608] veth1_macvtap: left promiscuous mode [ 189.766637][ T3608] veth0_macvtap: left promiscuous mode [ 189.766928][ T3608] veth1_vlan: left promiscuous mode [ 189.767134][ T3608] veth0_vlan: left promiscuous mode [ 192.013652][ T3608] team_slave_1 (unregistering): left promiscuous mode [ 192.060859][ T3608] team0 (unregistering): Port device team_slave_1 removed [ 192.222980][ T3608] team_slave_0 (unregistering): left promiscuous mode [ 192.242330][ T3608] team0 (unregistering): Port device team_slave_0 removed [ 193.708089][ T5154] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 193.708224][ T5154] Bluetooth: hci4: Injecting HCI hardware error event [ 193.710038][ T59] Bluetooth: hci4: hardware error 0x00 [ 194.354007][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354073][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.240119][ T7927] Bluetooth: MGMT ver 1.23 [ 195.884683][ T7946] netlink: 32 bytes leftover after parsing attributes in process `syz.4.880'. [ 195.942397][ T59] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 196.248140][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.295693][ T7448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.494207][ T7966] nbd: must specify a size in bytes for the device [ 196.570053][ T7448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.730647][ T7448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.851322][ T7448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.081559][ T7356] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.160166][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.161637][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.228944][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.229176][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.312738][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 197.471619][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 197.508693][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.508741][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 197.508761][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.560021][ T10] usb 1-1: config 0 descriptor?? [ 198.052730][ T10] cypress 0003:04B4:07B1.0017: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0 [ 198.248953][ T7441] usb 1-1: USB disconnect, device number 18 [ 198.469983][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.561340][ T8017] devpts: Bad value for 'max' [ 198.630665][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.666901][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.667112][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.691228][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.716761][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.717015][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.201938][ T7441] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 199.359380][ T7441] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 199.359441][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 199.359464][ T7441] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.359486][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 199.359508][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 199.361006][ T7441] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 199.361055][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 199.361079][ T7441] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.361100][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 199.361122][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 199.362594][ T7441] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 199.362649][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 199.362672][ T7441] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.362694][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 199.362717][ T7441] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 199.378085][ T7441] usb 5-1: string descriptor 0 read error: -22 [ 199.378226][ T7441] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 199.378246][ T7441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.684085][ T7441] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 199.812908][ T7441] usb 5-1: USB disconnect, device number 7 [ 199.964302][ T8050] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 199.964357][ T8050] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 199.964438][ T8050] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 199.964596][ T8050] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 199.964653][ T8050] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 200.354370][ T7356] veth0_vlan: entered promiscuous mode [ 200.398277][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.435027][ T7356] veth1_vlan: entered promiscuous mode [ 200.483922][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 200.739887][ T7356] veth0_macvtap: entered promiscuous mode [ 200.777437][ T7356] veth1_macvtap: entered promiscuous mode [ 200.820215][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.900519][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.969673][ T1128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.981177][ T1128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.998697][ T1128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.018289][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.610575][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.610591][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.790797][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.790816][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.121901][ T7448] veth0_vlan: entered promiscuous mode [ 202.182335][ T7448] veth1_vlan: entered promiscuous mode [ 202.382729][ T7448] veth0_macvtap: entered promiscuous mode [ 202.462558][ T7448] veth1_macvtap: entered promiscuous mode [ 202.639024][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.657062][ T37] audit: type=1800 audit(1756964839.711:19): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.932" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 202.693777][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.770988][ T1114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.817529][ T1114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.832327][ T1114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.835738][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.494314][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.494334][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.913446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.913465][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.751739][ T5917] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 204.904165][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 204.904196][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 204.904235][ T5917] usb 7-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 204.904255][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.910729][ T5917] usb 7-1: config 0 descriptor?? [ 204.947257][ T8179] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 205.113015][ T8194] netlink: 56 bytes leftover after parsing attributes in process `syz.4.960'. [ 205.113149][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.960'. [ 205.417979][ T5917] waltop 0003:172F:0500.0018: unknown main item tag 0x0 [ 205.418015][ T5917] waltop 0003:172F:0500.0018: unknown main item tag 0x0 [ 205.418041][ T5917] waltop 0003:172F:0500.0018: unknown main item tag 0x0 [ 205.418065][ T5917] waltop 0003:172F:0500.0018: unknown main item tag 0x0 [ 205.418090][ T5917] waltop 0003:172F:0500.0018: unknown main item tag 0x0 [ 205.418114][ T5917] waltop 0003:172F:0500.0018: unknown main item tag 0x0 [ 205.418139][ T5917] waltop 0003:172F:0500.0018: unknown main item tag 0x0 [ 205.488586][ T5917] waltop 0003:172F:0500.0018: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.6-1/input0 [ 205.642262][ T10] usb 7-1: USB disconnect, device number 2 [ 205.899509][ T8206] fido_id[8206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 206.531552][ T5921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 206.691510][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 206.694080][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0 [ 206.694196][ T5921] usb 6-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 206.694217][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.744982][ T5921] usb 6-1: config 0 descriptor?? [ 206.771660][ T8239] netlink: 72 bytes leftover after parsing attributes in process `syz.6.976'. [ 207.165900][ T5921] apple 0003:05AC:0250.0019: unknown main item tag 0x0 [ 207.165935][ T5921] apple 0003:05AC:0250.0019: unknown main item tag 0x0 [ 207.165966][ T5921] apple 0003:05AC:0250.0019: unknown main item tag 0x0 [ 207.244984][ T5921] apple 0003:05AC:0250.0019: hidraw0: USB HID v0.4b Device [HID 05ac:0250] on usb-dummy_hcd.5-1/input0 [ 207.389591][ T5917] usb 6-1: USB disconnect, device number 2 [ 207.520464][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.982'. [ 208.132732][ T5906] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 208.284799][ T5906] usb 7-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.284839][ T5906] usb 7-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.284859][ T5906] usb 7-1: config 2 interface 0 has no altsetting 0 [ 208.284889][ T5906] usb 7-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 208.284909][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.802422][ T5906] apple 0003:05AC:027A.001A: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.6-1/input0 [ 209.011631][ T5906] usb 7-1: USB disconnect, device number 3 [ 209.121748][ T8305] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.271337][ T8310] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 209.271358][ T8310] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1003'. [ 209.537759][ T5921] kernel read not supported for file /rfkill (pid: 5921 comm: kworker/1:5) [ 209.595270][ T1238] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 209.714789][ T5922] usb 1-1: [UEAGLE-ATM] firmware is not available [ 209.783678][ T1238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.783710][ T1238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.783745][ T1238] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 209.783769][ T1238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.815203][ T1238] usb 2-1: config 0 descriptor?? [ 210.041572][ T5922] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 210.192161][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 210.195906][ T5922] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 210.195929][ T5922] usb 6-1: config 0 has no interface number 0 [ 210.196030][ T5922] usb 6-1: config 0 interface 2 has no altsetting 0 [ 210.201350][ T5922] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 210.201563][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.201583][ T5922] usb 6-1: Product: syz [ 210.201595][ T5922] usb 6-1: Manufacturer: syz [ 210.201606][ T5922] usb 6-1: SerialNumber: syz [ 210.294983][ T5922] usb 6-1: config 0 descriptor?? [ 210.360196][ T1238] hid_mf 0003:0079:1846.001B: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 210.360282][ T1238] hid_mf 0003:0079:1846.001B: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 210.502338][ T5922] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.529821][ T5970] usb 2-1: USB disconnect, device number 11 [ 210.772321][ T8335] fido_id[8335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 210.943757][ T5922] usb 6-1: USB disconnect, device number 3 [ 210.944112][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1017'. [ 210.967871][ T8343] IPVS: stopping backup sync thread 7859 ... [ 211.138826][ T7913] udevd[7913]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.342710][ T8348] tipc: Started in network mode [ 211.342742][ T8348] tipc: Node identity 2d000000400000000075000000000001, cluster identity 4711 [ 211.342793][ T8348] tipc: Enabling of bearer rejected, failed to enable media [ 211.384916][ T8350] nbd: socks must be embedded in a SOCK_ITEM attr [ 211.701891][ T5922] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 211.783636][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 211.876972][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.877000][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.877040][ T5922] usb 6-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 211.877060][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.890282][ T5922] usb 6-1: config 0 descriptor?? [ 212.156391][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 212.458136][ T5922] wacom 0003:056A:0336.001C: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.5-1/input0 [ 212.662214][ T1238] usb 6-1: USB disconnect, device number 4 [ 212.854664][ T8380] fido_id[8380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 213.402884][ T8413] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 213.583631][ T8413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.627007][ T8413] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 214.171567][ T5970] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 214.200724][ T5921] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 214.331818][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 214.347154][ T5970] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 214.347179][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.347194][ T5970] usb 5-1: Product: syz [ 214.347204][ T5970] usb 5-1: Manufacturer: syz [ 214.347216][ T5970] usb 5-1: SerialNumber: syz [ 214.375162][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 214.377727][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.377753][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.377787][ T5921] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 214.377806][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.404178][ T5921] usb 2-1: config 0 descriptor?? [ 214.444020][ T5970] usb 5-1: config 0 descriptor?? [ 214.463492][ T5970] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 214.551605][ T5906] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 214.715006][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.715036][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.715055][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.715148][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 214.715180][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.797003][ T5906] usb 6-1: config 0 descriptor?? [ 214.872367][ T5921] hid_parser_main: 1268 callbacks suppressed [ 214.872387][ T5921] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 214.872418][ T5921] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 214.872443][ T5921] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 214.872468][ T5921] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 214.872494][ T5921] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 214.931984][ T5921] savu 0003:1E7D:2D5A.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 215.024085][ T5970] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 215.158395][ T5921] usb 2-1: USB disconnect, device number 12 [ 215.256740][ T5922] usb 5-1: USB disconnect, device number 8 [ 215.269328][ T5906] apple 0003:05AC:8102.001E: unknown main item tag 0x0 [ 215.269362][ T5906] apple 0003:05AC:8102.001E: unknown main item tag 0x0 [ 215.269387][ T5906] apple 0003:05AC:8102.001E: unknown main item tag 0x0 [ 215.269412][ T5906] apple 0003:05AC:8102.001E: unknown main item tag 0x0 [ 215.269436][ T5906] apple 0003:05AC:8102.001E: unknown main item tag 0x0 [ 215.339782][ T8445] fido_id[8445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 215.363948][ T5922] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 215.364700][ T5922] visor 5-1:0.0: device disconnected [ 215.454567][ T8454] tipc: Started in network mode [ 215.454594][ T8454] tipc: Node identity b27e064e312, cluster identity 4711 [ 215.456005][ T8454] tipc: Enabled bearer , priority 10 [ 215.486081][ T5906] apple 0003:05AC:8102.001E: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.5-1/input0 [ 215.615492][ T5906] usb 6-1: USB disconnect, device number 5 [ 215.742204][ T8458] fido_id[8458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 216.086041][ T8467] binder: Bad value for 'stats' [ 216.229962][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 216.230025][ T8471] tipc: Started in network mode [ 216.230045][ T8471] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 216.230089][ T8471] tipc: Enabling of bearer rejected, failed to enable media [ 216.574808][ T5970] tipc: Node number set to 2203977294 [ 217.930693][ T8520] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 219.084635][ T8556] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 219.084672][ T8556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.654010][ T8579] kernel profiling enabled (shift: 5) [ 220.121540][ T5922] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 220.273443][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 220.279380][ T5922] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.279404][ T5922] usb 1-1: config 0 has no interface number 0 [ 220.310346][ T5922] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.310373][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.310390][ T5922] usb 1-1: Product: syz [ 220.310402][ T5922] usb 1-1: Manufacturer: syz [ 220.310413][ T5922] usb 1-1: SerialNumber: syz [ 220.337533][ T5922] usb 1-1: config 0 descriptor?? [ 220.393762][ T5922] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 220.616586][ T5922] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 220.679155][ T5922] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 220.764817][ T10] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 220.927687][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.927718][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.927752][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 220.927770][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.008004][ T10] usb 5-1: config 0 descriptor?? [ 221.021934][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 221.041943][ T5922] usb 1-1: USB disconnect, device number 19 [ 221.106038][ T5922] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.143274][ T5922] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.144244][ T5922] quatech2 1-1:0.51: device disconnected [ 221.645590][ T5970] usb 5-1: USB disconnect, device number 9 [ 222.022060][ T5906] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 222.191506][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 222.196655][ T5906] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.196685][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.196716][ T5906] usb 2-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 222.196736][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.264048][ T5906] usb 2-1: config 0 descriptor?? [ 222.709021][ T5906] thrustmaster 0003:044F:B300.0020: hidraw0: USB HID v0.03 Device [HID 044f:b300] on usb-dummy_hcd.1-1/input0 [ 222.709051][ T5906] thrustmaster 0003:044F:B300.0020: no inputs found [ 222.731816][ T5922] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 222.889444][ T5906] usb 2-1: USB disconnect, device number 13 [ 222.891604][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 222.893972][ T5922] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 222.893994][ T5922] usb 1-1: config 0 has no interface number 0 [ 222.894073][ T5922] usb 1-1: config 0 interface 12 has no altsetting 0 [ 222.956008][ T8648] fido_id[8648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 222.958408][ T5922] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 222.958434][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.958451][ T5922] usb 1-1: Product: syz [ 222.958464][ T5922] usb 1-1: Manufacturer: syz [ 222.958476][ T5922] usb 1-1: SerialNumber: syz [ 223.028820][ T5922] usb 1-1: config 0 descriptor?? [ 223.199824][ T8657] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1154'. [ 223.299268][ T59] Bluetooth: hci5: link tx timeout [ 223.300369][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.698127][ T5922] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 223.698180][ T5922] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 223.698195][ T5922] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 223.698284][ T5922] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 223.753503][ T5922] usb 1-1: USB disconnect, device number 20 [ 223.915982][ T8676] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 223.916034][ T8676] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 223.916118][ T8676] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 223.916251][ T8676] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 223.916302][ T8676] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 223.916357][ T8676] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 223.916488][ T8676] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 223.916535][ T8676] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 223.916580][ T8676] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 223.916666][ T8676] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 223.916712][ T8676] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 223.916757][ T8676] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 223.916841][ T8676] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 223.916887][ T8676] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 223.916932][ T8676] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 223.916977][ T8676] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 223.917024][ T8676] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 223.917071][ T8676] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 224.110102][ T37] audit: type=1326 audit(1756964861.191:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8682 comm="syz.4.1166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82bcbfebe9 code=0x0 [ 224.332358][ T8689] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1167'. [ 224.631711][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 224.794168][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 224.794214][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 224.794320][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.846109][ T10] usb 1-1: config 0 descriptor?? [ 225.308506][ T10] logitech 0003:046D:CA03.0021: unbalanced delimiter at end of report description [ 225.309312][ T10] logitech 0003:046D:CA03.0021: parse failed [ 225.309411][ T10] logitech 0003:046D:CA03.0021: probe with driver logitech failed with error -22 [ 225.384590][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 225.516126][ T10] usb 1-1: USB disconnect, device number 21 [ 227.958690][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1223'. [ 228.206650][ T8810] sp0: Synchronizing with TNC [ 228.663259][ T8832] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1236'. [ 228.663280][ T8832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1236'. [ 228.819045][ T8837] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1237'. [ 230.381047][ T8892] program syz.1.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.647176][ T37] audit: type=1326 audit(1756964867.731:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8897 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 230.679996][ T37] audit: type=1326 audit(1756964867.731:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8897 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 230.680997][ T37] audit: type=1326 audit(1756964867.761:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8897 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 230.721186][ T37] audit: type=1326 audit(1756964867.761:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8897 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 230.721261][ T37] audit: type=1326 audit(1756964867.801:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8897 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 230.722634][ T37] audit: type=1326 audit(1756964867.801:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8897 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 230.722749][ T37] audit: type=1326 audit(1756964867.811:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8897 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb483cbebe9 code=0x7ffc0000 [ 230.931607][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 231.081472][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 231.088645][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.090415][ T9] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 231.090436][ T9] usb 5-1: config 4 has no interface number 0 [ 231.090467][ T9] usb 5-1: config 4 interface 30 has no altsetting 0 [ 231.097156][ T9] usb 5-1: string descriptor 0 read error: -22 [ 231.097308][ T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 231.097328][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.155675][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 231.155722][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 231.155741][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 231.195253][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.199770][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 231.199824][ T9] usb 5-1: media controller created [ 231.199851][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 231.199864][ T9] dw2102: i2c transfer failed. [ 231.199881][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 231.199893][ T9] dw2102: i2c transfer failed. [ 231.199909][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 231.199920][ T9] dw2102: i2c transfer failed. [ 231.199936][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 231.199948][ T9] dw2102: i2c transfer failed. [ 231.199964][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 231.199976][ T9] dw2102: i2c transfer failed. [ 231.199992][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 231.200004][ T9] dw2102: i2c transfer failed. [ 231.200011][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 231.346238][ T8901] dw2102: i2c wr: len=66 is too big! [ 231.346238][ T8901] [ 231.381345][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.508234][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 231.508254][ T9] dw2102: command 0x0e transfer failed. [ 231.508270][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 231.508282][ T9] dw2102: command 0x0e transfer failed. [ 231.821225][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 231.821246][ T9] dw2102: command 0x0e transfer failed. [ 231.821255][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 231.821267][ T9] dw2102: command 0x0e transfer failed. [ 231.821275][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 231.821285][ T9] dw2102: command 0x51 transfer failed. [ 231.821293][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 231.821304][ T9] dw2102: i2c probe for address 0x68 failed. [ 231.821313][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 231.821324][ T9] dw2102: i2c probe for address 0x69 failed. [ 231.821333][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 231.821353][ T9] dw2102: i2c probe for address 0x6a failed. [ 231.821364][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 231.821373][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 232.011830][ T9] rc_core: IR keymap rc-tt-1500 not found [ 232.011850][ T9] Registered IR keymap rc-empty [ 232.013500][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 232.068199][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14 [ 232.084598][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 232.084619][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 232.084630][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 232.114765][ T9] usb 5-1: USB disconnect, device number 10 [ 232.432696][ T8946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1290'. [ 232.443677][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 232.492524][ T5922] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 232.661662][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 232.677539][ T5922] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 232.677564][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.677581][ T5922] usb 1-1: Product: syz [ 232.677591][ T5922] usb 1-1: Manufacturer: syz [ 232.677602][ T5922] usb 1-1: SerialNumber: syz [ 232.733825][ T5922] usb 1-1: config 0 descriptor?? [ 232.738919][ T5922] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 233.359669][ T5922] gspca_ov534_9: reg_w failed -71 [ 233.641775][ T5922] gspca_ov534_9: Unknown sensor 0000 [ 233.641872][ T5922] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 233.688375][ T5922] usb 1-1: USB disconnect, device number 22 [ 233.846836][ T8975] sp0: Synchronizing with TNC [ 234.141926][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 234.291845][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 234.309705][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.309735][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.309772][ T9] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 234.309792][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.337449][ T9] usb 6-1: config 0 descriptor?? [ 234.690999][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1312'. [ 234.829364][ T9] glorious 0003:258A:0033.0022: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.5-1/input0 [ 234.974820][ T5921] usb 6-1: USB disconnect, device number 6 [ 235.129112][ T9001] fido_id[9001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 235.291265][ T9007] program syz.6.1318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.721555][ T5922] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 235.876305][ T5922] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 235.876333][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.920507][ T5922] usb 2-1: config 0 descriptor?? [ 235.932402][ T5922] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 236.354714][ T5922] gspca_cpia1: usb_control_msg 03, error -32 [ 236.368859][ T5922] gspca_cpia1: usb_control_msg 03, error -71 [ 236.369492][ T5922] gspca_cpia1: usb_control_msg 01, error -71 [ 236.369508][ T5922] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 236.391807][ T5906] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.422162][ T5922] usb 2-1: USB disconnect, device number 14 [ 236.551739][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 236.555797][ T5906] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 236.555823][ T5906] usb 5-1: config 0 has no interface number 0 [ 236.562572][ T5906] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 236.562598][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.562615][ T5906] usb 5-1: Product: syz [ 236.562626][ T5906] usb 5-1: Manufacturer: syz [ 236.562639][ T5906] usb 5-1: SerialNumber: syz [ 236.584611][ T5906] usb 5-1: config 0 descriptor?? [ 236.609832][ T5906] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 236.609888][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 236.628010][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.647760][ T5906] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 236.647823][ T5906] usb 5-1: media controller created [ 236.817603][ T9034] cxusb: i2c wr: len=79 is too big! [ 236.817603][ T9034] [ 236.818707][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.830292][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1334'. [ 236.830313][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1334'. [ 236.972161][ T5906] cxusb: set interface failed [ 236.972179][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 237.051684][ T5906] DVB: Unable to find symbol lgdt330x_attach() [ 237.051698][ T5906] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 237.171612][ T5906] rc_core: IR keymap rc-dvico-portable not found [ 237.171633][ T5906] Registered IR keymap rc-empty [ 237.173428][ T5906] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 237.176665][ T5906] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 237.262328][ T5906] dvb-usb: schedule remote query interval to 100 msecs. [ 237.262350][ T5906] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 237.292566][ T5906] usb 5-1: USB disconnect, device number 11 [ 237.296422][ T9060] netlink: 'syz.5.1343': attribute type 3 has an invalid length. [ 237.296440][ T9060] netlink: 'syz.5.1343': attribute type 1 has an invalid length. [ 237.296452][ T9060] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1343'. [ 237.625405][ T5906] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 239.188566][ T9102] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1350'. [ 239.188605][ T9102] NCSI netlink: No device for ifindex 29216 [ 239.782066][ T5922] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 239.938839][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 239.948549][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.948578][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.948615][ T5922] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 239.948636][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.015677][ T5922] usb 1-1: config 0 descriptor?? [ 240.522867][ T5922] hid-picolcd 0003:04D8:F002.0023: unbalanced collection at end of report description [ 240.525595][ T5922] hid-picolcd 0003:04D8:F002.0023: device report parse failed [ 240.525698][ T5922] hid-picolcd 0003:04D8:F002.0023: probe with driver hid-picolcd failed with error -22 [ 240.714399][ T5922] usb 1-1: USB disconnect, device number 23 [ 242.506913][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 249.581424][ C0] sched: DL replenish lagged too much [ 254.160772][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.174952][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.190940][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.211819][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.229549][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.443589][ T5154] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.449493][ T5154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.468823][ T5154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.470777][ T5154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.512472][ T5154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.790958][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.791035][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.341732][ T5839] Bluetooth: hci1: command tx timeout [ 256.581811][ T5839] Bluetooth: hci6: command tx timeout [ 258.431628][ T5839] Bluetooth: hci1: command tx timeout [ 258.663955][ T5839] Bluetooth: hci6: command tx timeout [ 258.813403][ T5154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.851871][ T5154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.858734][ T5154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.859979][ T5154] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.861312][ T5154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.953663][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 258.978820][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 258.980049][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 258.981295][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 259.006697][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 260.501689][ T9156] Bluetooth: hci1: command tx timeout [ 260.741755][ T9156] Bluetooth: hci6: command tx timeout [ 261.067206][ T9156] Bluetooth: hci8: command tx timeout [ 261.142288][ T9156] Bluetooth: hci7: command tx timeout [ 262.581629][ T9156] Bluetooth: hci1: command tx timeout [ 262.824519][ T9156] Bluetooth: hci6: command tx timeout [ 263.141754][ T9156] Bluetooth: hci8: command tx timeout [ 263.221985][ T9156] Bluetooth: hci7: command tx timeout [ 265.221581][ T9156] Bluetooth: hci8: command tx timeout [ 265.297565][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 265.301979][ T5838] Bluetooth: hci7: command tx timeout [ 265.328309][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 265.329595][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 265.348715][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 265.350118][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 267.303380][ T5834] Bluetooth: hci8: command tx timeout [ 267.381626][ T5834] Bluetooth: hci9: command tx timeout [ 267.382127][ T5834] Bluetooth: hci7: command tx timeout [ 269.461888][ T9156] Bluetooth: hci9: command tx timeout [ 271.541662][ T59] Bluetooth: hci9: command tx timeout [ 273.621633][ T59] Bluetooth: hci9: command tx timeout [ 285.952580][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 292.832237][ T9141] chnl_net:caif_netlink_parms(): no params data found [ 292.927987][ T9164] chnl_net:caif_netlink_parms(): no params data found [ 292.993387][ T9151] chnl_net:caif_netlink_parms(): no params data found [ 293.189747][ T9154] chnl_net:caif_netlink_parms(): no params data found [ 315.172623][ T9141] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 315.287079][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.320114][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.334974][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.350625][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.369072][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.498742][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.521087][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.533592][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.535200][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.536123][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.237596][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.237673][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.542465][ T59] Bluetooth: hci3: command tx timeout [ 317.622050][ T59] Bluetooth: hci5: command tx timeout [ 319.622222][ T59] Bluetooth: hci3: command tx timeout [ 319.701672][ T59] Bluetooth: hci5: command tx timeout [ 319.944647][ T9156] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 319.967808][ T9156] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 319.969648][ T9156] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 320.034058][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 320.038367][ T5838] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 320.054813][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 320.072000][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 320.082471][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 320.096442][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 320.097396][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 321.702285][ T5834] Bluetooth: hci3: command tx timeout [ 321.783150][ T5834] Bluetooth: hci5: command tx timeout [ 322.182258][ T5834] Bluetooth: hci10: command tx timeout [ 322.261760][ T5834] Bluetooth: hci11: command tx timeout [ 323.789024][ T5834] Bluetooth: hci3: command tx timeout [ 323.862079][ T5834] Bluetooth: hci5: command tx timeout [ 324.261722][ T5834] Bluetooth: hci10: command tx timeout [ 324.341989][ T5834] Bluetooth: hci11: command tx timeout [ 325.803313][ T9156] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 325.826432][ T9156] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 325.829756][ T9156] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 325.841139][ T9156] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 325.852084][ T9156] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 326.341901][ T9156] Bluetooth: hci10: command tx timeout [ 326.421825][ T9156] Bluetooth: hci11: command tx timeout [ 328.422085][ T9156] Bluetooth: hci10: command tx timeout [ 328.501716][ T9156] Bluetooth: hci11: command tx timeout [ 331.790488][ T9156] Bluetooth: hci12: command tx timeout [ 333.861949][ T9156] Bluetooth: hci12: command tx timeout [ 335.941778][ T9156] Bluetooth: hci12: command tx timeout [ 338.021995][ T9156] Bluetooth: hci12: command tx timeout [ 375.608369][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.631864][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.633119][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.634289][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.682237][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.799473][ T9156] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 375.819145][ T9156] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 375.820394][ T9156] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 375.847397][ T9156] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 375.892149][ T9156] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 377.781872][ T5834] Bluetooth: hci1: command tx timeout [ 377.942110][ T5834] Bluetooth: hci13: command tx timeout [ 378.692265][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.692342][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.861814][ T5834] Bluetooth: hci1: command tx timeout [ 380.023746][ T5834] Bluetooth: hci13: command tx timeout [ 380.408732][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 380.427667][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 380.440971][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 380.507431][ T5839] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 380.508414][ T5838] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 380.536129][ T5838] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 380.537578][ T5838] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 380.538413][ T5838] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 380.545032][ T5839] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 380.545862][ T5839] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 380.746231][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 381.942265][ T59] Bluetooth: hci1: command tx timeout [ 382.105297][ T59] Bluetooth: hci13: command tx timeout [ 382.662266][ T5839] Bluetooth: hci15: command tx timeout [ 382.664827][ T59] Bluetooth: hci14: command tx timeout [ 384.021923][ T59] Bluetooth: hci1: command tx timeout [ 384.183497][ T59] Bluetooth: hci13: command tx timeout [ 384.742012][ T59] Bluetooth: hci14: command tx timeout [ 384.742043][ T59] Bluetooth: hci15: command tx timeout [ 385.879161][ T5838] Bluetooth: hci8: command 0x0406 tx timeout [ 385.879202][ T5838] Bluetooth: hci7: command 0x0406 tx timeout [ 386.091212][ T5838] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 386.115028][ T5838] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 386.117297][ T5838] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 386.118487][ T5838] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 386.119314][ T5838] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 386.821953][ T5838] Bluetooth: hci15: command tx timeout [ 386.821987][ T5838] Bluetooth: hci14: command tx timeout [ 386.983900][ T38] INFO: task syz.5.1348:9071 blocked for more than 143 seconds. [ 386.983928][ T38] Not tainted syzkaller #0 [ 386.983938][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.983950][ T38] task:syz.5.1348 state:D stack:26760 pid:9071 tgid:9068 ppid:7356 task_flags:0x400040 flags:0x00004004 [ 386.984011][ T38] Call Trace: [ 386.984018][ T38] [ 386.984032][ T38] __schedule+0x16f3/0x4c20 [ 386.984094][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.984129][ T38] ? __pfx___schedule+0x10/0x10 [ 386.984168][ T38] ? schedule+0x91/0x360 [ 386.984192][ T38] schedule+0x165/0x360 [ 386.984215][ T38] schedule_timeout+0x9a/0x270 [ 386.984237][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 386.984271][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.984292][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.984311][ T38] ? wait_for_completion+0x267/0x5d0 [ 386.984334][ T38] wait_for_completion+0x2bf/0x5d0 [ 386.984369][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 386.984391][ T38] ? percpu_ref_put+0x1e/0x230 [ 386.984416][ T38] ? percpu_ref_put+0x1e/0x230 [ 386.984440][ T38] ? percpu_ref_put+0x188/0x230 [ 386.984466][ T38] __se_sys_io_destroy+0x12b/0x1b0 [ 386.984489][ T38] ? __pfx___se_sys_io_destroy+0x10/0x10 [ 386.984521][ T38] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 386.984546][ T38] ? syscall_user_dispatch+0x4f/0x90 [ 386.984575][ T38] do_syscall_64+0xfa/0x3b0 [ 386.984596][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.984617][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.984635][ T38] ? clear_bhb_loop+0x60/0xb0 [ 386.984656][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.984678][ T38] RIP: 0033:0x7fdcacc5ebe9 [ 386.984698][ T38] RSP: 002b:00007fdcaaec6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cf [ 386.984717][ T38] RAX: ffffffffffffffda RBX: 00007fdcace95fa0 RCX: 00007fdcacc5ebe9 [ 386.984730][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fdcaae7c000 [ 386.984743][ T38] RBP: 00007fdcacce1e19 R08: 0000000000000000 R09: 0000000000000000 [ 386.984754][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.984765][ T38] R13: 00007fdcace96038 R14: 00007fdcace95fa0 R15: 00007ffe54846068 [ 386.984797][ T38] [ 386.984829][ T38] [ 386.984829][ T38] Showing all locks held in the system: [ 386.984838][ T38] 8 locks held by ktimers/0/16: [ 386.984849][ T38] 2 locks held by rcuc/0/20: [ 386.984860][ T38] 1 lock held by khungtaskd/38: [ 386.984870][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 386.984913][ T38] 3 locks held by kworker/u8:2/43: [ 386.984923][ T38] #0: ffff888030420138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.984969][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.985034][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 386.985078][ T38] 4 locks held by kworker/u9:0/59: [ 386.985088][ T38] #0: ffff88805ce99938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.985142][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.985185][ T38] #2: ffff8880517580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 386.985226][ T38] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 386.985277][ T38] 3 locks held by kworker/0:2/992: [ 386.985291][ T38] 4 locks held by kworker/u8:8/1296: [ 386.985312][ T38] 3 locks held by kworker/u8:11/3649: [ 386.985323][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.985369][ T38] #1: ffffc9000da67bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.985412][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 386.985460][ T38] 2 locks held by getty/5593: [ 386.985469][ T38] #0: ffff88823bf320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 386.985515][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 386.985557][ T38] 5 locks held by kworker/u9:2/5834: [ 386.985567][ T38] #0: ffff88803d096938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.985610][ T38] #1: ffffc90004c97bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.985653][ T38] #2: ffff888062aa8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.985692][ T38] #3: ffff888062aa80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.985735][ T38] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 386.985779][ T38] 5 locks held by kworker/u9:4/5839: [ 386.985789][ T38] #0: ffff88803c4a3938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.985831][ T38] #1: ffffc90004dd7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.985874][ T38] #2: ffff888027770e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.985913][ T38] #3: ffff8880277700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.985956][ T38] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 386.986001][ T38] 4 locks held by kworker/0:3/5892: [ 386.986011][ T38] #0: ffff88805e610138 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.986058][ T38] #1: ffffc90004d87bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.986101][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.986151][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.986193][ T38] 4 locks held by kworker/0:4/5899: [ 386.986203][ T38] #0: ffff8880327d6538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.986250][ T38] #1: ffffc900058a7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.986295][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.986337][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.986382][ T38] 3 locks held by kworker/0:6/5970: [ 386.986392][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.986435][ T38] #1: ffffc90005fcfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.986478][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 386.986528][ T38] 1 lock held by syz.1.1351/9080: [ 386.986538][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 386.986583][ T38] 4 locks held by kworker/0:7/9124: [ 386.986592][ T38] #0: ffff88805c567d38 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.986639][ T38] #1: ffffc90004ee7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.986683][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.986725][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.986769][ T38] 1 lock held by syz.6.1371/9128: [ 386.986779][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 386.986818][ T38] 1 lock held by syz.4.1372/9131: [ 386.986829][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 386.986873][ T38] 1 lock held by syz.0.1374/9134: [ 386.986882][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 386.986922][ T38] 4 locks held by kworker/0:8/9137: [ 386.986932][ T38] #0: ffff8880327d6538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.986978][ T38] #1: ffffc90005047bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.987034][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.987077][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.987150][ T38] 1 lock held by syz-executor/9141: [ 386.987160][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 386.987202][ T38] 2 locks held by syz-executor/9145: [ 386.987212][ T38] #0: ffffffff8f1f3008 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 386.987259][ T38] #1: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 386.987301][ T38] 4 locks held by kworker/0:10/9147: [ 386.987310][ T38] #0: ffff888031439938 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.987358][ T38] #1: ffffc900050dfbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.987400][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.987442][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.987485][ T38] 2 locks held by syz-executor/9151: [ 386.987495][ T38] #0: ffffffff8e43ace0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 386.987541][ T38] #1: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 386.987583][ T38] 2 locks held by syz-executor/9154: [ 386.987593][ T38] #0: ffffffff8e447ee0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 386.987640][ T38] #1: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 386.987682][ T38] 6 locks held by kworker/u9:5/9156: [ 386.987692][ T38] #0: ffff888028ab5938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.987735][ T38] #1: ffffc9000510fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.987779][ T38] #2: ffff888054ed0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.987817][ T38] #3: ffff888054ed00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.987860][ T38] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 386.987903][ T38] #5: ffff88805cb20b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 386.987953][ T38] 4 locks held by kworker/0:12/9161: [ 386.987963][ T38] #0: ffff88805c687538 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.988010][ T38] #1: ffffc90005897bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.988066][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.988114][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.988158][ T38] 2 locks held by kworker/0:13/9162: [ 386.988169][ T38] 2 locks held by syz-executor/9164: [ 386.988178][ T38] #0: ffffffff8f1d6ae8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 386.988226][ T38] #1: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 386.988269][ T38] 1 lock held by syz-executor/9198: [ 386.988279][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988319][ T38] 1 lock held by syz-executor/9199: [ 386.988329][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988367][ T38] 1 lock held by syz-executor/9208: [ 386.988377][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988415][ T38] 1 lock held by syz-executor/9209: [ 386.988425][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988464][ T38] 1 lock held by syz-executor/9216: [ 386.988474][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988513][ T38] 1 lock held by syz-executor/9227: [ 386.988523][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988562][ T38] 1 lock held by syz-executor/9230: [ 386.988572][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988611][ T38] 1 lock held by syz-executor/9236: [ 386.988621][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988659][ T38] 1 lock held by syz-executor/9237: [ 386.988669][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988708][ T38] 1 lock held by syz-executor/9244: [ 386.988718][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 386.988756][ T38] [ 386.988761][ T38] ============================================= [ 386.988761][ T38] [ 386.988779][ T38] NMI backtrace for cpu 1 [ 386.988799][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 386.988818][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.988827][ T38] Call Trace: [ 386.988834][ T38] [ 386.988842][ T38] dump_stack_lvl+0x189/0x250 [ 386.988869][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.988891][ T38] ? __pfx__printk+0x10/0x10 [ 386.988922][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 386.988945][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 386.988967][ T38] ? __pfx__printk+0x10/0x10 [ 386.988989][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 386.989012][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 386.989034][ T38] watchdog+0xf93/0xfe0 [ 386.989060][ T38] ? watchdog+0x1de/0xfe0 [ 386.989086][ T38] kthread+0x70e/0x8a0 [ 386.989119][ T38] ? __pfx_watchdog+0x10/0x10 [ 386.989139][ T38] ? __pfx_kthread+0x10/0x10 [ 386.989166][ T38] ? __pfx_kthread+0x10/0x10 [ 386.989190][ T38] ret_from_fork+0x3f9/0x770 [ 386.989213][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 386.989240][ T38] ? __switch_to_asm+0x39/0x70 [ 386.989255][ T38] ? __switch_to_asm+0x33/0x70 [ 386.989269][ T38] ? __pfx_kthread+0x10/0x10 [ 386.989294][ T38] ret_from_fork_asm+0x1a/0x30 [ 386.989326][ T38] [ 386.989333][ T38] Sending NMI from CPU 1 to CPUs 0: [ 386.989363][ C0] NMI backtrace for cpu 0 [ 386.989377][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 386.989397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.989406][ C0] RIP: 0010:__rcu_read_unlock+0x6f/0xe0 [ 386.989428][ C0] Code: 48 c1 e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 5d <41> 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 6c 00 00 00 eb [ 386.989444][ C0] RSP: 0018:ffffc90000156af0 EFLAGS: 00000283 [ 386.989458][ C0] RAX: 0000000000000004 RBX: ffff8880b8841350 RCX: 74d08ca2a4b59400 [ 386.989471][ C0] RDX: 0000000000000007 RSI: ffffffff8d219506 RDI: ffff88801ae85940 [ 386.989483][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af8cc4b [ 386.989495][ C0] R10: 0000000000000000 R11: fffffbfff1e3aa27 R12: 0000000000000000 [ 386.989505][ C0] R13: ffffffff91f80350 R14: 0000000000000000 R15: dffffc0000000000 [ 386.989517][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 386.989531][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.989543][ C0] CR2: 00007fff569e3c4c CR3: 0000000072cb6000 CR4: 00000000003526f0 [ 386.989559][ C0] Call Trace: [ 386.989565][ C0] [ 386.989572][ C0] rt_spin_unlock+0x76/0x80 [ 386.989589][ C0] ___slab_alloc+0x4d3/0xdd0 [ 386.989615][ C0] ? fill_pool+0x100/0x570 [ 386.989636][ C0] ? fill_pool+0x100/0x570 [ 386.989653][ C0] kmem_cache_alloc_noprof+0xe6/0x310 [ 386.989676][ C0] fill_pool+0x100/0x570 [ 386.989695][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 386.989714][ C0] ? __pfx_fill_pool+0x10/0x10 [ 386.989735][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 386.989752][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 386.989772][ C0] debug_objects_fill_pool+0x107/0x120 [ 386.989790][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 386.989815][ C0] debug_object_activate+0x6c/0x3a0 [ 386.989837][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 386.989853][ C0] call_rcu+0xaa/0x9c0 [ 386.989872][ C0] ? rcuref_put+0x1b7/0x210 [ 386.989887][ C0] ? __pfx_call_rcu+0x10/0x10 [ 386.989901][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 386.989923][ C0] ? dst_release+0x126/0x1b0 [ 386.989939][ C0] skb_release_head_state+0x71/0x250 [ 386.989962][ C0] consume_skb+0x60/0xf0 [ 386.989982][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 386.990009][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 386.990034][ C0] ? nf_ip_checksum+0x13c/0x510 [ 386.990059][ C0] nft_synproxy_do_eval+0x345/0x570 [ 386.990085][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 386.990117][ C0] nft_do_chain+0x40c/0x1920 [ 386.990148][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 386.990183][ C0] ? unwind_next_frame+0xa5/0x2390 [ 386.990210][ C0] nft_do_chain_inet+0x25d/0x340 [ 386.990233][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 386.990255][ C0] ? __lock_acquire+0xab9/0xd20 [ 386.990280][ C0] ? NF_HOOK+0x9a/0x3a0 [ 386.990300][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 386.990323][ C0] nf_hook_slow+0xc2/0x220 [ 386.990345][ C0] NF_HOOK+0x206/0x3a0 [ 386.990370][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 386.990389][ C0] ? NF_HOOK+0x9a/0x3a0 [ 386.990407][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 386.990423][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 386.990445][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 386.990465][ C0] ? skb_dst+0x4f/0xd0 [ 386.990483][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 386.990504][ C0] NF_HOOK+0x309/0x3a0 [ 386.990523][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 386.990541][ C0] ? NF_HOOK+0x9a/0x3a0 [ 386.990559][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 386.990578][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 386.990602][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 386.990619][ C0] __netif_receive_skb+0x143/0x380 [ 386.990636][ C0] ? rt_spin_unlock+0x65/0x80 [ 386.990654][ C0] ? process_backlog+0x27b/0x900 [ 386.990672][ C0] process_backlog+0x31e/0x900 [ 386.990696][ C0] __napi_poll+0xb3/0x540 [ 386.990715][ C0] net_rx_action+0x707/0xe00 [ 386.990743][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 386.990780][ C0] handle_softirqs+0x22f/0x710 [ 386.990804][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 386.990829][ C0] run_ktimerd+0xcf/0x190 [ 386.990849][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 386.990870][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 386.990890][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 386.990909][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 386.990927][ C0] smpboot_thread_fn+0x53f/0xa60 [ 386.990946][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 386.990970][ C0] kthread+0x70e/0x8a0 [ 386.990993][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 386.991012][ C0] ? __pfx_kthread+0x10/0x10 [ 386.991036][ C0] ? __pfx_kthread+0x10/0x10 [ 386.991059][ C0] ret_from_fork+0x3f9/0x770 [ 386.991080][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 386.991102][ C0] ? __switch_to_asm+0x39/0x70 [ 386.991117][ C0] ? __switch_to_asm+0x33/0x70 [ 386.991131][ C0] ? __pfx_kthread+0x10/0x10 [ 386.991153][ C0] ret_from_fork_asm+0x1a/0x30 [ 386.991176][ C0] [ 386.991359][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 386.991371][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 386.991392][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.991401][ T38] Call Trace: [ 386.991406][ T38] [ 386.991412][ T38] dump_stack_lvl+0x99/0x250 [ 386.991434][ T38] ? __asan_memcpy+0x40/0x70 [ 386.991452][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.991474][ T38] ? __pfx__printk+0x10/0x10 [ 386.991504][ T38] vpanic+0x281/0x750 [ 386.991529][ T38] ? __pfx_vpanic+0x10/0x10 [ 386.991549][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 386.991567][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.991599][ T38] panic+0xb9/0xc0 [ 386.991620][ T38] ? __pfx_panic+0x10/0x10 [ 386.991645][ T38] ? irq_work_queue+0xc3/0x140 [ 386.991669][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 386.991691][ T38] watchdog+0xfd2/0xfe0 [ 386.991716][ T38] ? watchdog+0x1de/0xfe0 [ 386.991742][ T38] kthread+0x70e/0x8a0 [ 386.991768][ T38] ? __pfx_watchdog+0x10/0x10 [ 386.991788][ T38] ? __pfx_kthread+0x10/0x10 [ 386.991816][ T38] ? __pfx_kthread+0x10/0x10 [ 386.991840][ T38] ret_from_fork+0x3f9/0x770 [ 386.991863][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 386.991890][ T38] ? __switch_to_asm+0x39/0x70 [ 386.991905][ T38] ? __switch_to_asm+0x33/0x70 [ 386.991920][ T38] ? __pfx_kthread+0x10/0x10 [ 386.991944][ T38] ret_from_fork_asm+0x1a/0x30 [ 386.991976][ T38] [ 386.992250][ T38] Kernel Offset: disabled