last executing test programs: 3m39.40561273s ago: executing program 0 (id=74): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) 3m39.076476639s ago: executing program 0 (id=77): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) 3m38.809720396s ago: executing program 0 (id=81): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffeb6, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) 3m38.565824254s ago: executing program 0 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m38.243440913s ago: executing program 0 (id=88): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m37.952755975s ago: executing program 0 (id=91): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) shutdown(r0, 0x0) 3m22.683032601s ago: executing program 32 (id=91): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) shutdown(r0, 0x0) 20.874112246s ago: executing program 3 (id=2185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000180)={0xdf, 0x0, 0x1000000}) 20.474672559s ago: executing program 4 (id=2189): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000380)='y', 0x1, 0x7fffffffffffffff) 20.358971634s ago: executing program 3 (id=2190): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_opts(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 20.041838954s ago: executing program 4 (id=2192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) 19.830185214s ago: executing program 3 (id=2194): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 19.627233715s ago: executing program 4 (id=2196): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 19.387210587s ago: executing program 4 (id=2197): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 19.341158487s ago: executing program 2 (id=2198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, r1, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 19.107584196s ago: executing program 4 (id=2200): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETS2(r0, 0x5434, 0x0) 19.106460276s ago: executing program 2 (id=2210): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0xfffffffd, 0x7}, 0xff14) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a00)=ANY=[@ANYBLOB="180000005200012200000000000000001c"], 0x18}, 0x1, 0x0, 0x0, 0x4801c}, 0x0) 18.904774657s ago: executing program 2 (id=2203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8000001, @private0, 0x2003}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x5, @private1, 0x5f}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="b3", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @private1, 0x62af}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000000c0)="c92d5a65", 0x4}], 0x1}}], 0x3, 0x931766f6319eed40) close(0x3) 18.738918503s ago: executing program 3 (id=2205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 18.545547312s ago: executing program 2 (id=2207): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff6, 0x400, 0x3, 0x7ff, 0x5, "d74192f386e87fcb367800080800ffee00", 0x804, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 18.497082194s ago: executing program 3 (id=2208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4048aec9, &(0x7f0000000040)={0xa, 0xa, 0x80000000, 0x0, 0x40004}) 18.496683348s ago: executing program 5 (id=2209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 18.49361064s ago: executing program 4 (id=2211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18.475854886s ago: executing program 1 (id=2212): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) 18.222817445s ago: executing program 2 (id=2213): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x8, &(0x7f0000001880)="a67b41f72343a99f322f0fb564e171f0c42be53969913926180b2a1991b4e25747ff23212ddf3193d13e", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x24) 18.222328085s ago: executing program 5 (id=2214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 18.202005487s ago: executing program 1 (id=2215): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4c092, r0, 0x0) fallocate(r0, 0x3, 0x8000000f5, 0xfffffffb) 17.983023193s ago: executing program 1 (id=2216): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x7, 0x3, 0x1) 17.976411793s ago: executing program 3 (id=2217): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x138, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 17.939329521s ago: executing program 2 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}}, 0x4000) 17.775312912s ago: executing program 5 (id=2219): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x48) 17.57669643s ago: executing program 1 (id=2220): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "9534b0c9"}, @local=@item_012={0x1, 0x2, 0xa, "ed"}]}}, 0x0}, 0x0) 17.450468901s ago: executing program 5 (id=2221): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.21262105s ago: executing program 5 (id=2222): ioprio_set$uid(0x3, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 15.708053497s ago: executing program 1 (id=2223): r0 = userfaultfd(0x80001) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000000}) 15.706675207s ago: executing program 5 (id=2224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 15.466031233s ago: executing program 1 (id=2225): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 2.846824038s ago: executing program 33 (id=2217): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x138, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "6f9541cd1a4dbfb5aabf32d14fa803f2395f13ad51c818a9ac681a324aae9361398f5ff3819975f3fbd6df30f7f4bb6e4be729e73936dd2b9e745898d6b548631c7c1c2afad2a5a8186a7c600dcfdd2ca385d336fe9d4189ab6352510d6351563e771422166355f92ed4a437ac7caa6221a30751521fdee7f63bb67c5c95e441e7171fb7b1a77c437830993c765f5af208dabbef48095f83f715789c96ba76e87fa9d8800da3c90c144b9a548a06271c9a31e836baae4c8e1f9357178d2a4a02d21d0f038c2711334e6432c8c419205335bc4b4e7831c7dc2225719d220a8178649103040641b8d090a4474ebf896ce78f0096ae597635cdd32e4ef4f161c738"}]}}]}, 0x138}}, 0x0) 2.678957976s ago: executing program 34 (id=2211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.375338805s ago: executing program 35 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}}, 0x4000) 249.408403ms ago: executing program 36 (id=2224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 0s ago: executing program 37 (id=2225): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) kernel console output (not intermixed with test programs): g 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 185.920238][ T5923] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 185.920271][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.920291][ T5923] usb 6-1: Product: syz [ 185.920305][ T5923] usb 6-1: Manufacturer: syz [ 185.920319][ T5923] usb 6-1: SerialNumber: syz [ 185.965848][ T5923] usb 6-1: config 0 descriptor?? [ 185.970648][ T7582] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 185.970800][ T7582] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.031226][ T5923] usb 6-1: ucan: probing device on interface #0 [ 186.178683][ T5923] usb 6-1: ucan: device protocol version 42020 is not supported [ 186.178708][ T5923] usb 6-1: ucan: probe failed; try to update the device firmware [ 186.404893][ T5990] usb 6-1: USB disconnect, device number 3 [ 186.481514][ T5926] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.629340][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 186.635149][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.635179][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.635201][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.635232][ T5926] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 186.635253][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.663784][ T5926] usb 4-1: config 0 descriptor?? [ 187.179777][ T5926] a4tech 0003:09DA:000A.0015: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 187.341866][ T5923] usb 4-1: USB disconnect, device number 13 [ 187.608361][ T7630] fido_id[7630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 188.999412][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 189.058747][ T7679] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 189.069397][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.199938][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 189.202372][ T45] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.202402][ T45] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.202426][ T45] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.202452][ T45] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.202473][ T45] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 189.202499][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.202531][ T45] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 189.202553][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.208344][ T45] usb 4-1: config 0 descriptor?? [ 189.253484][ T5925] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 189.253565][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.255110][ T5925] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 189.255137][ T5925] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 189.255158][ T5925] usb 2-1: Manufacturer: syz [ 189.342216][ T5925] usb 2-1: config 0 descriptor?? [ 189.694629][ T45] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 189.694663][ T45] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 189.694688][ T45] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 189.694713][ T45] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 189.694737][ T45] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 189.744896][ T45] hid-thrustmaster 0003:044F:B65D.0016: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 189.745154][ T45] hid-thrustmaster 0003:044F:B65D.0016: setup data couldn't be sent [ 189.819670][ T5925] rc_core: IR keymap rc-hauppauge not found [ 189.819692][ T5925] Registered IR keymap rc-empty [ 189.836274][ T5925] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 189.879846][ T5925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 189.928710][ C1] hid-thrustmaster 0003:044F:B65D.0016: URB to get model id failed with error -71 [ 189.939617][ T45] usb 4-1: USB disconnect, device number 14 [ 190.037694][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 190.239845][ T45] usb 2-1: USB disconnect, device number 10 [ 190.364389][ T7705] fido_id[7705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 190.433887][ T7707] gretap0: entered promiscuous mode [ 190.434125][ T7707] vlan3: entered promiscuous mode [ 192.184744][ T7754] vlan2: entered promiscuous mode [ 192.184765][ T7754] macvtap0: entered promiscuous mode [ 192.419282][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 192.569330][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 192.572053][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 192.572090][ T31] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 192.572112][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.632321][ T31] usb 6-1: config 0 descriptor?? [ 193.078597][ T31] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 193.281588][ T7792] program syz.2.766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.309255][ T5925] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 193.310947][ T31] usb 6-1: USB disconnect, device number 4 [ 193.381406][ T5926] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 193.489264][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 193.491704][ T5925] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.491727][ T5925] usb 2-1: config 0 has no interface number 0 [ 193.491756][ T5925] usb 2-1: config 0 interface 184 has no altsetting 0 [ 193.494245][ T5925] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.494268][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.494287][ T5925] usb 2-1: Product: syz [ 193.494300][ T5925] usb 2-1: Manufacturer: syz [ 193.494313][ T5925] usb 2-1: SerialNumber: syz [ 193.521619][ T5925] usb 2-1: config 0 descriptor?? [ 193.569290][ T5926] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 193.569318][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.602651][ T5925] smsc75xx v1.0.0 [ 193.602670][ T5925] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 193.602972][ T5925] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 193.637563][ T5926] usb 5-1: config 0 descriptor?? [ 193.667022][ T5926] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 193.856297][ T31] usb 2-1: USB disconnect, device number 11 [ 194.311916][ T5926] gp8psk: usb out operation failed. [ 194.311935][ T5926] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 194.311974][ T5926] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 194.328032][ T5926] usb 5-1: USB disconnect, device number 6 [ 194.538670][ T7814] sp0: Synchronizing with TNC [ 194.679468][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 194.832502][ T31] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.832537][ T31] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.832565][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 194.832601][ T31] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 194.832624][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.838544][ T31] usb 6-1: config 0 descriptor?? [ 195.135392][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 195.307166][ T31] itetech 0003:06CB:73F6.0018: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.5-1/input0 [ 195.511247][ T5990] usb 6-1: USB disconnect, device number 5 [ 195.580708][ T7840] program syz.3.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.659387][ T7837] fido_id[7837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 195.899431][ T5925] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.064081][ T5925] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 196.064111][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.064131][ T5925] usb 2-1: Product: syz [ 196.064145][ T5925] usb 2-1: Manufacturer: syz [ 196.064160][ T5925] usb 2-1: SerialNumber: syz [ 196.079289][ T5923] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 196.089736][ T5925] usb 2-1: config 0 descriptor?? [ 196.098489][ T5925] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 196.102430][ T7854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.791'. [ 196.232272][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.232307][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 196.232351][ T5923] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 196.232374][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.289751][ T5923] usb 3-1: config 0 descriptor?? [ 196.292937][ T7845] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 196.431984][ T7857] netlink: 'syz.5.792': attribute type 3 has an invalid length. [ 196.555395][ T5925] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 196.723950][ T5923] sony 0003:1345:3008.0019: unknown main item tag 0x0 [ 196.723985][ T5923] sony 0003:1345:3008.0019: unknown main item tag 0x0 [ 196.724006][ T5923] sony 0003:1345:3008.0019: unknown main item tag 0x0 [ 196.724028][ T5923] sony 0003:1345:3008.0019: unknown main item tag 0x0 [ 196.724049][ T5923] sony 0003:1345:3008.0019: unknown main item tag 0x0 [ 196.763925][ T5925] usb 2-1: USB disconnect, device number 12 [ 196.817530][ T5923] sony 0003:1345:3008.0019: hiddev0,hidraw0: USB HID v80.05 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 196.817565][ T5923] sony 0003:1345:3008.0019: failed to claim input [ 196.860416][ T7865] ptrace attach of "./syz-executor exec"[6473] was attempted by "®"[7865] [ 197.039736][ T5923] usb 3-1: USB disconnect, device number 10 [ 197.130066][ T5990] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 197.216281][ T7869] fido_id[7869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 197.289457][ T5990] usb 4-1: Using ep0 maxpacket: 8 [ 197.292519][ T5990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 197.292570][ T5990] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 197.292595][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.323815][ T5990] usb 4-1: config 0 descriptor?? [ 197.830288][ T5990] corsair 0003:1B1C:1B09.001A: unbalanced collection at end of report description [ 197.831155][ T5990] corsair 0003:1B1C:1B09.001A: parse failed [ 197.831259][ T5990] corsair 0003:1B1C:1B09.001A: probe with driver corsair failed with error -22 [ 197.931095][ T7883] netlink: 'syz.2.803': attribute type 5 has an invalid length. [ 198.024945][ T45] usb 4-1: USB disconnect, device number 15 [ 198.803031][ T7914] syz.5.818 (7914) used greatest stack depth: 18440 bytes left [ 198.893810][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.819'. [ 199.058083][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.821'. [ 199.058120][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.821'. [ 199.169821][ T5990] IPVS: starting estimator thread 0... [ 199.193451][ T7925] IPVS: ip_vs_add_dest(): server weight less than zero [ 199.270669][ T7926] IPVS: using max 7 ests per chain, 16800 per kthread [ 199.338241][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.338318][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.491431][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 200.491458][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 200.669766][ T7976] syz.4.846 (7976) used greatest stack depth: 18216 bytes left [ 200.938158][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'. [ 200.938263][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'. [ 201.281427][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.395933][ T7995] C: renamed from team_slave_0 (while UP) [ 201.434629][ T7995] netlink: 164 bytes leftover after parsing attributes in process `syz.5.855'. [ 201.629512][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 201.779488][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 201.783567][ T45] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.783595][ T45] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 201.783624][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.783658][ T45] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 201.783681][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.849111][ T45] usb 4-1: config 0 descriptor?? [ 201.962276][ T59] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 201.962389][ T59] Bluetooth: hci3: Injecting HCI hardware error event [ 201.965254][ T5839] Bluetooth: hci3: hardware error 0x00 [ 202.163746][ T8013] bridge0: entered promiscuous mode [ 202.166067][ T8013] macsec1: entered promiscuous mode [ 202.278978][ T45] hid (null): unknown global tag 0xc [ 202.279000][ T45] hid (null): global environment stack underflow [ 202.316318][ T45] corsair-cpro 0003:1B1C:0C10.001B: unknown global tag 0xc [ 202.316344][ T45] corsair-cpro 0003:1B1C:0C10.001B: item 0 1 1 12 parsing failed [ 202.317305][ T45] corsair-cpro 0003:1B1C:0C10.001B: probe with driver corsair-cpro failed with error -22 [ 202.502751][ T45] usb 4-1: USB disconnect, device number 16 [ 202.978939][ T8037] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 203.088465][ T8042] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 203.159444][ T5925] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 203.314906][ T5925] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 203.314972][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 203.315004][ T5925] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.315032][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.315058][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 203.318206][ T5925] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 203.318265][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 203.318293][ T5925] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.318320][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.318346][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 203.327179][ T5925] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 203.327242][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 203.327273][ T5925] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.327302][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.327332][ T5925] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 203.359536][ T5925] usb 3-1: string descriptor 0 read error: -22 [ 203.359704][ T5925] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.359733][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.712684][ T5925] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 203.836361][ T31] usb 3-1: USB disconnect, device number 11 [ 204.199562][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 204.675221][ T8086] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 205.389373][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.541995][ T31] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 205.542025][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.572290][ T31] usb 3-1: config 0 descriptor?? [ 206.047952][ T31] elecom 0003:056E:00E6.001C: unknown main item tag 0x0 [ 206.047986][ T31] elecom 0003:056E:00E6.001C: unknown main item tag 0x0 [ 206.048011][ T31] elecom 0003:056E:00E6.001C: unknown main item tag 0x0 [ 206.048035][ T31] elecom 0003:056E:00E6.001C: unknown main item tag 0x0 [ 206.048059][ T31] elecom 0003:056E:00E6.001C: unknown main item tag 0x0 [ 206.102818][ T31] elecom 0003:056E:00E6.001C: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.2-1/input0 [ 206.270041][ T31] usb 3-1: USB disconnect, device number 12 [ 206.570729][ T8133] fido_id[8133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 207.003426][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 207.710824][ T8170] netlink: 56 bytes leftover after parsing attributes in process `syz.5.929'. [ 207.710985][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.929'. [ 207.999727][ T5990] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 208.169331][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 208.171691][ T5990] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 208.171734][ T5990] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 208.171761][ T5990] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 208.171786][ T5990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.171816][ T5990] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 208.171837][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.280817][ T5990] usb 5-1: config 0 descriptor?? [ 208.759937][ T5990] topre 0003:0853:0148.001D: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 208.932188][ T5990] usb 5-1: USB disconnect, device number 7 [ 208.956779][ T8202] fido_id[8202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 208.969640][ T31] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 209.131721][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.131762][ T31] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 209.131783][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.165953][ T31] usb 3-1: config 0 descriptor?? [ 209.672346][ T31] nintendo 0003:057E:200E.001E: unbalanced collection at end of report description [ 209.673153][ T31] nintendo 0003:057E:200E.001E: HID parse failed [ 209.699360][ T31] nintendo 0003:057E:200E.001E: probe - fail = -22 [ 209.699477][ T31] nintendo 0003:057E:200E.001E: probe with driver nintendo failed with error -22 [ 209.850051][ T5923] usb 3-1: USB disconnect, device number 13 [ 211.117461][ T8258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.873643][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.991'. [ 213.271874][ T8331] netlink: 'syz.2.997': attribute type 1 has an invalid length. [ 213.479283][ T5839] Bluetooth: hci1: command tx timeout [ 213.729730][ T5926] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 213.879513][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 213.882402][ T5926] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 213.882431][ T5926] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 213.882457][ T5926] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 213.882481][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 213.885671][ T5926] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 213.885700][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.885720][ T5926] usb 6-1: Product: syz [ 213.885736][ T5926] usb 6-1: Manufacturer: syz [ 213.885750][ T5926] usb 6-1: SerialNumber: syz [ 213.919326][ T5926] usb 6-1: config 0 descriptor?? [ 214.109399][ T5990] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 214.235008][ T5926] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 214.248262][ T5193] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 214.269349][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 214.272642][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 214.272686][ T5990] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 214.272708][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.308777][ T5990] usb 4-1: config 0 descriptor?? [ 214.390889][ T8361] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 214.390908][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1010'. [ 214.390924][ T8361] nbd: illegal input index 65544 [ 214.397901][ T8340] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 214.454170][ T5193] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 214.577701][ T5193] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 214.653499][ T45] usb 6-1: USB disconnect, device number 6 [ 214.859499][ T5990] holtek 0003:1241:5015.001F: hidraw0: USB HID v0.04 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 214.859542][ T5990] holtek 0003:1241:5015.001F: no inputs found [ 215.049887][ T5990] usb 4-1: USB disconnect, device number 17 [ 215.100332][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 215.136774][ T8371] fido_id[8371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 215.829026][ T8394] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 215.997705][ T8397] program syz.2.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.196657][ T8406] netlink: 'syz.2.1030': attribute type 2 has an invalid length. [ 216.311927][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1032'. [ 216.759661][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 216.762225][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 216.762567][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 216.839919][ T8426] CUSE: DEVNAME unspecified [ 217.419651][ T8445] usb usb8: usbfs: process 8445 (syz.2.1047) did not claim interface 1 before use [ 217.869317][ T5888] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 217.953244][ T8464] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 218.024286][ T5888] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 218.024316][ T5888] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 218.024335][ T5888] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 218.024354][ T5888] usb 2-1: config 8 has no interface number 0 [ 218.024405][ T5888] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 218.024433][ T5888] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.027948][ T5888] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 218.027974][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.027993][ T5888] usb 2-1: Product: syz [ 218.028007][ T5888] usb 2-1: Manufacturer: syz [ 218.028020][ T5888] usb 2-1: SerialNumber: syz [ 218.152383][ T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 218.292835][ T8466] [U] é [ 218.304900][ T45] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 218.304930][ T45] usb 6-1: config 1 has no interface number 0 [ 218.304980][ T45] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 218.305007][ T45] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 218.305034][ T45] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.308424][ T45] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 218.308452][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.308479][ T45] usb 6-1: Product: syz [ 218.308495][ T45] usb 6-1: Manufacturer: syz [ 218.308508][ T45] usb 6-1: SerialNumber: syz [ 218.451847][ T8458] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 218.464050][ T5888] usb 2-1: USB disconnect, device number 13 [ 218.700749][ T8458] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 218.703705][ T8475] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1062'. [ 218.703778][ T8475] netlink: zone id is out of range [ 218.703826][ T8475] netlink: get zone limit has 8 unknown bytes [ 219.047218][ T45] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 219.047984][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 219.118725][ T45] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 219.118748][ T45] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 219.136176][ T45] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 219.136201][ T45] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 219.176581][ T45] usb 6-1: USB disconnect, device number 7 [ 219.210189][ T45] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 219.470144][ T8495] hub 7-0:1.0: USB hub found [ 219.481668][ T8495] hub 7-0:1.0: 1 port detected [ 219.556609][ T45] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 219.587303][ T6004] udevd[6004]: setting owner of /dev/bus/usb/006/007 to uid=0, gid=0 failed: No such file or directory [ 219.885068][ T8507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.999305][ T5923] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 220.116682][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 220.116716][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 220.154728][ T5923] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.154756][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.154774][ T5923] usb 2-1: Product: syz [ 220.154787][ T5923] usb 2-1: Manufacturer: syz [ 220.154799][ T5923] usb 2-1: SerialNumber: syz [ 220.190852][ T8518] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 220.190852][ T8518] The task syz.3.1076 (8518) triggered the difference, watch for misbehavior. [ 220.222081][ T5923] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 220.352226][ T31] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.867492][ T5888] usb 2-1: USB disconnect, device number 14 [ 221.194694][ T8534] netlink: 'syz.5.1085': attribute type 49 has an invalid length. [ 221.499398][ T31] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 221.503162][ T31] ath9k_htc: Failed to initialize the device [ 221.510949][ T5888] usb 2-1: ath9k_htc: USB layer deinitialized [ 222.286367][ T8563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1098'. [ 223.049678][ T8588] vivid-003: disconnect [ 223.050452][ T8587] vivid-003: reconnect [ 223.144463][ T5839] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 223.932556][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 223.932592][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 224.055757][ T8620] IPVS: ip_vs_add_dest(): server weight less than zero [ 224.143618][ T8625] Bluetooth: MGMT ver 1.23 [ 224.329747][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 224.479608][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 224.484256][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 224.484317][ T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 224.484340][ T31] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 224.484365][ T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 224.484386][ T31] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 224.484410][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 224.484445][ T31] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 224.484467][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.640206][ T31] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 224.959377][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 224.964186][ T31] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 225.006986][ T31] usb 4-1: USB disconnect, device number 18 [ 225.119384][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 225.122310][ T5925] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 225.122340][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.155046][ T5925] usb 3-1: config 0 descriptor?? [ 225.384264][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1140'. [ 225.620259][ T5925] konepure 0003:1E7D:2DBE.0020: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.2-1/input0 [ 225.804865][ T31] usb 3-1: USB disconnect, device number 14 [ 226.082341][ T8667] fido_id[8667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 226.632164][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.159369][ T5839] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 227.159683][ T5839] Bluetooth: hci1: Injecting HCI hardware error event [ 227.166176][ T5839] Bluetooth: hci1: hardware error 0x00 [ 227.360210][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 227.514432][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.514479][ T31] usb 6-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 227.514502][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.567078][ T31] usb 6-1: config 0 descriptor?? [ 227.603460][ T8716] macsec1: entered promiscuous mode [ 227.603484][ T8716] bridge0: entered promiscuous mode [ 228.042367][ T31] wacom 0003:056A:0016.0021: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 228.072411][ T31] wacom 0003:056A:0016.0021: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.5-1/input0 [ 228.076304][ T31] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0016.0021/input/input17 [ 228.311679][ T31] usb 6-1: USB disconnect, device number 8 [ 228.465840][ T38] audit: type=1400 audit(1756217457.123:16): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8735 comm="syz.3.1174" src=1 dest=20000 netif=wpan0 [ 228.536151][ T8729] fido_id[8729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 229.315391][ T8761] syz.1.1188 uses obsolete (PF_INET,SOCK_PACKET) [ 229.399554][ T5839] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 229.809315][ T31] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 229.849670][ T5923] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.961913][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.961947][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.961985][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 229.962006][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.973729][ T31] usb 3-1: config 0 descriptor?? [ 230.002519][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 230.006360][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.006395][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.006440][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.006467][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.090673][ T5923] usb 2-1: config 0 descriptor?? [ 230.174803][ T5923] hub 2-1:0.0: USB hub found [ 230.297738][ T5923] hub 2-1:0.0: 1 port detected [ 230.500188][ T5923] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 230.500214][ T5923] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 230.556477][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 230.556608][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 230.660582][ T5923] usb 2-1: USB disconnect, device number 15 [ 230.711569][ T45] usb 3-1: USB disconnect, device number 15 [ 231.429332][ T45] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 231.498111][ T8814] sp0: Synchronizing with TNC [ 231.597467][ T45] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 231.597496][ T45] usb 2-1: config 0 has no interface number 0 [ 231.597547][ T45] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.597570][ T45] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 231.597596][ T45] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 231.597620][ T45] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 231.597646][ T45] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 231.597671][ T45] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.597713][ T45] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 231.597735][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.635023][ T45] usb 2-1: config 0 descriptor?? [ 231.636651][ T8808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.636887][ T8808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.918239][ T45] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 231.983065][ T45] usb 2-1: USB disconnect, device number 16 [ 232.052854][ T45] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 232.632816][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1222'. [ 232.749577][ T8842] tipc: Enabling of bearer rejected, failed to enable media [ 233.433325][ T38] audit: type=1326 audit(1756217462.093:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 233.433467][ T38] audit: type=1326 audit(1756217462.093:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 233.433924][ T38] audit: type=1326 audit(1756217462.093:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 233.434216][ T38] audit: type=1326 audit(1756217462.093:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8861 comm="syz.1.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 233.564349][ T8869] sp0: Synchronizing with TNC [ 234.126323][ T38] audit: type=1326 audit(1756217462.783:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8885 comm="syz.4.1246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b9dd7ebe9 code=0x0 [ 234.423153][ T8896] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 234.452617][ T8896] team0: Port device syz_tun added [ 234.952134][ T8909] netlink: 'syz.1.1257': attribute type 3 has an invalid length. [ 235.889596][ T38] audit: type=1400 audit(1756217464.543:22): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8937 comm="syz.3.1272" src=1 dest=20000 netif=wpan0 [ 237.249298][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 237.401189][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 237.404047][ T31] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 237.404073][ T31] usb 3-1: config 2 has no interface number 0 [ 237.404123][ T31] usb 3-1: config 2 interface 31 has no altsetting 0 [ 237.408763][ T31] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 237.408790][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.408828][ T31] usb 3-1: Product: syz [ 237.408844][ T31] usb 3-1: Manufacturer: syz [ 237.408860][ T31] usb 3-1: SerialNumber: syz [ 237.677730][ T5839] Bluetooth: hci4: Malformed Event: 0x13 [ 237.849655][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 238.103349][ T31] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 238.142950][ T31] usb 3-1: USB disconnect, device number 16 [ 238.229717][ T7149] udevd[7149]: setting owner of /dev/bus/usb/003/016 to uid=0, gid=0 failed: No such file or directory [ 238.699326][ T5990] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 238.871748][ T5990] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.871776][ T5990] usb 5-1: config 0 has no interface number 0 [ 238.871829][ T5990] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 238.871852][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.912137][ T5990] usb 5-1: config 0 descriptor?? [ 238.952363][ T9021] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 238.954119][ T5990] usb 5-1: selecting invalid altsetting 1 [ 238.955389][ T5990] dvb_ttusb_budget: ttusb_init_controller: error [ 238.955405][ T5990] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 239.321636][ T5990] DVB: Unable to find symbol cx22700_attach() [ 239.505927][ T5990] DVB: Unable to find symbol tda10046_attach() [ 239.505943][ T5990] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 239.527246][ T5990] usb 5-1: USB disconnect, device number 8 [ 239.939981][ T5888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 240.110141][ T5888] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 240.110173][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.146230][ T5888] usb 6-1: config 0 descriptor?? [ 240.219847][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 240.781026][ T5888] gspca_sunplus: reg_w_riv err -71 [ 240.781123][ T5888] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 240.805887][ T5888] usb 6-1: USB disconnect, device number 9 [ 241.650027][ T9086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1339'. [ 241.650499][ T9085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1339'. [ 242.189316][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 242.344807][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.344856][ T9] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 242.344880][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.393359][ T9] usb 5-1: config 0 descriptor?? [ 242.860731][ T9] nintendo 0003:057E:200E.0023: unbalanced collection at end of report description [ 242.861550][ T9] nintendo 0003:057E:200E.0023: HID parse failed [ 242.904286][ T9] nintendo 0003:057E:200E.0023: probe - fail = -22 [ 242.904406][ T9] nintendo 0003:057E:200E.0023: probe with driver nintendo failed with error -22 [ 243.039278][ T9] usb 5-1: USB disconnect, device number 9 [ 244.111527][ T9] kernel write not supported for file /stat (pid: 9 comm: kworker/0:0) [ 245.417226][ T5888] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 245.565588][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.565641][ T5888] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 245.565665][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.614457][ T5888] usb 2-1: config 0 descriptor?? [ 245.705693][ T9190] program syz.4.1386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.066534][ T5888] steelseries 0003:1038:12B6.0024: unknown main item tag 0x2 [ 246.066573][ T5888] steelseries 0003:1038:12B6.0024: item fetching failed at offset 6/7 [ 246.067480][ T5888] steelseries 0003:1038:12B6.0024: probe with driver steelseries failed with error -22 [ 246.268090][ T5888] usb 2-1: USB disconnect, device number 17 [ 246.920110][ T9225] ptrace attach of "./syz-executor exec"[6473] was attempted by ""[9225] [ 246.985470][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 247.079349][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 247.239263][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 247.243635][ T5923] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 247.243661][ T5923] usb 3-1: config 0 has no interface number 0 [ 247.243696][ T5923] usb 3-1: config 0 interface 29 has no altsetting 0 [ 247.246893][ T5923] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 247.246938][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.246960][ T5923] usb 3-1: Product: syz [ 247.246974][ T5923] usb 3-1: Manufacturer: syz [ 247.246989][ T5923] usb 3-1: SerialNumber: syz [ 247.273862][ T5923] usb 3-1: config 0 descriptor?? [ 247.490409][ T5923] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 247.668088][ T9242] tmpfs: Bad value for 'mpol' [ 247.698111][ T5923] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 247.698192][ T5923] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 247.698321][ T5923] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 247.718697][ T9242] tmpfs: Bad value for 'mpol' [ 247.950604][ T5923] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 247.990607][ T5923] usb 3-1: USB disconnect, device number 17 [ 248.030989][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 248.031013][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 248.031040][ T9250] netlink: 'syz.3.1416': attribute type 12 has an invalid length. [ 248.031054][ T9250] netlink: 'syz.3.1416': attribute type 14 has an invalid length. [ 248.324754][ T9253] max out of range [ 249.809582][ T5923] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 249.962201][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 249.965112][ T5923] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 249.965139][ T5923] usb 2-1: config 0 has no interface number 0 [ 249.988454][ T5923] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 249.988486][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.988507][ T5923] usb 2-1: Product: syz [ 249.988521][ T5923] usb 2-1: Manufacturer: syz [ 249.988536][ T5923] usb 2-1: SerialNumber: syz [ 250.034841][ T5923] usb 2-1: config 0 descriptor?? [ 250.070837][ T5923] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 250.070889][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 250.076242][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.102274][ T5923] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 250.102351][ T5923] usb 2-1: media controller created [ 250.147045][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.232540][ T5923] cxusb: set interface failed [ 250.232561][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 250.270146][ T9289] dvb-usb: bulk message failed: -22 (5/0) [ 250.431047][ T5923] DVB: Unable to find symbol lgdt330x_attach() [ 250.431065][ T5923] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 250.709286][ T5923] rc_core: IR keymap rc-dvico-portable not found [ 250.709317][ T5923] Registered IR keymap rc-empty [ 250.711249][ T5923] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 250.714885][ T5923] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input20 [ 250.776761][ T5923] dvb-usb: schedule remote query interval to 100 msecs. [ 250.776786][ T5923] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 250.802114][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'. [ 250.821893][ T5923] usb 2-1: USB disconnect, device number 18 [ 251.164892][ T5923] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 251.380742][ T9332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1454'. [ 252.223438][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1465'. [ 252.910571][ T9379] hub 7-0:1.0: USB hub found [ 252.916646][ T9379] hub 7-0:1.0: 1 port detected [ 254.519076][ T9429] tipc: Enabling of bearer rejected, failed to enable media [ 254.864537][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1506'. [ 255.000477][ T9440] syz.3.1507 (9440) used greatest stack depth: 16760 bytes left [ 255.329348][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 255.479708][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 255.482627][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.482659][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.482698][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.482721][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.543936][ T9] usb 3-1: config 0 descriptor?? [ 255.560692][ T9] hub 3-1:0.0: USB hub found [ 255.800491][ T9] hub 3-1:0.0: 29 ports detected [ 255.801115][ T9] hub 3-1:0.0: insufficient power available to use all downstream ports [ 255.946258][ T9464] usb usb6: usbfs: process 9464 (syz.1.1519) did not claim interface 63 before use [ 256.523855][ T9] usb 3-1: USB disconnect, device number 18 [ 257.407884][ T9504] genirq: Flags mismatch irq 5. 00202000 (pcmmio) vs. 00202000 (das16m1) [ 258.441161][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1547'. [ 258.680083][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1560'. [ 258.680118][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1560'. [ 258.718797][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1551'. [ 258.808567][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 258.974563][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.974627][ T9] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 258.974651][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.053907][ T9] usb 4-1: config 0 descriptor?? [ 259.232342][ T9557] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1557'. [ 259.535531][ T9] smartjoyplus 0003:0925:8866.0025: unknown main item tag 0x5 [ 259.558486][ T9] smartjoyplus 0003:0925:8866.0025: hidraw0: USB HID v80.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 259.558522][ T9] smartjoyplus 0003:0925:8866.0025: no output reports found [ 259.639568][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 259.718762][ T5888] usb 4-1: USB disconnect, device number 19 [ 259.792246][ T31] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 259.792271][ T31] usb 5-1: config 1 has no interface number 0 [ 259.792314][ T31] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 259.792338][ T31] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 259.792361][ T31] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.849870][ T31] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 259.849897][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.849914][ T31] usb 5-1: Product: syz [ 259.849927][ T31] usb 5-1: Manufacturer: syz [ 259.849941][ T31] usb 5-1: SerialNumber: syz [ 259.863709][ T9569] fido_id[9569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 259.911920][ T9563] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 260.134722][ T9563] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 260.391266][ T9579] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.391759][ T9579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.391774][ T9579] IPv6: NLM_F_CREATE should be set when creating new route [ 260.391888][ T9579] IPv6: NLM_F_CREATE should be set when creating new route [ 260.391925][ T9579] IPv6: NLM_F_CREATE should be set when creating new route [ 260.402718][ T9579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.455261][ T31] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 260.550119][ T31] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 260.550484][ T31] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 260.551803][ T31] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 260.551824][ T31] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 260.596811][ T31] usb 5-1: USB disconnect, device number 10 [ 260.657073][ T31] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 260.770075][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.770156][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.842130][ T31] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 260.866777][ T7149] udevd[7149]: setting mode of /dev/bus/usb/005/010 to 020664 failed: No such file or directory [ 260.867001][ T7149] udevd[7149]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 261.738614][ T5839] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 262.039754][ T3117] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 262.189574][ T3117] usb 2-1: Using ep0 maxpacket: 8 [ 262.193224][ T3117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.193266][ T3117] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 262.193301][ T3117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.242303][ T3117] usb 2-1: config 0 descriptor?? [ 262.708134][ T3117] mcp2221 0003:04D8:00DD.0026: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 262.936771][ T5888] usb 2-1: USB disconnect, device number 19 [ 262.978369][ T38] audit: type=1804 audit(1756217491.603:23): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1598" name="/newroot/336/cgroup.controllers" dev="tmpfs" ino=1715 res=1 errno=0 [ 263.022028][ T38] audit: type=1800 audit(1756217491.643:24): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1598" name="cgroup.controllers" dev="tmpfs" ino=1715 res=0 errno=0 [ 263.499265][ T3117] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 263.589324][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 263.649521][ T3117] usb 3-1: Using ep0 maxpacket: 16 [ 263.658373][ T3117] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 263.658404][ T3117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.658425][ T3117] usb 3-1: Product: syz [ 263.658440][ T3117] usb 3-1: Manufacturer: syz [ 263.658454][ T3117] usb 3-1: SerialNumber: syz [ 263.726928][ T3117] usb 3-1: config 0 descriptor?? [ 263.747270][ T3117] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.761134][ T45] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 263.761176][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.761196][ T45] usb 4-1: Product: syz [ 263.761210][ T45] usb 4-1: Manufacturer: syz [ 263.761224][ T45] usb 4-1: SerialNumber: syz [ 263.866495][ T45] usb 4-1: config 0 descriptor?? [ 263.919998][ T45] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 263.920023][ T45] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 263.920093][ T45] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 264.024869][ T3117] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 264.028681][ T3117] usb 3-1: USB disconnect, device number 19 [ 264.079297][ T5926] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 264.105778][ T9] usb 4-1: USB disconnect, device number 20 [ 264.241155][ T7122] udevd[7122]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.242336][ T5926] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 264.242366][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.242386][ T5926] usb 6-1: Product: syz [ 264.242401][ T5926] usb 6-1: Manufacturer: syz [ 264.242415][ T5926] usb 6-1: SerialNumber: syz [ 264.322569][ T5926] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 264.380203][ T5990] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 264.888058][ T3117] usb 6-1: USB disconnect, device number 10 [ 265.049647][ T31] IPVS: starting estimator thread 0... [ 265.053285][ T9690] IPVS: ip_vs_add_dest(): server weight less than zero [ 265.139486][ T9691] IPVS: using max 7 ests per chain, 16800 per kthread [ 265.563633][ T5990] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 265.563818][ T5990] ath9k_htc: Failed to initialize the device [ 265.590334][ T3117] usb 6-1: ath9k_htc: USB layer deinitialized [ 265.799354][ T5839] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 265.799675][ T5839] Bluetooth: hci4: Injecting HCI hardware error event [ 265.802935][ T59] Bluetooth: hci4: hardware error 0x00 [ 266.179399][ T5990] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 266.340969][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 266.343866][ T5990] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 266.343890][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.423264][ T5990] usb 4-1: config 0 descriptor?? [ 266.898209][ T5990] konepure 0003:1E7D:2DBE.0027: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 267.087934][ T45] usb 4-1: USB disconnect, device number 21 [ 267.959589][ T59] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 268.327816][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1661'. [ 268.559413][ T5990] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 268.709276][ T5990] usb 5-1: Using ep0 maxpacket: 32 [ 268.711752][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 268.711780][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 268.711805][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 268.711827][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 268.711871][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 268.714816][ T5990] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 268.714842][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.714860][ T5990] usb 5-1: Product: syz [ 268.714873][ T5990] usb 5-1: Manufacturer: syz [ 268.714886][ T5990] usb 5-1: SerialNumber: syz [ 268.745492][ T5990] usb 5-1: config 0 descriptor?? [ 268.798388][ T9792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1668'. [ 268.999977][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 269.205887][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.206370][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.206854][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.207300][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.207737][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.208171][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.208609][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.209042][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.213315][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.213802][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.214267][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.214747][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.215205][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.215725][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.216232][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.225583][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.228101][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.230341][ T5990] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 269.230404][ T5990] input input21: Timeout waiting for response from device. [ 269.249193][ T5990] usb 5-1: USB disconnect, device number 11 [ 269.261132][ T6004] udevd[6004]: setting mode of /dev/bus/usb/005/011 to 020664 failed: No such file or directory [ 269.261362][ T6004] udevd[6004]: setting owner of /dev/bus/usb/005/011 to uid=0, gid=0 failed: No such file or directory [ 271.050947][ T9853] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 271.142530][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 271.290975][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 271.303740][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 271.303797][ T5888] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 271.303821][ T5888] usb 5-1: Product: syz [ 271.303836][ T5888] usb 5-1: Manufacturer: syz [ 271.303854][ T5888] usb 5-1: SerialNumber: syz [ 271.332693][ T5888] usb 5-1: config 0 descriptor?? [ 271.361011][ T5888] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 271.529350][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 271.660212][ T9865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1704'. [ 271.682875][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 271.686011][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 271.686071][ T31] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 271.686097][ T31] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 271.686123][ T31] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 271.686146][ T31] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 271.686171][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 271.686206][ T31] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 271.686231][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.786525][ T31] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 271.809730][ T9865] erspan0: entered promiscuous mode [ 271.855566][ T9865] erspan0: left promiscuous mode [ 271.984143][ T5888] gspca_zc3xx: reg_w_i err -71 [ 271.984240][ T5888] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 271.997743][ T5888] usb 5-1: USB disconnect, device number 12 [ 272.060306][ T5923] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 272.062032][ T31] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 272.106341][ T31] usb 6-1: USB disconnect, device number 11 [ 272.216083][ T5923] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 272.216118][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.216140][ T5923] usb 4-1: Product: syz [ 272.216156][ T5923] usb 4-1: Manufacturer: syz [ 272.216171][ T5923] usb 4-1: SerialNumber: syz [ 272.287799][ T5923] usb 4-1: config 0 descriptor?? [ 272.308056][ T5923] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 272.422832][ T38] audit: type=1326 audit(1756217501.063:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 272.422890][ T38] audit: type=1326 audit(1756217501.083:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 272.422939][ T38] audit: type=1326 audit(1756217501.083:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 272.422986][ T38] audit: type=1326 audit(1756217501.083:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 272.423033][ T38] audit: type=1326 audit(1756217501.083:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 272.423300][ T38] audit: type=1326 audit(1756217501.083:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 272.424461][ T38] audit: type=1326 audit(1756217501.083:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 272.424511][ T38] audit: type=1326 audit(1756217501.083:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e9b5ebe9 code=0x7ffc0000 [ 272.727060][ T5923] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 272.947140][ T5926] usb 4-1: USB disconnect, device number 22 [ 272.979388][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 273.129266][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 273.131688][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.131720][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.131741][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 273.131782][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 273.131804][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.231000][ T31] usb 2-1: config 0 descriptor?? [ 273.671977][ T31] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 273.672013][ T31] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 273.672039][ T31] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 273.672064][ T31] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 273.722176][ T31] logitech 0003:046D:C293.0028: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 273.722217][ T31] logitech 0003:046D:C293.0028: no inputs found [ 273.876998][ T31] usb 2-1: USB disconnect, device number 20 [ 273.924587][ T9896] fido_id[9896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 274.919472][ T5888] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 274.981676][ T9930] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1730'. [ 275.073871][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.073917][ T5888] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 275.073940][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.091953][ T5888] usb 4-1: config 0 descriptor?? [ 275.209467][ T5990] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 275.374842][ T5990] usb 5-1: not running at top speed; connect to a high speed hub [ 275.377760][ T5990] usb 5-1: config 4 has an invalid interface number: 1 but max is 0 [ 275.377836][ T5990] usb 5-1: config 4 has no interface number 0 [ 275.377867][ T5990] usb 5-1: config 4 interface 1 has no altsetting 0 [ 275.397327][ T5990] usb 5-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice=42.23 [ 275.397422][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.397446][ T5990] usb 5-1: Product: syz [ 275.397460][ T5990] usb 5-1: Manufacturer: syz [ 275.397476][ T5990] usb 5-1: SerialNumber: syz [ 275.563393][ T5888] wacom 0003:056A:0016.0029: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 275.581974][ T5888] wacom 0003:056A:0016.0029: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.3-1/input0 [ 275.624906][ T5888] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0016.0029/input/input23 [ 275.769686][ T5926] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 275.811906][ T5990] ftdi_sio 5-1:4.1: FTDI USB Serial Device converter detected [ 275.824769][ T5990] ftdi_sio ttyUSB0: unknown device type: 0x4223 [ 275.955607][ T5990] usb 5-1: USB disconnect, device number 13 [ 275.959472][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 275.961802][ T5888] usb 4-1: USB disconnect, device number 23 [ 275.988798][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.988831][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.988872][ T5926] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 275.988896][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.016514][ T5990] ftdi_sio 5-1:4.1: device disconnected [ 276.076000][ T5926] usb 3-1: config 0 descriptor?? [ 276.405062][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 276.405099][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 276.544788][ T5926] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 276.544822][ T5926] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 276.544845][ T5926] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 276.544870][ T5926] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 276.544905][ T5926] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 276.544926][ T5926] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 276.612431][ T5926] hid-picolcd 0003:04D8:F002.002A: No report with id 0xf3 found [ 276.612453][ T5926] hid-picolcd 0003:04D8:F002.002A: No report with id 0xf4 found [ 276.732566][ T31] usb 3-1: USB disconnect, device number 20 [ 277.059381][ T5926] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 277.219383][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 277.224404][ T5926] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 277.227562][ T5926] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 277.227591][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 277.227613][ T5926] usb 4-1: Product: syz [ 277.227628][ T5926] usb 4-1: Manufacturer: syz [ 277.227642][ T5926] usb 4-1: SerialNumber: syz [ 277.297986][ T5926] usb 4-1: config 0 descriptor?? [ 277.298892][ T9960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.331259][ T5926] hub 4-1:0.0: bad descriptor, ignoring hub [ 277.331300][ T5926] hub 4-1:0.0: probe with driver hub failed with error -5 [ 277.619667][ T31] usb 4-1: USB disconnect, device number 24 [ 277.959626][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 278.030243][ T5925] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 278.109268][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 278.119942][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 278.143318][ T31] usb 4-1: string descriptor 0 read error: -22 [ 278.143590][ T31] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 278.143614][ T31] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 278.176514][ T31] usb 4-1: config 0 descriptor?? [ 278.177442][ T9960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.197629][ T31] hub 4-1:0.0: bad descriptor, ignoring hub [ 278.197667][ T31] hub 4-1:0.0: probe with driver hub failed with error -5 [ 278.212524][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 278.215370][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 278.222331][ T5925] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 278.222360][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.222386][ T5925] usb 2-1: Product: syz [ 278.222401][ T5925] usb 2-1: Manufacturer: syz [ 278.222416][ T5925] usb 2-1: SerialNumber: syz [ 278.272960][ T5925] usb 2-1: config 0 descriptor?? [ 278.276274][ T5925] hub 2-1:0.0: bad descriptor, ignoring hub [ 278.276313][ T5925] hub 2-1:0.0: probe with driver hub failed with error -5 [ 278.310555][ T5925] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 278.489619][ T31] usb 4-1: USB disconnect, device number 25 [ 278.748050][T10006] vlan4: entered promiscuous mode [ 278.748068][T10006] macvtap0: entered promiscuous mode [ 279.043602][ T5888] IPVS: starting estimator thread 0... [ 279.044414][T10011] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 279.072126][ T5923] usb 2-1: USB disconnect, device number 21 [ 279.139711][T10013] IPVS: using max 7 ests per chain, 16800 per kthread [ 279.329270][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 279.489730][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 279.492189][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.492218][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 279.492246][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.492280][ T31] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 279.492303][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.502295][ T31] usb 3-1: config 0 descriptor?? [ 279.994426][ T31] hid (null): unknown global tag 0xc [ 279.994451][ T31] hid (null): global environment stack underflow [ 280.031968][ T31] corsair-cpro 0003:1B1C:0C10.002B: unknown global tag 0xc [ 280.031992][ T31] corsair-cpro 0003:1B1C:0C10.002B: item 0 1 1 12 parsing failed [ 280.032919][ T31] corsair-cpro 0003:1B1C:0C10.002B: probe with driver corsair-cpro failed with error -22 [ 280.239610][ T5888] usb 3-1: USB disconnect, device number 21 [ 280.409324][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 280.561648][ T31] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.561682][ T31] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.561710][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.561743][ T31] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 280.561765][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.575553][ T31] usb 5-1: config 0 descriptor?? [ 280.629805][T10051] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1785'. [ 280.629892][T10051] netlink: zone id is out of range [ 280.629936][T10051] netlink: get zone limit has 8 unknown bytes [ 281.057519][ T31] itetech 0003:06CB:73F6.002C: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.4-1/input0 [ 281.180877][ T38] audit: type=1400 audit(1756217509.833:33): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10065 comm="syz.1.1790" src=1 dest=20000 netif=wpan0 [ 281.248289][ T5888] usb 5-1: USB disconnect, device number 14 [ 281.624377][T10073] fido_id[10073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 282.489444][ T5926] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 282.662882][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.662917][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.662956][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 282.662980][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.721570][ T5926] usb 6-1: config 0 descriptor?? [ 282.959511][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 283.109384][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 283.128560][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.128594][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.128636][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 283.128660][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.158935][ T31] usb 5-1: config 0 descriptor?? [ 283.195759][ T31] hub 5-1:0.0: USB hub found [ 283.392696][ T31] hub 5-1:0.0: 1 port detected [ 283.438945][ T5926] usb 6-1: USB disconnect, device number 12 [ 283.599931][ T31] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 283.599957][ T31] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 283.648046][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 283.648186][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 283.714982][ T31] usb 5-1: USB disconnect, device number 15 [ 283.763835][T10136] [U]  [ 283.763884][T10136] [U] K{‘ [ 283.764388][T10136] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 283.789791][T10136] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 283.790831][T10136] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 283.794944][T10136] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 283.821254][T10136] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 283.822294][T10136] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 283.836542][T10136] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 283.860153][T10136] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 283.961005][T10136] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 283.962224][T10136] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 283.962419][T10136] [U] 22½“Æ©ÐÛ©X?0;3U± [ 283.966355][T10136] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 283.967213][T10136] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 283.967897][T10136] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 283.968293][T10136] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 284.132527][T10136] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 284.132595][T10136] [U] ¹ EC [ 284.133706][T10136] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 284.175935][T10134] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 284.719603][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 284.873859][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.873894][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 284.873935][ T45] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 284.873960][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.888782][ T45] usb 5-1: config 0 descriptor?? [ 284.929610][ T5923] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 285.082581][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 285.086089][ T5923] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 285.086117][ T5923] usb 6-1: config 0 has no interface number 0 [ 285.086216][ T5923] usb 6-1: config 0 interface 184 has no altsetting 0 [ 285.104202][ T5923] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 285.104237][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.104261][ T5923] usb 6-1: Product: syz [ 285.104341][ T5923] usb 6-1: Manufacturer: syz [ 285.104359][ T5923] usb 6-1: SerialNumber: syz [ 285.130034][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 285.222926][ T5923] usb 6-1: config 0 descriptor?? [ 285.292960][ T5923] smsc75xx v1.0.0 [ 285.292980][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 285.308818][ T5923] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 285.339335][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.339370][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.340165][ T31] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 285.340192][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.465238][ T5923] usb 6-1: USB disconnect, device number 13 [ 285.581420][ T31] usb 3-1: config 0 descriptor?? [ 285.616550][ T45] input: HID 28bd:0934 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0934.002E/input/input27 [ 285.785693][ T45] uclogic 0003:28BD:0934.002E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.4-1/input0 [ 285.918000][ T45] usb 5-1: USB disconnect, device number 16 [ 286.077966][ T31] aquacomputer_d5next 0003:0C70:F00D.002F: hidraw1: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.2-1/input0 [ 286.103704][T10178] fido_id[10178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 286.322405][ T31] usb 3-1: USB disconnect, device number 22 [ 286.989687][ T5926] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 287.139294][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 287.157825][ T5926] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.157862][ T5926] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.157887][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 287.157924][ T5926] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 287.157949][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.226663][ T5926] usb 4-1: config 0 descriptor?? [ 287.249323][ T31] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 287.402202][ T31] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 287.402233][ T31] usb 3-1: config 0 has no interface number 0 [ 287.402281][ T31] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.402307][ T31] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 287.402336][ T31] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 287.402363][ T31] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 287.402391][ T31] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 287.402418][ T31] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.402463][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 287.402488][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.435275][ T31] usb 3-1: config 0 descriptor?? [ 287.436839][T10204] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 287.437080][T10204] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 287.528228][ T31] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 287.728470][ T31] usb 3-1: USB disconnect, device number 23 [ 287.781690][ T31] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 287.788272][ T5926] holtek_kbd 0003:04D9:A055.0030: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 287.859468][ T45] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 287.979479][ T5923] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 288.013864][ T45] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 288.013894][ T45] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 288.013914][ T45] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 288.013930][ T45] usb 5-1: config 8 has no interface number 0 [ 288.014437][ T45] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 288.014455][ T45] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.016837][ T45] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 288.016860][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.016874][ T45] usb 5-1: Product: syz [ 288.016884][ T45] usb 5-1: Manufacturer: syz [ 288.016893][ T45] usb 5-1: SerialNumber: syz [ 288.090213][ T5924] usb 4-1: USB disconnect, device number 26 [ 288.131729][ T5923] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 288.131790][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 288.131819][ T5923] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.131846][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 288.131872][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 288.135481][ T5923] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 288.135542][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 288.135575][ T5923] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.135602][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 288.135630][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 288.137030][ T5923] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 288.137089][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 288.137118][ T5923] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.137155][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 288.137181][ T5923] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 288.174882][ T5923] usb 2-1: string descriptor 0 read error: -22 [ 288.175469][ T5923] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 288.175499][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.380183][ T5923] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 288.458611][ T45] usb 5-1: USB disconnect, device number 17 [ 289.719383][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 289.789404][ T5926] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 289.871895][ T31] usb 4-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 289.871928][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.878989][ T31] usb 4-1: config 0 descriptor?? [ 289.949523][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 289.952323][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.952354][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.952394][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 289.952419][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.009828][ T5926] usb 3-1: config 0 descriptor?? [ 290.024798][ T5926] hub 3-1:0.0: USB hub found [ 290.239395][ T5926] hub 3-1:0.0: 1 port detected [ 290.527875][ T31] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 290.527907][ T31] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 290.604884][ T45] usb 2-1: USB disconnect, device number 22 [ 290.680228][ T31] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 290.680250][ T31] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 290.718538][ T5926] usb 3-1: USB disconnect, device number 24 [ 290.942976][ T31] asix 4-1:0.0 eth5: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 290.954958][ T31] usb 4-1: USB disconnect, device number 27 [ 290.957478][ T31] asix 4-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 291.189321][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 291.349911][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 291.358290][ T45] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 291.358318][ T45] usb 2-1: config 0 has no interface number 0 [ 291.358368][ T45] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.358395][ T45] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 291.366558][ T45] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 291.366592][ T45] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 291.366615][ T45] usb 2-1: Product: syz [ 291.366633][ T45] usb 2-1: SerialNumber: syz [ 291.384147][ T45] usb 2-1: config 0 descriptor?? [ 291.409028][ T45] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 291.428587][ T45] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input28 [ 291.618433][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.621061][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.621320][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.621582][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.621828][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.622386][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.622654][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.622908][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.623184][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.623424][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.847057][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 291.859705][ T45] usb 2-1: USB disconnect, device number 23 [ 291.935411][ T45] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 292.339258][ T38] audit: type=1326 audit(1756217520.993:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10307 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8084eebe9 code=0x7ffc0000 [ 292.339319][ T38] audit: type=1326 audit(1756217520.993:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10307 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8084eebe9 code=0x7ffc0000 [ 292.340064][ T38] audit: type=1326 audit(1756217521.003:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10307 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc8084eebe9 code=0x7ffc0000 [ 292.340114][ T38] audit: type=1326 audit(1756217521.003:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10307 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8084eebe9 code=0x7ffc0000 [ 292.340155][ T38] audit: type=1326 audit(1756217521.003:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10307 comm="syz.2.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8084eebe9 code=0x7ffc0000 [ 293.110294][T10333] Invalid source name [ 293.110312][T10333] UBIFS error (pid: 10333): cannot open "usrquota", error -22 [ 294.147474][T10367] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.384999][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 294.539491][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 294.542495][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.542521][ T31] usb 4-1: config 0 has no interface number 0 [ 294.546277][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 294.546305][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.546327][ T31] usb 4-1: Product: syz [ 294.546341][ T31] usb 4-1: Manufacturer: syz [ 294.546357][ T31] usb 4-1: SerialNumber: syz [ 294.641874][ T31] usb 4-1: config 0 descriptor?? [ 294.657856][T10377] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 294.686869][ T31] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 294.686901][ T31] usb 4-1: selecting invalid altsetting 1 [ 294.686917][ T31] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 294.714833][ T31] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 294.715257][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 294.715313][ T31] usb 4-1: media controller created [ 294.884906][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.089419][ T31] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 295.089473][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 295.089950][ T31] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 295.324861][ T31] usb 4-1: USB disconnect, device number 28 [ 295.366444][T10391] netlink: 'syz.4.1935': attribute type 11 has an invalid length. [ 295.716853][T10403] netlink: 'syz.5.1940': attribute type 10 has an invalid length. [ 295.783090][T10403] team0: Port device syz_tun added [ 296.110011][ T5888] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 296.270215][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 296.273958][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.274021][ T5888] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.275530][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.275556][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 296.275579][ T5888] usb 6-1: SerialNumber: syz [ 296.352373][ T5888] cdc_acm 6-1:1.0: skipping garbage [ 296.352395][ T5888] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 296.352422][ T5888] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 296.352460][ T5888] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 296.570407][ T31] usb 6-1: USB disconnect, device number 14 [ 296.929875][ T38] audit: type=1326 audit(1756217525.593:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10434 comm="syz.1.1954" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45e9b5ebe9 code=0x0 [ 297.338434][T10448] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1973'. [ 297.544604][T10454] netlink: 'syz.2.1965': attribute type 3 has an invalid length. [ 297.891507][T10463] sp0: Synchronizing with TNC [ 298.039046][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 298.039092][T10470] netlink: 'syz.2.1974': attribute type 7 has an invalid length. [ 298.473060][T10481] netlink: 'syz.2.1979': attribute type 12 has an invalid length. [ 298.473093][T10481] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1979'. [ 299.279232][ T5888] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 299.440780][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 299.444327][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.444355][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.444389][ T5888] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 299.444410][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.517392][ T5888] usb 3-1: config 0 descriptor?? [ 299.944863][T10516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1997'. [ 299.980197][ T5888] gt683r_led 0003:1770:FF00.0031: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 300.172935][ T5888] usb 3-1: USB disconnect, device number 25 [ 300.202717][ T5926] gt683r_led 0003:1770:FF00.0031: failed to send set report request: -19 [ 300.210681][ T38] audit: type=1400 audit(1756217528.863:40): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10520 comm="syz.1.2000" src=1 dest=20000 netif=wpan0 [ 300.246935][ T5926] gt683r_led 0003:1770:FF00.0031: failed to send set report request: -19 [ 300.381159][T10522] fido_id[10522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 301.829427][ T5925] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 301.982069][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.982101][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.982147][ T5925] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 301.982171][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.035378][ T5925] usb 4-1: config 0 descriptor?? [ 302.213499][ T38] audit: type=1326 audit(1756217530.873:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10576 comm="syz.5.2025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f331aedebe9 code=0x0 [ 302.481269][ T5925] hid_parser_main: 5 callbacks suppressed [ 302.481293][ T5925] logitech 0003:046D:C29C.0032: unknown main item tag 0x0 [ 302.481324][ T5925] logitech 0003:046D:C29C.0032: unknown main item tag 0x0 [ 302.526220][ T5925] logitech 0003:046D:C29C.0032: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 302.670095][ T5925] logitech 0003:046D:C29C.0032: no inputs found [ 302.714236][ T5925] usb 4-1: USB disconnect, device number 29 [ 302.870963][T10590] fido_id[10590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 303.474472][T10608] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2037'. [ 303.474494][T10608] tc_dump_action: action bad kind [ 303.787351][ T38] audit: type=1800 audit(1756217532.413:42): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2040" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 305.271324][ T38] audit: type=1326 audit(1756217533.923:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10639 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073955ebe9 code=0x7fc00000 [ 305.329984][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 305.330011][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2062'. [ 306.059249][ T5924] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 306.231334][T10692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.232133][ T5924] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 306.232184][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 306.232210][ T5924] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.232234][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 306.232258][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 306.233581][ T5924] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 306.233630][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 306.233656][ T5924] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.233681][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 306.233706][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 306.234811][ T5924] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 306.234879][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 306.234905][ T5924] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.235036][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 306.235064][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 306.238621][ T5924] usb 4-1: string descriptor 0 read error: -22 [ 306.238761][ T5924] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 306.238784][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.347561][ T5924] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 306.522229][ T5924] usb 4-1: USB disconnect, device number 30 [ 307.295967][T10714] team_slave_0: entered promiscuous mode [ 307.296107][T10714] team_slave_1: entered promiscuous mode [ 307.296345][T10714] macsec1: entered promiscuous mode [ 307.296356][T10714] team0: entered promiscuous mode [ 307.296947][T10714] macsec1: entered allmulticast mode [ 307.296962][T10714] team0: entered allmulticast mode [ 307.296974][T10714] team_slave_0: entered allmulticast mode [ 307.296997][T10714] team_slave_1: entered allmulticast mode [ 307.298750][T10714] team0: Device macsec1 is already an upper device of the team interface [ 307.377577][T10714] team0: left allmulticast mode [ 307.377599][T10714] team_slave_0: left allmulticast mode [ 307.377622][T10714] team_slave_1: left allmulticast mode [ 307.377672][T10714] team0: left promiscuous mode [ 307.380568][T10714] team_slave_0: left promiscuous mode [ 307.380654][T10714] team_slave_1: left promiscuous mode [ 307.707375][T10722] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2088'. [ 307.777612][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2089'. [ 307.777637][T10724] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2089'. [ 308.343583][T10741] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 308.369640][T10741] [U] J"—E:ÀÆ" [ 309.299282][ T5888] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 309.462547][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 309.465316][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.465344][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.468852][ T5888] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 309.468877][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 309.468897][ T5888] usb 2-1: Product: syz [ 309.468910][ T5888] usb 2-1: Manufacturer: syz [ 309.468924][ T5888] usb 2-1: SerialNumber: syz [ 309.568405][ T5888] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input29 [ 309.590030][ T5926] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 309.742589][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.742653][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 309.742676][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.789582][ T5926] usb 6-1: config 0 descriptor?? [ 309.846985][ T31] usb 2-1: USB disconnect, device number 24 [ 309.847082][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 309.864028][ T38] audit: type=1326 audit(1756217538.523:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073955ebe9 code=0x7ffc0000 [ 309.879248][ T38] audit: type=1326 audit(1756217538.533:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073955ebe9 code=0x7ffc0000 [ 309.894906][ T38] audit: type=1326 audit(1756217538.553:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f073955ebe9 code=0x7ffc0000 [ 309.911276][ T38] audit: type=1326 audit(1756217538.553:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073955ebe9 code=0x7ffc0000 [ 309.911326][ T38] audit: type=1326 audit(1756217538.573:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f073955ebe9 code=0x7ffc0000 [ 309.911370][ T38] audit: type=1326 audit(1756217538.573:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10787 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073955ebe9 code=0x7ffc0000 [ 310.061655][ T31] appletouch 2-1:1.0: input: appletouch disconnected [ 310.249853][ T5926] logitech 0003:046D:C295.0033: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.5-1/input0 [ 310.249888][ T5926] logitech 0003:046D:C295.0033: no inputs found [ 310.350717][ T45] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 310.428408][ T31] usb 6-1: USB disconnect, device number 15 [ 310.502564][ T45] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.502591][ T45] usb 3-1: config 0 has no interface number 0 [ 310.502635][ T45] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 310.502658][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.532778][ T45] usb 3-1: config 0 descriptor?? [ 310.574709][ T45] usb 3-1: selecting invalid altsetting 1 [ 310.574866][ T45] dvb_ttusb_budget: ttusb_init_controller: error [ 310.574880][ T45] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 310.655792][T10803] netlink: 'syz.1.2127': attribute type 32 has an invalid length. [ 310.655816][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 310.656298][T10803] (unnamed net_device) (uninitialized): option coupled_control: invalid value (98) [ 310.807350][ T45] DVB: Unable to find symbol cx22700_attach() [ 310.946207][ T45] DVB: Unable to find symbol tda10046_attach() [ 310.946223][ T45] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 310.965616][ T45] usb 3-1: USB disconnect, device number 26 [ 311.027272][ T38] audit: type=1326 audit(1756217539.683:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9dd7ebe9 code=0x7ffc0000 [ 311.029643][ T38] audit: type=1326 audit(1756217539.683:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0b9dd7ebe9 code=0x7ffc0000 [ 311.029711][ T38] audit: type=1326 audit(1756217539.683:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9dd7ebe9 code=0x7ffc0000 [ 311.029761][ T38] audit: type=1326 audit(1756217539.683:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9dd7ebe9 code=0x7ffc0000 [ 311.029814][ T38] audit: type=1326 audit(1756217539.683:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f0b9dd7ebe9 code=0x7ffc0000 [ 311.029863][ T38] audit: type=1326 audit(1756217539.683:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9dd7ebe9 code=0x7ffc0000 [ 311.029913][ T38] audit: type=1326 audit(1756217539.683:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9dd7ebe9 code=0x7ffc0000 [ 312.869246][ T5926] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 313.050411][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 313.052781][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.052812][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.052835][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 313.052878][ T5926] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 313.052902][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.121399][ T5926] usb 2-1: config 0 descriptor?? [ 313.580254][ T5926] lg-g15 0003:046D:C227.0034: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.1-1/input0 [ 313.758008][ T5926] usb 2-1: USB disconnect, device number 25 [ 313.771347][ T38] audit: type=1326 audit(1756217542.423:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10874 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9dd7ebe9 code=0x7fc00000 [ 313.771418][ T38] audit: type=1326 audit(1756217542.423:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10874 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b9dd7ebe9 code=0x7fc00000 [ 313.771488][ T38] audit: type=1326 audit(1756217542.423:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10874 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9dd7ebe9 code=0x7fc00000 [ 313.892040][T10873] fido_id[10873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 314.339416][ T5926] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 314.501742][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.501779][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.501803][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.501846][ T5926] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 314.501870][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.507503][ T5926] usb 5-1: config 0 descriptor?? [ 314.975564][T10907] syz.2.2173 (10907) used obsolete PPPIOCDETACH ioctl [ 314.987129][ T5926] ryos 0003:1E7D:3232.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0 [ 315.149979][ T31] usb 5-1: USB disconnect, device number 18 [ 315.679229][ T5926] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 315.831585][ T5926] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.831621][ T5926] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 315.831648][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 315.831680][ T5926] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 315.831702][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.888540][ T5926] usb 6-1: config 0 descriptor?? [ 315.889949][T10920] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 315.922916][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2188'. [ 315.929347][ T5923] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 316.089287][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 316.091868][ T5923] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 316.091892][ T5923] usb 2-1: config 0 has no interface number 0 [ 316.122136][ T5923] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 316.122184][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.122205][ T5923] usb 2-1: Product: syz [ 316.122219][ T5923] usb 2-1: Manufacturer: syz [ 316.122233][ T5923] usb 2-1: SerialNumber: syz [ 316.146169][ T5923] usb 2-1: config 0 descriptor?? [ 316.164537][ T5923] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 316.325096][ T5926] uclogic 0003:28BD:0074.0036: interface is invalid, ignoring [ 316.420966][ T5923] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 316.480515][ T5923] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 316.559543][ T31] usb 6-1: USB disconnect, device number 16 [ 316.587748][T10945] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2193'. [ 316.587775][T10945] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2193'. [ 316.772959][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 316.783410][ T5926] usb 2-1: USB disconnect, device number 26 [ 316.835506][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 316.887136][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 316.888135][ T5926] quatech2 2-1:0.51: device disconnected [ 317.583869][T10964] sp0: Synchronizing with TNC [ 318.841727][ T5839] Bluetooth: hci0: command 0x0405 tx timeout [ 319.320795][ T5926] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 319.501984][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.502034][ T5926] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 319.502058][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.555075][ T5926] usb 2-1: config 0 descriptor?? [ 320.021706][ T5926] nintendo 0003:057E:200E.0037: unbalanced collection at end of report description [ 320.022579][ T5926] nintendo 0003:057E:200E.0037: HID parse failed [ 320.040357][ T5926] nintendo 0003:057E:200E.0037: probe - fail = -22 [ 320.040479][ T5926] nintendo 0003:057E:200E.0037: probe with driver nintendo failed with error -22 [ 320.208788][ T5926] usb 2-1: USB disconnect, device number 27 [ 322.211453][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.211525][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.930670][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.981186][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.982548][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.983770][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.984962][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.400227][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.428926][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.437688][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.438948][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.456610][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.321210][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.351885][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.353239][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.354560][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.355342][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.089535][ T59] Bluetooth: hci5: command tx timeout [ 337.560172][ T59] Bluetooth: hci6: command tx timeout [ 337.708493][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 337.727825][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 337.736468][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 337.737841][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 337.754580][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 337.852215][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 337.873294][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 337.878460][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 337.905901][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 337.906788][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 338.439363][ T59] Bluetooth: hci7: command tx timeout [ 339.164016][ T59] Bluetooth: hci5: command tx timeout [ 339.639343][ T59] Bluetooth: hci6: command tx timeout [ 339.801988][ T59] Bluetooth: hci8: command tx timeout [ 340.055763][ T59] Bluetooth: hci9: command tx timeout [ 340.298632][ T45] sched: DL replenish lagged too much [ 340.519371][ T59] Bluetooth: hci7: command tx timeout [ 341.239331][ T59] Bluetooth: hci5: command tx timeout [ 341.719477][ T59] Bluetooth: hci6: command tx timeout [ 341.889349][ T59] Bluetooth: hci8: command tx timeout [ 342.129760][ T59] Bluetooth: hci9: command tx timeout [ 342.601004][ T59] Bluetooth: hci7: command tx timeout [ 343.319311][ T59] Bluetooth: hci5: command tx timeout [ 343.799491][ T59] Bluetooth: hci6: command tx timeout [ 343.959468][ T59] Bluetooth: hci8: command tx timeout [ 344.199313][ T59] Bluetooth: hci9: command tx timeout [ 344.695266][ T59] Bluetooth: hci7: command tx timeout [ 344.964036][T11024] chnl_net:caif_netlink_parms(): no params data found [ 345.054870][T11033] chnl_net:caif_netlink_parms(): no params data found [ 346.049611][ T59] Bluetooth: hci8: command tx timeout [ 346.279328][ T59] Bluetooth: hci9: command tx timeout [ 383.655050][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.655136][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.600871][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 395.624938][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 395.626869][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 395.628306][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 395.652550][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.794711][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.818680][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.856926][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.875289][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.876131][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 397.799720][ T5157] Bluetooth: hci0: command tx timeout [ 397.817504][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.859719][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.861368][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.863119][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.863910][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.969309][ T5839] Bluetooth: hci3: command tx timeout [ 398.045276][ T5157] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 398.071449][ T5157] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 398.072653][ T5157] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 398.074251][ T5157] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 398.078734][ T5157] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 398.445560][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 398.467852][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 398.478531][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 398.490213][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 398.499990][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 399.889342][ T5839] Bluetooth: hci0: command tx timeout [ 399.961450][ T5839] Bluetooth: hci4: command tx timeout [ 400.039401][ T5839] Bluetooth: hci3: command tx timeout [ 400.199356][ T5839] Bluetooth: hci10: command tx timeout [ 400.612395][ T5839] Bluetooth: hci11: command tx timeout [ 401.959473][ T5839] Bluetooth: hci0: command tx timeout [ 402.039941][ T5839] Bluetooth: hci4: command tx timeout [ 402.119979][ T5839] Bluetooth: hci3: command tx timeout [ 402.279276][ T5839] Bluetooth: hci10: command tx timeout [ 402.679533][ T5839] Bluetooth: hci11: command tx timeout [ 404.039443][ T5839] Bluetooth: hci0: command tx timeout [ 404.119950][ T5839] Bluetooth: hci4: command tx timeout [ 404.199382][ T5839] Bluetooth: hci3: command tx timeout [ 404.369577][ T5839] Bluetooth: hci10: command tx timeout [ 404.759626][ T5839] Bluetooth: hci11: command tx timeout [ 406.203203][ T5839] Bluetooth: hci4: command tx timeout [ 406.439988][ T5839] Bluetooth: hci10: command tx timeout [ 406.839581][ T5839] Bluetooth: hci11: command tx timeout [ 445.107354][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.107429][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.479020][T11024] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 447.656461][T11038] chnl_net:caif_netlink_parms(): no params data found [ 447.705055][T11033] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 456.240445][ T5157] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 456.273185][ T5157] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 456.275058][ T5157] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 456.276430][ T5157] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 456.277289][ T5157] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 456.550763][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 456.579468][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 456.580983][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 456.583473][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 456.584327][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 457.735045][ T8425] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 457.755329][ T8425] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 457.756620][ T8425] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 457.758150][ T8425] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 457.790754][ T8425] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 458.593913][ T5851] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 458.629530][ T5851] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 458.632409][ T5851] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 458.633583][ T5851] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 458.634355][ T5851] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 458.904789][T11121] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 458.925298][T11121] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 458.928409][T11121] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 458.944450][T11121] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 458.945657][T11121] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 474.519532][ T39] INFO: task syz.2.2218:11001 blocked for more than 143 seconds. [ 474.519585][ T39] Not tainted syzkaller #0 [ 474.519596][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.519612][ T39] task:syz.2.2218 state:D stack:28392 pid:11001 tgid:10999 ppid:5844 task_flags:0x400040 flags:0x00004004 [ 474.519696][ T39] Call Trace: [ 474.519704][ T39] [ 474.519719][ T39] __schedule+0x16f3/0x4c20 [ 474.519811][ T39] ? __pfx___schedule+0x10/0x10 [ 474.519865][ T39] rt_mutex_schedule+0x77/0xf0 [ 474.519887][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 474.519923][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 474.519950][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 474.519974][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 474.519998][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 474.520017][ T39] ? __lock_acquire+0xab9/0xd20 [ 474.520058][ T39] ? genl_rcv_msg+0x10d/0x790 [ 474.520105][ T39] ? genl_rcv_msg+0x10d/0x790 [ 474.520134][ T39] mutex_lock_nested+0x16a/0x1d0 [ 474.520154][ T39] ? __pfx_stack_trace_save+0x10/0x10 [ 474.520175][ T39] ? radix_tree_lookup+0x243/0x290 [ 474.520204][ T39] genl_rcv_msg+0x10d/0x790 [ 474.520240][ T39] ? __lock_acquire+0xab9/0xd20 [ 474.520268][ T39] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.520304][ T39] ? __lock_acquire+0xab9/0xd20 [ 474.520338][ T39] netlink_rcv_skb+0x208/0x470 [ 474.520382][ T39] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.520433][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.520478][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.520505][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.520536][ T39] genl_rcv+0x28/0x40 [ 474.520568][ T39] netlink_unicast+0x846/0xa10 [ 474.520603][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 474.520630][ T39] ? netlink_sendmsg+0x642/0xb30 [ 474.520655][ T39] ? skb_put+0x11b/0x210 [ 474.520690][ T39] netlink_sendmsg+0x805/0xb30 [ 474.520737][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.520774][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.520808][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.520837][ T39] __sock_sendmsg+0x21c/0x270 [ 474.520865][ T39] __sys_sendto+0x3c7/0x520 [ 474.520897][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 474.520961][ T39] ? exc_page_fault+0x76/0xf0 [ 474.520994][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 474.521027][ [ 474.521027][ T39] __x64_sys_sendto+0xde/0x100 [ 474.521061][ T39] do_syscall_64+0xfa/0x3b0 [ 474.521090][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.521117][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.521140][ T39] ? clear_bhb_loop+0x60/0xb0 [ 474.521167][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.521196][ T39] RIP: 0033:0x7fc8084f0a7c [ 474.521219][ T39] RSP: 002b:00007fc80674cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 474.521242][ T39] RAX: ffffffffffffffda RBX: 00007fc80674cfc0 RCX: 00007fc8084f0a7c [ 474.521259][ T39] RDX: 0000000000000020 RSI: 00007fc80674d010 RDI: 0000000000000004 [ 474.521275][ T39] RBP: 0000000000000000 R08: 00007fc80674cf14 R09: 000000000000000c [ 474.521290][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 474.521304][ T39] R13: 00007fc80674cf68 R14: 00007fc80674d010 R15: 0000000000000000 [ 474.521339][ T39] [ 474.521378][ T39] [ 474.521378][ T39] Showing all locks held in the system: [ 474.521387][ T39] 3 locks held by kworker/0:0/9: [ 474.521401][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.521462][ T39] #1: ffffc900000e7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.521520][ T39] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 474.521578][ T39] 3 locks held by kworker/u8:0/12: [ 474.521603][ T39] #0: ffff88814d203138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.521658][ T39] #1: ffffc90000117bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.521714][ T39] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 474.521809][ T39] 6 locks held by ktimers/1/29: [ 474.521821][ T39] 2 locks held by ksoftirqd/1/30: [ 474.521834][ T39] 4 locks held by kworker/1:0/31: [ 474.521846][ T39] #0: ffff888028285538 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.521908][ T39] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.521985][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.522042][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.522100][ T39] 1 lock held by khungtaskd/39: [ 474.522112][ T39] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 474.522165][ T39] 4 locks held by kworker/u9:0/59: [ 474.522177][ T39] #0: ffff888049f17938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.522239][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.522301][ T39] #2: ffff888070b980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 474.522355][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 474.522415][ T39] 3 locks held by kworker/u8:10/1185: [ 474.522427][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.522485][ T39] #1: ffffc90004f0fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.522542][ T39] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 474.522615][ T39] 4 locks held by kworker/1:2/3117: [ 474.522628][ T39] #0: ffff8880599c7938 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.522690][ T39] #1: ffffc9000cff7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.522768][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.522833][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.522891][ T39] 4 locks held by kworker/u9:1/5157: [ 474.522904][ T39] #0: ffff888067b1a938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.522965][ T39] #1: ffffc9000fb7fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.523022][ T39] #2: ffff888027a480a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 474.523073][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 474.523125][ T39] 2 locks held by getty/5600: [ 474.523137][ T39] #0: ffff88823bf628a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.523199][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 474.523252][ T39] 4 locks held by kworker/u9:2/5839: [ 474.523264][ T39] #0: ffff888030a37938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.523325][ T39] #1: ffffc90004b1fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.523382][ T39] #2: ffff88806b5000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 474.523433][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 474.523484][ T39] 4 locks held by kworker/u9:4/5851: [ 474.523497][ T39] #0: ffff888037932938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.523558][ T39] #1: ffffc90004bdfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.523614][ T39] #2: ffff88808b7580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 474.523665][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 474.523719][ T39] 4 locks held by kworker/1:4/5903: [ 474.523732][ T39] #0: ffff8880599b7d38 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.523801][ T39] #1: ffffc90004e5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.523884][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.523940][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.523998][ T39] 2 locks held by kworker/1:5/5923: [ 474.524011][ T39] 4 locks held by kworker/1:6/5924: [ 474.524024][ T39] #0: ffff888024655938 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.524087][ T39] #1: ffffc900050bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.524165][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.524221][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.524278][ T39] 3 locks held by kworker/0:5/5926: [ 474.524291][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.524346][ T39] #1: ffffc900050ffbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.524402][ T39] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 474.524466][ T39] 4 locks held by kworker/u9:5/8425: [ 474.524479][ T39] #0: ffff88808445c938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.524541][ T39] #1: ffffc9001bd6fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.524598][ T39] #2: ffff88808416c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 474.524650][ T39] #3: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 474.524701][ T39] 3 locks held by syz.4.2211/10986: [ 474.524713][ T39] #0: ffffffff8ed37f40 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.524772][ T39] #1: ffffffff8ed37d38 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.524841][ T39] #2: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 474.524893][ T39] 1 lock held by syz.3.2217/10997: [ 474.524906][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 474.524959][ T39] 2 locks held by syz.2.2218/11001: [ 474.524971][ T39] #0: ffffffff8ed37f40 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.525029][ T39] #1: ffffffff8ed37d38 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.525090][ T39] 1 lock held by syz.5.2224/11016: [ 474.525103][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 474.525158][ T39] 1 lock held by syz.1.2225/11019: [ 474.525171][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 474.525222][ T39] 4 locks held by kworker/1:8/11020: [ 474.525235][ T39] #0: ffff8880596fa138 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.525297][ T39] #1: ffffc90012eafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.525375][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.525431][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.525489][ T39] 2 locks held by syz-executor/11024: [ 474.525502][ T39] #0: ffff88803d238e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 474.525553][ T39] #1: ffff88803d2380a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 474.525608][ T39] 4 locks held by syz-executor/11030: [ 474.525621][ T39] #0: ffff888039dfce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 474.525672][ T39] #1: ffff888039dfc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 474.525727][ T39] #2: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 474.525794][ T39] #3: ffff888028715358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 474.525858][ T39] 3 locks held by syz-executor/11033: [ 474.525871][ T39] #0: ffff888067284e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 474.525921][ T39] #1: ffff8880672840a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 474.525975][ T39] #2: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 474.526036][ T39] 3 locks held by syz-executor/11036: [ 474.526049][ T39] #0: ffff88803e3d8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 474.526100][ T39] #1: ffff88803e3d80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 474.526155][ T39] #2: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 474.526215][ T39] 3 locks held by syz-executor/11038: [ 474.526227][ T39] #0: ffff888038578e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 474.526278][ T39] #1: ffff8880385780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 474.526333][ T39] #2: ffffffff8ee39838 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 474.526396][ T39] 4 locks held by kworker/1:10/11061: [ 474.526408][ T39] #0: ffff8880599c4138 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.526471][ T39] #1: ffffc90012fafbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.526528][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.526578][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.526635][ T39] 4 locks held by kworker/1:11/11066: [ 474.526648][ T39] #0: ffff888028284138 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.526710][ T39] #1: ffffc90003ba7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.526796][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.526853][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.526909][ T39] 4 locks held by kworker/1:12/11067: [ 474.526922][ T39] #0: ffff88805bd99138 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.526986][ T39] #1: ffffc9001bbdfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.527065][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.527121][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.527179][ T39] 1 lock held by syz-executor/11071: [ 474.527192][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.527254][ T39] 1 lock held by syz-executor/11074: [ 474.527267][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.527329][ T39] 1 lock held by syz-executor/11081: [ 474.527342][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.527404][ T39] 1 lock held by syz-executor/11083: [ 474.527417][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.527478][ T39] 1 lock held by syz-executor/11085: [ 474.527490][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.527552][ T39] 4 locks held by kworker/1:13/11087: [ 474.527565][ T39] #0: ffff888036cc9538 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.527635][ T39] #1: ffffc9000af4fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.527718][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 474.527789][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 474.527863][ T39] 2 locks held by kworker/0:1/11097: [ 474.527876][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.527933][ T39] #1: ffffc9000510fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.527989][ T39] 3 locks held by kworker/0:2/11098: [ 474.528001][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.528069][ T39] #1: ffffc90004837bc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.528123][ T39] #2: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 474.528199][ T39] 1 lock held by syz-executor/11107: [ 474.528212][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.528273][ T39] 1 lock held by syz-executor/11111: [ 474.528286][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.528346][ T39] 1 lock held by syz-executor/11115: [ 474.528359][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.528420][ T39] 1 lock held by syz-executor/11117: [ 474.528433][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.528494][ T39] 1 lock held by syz-executor/11119: [ 474.528506][ T39] #0: ffffffff8ecd1f38 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 474.528568][ T39] 1 lock held by dhcpcd/11122: [ 474.528580][ T39] #0: ffff88805d118350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 474.528633][ T39] 1 lock held by dhcpcd/11123: [ 474.528644][ T39] #0: ffff88805cdfa350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 474.528697][ T39] 1 lock held by dhcpcd/11124: [ 474.528708][ T39] #0: ffff8880600e0350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 474.528760][ T39] 1 lock held by dhcpcd/11125: [ 474.528772][ T39] #0: ffff88803231a350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 474.528833][ T39] 1 lock held by dhcpcd/11126: [ 474.528844][ T39] #0: ffff88806fa80350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 474.528896][ T39] [ 474.528902][ T39] ============================================= [ 474.528902][ T39] [ 474.528920][ T39] NMI backtrace for cpu 0 [ 474.528950][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 474.528980][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.528993][ T39] Call Trace: [ 474.529002][ T39] [ 474.529011][ T39] dump_stack_lvl+0x189/0x250 [ 474.529050][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.529080][ T39] ? __pfx__printk+0x10/0x10 [ 474.529118][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 474.529145][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 474.529171][ T39] ? __pfx__printk+0x10/0x10 [ 474.529199][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 474.529229][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 474.529256][ T39] watchdog+0xf93/0xfe0 [ 474.529289][ T39] ? watchdog+0x1de/0xfe0 [ 474.529323][ T39] kthread+0x711/0x8a0 [ 474.529359][ T39] ? __pfx_watchdog+0x10/0x10 [ 474.529385][ T39] ? __pfx_kthread+0x10/0x10 [ 474.529423][ T39] ? __pfx_kthread+0x10/0x10 [ 474.529456][ T39] ret_from_fork+0x3fc/0x770 [ 474.529487][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 474.529522][ T39] ? __switch_to_asm+0x39/0x70 [ 474.529542][ T39] ? __switch_to_asm+0x33/0x70 [ 474.529562][ T39] ? __pfx_kthread+0x10/0x10 [ 474.529607][ T39] ret_from_fork_asm+0x1a/0x30 [ 474.529644][ T39] [ 474.529695][ T39] Sending NMI from CPU 0 to CPUs 1: [ 474.529727][ C1] NMI backtrace for cpu 1 [ 474.529743][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 474.529763][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.529774][ C1] RIP: 0010:__lock_acquire+0x6c9/0xd20 [ 474.529803][ C1] Code: 08 00 00 00 e8 88 25 00 00 45 31 ff 85 c0 0f 84 f5 05 00 00 83 3d b6 18 65 17 00 75 13 48 63 44 24 20 48 0f a3 05 e7 88 61 11 <0f> 83 15 05 00 00 31 ed 48 8b 3c 24 4c 8b bf 10 0b 00 00 48 83 7c [ 474.529837][ C1] RSP: 0018:ffffc90000a3e408 EFLAGS: 00000047 [ 474.529853][ C1] RAX: 000000000000000b RBX: 0000000000000007 RCX: ffffffff929e8b88 [ 474.529866][ C1] RDX: 0000000000000008 RSI: ffff88801c6b29f8 RDI: ffff88801c6b1dc0 [ 474.529878][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172b165 [ 474.529890][ C1] R10: ffffc90000a3e658 R11: ffffffff81aae030 R12: 0000000000000003 [ 474.529903][ C1] R13: 0000000000000001 R14: ffff88801c6b29f8 R15: 0000000000000000 [ 474.529915][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 474.529930][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.529942][ C1] CR2: 0000561cb3862190 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 474.529971][ C1] Call Trace: [ 474.529978][ C1] [ 474.529988][ C1] ? unwind_next_frame+0xa5/0x2390 [ 474.530013][ C1] lock_acquire+0x120/0x360 [ 474.530035][ C1] ? unwind_next_frame+0xa5/0x2390 [ 474.530063][ C1] ? unwind_next_frame+0xa5/0x2390 [ 474.530086][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 474.530114][ C1] ? unwind_next_frame+0xa5/0x2390 [ 474.530138][ C1] unwind_next_frame+0xc2/0x2390 [ 474.530161][ C1] ? unwind_next_frame+0xa5/0x2390 [ 474.530188][ C1] ? unwind_next_frame+0xa5/0x2390 [ 474.530212][ C1] ? ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 474.530241][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 474.530261][ C1] arch_stack_walk+0x11c/0x150 [ 474.530290][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 474.530318][ C1] stack_trace_save+0x9c/0xe0 [ 474.530336][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 474.530352][ C1] ? do_raw_spin_lock+0x121/0x290 [ 474.530377][ C1] kasan_save_track+0x3e/0x80 [ 474.530397][ C1] ? kasan_save_track+0x3e/0x80 [ 474.530414][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 474.530434][ C1] ? kmem_cache_alloc_noprof+0x143/0x310 [ 474.530457][ C1] ? dst_alloc+0x105/0x170 [ 474.530482][ C1] ? ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 474.530509][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 474.530560][ C1] ? dst_alloc+0x105/0x170 [ 474.530586][ C1] __kasan_slab_alloc+0x6c/0x80 [ 474.530607][ C1] ? dst_alloc+0x105/0x170 [ 474.530631][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 474.530657][ C1] dst_alloc+0x105/0x170 [ 474.530683][ C1] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 474.530715][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 474.530742][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 474.530767][ C1] ? __lock_acquire+0xab9/0xd20 [ 474.530791][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 474.530821][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 474.530841][ C1] ip_route_output_flow+0x2a/0x150 [ 474.530864][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 474.530881][ C1] ip_route_me_harder+0x6d2/0x1030 [ 474.530903][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 474.530933][ C1] synproxy_send_tcp+0x359/0x6c0 [ 474.530959][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 474.530988][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 474.531011][ C1] ? nft_tproxy_eval+0x6c8/0x1c00 [ 474.531035][ C1] ? synproxy_pernet+0x45/0x270 [ 474.531064][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 474.531093][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 474.531121][ C1] ? nf_ip_checksum+0x13c/0x510 [ 474.531149][ C1] nft_synproxy_do_eval+0x345/0x570 [ 474.531178][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 474.531204][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 474.531238][ C1] nft_do_chain+0x409/0x1920 [ 474.531270][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 474.531297][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 474.531323][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 474.531342][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 474.531363][ C1] nft_do_chain_inet+0x25d/0x340 [ 474.531388][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 474.531419][ C1] ? NF_HOOK+0x9a/0x3a0 [ 474.531439][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 474.531465][ C1] nf_hook_slow+0xc2/0x220 [ 474.531488][ C1] NF_HOOK+0x206/0x3a0 [ 474.531508][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 474.531529][ C1] ? NF_HOOK+0x9a/0x3a0 [ 474.531553][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 474.531571][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 474.531593][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 474.531615][ C1] ? skb_dst+0x4f/0xd0 [ 474.531634][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 474.531656][ C1] NF_HOOK+0x30c/0x3a0 [ 474.531676][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 474.531696][ C1] ? NF_HOOK+0x9a/0x3a0 [ 474.531714][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 474.531735][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 474.531759][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 474.531777][ C1] __netif_receive_skb+0x143/0x380 [ 474.531797][ C1] ? rt_spin_unlock+0x65/0x80 [ 474.531815][ C1] ? process_backlog+0x27b/0x900 [ 474.531834][ C1] process_backlog+0x31e/0x900 [ 474.531859][ C1] __napi_poll+0xb3/0x540 [ 474.531878][ C1] net_rx_action+0x707/0xe00 [ 474.531906][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 474.531942][ C1] handle_softirqs+0x22c/0x710 [ 474.531967][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 474.531994][ C1] run_ktimerd+0xcf/0x190 [ 474.532017][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 474.532040][ C1] ? schedule+0x91/0x360 [ 474.532063][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 474.532083][ C1] smpboot_thread_fn+0x542/0xa60 [ 474.532105][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 474.532131][ C1] kthread+0x711/0x8a0 [ 474.532157][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 474.532178][ C1] ? __pfx_kthread+0x10/0x10 [ 474.532206][ C1] ? __pfx_kthread+0x10/0x10 [ 474.532232][ C1] ret_from_fork+0x3fc/0x770 [ 474.532255][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 474.532280][ C1] ? __switch_to_asm+0x39/0x70 [ 474.532296][ C1] ? __switch_to_asm+0x33/0x70 [ 474.532311][ C1] ? __pfx_kthread+0x10/0x10 [ 474.532337][ C1] ret_from_fork_asm+0x1a/0x30 [ 474.532360][ C1] [ 474.849094][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 474.849118][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 474.849144][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.849158][ T39] Call Trace: [ 474.849167][ T39] [ 474.849177][ T39] dump_stack_lvl+0x99/0x250 [ 474.849215][ T39] ? __asan_memcpy+0x40/0x70 [ 474.849240][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.849273][ T39] ? __pfx__printk+0x10/0x10 [ 474.849311][ T39] vpanic+0x281/0x750 [ 474.849347][ T39] ? __pfx_vpanic+0x10/0x10 [ 474.849378][ T39] ? preempt_schedule+0xae/0xc0 [ 474.849408][ T39] ? preempt_schedule_common+0x83/0xd0 [ 474.849441][ T39] panic+0xb9/0xc0 [ 474.849472][ T39] ? __pfx_panic+0x10/0x10 [ 474.849505][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 474.849538][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 474.849566][ T39] watchdog+0xfd2/0xfe0 [ 474.849600][ T39] ? watchdog+0x1de/0xfe0 [ 474.849634][ T39] kthread+0x711/0x8a0 [ 474.849671][ T39] ? __pfx_watchdog+0x10/0x10 [ 474.849698][ T39] ? __pfx_kthread+0x10/0x10 [ 474.849737][ T39] ? __pfx_kthread+0x10/0x10 [ 474.849780][ T39] ret_from_fork+0x3fc/0x770 [ 474.849812][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 474.849848][ T39] ? __switch_to_asm+0x39/0x70 [ 474.849869][ T39] ? __switch_to_asm+0x33/0x70 [ 474.849888][ T39] ? __pfx_kthread+0x10/0x10 [ 474.849922][ T39] ret_from_fork_asm+0x1a/0x30 [ 474.849961][ T39] [ 474.850318][ T39] Kernel Offset: disabled