last executing test programs: 57.295660232s ago: executing program 3 (id=2397): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) 57.145876284s ago: executing program 3 (id=2400): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'hsr0\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) 56.64725149s ago: executing program 3 (id=2404): memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0xc) 56.540676717s ago: executing program 3 (id=2405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 56.498621293s ago: executing program 3 (id=2406): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @dev}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 55.767950828s ago: executing program 3 (id=2414): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fcntl$dupfd(r0, 0x406, r0) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x5, 0x48, 0xf9, "10c06c7a6773b5b7eced6f42597ac9e8fcc3f43a5294974b46ec1fb9809043a828fc5a44c7a506274edfafc3503628e8dffff27af3f84e5502e1cb7915de48", 0x1f}, 0x60) 55.354282158s ago: executing program 32 (id=2414): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fcntl$dupfd(r0, 0x406, r0) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x5, 0x48, 0xf9, "10c06c7a6773b5b7eced6f42597ac9e8fcc3f43a5294974b46ec1fb9809043a828fc5a44c7a506274edfafc3503628e8dffff27af3f84e5502e1cb7915de48", 0x1f}, 0x60) 33.152124885s ago: executing program 5 (id=2415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 32.911735014s ago: executing program 5 (id=2637): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000040)="634f7f", 0x3}], 0x1) ioctl$SNAPSHOT_FREE(r0, 0x3305) 32.729267976s ago: executing program 5 (id=2640): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "4cc0688d"}]}}, 0x0}, 0x0) 32.63497177s ago: executing program 1 (id=2641): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 32.466311288s ago: executing program 1 (id=2644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r0}, 0x38) 32.324744888s ago: executing program 1 (id=2646): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 31.918672235s ago: executing program 1 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 31.234807669s ago: executing program 1 (id=2652): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 30.788262535s ago: executing program 5 (id=2656): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0x0, 0xbb) 30.787106686s ago: executing program 1 (id=2657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a91010000060a0b0400000000000000000200000064010480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000038010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6070000004e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af555f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f52766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000000900010073797a30000000000900020073797a32"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 30.399830806s ago: executing program 5 (id=2660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) 28.186076636s ago: executing program 4 (id=2671): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xff00, 0x0, 'syz0\x00', 0xfffffffd}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 28.002184243s ago: executing program 0 (id=2672): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xc0, 0x7ff00003}]}) fsopen(0x0, 0x0) 27.936689734s ago: executing program 4 (id=2673): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001640)=@hci={0x1f, 0x8, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700001028", 0x41}], 0x1}, 0x8050) 27.717340023s ago: executing program 0 (id=2674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 27.555616822s ago: executing program 0 (id=2675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 27.352884782s ago: executing program 0 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x24040010) 27.16463789s ago: executing program 0 (id=2677): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000280)=0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000fc0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x9, 0x7, 0x1, 0x6, 0xf909, 0x341f, 0x0, 0x400, 0x2, 0x8, 0x248, 0x9, 0xffff, 0x6, 0x80000001, 0x9, 0x80, 0x5, 0xff, 0x6, 0x7fffffff, 0xffff7fff, 0x9, 0x8, 0x9, 0xe, 0x1, 0xcda, 0x5, 0x8, 0x4]}) 26.318910329s ago: executing program 0 (id=2688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 26.268623923s ago: executing program 5 (id=2679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 26.114688239s ago: executing program 4 (id=2680): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'ip6_vti0\x00', {}, 0x1}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_1\x00', {0x2}, 0x5}) 25.531396728s ago: executing program 4 (id=2681): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000040)="634f7f", 0x3}], 0x1) ioctl$SNAPSHOT_FREE(r0, 0x3305) 24.924517766s ago: executing program 4 (id=2682): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8db42640452d591175c9d623b515c6d2d075d57080200000ea0001000000dae5", 0x20) 24.674041406s ago: executing program 4 (id=2684): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001640)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000400)="f03d07bd2b9caa8fa56d", 0xa}], 0x2}, 0x8881) 23.905919346s ago: executing program 2 (id=2690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 23.614729844s ago: executing program 2 (id=2691): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x6) 23.403986236s ago: executing program 2 (id=2692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.954839043s ago: executing program 2 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002740)=""/4071, 0xfe7}], 0x1}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4082, 0xff2}, {&(0x7f0000000380)=""/4092, 0xffc}], 0x3}, 0x9}], 0x3, 0x2, 0x0) 22.757746722s ago: executing program 2 (id=2694): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) 15.428481038s ago: executing program 33 (id=2657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 15.348321102s ago: executing program 2 (id=2696): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) 10.995777639s ago: executing program 34 (id=2688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 10.903726795s ago: executing program 35 (id=2679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 8.813111032s ago: executing program 36 (id=2684): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001640)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000400)="f03d07bd2b9caa8fa56d", 0xa}], 0x2}, 0x8881) 0s ago: executing program 37 (id=2696): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) kernel console output (not intermixed with test programs): 711][ T10] dw2102: i2c transfer failed. [ 186.611730][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 186.611742][ T10] dw2102: i2c transfer failed. [ 186.611759][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 186.611771][ T10] dw2102: i2c transfer failed. [ 186.611787][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 186.611800][ T10] dw2102: i2c transfer failed. [ 186.611816][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 186.611828][ T10] dw2102: i2c transfer failed. [ 186.611850][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 186.611861][ T10] dw2102: i2c transfer failed. [ 186.611871][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 186.731977][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.779100][ T8569] dvb-usb: bulk message failed: -22 (4/0) [ 186.779118][ T8569] dw2102: i2c transfer failed. [ 186.781983][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 186.782016][ T10] dw2102: command 0x0e transfer failed. [ 186.782024][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 186.782034][ T10] dw2102: command 0x0e transfer failed. [ 187.012612][ T5972] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.082511][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 187.082532][ T10] dw2102: command 0x0e transfer failed. [ 187.082541][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 187.082554][ T10] dw2102: command 0x0e transfer failed. [ 187.082560][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 187.082572][ T10] dw2102: command 0x51 transfer failed. [ 187.082581][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 187.082591][ T10] dw2102: i2c probe for address 0x68 failed. [ 187.082602][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 187.082613][ T10] dw2102: i2c probe for address 0x69 failed. [ 187.082623][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 187.082634][ T10] dw2102: i2c probe for address 0x6a failed. [ 187.082644][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 187.082653][ T10] dvb-usb: no frontend was attached by 'TeVii S662' [ 187.199166][ T5972] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 187.199193][ T5972] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 187.199209][ T5972] usb 2-1: config 0 has no interface number 0 [ 187.199253][ T5972] usb 2-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.199278][ T5972] usb 2-1: config 0 interface 30 has no altsetting 0 [ 187.199308][ T5972] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 187.199327][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.209869][ T5972] usb 2-1: config 0 descriptor?? [ 187.249449][ T5972] usb 2-1: unknown interface protocol 0x41, assuming v1 [ 187.249484][ T5972] usb 2-1: 30:2 : does not exist [ 187.322574][ T10] rc_core: IR keymap rc-tt-1500 not found [ 187.322596][ T10] Registered IR keymap rc-empty [ 187.324722][ T10] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 187.327782][ T10] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input15 [ 187.387468][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 187.387491][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 187.387503][ T10] dvb-usb: TeVii S662 successfully initialized and connected. [ 187.389844][ T5937] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 187.432915][ T10] usb 4-1: USB disconnect, device number 12 [ 187.450147][ T5972] usb 2-1: USB disconnect, device number 13 [ 187.552510][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 187.557306][ T5937] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 187.557333][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.557351][ T5937] usb 3-1: Product: syz [ 187.557363][ T5937] usb 3-1: Manufacturer: syz [ 187.557376][ T5937] usb 3-1: SerialNumber: syz [ 187.606802][ T8613] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 187.624600][ T5937] usb 3-1: config 0 descriptor?? [ 187.666613][ T5937] gspca_main: sq930x-2.14.0 probing 2770:930c [ 187.738898][ T10] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 188.066744][ T8618] ptrace attach of "./syz-executor exec"[8620] was attempted by "./syz-executor exec"[8618] [ 188.282549][ T5937] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 188.502568][ T5937] gspca_sq930x: Sensor ov9630 not yet treated [ 188.502672][ T5937] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 188.509718][ T5937] usb 3-1: USB disconnect, device number 9 [ 188.696774][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 188.697060][ T8644] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 188.697090][ T8644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.046291][ T8654] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 189.046345][ T8654] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 189.046398][ T8654] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 189.046445][ T8654] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 189.046491][ T8654] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 189.046536][ T8654] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 189.046594][ T8654] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 189.046640][ T8654] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 189.046707][ T8654] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 189.046754][ T8654] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 189.046809][ T8654] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 189.046855][ T8654] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 189.046903][ T8654] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 189.046953][ T8654] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 189.047048][ T8654] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 189.047099][ T8654] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 189.047145][ T8654] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 189.047307][ T8654] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 189.047353][ T8654] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 189.047399][ T8654] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 189.047445][ T8654] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 189.047567][ T8654] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 189.047618][ T8654] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 189.047666][ T8654] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 189.047712][ T8654] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 190.721602][ T8711] overlayfs: missing 'workdir' [ 191.352790][ T8734] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1266'. [ 191.671469][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 191.671524][ T8748] nbd: socks must be embedded in a SOCK_ITEM attr [ 191.888221][ T8759] sd 0:0:1:0: device reset [ 192.312506][ T5937] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 192.342593][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.471819][ T5937] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.471848][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.495142][ T5937] usb 2-1: config 0 descriptor?? [ 192.512516][ T5937] cp210x 2-1:0.0: cp210x converter detected [ 192.512530][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 192.515157][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.515187][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.515207][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.515245][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.515265][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.525171][ T45] usb 3-1: config 0 descriptor?? [ 192.942788][ T5937] usb 2-1: cp210x converter now attached to ttyUSB0 [ 193.048424][ T45] HID 045e:07da: Invalid code 65791 type 1 [ 193.048767][ T45] HID 045e:07da: Invalid code 768 type 1 [ 193.048780][ T45] HID 045e:07da: Invalid code 769 type 1 [ 193.048792][ T45] HID 045e:07da: Invalid code 770 type 1 [ 193.048804][ T45] HID 045e:07da: Invalid code 771 type 1 [ 193.048815][ T45] HID 045e:07da: Invalid code 772 type 1 [ 193.048826][ T45] HID 045e:07da: Invalid code 773 type 1 [ 193.048838][ T45] HID 045e:07da: Invalid code 774 type 1 [ 193.048848][ T45] HID 045e:07da: Invalid code 775 type 1 [ 193.048860][ T45] HID 045e:07da: Invalid code 776 type 1 [ 193.082134][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input16 [ 193.120180][ T5843] usb 2-1: USB disconnect, device number 14 [ 193.152291][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.199171][ T45] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 193.254887][ T45] usb 3-1: USB disconnect, device number 10 [ 193.303153][ T5843] cp210x 2-1:0.0: device disconnected [ 193.980250][ T8804] syz.1.1299 (8804) used greatest stack depth: 18920 bytes left [ 194.478702][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.478792][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.826762][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 195.826779][ T37] audit: type=1326 audit(1758069261.110:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.1.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 195.826879][ T37] audit: type=1326 audit(1758069261.110:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.1.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 195.829950][ T37] audit: type=1326 audit(1758069261.110:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.1.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 195.831960][ T37] audit: type=1326 audit(1758069261.110:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.1.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 195.832005][ T37] audit: type=1326 audit(1758069261.110:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.1.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 195.832041][ T37] audit: type=1326 audit(1758069261.110:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8859 comm="syz.1.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 196.234390][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1333'. [ 196.437539][ T8881] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1337'. [ 196.619187][ T8884] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1339'. [ 197.267815][ T8912] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 197.267875][ T8912] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 197.267964][ T8912] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 197.268097][ T8912] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 197.268148][ T8912] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 197.268195][ T8912] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 197.268322][ T8912] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 197.268374][ T8912] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 197.268420][ T8912] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 197.268506][ T8912] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 197.268552][ T8912] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 197.268598][ T8912] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 197.292636][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 197.292669][ T8914] netlink: 'syz.4.1353': attribute type 5 has an invalid length. [ 197.427179][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 197.427202][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 197.570740][ T8923] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1356'. [ 197.597301][ T8928] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1359'. [ 197.778683][ T8932] [U] [ 198.321886][ T8958] sctp: [Deprecated]: syz.3.1374 (pid 8958) Use of int in maxseg socket option. [ 198.321886][ T8958] Use struct sctp_assoc_value instead [ 199.522487][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 199.652594][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.677656][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.677703][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 199.677724][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.714943][ T10] usb 2-1: config 0 descriptor?? [ 199.819286][ T45] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.819326][ T45] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.819365][ T45] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.819385][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.839290][ T9002] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.860488][ T45] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.091480][ T9016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.149296][ T10] hid-corsair-void 0003:1B1C:0A0F.000F: item fetching failed at offset 0/3 [ 200.149907][ T10] hid-corsair-void 0003:1B1C:0A0F.000F: parse failed (reason: -22) [ 200.149989][ T10] hid-corsair-void 0003:1B1C:0A0F.000F: probe with driver hid-corsair-void failed with error -22 [ 200.350985][ T45] usb 2-1: USB disconnect, device number 15 [ 200.351274][ T10] usb 3-1: USB disconnect, device number 11 [ 200.708350][ T9024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1407'. [ 200.708372][ T9024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1407'. [ 200.708387][ T9024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1407'. [ 201.832626][ T5930] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 201.842682][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 201.985583][ T5930] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.985615][ T5930] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.985653][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.985673][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.036008][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 202.042213][ T9053] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.058507][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.058538][ T10] usb 3-1: config 0 has no interface number 0 [ 202.099260][ T5930] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.106393][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 202.106419][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.106434][ T10] usb 3-1: Product: syz [ 202.106446][ T10] usb 3-1: Manufacturer: syz [ 202.106458][ T10] usb 3-1: SerialNumber: syz [ 202.149664][ T10] usb 3-1: config 0 descriptor?? [ 202.161705][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 202.161744][ T10] usb 3-1: selecting invalid altsetting 1 [ 202.161758][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 202.199660][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.200178][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 202.200226][ T10] usb 3-1: media controller created [ 202.256414][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.710396][ T5843] usb 4-1: USB disconnect, device number 13 [ 202.826385][ T9089] netlink: 'syz.4.1438': attribute type 29 has an invalid length. [ 202.828181][ T9089] netlink: 'syz.4.1438': attribute type 29 has an invalid length. [ 203.018618][ T9094] __nla_validate_parse: 1 callbacks suppressed [ 203.020694][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 203.356106][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 203.356204][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 203.473285][ T10] usb 3-1: USB disconnect, device number 12 [ 203.595612][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1446'. [ 203.720606][ T37] audit: type=1800 audit(1758069268.990:61): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1449" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 203.965067][ T37] audit: type=1400 audit(1758069269.240:62): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9112 comm="syz.3.1450" src=1 dest=20000 netif=wpan0 [ 204.045381][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1454'. [ 204.428724][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 204.495386][ T9140] tc_dump_action: action bad kind [ 204.889103][ T5843] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 205.047172][ T5843] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 205.047200][ T5843] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 205.047250][ T5843] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 205.047271][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.086731][ T5843] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 205.288752][ T5843] gspca_sn9c2028: read1 error -71 [ 205.289185][ T5843] gspca_sn9c2028: read1 error -71 [ 205.289640][ T5843] gspca_sn9c2028: read1 error -71 [ 205.289728][ T5843] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 205.310349][ T5843] usb 2-1: USB disconnect, device number 16 [ 205.733478][ T5843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 205.822253][ T9185] overlayfs: workdir and upperdir must be separate subtrees [ 205.882554][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 205.885184][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.885212][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.885249][ T5843] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 205.885269][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.892188][ T5843] usb 5-1: config 0 descriptor?? [ 206.229688][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1491'. [ 206.387584][ T5843] glorious 0003:258A:0033.0010: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 206.535320][ T5930] usb 5-1: USB disconnect, device number 9 [ 206.597751][ T9213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 206.597911][ T9213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.598448][ T9213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 206.598527][ T9213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.598826][ T9213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 206.598901][ T9213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.599173][ T9213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 206.599249][ T9213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.599514][ T9213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 206.599588][ T9213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.744900][ T9216] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 206.744923][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1499'. [ 206.744939][ T9216] nbd: illegal input index 65544 [ 206.977391][ T9219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1501'. [ 206.977414][ T9219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1501'. [ 208.003024][ T5843] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 208.162883][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 208.167768][ T5843] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.167795][ T5843] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 208.167820][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.167855][ T5843] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 208.167875][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.184888][ T5843] usb 2-1: config 0 descriptor?? [ 208.660127][ T5843] hid (null): unknown global tag 0xc [ 208.660149][ T5843] hid (null): global environment stack underflow [ 208.686820][ T5843] corsair-cpro 0003:1B1C:0C10.0011: unknown global tag 0xc [ 208.686844][ T5843] corsair-cpro 0003:1B1C:0C10.0011: item 0 1 1 12 parsing failed [ 208.687726][ T5843] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -22 [ 208.716977][ T9281] tipc: Started in network mode [ 208.717009][ T9281] tipc: Node identity e0000002, cluster identity 4711 [ 208.717062][ T9281] tipc: Enabling of bearer rejected, failed to enable media [ 208.881621][ T45] usb 2-1: USB disconnect, device number 17 [ 209.092479][ T5937] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 209.233230][ T5847] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 209.250505][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 209.259763][ T5937] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 209.259787][ T5937] usb 4-1: config 179 has no interface number 0 [ 209.259832][ T5937] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 209.259854][ T5937] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 209.259878][ T5937] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.259901][ T5937] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 209.259924][ T5937] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 209.259964][ T5937] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 209.259983][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.360611][ T9287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 209.394177][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 209.396624][ T5847] usb 3-1: config 12 has an invalid interface number: 212 but max is 0 [ 209.396648][ T5847] usb 3-1: config 12 has no interface number 0 [ 209.407018][ T5847] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 209.407046][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.407063][ T5847] usb 3-1: Product: syz [ 209.407075][ T5847] usb 3-1: Manufacturer: syz [ 209.407086][ T5847] usb 3-1: SerialNumber: syz [ 209.457675][ T5847] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 209.459432][ T5847] dvb-usb: bulk message failed: -22 (2/0) [ 209.484886][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.486615][ T5847] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 209.486670][ T5847] usb 3-1: media controller created [ 209.621540][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.676084][ T9292] dvb-usb: bulk message failed: -22 (4/0) [ 209.676108][ T9292] cxusb: i2c read failed [ 209.743052][ T5847] cxusb: set interface failed [ 209.743071][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 209.743093][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 209.743111][ T5847] usb 3-1: bluebird_gpio_write failed. [ 209.762716][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 209.762743][ T5847] usb 3-1: bluebird_gpio_write failed. [ 209.927162][ T9313] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 209.940079][ T5972] usb 4-1: USB disconnect, device number 14 [ 209.940125][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 209.940192][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 209.980770][ T5847] DVB: Unable to find symbol dib7000p_attach() [ 209.980787][ T5847] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 209.983406][ T5843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 210.092574][ T5847] rc_core: IR keymap rc-dvico-mce not found [ 210.092593][ T5847] Registered IR keymap rc-empty [ 210.094186][ T5847] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 210.097161][ T5847] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input17 [ 210.113545][ T5847] dvb-usb: schedule remote query interval to 100 msecs. [ 210.113566][ T5847] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 210.134880][ T5847] usb 3-1: USB disconnect, device number 13 [ 210.136491][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 210.153116][ T5843] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.153142][ T5843] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 210.153166][ T5843] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.153199][ T5843] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 210.153218][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.169621][ T5843] usb 5-1: config 0 descriptor?? [ 210.292570][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 210.319410][ T9320] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1548'. [ 210.459696][ T31] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 210.459944][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.459963][ T31] usb 2-1: Product: syz [ 210.459976][ T31] usb 2-1: Manufacturer: syz [ 210.459989][ T31] usb 2-1: SerialNumber: syz [ 210.554863][ T31] usb 2-1: config 0 descriptor?? [ 210.712149][ T5847] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 210.752645][ T5843] betop 0003:20BC:5500.0012: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.4-1/input0 [ 210.752686][ T5843] betop 0003:20BC:5500.0012: no inputs found [ 210.842087][ T37] audit: type=1400 audit(1758069276.120:63): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9330 comm="syz.3.1553" src=1 dest=20000 netif=wpan0 [ 210.885435][ T5843] usb 5-1: USB disconnect, device number 10 [ 210.985036][ T31] usb 2-1: USB disconnect, device number 18 [ 211.212157][ T9341] vlan2: entered allmulticast mode [ 211.212178][ T9341] bond0: entered allmulticast mode [ 211.212191][ T9341] bond_slave_0: entered allmulticast mode [ 211.212210][ T9341] bond_slave_1: entered allmulticast mode [ 211.633159][ T9357] Bluetooth: MGMT ver 1.23 [ 211.840065][ T9369] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1571'. [ 211.840090][ T9369] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1571'. [ 211.912715][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 211.914884][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 211.914989][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 212.567961][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'. [ 212.878423][ T9410] xt_l2tp: wrong L2TP version: 1 [ 213.094598][ T9420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1595'. [ 213.453914][ T5847] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 213.513354][ T9441] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 213.513374][ T9441] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 213.513384][ T9441] overlayfs: missing 'lowerdir' [ 213.605628][ T5847] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.605659][ T5847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.605767][ T5847] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 213.605790][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.626955][ T5847] usb 2-1: config 0 descriptor?? [ 213.728684][ T9445] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1609'. [ 213.728708][ T9445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1609'. [ 214.106386][ T5847] wacom 0003:056A:0333.0013: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0 [ 214.309431][ T5972] usb 2-1: USB disconnect, device number 19 [ 215.173679][ T5930] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 215.318632][ T9501] netlink: 'syz.2.1637': attribute type 66 has an invalid length. [ 215.335301][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.335355][ T5930] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 215.335377][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.378799][ T5930] usb 5-1: config 0 descriptor?? [ 215.621807][ T9511] process 'syz.0.1641' launched '/dev/fd/3' with NULL argv: empty string added [ 215.674844][ T9513] : renamed from bond_slave_0 (while UP) [ 215.842938][ T5930] asus 0003:0B05:17E0.0014: item fetching failed at offset 2/5 [ 215.843761][ T5930] asus 0003:0B05:17E0.0014: Asus hid parse failed: -22 [ 215.843855][ T5930] asus 0003:0B05:17E0.0014: probe with driver asus failed with error -22 [ 216.052584][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 216.053476][ T5930] usb 5-1: USB disconnect, device number 11 [ 216.205219][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.205250][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.205274][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 216.205294][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.205396][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.205417][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.214803][ T31] usb 4-1: config 0 descriptor?? [ 216.222586][ T5972] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.379870][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.379901][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.379994][ T5972] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 216.380015][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.433392][ T5972] usb 3-1: config 0 descriptor?? [ 216.686239][ T31] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 216.790166][ T31] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 216.869461][ T31] usb 4-1: USB disconnect, device number 15 [ 216.935679][ T5972] playstation 0003:054C:0DF2.0016: unbalanced delimiter at end of report description [ 216.936450][ T5972] playstation 0003:054C:0DF2.0016: Parse failed [ 216.936525][ T5972] playstation 0003:054C:0DF2.0016: probe with driver playstation failed with error -22 [ 217.012515][ T1078] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.170178][ T1078] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 217.170206][ T1078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.170224][ T1078] usb 5-1: Product: syz [ 217.170236][ T1078] usb 5-1: Manufacturer: syz [ 217.170248][ T1078] usb 5-1: SerialNumber: syz [ 217.181873][ T1078] usb 5-1: config 0 descriptor?? [ 217.200967][ T1078] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 217.232596][ T5930] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 217.292173][ T9540] usb 3-1: USB disconnect, device number 14 [ 217.361032][ T9548] macsec1: entered promiscuous mode [ 217.396810][ T5930] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.396843][ T5930] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 217.396868][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.396899][ T5930] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 217.396930][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.449027][ T5930] usb 2-1: config 0 descriptor?? [ 217.460439][ T9542] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 217.632984][ T1078] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 217.801434][ T9554] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1662'. [ 217.855062][ T1078] usb 5-1: USB disconnect, device number 12 [ 217.899977][ T5930] uclogic 0003:28BD:0074.0017: interface is invalid, ignoring [ 217.921414][ T9557] xt_HMARK: proto mask must be zero with L3 mode [ 218.113215][ T9540] usb 2-1: USB disconnect, device number 20 [ 218.772596][ T9540] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 218.947770][ T9540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.948022][ T9540] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.10 [ 218.948045][ T9540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.953672][ T9540] usb 4-1: config 0 descriptor?? [ 218.972514][ T5972] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 219.122494][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 219.125958][ T5972] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 219.126039][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.164322][ T5972] usb 2-1: config 0 descriptor?? [ 219.210563][ T5972] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 219.435214][ T9540] logitech 0003:046D:C626.0018: ignoring exceeding usage max [ 219.453451][ T9540] logitech 0003:046D:C626.0018: unbalanced delimiter at end of report description [ 219.455985][ T9540] logitech 0003:046D:C626.0018: parse failed [ 219.456298][ T9540] logitech 0003:046D:C626.0018: probe with driver logitech failed with error -22 [ 219.596230][ T9616] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 219.596480][ T9616] CUSE: unknown device info "3ܟ,̘" [ 219.596493][ T9616] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 219.596493][ T9616] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 219.596507][ T9616] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|0htvw 7:" [ 219.596518][ T9616] CUSE: DEVNAME unspecified [ 219.655556][ T9540] usb 4-1: USB disconnect, device number 16 [ 219.809455][ T5972] gspca_vc032x: reg_w err -71 [ 219.809489][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809498][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809506][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809514][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809522][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809530][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809537][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809545][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809553][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809561][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809568][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809584][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809591][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809599][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809606][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809614][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809622][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809629][ T5972] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.809641][ T5972] gspca_vc032x: Unknown sensor... [ 219.809726][ T5972] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 219.834611][ T5972] usb 2-1: USB disconnect, device number 21 [ 220.307941][ T9636] netlink: 'syz.3.1702': attribute type 1 has an invalid length. [ 220.402471][ T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 220.509343][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 220.555452][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.555478][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 220.555531][ T31] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 220.555554][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.571110][ T31] usb 5-1: config 0 descriptor?? [ 220.589781][ T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 220.589831][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 220.610517][ T31] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 220.613066][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 220.613087][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 220.613112][ T9646] netlink: 'syz.3.1708': attribute type 12 has an invalid length. [ 220.613125][ T9646] netlink: 'syz.3.1708': attribute type 11 has an invalid length. [ 220.615019][ T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 220.615071][ T31] usb 5-1: media controller created [ 220.617411][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.652943][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 220.653024][ T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 220.665489][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 220.686975][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 220.686998][ T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 220.846573][ T5972] dvb-usb: bulk message failed: -22 (1/0) [ 220.846623][ T5972] dvb-usb: error while querying for an remote control event. [ 220.874566][ T5972] usb 5-1: USB disconnect, device number 13 [ 221.071592][ T5972] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 221.572645][ T5972] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 221.722808][ T5972] usb 4-1: Using ep0 maxpacket: 32 [ 221.726678][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.726707][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.726744][ T5972] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 221.726765][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.735662][ T5972] usb 4-1: config 0 descriptor?? [ 222.263418][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1724'. [ 222.263588][ T9680] tipc: Enabling of bearer rejected, failed to enable media [ 222.382288][ T5972] ft260 0003:0403:6030.0019: failed to retrieve chip version [ 222.386268][ T5972] ft260 0003:0403:6030.0019: probe with driver ft260 failed with error -71 [ 222.432083][ T5972] usb 4-1: USB disconnect, device number 17 [ 223.010455][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 223.588022][ T9746] netlink: 'syz.1.1755': attribute type 2 has an invalid length. [ 223.963394][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 223.993982][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 223.994011][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 224.202633][ T5930] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 224.355574][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.357106][ T5930] usb 2-1: config 3 has an invalid interface number: 8 but max is 3 [ 224.357132][ T5930] usb 2-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 224.357158][ T5930] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 224.357177][ T5930] usb 2-1: config 3 has no interface number 0 [ 224.357230][ T5930] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 224.357255][ T5930] usb 2-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 224.357279][ T5930] usb 2-1: config 3 interface 8 has no altsetting 0 [ 224.438095][ T5930] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 224.438122][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.438148][ T5930] usb 2-1: Product: syz [ 224.438160][ T5930] usb 2-1: Manufacturer: syz [ 224.438171][ T5930] usb 2-1: SerialNumber: syz [ 224.593515][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 224.740168][ T5930] appledisplay 2-1:3.8: Error while getting initial brightness: -71 [ 224.747701][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.747733][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.747769][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 224.747789][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.760586][ T31] usb 3-1: config 0 descriptor?? [ 224.802480][ T5930] appledisplay 2-1:3.8: probe with driver appledisplay failed with error -71 [ 224.809750][ T5930] usbhid 2-1:3.8: can't add hid device: -22 [ 224.809871][ T5930] usbhid 2-1:3.8: probe with driver usbhid failed with error -22 [ 224.844810][ T5930] usb 2-1: USB disconnect, device number 22 [ 224.876977][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1772'. [ 225.213194][ T31] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 225.213236][ T31] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 225.217205][ T31] isku 0003:1E7D:319C.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 225.412562][ T31] isku 0003:1E7D:319C.001A: couldn't init struct isku_device [ 225.412617][ T31] isku 0003:1E7D:319C.001A: couldn't install keyboard [ 225.429200][ T31] isku 0003:1E7D:319C.001A: probe with driver isku failed with error -71 [ 225.453964][ T31] usb 3-1: USB disconnect, device number 15 [ 225.664122][ T37] audit: type=1326 audit(1758069290.950:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 225.694328][ T37] audit: type=1326 audit(1758069290.980:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 225.694383][ T37] audit: type=1326 audit(1758069290.980:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 225.694425][ T37] audit: type=1326 audit(1758069290.980:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 225.695912][ T37] audit: type=1326 audit(1758069290.980:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 225.695960][ T37] audit: type=1326 audit(1758069290.980:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 225.696001][ T37] audit: type=1326 audit(1758069290.980:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 225.842688][ T9540] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 225.992655][ T9540] usb 4-1: Using ep0 maxpacket: 32 [ 225.995288][ T9540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.995344][ T9540] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 225.995365][ T9540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.020354][ T9540] usb 4-1: config 0 descriptor?? [ 226.052862][ T9540] dvb-usb: found a 'TeVii S662' in warm state. [ 226.052908][ T9540] dw2102: su3000_power_ctrl: 1, initialized 0 [ 226.052926][ T9540] dvb-usb: bulk message failed: -22 (2/0) [ 226.067516][ T9540] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.078802][ T9540] dvbdev: DVB: registering new adapter (TeVii S662) [ 226.078859][ T9540] usb 4-1: media controller created [ 226.078885][ T9540] dvb-usb: bulk message failed: -22 (6/0) [ 226.078898][ T9540] dw2102: i2c transfer failed. [ 226.078914][ T9540] dvb-usb: bulk message failed: -22 (6/0) [ 226.078927][ T9540] dw2102: i2c transfer failed. [ 226.078943][ T9540] dvb-usb: bulk message failed: -22 (6/0) [ 226.078955][ T9540] dw2102: i2c transfer failed. [ 226.078970][ T9540] dvb-usb: bulk message failed: -22 (6/0) [ 226.078982][ T9540] dw2102: i2c transfer failed. [ 226.078997][ T9540] dvb-usb: bulk message failed: -22 (6/0) [ 226.079009][ T9540] dw2102: i2c transfer failed. [ 226.079024][ T9540] dvb-usb: bulk message failed: -22 (6/0) [ 226.079036][ T9540] dw2102: i2c transfer failed. [ 226.079045][ T9540] dvb-usb: MAC address: 02:02:02:02:02:02 [ 226.209350][ T9540] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.257941][ T9800] dw2102: i2c rd: len=257 is too big! [ 226.257941][ T9800] [ 226.308791][ T9540] dvb-usb: bulk message failed: -22 (3/0) [ 226.308812][ T9540] dw2102: command 0x0e transfer failed. [ 226.308821][ T9540] dvb-usb: bulk message failed: -22 (3/0) [ 226.308833][ T9540] dw2102: command 0x0e transfer failed. [ 226.532911][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 226.616638][ T9540] dvb-usb: bulk message failed: -22 (3/0) [ 226.616660][ T9540] dw2102: command 0x0e transfer failed. [ 226.616678][ T9540] dvb-usb: bulk message failed: -22 (3/0) [ 226.616691][ T9540] dw2102: command 0x0e transfer failed. [ 226.616699][ T9540] dvb-usb: bulk message failed: -22 (1/0) [ 226.616712][ T9540] dw2102: command 0x51 transfer failed. [ 226.616721][ T9540] dvb-usb: bulk message failed: -22 (5/0) [ 226.616733][ T9540] dw2102: i2c probe for address 0x68 failed. [ 226.616744][ T9540] dvb-usb: bulk message failed: -22 (5/0) [ 226.616756][ T9540] dw2102: i2c probe for address 0x69 failed. [ 226.616766][ T9540] dvb-usb: bulk message failed: -22 (5/0) [ 226.616777][ T9540] dw2102: i2c probe for address 0x6a failed. [ 226.616787][ T9540] dw2102: probing for demodulator failed. Is the external power switched on? [ 226.616796][ T9540] dvb-usb: no frontend was attached by 'TeVii S662' [ 226.922491][ T9540] rc_core: IR keymap rc-tt-1500 not found [ 226.922510][ T9540] Registered IR keymap rc-empty [ 226.923999][ T9540] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 226.937902][ T9540] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input24 [ 226.943544][ T9540] dvb-usb: schedule remote query interval to 250 msecs. [ 226.943566][ T9540] dw2102: su3000_power_ctrl: 0, initialized 1 [ 226.943577][ T9540] dvb-usb: TeVii S662 successfully initialized and connected. [ 226.951274][ T9540] usb 4-1: USB disconnect, device number 18 [ 227.280927][ T37] audit: type=1800 audit(1758069292.560:71): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1801" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 227.281280][ T9540] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 228.303708][ T9878] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 228.303763][ T9878] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 228.303812][ T9878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 228.303859][ T9878] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 228.303905][ T9878] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 228.303951][ T9878] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 228.303998][ T9878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 228.304045][ T9878] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 228.304092][ T9878] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 228.304139][ T9878] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 228.304186][ T9878] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 228.304232][ T9878] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 228.304280][ T9878] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 228.304326][ T9878] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 228.304414][ T9878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 228.304460][ T9878] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 228.304506][ T9878] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 228.304674][ T9878] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 228.304721][ T9878] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 228.304768][ T9878] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 228.304818][ T9878] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 228.304904][ T9878] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 228.304951][ T9878] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 228.304998][ T9878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 228.305044][ T9878] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 228.593756][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'. [ 228.722627][ T9540] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 228.848078][ T9880] syz.0.1818 (9880) used greatest stack depth: 18160 bytes left [ 228.877852][ T9540] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 228.877882][ T9540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.883437][ T9540] usb 5-1: config 0 descriptor?? [ 228.894932][ T9540] cp210x 5-1:0.0: cp210x converter detected [ 228.971027][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 228.971052][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 228.971077][ T9898] netlink: 'syz.3.1828': attribute type 12 has an invalid length. [ 229.247022][ T9903] netdevsim netdevsim1: Direct firmware load for . [ 229.247022][ T9903] failed with error -2 [ 229.247493][ T9903] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 229.247493][ T9903] [ 229.544975][ T9540] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 229.545004][ T9540] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 229.559687][ T9540] usb 5-1: cp210x converter now attached to ttyUSB0 [ 229.582873][ T9540] usb 5-1: USB disconnect, device number 14 [ 229.590964][ T9540] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 229.591436][ T9540] cp210x 5-1:0.0: device disconnected [ 229.610750][ T9909] tipc: Started in network mode [ 229.610779][ T9909] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 229.634131][ T9909] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 229.636477][ T9909] tipc: Enabled bearer , priority 10 [ 230.202532][ T5938] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 230.368207][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.368240][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.368277][ T5938] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 230.368297][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.425196][ T5938] usb 3-1: config 0 descriptor?? [ 230.756422][ T31] tipc: Node number set to 1 [ 230.872655][ T5938] cmedia_hs100b 0003:0D8C:0014.001B: item fetching failed at offset 5/7 [ 230.873528][ T5938] cmedia_hs100b 0003:0D8C:0014.001B: probe with driver cmedia_hs100b failed with error -22 [ 231.096107][ T31] usb 3-1: USB disconnect, device number 16 [ 231.739952][ T9941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 231.739978][ T9941] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.740071][ T9941] vhci_hcd vhci_hcd.0: Device attached [ 231.859243][ T9949] net_ratelimit: 1052 callbacks suppressed [ 231.859263][ T9949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.862308][ T9949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.879552][ T9949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.879636][ T9949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.879918][ T9949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.879988][ T9949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.880282][ T9949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.880352][ T9949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.880610][ T9949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.880680][ T9949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.962695][ T5938] vhci_hcd: vhci_device speed not set [ 231.992562][ T1078] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 232.022638][ T5938] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 232.147026][ T1078] usb 2-1: config 0 has no interfaces? [ 232.147131][ T1078] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.147153][ T1078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.187418][ T1078] usb 2-1: config 0 descriptor?? [ 232.395616][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 232.433990][ T9945] vhci_hcd: unknown pdu 1 [ 232.447895][ T1078] usb 2-1: USB disconnect, device number 23 [ 232.452828][ T155] vhci_hcd: stop threads [ 232.452845][ T155] vhci_hcd: release socket [ 232.452919][ T155] vhci_hcd: disconnect device [ 232.502541][ T5938] vhci_hcd: vhci_device speed not set [ 233.327432][ T9992] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.592518][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 236.753174][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 236.755729][ T31] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.755761][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.755803][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 236.755822][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.762171][ T31] usb 5-1: config 0 descriptor?? [ 237.040028][T10113] xt_l2tp: missing protocol rule (udp|l2tpip) [ 237.132489][T10117] futex_wake_op: syz.1.1931 tries to shift op by -1; fix this program [ 237.447494][ T9540] usb 5-1: USB disconnect, device number 15 [ 237.549674][T10134] net_ratelimit: 1053 callbacks suppressed [ 237.549694][T10134] openvswitch: netlink: IPv6 tunnel dst address is zero [ 237.663636][T10137] netlink: 'syz.2.1941': attribute type 21 has an invalid length. [ 237.663660][T10137] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1941'. [ 237.724562][T10137] netlink: 'syz.2.1941': attribute type 4 has an invalid length. [ 237.724586][T10137] netlink: 'syz.2.1941': attribute type 5 has an invalid length. [ 237.724598][T10137] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1941'. [ 238.320999][T10167] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1956'. [ 238.868478][T10190] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 238.868501][T10190] netlink: 'syz.3.1967': attribute type 2 has an invalid length. [ 238.886041][T10190] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 238.886063][T10190] netlink: 'syz.3.1967': attribute type 2 has an invalid length. [ 239.382583][ T9540] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 239.532510][ T9540] usb 2-1: Using ep0 maxpacket: 16 [ 239.534886][ T9540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.534917][ T9540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.534954][ T9540] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 239.534975][ T9540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.540681][ T9540] usb 2-1: config 0 descriptor?? [ 239.983053][ T9540] waltop 0003:172F:0034.001D: item fetching failed at offset 0/2 [ 239.983933][ T9540] waltop 0003:172F:0034.001D: probe with driver waltop failed with error -22 [ 240.166191][ T5938] usb 2-1: USB disconnect, device number 24 [ 241.131752][T10265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 241.131808][T10265] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 241.131899][T10265] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 241.132027][T10265] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 241.132075][T10265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 241.132122][T10265] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 241.132173][T10265] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 241.132258][T10265] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 241.132304][T10265] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 241.142608][T10265] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 241.373667][T10270] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.401459][T10273] bridge_slave_0: left allmulticast mode [ 241.401491][T10273] bridge_slave_0: left promiscuous mode [ 241.406738][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.430409][T10270] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.507802][T10273] bridge_slave_1: left allmulticast mode [ 241.507835][T10273] bridge_slave_1: left promiscuous mode [ 241.508106][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.644864][T10273] bond0: (slave bond_slave_0): Releasing backup interface [ 241.696888][T10273] bond_slave_0: left allmulticast mode [ 241.774984][T10273] bond0: (slave bond_slave_1): Releasing backup interface [ 241.829270][T10273] bond_slave_1: left allmulticast mode [ 241.897146][T10273] team0: Port device team_slave_0 removed [ 241.935084][T10273] team0: Port device team_slave_1 removed [ 241.936148][T10273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.936177][T10273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.989526][T10273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.989558][T10273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.032534][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 242.187635][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.187668][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.187704][ T10] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 242.187726][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.193875][ T10] usb 2-1: config 0 descriptor?? [ 242.663007][ T10] ntrig 0003:1B96:0012.001E: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0 [ 242.856761][ T10] usb 2-1: USB disconnect, device number 25 [ 243.531968][ T37] audit: type=1326 audit(1758069308.810:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2705eba9 code=0x7ffc0000 [ 243.540024][ T37] audit: type=1326 audit(1758069308.820:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2705eba9 code=0x7ffc0000 [ 243.571677][ T37] audit: type=1326 audit(1758069308.850:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f5d2705eba9 code=0x7ffc0000 [ 243.576078][ T37] audit: type=1326 audit(1758069308.860:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2705eba9 code=0x7ffc0000 [ 243.576126][ T37] audit: type=1326 audit(1758069308.860:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2705eba9 code=0x7ffc0000 [ 243.579925][ T37] audit: type=1326 audit(1758069308.860:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f5d2705eba9 code=0x7ffc0000 [ 243.582167][ T37] audit: type=1326 audit(1758069308.860:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10332 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2705eba9 code=0x7ffc0000 [ 244.370370][T10361] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2049'. [ 244.822632][T10345] tipc: Started in network mode [ 244.822661][T10345] tipc: Node identity e0000002, cluster identity 4711 [ 244.822713][T10345] tipc: Enabling of bearer rejected, failed to enable media [ 244.844911][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'. [ 244.850204][T10352] mkiss: ax0: crc mode is auto. [ 245.094624][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 245.252617][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 245.260264][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 245.260291][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.260309][ T10] usb 2-1: Product: syz [ 245.260321][ T10] usb 2-1: Manufacturer: syz [ 245.260334][ T10] usb 2-1: SerialNumber: syz [ 245.273611][ T10] usb 2-1: config 0 descriptor?? [ 245.288375][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 245.913710][ T10] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 245.913883][ T10] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 245.918146][ T10] usb 2-1: USB disconnect, device number 26 [ 246.323644][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.426410][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2093'. [ 247.442506][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 247.598284][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.598309][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.599999][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.600027][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.600044][ T10] usb 5-1: SerialNumber: syz [ 247.876977][T10465] tracefs: Bad value for 'gid' [ 247.876995][T10465] tracefs: Bad value for 'gid' [ 247.881293][ T10] usb 5-1: 0:2 : does not exist [ 247.967267][ T10] usb 5-1: USB disconnect, device number 16 [ 248.212613][ T5972] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 248.294506][T10473] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 248.362522][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 248.365615][ T5972] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.365647][ T5972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 248.365688][ T5972] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 248.365709][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.424462][ T5972] usb 3-1: config 0 descriptor?? [ 248.874523][ T5972] microsoft 0003:045E:009D.001F: unknown main item tag 0x0 [ 248.874562][ T5972] microsoft 0003:045E:009D.001F: unknown main item tag 0x0 [ 248.874588][ T5972] microsoft 0003:045E:009D.001F: unknown main item tag 0x0 [ 248.874612][ T5972] microsoft 0003:045E:009D.001F: unknown main item tag 0x0 [ 248.874635][ T5972] microsoft 0003:045E:009D.001F: unknown main item tag 0x0 [ 248.880969][ T5972] microsoft 0003:045E:009D.001F: hidraw0: USB HID v0.02 Device [HID 045e:009d] on usb-dummy_hcd.2-1/input0 [ 248.881001][ T5972] microsoft 0003:045E:009D.001F: no inputs found [ 248.881014][ T5972] microsoft 0003:045E:009D.001F: could not initialize ff, continuing anyway [ 249.067235][ T1078] usb 3-1: USB disconnect, device number 17 [ 249.372628][ T5972] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 249.524979][ T5972] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.525005][ T5972] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.527323][ T5972] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.527347][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.527366][ T5972] usb 5-1: SerialNumber: syz [ 249.562883][ T1078] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 249.732485][ T1078] usb 2-1: Using ep0 maxpacket: 16 [ 249.734652][ T1078] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 249.734678][ T1078] usb 2-1: config 1 has no interface number 0 [ 249.734792][ T1078] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 249.734813][ T1078] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 249.734824][ T1078] usb 2-1: config 1 interface 214 has no altsetting 0 [ 249.739063][ T1078] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 249.739128][ T1078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.739139][ T1078] usb 2-1: Product: syz [ 249.739146][ T1078] usb 2-1: Manufacturer: syz [ 249.739153][ T1078] usb 2-1: SerialNumber: syz [ 249.826677][T10504] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.826808][T10504] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.831983][ T5972] usb 5-1: 0:2 : does not exist [ 249.854001][ T1078] ums-alauda 2-1:1.214: USB Mass Storage device detected [ 249.872789][ T1078] scsi host1: usb-storage 2-1:1.214 [ 249.898814][ T5972] usb 5-1: USB disconnect, device number 17 [ 250.046197][ T10] usb 2-1: USB disconnect, device number 27 [ 250.722704][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.722791][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.723161][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.723241][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.723529][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.723609][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.723893][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.723976][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.724282][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 251.101718][T10538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2129'. [ 251.966889][T10545] netdevsim netdevsim0: Direct firmware load for . [ 251.966889][T10545] failed with error -2 [ 251.966917][T10545] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 251.966917][T10545] [ 252.162499][ T5937] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 252.194494][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 252.316551][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 252.321620][ T5937] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 252.325201][ T5937] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 252.325228][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.325246][ T5937] usb 2-1: Product: syz [ 252.325257][ T5937] usb 2-1: Manufacturer: syz [ 252.325269][ T5937] usb 2-1: SerialNumber: syz [ 252.367247][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.367272][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.367319][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 252.367339][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.370758][ T5937] usb 2-1: config 0 descriptor?? [ 252.384631][ T10] usb 3-1: config 0 descriptor?? [ 252.395261][ T5937] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 252.395326][ T5937] usb 2-1: setting power ON [ 252.395344][ T5937] dvb-usb: bulk message failed: -22 (2/0) [ 252.436688][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.442974][ T5937] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 252.443032][ T5937] usb 2-1: media controller created [ 252.446907][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 252.446959][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 252.481250][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 252.490594][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 252.490653][ T10] usb 3-1: media controller created [ 252.503474][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.529683][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 252.529769][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 252.561116][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 252.584076][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 252.584098][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 252.588546][T10562] dvb-usb: bulk message failed: -22 (3/0) [ 252.698805][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.736424][ T10] usb 3-1: USB disconnect, device number 18 [ 252.819317][ T5937] usb 2-1: selecting invalid altsetting 6 [ 252.821310][ T5937] usb 2-1: digital interface selection failed (-22) [ 252.821331][ T5937] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 252.827652][ T5937] usb 2-1: setting power OFF [ 252.827923][ T5937] dvb-usb: bulk message failed: -22 (2/0) [ 252.827939][ T5937] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 252.827950][ T5937] (NULL device *): no alternate interface [ 252.937268][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 253.011747][ T5937] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 253.030460][ T5937] usb 2-1: USB disconnect, device number 28 [ 253.578385][T10594] syz.2.2157 (10594) used greatest stack depth: 18040 bytes left [ 254.091245][T10619] net_ratelimit: 1053 callbacks suppressed [ 254.091267][T10619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.091358][T10619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.091736][T10619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.091816][T10619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.092126][T10619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.092200][T10619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.102880][T10619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.102969][T10619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.103258][T10619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.103337][T10619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.322570][ T5972] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 254.479702][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.479729][ T5972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 254.479784][ T5972] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 254.479806][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.532017][ T5972] usb 2-1: config 0 descriptor?? [ 254.537679][ T5972] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 254.537730][ T5972] dvb-usb: bulk message failed: -22 (3/0) [ 254.569204][ T5972] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 254.581605][ T5972] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 254.581662][ T5972] usb 2-1: media controller created [ 254.598119][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.622442][ T5972] dvb-usb: bulk message failed: -22 (6/0) [ 254.622519][ T5972] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 254.622555][ T5937] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 254.626539][ T5972] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 254.665163][ T5972] dvb-usb: schedule remote query interval to 150 msecs. [ 254.665186][ T5972] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 254.769792][ T10] usb 2-1: USB disconnect, device number 29 [ 254.795315][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.795371][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.795391][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.795431][ T5937] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 254.795451][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.802530][ T5936] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 254.811732][ T5937] usb 3-1: config 0 descriptor?? [ 254.953354][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 254.958092][ T5936] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 254.958118][ T5936] usb 5-1: config 0 has no interface number 0 [ 255.001269][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 255.035938][ T5936] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 255.041384][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.041409][ T5936] usb 5-1: Product: syz [ 255.041423][ T5936] usb 5-1: Manufacturer: syz [ 255.041436][ T5936] usb 5-1: SerialNumber: syz [ 255.093016][ T5936] usb 5-1: config 0 descriptor?? [ 255.110952][ T5936] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 255.302291][ T5937] dragonrise 0003:0079:0011.0020: invalid report_count -326368751 [ 255.303411][ T5937] dragonrise 0003:0079:0011.0020: item 0 4 1 9 parsing failed [ 255.309167][ T5937] dragonrise 0003:0079:0011.0020: parse failed [ 255.309448][ T5937] dragonrise 0003:0079:0011.0020: probe with driver dragonrise failed with error -22 [ 255.396744][ T5936] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 255.451784][ T5936] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 255.473373][ T5972] usb 3-1: USB disconnect, device number 19 [ 255.617739][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 255.821846][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 255.827190][ T5937] usb 5-1: USB disconnect, device number 18 [ 255.858842][ T5937] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 255.877296][ T5937] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 255.878003][ T5937] quatech2 5-1:0.51: device disconnected [ 255.917360][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.917452][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.053715][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'. [ 256.053780][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'. [ 256.053808][T10661] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2189'. [ 256.180388][T10667] max out of range [ 256.382575][ T5937] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 256.464009][T10677] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 256.464065][T10677] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 256.464155][T10677] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 256.464243][T10677] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 256.464289][T10677] comedi comedi3: 8255: I/O port conflict (0x5c952397,4) [ 256.464337][T10677] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 256.464384][T10677] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 256.464431][T10677] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 256.539702][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.539728][ T5937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.539822][ T5937] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 256.539843][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.550194][ T5937] usb 4-1: config 0 descriptor?? [ 256.586851][ T5937] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 256.586904][ T5937] dvb-usb: bulk message failed: -22 (3/0) [ 256.612864][ T5937] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 256.618958][T10682] tmpfs: Cannot retroactively limit inodes [ 256.621062][ T5937] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 256.621128][ T5937] usb 4-1: media controller created [ 256.627021][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.668628][ T5937] dvb-usb: bulk message failed: -22 (6/0) [ 256.668729][ T5937] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 256.685996][ T5937] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 256.722965][ T5937] dvb-usb: schedule remote query interval to 150 msecs. [ 256.722987][ T5937] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 256.874365][ T1078] usb 4-1: USB disconnect, device number 19 [ 257.100088][ T1078] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 257.387734][ T5937] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 257.542284][ T5937] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 257.543859][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.543883][ T5937] usb 5-1: Product: syz [ 257.543896][ T5937] usb 5-1: Manufacturer: syz [ 257.543910][ T5937] usb 5-1: SerialNumber: syz [ 257.555959][ T5937] usb 5-1: config 0 descriptor?? [ 257.585521][ T5937] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 257.852843][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 258.002402][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 258.005332][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.005361][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.005398][ T31] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 258.005418][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.059604][ T31] usb 4-1: config 0 descriptor?? [ 258.172458][ T5937] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 258.172541][ T5937] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 258.189087][ T5937] usb 5-1: USB disconnect, device number 19 [ 258.374064][T10729] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.2221'. [ 258.490639][ T31] hid_mf 0003:0079:1801.0021: item fetching failed at offset 0/2 [ 258.491456][ T31] hid_mf 0003:0079:1801.0021: HID parse failed. [ 258.491526][ T31] hid_mf 0003:0079:1801.0021: probe with driver hid_mf failed with error -22 [ 258.753513][ T9540] usb 4-1: USB disconnect, device number 20 [ 258.915127][ T37] audit: type=1400 audit(1758069324.190:79): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10744 comm="syz.0.2240" src=1 dest=20000 netif=wpan0 [ 259.359940][T10763] netlink: 716 bytes leftover after parsing attributes in process `syz.1.2236'. [ 259.661964][T10769] syz.1.2243 (10769) used greatest stack depth: 17584 bytes left [ 260.207728][T10798] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 260.834768][ T5937] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 260.898445][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2263'. [ 261.004975][ T5937] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 261.005004][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.005021][ T5937] usb 5-1: Product: syz [ 261.005034][ T5937] usb 5-1: Manufacturer: syz [ 261.005047][ T5937] usb 5-1: SerialNumber: syz [ 261.050531][ T5937] usb 5-1: config 0 descriptor?? [ 261.067097][ T5937] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 261.067119][ T5937] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 261.067184][ T5937] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 261.283840][ T9540] usb 5-1: USB disconnect, device number 20 [ 262.066363][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2284'. [ 262.066389][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2284'. [ 262.559956][T10882] netlink: 'syz.1.2296': attribute type 322 has an invalid length. [ 264.033048][T10936] delete_channel: no stack [ 264.033558][T10935] delete_channel: no stack [ 264.436052][T10954] net_ratelimit: 2114 callbacks suppressed [ 264.436072][T10954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.436199][T10954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.436548][T10954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.436623][T10954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.436893][T10954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.436964][T10954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.437247][T10954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.437322][T10954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.437587][T10954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.437657][T10954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.477372][T10958] netlink: 'syz.4.2333': attribute type 2 has an invalid length. [ 264.582551][ T5937] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 264.739679][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.739710][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.739747][ T5937] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 264.739768][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.782862][ T5937] usb 3-1: config 0 descriptor?? [ 264.862525][ T5936] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 265.015924][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.016010][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.016047][ T5936] usb 2-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 265.016067][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.076693][ T5936] usb 2-1: config 0 descriptor?? [ 265.218973][T10966] pimreg3: entered allmulticast mode [ 265.234751][ T5937] sunplus 0003:04FC:05D8.0022: unknown main item tag 0x0 [ 265.234850][ T5937] sunplus 0003:04FC:05D8.0022: unknown main item tag 0x0 [ 265.234876][ T5937] sunplus 0003:04FC:05D8.0022: unknown main item tag 0x0 [ 265.234901][ T5937] sunplus 0003:04FC:05D8.0022: unknown main item tag 0x0 [ 265.234926][ T5937] sunplus 0003:04FC:05D8.0022: unknown main item tag 0x0 [ 265.289072][ T5937] sunplus 0003:04FC:05D8.0022: hidraw0: USB HID v0.79 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 265.423312][ T9540] usb 3-1: USB disconnect, device number 20 [ 265.524316][ T5936] wacom 0003:056A:0217.0023: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 265.570738][T10970] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (28928) [ 265.570765][T10970] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 265.697117][ T9540] usb 2-1: USB disconnect, device number 30 [ 265.963054][ T5972] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 266.115263][ T5972] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 266.115516][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 266.115544][ T5972] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.115568][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 266.115591][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 266.119084][ T5972] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 266.119137][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 266.119159][ T5972] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.119181][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 266.119204][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 266.120968][ T5972] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 266.121022][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 266.121045][ T5972] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.121068][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 266.121091][ T5972] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 266.145377][ T5972] usb 5-1: string descriptor 0 read error: -22 [ 266.145534][ T5972] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 266.145555][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.232246][ T5972] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 266.398078][ T9540] usb 5-1: USB disconnect, device number 21 [ 266.797552][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2357'. [ 267.054010][T11016] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2363'. [ 267.413145][T11024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2367'. [ 267.791520][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 267.937401][T11045] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 267.937401][T11045] [ 268.416968][T11068] Bluetooth: MGMT ver 1.23 [ 269.002790][ T9540] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 269.157040][ T9540] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.157072][ T9540] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.157098][ T9540] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.157132][ T9540] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 269.157152][ T9540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.166325][ T9540] usb 5-1: config 0 descriptor?? [ 269.630160][ T9540] holtek 0003:1241:5015.0024: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 269.630192][ T9540] holtek 0003:1241:5015.0024: no inputs found [ 269.825886][ T9540] usb 5-1: USB disconnect, device number 22 [ 271.038965][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.401087][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.418554][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.419900][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.429277][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.431620][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.536077][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.959498][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.369924][T11181] program syz.2.2440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.390974][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.553238][ T5972] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 272.700189][T11169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.703979][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 272.730712][ T5972] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.730737][ T5972] usb 2-1: config 0 has no interface number 0 [ 272.743805][ T5972] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 272.743834][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.743851][ T5972] usb 2-1: Product: syz [ 272.743864][ T5972] usb 2-1: Manufacturer: syz [ 272.743877][ T5972] usb 2-1: SerialNumber: syz [ 272.781652][ T5972] usb 2-1: config 0 descriptor?? [ 272.808312][ T5972] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 273.325973][T11169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.414513][ T5972] gspca_spca1528: reg_w err -71 [ 273.432575][ T5972] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 273.458547][T11198] dummy0: entered promiscuous mode [ 273.458722][T11198] macsec1: entered promiscuous mode [ 273.461166][ T5972] usb 2-1: USB disconnect, device number 31 [ 273.493562][T11198] dummy0: left promiscuous mode [ 273.515630][ T5858] Bluetooth: hci4: command tx timeout [ 273.863807][T11169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.142611][T11223] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2456'. [ 274.477258][T11169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.831006][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2470'. [ 275.592841][ T5858] Bluetooth: hci4: command tx timeout [ 276.883259][ T57] bond0 (unregistering): Released all slaves [ 276.967266][T11143] chnl_net:caif_netlink_parms(): no params data found [ 277.078505][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2475'. [ 277.330351][ T57] tipc: Left network mode [ 277.360236][ T3636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.500478][ T3109] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.672616][ T5858] Bluetooth: hci4: command tx timeout [ 277.703647][ T3109] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.892514][ T5936] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 278.054031][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 278.083304][ T5936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.083362][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.086127][ T5936] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.086155][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.086173][ T5936] usb 3-1: SerialNumber: syz [ 278.112968][T11286] random: crng reseeded on system resumption [ 278.194252][ T5936] cdc_acm 3-1:1.0: skipping garbage [ 278.194273][ T5936] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 278.194290][ T5936] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 278.194326][ T5936] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 278.219052][T11287] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 278.287865][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.288029][T11143] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.288281][T11143] bridge_slave_0: entered allmulticast mode [ 278.299728][T11143] bridge_slave_0: entered promiscuous mode [ 278.381546][ T5936] usb 3-1: USB disconnect, device number 21 [ 278.417266][ T155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.456559][T11143] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.456697][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.456927][T11143] bridge_slave_1: entered allmulticast mode [ 278.464436][T11143] bridge_slave_1: entered promiscuous mode [ 279.476550][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.497764][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.752422][ T5858] Bluetooth: hci4: command tx timeout [ 279.810873][T11143] team0: Port device team_slave_0 added [ 279.974349][ T57] hsr_slave_0: left promiscuous mode [ 280.032775][ T57] hsr_slave_1: left promiscuous mode [ 280.071726][ T37] audit: type=1800 audit(1758069345.350:80): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2513" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 280.163368][ T57] veth1_macvtap: left promiscuous mode [ 280.163665][ T57] veth0_macvtap: left promiscuous mode [ 280.166876][ T57] veth1_vlan: left promiscuous mode [ 280.169895][ T57] veth0_vlan: left promiscuous mode [ 280.542887][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2519'. [ 280.542915][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2519'. [ 280.763676][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 280.847036][ T57] pimreg3 (unregistering): left allmulticast mode [ 281.124301][ T5972] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 281.286526][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.286558][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.286594][ T5972] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 281.286615][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.292114][ T5972] usb 3-1: config 0 descriptor?? [ 281.726925][ T5972] kone 0003:1E7D:2CED.0025: unknown main item tag 0x4 [ 281.749495][ T5972] kone 0003:1E7D:2CED.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 281.925126][ T5937] usb 3-1: USB disconnect, device number 22 [ 282.193938][T11390] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 282.208507][T11390] block nbd1: Attempted send on invalid socket [ 282.208635][T11390] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.399276][ T37] audit: type=1326 audit(1758069348.680:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 283.399334][ T37] audit: type=1326 audit(1758069348.680:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 283.399637][ T37] audit: type=1326 audit(1758069348.680:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 283.401119][ T37] audit: type=1326 audit(1758069348.680:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff67935ebe3 code=0x7ffc0000 [ 283.401901][ T37] audit: type=1326 audit(1758069348.680:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff67935ebe3 code=0x7ffc0000 [ 283.408155][ T37] audit: type=1326 audit(1758069348.690:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 283.409199][ T37] audit: type=1326 audit(1758069348.690:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 283.430508][ T37] audit: type=1326 audit(1758069348.690:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 283.433046][ T37] audit: type=1326 audit(1758069348.710:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67935eba9 code=0x7ffc0000 [ 283.825384][T11439] random: crng reseeded on system resumption [ 283.938552][T11439] Restarting kernel threads ... [ 283.949299][T11439] Done restarting kernel threads. [ 284.069932][T11446] syz.2.2562 uses old SIOCAX25GETINFO [ 286.798140][T11143] team0: Port device team_slave_1 added [ 286.976068][T11454] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2566'. [ 286.976093][T11454] netlink: 'syz.2.2566': attribute type 5 has an invalid length. [ 287.348129][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.348149][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.348174][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.404036][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.404053][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.404078][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.443473][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 287.801227][T11143] hsr_slave_0: entered promiscuous mode [ 287.803450][T11143] hsr_slave_1: entered promiscuous mode [ 287.814568][ T5936] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 287.855697][ T37] audit: type=1400 audit(1758069353.140:90): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=11482 comm="syz.4.2579" src=1 dest=20000 netif=wpan0 [ 287.946269][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 287.987033][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.987094][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 287.987121][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 287.987145][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 287.988840][ T5936] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 287.988865][ T5936] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 287.988883][ T5936] usb 2-1: Manufacturer: syz [ 287.999114][ T5936] usb 2-1: config 0 descriptor?? [ 288.312614][ T5936] rc_core: IR keymap rc-hauppauge not found [ 288.312636][ T5936] Registered IR keymap rc-empty [ 288.314791][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.336435][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.354199][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 288.364974][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 288.369309][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.395239][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.447601][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.478764][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.492952][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.529475][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.543013][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.565949][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.594342][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.612872][ T5936] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 288.635316][ T5936] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 288.635339][ T5936] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 288.668790][ T5936] usb 2-1: USB disconnect, device number 32 [ 288.698542][ T57] IPVS: stop unused estimator thread 0... [ 289.229500][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'. [ 289.282791][T11143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.330389][T11143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 289.417132][T11143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 289.448280][T11143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 289.520808][T11512] random: crng reseeded on system resumption [ 289.819628][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.898607][T11143] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.922213][T11523] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 289.928071][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.928836][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.959766][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.960030][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.709406][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.814657][ T5858] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 291.196159][ T5936] kernel write not supported for file /sg0 (pid: 5936 comm: kworker/0:5) [ 291.320674][T11143] veth0_vlan: entered promiscuous mode [ 291.336172][T11143] veth1_vlan: entered promiscuous mode [ 291.423491][T11143] veth0_macvtap: entered promiscuous mode [ 291.429637][T11143] veth1_macvtap: entered promiscuous mode [ 291.511096][ T37] audit: type=1326 audit(1758069356.790:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11570 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 291.511147][ T37] audit: type=1326 audit(1758069356.790:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11570 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 291.511183][ T37] audit: type=1326 audit(1758069356.790:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11570 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 291.511774][ T37] audit: type=1326 audit(1758069356.790:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11570 comm="syz.1.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdeb0eba9 code=0x7ffc0000 [ 291.819410][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.850280][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.882474][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.884546][ T63] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.886598][ T63] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.886797][ T63] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.045135][T11593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2624'. [ 292.272790][T11598] random: crng reseeded on system resumption [ 292.277618][ T3636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.277639][ T3636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.346321][T11598] Restarting kernel threads ... [ 292.358817][T11598] Done restarting kernel threads. [ 292.440379][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.440401][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.643730][ T37] audit: type=1400 audit(1758069357.930:95): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=11605 comm="syz.1.2629" src=1 dest=20000 netif=wpan0 [ 293.103540][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2635'. [ 293.173229][T11623] random: crng reseeded on system resumption [ 293.208456][T11623] Restarting kernel threads ... [ 293.222515][ T5937] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 293.230888][T11623] Done restarting kernel threads. [ 293.382664][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 293.385060][ T5937] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 293.385086][ T5937] usb 3-1: config 0 has no interface number 0 [ 293.388349][ T5937] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 293.388376][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.388394][ T5937] usb 3-1: Product: syz [ 293.388407][ T5937] usb 3-1: Manufacturer: syz [ 293.388419][ T5937] usb 3-1: SerialNumber: syz [ 293.399924][ T5937] usb 3-1: config 0 descriptor?? [ 293.409111][ T5937] smsc95xx v2.0.0 [ 293.409130][ T5937] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 293.409400][ T5937] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 293.463301][T11631] netlink: 'syz.0.2642': attribute type 3 has an invalid length. [ 293.463333][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 293.619181][ T5843] usb 3-1: USB disconnect, device number 23 [ 293.627728][ T5938] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 293.775227][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.775255][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.775302][ T5938] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 293.775322][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.785211][ T5938] usb 6-1: config 0 descriptor?? [ 294.230795][ T5938] kye 0003:0458:5011.0026: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 294.252822][ T5938] kye 0003:0458:5011.0026: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 294.252854][ T5938] kye 0003:0458:5011.0026: tablet-enabling feature report not found [ 294.252872][ T5938] kye 0003:0458:5011.0026: tablet enabling failed [ 294.922832][ T5858] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 294.922949][ T5858] Bluetooth: hci3: Injecting HCI hardware error event [ 294.926925][ T5858] Bluetooth: hci3: hardware error 0x00 [ 295.073192][T11654] random: crng reseeded on system resumption [ 295.237440][T11658] Restarting kernel threads ... [ 295.271028][T11658] Done restarting kernel threads. [ 295.486888][T11666] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2657'. [ 295.487334][T11666] xt_policy: neither incoming nor outgoing policy selected [ 297.268157][ T5938] usb 6-1: USB disconnect, device number 2 [ 297.640687][T11694] random: crng reseeded on system resumption [ 298.376329][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 298.376378][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 298.577367][T11707] net_ratelimit: 4238 callbacks suppressed [ 298.577388][T11707] openvswitch: netlink: Duplicate or invalid key (type 0). [ 298.577416][T11707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.421176][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.460838][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.497715][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.530092][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.562124][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.595943][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.626786][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.660073][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.844128][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.881256][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.918167][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.966413][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.017454][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.050100][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.081384][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.112016][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.172212][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.204590][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.233697][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.262821][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.297692][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.378085][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.412565][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.444450][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.545024][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.578731][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.593136][T11724] random: crng reseeded on system resumption [ 300.611631][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.674605][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.708231][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.741409][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.773427][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.805685][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.838001][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.870327][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.924071][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.956690][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.989311][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.022962][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.055026][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.157047][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.238289][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.272232][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.303937][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.186937][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.220680][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.252451][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.283816][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.315278][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.348405][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.381345][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.360904][ C1] sched: DL replenish lagged too much [ 311.495848][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.522099][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.543465][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.545403][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.555118][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.371330][T11757] chnl_net:caif_netlink_parms(): no params data found [ 313.674531][ T59] Bluetooth: hci5: command tx timeout [ 315.753932][ T59] Bluetooth: hci5: command tx timeout [ 316.224349][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.248695][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.250078][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.251442][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.286826][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.409403][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.422755][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.432223][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.450885][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.451737][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.642273][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.644869][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.837819][ T59] Bluetooth: hci5: command tx timeout [ 318.402622][ T59] Bluetooth: hci6: command tx timeout [ 318.457384][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 318.478001][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 318.479787][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 318.481126][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 318.514648][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 318.552502][ T5851] Bluetooth: hci7: command tx timeout [ 319.914209][ T5851] Bluetooth: hci5: command tx timeout [ 320.472563][ T5851] Bluetooth: hci6: command tx timeout [ 320.555293][ T5851] Bluetooth: hci8: command tx timeout [ 320.634023][ T5851] Bluetooth: hci7: command tx timeout [ 322.552620][ T5851] Bluetooth: hci6: command tx timeout [ 322.632915][ T5851] Bluetooth: hci8: command tx timeout [ 322.712608][ T5851] Bluetooth: hci7: command tx timeout [ 324.632572][ T5851] Bluetooth: hci6: command tx timeout [ 324.722797][ T5851] Bluetooth: hci8: command tx timeout [ 324.792731][ T5851] Bluetooth: hci7: command tx timeout [ 326.793029][ T5851] Bluetooth: hci8: command tx timeout [ 326.857518][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 326.898819][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 326.909960][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 326.911791][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 326.928980][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 329.032894][ T5851] Bluetooth: hci9: command tx timeout [ 331.120450][ T5851] Bluetooth: hci9: command tx timeout [ 333.192577][ T5851] Bluetooth: hci9: command tx timeout [ 335.272554][ T5851] Bluetooth: hci9: command tx timeout [ 348.081912][ T5858] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 372.138330][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.163503][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.165074][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.166935][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.168064][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.751593][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.763287][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.772100][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.940055][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.007448][ T5851] Bluetooth: hci0: command tx timeout [ 377.018479][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.040194][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.162635][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.288381][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.289660][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.290468][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.810007][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.810085][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.841094][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.871245][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.882614][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.883931][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.886360][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.032629][ T5858] Bluetooth: hci0: command tx timeout [ 379.192611][ T5858] Bluetooth: hci1: command tx timeout [ 379.432797][ T5858] Bluetooth: hci3: command tx timeout [ 380.952873][ T5858] Bluetooth: hci2: command tx timeout [ 381.114283][ T5858] Bluetooth: hci0: command tx timeout [ 381.272588][ T5858] Bluetooth: hci1: command tx timeout [ 381.512690][ T5858] Bluetooth: hci3: command tx timeout [ 383.032884][ T5858] Bluetooth: hci2: command tx timeout [ 383.192939][ T5858] Bluetooth: hci0: command tx timeout [ 383.352485][ T5858] Bluetooth: hci1: command tx timeout [ 383.592612][ T5858] Bluetooth: hci3: command tx timeout [ 385.112980][ T5858] Bluetooth: hci2: command tx timeout [ 385.432532][ T5858] Bluetooth: hci1: command tx timeout [ 385.672723][ T5858] Bluetooth: hci3: command tx timeout [ 387.202498][ T5858] Bluetooth: hci2: command tx timeout [ 388.517471][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.531479][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.553686][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.554958][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.556617][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.632606][ T59] Bluetooth: hci4: command tx timeout [ 392.731352][ T59] Bluetooth: hci4: command tx timeout [ 394.878308][ T59] Bluetooth: hci4: command tx timeout [ 396.952906][ T59] Bluetooth: hci4: command tx timeout [ 425.582779][T11757] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 433.339349][ T5858] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 433.392774][ T5858] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 433.395532][ T5858] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 433.396818][ T5858] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 433.400977][ T5858] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 435.513512][ T5858] Bluetooth: hci10: command tx timeout [ 437.593251][ T59] Bluetooth: hci10: command tx timeout [ 437.934986][ T5853] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 437.959596][ T5853] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 437.962134][ T5853] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 437.985584][ T5853] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 437.986398][ T5853] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 439.125930][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 439.390723][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 439.422773][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 439.425529][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 439.426680][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 439.429753][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 439.673058][ T5841] Bluetooth: hci10: command tx timeout [ 440.097669][ T5851] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 440.127729][ T5851] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 440.129412][ T5851] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 440.130674][ T5851] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 440.131489][ T5851] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 440.313838][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.313916][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.753484][T11827] Bluetooth: hci10: command tx timeout [ 442.407909][T11827] Bluetooth: hci7: command 0x0406 tx timeout [ 448.599905][T11836] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 448.624912][T11836] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 448.626265][T11836] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 448.627546][T11836] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 448.656945][T11836] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 495.275357][ T5858] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 495.297769][ T5858] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 495.300479][ T5858] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 495.324998][ T5858] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 495.326840][ T5858] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 497.946769][ T5851] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 497.978254][ T5851] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 497.979771][ T5851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 498.024169][ T5851] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 498.029275][ T5851] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 498.159136][ T5841] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 498.209633][ T5841] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 498.234931][ T5841] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 498.236228][ T5841] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 498.237612][ T5841] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 498.959496][ T5853] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 498.989193][ T5853] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 498.990584][ T5853] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 498.994283][ T5853] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 499.017415][ T5853] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 499.672639][ T5841] Bluetooth: hci13: command tx timeout [ 499.753029][T11836] Bluetooth: hci12: command tx timeout [ 499.758625][ T5841] Bluetooth: hci11: command tx timeout [ 501.765016][ T5841] Bluetooth: hci13: command tx timeout [ 501.842626][T11852] Bluetooth: hci11: command tx timeout [ 501.842659][T11852] Bluetooth: hci12: command tx timeout [ 503.614615][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.625670][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.857185][T11851] Bluetooth: hci3: command 0x0406 tx timeout [ 503.940927][T11851] Bluetooth: hci12: command tx timeout [ 503.940967][T11851] Bluetooth: hci11: command tx timeout [ 503.940992][T11851] Bluetooth: hci2: command 0x0406 tx timeout [ 503.941017][T11851] Bluetooth: hci1: command 0x0406 tx timeout [ 503.941040][T11851] Bluetooth: hci13: command tx timeout [ 505.992550][T11853] Bluetooth: hci13: command tx timeout [ 505.992584][T11853] Bluetooth: hci11: command tx timeout [ 505.992605][T11853] Bluetooth: hci12: command tx timeout [ 509.030164][T11853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 509.065224][T11853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 509.067546][T11853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 509.069485][T11853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 509.070360][T11853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 514.152496][T11863] Bluetooth: hci4: command 0x0406 tx timeout [ 517.352764][T11863] Bluetooth: hci14: command tx timeout [ 519.469781][T11863] Bluetooth: hci14: command tx timeout [ 521.512698][T11863] Bluetooth: hci14: command tx timeout [ 523.595279][T11863] Bluetooth: hci14: command tx timeout [ 533.033741][ T38] INFO: task syz.5.2679:11717 blocked for more than 145 seconds. [ 533.033772][ T38] Not tainted syzkaller #0 [ 533.033782][ T38] Blocked by coredump. [ 533.033788][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.033800][ T38] task:syz.5.2679 state:D stack:25992 pid:11717 tgid:11716 ppid:11143 task_flags:0x40054c flags:0x00004002 [ 533.033853][ T38] Call Trace: [ 533.033860][ T38] [ 533.033875][ T38] __schedule+0x16f3/0x4c20 [ 533.033916][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 533.033936][ T38] ? arch_stack_walk+0xfc/0x150 [ 533.033976][ T38] ? __pfx___schedule+0x10/0x10 [ 533.034018][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.034045][ T38] rt_mutex_schedule+0x77/0xf0 [ 533.034063][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 533.034083][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 533.034123][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 533.034146][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 533.034166][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 533.034204][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 533.034234][ T38] ? tun_chr_close+0x41/0x1c0 [ 533.034256][ T38] mutex_lock_nested+0x16a/0x1d0 [ 533.034279][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 533.034302][ T38] tun_chr_close+0x41/0x1c0 [ 533.034326][ T38] __fput+0x45b/0xa80 [ 533.034357][ T38] task_work_run+0x1d4/0x260 [ 533.034378][ T38] ? __pfx_task_work_run+0x10/0x10 [ 533.034398][ T38] ? do_exit+0x6b0/0x2300 [ 533.034414][ T38] ? kmem_cache_free+0x195/0x510 [ 533.034442][ T38] do_exit+0x6b5/0x2300 [ 533.034458][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 533.034487][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.034513][ T38] ? __pfx_do_exit+0x10/0x10 [ 533.034526][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 533.034548][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 533.034585][ T38] do_group_exit+0x21c/0x2d0 [ 533.034609][ T38] get_signal+0x125e/0x1310 [ 533.034654][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 533.034682][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 533.034720][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 533.034747][ T38] exit_to_user_mode_loop+0x75/0x110 [ 533.034769][ T38] do_syscall_64+0x2bd/0x3b0 [ 533.034785][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.034807][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.034825][ T38] ? clear_bhb_loop+0x60/0xb0 [ 533.034847][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.034869][ T38] RIP: 0033:0x7f3f4dddeba9 [ 533.034896][ T38] RSP: 002b:00007f3f4c03e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.034915][ T38] RAX: 0000000000000004 RBX: 00007f3f4e025fa0 RCX: 00007f3f4dddeba9 [ 533.034928][ T38] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 533.034940][ T38] RBP: 00007f3f4de61e19 R08: 0000000000000000 R09: 0000000000000000 [ 533.034951][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.034963][ T38] R13: 00007f3f4e026038 R14: 00007f3f4e025fa0 R15: 00007fff9b1327f8 [ 533.034994][ T38] [ 533.035012][ T38] INFO: task syz-executor:11795 blocked for more than 145 seconds. [ 533.035025][ T38] Not tainted syzkaller #0 [ 533.035034][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.035042][ T38] task:syz-executor state:D stack:26952 pid:11795 tgid:11795 ppid:1 task_flags:0x400140 flags:0x00004004 [ 533.035086][ T38] Call Trace: [ 533.035092][ T38] [ 533.035103][ T38] __schedule+0x16f3/0x4c20 [ 533.035154][ T38] ? __pfx___schedule+0x10/0x10 [ 533.035196][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.035222][ T38] rt_mutex_schedule+0x77/0xf0 [ 533.035240][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 533.035260][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 533.035299][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 533.035321][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 533.035342][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 533.035360][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.035394][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 533.035420][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 533.035447][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 533.035464][ T38] mutex_lock_nested+0x16a/0x1d0 [ 533.035490][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 533.035520][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 533.035558][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 533.035576][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 533.035605][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.035628][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 533.035648][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.035689][ T38] netlink_rcv_skb+0x205/0x470 [ 533.035710][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.035731][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.035755][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.035790][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.035821][ T38] netlink_unicast+0x843/0xa10 [ 533.035852][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 533.035876][ T38] ? netlink_sendmsg+0x642/0xb30 [ 533.035895][ T38] ? skb_put+0x11b/0x210 [ 533.035923][ T38] netlink_sendmsg+0x805/0xb30 [ 533.035956][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.035987][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.036005][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.036028][ T38] __sock_sendmsg+0x219/0x270 [ 533.036054][ T38] __sys_sendto+0x3c7/0x520 [ 533.036080][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 533.036132][ T38] ? exc_page_fault+0x76/0xf0 [ 533.036159][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 533.036184][ T38] __x64_sys_sendto+0xde/0x100 [ 533.036210][ T38] do_syscall_64+0xfa/0x3b0 [ 533.036225][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.036248][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.036265][ T38] ? clear_bhb_loop+0x60/0xb0 [ 533.036287][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.036303][ T38] RIP: 0033:0x7f83e6080a3c [ 533.036318][ T38] RSP: 002b:00007ffc70644840 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 533.036336][ T38] RAX: ffffffffffffffda RBX: 00007f83e6df4620 RCX: 00007f83e6080a3c [ 533.036349][ T38] RDX: 0000000000000028 RSI: 00007f83e6df4670 RDI: 0000000000000003 [ 533.036361][ T38] RBP: 0000000000000000 R08: 00007ffc70644894 R09: 000000000000000c [ 533.036373][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 533.036384][ T38] R13: 0000000000000000 R14: 00007f83e6df4670 R15: 0000000000000000 [ 533.036414][ T38] [ 533.036421][ T38] INFO: task syz-executor:11797 blocked for more than 145 seconds. [ 533.036434][ T38] Not tainted syzkaller #0 [ 533.036443][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.036451][ T38] task:syz-executor state:D stack:26952 pid:11797 tgid:11797 ppid:1 task_flags:0x400140 flags:0x00004004 [ 533.036494][ T38] Call Trace: [ 533.036501][ T38] [ 533.036512][ T38] __schedule+0x16f3/0x4c20 [ 533.036563][ T38] ? __pfx___schedule+0x10/0x10 [ 533.036612][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.036639][ T38] rt_mutex_schedule+0x77/0xf0 [ 533.036656][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 533.036676][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 533.036715][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 533.036737][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 533.036759][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 533.036777][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.036809][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 533.036835][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 533.036862][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 533.036878][ T38] mutex_lock_nested+0x16a/0x1d0 [ 533.036904][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 533.036933][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 533.036971][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 533.036989][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 533.037010][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.037033][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 533.037054][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.037095][ T38] netlink_rcv_skb+0x205/0x470 [ 533.037114][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.037136][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.037160][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.037195][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.037226][ T38] netlink_unicast+0x843/0xa10 [ 533.037257][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 533.037278][ T38] ? netlink_sendmsg+0x642/0xb30 [ 533.037298][ T38] ? skb_put+0x11b/0x210 [ 533.037325][ T38] netlink_sendmsg+0x805/0xb30 [ 533.037358][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.037389][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.037406][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.037429][ T38] __sock_sendmsg+0x219/0x270 [ 533.037453][ T38] __sys_sendto+0x3c7/0x520 [ 533.037479][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 533.037530][ T38] ? exc_page_fault+0x76/0xf0 [ 533.037557][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 533.037588][ T38] __x64_sys_sendto+0xde/0x100 [ 533.037616][ T38] do_syscall_64+0xfa/0x3b0 [ 533.037631][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.037654][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.037671][ T38] ? clear_bhb_loop+0x60/0xb0 [ 533.037692][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.037709][ T38] RIP: 0033:0x7f140e050a3c [ 533.037724][ T38] RSP: 002b:00007ffd153136b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 533.037742][ T38] RAX: ffffffffffffffda RBX: 00007f140edc4620 RCX: 00007f140e050a3c [ 533.037756][ T38] RDX: 0000000000000028 RSI: 00007f140edc4670 RDI: 0000000000000003 [ 533.037768][ T38] RBP: 0000000000000000 R08: 00007ffd15313704 R09: 000000000000000c [ 533.037779][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 533.037790][ T38] R13: 0000000000000000 R14: 00007f140edc4670 R15: 0000000000000000 [ 533.037820][ T38] [ 533.037826][ T38] INFO: task syz-executor:11804 blocked for more than 145 seconds. [ 533.037838][ T38] Not tainted syzkaller #0 [ 533.037847][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.037856][ T38] task:syz-executor state:D stack:26952 pid:11804 tgid:11804 ppid:1 task_flags:0x400140 flags:0x00004004 [ 533.037900][ T38] Call Trace: [ 533.037906][ T38] [ 533.037918][ T38] __schedule+0x16f3/0x4c20 [ 533.037968][ T38] ? __pfx___schedule+0x10/0x10 [ 533.038010][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.038037][ T38] rt_mutex_schedule+0x77/0xf0 [ 533.038054][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 533.038075][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 533.038114][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 533.038136][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 533.038157][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 533.038175][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.038208][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 533.038234][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 533.038260][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 533.038276][ T38] mutex_lock_nested+0x16a/0x1d0 [ 533.038303][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 533.038331][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 533.038369][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 533.038388][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 533.038409][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.038432][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 533.038453][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.038493][ T38] netlink_rcv_skb+0x205/0x470 [ 533.038513][ T38] ? __lock_acquire+0xab9/0xd20 [ 533.038534][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.038558][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.038599][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.038629][ T38] netlink_unicast+0x843/0xa10 [ 533.038661][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 533.038683][ T38] ? netlink_sendmsg+0x642/0xb30 [ 533.038704][ T38] ? skb_put+0x11b/0x210 [ 533.038731][ T38] netlink_sendmsg+0x805/0xb30 [ 533.038763][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.038795][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.038812][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.038835][ T38] __sock_sendmsg+0x219/0x270 [ 533.038860][ T38] __sys_sendto+0x3c7/0x520 [ 533.038885][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 533.038937][ T38] ? exc_page_fault+0x76/0xf0 [ 533.038965][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 533.038990][ T38] __x64_sys_sendto+0xde/0x100 [ 533.039017][ T38] do_syscall_64+0xfa/0x3b0 [ 533.039033][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.039055][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.039073][ T38] ? clear_bhb_loop+0x60/0xb0 [ 533.039094][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.039110][ T38] RIP: 0033:0x7fd2ac3c0a3c [ 533.039126][ T38] RSP: 002b:00007ffc0d494100 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 533.039144][ T38] RAX: ffffffffffffffda RBX: 00007fd2ad134620 RCX: 00007fd2ac3c0a3c [ 533.039157][ T38] RDX: 0000000000000028 RSI: 00007fd2ad134670 RDI: 0000000000000003 [ 533.039169][ T38] RBP: 0000000000000000 R08: 00007ffc0d494154 R09: 000000000000000c [ 533.039180][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 533.039192][ T38] R13: 0000000000000000 R14: 00007fd2ad134670 R15: 0000000000000000 [ 533.039222][ T38] [ 533.039246][ T38] [ 533.039246][ T38] Showing all locks held in the system: [ 533.039258][ T38] 11 locks held by rcuc/1/28: [ 533.039270][ T38] 1 lock held by khungtaskd/38: [ 533.039280][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 533.039327][ T38] 4 locks held by kworker/u9:0/59: [ 533.039337][ T38] #0: ffff888032eb7138 ((wq_completion)hci9#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.039387][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.039430][ T38] #2: ffff88806ad0c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 533.039476][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 533.039521][ T38] 2 locks held by kworker/u8:4/63: [ 533.039531][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.039574][ T38] #1: ffffc9000139fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.039633][ T38] 3 locks held by kworker/0:2/993: [ 533.039643][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.039686][ T38] #1: ffffc90004a77bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.039729][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 533.039772][ T38] 3 locks held by kworker/u8:7/1012: [ 533.039782][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.039824][ T38] #1: ffffc90004bdfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.039867][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 533.039911][ T38] 3 locks held by kworker/u8:8/2137: [ 533.039922][ T38] #0: ffff88814d315138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.039973][ T38] #1: ffffc9000606fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.040018][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 533.040075][ T38] 2 locks held by getty/5601: [ 533.040085][ T38] #0: ffff88823bf448a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 533.040132][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 533.040177][ T38] 5 locks held by kworker/u9:2/5841: [ 533.040188][ T38] #0: ffff88805a615138 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.040236][ T38] #1: ffffc90004947bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.040280][ T38] #2: ffff88805bce4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 533.040322][ T38] #3: ffff88805bce40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 533.040373][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 533.040427][ T38] 4 locks held by kworker/u9:3/5851: [ 533.040437][ T38] #0: ffff8880289c8138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.040485][ T38] #1: ffffc90004ab7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.040529][ T38] #2: ffff888085b600a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 533.040587][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 533.040631][ T38] 4 locks held by kworker/u9:4/5853: [ 533.040642][ T38] #0: ffff8880602d5138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.040689][ T38] #1: ffffc90004aefbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.040733][ T38] #2: ffff8880302200a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 533.040783][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 533.040832][ T38] 4 locks held by kworker/u9:7/5858: [ 533.040842][ T38] #0: ffff888054708138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.040895][ T38] #1: ffffc90004b4fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.040950][ T38] #2: ffff8880547980a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 533.041012][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 533.041056][ T38] 5 locks held by kworker/u9:8/5859: [ 533.041067][ T38] #0: ffff888059d0d138 ((wq_completion)hci2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.041114][ T38] #1: ffffc90004b5fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.041158][ T38] #2: ffff888055648e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 533.041200][ T38] #3: ffff8880556480a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 533.041245][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 533.041299][ T38] 1 lock held by syz.1.2657/11666: [ 533.041309][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 533.041350][ T38] 1 lock held by syz.0.2688/11714: [ 533.041360][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 533.041406][ T38] 1 lock held by syz.5.2679/11717: [ 533.041417][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 533.041461][ T38] 1 lock held by syz.4.2684/11730: [ 533.041472][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 533.041513][ T38] 1 lock held by syz.2.2696/11752: [ 533.041523][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 533.041564][ T38] 1 lock held by syz-executor/11757: [ 533.041574][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 533.041626][ T38] 2 locks held by kworker/1:14/11782: [ 533.041638][ T38] 2 locks held by syz-executor/11789: [ 533.041648][ T38] #0: ffff88807f4bce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 533.041691][ T38] #1: ffff88807f4bc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 533.041736][ T38] 1 lock held by syz-executor/11795: [ 533.041746][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.041788][ T38] 1 lock held by syz-executor/11797: [ 533.041798][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.041839][ T38] 1 lock held by syz-executor/11804: [ 533.041849][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.041890][ T38] 1 lock held by syz-executor/11808: [ 533.041899][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.041941][ T38] 1 lock held by syz-executor/11813: [ 533.041951][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.041991][ T38] 1 lock held by syz-executor/11817: [ 533.042002][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.042043][ T38] 1 lock held by syz-executor/11822: [ 533.042054][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.042094][ T38] 1 lock held by syz-executor/11825: [ 533.042104][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.042151][ T38] 1 lock held by syz-executor/11835: [ 533.042161][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.060118][ T38] 6 locks held by kworker/u9:5/11836: [ 533.060137][ T38] #0: ffff88802fc16138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.060190][ T38] #1: ffffc90003ab7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.060235][ T38] #2: ffff88805bce0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 533.060278][ T38] #3: ffff88805bce00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 533.060323][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 533.060367][ T38] #5: ffff88805ee9fb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 533.060418][ T38] 8 locks held by kworker/u8:14/11838: [ 533.060429][ T38] 1 lock held by syz-executor/11840: [ 533.060440][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.060483][ T38] 1 lock held by syz-executor/11844: [ 533.060493][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.060534][ T38] 1 lock held by syz-executor/11846: [ 533.060544][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.060592][ T38] 1 lock held by syz-executor/11849: [ 533.060603][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.060645][ T38] 5 locks held by kworker/u9:9/11852: [ 533.060655][ T38] #0: ffff88802327e938 ((wq_completion)hci4#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.060704][ T38] #1: ffffc900030efbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.060747][ T38] #2: ffff88805754ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 533.060788][ T38] #3: ffff88805754c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 533.060833][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 533.060878][ T38] 4 locks held by kworker/u9:10/11853: [ 533.060889][ T38] #0: ffff888037de1938 ((wq_completion)hci8#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.060936][ T38] #1: ffffc900015efbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.060979][ T38] #2: ffff8880502580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 533.061022][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 533.061065][ T38] 1 lock held by syz-executor/11861: [ 533.061075][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 533.061125][ T38] [ 533.061130][ T38] ============================================= [ 533.061130][ T38] [ 533.061152][ T38] NMI backtrace for cpu 0 [ 533.061178][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 533.061225][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.061250][ T38] Call Trace: [ 533.061266][ T38] [ 533.061278][ T38] dump_stack_lvl+0x189/0x250 [ 533.061306][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.061328][ T38] ? __pfx__printk+0x10/0x10 [ 533.061358][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 533.061383][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 533.061406][ T38] ? __pfx__printk+0x10/0x10 [ 533.061429][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 533.061452][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 533.061475][ T38] watchdog+0xf93/0xfe0 [ 533.061501][ T38] ? watchdog+0x1de/0xfe0 [ 533.061527][ T38] kthread+0x70e/0x8a0 [ 533.061554][ T38] ? __pfx_watchdog+0x10/0x10 [ 533.061573][ T38] ? __pfx_kthread+0x10/0x10 [ 533.061612][ T38] ? __pfx_kthread+0x10/0x10 [ 533.061635][ T38] ret_from_fork+0x439/0x7d0 [ 533.061659][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 533.061686][ T38] ? __switch_to_asm+0x39/0x70 [ 533.061701][ T38] ? __switch_to_asm+0x33/0x70 [ 533.061716][ T38] ? __pfx_kthread+0x10/0x10 [ 533.061739][ T38] ret_from_fork_asm+0x1a/0x30 [ 533.061770][ T38] [ 533.061776][ T38] Sending NMI from CPU 0 to CPUs 1: [ 533.061806][ C1] NMI backtrace for cpu 1 [ 533.061820][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 533.061839][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.061849][ C1] RIP: 0010:mark_lock+0x1/0x190 [ 533.061873][ C1] Code: df 48 8b 2c 24 e9 b0 fd ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 [ 533.061888][ C1] RSP: 0018:ffffc90000a2e7d0 EFLAGS: 00000002 [ 533.061902][ C1] RAX: 0000000000000000 RBX: ffff88801cab0000 RCX: ffffffff929fda30 [ 533.061915][ C1] RDX: 0000000000000002 RSI: ffff88801cab0be8 RDI: ffff88801cab0000 [ 533.061927][ C1] RBP: ffffc90000a2e8b0 R08: ffffffff8f1d6037 R09: 1ffffffff1e3ac06 [ 533.061940][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ac07 R12: ffff88801cab0be8 [ 533.061953][ C1] R13: ffffc90000a2e908 R14: ffff88801cab0b20 R15: 0000000000000005 [ 533.061965][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 533.061979][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.061991][ C1] CR2: 00007f866888c18c CR3: 0000000038686000 CR4: 00000000003526f0 [ 533.062006][ C1] Call Trace: [ 533.062012][ C1] [ 533.062019][ C1] lockdep_hardirqs_on_prepare+0x129/0x2a0 [ 533.062042][ C1] trace_hardirqs_on+0x28/0x40 [ 533.062061][ C1] _raw_spin_unlock_irqrestore+0x85/0x110 [ 533.062084][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 533.062107][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 533.062130][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 533.062153][ C1] rt_spin_lock+0x167/0x2c0 [ 533.062173][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 533.062191][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 533.062211][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 533.062231][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 533.062252][ C1] get_partial_node+0x3a/0x3a0 [ 533.062273][ C1] ___slab_alloc+0x5af/0xdc0 [ 533.062288][ C1] ? kmalloc_reserve+0xbd/0x290 [ 533.062312][ C1] ? kmalloc_reserve+0xbd/0x290 [ 533.062345][ C1] kmem_cache_alloc_node_noprof+0xf2/0x330 [ 533.062369][ C1] kmalloc_reserve+0xbd/0x290 [ 533.062393][ C1] __alloc_skb+0x142/0x2d0 [ 533.062415][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 533.062444][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 533.062465][ C1] ? nft_tunnel_get_reduce+0x330/0x640 [ 533.062487][ C1] ? synproxy_pernet+0x45/0x270 [ 533.062507][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 533.062526][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 533.062544][ C1] ? nf_ip_checksum+0x13c/0x510 [ 533.062563][ C1] nft_synproxy_do_eval+0x345/0x570 [ 533.062581][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 533.062660][ C1] nft_do_chain+0x409/0x1920 [ 533.062685][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 533.062718][ C1] nft_do_chain_inet+0x25d/0x340 [ 533.062735][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 533.062750][ C1] ? __lock_acquire+0xab9/0xd20 [ 533.062775][ C1] ? NF_HOOK+0x9a/0x3a0 [ 533.062796][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 533.062813][ C1] nf_hook_slow+0xc5/0x220 [ 533.062837][ C1] NF_HOOK+0x206/0x3a0 [ 533.062858][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 533.062879][ C1] ? NF_HOOK+0x9a/0x3a0 [ 533.062899][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 533.062918][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 533.062940][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 533.062963][ C1] ? skb_dst+0x4f/0xd0 [ 533.062983][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 533.063005][ C1] NF_HOOK+0x309/0x3a0 [ 533.063026][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 533.063047][ C1] ? NF_HOOK+0x9a/0x3a0 [ 533.063066][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 533.063088][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 533.063114][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 533.063133][ C1] __netif_receive_skb+0x143/0x380 [ 533.063154][ C1] ? rt_spin_unlock+0x65/0x80 [ 533.063174][ C1] ? process_backlog+0x27b/0x900 [ 533.063194][ C1] process_backlog+0x31e/0x900 [ 533.063221][ C1] __napi_poll+0xb3/0x540 [ 533.063248][ C1] net_rx_action+0x707/0xe00 [ 533.063268][ C1] ? arch_stack_walk+0x11c/0x150 [ 533.063295][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 533.063380][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 533.063403][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 533.063430][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 533.063454][ C1] handle_softirqs+0x22f/0x710 [ 533.063479][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 533.063505][ C1] __local_bh_enable_ip+0x179/0x270 [ 533.063526][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 533.063552][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 533.063575][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 533.063598][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 533.063623][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 533.063653][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 533.063677][ C1] ? __lock_acquire+0xab9/0xd20 [ 533.063698][ C1] ? __pfx___schedule+0x10/0x10 [ 533.063729][ C1] ? schedule+0x91/0x360 [ 533.063753][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 533.063773][ C1] smpboot_thread_fn+0x53f/0xa60 [ 533.063794][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 533.063817][ C1] kthread+0x70e/0x8a0 [ 533.063841][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 533.063861][ C1] ? __pfx_kthread+0x10/0x10 [ 533.063886][ C1] ? __pfx_kthread+0x10/0x10 [ 533.063910][ C1] ret_from_fork+0x439/0x7d0 [ 533.063931][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 533.063954][ C1] ? __switch_to_asm+0x39/0x70 [ 533.063969][ C1] ? __switch_to_asm+0x33/0x70 [ 533.063984][ C1] ? __pfx_kthread+0x10/0x10 [ 533.064007][ C1] ret_from_fork_asm+0x1a/0x30 [ 533.064030][ C1] [ 533.065500][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 533.065519][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 533.065540][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.065558][ T38] Call Trace: [ 533.065566][ T38] [ 533.065575][ T38] dump_stack_lvl+0x99/0x250 [ 533.065603][ T38] ? __asan_memcpy+0x40/0x70 [ 533.065622][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.065645][ T38] ? __pfx__printk+0x10/0x10 [ 533.065675][ T38] vpanic+0x281/0x750 [ 533.065701][ T38] ? __pfx_vpanic+0x10/0x10 [ 533.065722][ T38] ? preempt_schedule+0xae/0xc0 [ 533.065746][ T38] ? preempt_schedule_common+0x83/0xd0 [ 533.065775][ T38] panic+0xb9/0xc0 [ 533.065796][ T38] ? __pfx_panic+0x10/0x10 [ 533.065819][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 533.065844][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 533.065869][ T38] watchdog+0xfd2/0xfe0 [ 533.065896][ T38] ? watchdog+0x1de/0xfe0 [ 533.065921][ T38] kthread+0x70e/0x8a0 [ 533.065948][ T38] ? __pfx_watchdog+0x10/0x10 [ 533.065967][ T38] ? __pfx_kthread+0x10/0x10 [ 533.065995][ T38] ? __pfx_kthread+0x10/0x10 [ 533.066018][ T38] ret_from_fork+0x439/0x7d0 [ 533.066057][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 533.066083][ T38] ? __switch_to_asm+0x39/0x70 [ 533.066098][ T38] ? __switch_to_asm+0x33/0x70 [ 533.066118][ T38] ? __pfx_kthread+0x10/0x10 [ 533.066143][ T38] ret_from_fork_asm+0x1a/0x30 [ 533.066174][ T38] [ 533.066528][ T38] Kernel Offset: disabled