last executing test programs: 37.673769275s ago: executing program 0 (id=1703): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}, 0x34}}, 0x20000810) 37.262368778s ago: executing program 0 (id=1706): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000042c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, 'aW1', 0x0, 0x84, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0) 36.109070724s ago: executing program 3 (id=1714): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000100), 0x10) close(r0) 35.898607677s ago: executing program 3 (id=1716): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x500, 0x0, 0x0}, 0x2b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x3b) 35.43062184s ago: executing program 3 (id=1720): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) fspick(r0, &(0x7f0000000000)='.\x00', 0x0) 34.01180059s ago: executing program 4 (id=1721): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x1, 0x10000004, 0x400, 0xcc7, 0xfff, 0x0, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x6, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x2, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) 33.82288466s ago: executing program 4 (id=1722): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) 33.714198551s ago: executing program 4 (id=1723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040005001c000380"], 0x50}}, 0x0) 33.571102055s ago: executing program 4 (id=1724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 30.680291657s ago: executing program 0 (id=1725): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'BbXx'}]}, 0xfffffd81) 30.676852067s ago: executing program 3 (id=1726): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)) 30.197546954s ago: executing program 0 (id=1728): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) 29.822586236s ago: executing program 0 (id=1731): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 29.495034958s ago: executing program 2 (id=1732): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0xf, 0xd, "432674290f1ffccd069f893457"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.413366128s ago: executing program 4 (id=1734): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)='\x00', 0x1}], 0x2, 0x8, 0x0) 29.366480378s ago: executing program 0 (id=1735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)={0x1c4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x178, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @private1, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 29.005419968s ago: executing program 4 (id=1736): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xee}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) 28.916636958s ago: executing program 1 (id=1737): sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0xe7b, 0xfffffffe, 0xf) 28.269416343s ago: executing program 1 (id=1738): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) unshare(0x2040400) getpeername$packet(r0, 0x0, 0x0) 27.825433505s ago: executing program 1 (id=1739): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x15a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa81001900080045"], 0x0) 27.309163685s ago: executing program 2 (id=1740): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0603d0f, &(0x7f0000000040)) 27.129315008s ago: executing program 2 (id=1741): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 26.872548204s ago: executing program 2 (id=1742): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000f80)="a4", 0xfffffe3e}, {&(0x7f0000000080)="5160310c0d2d7efb3bd8bb9b95bf0695bdcb47f321b70a1457ab22d26072ffc81a501c005d92e97f7922555350231eb7df7d0175efd152181d1a4a5f8839ab1689b7aafac03672a5df0ed870d48bc849d219064705c5f58b7523eae0f220ac544397cff0f40012da603cd43e1d6c491df685e77b8518b2f0f2eb91000000000000", 0x81}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000500)="cac234d2a369e8d0b762c70b1614990e05ab50b6e3442292235d86ff96958ab353e6263e99f988c59c7a54c3cc6e805caacc507adbafa601bcf563d756c67bce6f9c04f76d55d94e10a6b08a0fba23dddfaac34c9586560d5ca5e878bcfe4bc2835d417f6568e2f6380471b0834663f1821e771e5aed0bdeffdfa77d805dc1d9073cd805052f0d68fdc0f7fc2131a1989a27ca729e0ea45e2c493e2ec72e9e8be76cfc77d60f4f443331a0f6b913d7ed6979bb0ba6e877a04abda66bc6ead433f5482c81fc267659d7bbd8a7ee4f37b55ee85ae3be38bc4cb8eaa5f59f71985e588159648fa36df38d5344fedad3b445fe21a2ea33d34f983d", 0xf9}, {&(0x7f0000000340)="cf0d27d1653081dd048029d227e630947e0c58522e1657827dd3b146013e782821931c71c52dac6adda7b8b19d1f78016df5186dfc96e04eae73611ea52b0762f25083fecaf1db24ed4332da100db738c412dfd3481342dac2a35f9c070b99ad121c9710194b08e8ef094d9c2b462738f923a3dd028662bb77c9e82a54768be1a2bacef0456c79cfacb232b9a58fbfdfac837acb32d48e2a198c07d9abdb7f28a0", 0xa1}, {&(0x7f0000000fc0)="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", 0x4eb}], 0x6) 26.642880681s ago: executing program 2 (id=1743): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x2f, 0x2, 0x2, 0x1, 0x0, [@mcast1]}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 25.624450688s ago: executing program 2 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f00}, 0x20000}}, {0x20, 0x2, @in6={0xa, 0xfffd, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 16.68235628s ago: executing program 1 (id=1745): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) 16.681001266s ago: executing program 3 (id=1746): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000006c0)={0x28, 0x2, r1, r1, 0xfffffffffffff800, 0x6, 0xd120}) 16.361926944s ago: executing program 1 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x820, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.352035873s ago: executing program 3 (id=1748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 15.834543238s ago: executing program 1 (id=1749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 13.910325088s ago: executing program 32 (id=1735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)={0x1c4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x178, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @private1, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 13.417073063s ago: executing program 33 (id=1736): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xee}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) 10.485015055s ago: executing program 34 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f00}, 0x20000}}, {0x20, 0x2, @in6={0xa, 0xfffd, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 719.626078ms ago: executing program 35 (id=1748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 0s ago: executing program 36 (id=1749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): 9.786198][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.791774][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.036779][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.039400][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.160985][ T5849] Bluetooth: hci3: command tx timeout [ 100.207298][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.240877][ T5849] Bluetooth: hci1: command tx timeout [ 100.240913][ T5849] Bluetooth: hci0: command tx timeout [ 100.322149][ T5158] Bluetooth: hci4: command tx timeout [ 100.336459][ T5158] Bluetooth: hci2: command tx timeout [ 100.350137][ T5841] team0: Port device team_slave_0 added [ 100.358947][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.364927][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.505750][ T5841] team0: Port device team_slave_1 added [ 100.509791][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.596219][ T5842] team0: Port device team_slave_0 added [ 100.875409][ T5840] team0: Port device team_slave_0 added [ 101.095639][ T5842] team0: Port device team_slave_1 added [ 101.099355][ T5840] team0: Port device team_slave_1 added [ 101.265350][ T5855] team0: Port device team_slave_0 added [ 101.402780][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.402795][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.402814][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.406795][ T5843] team0: Port device team_slave_0 added [ 101.409281][ T5855] team0: Port device team_slave_1 added [ 101.574916][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.574935][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.574964][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.577982][ T5843] team0: Port device team_slave_1 added [ 101.708117][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.708137][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.708171][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.709717][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.709732][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.709759][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.062744][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.062762][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.062790][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.065864][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.065881][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.065900][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.196060][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.196079][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.196106][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.226527][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.226547][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.226579][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.228935][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.228952][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.228982][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.240818][ T5158] Bluetooth: hci3: command tx timeout [ 102.330860][ T5158] Bluetooth: hci0: command tx timeout [ 102.330893][ T5158] Bluetooth: hci1: command tx timeout [ 102.373647][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.373666][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.373694][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.401243][ T5849] Bluetooth: hci2: command tx timeout [ 102.401276][ T5849] Bluetooth: hci4: command tx timeout [ 102.593593][ T5841] hsr_slave_0: entered promiscuous mode [ 102.595270][ T5841] hsr_slave_1: entered promiscuous mode [ 102.914786][ T5842] hsr_slave_0: entered promiscuous mode [ 102.915838][ T5842] hsr_slave_1: entered promiscuous mode [ 102.916668][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 102.916764][ T5842] Cannot create hsr debugfs directory [ 102.936368][ T5840] hsr_slave_0: entered promiscuous mode [ 102.937970][ T5840] hsr_slave_1: entered promiscuous mode [ 102.939051][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 102.939080][ T5840] Cannot create hsr debugfs directory [ 103.241406][ T5855] hsr_slave_0: entered promiscuous mode [ 103.242893][ T5855] hsr_slave_1: entered promiscuous mode [ 103.243832][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 103.243857][ T5855] Cannot create hsr debugfs directory [ 103.337827][ T5843] hsr_slave_0: entered promiscuous mode [ 103.339071][ T5843] hsr_slave_1: entered promiscuous mode [ 103.339767][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 103.339791][ T5843] Cannot create hsr debugfs directory [ 104.321129][ T5158] Bluetooth: hci3: command tx timeout [ 104.410902][ T5158] Bluetooth: hci1: command tx timeout [ 104.410934][ T5158] Bluetooth: hci0: command tx timeout [ 104.491021][ T5849] Bluetooth: hci4: command tx timeout [ 104.491058][ T5849] Bluetooth: hci2: command tx timeout [ 105.069639][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.120125][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.162432][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.215861][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.360970][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.405238][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.450444][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.509044][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.689455][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.742512][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.787461][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.874682][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.068998][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.118174][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.171479][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.228849][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.286529][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.420348][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.465704][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.494099][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.530355][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.542500][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.604370][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.605049][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.672516][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.672716][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.695296][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.828936][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.890202][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.890939][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.917959][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.993123][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.993423][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.066509][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.116780][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.123960][ T3104] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.124217][ T3104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.198884][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.200976][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.324731][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.387129][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.388109][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.419857][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.470416][ T3104] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.470944][ T3104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.609251][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.657060][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.658116][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.716462][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.733538][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.734299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.072622][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.161845][ T5841] veth0_vlan: entered promiscuous mode [ 108.255361][ T5841] veth1_vlan: entered promiscuous mode [ 108.409659][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.522626][ T5842] veth0_vlan: entered promiscuous mode [ 108.587744][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.608429][ T5841] veth0_macvtap: entered promiscuous mode [ 108.620476][ T5842] veth1_vlan: entered promiscuous mode [ 108.654596][ T5841] veth1_macvtap: entered promiscuous mode [ 108.758667][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.804420][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.865854][ T5840] veth0_vlan: entered promiscuous mode [ 108.869903][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.935795][ T5842] veth0_macvtap: entered promiscuous mode [ 108.957744][ T1287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.979578][ T1287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.997204][ T5840] veth1_vlan: entered promiscuous mode [ 109.010117][ T1287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.014992][ T5842] veth1_macvtap: entered promiscuous mode [ 109.017162][ T1287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.025079][ T5855] veth0_vlan: entered promiscuous mode [ 109.189946][ T5855] veth1_vlan: entered promiscuous mode [ 109.317850][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.371091][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.441768][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.441795][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.466994][ T1302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.483821][ T5840] veth0_macvtap: entered promiscuous mode [ 109.493225][ T1302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.516387][ T1302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.540005][ T1302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.562950][ T5840] veth1_macvtap: entered promiscuous mode [ 109.670234][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.670256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.702849][ T5855] veth0_macvtap: entered promiscuous mode [ 109.814607][ T5855] veth1_macvtap: entered promiscuous mode [ 109.909160][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.947166][ T5843] veth0_vlan: entered promiscuous mode [ 109.956529][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.058587][ T1410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.075688][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.077725][ T1410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.079502][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.079524][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.141838][ T4564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.182414][ T4564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.192139][ T5843] veth1_vlan: entered promiscuous mode [ 110.206903][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.361818][ T4564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.365412][ T4564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.376542][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.376564][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.427623][ T4564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.476698][ T1302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.956830][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.956854][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.035615][ T5962] mmap: syz.2.6 (5962) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.073552][ T5843] veth0_macvtap: entered promiscuous mode [ 111.253923][ T5843] veth1_macvtap: entered promiscuous mode [ 111.371336][ T1410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.371359][ T1410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.417242][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.417274][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.562175][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.694032][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.694455][ T4564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.694470][ T4564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.782093][ T3596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.785798][ T3596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.786068][ T3596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.786342][ T3596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.474603][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.477155][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.724079][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.724102][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.004393][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.004415][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.294593][ T5993] syz.2.16 (5993) used greatest stack depth: 18280 bytes left [ 114.600063][ T5894] kernel write not supported for file /input/mouse0 (pid: 5894 comm: kworker/1:3) [ 114.922486][ T5930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.153102][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.153176][ T5930] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 115.153201][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.198404][ T6030] capability: warning: `syz.2.30' uses 32-bit capabilities (legacy support in use) [ 115.210453][ T5930] usb 5-1: config 0 descriptor?? [ 115.258885][ T5930] pwc: Askey VC010 type 2 USB webcam detected. [ 115.277318][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.377911][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.378743][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.918678][ T5930] pwc: recv_control_msg error -71 req 02 val 2700 [ 115.919306][ T5930] pwc: recv_control_msg error -71 req 02 val 2c00 [ 115.934942][ T5930] pwc: recv_control_msg error -71 req 04 val 1000 [ 115.941376][ T5930] pwc: recv_control_msg error -71 req 04 val 1300 [ 115.943552][ T5930] pwc: recv_control_msg error -71 req 04 val 1400 [ 115.944946][ T5930] pwc: recv_control_msg error -71 req 02 val 2000 [ 115.945488][ T5930] pwc: recv_control_msg error -71 req 02 val 2100 [ 115.946095][ T5930] pwc: recv_control_msg error -71 req 04 val 1500 [ 115.946692][ T5930] pwc: recv_control_msg error -71 req 02 val 2500 [ 115.947382][ T5930] pwc: recv_control_msg error -71 req 02 val 2400 [ 115.948105][ T5930] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.948625][ T5930] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.949234][ T5930] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.952114][ T5930] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.952844][ T5930] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.995946][ T5930] pwc: Registered as video103. [ 116.030979][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 116.084321][ T5930] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 116.205307][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 116.205363][ T9] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 116.205388][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.281859][ T5930] usb 5-1: USB disconnect, device number 2 [ 116.536768][ T9] usb 3-1: config 0 descriptor?? [ 116.538268][ T6036] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.034302][ T9] ntrig 0003:1B96:000E.0001: unbalanced delimiter at end of report description [ 117.035194][ T9] ntrig 0003:1B96:000E.0001: parse failed [ 117.035306][ T9] ntrig 0003:1B96:000E.0001: probe with driver ntrig failed with error -22 [ 117.163973][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.276933][ T5930] usb 3-1: USB disconnect, device number 2 [ 117.320832][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 117.372534][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 117.372567][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.372587][ T10] usb 2-1: Product: syz [ 117.372601][ T10] usb 2-1: Manufacturer: syz [ 117.372616][ T10] usb 2-1: SerialNumber: syz [ 117.407095][ T10] usb 2-1: config 0 descriptor?? [ 117.500394][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 117.510819][ T6000] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.672535][ T6000] usb 4-1: Using ep0 maxpacket: 16 [ 117.679460][ T6000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.679494][ T6000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.679517][ T6000] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.679562][ T6000] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.679586][ T6000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.768275][ T6000] usb 4-1: config 0 descriptor?? [ 117.867473][ T10] gspca_se401: Wrong descriptor type [ 118.135901][ T9] usb 2-1: USB disconnect, device number 2 [ 118.237292][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237333][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237360][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237387][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237414][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237441][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237468][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237495][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237523][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.237548][ T6000] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 118.239958][ T6000] HID 045e:07da: Invalid code 65791 type 1 [ 118.361117][ T6000] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input6 [ 118.459433][ T6000] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 118.484395][ T6000] usb 4-1: USB disconnect, device number 2 [ 119.076259][ T6087] netlink: 'syz.4.52': attribute type 2 has an invalid length. [ 119.076368][ T6087] netlink: 244 bytes leftover after parsing attributes in process `syz.4.52'. [ 119.191574][ T6081] fido_id[6081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 119.492549][ T6097] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 119.681975][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 119.701622][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.58'. [ 119.839251][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.839285][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.877696][ T9] usb 5-1: config 0 descriptor?? [ 119.893909][ T9] cp210x 5-1:0.0: cp210x converter detected [ 119.922639][ T6104] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 120.367580][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 120.456416][ T6109] sp0: Synchronizing with TNC [ 120.534871][ T6002] usb 5-1: USB disconnect, device number 3 [ 120.608241][ T6002] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.746087][ T6002] cp210x 5-1:0.0: device disconnected [ 121.343272][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.880981][ T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 122.043375][ T9] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 122.043406][ T9] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 122.043427][ T9] usb 1-1: config 0 has no interface number 0 [ 122.043478][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 122.043502][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.043542][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 122.043567][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.053961][ T6002] kernel write not supported for file /vcs (pid: 6002 comm: kworker/1:6) [ 122.141302][ T9] usb 1-1: config 0 descriptor?? [ 122.841372][ T9] usb 1-1: USB disconnect, device number 2 [ 122.880007][ T6168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.716902][ T6186] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.564196][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 124.792617][ T6222] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 125.041510][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 126.191932][ T6252] netlink: 'syz.3.130': attribute type 4 has an invalid length. [ 126.240894][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.396515][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 126.399221][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.399263][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 126.399289][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.440380][ T9] usb 5-1: config 0 descriptor?? [ 126.538089][ T6270] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 126.552186][ T6002] kernel write not supported for file /adsp1 (pid: 6002 comm: kworker/1:6) [ 126.969362][ T9] lenovo 0003:17EF:61AE.0003: hidraw0: USB HID vff.ff Device [HID 17ef:61ae] on usb-dummy_hcd.4-1/input0 [ 127.121602][ T9] usb 5-1: USB disconnect, device number 4 [ 127.306789][ T6279] fido_id[6279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 127.938802][ T6300] capability: warning: `syz.4.154' uses deprecated v2 capabilities in a way that may be insecure [ 128.360830][ T5939] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.521780][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 128.524217][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.524252][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.524277][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.524321][ T5939] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.524345][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.635805][ T5939] usb 3-1: config 0 descriptor?? [ 129.140273][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140312][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140341][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140369][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140396][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140424][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140452][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140480][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140507][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.140535][ T5939] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 129.204525][ T6325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.164'. [ 129.245587][ T5939] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input8 [ 129.267824][ T5939] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 129.322640][ T5939] usb 3-1: USB disconnect, device number 3 [ 129.748627][ T6327] fido_id[6327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 129.908739][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'. [ 130.179356][ T6344] netlink: 72 bytes leftover after parsing attributes in process `syz.1.171'. [ 130.811705][ T6354] [U]  [ 130.942228][ T6360] netlink: 'syz.0.180': attribute type 3 has an invalid length. [ 132.790916][ T6404] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1024) [ 132.790950][ T6404] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 133.242700][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 133.325970][ T6422] vlan2: entered allmulticast mode [ 133.325996][ T6422] macsec0: entered allmulticast mode [ 133.326010][ T6422] veth1_macvtap: entered allmulticast mode [ 133.821626][ T6435] dummy0: entered promiscuous mode [ 133.949539][ T6435] dummy0: left promiscuous mode [ 134.222869][ T6440] warning: `syz.3.217' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.682825][ T6459] vlan2: entered allmulticast mode [ 134.682848][ T6459] bond0: entered allmulticast mode [ 134.682863][ T6459] bond_slave_0: entered allmulticast mode [ 134.682887][ T6459] bond_slave_1: entered allmulticast mode [ 134.700857][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.871114][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 134.876704][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.876741][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.876852][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.876900][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.876924][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.955903][ T10] usb 2-1: config 0 descriptor?? [ 135.388382][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 135.388428][ T10] microsoft 0003:045E:07DA.0005: unbalanced collection at end of report description [ 135.389405][ T10] microsoft 0003:045E:07DA.0005: parse failed [ 135.389511][ T10] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 135.571807][ T6002] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.608676][ T5171] usb 2-1: USB disconnect, device number 3 [ 135.743857][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.743896][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.743937][ T6002] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 135.743963][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.782212][ T6002] usb 3-1: config 0 descriptor?? [ 136.235586][ T6002] stadia 0003:18D1:9400.0006: unexpected long global item [ 136.236388][ T6002] stadia 0003:18D1:9400.0006: parse failed [ 136.236460][ T6002] stadia 0003:18D1:9400.0006: probe with driver stadia failed with error -22 [ 136.388700][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.240'. [ 136.445058][ T5171] usb 3-1: USB disconnect, device number 4 [ 137.144618][ T6511] trusted_key: encrypted_key: key user:syz not found [ 138.077498][ T6539] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 138.109048][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.109155][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.091805][ T6566] netlink: 'syz.3.275': attribute type 29 has an invalid length. [ 139.094165][ T6566] netlink: 'syz.3.275': attribute type 29 has an invalid length. [ 139.190613][ T6568] netlink: 277 bytes leftover after parsing attributes in process `syz.2.276'. [ 139.521664][ T38] audit: type=1326 audit(1758798149.209:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6576 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 139.521724][ T38] audit: type=1326 audit(1758798149.209:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6576 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 139.533570][ T38] audit: type=1326 audit(1758798149.249:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6576 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 139.542555][ T38] audit: type=1326 audit(1758798149.249:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6576 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 139.542623][ T38] audit: type=1326 audit(1758798149.259:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6576 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 139.542673][ T38] audit: type=1326 audit(1758798149.259:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6576 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 140.364764][ T6596] sp0: Synchronizing with TNC [ 140.374649][ T6595] [U] è` [ 141.525956][ T6638] netlink: 'syz.1.308': attribute type 7 has an invalid length. [ 141.525978][ T6638] netlink: 'syz.1.308': attribute type 8 has an invalid length. [ 141.755406][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 141.874749][ T6646] process 'syz.1.312' launched './file0' with NULL argv: empty string added [ 141.983944][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 141.983971][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 142.244353][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 142.420923][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 142.573440][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.573484][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 142.573509][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.625207][ T9] usb 3-1: config 0 descriptor?? [ 143.048816][ T9] kye 0003:0458:5013.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 143.116341][ T9] kye 0003:0458:5013.0007: hidraw0: USB HID v0.06 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 143.116379][ T9] kye 0003:0458:5013.0007: tablet-enabling feature report not found [ 143.116394][ T9] kye 0003:0458:5013.0007: tablet enabling failed [ 143.261846][ T6002] usb 3-1: USB disconnect, device number 5 [ 143.314874][ T6672] fido_id[6672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 144.037349][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 144.634292][ T6002] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.672806][ T6709] netlink: 'syz.3.339': attribute type 30 has an invalid length. [ 144.790095][ T6002] usb 3-1: Using ep0 maxpacket: 16 [ 144.795951][ T6002] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 144.800851][ T6002] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.800886][ T6002] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 144.800915][ T6002] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.800941][ T6002] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 144.800986][ T6002] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 144.812292][ T6002] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.812331][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.812354][ T6002] usb 3-1: SerialNumber: syz [ 144.894719][ T6002] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 144.895770][ T6002] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 145.156375][ T9] usb 3-1: USB disconnect, device number 6 [ 145.284199][ T6681] syz.4.326 (6681): drop_caches: 2 [ 146.689915][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 146.689955][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.791099][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 146.946284][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.946319][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 146.946347][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.946381][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 146.946405][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.996261][ T9] usb 5-1: config 0 descriptor?? [ 146.999818][ T6761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.148588][ T38] audit: type=1326 audit(1758798156.859:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6777 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 147.173504][ T38] audit: type=1326 audit(1758798156.889:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6777 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 147.173629][ T38] audit: type=1326 audit(1758798156.889:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6777 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 147.178936][ T38] audit: type=1326 audit(1758798156.889:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6777 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 147.179260][ T38] audit: type=1326 audit(1758798156.889:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6777 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 147.184185][ T38] audit: type=1326 audit(1758798156.889:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6777 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 147.190568][ T38] audit: type=1326 audit(1758798156.899:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6777 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 147.196847][ T38] audit: type=1326 audit(1758798156.909:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6777 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 147.529861][ T9] logitech 0003:046D:C24F.0008: unbalanced collection at end of report description [ 147.531206][ T9] logitech 0003:046D:C24F.0008: parse failed [ 147.531313][ T9] logitech 0003:046D:C24F.0008: probe with driver logitech failed with error -22 [ 147.755554][ T9] usb 5-1: USB disconnect, device number 5 [ 148.074920][ T5939] IPVS: starting estimator thread 0... [ 148.191228][ T6805] IPVS: using max 6 ests per chain, 14400 per kthread [ 148.360904][ T38] audit: type=1326 audit(1758798158.049:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 148.360964][ T38] audit: type=1326 audit(1758798158.069:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 148.834776][ T6824] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 149.971611][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 150.252548][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 150.513018][ T6880] netlink: 'syz.2.419': attribute type 58 has an invalid length. [ 150.513042][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.149551][ T6928] netlink: 'syz.2.443': attribute type 2 has an invalid length. [ 152.699848][ T6947] syz_tun: entered promiscuous mode [ 152.702995][ T6946] syz_tun: left promiscuous mode [ 153.110340][ T6962] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.178333][ T6962] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.241968][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 153.470600][ T6969] mkiss: ax0: crc mode is auto. [ 153.511851][ T6971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.560911][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 153.744651][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.744689][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.744730][ T10] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 153.744755][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.755321][ T10] usb 5-1: config 0 descriptor?? [ 154.242242][ T10] samsung 0003:0419:0001.0009: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 154.449909][ T10] usb 5-1: USB disconnect, device number 6 [ 155.021081][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 155.210480][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.210545][ T10] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 155.210571][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.295335][ T10] usb 4-1: config 0 descriptor?? [ 155.459245][ T7025] netlink: 80 bytes leftover after parsing attributes in process `syz.1.491'. [ 155.459324][ T7025] netlink: 80 bytes leftover after parsing attributes in process `syz.1.491'. [ 155.833971][ T10] uclogic 0003:5543:0522.000A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 155.996955][ T10] usb 4-1: USB disconnect, device number 3 [ 156.357835][ T7041] fido_id[7041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 156.501035][ T6002] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.663714][ T6002] usb 5-1: Using ep0 maxpacket: 16 [ 156.668119][ T6002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.668173][ T6002] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 156.668199][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.732993][ T6002] usb 5-1: config 0 descriptor?? [ 156.920365][ T7057] program syz.2.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.217459][ T6002] cypress 0003:04B4:07B1.000B: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.4-1/input0 [ 157.337786][ T7068] netlink: 136 bytes leftover after parsing attributes in process `syz.2.510'. [ 157.410123][ T9] usb 5-1: USB disconnect, device number 7 [ 157.440942][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.590948][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 157.609694][ T10] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 157.609727][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.609749][ T10] usb 4-1: Product: syz [ 157.609764][ T10] usb 4-1: Manufacturer: syz [ 157.609779][ T10] usb 4-1: SerialNumber: syz [ 157.633729][ T10] usb 4-1: config 0 descriptor?? [ 157.693138][ T7079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.693455][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 157.693471][ T38] audit: type=1326 audit(1758798167.409:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7074 comm="syz.1.514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b16d1eec9 code=0x0 [ 157.723513][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.758029][ T7078] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.952738][ T7084] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 157.952763][ T7084] netlink: 204 bytes leftover after parsing attributes in process `syz.0.517'. [ 157.952795][ T7084] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 158.136653][ T7087] netlink: 'syz.2.518': attribute type 29 has an invalid length. [ 158.146191][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 158.187591][ T10] usb 4-1: USB disconnect, device number 4 [ 158.286746][ T7092] tmpfs: Cannot change global quota limit on remount [ 158.348831][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.395834][ T38] audit: type=1326 audit(1758798168.109:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7093 comm="syz.2.522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3aab59eec9 code=0x0 [ 160.166262][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 160.293266][ T7149] vlan3: entered promiscuous mode [ 160.293289][ T7149] syz_tun: entered promiscuous mode [ 161.574648][ T7192] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 162.260997][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.433901][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.433953][ T10] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 162.433976][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.465239][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.581'. [ 162.485727][ T10] usb 5-1: config 0 descriptor?? [ 162.939966][ T10] smartjoyplus 0003:0925:8866.000C: unknown main item tag 0x5 [ 162.970401][ T10] smartjoyplus 0003:0925:8866.000C: hidraw0: USB HID v80.00 Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0 [ 162.970439][ T10] smartjoyplus 0003:0925:8866.000C: no output reports found [ 163.137219][ T31] usb 5-1: USB disconnect, device number 8 [ 163.870831][ T6002] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 164.044094][ T6002] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 164.044125][ T6002] usb 2-1: config 0 has no interface number 0 [ 164.044160][ T6002] usb 2-1: config 0 interface 128 has no altsetting 0 [ 164.097885][ T6002] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 164.097917][ T6002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.097937][ T6002] usb 2-1: Product: syz [ 164.097952][ T6002] usb 2-1: Manufacturer: syz [ 164.097967][ T6002] usb 2-1: SerialNumber: syz [ 164.146298][ T6002] usb 2-1: config 0 descriptor?? [ 164.186033][ T6002] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 164.186129][ T6002] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 164.186681][ T6002] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 164.374722][ T7256] netlink: 140 bytes leftover after parsing attributes in process `syz.2.597'. [ 164.374783][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'. [ 164.374798][ T7256] netlink: 5 bytes leftover after parsing attributes in process `syz.2.597'. [ 164.455416][ T5930] usb 2-1: USB disconnect, device number 4 [ 164.691656][ T7261] tipc: Enabling not permitted [ 164.691694][ T7261] tipc: Enabling of bearer rejected, failed to enable media [ 165.179449][ T7276] Invalid source name [ 165.862450][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 166.657302][ T7328] program syz.1.624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.852953][ T7364] UBIFS error (pid: 7364): cannot open "c:::", error -22 [ 168.531518][ T7378] Bluetooth: MGMT ver 1.23 [ 169.422346][ T7415] Bluetooth: MGMT ver 1.23 [ 169.819150][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 170.229602][ T7435] can0: slcan on ttynull. [ 170.452015][ T7433] can0 (unregistered): slcan off ttynull. [ 170.691595][ T6002] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.692111][ T6002] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.692487][ T6002] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.692864][ T6002] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.692882][ T6002] rtc rtc0: __rtc_set_alarm: err=-22 [ 170.930874][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 171.049397][ T7455] QAT: Invalid ioctl 21531 [ 171.089814][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 171.089847][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.089868][ T9] usb 3-1: Product: syz [ 171.089883][ T9] usb 3-1: Manufacturer: syz [ 171.089899][ T9] usb 3-1: SerialNumber: syz [ 171.136834][ T9] usb 3-1: config 0 descriptor?? [ 171.438682][ T6002] usb 3-1: USB disconnect, device number 7 [ 171.442630][ T5158] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 171.443616][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.514731][ T7465] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 171.514760][ T7465] CIFS mount error: No usable UNC path provided in device string! [ 171.514760][ T7465] [ 171.515016][ T7465] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.649640][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.780794][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 171.943740][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.943774][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.943797][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.943839][ T9] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 171.943861][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.994260][ T9] usb 5-1: config 0 descriptor?? [ 172.456781][ T9] dragonrise 0003:0079:0011.000D: invalid report_count -326368751 [ 172.456809][ T9] dragonrise 0003:0079:0011.000D: item 0 4 1 9 parsing failed [ 172.457548][ T9] dragonrise 0003:0079:0011.000D: parse failed [ 172.457607][ T9] dragonrise 0003:0079:0011.000D: probe with driver dragonrise failed with error -22 [ 172.481140][ T5849] Bluetooth: hci4: command tx timeout [ 172.681433][ T10] usb 5-1: USB disconnect, device number 9 [ 173.054580][ T7499] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 174.472596][ T38] audit: type=1326 audit(1758798184.189:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7534 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 174.472658][ T38] audit: type=1326 audit(1758798184.189:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7534 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 174.498866][ T38] audit: type=1326 audit(1758798184.209:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7534 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 174.498930][ T38] audit: type=1326 audit(1758798184.209:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7534 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 174.498982][ T38] audit: type=1326 audit(1758798184.209:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7534 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 174.503053][ T38] audit: type=1326 audit(1758798184.219:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7534 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 174.503113][ T38] audit: type=1326 audit(1758798184.219:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7534 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 174.503162][ T38] audit: type=1326 audit(1758798184.219:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7534 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248344eec9 code=0x7ffc0000 [ 175.785360][ T7578] comedi comedi3: comedi_test: 20263 microvolt, 31 microsecond waveform attached [ 175.843731][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.732'. [ 176.265066][ T7587] vlan2: entered promiscuous mode [ 176.265090][ T7587] geneve1: entered promiscuous mode [ 176.289889][ T7587] vlan2: entered allmulticast mode [ 176.289910][ T7587] geneve1: entered allmulticast mode [ 177.046358][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 177.046401][ T7613] netlink: 96 bytes leftover after parsing attributes in process `syz.0.749'. [ 177.199855][ T7617] tipc: Started in network mode [ 177.199893][ T7617] tipc: Node identity 1, cluster identity 4711 [ 177.199906][ T7617] tipc: Node number set to 1 [ 177.361554][ T7624] Zero length message leads to an empty skb [ 177.835625][ T7636] ======================================================= [ 177.835625][ T7636] WARNING: The mand mount option has been deprecated and [ 177.835625][ T7636] and is ignored by this kernel. Remove the mand [ 177.835625][ T7636] option from the mount to silence this warning. [ 177.835625][ T7636] ======================================================= [ 178.005460][ T7643] loop6: detected capacity change from 0 to 524288000 [ 178.413119][ T38] audit: type=1326 audit(1758798188.119:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 178.444822][ T38] audit: type=1326 audit(1758798188.159:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 182.165921][ T5849] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 182.166439][ T5849] Bluetooth: hci2: Injecting HCI hardware error event [ 182.169064][ T5849] Bluetooth: hci2: hardware error 0x00 [ 182.341208][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.390067][ T7773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.536658][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.536687][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.538568][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.538597][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 182.538619][ T10] usb 2-1: SerialNumber: syz [ 182.866231][ T10] usb 2-1: 0:2 : does not exist [ 182.953428][ T10] usb 2-1: USB disconnect, device number 5 [ 183.211550][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.870956][ T5171] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.000512][ T7815] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 184.019812][ T7814] IPVS: stopping master sync thread 7815 ... [ 184.052004][ T5171] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.053536][ T5171] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 184.058319][ T5171] usb 5-1: string descriptor 0 read error: -22 [ 184.058497][ T5171] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 184.058522][ T5171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.131171][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 184.152782][ T7819] erspan0: entered promiscuous mode [ 184.155811][ T7819] erspan0: left promiscuous mode [ 184.331078][ T5171] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 184.338318][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 184.408451][ T7822] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 184.480944][ T5849] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 184.955511][ T5930] Process accounting resumed [ 184.965749][ T7838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.855'. [ 184.965815][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.855'. [ 185.030823][ T5171] usb 5-1: device descriptor read/64, error -32 [ 185.320810][ T5171] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 185.489378][ T5171] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.534612][ T5171] usb 5-1: device firmware changed [ 185.575994][ T5171] usb 5-1: USB disconnect, device number 10 [ 187.633376][ T7891] macvlan2: entered promiscuous mode [ 187.633651][ T7891] macvlan2: entered allmulticast mode [ 188.222930][ T7908] IPVS: stopping master sync thread 7912 ... [ 189.110870][ T7944] IPVS: Unknown mcast interface: veth0_virt_wifi [ 189.111175][ T7944] IPVS: stopping master sync thread 6824 ... [ 190.201855][ T7982] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 190.204145][ T7980] IPVS: stopping master sync thread 7982 ... [ 191.086417][ T8001] sch_fq: defrate 4294967295 ignored. [ 191.660961][ T8018] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 191.661407][ T8017] IPVS: stopping master sync thread 8018 ... [ 192.160938][ T6002] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 192.270932][ T5171] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.311338][ T6002] usb 4-1: Using ep0 maxpacket: 8 [ 192.319376][ T6002] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 192.319410][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.363583][ T6002] usb 4-1: config 0 descriptor?? [ 192.430867][ T5171] usb 5-1: Using ep0 maxpacket: 8 [ 192.435676][ T5171] usb 5-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.435712][ T5171] usb 5-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.435796][ T5171] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.435830][ T5171] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 192.435851][ T5171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.538304][ T5171] usb 5-1: config 0 descriptor?? [ 192.840996][ T6002] magicmouse 0003:05AC:0269.000E: unknown main item tag 0x0 [ 192.841039][ T6002] magicmouse 0003:05AC:0269.000E: unknown main item tag 0x0 [ 192.841067][ T6002] magicmouse 0003:05AC:0269.000E: unknown main item tag 0x0 [ 192.841321][ T6002] magicmouse 0003:05AC:0269.000E: unknown main item tag 0x0 [ 192.841350][ T6002] magicmouse 0003:05AC:0269.000E: unknown main item tag 0x0 [ 192.904980][ T6002] magicmouse 0003:05AC:0269.000E: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 193.018583][ T5171] redragon 0003:0C45:760B.000F: item fetching failed at offset 5/7 [ 193.019561][ T5171] redragon 0003:0C45:760B.000F: probe with driver redragon failed with error -22 [ 193.054700][ T5930] usb 4-1: USB disconnect, device number 5 [ 193.219610][ T8052] fido_id[8052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 193.242555][ T6002] usb 5-1: USB disconnect, device number 11 [ 194.178679][ T8079] netlink: 'syz.3.963': attribute type 12 has an invalid length. [ 194.178704][ T8079] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.963'. [ 195.408131][ T8103] netlink: 'syz.3.974': attribute type 11 has an invalid length. [ 195.950870][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 196.120802][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 196.124825][ T31] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 196.124855][ T31] usb 5-1: config 0 has no interface number 0 [ 196.128035][ T31] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 196.128066][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.128087][ T31] usb 5-1: Product: syz [ 196.128102][ T31] usb 5-1: Manufacturer: syz [ 196.128117][ T31] usb 5-1: SerialNumber: syz [ 196.139133][ T31] usb 5-1: config 0 descriptor?? [ 196.202748][ T31] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 196.642555][ T31] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 196.836089][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 196.843797][ T31] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 196.863692][ T31] usb 5-1: USB disconnect, device number 12 [ 196.906327][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 196.955845][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 196.956874][ T31] quatech2 5-1:0.51: device disconnected [ 197.521544][ T5930] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.674055][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 197.674091][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8192, setting to 1024 [ 197.674138][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 197.674161][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.740596][ T5930] usb 2-1: config 0 descriptor?? [ 197.981505][ T5930] usb 2-1: USB disconnect, device number 6 [ 198.132076][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 198.816483][ T8173] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1007'. [ 198.950842][ T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 199.103398][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.103428][ T31] usb 5-1: config 0 has no interface number 0 [ 199.103478][ T31] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 199.103502][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.156610][ T31] usb 5-1: config 0 descriptor?? [ 199.192613][ T31] usb 5-1: selecting invalid altsetting 1 [ 199.213855][ T31] dvb_ttusb_budget: ttusb_init_controller: error [ 199.214195][ T31] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 199.310950][ T6002] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 199.467272][ T6002] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.467301][ T6002] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.468868][ T6002] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.468898][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.468919][ T6002] usb 4-1: SerialNumber: syz [ 199.526901][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.526982][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.671683][ T31] DVB: Unable to find symbol cx22700_attach() [ 199.833559][ T6002] usb 4-1: 0:2 : does not exist [ 199.852693][ T31] DVB: Unable to find symbol tda10046_attach() [ 199.852709][ T31] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 199.966593][ T31] usb 5-1: USB disconnect, device number 13 [ 200.017314][ T6002] usb 4-1: USB disconnect, device number 6 [ 200.310477][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.244133][ T6063] udevd[6063]: setting mode of /dev/comedi3_subd0 to 020600 failed: Read-only file system [ 201.244270][ T6063] udevd[6063]: setting owner of /dev/comedi3_subd0 to uid=0, gid=0 failed: Read-only file system [ 201.907437][ T8235] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 201.939271][ T8235] @0Ù: renamed from bond_slave_1 (while UP) [ 203.671011][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 203.823392][ T9] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 203.823424][ T9] usb 3-1: config 0 has no interface number 0 [ 203.831898][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 203.831934][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.831959][ T9] usb 3-1: Product: syz [ 203.831975][ T9] usb 3-1: Manufacturer: syz [ 203.831992][ T9] usb 3-1: SerialNumber: syz [ 203.854509][ T9] usb 3-1: config 0 descriptor?? [ 203.905260][ T9] hub 3-1:0.217: bad descriptor, ignoring hub [ 203.905314][ T9] hub 3-1:0.217: probe with driver hub failed with error -5 [ 204.090958][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 204.105225][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.110511][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 204.110586][ T9] usb 3-1: media controller created [ 204.249081][ T8298] binder: 8297:8298 ioctl 541b 0 returned -22 [ 204.250595][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.523764][ T9] DVB: Unable to find symbol dib7000p_attach() [ 204.523786][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 204.790965][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 204.790988][ T9] Registered IR keymap rc-empty [ 204.791718][ T9] dvb-usb: could not initialize remote control. [ 204.791731][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 204.845104][ T9] usb 3-1: USB disconnect, device number 8 [ 205.071377][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 205.284216][ T8321] rdma_op ffff888030a6ca70 conn xmit_rdma 0000000000000000 [ 206.013806][ T6002] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 206.063385][ T6002] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.260221][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 206.389362][ T8347] fido_id[8347]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.559120][ T8351] netlink: 'syz.3.1087': attribute type 22 has an invalid length. [ 206.862012][ T8362] binder: 8361:8362 ioctl c0306201 200000000680 returned -14 [ 207.373267][ T8373] sd 0:0:1:0: device reset [ 207.547421][ T8376] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1100'. [ 207.985918][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 208.009842][ T8395] ipvlan2: entered promiscuous mode [ 208.242599][ T8402] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 208.420889][ T5930] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 208.574748][ T5930] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.574779][ T5930] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 208.574799][ T5930] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.574819][ T5930] usb 5-1: config 220 has no interface number 2 [ 208.574911][ T5930] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 208.574940][ T5930] usb 5-1: config 220 interface 0 has no altsetting 0 [ 208.574959][ T5930] usb 5-1: config 220 interface 76 has no altsetting 0 [ 208.574978][ T5930] usb 5-1: config 220 interface 1 has no altsetting 0 [ 208.590572][ T5930] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 208.590608][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.591293][ T5930] usb 5-1: Product: syz [ 208.591316][ T5930] usb 5-1: Manufacturer: syz [ 208.593404][ T5930] usb 5-1: SerialNumber: syz [ 208.950972][ T6000] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.954730][ T5930] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 208.954773][ T5930] usb 5-1: No valid video chain found. [ 208.955443][ T5930] usb 5-1: selecting invalid altsetting 0 [ 209.035924][ T5930] usb 5-1: selecting invalid altsetting 0 [ 209.035966][ T5930] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 209.094010][ T5930] usb 5-1: USB disconnect, device number 14 [ 209.100796][ T6000] usb 4-1: Using ep0 maxpacket: 8 [ 209.105414][ T6000] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 209.105462][ T6000] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 209.105487][ T6000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.187885][ T6000] usb 4-1: config 0 descriptor?? [ 209.627701][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.660800][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.660849][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.660875][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.660901][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.660926][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.660953][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.660981][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.661008][ T6000] corsair 0003:1B1C:1B09.0011: unknown main item tag 0x0 [ 209.730629][ T6000] corsair 0003:1B1C:1B09.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.3-1/input0 [ 209.840142][ T6000] usb 4-1: USB disconnect, device number 7 [ 210.070359][ T8431] fido_id[8431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 210.120930][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 210.270797][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 210.274397][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.274447][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 210.274471][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.294765][ T10] usb 5-1: config 0 descriptor?? [ 210.938709][ T5894] usb 5-1: USB disconnect, device number 15 [ 211.320958][ T8455] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 211.650799][ T5894] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 211.746756][ T8468] xt_l2tp: invalid flags combination: 8 [ 211.777136][ T8469] smc: net device bond0 applied user defined pnetid S [ 211.803430][ T5894] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 211.803467][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.837863][ T5894] usb 2-1: config 0 descriptor?? [ 211.848990][ T5894] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 212.449638][ T5894] gp8psk: usb out operation failed. [ 212.449657][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 212.449697][ T5894] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 212.493695][ T5894] usb 2-1: USB disconnect, device number 7 [ 212.511251][ T8481] delete_channel: no stack [ 213.478636][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1158'. [ 213.870896][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.233556][ T10] usb 5-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 214.233593][ T10] usb 5-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.233618][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.233654][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 214.233684][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.298360][ T10] usb 5-1: config 0 descriptor?? [ 214.584099][ T38] audit: type=1326 audit(1758798224.299:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 214.585305][ T38] audit: type=1326 audit(1758798224.299:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 214.607281][ T38] audit: type=1326 audit(1758798224.309:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 214.612876][ T38] audit: type=1326 audit(1758798224.319:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 214.616941][ T38] audit: type=1326 audit(1758798224.329:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 214.623678][ T38] audit: type=1326 audit(1758798224.329:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 214.626710][ T38] audit: type=1326 audit(1758798224.339:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 214.630490][ T38] audit: type=1326 audit(1758798224.339:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aab59eec9 code=0x7ffc0000 [ 214.780961][ T10] sony 0003:054C:024B.0013: unbalanced delimiter at end of report description [ 214.781660][ T10] sony 0003:054C:024B.0013: parse failed [ 214.781749][ T10] sony 0003:054C:024B.0013: probe with driver sony failed with error -22 [ 214.999576][ T9] usb 5-1: USB disconnect, device number 16 [ 215.440913][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.530818][ T5894] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 215.602179][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 215.605965][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 215.609101][ T10] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 215.609131][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.609152][ T10] usb 2-1: Product: syz [ 215.609167][ T10] usb 2-1: Manufacturer: syz [ 215.609189][ T10] usb 2-1: SerialNumber: syz [ 215.631150][ T10] usb 2-1: config 0 descriptor?? [ 215.632521][ T8545] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 215.653192][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 215.680855][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 215.702271][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.702307][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.702330][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.702376][ T5894] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.702401][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.765236][ T5894] usb 4-1: config 0 descriptor?? [ 216.161718][ T31] usb 2-1: USB disconnect, device number 8 [ 216.161933][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 216.277330][ T5849] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff [ 216.305730][ T5894] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input13 [ 216.454993][ T5894] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 216.497346][ T5894] usb 4-1: USB disconnect, device number 8 [ 216.705627][ T8564] fido_id[8564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 217.460358][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 217.534903][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.613855][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.613912][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 217.613937][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.652994][ T31] usb 3-1: config 0 descriptor?? [ 217.680948][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 217.683264][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.683296][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.683336][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 217.683358][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.770878][ T10] usb 4-1: config 0 descriptor?? [ 218.097046][ T31] microsoft 0003:045E:00F9.0015: unbalanced delimiter at end of report description [ 218.097972][ T31] microsoft 0003:045E:00F9.0015: parse failed [ 218.098085][ T31] microsoft 0003:045E:00F9.0015: probe with driver microsoft failed with error -22 [ 218.307533][ T10] hid-picolcd 0003:04D8:F002.0016: unbalanced collection at end of report description [ 218.308369][ T10] hid-picolcd 0003:04D8:F002.0016: device report parse failed [ 218.308481][ T10] hid-picolcd 0003:04D8:F002.0016: probe with driver hid-picolcd failed with error -22 [ 218.336542][ T5930] usb 3-1: USB disconnect, device number 9 [ 218.471579][ T5894] usb 4-1: USB disconnect, device number 9 [ 219.610373][ T8626] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 219.610396][ T8626] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1215'. [ 220.235107][ T8648] netlink: 'syz.2.1225': attribute type 11 has an invalid length. [ 220.235130][ T8648] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1225'. [ 220.338277][ T6063] udevd[6063]: symlink '../../loop6' '/dev/disk/by-diskseq/70.tmp-b7:6' failed: Read-only file system [ 220.656156][ T6063] udevd[6063]: symlink '../../loop6' '/dev/disk/by-diskseq/70.tmp-b7:6' failed: Read-only file system [ 221.650830][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 221.823941][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 221.823979][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 221.824009][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 221.824053][ T31] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 221.824077][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.898758][ T31] usb 3-1: config 0 descriptor?? [ 221.907651][ T8679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.045658][ T8700] tmpfs: Cannot change global quota limit on remount [ 222.087108][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.087236][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 222.087265][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 222.116567][ T8698] macsec1: entered promiscuous mode [ 222.372353][ T31] hid_parser_main: 4 callbacks suppressed [ 222.372380][ T31] sigmamicro 0003:1C4F:0059.0017: unknown main item tag 0x0 [ 222.412939][ T31] sigmamicro 0003:1C4F:0059.0017: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.2-1/input0 [ 222.604446][ T31] usb 3-1: USB disconnect, device number 10 [ 222.782581][ T8713] sctp: [Deprecated]: syz.1.1256 (pid 8713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.782581][ T8713] Use struct sctp_sack_info instead [ 223.761629][ T5158] Bluetooth: hci4: command 0x0405 tx timeout [ 225.088240][ T8793] program syz.2.1296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.581050][ T8808] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 226.116903][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 226.651220][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 226.686770][ T8842] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 226.816059][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 226.830104][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 226.830136][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.830156][ T10] usb 5-1: Product: syz [ 226.830171][ T10] usb 5-1: Manufacturer: syz [ 226.830186][ T10] usb 5-1: SerialNumber: syz [ 226.943457][ T10] usb 5-1: config 0 descriptor?? [ 227.155147][ T10] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 227.561459][ T10] usb write operation failed. (-71) [ 227.582874][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 227.583640][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 227.583698][ T10] usb 5-1: media controller created [ 227.590972][ T10] usb read operation failed. (-71) [ 227.591562][ T10] usb write operation failed. (-71) [ 227.602416][ T10] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 227.654426][ T10] usb 5-1: USB disconnect, device number 17 [ 228.360969][ T5171] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 228.420235][ T8888] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1339'. [ 228.513174][ T5171] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.513210][ T5171] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 228.513239][ T5171] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.513346][ T5171] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 228.513372][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.577878][ T5171] usb 4-1: config 0 descriptor?? [ 228.579187][ T8880] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.710893][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 228.877888][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 228.877925][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 228.878032][ T31] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 228.878057][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.984346][ T31] usb 3-1: config 0 descriptor?? [ 229.040866][ T5171] uclogic 0003:5543:0005.0018: unknown main item tag 0x0 [ 229.040907][ T5171] uclogic 0003:5543:0005.0018: unknown main item tag 0x0 [ 229.040933][ T5171] uclogic 0003:5543:0005.0018: unknown main item tag 0x0 [ 229.040958][ T5171] uclogic 0003:5543:0005.0018: unknown main item tag 0x0 [ 229.040985][ T5171] uclogic 0003:5543:0005.0018: unknown main item tag 0x0 [ 229.041009][ T5171] uclogic 0003:5543:0005.0018: unknown main item tag 0x0 [ 229.047398][ T5171] uclogic 0003:5543:0005.0018: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 229.198779][ T31] ath6kl: Failed to submit usb control message: -71 [ 229.198835][ T31] ath6kl: unable to send the bmi data to the device: -71 [ 229.198851][ T31] ath6kl: Unable to send get target info: -71 [ 229.211791][ T5930] usb 4-1: USB disconnect, device number 10 [ 229.239512][ T31] ath6kl: Failed to init ath6kl core: -71 [ 229.241353][ T31] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 229.343598][ T31] usb 3-1: USB disconnect, device number 11 [ 229.450151][ T8903] fido_id[8903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 229.503198][ T8905] xt_limit: Overflow, try lower: 271964/0 [ 230.808156][ T8941] bond0: option arp_interval: invalid value (18446744071880835072) [ 230.808184][ T8941] bond0: option arp_interval: allowed values 0 - 2147483647 [ 231.251837][ T8953] netlink: 'syz.3.1366': attribute type 5 has an invalid length. [ 232.117575][ T5842] block device autoloading is deprecated and will be removed. [ 232.120917][ T5171] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 232.236455][ T6063] udevd[6063]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 232.236586][ T6063] udevd[6063]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 232.320812][ T5171] usb 2-1: Using ep0 maxpacket: 16 [ 232.323477][ T5171] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 232.323568][ T5171] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 232.323613][ T5171] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 232.323637][ T5171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.385191][ T5171] usb 2-1: config 0 descriptor?? [ 232.524180][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 232.730265][ T8992] program syz.4.1385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.847442][ T8996] tipc: Started in network mode [ 232.847477][ T8996] tipc: Node identity 36e56b4d450e, cluster identity 4711 [ 232.848473][ T8996] tipc: Enabled bearer , priority 10 [ 232.855425][ T5171] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 232.855462][ T5171] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 232.855489][ T5171] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 232.855516][ T5171] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 232.907371][ T5171] saitek 0003:06A3:0621.0019: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 232.938072][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 233.087561][ T5930] usb 2-1: USB disconnect, device number 9 [ 233.459876][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 233.518734][ T9012] usb usb8: usbfs: process 9012 (syz.4.1394) did not claim interface 0 before use [ 233.530830][ T6002] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 233.686600][ T6002] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.686634][ T6002] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.686663][ T6002] usb 3-1: config 0 interface 0 has no altsetting 0 [ 233.686699][ T6002] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 233.686724][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.745726][ T6002] usb 3-1: config 0 descriptor?? [ 233.970560][ T9] tipc: Node number set to 1944808269 [ 234.017881][ T5899] udevd[5899]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 234.213775][ T6002] kye 0003:0458:501A.001A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 234.253540][ T6002] kye 0003:0458:501A.001A: hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 234.253578][ T6002] kye 0003:0458:501A.001A: tablet-enabling feature report not found [ 234.253594][ T6002] kye 0003:0458:501A.001A: tablet enabling failed [ 234.377933][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 234.430906][ T5930] usb 3-1: USB disconnect, device number 12 [ 234.496434][ T9033] fido_id[9033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 234.758934][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 234.763952][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 235.041131][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 235.050163][ T6063] udevd[6063]: setting mode of /dev/comedi3_subd0 to 020600 failed: Read-only file system [ 235.389699][ T9064] xt_l2tp: v2 sid > 0xffff: 1114112 [ 235.659089][ T9071] vivid-001: disconnect [ 235.660253][ T9067] vivid-001: reconnect [ 236.435107][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 237.000978][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 237.168510][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 237.213336][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 237.213369][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.213390][ T9] usb 4-1: Product: syz [ 237.213405][ T9] usb 4-1: Manufacturer: syz [ 237.213420][ T9] usb 4-1: SerialNumber: syz [ 237.227007][ T9] usb 4-1: config 0 descriptor?? [ 237.586363][ T5899] udevd[5899]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 237.743145][ T9] usb 4-1: USB disconnect, device number 11 [ 238.102116][ T9148] sp0: Synchronizing with TNC [ 238.260226][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.280889][ T6002] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 238.421571][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 238.450895][ T6002] usb 3-1: Using ep0 maxpacket: 16 [ 238.454094][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.454128][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.454266][ T6002] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 238.454292][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.545384][ T6002] usb 3-1: config 0 descriptor?? [ 238.713547][ T6023] udevd[6023]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 238.979964][ T5988] udevd[5988]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 239.153282][ T6002] aquacomputer_d5next 0003:0C70:F0B6.001B: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 239.375904][ T6002] usb 3-1: USB disconnect, device number 13 [ 239.558923][ T9169] fido_id[9169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 239.750398][ T9170] sp0: Synchronizing with TNC [ 239.780261][ T9176] netlink: 'syz.4.1456': attribute type 1 has an invalid length. [ 239.780286][ T9176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1456'. [ 239.780304][ T9176] nbd: illegal input index 65544 [ 240.499432][ T9185] syz.2.1460 uses old SIOCAX25GETINFO [ 240.767154][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 240.919120][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 240.919146][ T9198] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1466'. [ 241.066326][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 241.083149][ T9203] usb usb8: usbfs: process 9203 (syz.0.1469) did not claim interface 0 before use [ 241.289474][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 241.503414][ T9218] netlink: 'syz.2.1476': attribute type 2 has an invalid length. [ 241.503440][ T9218] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.1476'. [ 241.625943][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 241.936783][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 242.463037][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 242.667496][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 243.300309][ T9261] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 243.320444][ T9261] team0: Device ipvlan2 is already an upper device of the team interface [ 243.347878][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 243.946090][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'. [ 244.180921][ T5894] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 244.343708][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.343758][ T5894] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 244.343783][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.402325][ T5894] usb 3-1: config 0 descriptor?? [ 244.893073][ T5894] kye 0003:0458:500F.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 244.894219][ T5894] hid_parser_main: 1 callbacks suppressed [ 244.894239][ T5894] kye 0003:0458:500F.001C: unknown main item tag 0x3 [ 244.897802][ T5894] kye 0003:0458:500F.001C: hidraw0: USB HID v0.01 Device [HID 0458:500f] on usb-dummy_hcd.2-1/input0 [ 244.897834][ T5894] kye 0003:0458:500F.001C: tablet-enabling feature report not found [ 244.897849][ T5894] kye 0003:0458:500F.001C: tablet enabling failed [ 245.131620][ T31] usb 3-1: USB disconnect, device number 14 [ 245.234378][ T9305] fido_id[9305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 245.549237][ T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 245.711369][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.711397][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 245.711567][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 245.711592][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.768053][ T10] usb 4-1: config 0 descriptor?? [ 245.795374][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 245.795442][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 245.842910][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 245.843807][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 245.843864][ T10] usb 4-1: media controller created [ 245.847174][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.918042][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 245.918214][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 245.943317][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 245.945898][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 245.945918][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 246.014525][ T31] usb 4-1: USB disconnect, device number 12 [ 246.301846][ T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 246.418069][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 247.028415][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 247.376930][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 247.628395][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 247.900888][ T9367] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1549'. [ 248.004039][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 248.173371][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 248.441970][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 248.708286][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 248.764553][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 248.764579][ T9382] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 248.879960][ T5899] udevd[5899]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 248.893256][ T9386] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1558'. [ 248.893287][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1558'. [ 249.374265][ T38] audit: type=1326 audit(1758798259.089:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9397 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 249.376506][ T38] audit: type=1326 audit(1758798259.089:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9397 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 249.384631][ T38] audit: type=1326 audit(1758798259.099:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9397 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 249.384695][ T38] audit: type=1326 audit(1758798259.099:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9397 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 249.385004][ T38] audit: type=1326 audit(1758798259.099:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9397 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 249.411191][ T38] audit: type=1326 audit(1758798259.099:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9397 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 249.411262][ T38] audit: type=1326 audit(1758798259.119:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9397 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b16d1eec9 code=0x7ffc0000 [ 249.444391][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 249.568816][ T5899] udevd[5899]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 249.827144][ T9406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1567'. [ 250.142805][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 250.395605][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 250.568149][ T9424] sp0: Synchronizing with TNC [ 250.584681][ T9422] [U] è [ 251.445944][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 251.788508][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 252.391854][ T38] audit: type=1800 audit(1758798262.059:54): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1602" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 252.568149][ T9488] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1605'. [ 252.568171][ T9488] tc_dump_action: action bad kind [ 252.942462][ T5171] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 253.095912][ T5171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.095947][ T5171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.095970][ T5171] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.096011][ T5171] usb 4-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 253.096031][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.128895][ T5171] usb 4-1: config 0 descriptor?? [ 253.134601][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 253.285022][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 253.431823][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 253.509016][ T9510] [U] ‡ [ 253.578789][ T5171] aquacomputer_d5next 0003:0C70:F012.001D: unknown main item tag 0x3 [ 253.673804][ T5171] aquacomputer_d5next 0003:0C70:F012.001D: hidraw0: USB HID vff.fd Device [HID 0c70:f012] on usb-dummy_hcd.3-1/input0 [ 253.807522][ T5171] usb 4-1: USB disconnect, device number 13 [ 253.824089][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 254.038505][ T9514] fido_id[9514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 254.457563][ T5988] udevd[5988]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 254.587582][ T5899] udevd[5899]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 255.031679][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 255.140446][ T5899] udevd[5899]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 255.536523][ T9570] tipc: Enabled bearer , priority 5 [ 255.616004][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 255.783116][ T9577] bad cache= option: no%e [ 255.783116][ T9577] [ 255.783369][ T9577] CIFS: VFS: bad cache= option: no%e [ 256.060059][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 256.328546][ T9599] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1658'. [ 256.953467][ T9619] sp0: Synchronizing with TNC [ 257.660800][ T6002] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 257.816012][ T6002] usb 3-1: Using ep0 maxpacket: 32 [ 257.823618][ T6002] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 257.823657][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.823681][ T6002] usb 3-1: Product: syz [ 257.823699][ T6002] usb 3-1: Manufacturer: syz [ 257.823716][ T6002] usb 3-1: SerialNumber: syz [ 257.838889][ T6002] usb 3-1: config 0 descriptor?? [ 258.205860][ T5899] udevd[5899]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 258.284030][ T6002] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 258.284061][ T6002] airspy 3-1:0.0: Could not detect board [ 258.284174][ T6002] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 258.289681][ T6002] usb 3-1: USB disconnect, device number 15 [ 258.360513][ T9656] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1684'. [ 258.453455][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 258.726970][ T9667] iso9660: Bad value for 'gid' [ 258.726991][ T9667] iso9660: Bad value for 'gid' [ 259.466336][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 259.818951][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.858705][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.894296][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.927790][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.991996][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.026461][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.044952][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.079485][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.113362][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.150807][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.183832][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.216584][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.250396][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.284581][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.319053][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.356309][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.390210][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.424468][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.461750][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.494085][ T9709] rdma_op ffff888027a0d270 conn xmit_rdma 0000000000000000 [ 260.496176][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.532065][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.570819][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.610092][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.628222][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.667487][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.701046][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.747875][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.790436][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.833166][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.849468][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 260.871423][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.901738][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.933461][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.968460][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.007375][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.040676][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.055822][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.055906][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.075721][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.111951][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.148357][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.182306][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.216721][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.251387][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.287249][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.320690][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.351789][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.388430][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.422450][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.456532][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.492122][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.525780][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.559223][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.577886][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.611255][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.636096][ T9724] sock: sock_set_timeout: `syz.3.1716' (pid 9724) tries to set negative timeout [ 261.645798][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.685624][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.727278][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.889412][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.936104][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.970495][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.005967][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.039773][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.073869][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.109310][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.151486][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.187346][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.215026][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.251528][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.277922][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.312045][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.320903][ T6000] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 262.361044][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.396472][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.431785][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.477614][ T6000] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 262.477643][ T6000] usb 5-1: config 0 has no interface number 0 [ 262.477682][ T6000] usb 5-1: config 0 interface 62 has no altsetting 0 [ 262.491755][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.522437][ T6000] usb 5-1: New USB device found, idVendor=2584, idProduct=4a8f, bcdDevice=a4.2c [ 262.522468][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.522489][ T6000] usb 5-1: Product: syz [ 262.522504][ T6000] usb 5-1: Manufacturer: syz [ 262.522519][ T6000] usb 5-1: SerialNumber: syz [ 262.528577][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.570365][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.582929][ T6000] usb 5-1: config 0 descriptor?? [ 262.605129][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.637146][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.668550][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.703416][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.737757][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.769194][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.818512][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.852832][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.882453][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.895129][ T6000] usb-storage 5-1:0.62: USB Mass Storage device detected [ 262.920681][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.952488][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.978491][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.017019][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.549976][ T6062] udevd[6062]: setting mode of /dev/comedi3_subd0 to 020600 failed: Read-only file system [ 263.550116][ T6062] udevd[6062]: setting owner of /dev/comedi3_subd0 to uid=0, gid=0 failed: Read-only file system [ 267.009415][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 267.416495][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 267.802754][ T6062] udevd[6062]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 268.237855][ T9763] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1733'. [ 268.237881][ T9763] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1733'. [ 268.237897][ T9763] netlink: 'syz.1.1733': attribute type 6 has an invalid length. [ 268.237911][ T9763] netlink: 'syz.1.1733': attribute type 5 has an invalid length. [ 268.237924][ T9763] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1733'. [ 268.470903][ T5894] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 268.545475][ T5988] udevd[5988]: symlink '../../loop0' '/dev/disk/by-diskseq/71.tmp-b7:0' failed: Read-only file system [ 268.624001][ T5894] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 268.624034][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.680515][ T5894] usb 3-1: config 0 descriptor?? [ 268.731692][ T5894] cp210x 3-1:0.0: cp210x converter detected [ 269.298630][ C0] sched: DL replenish lagged too much [ 269.422626][ T5894] usb 3-1: cp210x converter now attached to ttyUSB0 [ 269.489132][ T5894] usb 3-1: USB disconnect, device number 16 [ 269.556960][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 269.712495][ T9774] syz.1.1739 uses obsolete (PF_INET,SOCK_PACKET) [ 280.367188][ T5894] cp210x 3-1:0.0: device disconnected [ 284.945171][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.969875][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.978491][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.998247][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.999214][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.172944][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.204021][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.205397][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.206853][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.208173][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.041707][ T5851] Bluetooth: hci5: command tx timeout [ 287.280939][ T5851] Bluetooth: hci6: command tx timeout [ 287.428257][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.442863][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.449549][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.468366][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.488150][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.128922][ T59] Bluetooth: hci5: command tx timeout [ 289.360892][ T59] Bluetooth: hci6: command tx timeout [ 289.520880][ T59] Bluetooth: hci7: command tx timeout [ 291.204694][ T59] Bluetooth: hci5: command tx timeout [ 291.440866][ T59] Bluetooth: hci6: command tx timeout [ 291.608879][ T59] Bluetooth: hci7: command tx timeout [ 292.311293][ T9765] kthread_run failed with err -4 [ 293.281056][ T59] Bluetooth: hci5: command tx timeout [ 293.521392][ T59] Bluetooth: hci6: command tx timeout [ 293.688603][ T59] Bluetooth: hci7: command tx timeout [ 293.814465][ T9801] chnl_net:caif_netlink_parms(): no params data found [ 293.833214][ T9799] chnl_net:caif_netlink_parms(): no params data found [ 293.857577][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 294.240972][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 295.760993][ T59] Bluetooth: hci7: command tx timeout [ 298.098211][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 298.110073][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 298.120831][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 298.122126][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 298.122962][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 298.647927][ T5851] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 298.666785][ T5851] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 298.668483][ T5851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 298.685992][ T5851] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 298.697041][ T5851] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 300.240945][ T59] Bluetooth: hci8: command tx timeout [ 300.720844][ T59] Bluetooth: hci9: command tx timeout [ 302.320808][ T59] Bluetooth: hci8: command tx timeout [ 302.801595][ T59] Bluetooth: hci9: command tx timeout [ 304.400899][ T59] Bluetooth: hci8: command tx timeout [ 304.880855][ T59] Bluetooth: hci9: command tx timeout [ 306.480773][ T5158] Bluetooth: hci8: command tx timeout [ 306.961036][ T5158] Bluetooth: hci9: command tx timeout [ 322.422571][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.422653][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.152719][ T5210] udevd[5210]: worker [6063] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 345.050922][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.070172][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.084067][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.085742][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.089889][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.476501][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.499705][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.515453][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.532679][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.533699][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.200769][ T59] Bluetooth: hci0: command tx timeout [ 347.538331][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.559977][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.573253][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.574710][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.577631][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.600785][ T5158] Bluetooth: hci1: command tx timeout [ 349.281287][ T5158] Bluetooth: hci0: command tx timeout [ 349.680900][ T5158] Bluetooth: hci2: command tx timeout [ 349.681502][ T5158] Bluetooth: hci1: command tx timeout [ 351.360864][ T59] Bluetooth: hci0: command tx timeout [ 351.760826][ T59] Bluetooth: hci1: command tx timeout [ 351.760861][ T59] Bluetooth: hci2: command tx timeout [ 353.440859][ T5158] Bluetooth: hci0: command tx timeout [ 353.844788][ T59] Bluetooth: hci1: command tx timeout [ 353.844851][ T5158] Bluetooth: hci2: command tx timeout [ 355.920881][ T5158] Bluetooth: hci2: command tx timeout [ 358.074847][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.101951][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.103411][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.104878][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.105818][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.139219][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.167353][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.190982][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.196185][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.197047][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.263133][ T5158] Bluetooth: hci3: command tx timeout [ 362.321080][ T5851] Bluetooth: hci3: command tx timeout [ 362.326238][ T59] Bluetooth: hci4: command tx timeout [ 364.400944][ T59] Bluetooth: hci4: command tx timeout [ 364.400979][ T59] Bluetooth: hci3: command tx timeout [ 366.480984][ T5851] Bluetooth: hci3: command tx timeout [ 366.481022][ T5851] Bluetooth: hci4: command tx timeout [ 368.560796][ T59] Bluetooth: hci4: command tx timeout [ 383.853991][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.854081][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.147960][ T5851] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 406.171611][ T5851] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 406.175302][ T5851] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 406.228237][ T5851] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 406.229122][ T5851] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 406.352420][ T5851] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 406.356165][ T5851] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 406.357443][ T5851] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 406.359419][ T5851] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 406.360301][ T5851] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 408.166569][ T5851] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 408.199346][ T5851] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 408.209754][ T5851] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 408.220271][ T5851] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 408.233309][ T5851] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 408.320929][ T59] Bluetooth: hci10: command tx timeout [ 408.481181][ T59] Bluetooth: hci11: command tx timeout [ 410.331067][ T5846] Bluetooth: hci12: command tx timeout [ 410.406995][ T5846] Bluetooth: hci10: command tx timeout [ 410.562063][ T5846] Bluetooth: hci11: command tx timeout [ 411.534864][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 411.534921][ T5846] Bluetooth: hci6: command 0x0406 tx timeout [ 411.534950][ T5846] Bluetooth: hci7: command 0x0406 tx timeout [ 412.401035][ T5849] Bluetooth: hci12: command tx timeout [ 412.481117][ T5849] Bluetooth: hci10: command tx timeout [ 412.641258][ T5849] Bluetooth: hci11: command tx timeout [ 414.480831][ T5849] Bluetooth: hci12: command tx timeout [ 414.562421][ T5849] Bluetooth: hci10: command tx timeout [ 414.720939][ T5849] Bluetooth: hci11: command tx timeout [ 416.481238][ T39] INFO: task kworker/1:5:6000 blocked for more than 143 seconds. [ 416.481273][ T39] Not tainted syzkaller #0 [ 416.481284][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.481299][ T39] task:kworker/1:5 state:D stack:20696 pid:6000 tgid:6000 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 416.481361][ T39] Workqueue: usb_hub_wq hub_event [ 416.481402][ T39] Call Trace: [ 416.481410][ T39] [ 416.481427][ T39] __schedule+0x16f3/0x4c20 [ 416.481488][ T39] ? preempt_schedule+0xae/0xc0 [ 416.481528][ T39] ? __pfx___schedule+0x10/0x10 [ 416.481557][ T39] ? preempt_schedule_common+0x83/0xd0 [ 416.481598][ T39] ? __pfx_preempt_schedule+0x10/0x10 [ 416.481643][ T39] ? schedule+0x91/0x360 [ 416.481678][ T39] schedule+0x165/0x360 [ 416.481713][ T39] schedule_timeout+0x9a/0x270 [ 416.481745][ T39] ? __pfx_schedule_timeout+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 416.481791][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.481826][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.481864][ T39] ? wait_for_completion+0x267/0x5d0 [ 416.481901][ T39] wait_for_completion+0x2bf/0x5d0 [ 416.481950][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 416.481993][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 416.482026][ T39] rcu_barrier+0x463/0x570 [ 416.482063][ T39] scsi_host_dev_release+0xab/0x300 [ 416.482091][ T39] ? __pfx_scsi_host_dev_release+0x10/0x10 [ 416.482115][ T39] device_release+0x99/0x1c0 [ 416.482145][ T39] kobject_put+0x22b/0x480 [ 416.482175][ T39] usb_stor_probe2+0x307/0xc60 [ 416.482208][ T39] ? __pfx_usb_stor_probe2+0x10/0x10 [ 416.482234][ T39] ? usb_stor_probe1+0x1312/0x18c0 [ 416.482275][ T39] storage_probe+0x773/0xe40 [ 416.482307][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 416.482335][ T39] ? __pfx_storage_probe+0x10/0x10 [ 416.482366][ T39] ? rt_spin_unlock+0x65/0x80 [ 416.482401][ T39] usb_probe_interface+0x665/0xc30 [ 416.482445][ T39] ? __pfx_usb_probe_interface+0x10/0x10 [ 416.482473][ T39] really_probe+0x26d/0x9e0 [ 416.482507][ T39] __driver_probe_device+0x18c/0x2f0 [ 416.482535][ T39] driver_probe_device+0x4f/0x430 [ 416.482565][ T39] __device_attach_driver+0x2ce/0x530 [ 416.482596][ T39] bus_for_each_drv+0x254/0x2e0 [ 416.482628][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 416.482654][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 416.482698][ T39] __device_attach+0x2bb/0x400 [ 416.482725][ T39] ? __pfx___device_attach+0x10/0x10 [ 416.482750][ T39] ? rt_spin_unlock+0x65/0x80 [ 416.482784][ T39] bus_probe_device+0x188/0x260 [ 416.482818][ T39] device_add+0x7b6/0xb50 [ 416.482845][ T39] usb_set_configuration+0x1a87/0x20e0 [ 416.482913][ T39] usb_generic_driver_probe+0x8d/0x150 [ 416.482945][ T39] usb_probe_device+0x1c1/0x390 [ 416.482979][ T39] ? __pfx_usb_probe_device+0x10/0x10 [ 416.483007][ T39] really_probe+0x26d/0x9e0 [ 416.483040][ T39] __driver_probe_device+0x18c/0x2f0 [ 416.483068][ T39] driver_probe_device+0x4f/0x430 [ 416.483098][ T39] __device_attach_driver+0x2ce/0x530 [ 416.483128][ T39] bus_for_each_drv+0x254/0x2e0 [ 416.483160][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 416.483187][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 416.483230][ T39] __device_attach+0x2bb/0x400 [ 416.483258][ T39] ? __pfx___device_attach+0x10/0x10 [ 416.483286][ T39] ? rt_spin_unlock+0x65/0x80 [ 416.483321][ T39] bus_probe_device+0x188/0x260 [ 416.483357][ T39] device_add+0x7b6/0xb50 [ 416.483384][ T39] usb_new_device+0xa29/0x16e0 [ 416.483424][ T39] ? __pfx_usb_new_device+0x10/0x10 [ 416.483460][ T39] hub_event+0x2958/0x4a20 [ 416.483548][ T39] ? __pfx_hub_event+0x10/0x10 [ 416.483577][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 416.483613][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.483646][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 416.483674][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 416.483704][ T39] process_scheduled_works+0xade/0x17b0 [ 416.483766][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.483816][ T39] worker_thread+0x8a0/0xda0 [ 416.483883][ T39] kthread+0x70e/0x8a0 [ 416.483923][ T39] ? __pfx_worker_thread+0x10/0x10 [ 416.483952][ T39] ? __pfx_kthread+0x10/0x10 [ 416.483992][ T39] ? __pfx_kthread+0x10/0x10 [ 416.484026][ T39] ret_from_fork+0x436/0x7d0 [ 416.484059][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 416.484097][ T39] ? __switch_to_asm+0x39/0x70 [ 416.484118][ T39] ? __switch_to_asm+0x33/0x70 [ 416.484138][ T39] ? __pfx_kthread+0x10/0x10 [ 416.484173][ T39] ret_from_fork_asm+0x1a/0x30 [ 416.484214][ T39] [ 416.484256][ T39] [ 416.484256][ T39] Showing all locks held in the system: [ 416.484266][ T39] 4 locks held by kworker/0:0/9: [ 416.484279][ T39] #0: ffff88803969e938 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.484364][ T39] #1: ffffc900000e7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.484423][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.484479][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/[ 416.484479][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.484544][ T39] 4 locks held by kworker/0:1/10: [ 416.484557][ T39] #0: ffff888058897538 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.484619][ T39] #1: ffffc900000f7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.484677][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.484733][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.484790][ T39] 2 locks held by kworker/u8:0/12: [ 416.484804][ T39] 2 locks held by ksoftirqd/0/15: [ 416.484817][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.484880][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.484937][ T39] 7 locks held by ktimers/0/16: [ 416.484951][ T39] 2 locks held by rcuc/0/20: [ 416.484963][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.485019][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.485078][ T39] 1 lock held by khungtaskd/39: [ 416.485091][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 416.485144][ T39] 5 locks held by kworker/u9:0/59: [ 416.485157][ T39] #0: ffff88802f5a4938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.485213][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.485271][ T39] #2: ffff888057b20e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 416.485324][ T39] #3: ffff888057b200a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 416.485385][ T39] #4: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 416.485454][ T39] 4 locks held by kworker/0:2/986: [ 416.485472][ T39] 3 locks held by kworker/u8:9/1302: [ 416.485484][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.485541][ T39] #1: ffffc900052afbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.485598][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 416.485661][ T39] 3 locks held by kworker/u8:11/3011: [ 416.485674][ T39] #0: ffff88814d135138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.485731][ T39] #1: ffffc9000d24fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.485790][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 416.485854][ T39] 3 locks held by kworker/u8:13/3556: [ 416.485868][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.485925][ T39] #1: ffffc9000dcbfbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.485982][ T39] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 416.486035][ T39] 6 locks held by kworker/u9:1/5158: [ 416.486048][ T39] #0: ffff8880377fc138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.486104][ T39] #1: ffffc9000fe8fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.486161][ T39] #2: ffff88805fcece80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 416.486214][ T39] #3: ffff88805fcec0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 416.486275][ T39] #4: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 416.486335][ T39] #5: ffff8880283fcb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 416.486391][ T39] 2 locks held by getty/5600: [ 416.486403][ T39] #0: ffff88823bf748a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 416.486466][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 416.486524][ T39] 1 lock held by syz-executor/5840: [ 416.486536][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 416.486598][ T39] 4 locks held by kworker/0:3/5845: [ 416.486611][ T39] #0: ffff888058884538 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.486672][ T39] #1: ffffc90004d5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.486751][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.486806][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.486872][ T39] 5 locks held by kworker/u9:5/5851: [ 416.486885][ T39] #0: ffff888032d2b938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.486942][ T39] #1: ffffc90004ddfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.487000][ T39] #2: ffff8880334a4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 416.487053][ T39] #3: ffff8880334a40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 416.487114][ T39] #4: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 416.487174][ T39] 1 lock held by syz-executor/5855: [ 416.487187][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 416.487251][ T39] 2 locks held by kworker/1:3/5894: [ 416.487263][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.487319][ T39] #1: ffffc900050cfbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.487380][ T39] 4 locks held by kworker/0:5/5931: [ 416.487393][ T39] #0: ffff8880589e1538 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.487454][ T39] #1: ffffc9000535fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.487532][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.487588][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.487645][ T39] 6 locks held by kworker/1:5/6000: [ 416.487657][ T39] #0: ffff88801deedd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.487713][ T39] #1: ffffc90005e6fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.487770][ T39] #2: ffff888027b9f188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 416.487825][ T39] #3: ffff888021721188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 416.487884][ T39] #4: ffff888039601150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 416.487934][ T39] #5: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 416.487989][ T39] 4 locks held by udevd/6063: [ 416.488001][ T39] #0: ffff8880340de4f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe10 [ 416.488055][ T39] #1: ffff88802fad1478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 416.488119][ T39] #2: ffff88803ed4e5a8 (kn->active#23){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 416.488181][ T39] #3: ffff888021721188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 416.488236][ T39] 1 lock held by syz.0.1735/9765: [ 416.488248][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 416.488299][ T39] 1 lock held by syz.4.1736/9770: [ 416.488312][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 416.488373][ T39] 1 lock held by syz.2.1744/9784: [ 416.488385][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 416.488446][ T39] 4 locks held by kworker/0:8/9786: [ 416.488458][ T39] #0: ffff888058897538 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.488521][ T39] #1: ffffc9000591fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.488598][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.488654][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.488712][ T39] 2 locks held by syz-executor/9799: [ 416.488724][ T39] #0: ffffffff8f1d7ce8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 416.488792][ T39] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 416.488858][ T39] 2 locks held by syz-executor/9804: [ 416.488871][ T39] #0: ffffffff8f1d7ce8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 416.488936][ T39] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 416.488994][ T39] 4 locks held by kworker/0:9/9806: [ 416.489006][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.489062][ T39] #1: ffffc900053efbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.489121][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.489175][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.489233][ T39] 4 locks held by kworker/0:11/9808: [ 416.489246][ T39] #0: ffff888058884138 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.489307][ T39] #1: ffffc900053afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.489385][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.489440][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.489498][ T39] 1 lock held by syz-executor/9824: [ 416.489511][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 416.489569][ T39] 1 lock held by syz-executor/9826: [ 416.489582][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 416.489641][ T39] 1 lock held by syz-executor/9836: [ 416.489653][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 416.489707][ T39] 1 lock held by syz-executor/9838: [ 416.489719][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 416.489772][ T39] 1 lock held by syz-executor/9842: [ 416.489784][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 416.489837][ T39] 1 lock held by syz-executor/9845: [ 416.489856][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 416.489908][ T39] 1 lock held by syz-executor/9848: [ 416.489921][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 416.489974][ T39] 4 locks held by kworker/0:17/9851: [ 416.489987][ T39] #0: ffff888058a09538 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.490049][ T39] #1: ffffc90003eefbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.490127][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 416.490184][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 416.490241][ T39] 3 locks held by kworker/0:18/9853: [ 416.490253][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.490310][ T39] #1: ffffc90003edfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.490367][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 416.490421][ T39] 1 lock held by syz-executor/9864: [ 416.490434][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 416.490487][ T39] 1 lock held by syz-executor/9866: [ 416.490500][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 416.561185][ T5849] Bluetooth: hci12: command tx timeout [ 416.870932][ T39] 1 lock held by syz-executor/9869: [ 416.870953][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 416.871018][ T39] [ 416.871024][ T39] ============================================= [ 416.871024][ T39] [ 416.871047][ T39] NMI backtrace for cpu 1 [ 416.871079][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 416.871120][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.871144][ T39] Call Trace: [ 416.871158][ T39] [ 416.871176][ T39] dump_stack_lvl+0x189/0x250 [ 416.871217][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.871250][ T39] ? __pfx__printk+0x10/0x10 [ 416.871288][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 416.871321][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 416.871354][ T39] ? __pfx__printk+0x10/0x10 [ 416.871383][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 416.871414][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 416.871447][ T39] watchdog+0xf93/0xfe0 [ 416.871482][ T39] ? watchdog+0x1de/0xfe0 [ 416.871516][ T39] kthread+0x70e/0x8a0 [ 416.871555][ T39] ? __pfx_watchdog+0x10/0x10 [ 416.871582][ T39] ? __pfx_kthread+0x10/0x10 [ 416.871628][ T39] ? __pfx_kthread+0x10/0x10 [ 416.871663][ T39] ret_from_fork+0x436/0x7d0 [ 416.871696][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 416.871732][ T39] ? __switch_to_asm+0x39/0x70 [ 416.871752][ T39] ? __switch_to_asm+0x33/0x70 [ 416.871772][ T39] ? __pfx_kthread+0x10/0x10 [ 416.871807][ T39] ret_from_fork_asm+0x1a/0x30 [ 416.871846][ T39] [ 416.871854][ T39] Sending NMI from CPU 1 to CPUs 0: [ 416.871882][ C0] NMI backtrace for cpu 0 [ 416.871896][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 416.871917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.871934][ C0] RIP: 0010:unwind_next_frame+0x7be/0x2390 [ 416.871961][ C0] Code: 08 48 89 df e8 93 ec aa 00 48 8b 3b 48 85 ff 0f 84 d3 0d 00 00 48 83 c7 38 e8 0e 28 00 00 49 89 c4 48 8b 34 24 e9 a9 02 00 00 <49> 8d 5e 40 48 89 d8 48 c1 e8 03 80 3c 28 00 74 11 48 89 df e8 59 [ 416.871978][ C0] RSP: 0018:ffffc90000156978 EFLAGS: 00000246 [ 416.871993][ C0] RAX: ffffc90000156a7d RBX: 0000000000000004 RCX: ffffffff8f30d040 [ 416.872007][ C0] RDX: ffffffff8fa7589e RSI: ffffffff8fa758a2 RDI: ffffffff8b621620 [ 416.872021][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: ffffffff8172c165 [ 416.872034][ C0] R10: ffffc90000156a98 R11: ffffffff81aaf310 R12: ffffffff8fa758a3 [ 416.872048][ C0] R13: ffffc90000156a98 R14: ffffc90000156a48 R15: ffffc90000156a80 [ 416.872063][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 416.872078][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.872091][ C0] CR2: 000055557dceb588 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 416.872108][ C0] Call Trace: [ 416.872114][ C0] [ 416.872125][ C0] ? unwind_next_frame+0xa5/0x2390 [ 416.872152][ C0] ? run_ktimerd+0xcf/0x190 [ 416.872180][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 416.872200][ C0] arch_stack_walk+0x11c/0x150 [ 416.872230][ C0] ? run_ktimerd+0xcf/0x190 [ 416.872258][ C0] stack_trace_save+0x9c/0xe0 [ 416.872277][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 416.872302][ C0] kasan_save_track+0x3e/0x80 [ 416.872323][ C0] ? kasan_save_track+0x3e/0x80 [ 416.872343][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 416.872364][ C0] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 416.872390][ C0] ? __alloc_skb+0x112/0x2d0 [ 416.872415][ C0] ? synproxy_send_client_synack+0x16c/0xe20 [ 416.872443][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 416.872463][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 416.872481][ C0] ? nft_do_chain+0x40c/0x1920 [ 416.872498][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 416.872516][ C0] ? nf_hook_slow+0xc2/0x220 [ 416.872540][ C0] ? NF_HOOK+0x206/0x3a0 [ 416.872564][ C0] ? NF_HOOK+0x30c/0x3a0 [ 416.872586][ C0] ? __netif_receive_skb+0x143/0x380 [ 416.872608][ C0] ? process_backlog+0x31e/0x900 [ 416.872631][ C0] ? __napi_poll+0xb3/0x540 [ 416.872652][ C0] ? net_rx_action+0x707/0xe00 [ 416.872675][ C0] ? handle_softirqs+0x22f/0x710 [ 416.872696][ C0] ? run_ktimerd+0xcf/0x190 [ 416.872744][ C0] __kasan_slab_alloc+0x6c/0x80 [ 416.872767][ C0] ? __alloc_skb+0x112/0x2d0 [ 416.872793][ C0] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 416.872822][ C0] __alloc_skb+0x112/0x2d0 [ 416.872865][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 416.872901][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 416.872929][ C0] ? nft_synproxy_do_eval+0x3c0/0x570 [ 416.872948][ C0] ? synproxy_pernet+0x45/0x270 [ 416.872971][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 416.872994][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 416.873016][ C0] ? nf_ip_checksum+0x13c/0x510 [ 416.873037][ C0] nft_synproxy_do_eval+0x345/0x570 [ 416.873060][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 416.873080][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 416.873111][ C0] nft_do_chain+0x40c/0x1920 [ 416.873135][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 416.873163][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 416.873199][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 416.873228][ C0] nft_do_chain_inet+0x25d/0x340 [ 416.873246][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 416.873265][ C0] ? __lock_acquire+0xab9/0xd20 [ 416.873295][ C0] ? NF_HOOK+0x9a/0x3a0 [ 416.873320][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 416.873340][ C0] nf_hook_slow+0xc2/0x220 [ 416.873369][ C0] NF_HOOK+0x206/0x3a0 [ 416.873395][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 416.873421][ C0] ? NF_HOOK+0x9a/0x3a0 [ 416.873444][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 416.873467][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 416.873495][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 416.873522][ C0] ? skb_dst+0x4f/0xd0 [ 416.873547][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 416.873575][ C0] NF_HOOK+0x30c/0x3a0 [ 416.873601][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 416.873627][ C0] ? NF_HOOK+0x9a/0x3a0 [ 416.873650][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 416.873676][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 416.873708][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 416.873732][ C0] __netif_receive_skb+0x143/0x380 [ 416.873754][ C0] ? rt_spin_unlock+0x65/0x80 [ 416.873779][ C0] ? process_backlog+0x27b/0x900 [ 416.873803][ C0] process_backlog+0x31e/0x900 [ 416.873833][ C0] __napi_poll+0xb3/0x540 [ 416.873865][ C0] net_rx_action+0x707/0xe00 [ 416.873888][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.873926][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 416.873972][ C0] handle_softirqs+0x22f/0x710 [ 416.874000][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 416.874029][ C0] run_ktimerd+0xcf/0x190 [ 416.874054][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 416.874080][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 416.874103][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 416.874125][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 416.874147][ C0] smpboot_thread_fn+0x53f/0xa60 [ 416.874170][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 416.874198][ C0] kthread+0x70e/0x8a0 [ 416.874227][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 416.874249][ C0] ? __pfx_kthread+0x10/0x10 [ 416.874280][ C0] ? __pfx_kthread+0x10/0x10 [ 416.874307][ C0] ret_from_fork+0x436/0x7d0 [ 416.874332][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 416.874359][ C0] ? __switch_to_asm+0x39/0x70 [ 416.874375][ C0] ? __switch_to_asm+0x33/0x70 [ 416.874391][ C0] ? __pfx_kthread+0x10/0x10 [ 416.874419][ C0] ret_from_fork_asm+0x1a/0x30 [ 416.874446][ C0] [ 417.060633][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 417.060657][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 417.060685][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.060698][ T39] Call Trace: [ 417.060708][ T39] [ 417.060718][ T39] dump_stack_lvl+0x99/0x250 [ 417.060757][ T39] ? __asan_memcpy+0x40/0x70 [ 417.060782][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.060823][ T39] ? __pfx__printk+0x10/0x10 [ 417.060862][ T39] vpanic+0x281/0x750 [ 417.060899][ T39] ? __pfx_vpanic+0x10/0x10 [ 417.060930][ T39] ? preempt_schedule+0xae/0xc0 [ 417.060966][ T39] ? preempt_schedule_common+0x83/0xd0 [ 417.061006][ T39] panic+0xb9/0xc0 [ 417.061037][ T39] ? __pfx_panic+0x10/0x10 [ 417.061070][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 417.061104][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 417.061137][ T39] watchdog+0xfd2/0xfe0 [ 417.061171][ T39] ? watchdog+0x1de/0xfe0 [ 417.061207][ T39] kthread+0x70e/0x8a0 [ 417.061245][ T39] ? __pfx_watchdog+0x10/0x10 [ 417.061273][ T39] ? __pfx_kthread+0x10/0x10 [ 417.061313][ T39] ? __pfx_kthread+0x10/0x10 [ 417.061348][ T39] ret_from_fork+0x436/0x7d0 [ 417.061381][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 417.061416][ T39] ? __switch_to_asm+0x39/0x70 [ 417.061437][ T39] ? __switch_to_asm+0x33/0x70 [ 417.061457][ T39] ? __pfx_kthread+0x10/0x10 [ 417.061491][ T39] ret_from_fork_asm+0x1a/0x30 [ 417.061529][ T39] [ 417.061816][ T39] Kernel Offset: disabled