last executing test programs: 4m46.36851676s ago: executing program 4 (id=2824): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000580)={0x60, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m44.637610552s ago: executing program 4 (id=2855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) 4m44.33244463s ago: executing program 4 (id=2862): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 4m43.459160665s ago: executing program 4 (id=2872): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) 4m43.248368658s ago: executing program 4 (id=2876): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m43.053973831s ago: executing program 4 (id=2879): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x200000) 4m27.909227596s ago: executing program 32 (id=2879): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x200000) 40.112248458s ago: executing program 2 (id=6325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 39.913350819s ago: executing program 2 (id=6329): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000180005042cbd7000fbdbdf2502001480fe02fd07003200001c00090008000000", @ANYRES32=0x0, @ANYBLOB='\f'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4048864) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 39.709220987s ago: executing program 2 (id=6331): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x7, 0x12) 39.573325297s ago: executing program 2 (id=6333): mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000008ffffffffffffff7f02"], 0x2a) 39.304125316s ago: executing program 2 (id=6335): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) 39.076137745s ago: executing program 2 (id=6338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 34.002400208s ago: executing program 0 (id=6358): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000200)) 33.398127388s ago: executing program 0 (id=6365): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009040402100000fa00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) 30.575688503s ago: executing program 5 (id=6380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x10}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000001f40)={0x2020}, 0x2020) 30.032333775s ago: executing program 0 (id=6382): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000621000000200000018000000000015002c000064a6693bad890000000000180000000000000000000000000000001b00"/74], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 29.98002749s ago: executing program 0 (id=6383): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0xefff) 29.588282994s ago: executing program 0 (id=6384): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000080)=0x90) 28.593918453s ago: executing program 0 (id=6386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000003000000b30000400000000009"]) 28.15404934s ago: executing program 5 (id=6389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd25, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000c0c0) 27.874610155s ago: executing program 5 (id=6391): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000002000)={0xdffe, 0x0, 0x8, 0xffffff81, 0x9b, "48b4299abf3991c75ba98fd2ee13ed2e070619"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee3, 0x9, 0x7fff, 0xe, "99212c010700ec6d00138cf0000062b016d5a9"}) 27.630022997s ago: executing program 5 (id=6392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="3b667bd2fff43321e79cbb29e411", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.339012832s ago: executing program 5 (id=6393): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000, 0x6}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x800000000000}) 27.063681948s ago: executing program 5 (id=6395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) 23.949563012s ago: executing program 33 (id=6338): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 21.266367806s ago: executing program 1 (id=6417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x1787, &(0x7f0000000640)={0x0, 0x631d, 0x80, 0xffffffff, 0x69}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) 21.107582411s ago: executing program 1 (id=6418): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000440)={0x3, 0xb}, 0x2) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 20.167033703s ago: executing program 1 (id=6423): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xe00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.03769747s ago: executing program 1 (id=6424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x74, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.549401129s ago: executing program 1 (id=6425): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x110, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0x4, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "02dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) 18.912344838s ago: executing program 1 (id=6429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000004000000080000040"]) 17.994480632s ago: executing program 3 (id=6433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, 0x8013, 0x1922b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 17.673744726s ago: executing program 3 (id=6434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x2, @private1, 0x5}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000006c0)={r1, 0x98b8, 0x10}, 0xc) 17.535973359s ago: executing program 3 (id=6435): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 17.406036986s ago: executing program 3 (id=6436): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 15.694994988s ago: executing program 3 (id=6437): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) listen(r0, 0xffffffff) 15.512162159s ago: executing program 3 (id=6438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000008302"]) 13.093211973s ago: executing program 34 (id=6386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000003000000b30000400000000009"]) 11.493283418s ago: executing program 35 (id=6395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) 2.580191328s ago: executing program 36 (id=6429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000004000000080000040"]) 0s ago: executing program 37 (id=6438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000008302"]) kernel console output (not intermixed with test programs): 2 [ 435.197829][ T31] usb 6-1: ucan: probing device on interface #0 [ 435.314722][T16178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4809'. [ 435.791572][ T5855] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 435.820142][ T31] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 435.834197][ T31] usb 6-1: USB disconnect, device number 13 [ 435.857872][ T37] audit: type=1326 audit(1757623581.827:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16193 comm="syz.2.4817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97445deba9 code=0x0 [ 435.971692][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 435.978448][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.978477][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.978511][ T5855] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 435.978533][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.011407][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 436.036850][ T5855] usb 4-1: config 0 descriptor?? [ 436.180604][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.180691][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.180729][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 436.180750][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.235094][ T9] usb 2-1: config 0 descriptor?? [ 436.497506][ T5855] corsair-cpro 0003:1B1C:1D00.005E: hidraw0: USB HID v0.07 Device [HID 1b1c:1d00] on usb-dummy_hcd.3-1/input0 [ 436.578838][ T5855] corsair-cpro 0003:1B1C:1D00.005E: probe with driver corsair-cpro failed with error -38 [ 436.686360][ T5855] usb 4-1: USB disconnect, device number 42 [ 436.703550][ T9] cypress 0003:04B4:DE61.005F: item fetching failed at offset 5/7 [ 436.704364][ T9] cypress 0003:04B4:DE61.005F: parse failed [ 436.704435][ T9] cypress 0003:04B4:DE61.005F: probe with driver cypress failed with error -22 [ 436.876616][T16209] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4823'. [ 436.914952][ T31] usb 2-1: USB disconnect, device number 51 [ 437.291456][ T5855] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 437.451708][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 437.453876][ T5855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.458623][ T5855] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 437.458653][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.458672][ T5855] usb 6-1: Product: syz [ 437.458686][ T5855] usb 6-1: Manufacturer: syz [ 437.458700][ T5855] usb 6-1: SerialNumber: syz [ 437.519730][T16238] netlink: 'syz.3.4836': attribute type 1 has an invalid length. [ 437.543191][ T5855] usb 6-1: config 0 descriptor?? [ 437.546847][ T5855] cdc_ether 6-1:0.0: skipping garbage [ 437.546869][ T5855] usb 6-1: bad CDC descriptors [ 437.547988][ T5855] usb 6-1: unsupported MDLM descriptors [ 437.765968][ T5855] usb 6-1: USB disconnect, device number 14 [ 438.000994][T16255] pimreg3: entered allmulticast mode [ 438.631423][ T31] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 438.691893][ T9] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 438.789581][ T31] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 438.789664][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.794042][ T31] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 438.794070][ T31] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 438.794089][ T31] usb 4-1: Manufacturer: syz [ 438.818244][ T31] usb 4-1: config 0 descriptor?? [ 438.855606][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.855654][ T9] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 438.855679][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.892696][ T9] usb 3-1: config 0 descriptor?? [ 439.061649][ T31] rc_core: IR keymap rc-hauppauge not found [ 439.061670][ T31] Registered IR keymap rc-empty [ 439.063188][ T31] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 439.077418][ T31] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 439.118827][ T31] usb 4-1: USB disconnect, device number 43 [ 439.351706][ T9] nintendo 0003:057E:200E.0060: unbalanced delimiter at end of report description [ 439.352495][ T9] nintendo 0003:057E:200E.0060: HID parse failed [ 439.354965][ T9] nintendo 0003:057E:200E.0060: probe - fail = -22 [ 439.355070][ T9] nintendo 0003:057E:200E.0060: probe with driver nintendo failed with error -22 [ 439.461486][ T6025] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 439.543945][ T9] usb 3-1: USB disconnect, device number 51 [ 439.619195][ T6025] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 439.619227][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.619247][ T6025] usb 6-1: Product: syz [ 439.619261][ T6025] usb 6-1: Manufacturer: syz [ 439.619275][ T6025] usb 6-1: SerialNumber: syz [ 439.649001][ T6025] usb 6-1: config 0 descriptor?? [ 439.656861][ T6025] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 439.671172][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4874'. [ 439.680637][T16320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.771673][ T31] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 439.921430][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 439.924724][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.924812][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.924836][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 439.924878][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.924901][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.958616][ T31] usb 2-1: config 0 descriptor?? [ 440.095340][ T6025] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 440.128101][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.291713][ T6025] usb 6-1: USB disconnect, device number 15 [ 440.443681][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.443719][ T31] microsoft 0003:045E:07DA.0061: ignoring exceeding usage max [ 440.445963][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446008][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446035][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446062][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446089][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446116][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446143][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446169][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446196][ T31] microsoft 0003:045E:07DA.0061: unknown main item tag 0x0 [ 440.446237][ T31] microsoft 0003:045E:07DA.0061: unsupported Resolution Multiplier 0 [ 440.647566][ T31] microsoft 0003:045E:07DA.0061: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 440.647599][ T31] microsoft 0003:045E:07DA.0061: no inputs found [ 440.647613][ T31] microsoft 0003:045E:07DA.0061: could not initialize ff, continuing anyway [ 440.672046][ T31] usb 2-1: USB disconnect, device number 52 [ 441.221402][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 441.391435][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 441.394346][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.394406][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.396339][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.396366][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 441.396386][ T9] usb 4-1: SerialNumber: syz [ 441.460188][ T9] cdc_acm 4-1:1.0: skipping garbage [ 441.460215][ T9] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 441.460233][ T9] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 441.460268][ T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 441.662087][ T6025] usb 4-1: USB disconnect, device number 44 [ 441.891751][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 442.046386][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.046413][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 442.049862][ T31] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 442.049889][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.049909][ T31] usb 6-1: Product: syz [ 442.049923][ T31] usb 6-1: Manufacturer: syz [ 442.049938][ T31] usb 6-1: SerialNumber: syz [ 442.068554][ T31] usb 6-1: config 0 descriptor?? [ 442.281445][T16398] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4911'. [ 442.347414][ T31] usb 6-1: USB disconnect, device number 16 [ 442.723931][T16415] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4915'. [ 443.031687][ T31] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 443.188938][ T31] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 443.188965][ T31] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 443.188982][ T31] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 443.189000][ T31] usb 3-1: config 8 has no interface number 0 [ 443.189046][ T31] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 443.189068][ T31] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.204458][ T31] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 443.204486][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.204505][ T31] usb 3-1: Product: syz [ 443.204518][ T31] usb 3-1: Manufacturer: syz [ 443.204531][ T31] usb 3-1: SerialNumber: syz [ 443.470113][ T31] usb 3-1: USB disconnect, device number 52 [ 444.002238][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 444.153751][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.153785][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.153824][ T31] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 444.153847][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.169864][ T31] usb 6-1: config 0 descriptor?? [ 444.641391][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 444.655739][ T31] samsung 0003:0419:0600.0062: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.5-1/input0 [ 444.804044][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.804075][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.804096][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.804136][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 444.804161][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.809695][ T9] usb 2-1: config 0 descriptor?? [ 444.857524][ T31] usb 6-1: USB disconnect, device number 17 [ 445.243930][ T9] chicony 0003:04F2:1236.0063: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 445.391675][ T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 445.436446][ T6025] usb 2-1: USB disconnect, device number 53 [ 445.544325][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.544375][ T31] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 445.544398][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.558459][ T31] usb 4-1: config 0 descriptor?? [ 446.006614][ T31] hid_parser_main: 3 callbacks suppressed [ 446.006643][ T31] elecom 0003:056E:00FC.0064: unknown main item tag 0x0 [ 446.006677][ T31] elecom 0003:056E:00FC.0064: unknown main item tag 0x0 [ 446.006704][ T31] elecom 0003:056E:00FC.0064: unknown main item tag 0x0 [ 446.006731][ T31] elecom 0003:056E:00FC.0064: unknown main item tag 0x0 [ 446.006758][ T31] elecom 0003:056E:00FC.0064: unknown main item tag 0x0 [ 446.030544][ T31] elecom 0003:056E:00FC.0064: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.3-1/input0 [ 446.190727][ T9] usb 4-1: USB disconnect, device number 45 [ 446.570428][T16514] netlink: 'syz.2.4962': attribute type 12 has an invalid length. [ 446.570451][T16514] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4962'. [ 447.758080][T16568] tipc: Enabled bearer , priority 10 [ 447.902165][ T6025] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 447.951445][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 448.051678][ T6025] usb 2-1: Using ep0 maxpacket: 8 [ 448.054152][ T6025] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 448.054177][ T6025] usb 2-1: config 179 has no interface number 0 [ 448.054279][ T6025] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 448.054306][ T6025] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 448.054332][ T6025] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 448.054356][ T6025] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 448.054382][ T6025] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 448.054425][ T6025] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 448.054444][ T6025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.079629][T16562] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 448.121654][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 448.146789][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.146821][ T9] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 448.146845][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 448.146870][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.211359][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 448.211387][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.211413][ T9] usb 6-1: Product: syz [ 448.211427][ T9] usb 6-1: Manufacturer: syz [ 448.211441][ T9] usb 6-1: SerialNumber: syz [ 448.264222][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 448.265927][ T9] usbtest 6-1:1.0: Linux user mode ISO test driver [ 448.265946][ T9] usbtest 6-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 448.312976][T16582] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4994'. [ 448.465365][T16562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.465812][T16562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.499354][ T9] usb 6-1: USB disconnect, device number 18 [ 448.753110][ T9] usb 2-1: USB disconnect, device number 54 [ 448.753165][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 448.753232][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 449.181512][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 449.355808][ T10] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 449.355840][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.355860][ T10] usb 4-1: Product: syz [ 449.355875][ T10] usb 4-1: Manufacturer: syz [ 449.355889][ T10] usb 4-1: SerialNumber: syz [ 449.406274][ T10] usb 4-1: config 0 descriptor?? [ 449.423025][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 450.035014][ T10] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 450.035109][ T10] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 450.081674][ T10] usb 4-1: USB disconnect, device number 46 [ 450.986262][T16656] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 451.591725][ T991] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 451.750406][ T991] usb 3-1: Using ep0 maxpacket: 8 [ 451.753442][ T991] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 451.753469][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.767347][ T991] usb 3-1: config 0 descriptor?? [ 452.045436][T16695] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5049'. [ 452.189494][ T991] magicmouse 0003:05AC:0269.0065: reserved main item tag 0xd [ 452.189533][ T991] magicmouse 0003:05AC:0269.0065: item fetching failed at offset 4/5 [ 452.190360][ T991] magicmouse 0003:05AC:0269.0065: magicmouse hid parse failed [ 452.199583][ T991] magicmouse 0003:05AC:0269.0065: probe with driver magicmouse failed with error -22 [ 452.280724][T16699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5050'. [ 452.412763][ T6314] usb 3-1: USB disconnect, device number 53 [ 452.453983][ T59] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 452.981606][ T6314] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 453.151557][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 453.157907][ T6314] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 453.157938][ T6314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.193555][ T6314] usb 6-1: config 0 descriptor?? [ 453.210109][ T6314] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 453.311497][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 453.315261][ T9] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 453.315287][ T9] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 453.315304][ T9] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 453.315404][ T9] usb 2-1: config 5 interface 0 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 453.315426][ T9] usb 2-1: config 5 interface 0 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 453.315447][ T9] usb 2-1: config 5 interface 0 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 453.315470][ T9] usb 2-1: config 5 interface 0 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 453.315548][ T9] usb 2-1: config 5 interface 0 has no altsetting 0 [ 453.319550][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=9f.21 [ 453.319631][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.319651][ T9] usb 2-1: Product: syz [ 453.319663][ T9] usb 2-1: Manufacturer: syz [ 453.319678][ T9] usb 2-1: SerialNumber: syz [ 453.482830][T16745] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5073'. [ 453.783510][ T9] usb 2-1: USB disconnect, device number 55 [ 453.810610][ T6314] gp8psk: usb out operation failed. [ 453.810627][ T6314] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 453.810665][ T6314] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 453.851655][ T6314] usb 6-1: USB disconnect, device number 19 [ 454.369456][T16776] program syz.2.5089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.431049][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5091'. [ 454.431326][T16778] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 454.431358][T16778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.592151][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5093'. [ 455.101459][T16806] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 456.331704][ T6025] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 456.485333][ T6025] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 456.485370][ T6025] usb 3-1: config 0 has no interface number 0 [ 456.485403][ T6025] usb 3-1: config 0 interface 98 has no altsetting 0 [ 456.488523][ T6025] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 456.488552][ T6025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.488572][ T6025] usb 3-1: Product: syz [ 456.488586][ T6025] usb 3-1: Manufacturer: syz [ 456.488600][ T6025] usb 3-1: SerialNumber: syz [ 456.507542][ T6025] usb 3-1: config 0 descriptor?? [ 456.762838][ T6025] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 456.941468][T16872] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 457.079173][ T37] audit: type=1326 audit(1757623603.047:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16877 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 457.079227][ T37] audit: type=1326 audit(1757623603.047:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16877 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 457.082729][ T37] audit: type=1326 audit(1757623603.047:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16877 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 457.082776][ T37] audit: type=1326 audit(1757623603.047:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16877 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 457.082814][ T37] audit: type=1326 audit(1757623603.047:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16877 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 457.082852][ T37] audit: type=1326 audit(1757623603.047:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16877 comm="syz.3.5138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 457.281474][ T991] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 457.381508][ T6025] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 457.436924][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.436959][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.436996][ T991] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 457.437018][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.453154][ T991] usb 2-1: config 0 descriptor?? [ 457.780738][ T6025] usb 3-1: failed to restore interface 98 altsetting 4 (error=-71) [ 457.801738][ T6025] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 457.801905][ T6025] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 457.807607][ T6013] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 457.807633][ T6013] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 457.856707][ T6025] usb 3-1: USB disconnect, device number 54 [ 457.890561][ T991] stadia 0003:18D1:9400.0066: unexpected long global item [ 457.896632][ T991] stadia 0003:18D1:9400.0066: parse failed [ 457.896706][ T991] stadia 0003:18D1:9400.0066: probe with driver stadia failed with error -22 [ 458.083425][ T6025] usb 2-1: USB disconnect, device number 56 [ 458.411653][ T6314] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 458.573580][ T6314] usb 4-1: Using ep0 maxpacket: 32 [ 458.576085][ T6314] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.576114][ T6314] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.576147][ T6314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 458.576181][ T6314] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 458.576203][ T6314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.640319][ T6314] usb 4-1: config 0 descriptor?? [ 458.644803][T16922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5159'. [ 459.070233][ T6314] asus 0003:048D:CE50.0067: item fetching failed at offset 2/5 [ 459.071083][ T6314] asus 0003:048D:CE50.0067: Asus hid parse failed: -22 [ 459.071190][ T6314] asus 0003:048D:CE50.0067: probe with driver asus failed with error -22 [ 459.241599][ T5159] Bluetooth: hci5: command 0x0405 tx timeout [ 459.258223][ T6025] usb 4-1: USB disconnect, device number 47 [ 459.308621][T16942] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5170'. [ 459.308679][T16942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5170'. [ 460.340057][T16979] ptrace attach of "./syz-executor exec"[5854] was attempted by ""[16979] [ 460.411599][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 460.572915][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 460.575231][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 460.575275][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 460.575317][ T10] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 460.575339][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.580777][ T10] usb 6-1: config 0 descriptor?? [ 460.739398][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5195'. [ 461.017293][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5199'. [ 461.044408][ T10] saitek 0003:06A3:0621.0068: unknown main item tag 0x0 [ 461.044446][ T10] saitek 0003:06A3:0621.0068: unknown main item tag 0x0 [ 461.044473][ T10] saitek 0003:06A3:0621.0068: unknown main item tag 0x0 [ 461.044501][ T10] saitek 0003:06A3:0621.0068: unknown main item tag 0x0 [ 461.044528][ T10] saitek 0003:06A3:0621.0068: unknown main item tag 0x0 [ 461.048137][ T10] saitek 0003:06A3:0621.0068: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.5-1/input0 [ 461.163876][T17007] sch_fq: defrate 4294967295 ignored. [ 461.184738][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.257979][ T6025] usb 6-1: USB disconnect, device number 20 [ 461.587396][T17019] sp0: Synchronizing with TNC [ 462.331686][ T6025] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 462.384267][T17052] program syz.2.5224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.488107][ T6025] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 462.488215][ T6025] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 462.488235][ T6025] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 462.488253][ T6025] usb 6-1: config 220 has no interface number 2 [ 462.488327][ T6025] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 462.488353][ T6025] usb 6-1: config 220 interface 0 has no altsetting 0 [ 462.488370][ T6025] usb 6-1: config 220 interface 76 has no altsetting 0 [ 462.488388][ T6025] usb 6-1: config 220 interface 1 has no altsetting 0 [ 462.491814][ T6025] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 462.491841][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.491859][ T6025] usb 6-1: Product: syz [ 462.491872][ T6025] usb 6-1: Manufacturer: syz [ 462.491886][ T6025] usb 6-1: SerialNumber: syz [ 462.744553][ T6025] usb 6-1: selecting invalid altsetting 0 [ 462.745092][ T6025] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 462.745123][ T6025] usb 6-1: No valid video chain found. [ 462.800272][ T6025] usb 6-1: selecting invalid altsetting 0 [ 462.800313][ T6025] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 462.841950][ T6025] usb 6-1: USB disconnect, device number 21 [ 462.864008][ T37] audit: type=1326 audit(1757623608.837:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17066 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 462.900460][ T37] audit: type=1326 audit(1757623608.867:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17066 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 462.900513][ T37] audit: type=1326 audit(1757623608.867:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17066 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 462.900554][ T37] audit: type=1326 audit(1757623608.867:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17066 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 462.900594][ T37] audit: type=1326 audit(1757623608.867:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17066 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 462.900634][ T37] audit: type=1326 audit(1757623608.867:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17066 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 462.900682][ T37] audit: type=1326 audit(1757623608.867:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17066 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 464.411094][ T37] audit: type=1326 audit(1757623610.377:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17111 comm="syz.1.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 464.411545][ T37] audit: type=1326 audit(1757623610.387:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17111 comm="syz.1.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 464.416580][ T37] audit: type=1326 audit(1757623610.387:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17111 comm="syz.1.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f73184beba9 code=0x7ffc0000 [ 464.638476][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5256'. [ 464.711432][ T6025] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 464.863043][ T6025] usb 3-1: Using ep0 maxpacket: 8 [ 464.865774][ T6025] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 464.865800][ T6025] usb 3-1: config 2 has no interface number 0 [ 464.865849][ T6025] usb 3-1: config 2 interface 31 has no altsetting 0 [ 464.868997][ T6025] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 464.869023][ T6025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.869042][ T6025] usb 3-1: Product: syz [ 464.869055][ T6025] usb 3-1: Manufacturer: syz [ 464.869068][ T6025] usb 3-1: SerialNumber: syz [ 465.261700][ T31] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 465.412408][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 465.422736][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 465.423225][ T31] usb 6-1: config 0 has no interface number 0 [ 465.433120][ T31] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 465.433149][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.433167][ T31] usb 6-1: Product: syz [ 465.433181][ T31] usb 6-1: Manufacturer: syz [ 465.433194][ T31] usb 6-1: SerialNumber: syz [ 465.463388][ T31] usb 6-1: config 0 descriptor?? [ 465.566941][ T6025] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 465.604034][ T6025] usb 3-1: USB disconnect, device number 55 [ 465.704394][ T31] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 465.710593][ T31] gspca_spca1528: reg_w err -71 [ 465.723855][ T31] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 465.727317][ T31] usb 6-1: USB disconnect, device number 22 [ 465.796729][T17163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5276'. [ 465.796765][T17163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5276'. [ 465.814596][T17163] gretap0: entered promiscuous mode [ 465.862905][T17163] gretap0: left promiscuous mode [ 465.981670][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 466.141893][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 466.150343][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 466.150742][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.150764][ T10] usb 2-1: Product: syz [ 466.150778][ T10] usb 2-1: Manufacturer: syz [ 466.150793][ T10] usb 2-1: SerialNumber: syz [ 466.202391][ T10] usb 2-1: config 0 descriptor?? [ 466.207780][ T10] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 466.301538][ T6314] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 466.419050][T17175] tipc: Bearer : already 2 bearers with priority 10 [ 466.419071][T17175] tipc: Bearer : trying with adjusted priority [ 466.419082][T17175] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 466.461476][ T6314] usb 4-1: Using ep0 maxpacket: 16 [ 466.470460][ T6314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 466.486155][ T6314] usb 4-1: config 9 has an invalid interface number: 48 but max is 0 [ 466.486182][ T6314] usb 4-1: config 9 has no interface number 0 [ 466.486213][ T6314] usb 4-1: config 9 interface 48 has no altsetting 0 [ 466.518680][ T6314] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 466.518925][ T6314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.518945][ T6314] usb 4-1: Product: syz [ 466.518959][ T6314] usb 4-1: Manufacturer: syz [ 466.518972][ T6314] usb 4-1: SerialNumber: syz [ 466.820761][ T6314] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 466.849408][ T10] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 466.851081][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 466.879391][ T10] usb 2-1: USB disconnect, device number 57 [ 467.142596][T17193] bridge1: entered promiscuous mode [ 467.142626][T17193] bridge1: entered allmulticast mode [ 467.185620][T17193] team0: Port device bridge1 added [ 467.203072][ T6314] gspca_vc032x: reg_w err -71 [ 467.203088][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203099][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203108][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203116][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203125][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203133][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203142][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203150][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203158][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203167][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203175][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203184][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203192][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203200][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203209][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203217][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203225][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203234][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203242][ T6314] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.203251][ T6314] gspca_vc032x: Unknown sensor... [ 467.203335][ T6314] vc032x 4-1:9.48: probe with driver vc032x failed with error -22 [ 467.338917][ T6314] usb 4-1: USB disconnect, device number 48 [ 467.580459][T17206] netlink: 'syz.2.5297': attribute type 1 has an invalid length. [ 468.081897][ T6314] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 468.244191][ T6314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 468.244242][ T6314] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 468.244264][ T6314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.287062][ T6314] usb 4-1: config 0 descriptor?? [ 468.288140][T17215] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 468.551502][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 468.711364][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 468.718333][ T6314] belkin 0003:050D:3201.0069: unknown main item tag 0x2 [ 468.718370][ T6314] belkin 0003:050D:3201.0069: unknown main item tag 0x0 [ 468.719241][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.719268][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.719305][ T31] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 468.719326][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.726987][ T31] usb 6-1: config 0 descriptor?? [ 468.812991][ T6314] belkin 0003:050D:3201.0069: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 468.926934][ T6314] usb 4-1: USB disconnect, device number 49 [ 469.127352][T17257] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 469.127352][T17257] program syz.0.5322 not setting count and/or reply_len properly [ 469.186551][ T31] glorious 0003:258A:0033.006A: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.5-1/input0 [ 469.377188][ T31] usb 6-1: USB disconnect, device number 23 [ 469.635147][ T6025] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 469.787600][ T6025] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.787627][ T6025] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 469.787649][ T6025] usb 2-1: config 1 has no interface number 0 [ 469.787696][ T6025] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.790941][ T6025] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.790970][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.790989][ T6025] usb 2-1: Product: syz [ 469.791014][ T6025] usb 2-1: Manufacturer: syz [ 469.791029][ T6025] usb 2-1: SerialNumber: syz [ 469.809887][ T6025] usb 2-1: selecting invalid altsetting 1 [ 470.269730][ T6025] usb 2-1: selecting invalid altsetting 1 [ 470.269793][ T6025] cdc_ncm 2-1:1.1: bind() failure [ 470.475786][ T6025] usb 2-1: USB disconnect, device number 58 [ 471.218641][T17330] netlink: 'syz.5.5358': attribute type 15 has an invalid length. [ 471.563517][T17347] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 471.563576][T17347] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 471.563625][T17347] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 471.563736][T17347] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 471.563784][T17347] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 471.665573][ T6314] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 471.844879][ T6314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.844925][ T6314] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 471.844947][ T6314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.848303][ T6314] usb 3-1: config 0 descriptor?? [ 472.100087][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 472.100105][ T37] audit: type=1326 audit(1757623618.067:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17331 comm="syz.1.5359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73184beba9 code=0x7fc00000 [ 472.294785][ T6314] zydacron 0003:13EC:0006.006B: unknown main item tag 0x0 [ 472.294823][ T6314] zydacron 0003:13EC:0006.006B: unknown main item tag 0x0 [ 472.294851][ T6314] zydacron 0003:13EC:0006.006B: unknown main item tag 0x0 [ 472.294877][ T6314] zydacron 0003:13EC:0006.006B: unknown main item tag 0x0 [ 472.294904][ T6314] zydacron 0003:13EC:0006.006B: unknown main item tag 0x0 [ 472.301951][ T6314] zydacron 0003:13EC:0006.006B: hidraw0: USB HID v0.01 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 472.502103][ T9] usb 3-1: USB disconnect, device number 56 [ 472.657665][T17375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5381'. [ 472.691499][ T6314] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 472.844193][ T6314] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.844229][ T6314] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.844255][ T6314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 472.844288][ T6314] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 472.844310][ T6314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.852754][ T6314] usb 4-1: config 0 descriptor?? [ 473.224909][T17391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5387'. [ 473.332832][ T6314] holtek 0003:1241:5015.006C: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 473.332864][ T6314] holtek 0003:1241:5015.006C: no inputs found [ 473.551565][ T10] usb 4-1: USB disconnect, device number 50 [ 474.651356][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 474.801439][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 474.804271][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.804302][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.804341][ T9] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 474.804363][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.813766][ T9] usb 4-1: config 0 descriptor?? [ 474.919051][T17461] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.5421'. [ 475.283462][ T9] hid-multitouch 0003:1FD2:6007.006D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 475.461975][T17481] ucma_write: process 918 (syz.5.5431) changed security contexts after opening file descriptor, this is not allowed. [ 475.462424][ T10] usb 4-1: USB disconnect, device number 51 [ 476.402830][T17513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5446'. [ 476.671018][T17525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.697433][T17570] sctp: [Deprecated]: syz.1.5473 (pid 17570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.697433][T17570] Use struct sctp_sack_info instead [ 477.781812][ T6025] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 477.881552][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 477.938221][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.938269][ T6025] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 477.938290][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.972932][ T6025] usb 6-1: config 0 descriptor?? [ 478.048885][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 478.051520][ T10] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 478.051544][ T10] usb 3-1: config 0 has no interface number 0 [ 478.066586][ T10] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 478.066613][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.066632][ T10] usb 3-1: Product: syz [ 478.066646][ T10] usb 3-1: Manufacturer: syz [ 478.066659][ T10] usb 3-1: SerialNumber: syz [ 478.094329][ T10] usb 3-1: config 0 descriptor?? [ 478.130290][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 478.130387][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 478.168979][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 478.174392][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 478.174446][ T10] usb 3-1: media controller created [ 478.262792][T17574] Falling back ldisc for ptm0. [ 478.293604][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.338338][T17568] cxusb: i2c wr: len=85 is too big! [ 478.338338][T17568] [ 478.394919][ T10] cxusb: set interface failed [ 478.394938][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 478.431711][ T6025] lenovo 0003:17EF:60A3.006E: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.5-1/input0 [ 478.507624][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 478.507641][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 478.543261][T17581] can0: slcan on ttyS3. [ 478.610978][ T6314] usb 6-1: USB disconnect, device number 24 [ 478.623926][ T10] rc_core: IR keymap rc-dvico-portable not found [ 478.623948][ T10] Registered IR keymap rc-empty [ 478.632909][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 478.635750][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input42 [ 478.655980][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 478.656001][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 478.686532][ T10] usb 3-1: USB disconnect, device number 57 [ 478.782902][T17581] can0 (unregistered): slcan off ttyS3. [ 478.783243][T17581] Falling back ldisc for ttyS3. [ 478.897850][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 478.939485][ T2240] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 479.504820][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5494'. [ 479.619044][T17615] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.094976][T17615] bridge_slave_1 (unregistering): left allmulticast mode [ 480.095118][T17615] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.537451][T17638] netlink: 'syz.5.5502': attribute type 2 has an invalid length. [ 480.710435][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5504'. [ 481.628160][T17659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.071597][ T6314] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 482.240534][ T6314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.240628][ T6314] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 482.240686][ T6314] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 482.240705][ T6314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.253124][ T6314] usb 6-1: config 0 descriptor?? [ 482.266322][ T6314] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 482.266371][ T6314] dvb-usb: bulk message failed: -22 (3/0) [ 482.290070][ T6314] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 482.304168][ T6314] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 482.304318][ T6314] usb 6-1: media controller created [ 482.326085][ T6314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.368693][ T6314] dvb-usb: bulk message failed: -22 (6/0) [ 482.368779][ T6314] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 482.394053][ T6314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 482.424213][ T6314] dvb-usb: schedule remote query interval to 150 msecs. [ 482.424235][ T6314] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 482.520784][T17665] dvb-usb: bulk message failed: -22 (2/0) [ 482.526983][ T6314] usb 6-1: USB disconnect, device number 25 [ 482.689246][ T6314] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 484.388396][T17755] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5555'. [ 484.390351][T17755] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5555'. [ 486.332206][ T37] audit: type=1326 audit(1757623632.307:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17813 comm="syz.2.5582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97445deba9 code=0x0 [ 486.791620][ T6314] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 486.818509][T17836] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.5590'. [ 486.951388][ T6314] usb 2-1: Using ep0 maxpacket: 8 [ 486.954394][ T6314] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 486.954423][ T6314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.997836][ T6314] pvrusb2: Hardware description: Terratec Grabster AV400 [ 486.997856][ T6314] pvrusb2: ********** [ 486.997862][ T6314] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 486.997874][ T6314] pvrusb2: Important functionality might not be entirely working. [ 486.997883][ T6314] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 486.997894][ T6314] pvrusb2: ********** [ 487.209346][ T2365] pvrusb2: Invalid write control endpoint [ 487.392588][ T2365] pvrusb2: Invalid write control endpoint [ 487.392603][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 487.392613][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 487.392620][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 487.392633][ T2365] pvrusb2: Device being rendered inoperable [ 487.454534][T17825] pvrusb2: Attempted to execute control transfer when device not ok [ 487.456994][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 487.457058][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 487.457405][ T6025] usb 2-1: USB disconnect, device number 59 [ 487.499801][ T2365] pvrusb2: Attached sub-driver cx25840 [ 487.499826][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 487.499835][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 488.359911][ T37] audit: type=1326 audit(1757623634.327:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.5.5598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdff62deba9 code=0x0 [ 489.615846][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5624'. [ 490.031735][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 490.114447][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5630'. [ 490.222418][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 490.222448][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.222466][ T10] usb 6-1: Product: syz [ 490.222480][ T10] usb 6-1: Manufacturer: syz [ 490.222494][ T10] usb 6-1: SerialNumber: syz [ 490.274759][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 490.305668][ T6314] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 490.413606][T17932] blkio.reset_stats is deprecated [ 490.951577][ T6025] usb 6-1: USB disconnect, device number 26 [ 491.001708][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 491.161437][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 491.164367][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 491.164400][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 491.167670][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 491.167698][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.167717][ T10] usb 4-1: Product: syz [ 491.167731][ T10] usb 4-1: Manufacturer: syz [ 491.167745][ T10] usb 4-1: SerialNumber: syz [ 491.237945][ T10] usb 4-1: config 0 descriptor?? [ 491.254513][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 491.254551][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 491.571536][ T6314] usb 6-1: Service connection timeout for: 256 [ 491.571557][ T6314] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 491.577372][ T6314] ath9k_htc: Failed to initialize the device [ 491.588691][ T6025] usb 6-1: ath9k_htc: USB layer deinitialized [ 491.855773][ T10] em28xx 4-1:0.0: chip ID is em28178 [ 492.090738][ T10] usb 4-1: USB disconnect, device number 52 [ 492.107456][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 492.167346][ T10] em28xx 4-1:0.0: Freeing device [ 492.388447][T17976] ipvlan2: entered promiscuous mode [ 492.388510][T17976] ipvlan2: entered allmulticast mode [ 492.388523][T17976] macvlan1: entered allmulticast mode [ 492.388535][T17976] veth1_vlan: entered allmulticast mode [ 493.009309][T18004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5663'. [ 493.837628][T18024] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5669'. [ 493.840401][T18024] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5669'. [ 494.728901][ T37] audit: type=1326 audit(1757623640.697:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.0.5686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d5a50eba9 code=0x0 [ 495.421469][T17151] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 495.455697][T18083] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 495.482203][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 495.593094][T17151] usb 6-1: Using ep0 maxpacket: 8 [ 495.595648][T17151] usb 6-1: config 0 has no interfaces? [ 495.599519][T17151] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 495.599549][T17151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.599569][T17151] usb 6-1: Product: syz [ 495.599589][T17151] usb 6-1: Manufacturer: syz [ 495.599603][T17151] usb 6-1: SerialNumber: syz [ 495.623449][T17151] usb 6-1: config 0 descriptor?? [ 495.770215][ T37] audit: type=1326 audit(1757623641.737:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18090 comm="syz.3.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 495.770779][ T37] audit: type=1326 audit(1757623641.737:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18090 comm="syz.3.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 495.771024][ T37] audit: type=1326 audit(1757623641.737:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18090 comm="syz.3.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 495.829055][T17151] usb 6-1: USB disconnect, device number 27 [ 496.022982][T18100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5707'. [ 496.080782][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5708'. [ 496.371788][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.552964][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5716'. [ 496.987580][ T37] audit: type=1326 audit(496.819:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.2.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 496.987633][ T37] audit: type=1326 audit(496.819:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.2.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 497.002752][ T37] audit: type=1326 audit(496.839:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.2.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 497.010762][ T37] audit: type=1326 audit(496.839:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.2.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 497.010811][ T37] audit: type=1326 audit(496.839:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.2.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 497.012624][ T37] audit: type=1326 audit(496.839:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.2.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 497.110016][T18141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5726'. [ 497.885915][T18166] kvm: kvm [18165]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x81 [ 498.021627][ T6314] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 498.097295][T18172] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 498.097546][T18172] FAT-fs (loop11): unable to read boot sector [ 498.171662][ T6314] usb 4-1: Using ep0 maxpacket: 32 [ 498.182531][ T6314] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 498.182560][ T6314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.216703][ T6314] usb 4-1: config 0 descriptor?? [ 498.429407][ T6314] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 498.439251][ T6314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.439965][ T6314] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 498.439997][ T6314] usb 4-1: media controller created [ 498.498178][ T6314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.636612][ T6314] az6027: usb out operation failed. (-71) [ 498.637060][ T6314] az6027: usb out operation failed. (-71) [ 498.637074][ T6314] stb0899_attach: Driver disabled by Kconfig [ 498.637084][ T6314] az6027: no front-end attached [ 498.637084][ T6314] [ 498.637504][ T6314] az6027: usb out operation failed. (-71) [ 498.637517][ T6314] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 498.640652][ T6314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 498.694857][ T6314] dvb-usb: schedule remote query interval to 400 msecs. [ 498.694879][ T6314] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 498.697955][ T6314] usb 4-1: USB disconnect, device number 53 [ 498.834612][ T6314] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 499.776480][ T6025] kernel read not supported for file /dsp (pid: 6025 comm: kworker/1:7) [ 499.963995][T18226] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5767'. [ 500.039090][T18232] openvswitch: netlink: Multiple metadata blocks provided [ 501.567960][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.653286][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 501.653303][ T37] audit: type=1326 audit(501.489:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 501.653347][ T37] audit: type=1326 audit(501.489:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 501.656275][ T37] audit: type=1326 audit(501.489:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 501.656318][ T37] audit: type=1326 audit(501.489:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 501.656357][ T37] audit: type=1326 audit(501.489:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 501.673200][ T37] audit: type=1326 audit(501.509:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 501.673679][ T37] audit: type=1326 audit(501.509:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 501.673786][ T37] audit: type=1326 audit(501.509:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97445deba9 code=0x7ffc0000 [ 501.675917][ T37] audit: type=1326 audit(501.509:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f974457ada9 code=0x7ffc0000 [ 501.677410][ T37] audit: type=1326 audit(501.509:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18264 comm="syz.2.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f974457ada9 code=0x7ffc0000 [ 501.981084][ T59] Bluetooth: hci5: link tx timeout [ 501.988028][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.005346][ T59] Bluetooth: hci5: link tx timeout [ 502.005366][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.005697][ T59] Bluetooth: hci5: link tx timeout [ 502.005710][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.005786][ T59] Bluetooth: hci5: link tx timeout [ 502.005797][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.006225][ T59] Bluetooth: hci5: link tx timeout [ 502.006237][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.006718][ T59] Bluetooth: hci5: link tx timeout [ 502.006731][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.007135][ T59] Bluetooth: hci5: link tx timeout [ 502.007147][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.007227][ T59] Bluetooth: hci5: link tx timeout [ 502.007238][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.007322][ T59] Bluetooth: hci5: link tx timeout [ 502.007333][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.007403][ T59] Bluetooth: hci5: link tx timeout [ 502.007414][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.144215][ T59] Bluetooth: hci5: link tx timeout [ 502.144237][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.144263][ T59] Bluetooth: hci5: link tx timeout [ 502.144273][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.144342][ T59] Bluetooth: hci5: link tx timeout [ 502.144353][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.144419][ T59] Bluetooth: hci5: link tx timeout [ 502.144429][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.144500][ T59] Bluetooth: hci5: link tx timeout [ 502.144510][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.144581][ T59] Bluetooth: hci5: link tx timeout [ 502.144592][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.144661][ T59] Bluetooth: hci5: link tx timeout [ 502.144672][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145286][ T59] Bluetooth: hci5: link tx timeout [ 502.145300][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145369][ T59] Bluetooth: hci5: link tx timeout [ 502.145380][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145453][ T59] Bluetooth: hci5: link tx timeout [ 502.145463][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145537][ T59] Bluetooth: hci5: link tx timeout [ 502.145547][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145627][ T59] Bluetooth: hci5: link tx timeout [ 502.145638][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145716][ T59] Bluetooth: hci5: link tx timeout [ 502.145727][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145787][ T59] Bluetooth: hci5: link tx timeout [ 502.145797][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145869][ T59] Bluetooth: hci5: link tx timeout [ 502.145879][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.145981][ T59] Bluetooth: hci5: link tx timeout [ 502.145992][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146082][ T59] Bluetooth: hci5: link tx timeout [ 502.146093][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146169][ T59] Bluetooth: hci5: link tx timeout [ 502.146179][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146256][ T59] Bluetooth: hci5: link tx timeout [ 502.146267][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146408][ T59] Bluetooth: hci5: link tx timeout [ 502.146419][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146441][ T59] Bluetooth: hci5: link tx timeout [ 502.146451][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146509][ T59] Bluetooth: hci5: link tx timeout [ 502.146520][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146595][ T59] Bluetooth: hci5: link tx timeout [ 502.146606][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146675][ T59] Bluetooth: hci5: link tx timeout [ 502.146685][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146791][ T59] Bluetooth: hci5: link tx timeout [ 502.146802][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146873][ T59] Bluetooth: hci5: link tx timeout [ 502.146883][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.146980][ T59] Bluetooth: hci5: link tx timeout [ 502.146990][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147149][ T59] Bluetooth: hci5: link tx timeout [ 502.147160][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147255][ T59] Bluetooth: hci5: link tx timeout [ 502.147266][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147342][ T59] Bluetooth: hci5: link tx timeout [ 502.147352][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147417][ T59] Bluetooth: hci5: link tx timeout [ 502.147427][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147536][ T59] Bluetooth: hci5: link tx timeout [ 502.147547][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147568][ T59] Bluetooth: hci5: link tx timeout [ 502.147578][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147647][ T59] Bluetooth: hci5: link tx timeout [ 502.147658][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147726][ T59] Bluetooth: hci5: link tx timeout [ 502.147737][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147812][ T59] Bluetooth: hci5: link tx timeout [ 502.147847][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147868][ T59] Bluetooth: hci5: link tx timeout [ 502.147878][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.147960][ T59] Bluetooth: hci5: link tx timeout [ 502.147971][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148033][ T59] Bluetooth: hci5: link tx timeout [ 502.148044][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148112][ T59] Bluetooth: hci5: link tx timeout [ 502.148123][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148231][ T59] Bluetooth: hci5: link tx timeout [ 502.148242][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148299][ T59] Bluetooth: hci5: link tx timeout [ 502.148309][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148386][ T59] Bluetooth: hci5: link tx timeout [ 502.148397][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148476][ T59] Bluetooth: hci5: link tx timeout [ 502.148487][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148542][ T59] Bluetooth: hci5: link tx timeout [ 502.148553][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148662][ T59] Bluetooth: hci5: link tx timeout [ 502.148673][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148758][ T59] Bluetooth: hci5: link tx timeout [ 502.148769][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148837][ T59] Bluetooth: hci5: link tx timeout [ 502.148848][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.148924][ T59] Bluetooth: hci5: link tx timeout [ 502.148941][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149002][ T59] Bluetooth: hci5: link tx timeout [ 502.149013][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149084][ T59] Bluetooth: hci5: link tx timeout [ 502.149095][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149194][ T59] Bluetooth: hci5: link tx timeout [ 502.149205][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149268][ T59] Bluetooth: hci5: link tx timeout [ 502.149279][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149355][ T59] Bluetooth: hci5: link tx timeout [ 502.149366][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149430][ T59] Bluetooth: hci5: link tx timeout [ 502.149440][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149510][ T59] Bluetooth: hci5: link tx timeout [ 502.149521][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149591][ T59] Bluetooth: hci5: link tx timeout [ 502.149601][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.149675][ T59] Bluetooth: hci5: link tx timeout [ 502.152334][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.152366][ T59] Bluetooth: hci5: link tx timeout [ 502.152376][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.173996][ T59] Bluetooth: hci5: link tx timeout [ 502.174015][ T59] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 503.441565][ T6314] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 503.606755][ T6314] usb 4-1: Using ep0 maxpacket: 8 [ 503.609306][ T6314] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 503.609361][ T6314] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.609382][ T6314] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.609406][ T6314] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 503.609429][ T6314] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.609471][ T6314] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 503.609494][ T6314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.904693][ T6314] usb 4-1: GET_CAPABILITIES returned 0 [ 503.904747][ T6314] usbtmc 4-1:16.0: can't read capabilities [ 504.048246][ T59] Bluetooth: hci5: command 0x0405 tx timeout [ 504.125611][ T6314] usb 4-1: USB disconnect, device number 54 [ 504.604096][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5817'. [ 504.749649][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5821'. [ 504.749683][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5821'. [ 505.017547][T18348] netlink: 'syz.5.5825': attribute type 1 has an invalid length. [ 505.017569][T18348] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5825'. [ 505.295814][T18358] program syz.1.5828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.311384][T18360] program syz.5.5829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.825787][T18382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5838'. [ 506.301278][T18401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5847'. [ 506.356409][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5849'. [ 506.465937][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.716226][T18405] bridge0: entered promiscuous mode [ 506.716519][T18405] macvtap1: entered allmulticast mode [ 506.716534][T18405] bridge0: entered allmulticast mode [ 506.739458][T18405] bridge0: port 3(macvtap1) entered blocking state [ 506.744538][T18405] bridge0: port 3(macvtap1) entered disabled state [ 506.852709][T18405] bridge0: left allmulticast mode [ 506.852866][T18405] bridge0: left promiscuous mode [ 507.294298][T18430] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 507.331213][T18437] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5863'. [ 507.597326][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5870'. [ 507.806774][T18452] sp0: Synchronizing with TNC [ 508.017032][T18459] openvswitch: netlink: IP tunnel dst address not specified [ 508.742350][ T9] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 508.961007][ T9] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 508.961034][ T9] usb 4-1: config 0 has no interface number 0 [ 508.961065][ T9] usb 4-1: config 0 interface 106 has no altsetting 0 [ 509.000783][ T9] usb 4-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 509.000813][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.000833][ T9] usb 4-1: Product: syz [ 509.000846][ T9] usb 4-1: Manufacturer: syz [ 509.000860][ T9] usb 4-1: SerialNumber: syz [ 509.048107][ T9] usb 4-1: config 0 descriptor?? [ 509.183449][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.259711][ T9] usb 4-1: USB disconnect, device number 55 [ 509.566807][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.666477][ T6314] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 509.825403][ T6314] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 509.825432][ T6314] usb 6-1: config 0 has no interface number 0 [ 509.825487][ T6314] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 509.825512][ T6314] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 509.825538][ T6314] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 509.828094][ T6314] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 509.828120][ T6314] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 509.828140][ T6314] usb 6-1: Product: syz [ 509.828161][ T6314] usb 6-1: SerialNumber: syz [ 509.833628][ T6314] usb 6-1: config 0 descriptor?? [ 509.885182][ T6314] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 509.888223][ T6314] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input45 [ 510.076852][ C0] cm109_urb_ctl_callback: 602 callbacks suppressed [ 510.076876][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.077189][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.077422][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.077653][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.078352][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.078673][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.078911][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.079265][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.079501][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.079733][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.095380][ T6314] usb 6-1: USB disconnect, device number 28 [ 510.095474][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 510.263022][ T6314] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 510.381498][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 510.563919][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 510.563948][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.573245][ T9] usb 4-1: config 0 descriptor?? [ 510.584515][ T9] cp210x 4-1:0.0: cp210x converter detected [ 511.020238][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 511.039571][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 511.081551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 511.081962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 511.083658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 511.244271][ T9] usb 4-1: USB disconnect, device number 56 [ 511.258813][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.402249][ T9] cp210x 4-1:0.0: device disconnected [ 513.300128][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5926'. [ 513.340142][T18583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5928'. [ 514.231276][T18607] netlink: 'syz.2.5939': attribute type 7 has an invalid length. [ 514.231298][T18607] netlink: 'syz.2.5939': attribute type 8 has an invalid length. [ 514.231308][T18607] netlink: 'syz.2.5939': attribute type 4 has an invalid length. [ 514.231320][T18607] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5939'. [ 515.249259][T18643] program syz.3.5955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.510630][T18649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5959'. [ 515.770465][T18656] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 515.770685][T18656] syzkaller1: linktype set to 773 [ 516.380912][T18674] hsr0: entered promiscuous mode [ 516.389487][T18674] macsec1: entered allmulticast mode [ 516.389507][T18674] hsr0: entered allmulticast mode [ 516.389521][T18674] hsr_slave_0: entered allmulticast mode [ 516.389546][T18674] hsr_slave_1: entered allmulticast mode [ 516.455559][T18674] hsr0: left allmulticast mode [ 516.455574][T18674] hsr_slave_0: left allmulticast mode [ 516.455586][T18674] hsr_slave_1: left allmulticast mode [ 517.119179][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5982'. [ 517.351473][ T6025] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 517.495557][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5987'. [ 517.517546][ T6025] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 517.517573][ T6025] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 517.517592][ T6025] usb 3-1: config 0 has no interface number 0 [ 517.517637][ T6025] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 517.517663][ T6025] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 517.517690][ T6025] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.517716][ T6025] usb 3-1: config 0 interface 52 has no altsetting 0 [ 517.519598][ T6025] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 517.519625][ T6025] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 517.519645][ T6025] usb 3-1: Product: syz [ 517.519658][ T6025] usb 3-1: SerialNumber: syz [ 517.527061][ T6025] usb 3-1: config 0 descriptor?? [ 517.774220][ T6025] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input46 [ 517.978519][ T10] usb 3-1: USB disconnect, device number 59 [ 518.751051][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.880200][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.934155][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.049352][T17151] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 519.196615][T17151] usb 3-1: Using ep0 maxpacket: 8 [ 519.199132][T17151] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 519.199158][T17151] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 519.199177][T17151] usb 3-1: config 3 has no interface number 0 [ 519.199224][T17151] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.199252][T17151] usb 3-1: config 3 interface 45 has no altsetting 0 [ 519.205929][T17151] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 519.205958][T17151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.205977][T17151] usb 3-1: Product: syz [ 519.205990][T17151] usb 3-1: Manufacturer: syz [ 519.206003][T17151] usb 3-1: SerialNumber: syz [ 519.510165][T17151] usb 3-1: USB disconnect, device number 60 [ 519.546833][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.415746][ T10] kernel write not supported for file /amidi2 (pid: 10 comm: kworker/0:1) [ 521.965802][T18811] netlink: 'syz.2.6032': attribute type 1 has an invalid length. [ 522.056602][ T6013] usb 3-1: [UEAGLE-ATM] firmware is not available [ 522.840799][T18834] syz_tun: entered allmulticast mode [ 522.853152][T18833] syz_tun: left allmulticast mode [ 522.975112][T18838] erspan0: entered promiscuous mode [ 523.011486][ T6013] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 523.161711][ T6013] usb 4-1: Using ep0 maxpacket: 16 [ 523.165524][ T6013] usb 4-1: config 0 has an invalid interface number: 24 but max is 0 [ 523.165550][ T6013] usb 4-1: config 0 has no interface number 0 [ 523.165596][ T6013] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.165622][ T6013] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.165660][ T6013] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 523.165681][ T6013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.175928][ T6013] usb 4-1: config 0 descriptor?? [ 523.344793][T18848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.391420][ T6314] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 523.565552][ T6314] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 523.565579][ T6314] usb 6-1: config 0 has no interface number 0 [ 523.565622][ T6314] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 523.565644][ T6314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.608558][ T6314] usb 6-1: config 0 descriptor?? [ 523.660708][ T6013] hid (null): unknown global tag 0x39 [ 523.660745][ T6013] hid (null): report_id 0 is invalid [ 523.845123][ T6013] usb 6-1: USB disconnect, device number 29 [ 523.865704][T17151] usb 4-1: USB disconnect, device number 57 [ 524.261672][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'. [ 524.261846][T18864] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6058'. [ 524.317161][T18864] vlan3: entered allmulticast mode [ 524.645169][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6059'. [ 525.963237][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6080'. [ 526.173591][T18919] input: syz0 as /devices/virtual/input/input47 [ 526.591656][T17151] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 526.701797][T18937] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.754746][T17151] usb 3-1: config 0 has no interfaces? [ 526.756900][T17151] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.756916][T17151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.756926][T17151] usb 3-1: Product: syz [ 526.756933][T17151] usb 3-1: Manufacturer: syz [ 526.756941][T17151] usb 3-1: SerialNumber: syz [ 526.760482][T17151] usb 3-1: config 0 descriptor?? [ 526.927116][T18943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.980907][T17151] usb 3-1: USB disconnect, device number 61 [ 529.430389][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430427][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430453][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430480][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430506][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430531][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430558][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430584][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430609][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.430635][ T9] hid-generic 0000:0006:0007.0070: unknown main item tag 0x0 [ 529.431522][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 529.546381][ T9] hid-generic 0000:0006:0007.0070: hidraw0: HID v0.0b Device [syz1] on syz1 [ 529.604072][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.604116][ T10] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 529.604140][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.642282][ T10] usb 4-1: config 0 descriptor?? [ 530.277949][ T10] razer 0003:1532:010E.0071: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 530.478676][ T6013] usb 4-1: USB disconnect, device number 58 [ 530.551062][T19031] tipc: Started in network mode [ 530.551095][T19031] tipc: Node identity ac14140f, cluster identity 4711 [ 530.567374][T19031] tipc: New replicast peer: 255.255.255.255 [ 530.578875][T19031] tipc: Enabled bearer , priority 10 [ 530.579752][T19031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6134'. [ 530.940431][T19036] cgroup: fork rejected by pids controller in /syz0 [ 531.691502][ T10] tipc: Node number set to 2886997007 [ 532.109143][T19489] mkiss: ax0: crc mode is auto. [ 532.799576][T19498] tap0: tun_chr_ioctl cmd 1074025681 [ 533.907011][T19533] netlink: 'syz.3.6168': attribute type 14 has an invalid length. [ 534.327263][T19542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.421455][T19609] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6201'. [ 536.974072][T19633] loop7: detected capacity change from 0 to 7 [ 537.056870][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.056910][ C0] buffer_io_error: 4 callbacks suppressed [ 537.056923][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.109578][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.109620][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.123832][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.123868][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.125353][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.125383][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.125628][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.125655][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.125852][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.125877][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.126068][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.126091][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.126263][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.126287][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.127912][T19633] ldm_validate_partition_table(): Disk read failed. [ 537.128049][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.128075][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.128258][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.128283][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 537.132213][T19633] Dev loop7: unable to read RDB block 0 [ 537.136692][T19633] loop7: unable to read partition table [ 537.136925][T19633] loop7: partition table beyond EOD, truncated [ 537.136942][T19633] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 537.473941][T19647] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 537.549991][T19647] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 538.433853][T19682] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.6233'. [ 538.766716][T19692] netlink: 844 bytes leftover after parsing attributes in process `syz.2.6237'. [ 538.929009][T19699] autofs4:pid:19699:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 538.929041][T19699] autofs4:pid:19699:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 539.118288][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 539.235180][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880336c0000: rx timeout, send abort [ 539.239324][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880336c0000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 539.278290][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 539.280458][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 539.280485][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.288248][ T31] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 539.320135][ T10] usb 6-1: config 0 descriptor?? [ 539.439834][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 539.443597][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 539.443626][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.466690][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 539.466707][ T31] pvrusb2: ********** [ 539.466714][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 539.466725][ T31] pvrusb2: Important functionality might not be entirely working. [ 539.466734][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 539.466745][ T31] pvrusb2: ********** [ 539.545545][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 539.561945][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 539.563242][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 539.563297][ T10] usb 6-1: media controller created [ 539.635957][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.691168][ T2365] pvrusb2: Invalid write control endpoint [ 539.750120][ T10] az6027: usb out operation failed. (-71) [ 539.750582][ T10] az6027: usb out operation failed. (-71) [ 539.750595][ T10] stb0899_attach: Driver disabled by Kconfig [ 539.750604][ T10] az6027: no front-end attached [ 539.750604][ T10] [ 539.751050][ T10] az6027: usb out operation failed. (-71) [ 539.751070][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 539.754170][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 539.809302][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 539.809322][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 539.812731][ T2365] pvrusb2: Invalid write control endpoint [ 539.812743][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 539.812750][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 539.812757][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 539.812764][ T2365] pvrusb2: Device being rendered inoperable [ 539.815632][ T10] usb 6-1: USB disconnect, device number 30 [ 539.815705][ T2365] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 539.816346][ T2365] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 539.823963][ T2365] pvrusb2: Attached sub-driver cx25840 [ 539.823976][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 539.823985][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 539.908901][ T31] usb 3-1: USB disconnect, device number 62 [ 540.044276][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 540.756476][T19739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6257'. [ 541.332225][T19763] netlink: 'syz.2.6270': attribute type 1 has an invalid length. [ 541.659183][ T37] kauditd_printk_skb: 47 callbacks suppressed [ 541.659201][ T37] audit: type=1400 audit(797.473:275): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=19777 comm="syz.5.6278" name="616" dev="tmpfs" ino=3127 [ 541.813108][ T37] audit: type=1326 audit(797.633:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 541.813158][ T37] audit: type=1326 audit(797.643:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 541.813198][ T37] audit: type=1326 audit(797.643:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 541.813237][ T37] audit: type=1326 audit(797.643:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 541.819004][ T37] audit: type=1326 audit(797.653:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 541.819264][ T37] audit: type=1326 audit(797.653:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19782 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c51bdeba9 code=0x7ffc0000 [ 542.017059][ T31] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 542.026344][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6283'. [ 542.090978][T19794] netlink: 'syz.1.6285': attribute type 2 has an invalid length. [ 542.091000][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6285'. [ 542.166742][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 542.183690][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.183718][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.183753][ T31] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 542.183775][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.232762][ T31] usb 6-1: config 0 descriptor?? [ 542.447065][T19799] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 542.695994][ T31] playstation 0003:054C:05C4.0072: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 542.721321][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6292'. [ 542.875116][ T31] playstation 0003:054C:05C4.0072: Invalid byte count transferred, expected 16 got 0 [ 542.875144][ T31] playstation 0003:054C:05C4.0072: Failed to retrieve DualShock4 pairing info: -22 [ 542.875195][ T31] playstation 0003:054C:05C4.0072: Failed to get MAC address from DualShock4 [ 542.875210][ T31] playstation 0003:054C:05C4.0072: Failed to create dualshock4. [ 542.914337][ T31] playstation 0003:054C:05C4.0072: probe with driver playstation failed with error -22 [ 543.070645][ T37] audit: type=1800 audit(798.874:282): pid=19814 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.6294" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=60211 res=0 errno=0 [ 543.095186][ T31] usb 6-1: USB disconnect, device number 31 [ 543.679850][T19834] netem: change failed [ 544.563038][T19854] netlink: 'syz.0.6312': attribute type 1 has an invalid length. [ 544.563062][T19854] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6312'. [ 544.563079][T19854] netlink: 97 bytes leftover after parsing attributes in process `syz.0.6312'. [ 545.150895][T19867] bpf: Bad value for 'uid' [ 545.255563][ T31] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 545.373968][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6323'. [ 545.374161][T19875] netlink: 39 bytes leftover after parsing attributes in process `syz.3.6323'. [ 545.405151][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 545.441394][ T31] usb 6-1: config 0 has an invalid interface number: 203 but max is 0 [ 545.441422][ T31] usb 6-1: config 0 has no interface number 0 [ 545.441475][ T31] usb 6-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 545.446303][ T31] usb 6-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 545.446333][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.446352][ T31] usb 6-1: Product: syz [ 545.446365][ T31] usb 6-1: Manufacturer: syz [ 545.446379][ T31] usb 6-1: SerialNumber: syz [ 545.467737][ T31] usb 6-1: config 0 descriptor?? [ 545.472194][T19863] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 545.480751][ T31] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.576412][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6326'. [ 546.537145][T19906] loop8: detected capacity change from 0 to 1 [ 546.567848][T19906] Dev loop8: unable to read RDB block 1 [ 546.567897][T19906] loop8: unable to read partition table [ 546.568129][T19906] loop8: partition table beyond EOD, truncated [ 546.568145][T19906] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 546.645403][ T31] usb 6-1: USB disconnect, device number 32 [ 546.771754][T19908] team0: Device gtp0 is of different type [ 548.325744][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6343'. [ 552.211934][T19971] program syz.1.6364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.239575][T19967] batman_adv: batadv0: Adding interface: gretap1 [ 552.239593][T19967] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.239627][T19967] batman_adv: batadv0: Interface activated: gretap1 [ 552.326099][T19969] netem: incorrect ge model size [ 552.326139][T19969] netem: change failed [ 552.578102][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6366'. [ 554.898790][T20002] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6376'. [ 555.668068][T20011] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 20011 comm: syz.0.6383) [ 555.668552][ T37] audit: type=1800 audit(811.500:283): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.6383" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=62689 res=0 errno=0 [ 557.633908][T20027] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 560.285305][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6399'. [ 560.320868][T20047] bridge0: entered promiscuous mode [ 560.353824][T20047] batman_adv: batadv0: Adding interface: macvlan2 [ 560.353843][T20047] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.353876][T20047] batman_adv: batadv0: Interface activated: macvlan2 [ 562.165594][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6408'. [ 562.452176][T20070] erspan0: entered promiscuous mode [ 563.056885][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.418566][T20079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 563.439301][T20079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 563.442324][T20079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 563.443627][T20079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 563.475307][T20079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 564.323932][T20075] chnl_net:caif_netlink_parms(): no params data found [ 565.548772][T20079] Bluetooth: hci2: command tx timeout [ 565.816129][T20075] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.816307][T20075] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.816562][T20075] bridge_slave_0: entered allmulticast mode [ 565.846706][T20075] bridge_slave_0: entered promiscuous mode [ 565.893202][T20075] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.893343][T20075] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.893591][T20075] bridge_slave_1: entered allmulticast mode [ 565.944220][T20075] bridge_slave_1: entered promiscuous mode [ 566.452624][T20115] netlink: 'syz.1.6425': attribute type 25 has an invalid length. [ 566.452646][T20115] netlink: 'syz.1.6425': attribute type 8 has an invalid length. [ 566.896259][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6430'. [ 567.067439][T20075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.116849][T20075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.634412][T20079] Bluetooth: hci2: command tx timeout [ 567.790890][T20075] team0: Port device team_slave_0 added [ 567.819735][T20075] team0: Port device team_slave_1 added [ 569.714071][T20079] Bluetooth: hci2: command tx timeout [ 571.053734][T20075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.053754][T20075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.053780][T20075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.056626][T20075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.056639][T20075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.056669][T20075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.728080][T20075] hsr_slave_0: entered promiscuous mode [ 571.729705][T20075] hsr_slave_1: entered promiscuous mode [ 571.731415][T20075] debugfs: 'hsr0' already exists in 'hsr' [ 571.731441][T20075] Cannot create hsr debugfs directory [ 571.793188][T20079] Bluetooth: hci2: command tx timeout [ 572.916751][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.920630][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.942347][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.944792][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.948316][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 573.865053][T20079] Bluetooth: hci2: command tx timeout [ 574.869915][ T5159] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 574.902511][ T5159] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 574.904506][ T5159] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 574.905663][ T5159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 574.906402][ T5159] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 575.076307][ T5159] Bluetooth: hci1: command tx timeout [ 575.340464][T20141] chnl_net:caif_netlink_parms(): no params data found [ 575.536214][T20075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 575.942655][T20075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 576.089261][T20075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 576.292496][T20075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 577.005608][ T5159] Bluetooth: hci6: command tx timeout [ 577.140494][ T5159] Bluetooth: hci1: command tx timeout [ 579.058521][ T5159] Bluetooth: hci6: command tx timeout [ 579.218565][ T5159] Bluetooth: hci1: command tx timeout [ 581.137645][ T5159] Bluetooth: hci6: command tx timeout [ 581.297341][ T5159] Bluetooth: hci1: command tx timeout [ 583.217682][ T5159] Bluetooth: hci6: command tx timeout [ 583.805988][T20141] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.806153][T20141] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.806424][T20141] bridge_slave_0: entered allmulticast mode [ 583.841623][T20141] bridge_slave_0: entered promiscuous mode [ 583.925932][T20141] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.926086][T20141] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.926347][T20141] bridge_slave_1: entered allmulticast mode [ 583.968561][T20141] bridge_slave_1: entered promiscuous mode [ 584.537859][T20079] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 584.568211][T20079] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 584.569742][T20079] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 584.571079][T20079] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 584.572432][T20079] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 585.858659][T20141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.927998][T20141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.396641][ T5159] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 586.426992][ T5159] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 586.429488][ T5159] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 586.452268][ T5159] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 586.466581][ T5159] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 586.598336][T20141] team0: Port device team_slave_0 added [ 586.656042][T20079] Bluetooth: hci7: command tx timeout [ 586.746954][T20141] team0: Port device team_slave_1 added [ 588.582805][T20079] Bluetooth: hci8: command tx timeout [ 588.752846][T20079] Bluetooth: hci7: command tx timeout [ 590.662802][T20079] Bluetooth: hci8: command tx timeout [ 590.812592][T20079] Bluetooth: hci7: command tx timeout [ 592.731926][T20079] Bluetooth: hci8: command tx timeout [ 592.891872][T20079] Bluetooth: hci7: command tx timeout [ 594.817398][T20079] Bluetooth: hci8: command tx timeout [ 597.834873][T20119] syz_tun (unregistering): left allmulticast mode [ 597.990818][T20119] team0: Port device syz_tun removed [ 616.464509][T20141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.464527][T20141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.464553][T20141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.256372][ T3540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.256408][ T3540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.603200][T20141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.603218][T20141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.603244][T20141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.893913][T20141] hsr_slave_0: entered promiscuous mode [ 618.895277][T20141] hsr_slave_1: entered promiscuous mode [ 618.896249][T20141] debugfs: 'hsr0' already exists in 'hsr' [ 618.896272][T20141] Cannot create hsr debugfs directory [ 618.951264][T20147] chnl_net:caif_netlink_parms(): no params data found [ 622.969804][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 623.007754][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 623.010560][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 623.011737][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 623.012524][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 624.397106][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.486584][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.115595][T20079] Bluetooth: hci0: command tx timeout [ 627.194852][T20079] Bluetooth: hci0: command tx timeout [ 629.275031][T20079] Bluetooth: hci0: command tx timeout [ 631.356288][T20079] Bluetooth: hci0: command tx timeout [ 635.783471][T20183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.831997][T20183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.833878][T20183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.835251][T20183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.836148][T20183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.994373][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 636.053164][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 636.067545][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 636.135962][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 636.163229][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 638.048127][ T5159] Bluetooth: hci3: command tx timeout [ 638.319181][T20079] Bluetooth: hci2: command tx timeout [ 640.082255][T20079] Bluetooth: hci3: command tx timeout [ 640.398032][T20079] Bluetooth: hci2: command tx timeout [ 642.147110][T20079] Bluetooth: hci3: command tx timeout [ 642.466862][T20079] Bluetooth: hci2: command tx timeout [ 644.226095][T20079] Bluetooth: hci3: command tx timeout [ 644.560922][T20079] Bluetooth: hci2: command tx timeout [ 646.005638][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.028658][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.039657][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.040992][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.051274][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 647.022679][ T5159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 647.068718][ T5159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 647.075416][ T5159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 647.076737][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 647.081219][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 648.029213][T20159] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 648.154259][T20079] Bluetooth: hci1: command tx timeout [ 649.122074][T20079] Bluetooth: hci4: command tx timeout [ 650.223323][T20079] Bluetooth: hci1: command tx timeout [ 651.182344][T20079] Bluetooth: hci4: command tx timeout [ 651.756223][T20169] chnl_net:caif_netlink_parms(): no params data found [ 652.284631][T20180] chnl_net:caif_netlink_parms(): no params data found [ 652.302219][T20079] Bluetooth: hci1: command tx timeout [ 652.620877][T20178] chnl_net:caif_netlink_parms(): no params data found [ 653.261860][T20079] Bluetooth: hci4: command tx timeout [ 654.383821][T20079] Bluetooth: hci1: command tx timeout [ 655.340931][T20079] Bluetooth: hci4: command tx timeout [ 674.606337][T20188] chnl_net:caif_netlink_parms(): no params data found [ 674.648915][T20186] chnl_net:caif_netlink_parms(): no params data found [ 683.521595][ T5159] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 683.548353][ T5159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 683.551424][ T5159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 683.557272][ T5159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 683.576545][ T5159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 685.649396][ T5159] Bluetooth: hci5: command tx timeout [ 685.827743][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.724742][ T5159] Bluetooth: hci5: command tx timeout [ 689.803113][ T5159] Bluetooth: hci5: command tx timeout [ 691.882418][ T5159] Bluetooth: hci5: command tx timeout [ 694.580296][T20079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 694.595476][T20079] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 694.622596][T20079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 694.623924][T20079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 694.625052][T20079] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 696.762612][T20079] Bluetooth: hci6: command tx timeout [ 698.838585][T20079] Bluetooth: hci6: command tx timeout [ 699.150947][ T5159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 699.186664][ T5159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 699.203337][ T5159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 699.229984][ T5159] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 699.230864][ T5159] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 699.292088][ T3540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.292122][ T3540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.920309][ T5159] Bluetooth: hci6: command tx timeout [ 701.317376][ T5159] Bluetooth: hci7: command tx timeout [ 702.997827][ T5159] Bluetooth: hci6: command tx timeout [ 703.399205][ T5159] Bluetooth: hci7: command tx timeout [ 705.475626][ T59] Bluetooth: hci7: command tx timeout [ 705.829386][T20079] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 705.834124][T20079] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 705.863561][T20079] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 705.880273][T20079] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 705.881166][T20079] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 706.773074][ T5159] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 706.807903][ T5159] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 706.809420][ T5159] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 706.811079][ T5159] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 706.857272][ T5159] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 707.554376][T20079] Bluetooth: hci7: command tx timeout [ 707.954399][ T5159] Bluetooth: hci8: command tx timeout [ 708.913674][ T5159] Bluetooth: hci9: command tx timeout [ 710.033465][ T5159] Bluetooth: hci8: command tx timeout [ 710.893546][T20180] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 711.012780][ T5159] Bluetooth: hci9: command tx timeout [ 712.112337][ T5159] Bluetooth: hci8: command tx timeout [ 713.072043][ T5159] Bluetooth: hci9: command tx timeout [ 714.191184][ T5159] Bluetooth: hci8: command tx timeout [ 715.156432][ T5159] Bluetooth: hci9: command tx timeout [ 715.424093][T20215] chnl_net:caif_netlink_parms(): no params data found [ 715.815881][T20209] chnl_net:caif_netlink_parms(): no params data found [ 720.925373][T20224] chnl_net:caif_netlink_parms(): no params data found [ 720.942493][T20221] chnl_net:caif_netlink_parms(): no params data found [ 720.962510][T20212] chnl_net:caif_netlink_parms(): no params data found [ 740.549313][ C0] sched: DL replenish lagged too much [ 743.722324][T20079] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 743.763929][T20079] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.580650][T20079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 745.623275][T20079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 745.643635][T20079] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 747.239217][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.694460][T20079] Bluetooth: hci0: command tx timeout [ 749.773601][T20079] Bluetooth: hci0: command tx timeout [ 751.852396][T20079] Bluetooth: hci0: command tx timeout [ 753.931462][T20079] Bluetooth: hci0: command tx timeout [ 754.686070][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.712955][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.714396][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.715640][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.716548][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.373768][ T5159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 755.403878][ T5159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 755.406501][ T5159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 755.408344][ T5159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 755.409236][ T5159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 756.810395][ T5159] Bluetooth: hci1: command tx timeout [ 757.529576][ T5159] Bluetooth: hci2: command tx timeout [ 758.889094][ T5159] Bluetooth: hci1: command tx timeout [ 759.608482][ T5159] Bluetooth: hci2: command tx timeout [ 760.968080][ T5159] Bluetooth: hci1: command tx timeout [ 761.687832][ T5159] Bluetooth: hci2: command tx timeout [ 763.047138][ T5159] Bluetooth: hci1: command tx timeout [ 763.767376][ T5159] Bluetooth: hci2: command tx timeout [ 765.177386][T20079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 765.211213][T20079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 765.231168][T20079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 765.233309][T20079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 765.234923][T20079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 766.726880][ T5159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 766.764068][ T5159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 766.783779][ T5159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 766.796508][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 766.797365][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.364850][T20079] Bluetooth: hci3: command tx timeout [ 768.883923][T20079] Bluetooth: hci4: command tx timeout [ 769.443474][T20079] Bluetooth: hci3: command tx timeout [ 770.964514][T20079] Bluetooth: hci4: command tx timeout [ 771.523571][T20079] Bluetooth: hci3: command tx timeout [ 773.043393][ T5159] Bluetooth: hci4: command tx timeout [ 773.608258][ T5159] Bluetooth: hci3: command tx timeout [ 775.150180][ T5159] Bluetooth: hci4: command tx timeout [ 789.605958][T20209] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 805.776726][T20079] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 805.834112][T20079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 805.851204][T20079] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 805.852549][T20079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 805.853423][T20079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 806.321008][T20258] chnl_net:caif_netlink_parms(): no params data found [ 806.356350][T20255] chnl_net:caif_netlink_parms(): no params data found [ 807.906099][ T5159] Bluetooth: hci5: command tx timeout [ 808.654289][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.983143][ T5159] Bluetooth: hci5: command tx timeout [ 812.062343][ T5159] Bluetooth: hci5: command tx timeout [ 814.141242][ T5159] Bluetooth: hci5: command tx timeout [ 815.714129][T20079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 815.754168][T20079] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 815.756325][T20079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 815.757725][T20079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 815.775137][T20079] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 816.712117][ T5159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 816.716887][ T5159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 816.718356][ T5159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 816.744358][ T5159] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 816.745262][ T5159] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 817.927078][ T5159] Bluetooth: hci6: command tx timeout [ 818.859243][ T5159] Bluetooth: hci7: command tx timeout [ 819.978387][T20079] Bluetooth: hci6: command tx timeout [ 820.937883][T20079] Bluetooth: hci7: command tx timeout [ 822.057730][T20079] Bluetooth: hci6: command tx timeout [ 823.017244][T20079] Bluetooth: hci7: command tx timeout [ 824.136460][T20079] Bluetooth: hci6: command tx timeout [ 825.096406][T20079] Bluetooth: hci7: command tx timeout [ 825.823055][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 825.866049][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 825.874233][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 825.898418][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 825.899336][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 827.429247][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 827.462817][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 827.471858][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 827.476896][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 827.529708][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 829.576675][ T5159] Bluetooth: hci8: command tx timeout [ 830.453630][ T5159] Bluetooth: hci0: command tx timeout [ 831.652997][ T5159] Bluetooth: hci8: command tx timeout [ 832.532600][ T5159] Bluetooth: hci0: command tx timeout [ 833.731780][ T5159] Bluetooth: hci8: command tx timeout [ 834.611558][ T5159] Bluetooth: hci0: command tx timeout [ 835.810648][ T5159] Bluetooth: hci8: command tx timeout [ 836.691580][ T5159] Bluetooth: hci0: command tx timeout [ 854.681516][ T38] INFO: task kworker/u8:8:3540 blocked for more than 143 seconds. [ 854.681540][ T38] Not tainted syzkaller #0 [ 854.681550][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.681560][ T38] task:kworker/u8:8 state:D stack:20088 pid:3540 tgid:3540 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 854.681603][ T38] Workqueue: netns cleanup_net [ 854.681639][ T38] Call Trace: [ 854.681645][ T38] [ 854.681658][ T38] __schedule+0x16f3/0x4c20 [ 854.681705][ T38] ? finish_task_switch+0x266/0x950 [ 854.681736][ T38] ? __pfx___schedule+0x10/0x10 [ 854.681779][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.681808][ T38] rt_mutex_schedule+0x77/0xf0 [ 854.681832][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 854.681855][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 854.681894][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 854.681919][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 854.681941][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 854.681960][ T38] ? __lock_acquire+0xab9/0xd20 [ 854.681995][ T38] ? rcu_barrier+0x4c/0x570 [ 854.682029][ T38] ? rcu_barrier+0x4c/0x570 [ 854.682044][ T38] mutex_lock_nested+0x16a/0x1d0 [ 854.682064][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 854.682092][ T38] rcu_barrier+0x4c/0x570 [ 854.682122][ T38] netdev_run_todo+0x327/0xea0 [ 854.682149][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 854.682167][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 854.682187][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.682221][ T38] ? kfree+0x195/0x550 [ 854.682249][ T38] nsim_destroy+0x3a6/0x670 [ 854.682278][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 854.682305][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 854.682335][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 854.682360][ T38] devlink_reload+0x1b6/0x8d0 [ 854.682385][ T38] ? xa_get_mark+0x67/0x7b0 [ 854.682408][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 854.682427][ T38] ? xa_get_mark+0x70f/0x7b0 [ 854.682459][ T38] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 854.682482][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 854.682510][ T38] ? class_remove_file_ns+0x124/0x160 [ 854.682537][ T38] ops_undo_list+0x184/0x990 [ 854.682569][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 854.682604][ T38] cleanup_net+0x4cb/0x800 [ 854.682633][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 854.682659][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.682683][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 854.682705][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 854.682729][ T38] process_scheduled_works+0xade/0x17b0 [ 854.682782][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 854.682823][ T38] worker_thread+0x8a0/0xda0 [ 854.682880][ T38] kthread+0x70e/0x8a0 [ 854.682909][ T38] ? __pfx_worker_thread+0x10/0x10 [ 854.682931][ T38] ? __pfx_kthread+0x10/0x10 [ 854.682962][ T38] ? __pfx_kthread+0x10/0x10 [ 854.682988][ T38] ret_from_fork+0x439/0x7d0 [ 854.683015][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 854.683044][ T38] ? __switch_to_asm+0x39/0x70 [ 854.683061][ T38] ? __switch_to_asm+0x33/0x70 [ 854.683077][ T38] ? __pfx_kthread+0x10/0x10 [ 854.683104][ T38] ret_from_fork_asm+0x1a/0x30 [ 854.683139][ T38] [ 854.683221][ T38] [ 854.683221][ T38] Showing all locks held in the system: [ 854.683229][ T38] 2 locks held by ksoftirqd/0/15: [ 854.683241][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 854.683288][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 854.683335][ T38] 8 locks held by ktimers/0/16: [ 854.683347][ T38] 1 lock held by khungtaskd/38: [ 854.683357][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 854.683400][ T38] 3 locks held by kworker/u8:3/57: [ 854.683410][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 854.683455][ T38] #1: ffffc9000123fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 854.683500][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 854.683549][ T38] 2 locks held by kworker/u8:5/1106: [ 854.683561][ T38] 3 locks held by kworker/u8:7/2240: [ 854.683572][ T38] #0: ffff88814d2ac138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 854.683617][ T38] #1: ffffc900063a7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 854.683663][ T38] #2: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 854.683715][ T38] 6 locks held by kworker/u8:8/3540: [ 854.683726][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 854.683770][ T38] #1: ffffc9000d847bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 854.683814][ T38] #2: ffffffff8ecc6680 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 854.683866][ T38] #3: ffff8880350da0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 854.683909][ T38] #4: ffff8880350db300 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 854.683955][ T38] #5: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.683998][ T38] 2 locks held by getty/5603: [ 854.684009][ T38] #0: ffff88823bf360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 854.684058][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 854.684106][ T38] 4 locks held by kworker/0:5/5909: [ 854.684116][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 854.684160][ T38] #1: ffffc9000519fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 854.684205][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 854.684250][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 854.684302][ T38] 1 lock held by syz-executor/20159: [ 854.684312][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684355][ T38] 1 lock held by syz-executor/20169: [ 854.684365][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684406][ T38] 4 locks held by kworker/0:3/20173: [ 854.684417][ T38] 1 lock held by syz-executor/20178: [ 854.684427][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684468][ T38] 1 lock held by syz-executor/20180: [ 854.684479][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684520][ T38] 1 lock held by syz-executor/20186: [ 854.684530][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684571][ T38] 1 lock held by syz-executor/20188: [ 854.684581][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684624][ T38] 1 lock held by syz-executor/20209: [ 854.684634][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684676][ T38] 1 lock held by syz-executor/20212: [ 854.684686][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684728][ T38] 1 lock held by syz-executor/20215: [ 854.684738][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684780][ T38] 1 lock held by syz-executor/20221: [ 854.684790][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684836][ T38] 1 lock held by syz-executor/20224: [ 854.684847][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684890][ T38] 1 lock held by syz-executor/20249: [ 854.684900][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 854.684941][ T38] 1 lock held by syz-executor/20252: [ 854.684952][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 854.685000][ T38] 1 lock held by syz-executor/20255: [ 854.685010][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 854.685056][ T38] 4 locks held by syz-executor/20258: [ 854.685067][ T38] #0: ffff88804af00e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 854.685111][ T38] #1: ffff88804af000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 854.685158][ T38] #2: ffffffff8ee3af38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 854.685200][ T38] #3: ffff88804fbfeb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 854.685253][ T38] 2 locks held by syz-executor/20261: [ 854.685264][ T38] #0: ffff888051bd0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 854.685308][ T38] #1: ffff888051bd00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 854.685355][ T38] 4 locks held by kworker/0:8/20263: [ 854.685365][ T38] #0: ffff88805a4e5138 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 854.685415][ T38] #1: ffffc90015d47bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 854.685474][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 854.685519][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 854.685582][ T38] 2 locks held by syz-executor/20272: [ 854.685592][ T38] #0: ffffffff8f1d7d58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 854.685644][ T38] #1: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 854.685691][ T38] 1 lock held by syz-executor/20280: [ 854.685701][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 854.685747][ T38] 1 lock held by syz-executor/20283: [ 854.685757][ T38] #0: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 854.685800][ T38] 2 locks held by syz-executor/20291: [ 854.685810][ T38] #0: ffffffff8ecc6680 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 854.685861][ T38] #1: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 854.685903][ T38] 2 locks held by syz-executor/20294: [ 854.685913][ T38] #0: ffffffff8ecc6680 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 854.685958][ T38] #1: ffffffff8ecd3578 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 854.686011][ T38] [ 854.686016][ T38] ============================================= [ 854.686016][ T38] [ 854.686032][ T38] NMI backtrace for cpu 1 [ 854.686055][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 854.686104][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 854.686124][ T38] Call Trace: [ 854.686139][ T38] [ 854.686157][ T38] dump_stack_lvl+0x189/0x250 [ 854.686225][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.686261][ T38] ? __pfx__printk+0x10/0x10 [ 854.686292][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 854.686318][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 854.686343][ T38] ? __pfx__printk+0x10/0x10 [ 854.686366][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 854.686391][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 854.686415][ T38] watchdog+0xf93/0xfe0 [ 854.686442][ T38] ? watchdog+0x1de/0xfe0 [ 854.686469][ T38] kthread+0x70e/0x8a0 [ 854.686497][ T38] ? __pfx_watchdog+0x10/0x10 [ 854.686518][ T38] ? __pfx_kthread+0x10/0x10 [ 854.686548][ T38] ? __pfx_kthread+0x10/0x10 [ 854.686573][ T38] ret_from_fork+0x439/0x7d0 [ 854.686598][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 854.686626][ T38] ? __switch_to_asm+0x39/0x70 [ 854.686642][ T38] ? __switch_to_asm+0x33/0x70 [ 854.686656][ T38] ? __pfx_kthread+0x10/0x10 [ 854.686682][ T38] ret_from_fork_asm+0x1a/0x30 [ 854.686715][ T38] [ 854.686722][ T38] Sending NMI from CPU 1 to CPUs 0: [ 854.686751][ C0] NMI backtrace for cpu 0 [ 854.686767][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 854.686809][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 854.686834][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x2d/0x40 [ 854.686858][ C0] Code: fa 31 c0 83 3d 97 67 26 04 00 74 1e 83 3d 8a 77 26 04 00 74 15 65 48 8b 0c 25 08 30 f6 91 31 c0 83 b9 1c 0b 00 00 00 0f 94 c0 ce a7 03 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 854.686871][ C0] RSP: 0018:ffffc900001564b8 EFLAGS: 00000246 [ 854.686884][ C0] RAX: 0000000000000001 RBX: ffffffff8d272372 RCX: ffff88801ae85940 [ 854.686895][ C0] RDX: 0000000000000000 RSI: ffffffff8d21abe3 RDI: ffffffff8b621300 [ 854.686906][ C0] RBP: ffffc90000156ad8 R08: 0000000000000000 R09: ffffffff88dd81b8 [ 854.686917][ C0] R10: ffffc90000156b60 R11: fffff5200002ad73 R12: dffffc0000000000 [ 854.686928][ C0] R13: ffffffff88dd81b8 R14: 0000000000000028 R15: ffffffff8d272368 [ 854.686940][ C0] FS: 0000000000000000(0000) GS:ffff8881268bd000(0000) knlGS:0000000000000000 [ 854.686952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 854.686963][ C0] CR2: 00007f635d2b6d00 CR3: 000000003514a000 CR4: 00000000003526f0 [ 854.686977][ C0] Call Trace: [ 854.686983][ C0] [ 854.686989][ C0] __skb_flow_dissect+0x42e/0x68b0 [ 854.687012][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 854.687033][ C0] ? __lock_acquire+0xab9/0xd20 [ 854.687057][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 854.687075][ C0] ? __pfx___skb_flow_dissect+0x10/0x10 [ 854.687093][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 854.687114][ C0] ? __lock_acquire+0xab9/0xd20 [ 854.687135][ C0] ? do_raw_spin_lock+0x121/0x290 [ 854.687158][ C0] ? __local_bh_enable+0x150/0x3d0 [ 854.687176][ C0] ? __pfx___local_bh_enable+0x10/0x10 [ 854.687197][ C0] ? __local_bh_enable_ip+0x1b2/0x270 [ 854.687214][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.687236][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 854.687253][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 854.687273][ C0] ? rt_spin_unlock+0x65/0x80 [ 854.687289][ C0] ? rt_set_nexthop+0x570/0xa80 [ 854.687308][ C0] ? rt_set_nexthop+0x783/0xa80 [ 854.687323][ C0] ? rt_set_nexthop+0x570/0xa80 [ 854.687342][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 854.687361][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 854.687379][ C0] __xfrm_decode_session+0xd2/0xb80 [ 854.687398][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 854.687416][ C0] ? __pfx___xfrm_decode_session+0x10/0x10 [ 854.687437][ C0] ? ip_route_output_flow+0xe6/0x150 [ 854.687453][ C0] ip_route_me_harder+0x944/0x1030 [ 854.687477][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 854.687508][ C0] synproxy_send_tcp+0x359/0x6c0 [ 854.687533][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 854.687560][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 854.687585][ C0] ? nft_redir_eval+0x1a8/0x480 [ 854.687604][ C0] ? synproxy_pernet+0x45/0x270 [ 854.687622][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 854.687641][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 854.687659][ C0] ? nf_ip_checksum+0x13c/0x510 [ 854.687677][ C0] nft_synproxy_do_eval+0x345/0x570 [ 854.687696][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 854.687712][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 854.687735][ C0] nft_do_chain+0x409/0x1920 [ 854.687758][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 854.687775][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 854.687802][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 854.687819][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 854.687839][ C0] nft_do_chain_inet+0x25d/0x340 [ 854.687855][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 854.687876][ C0] ? NF_HOOK+0x9a/0x3a0 [ 854.687895][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 854.687911][ C0] nf_hook_slow+0xc2/0x220 [ 854.687933][ C0] NF_HOOK+0x206/0x3a0 [ 854.687951][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 854.687970][ C0] ? NF_HOOK+0x9a/0x3a0 [ 854.687986][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 854.688003][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 854.688023][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 854.688043][ C0] ? skb_dst+0x4f/0xd0 [ 854.688061][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 854.688081][ C0] NF_HOOK+0x30c/0x3a0 [ 854.688100][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 854.688117][ C0] ? NF_HOOK+0x9a/0x3a0 [ 854.688134][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 854.688153][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 854.688177][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 854.688194][ C0] __netif_receive_skb+0x143/0x380 [ 854.688210][ C0] ? rt_spin_unlock+0x65/0x80 [ 854.688229][ C0] ? process_backlog+0x27b/0x900 [ 854.688247][ C0] process_backlog+0x31e/0x900 [ 854.688271][ C0] __napi_poll+0xb3/0x540 [ 854.688291][ C0] net_rx_action+0x707/0xe00 [ 854.688318][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 854.688354][ C0] handle_softirqs+0x22f/0x710 [ 854.688376][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 854.688398][ C0] run_ktimerd+0xcf/0x190 [ 854.688417][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 854.688436][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 854.688454][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 854.688471][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 854.688487][ C0] smpboot_thread_fn+0x53f/0xa60 [ 854.688505][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 854.688526][ C0] kthread+0x70e/0x8a0 [ 854.688547][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 854.688564][ C0] ? __pfx_kthread+0x10/0x10 [ 854.688590][ C0] ? __pfx_kthread+0x10/0x10 [ 854.688610][ C0] ret_from_fork+0x439/0x7d0 [ 854.688629][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 854.688649][ C0] ? __switch_to_asm+0x39/0x70 [ 854.688662][ C0] ? __switch_to_asm+0x33/0x70 [ 854.688675][ C0] ? __pfx_kthread+0x10/0x10 [ 854.688695][ C0] ret_from_fork_asm+0x1a/0x30 [ 854.688717][ C0] [ 854.688752][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 854.688766][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 854.688785][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 854.688795][ T38] Call Trace: [ 854.688802][ T38] [ 854.688810][ T38] dump_stack_lvl+0x99/0x250 [ 854.688840][ T38] ? __asan_memcpy+0x40/0x70 [ 854.688859][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.688883][ T38] ? __pfx__printk+0x10/0x10 [ 854.688914][ T38] vpanic+0x281/0x750 [ 854.688941][ T38] ? __pfx_vpanic+0x10/0x10 [ 854.688963][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 854.688981][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.689016][ T38] panic+0xb9/0xc0 [ 854.689039][ T38] ? __pfx_panic+0x10/0x10 [ 854.689066][ T38] ? irq_work_queue+0xc3/0x140 [ 854.689092][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 854.689117][ T38] watchdog+0xfd2/0xfe0 [ 854.689143][ T38] ? watchdog+0x1de/0xfe0 [ 854.689170][ T38] kthread+0x70e/0x8a0 [ 854.689197][ T38] ? __pfx_watchdog+0x10/0x10 [ 854.689218][ T38] ? __pfx_kthread+0x10/0x10 [ 854.689248][ T38] ? __pfx_kthread+0x10/0x10 [ 854.689274][ T38] ret_from_fork+0x439/0x7d0 [ 854.689299][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 854.689327][ T38] ? __switch_to_asm+0x39/0x70 [ 854.689343][ T38] ? __switch_to_asm+0x33/0x70 [ 854.689359][ T38] ? __pfx_kthread+0x10/0x10 [ 854.689384][ T38] ret_from_fork_asm+0x1a/0x30 [ 854.689417][ T38] [ 854.689694][ T38] Kernel Offset: disabled