last executing test programs: 1m3.302895754s ago: executing program 4 (id=1785): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x0) 1m2.834578862s ago: executing program 2 (id=1787): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000001900)={[{@mode}]}) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 1m2.657788155s ago: executing program 2 (id=1788): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000200)=0x6) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000680)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 1m1.93256474s ago: executing program 3 (id=1793): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) io_setup(0x226, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000a00)="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", 0x200, 0x200}]) 1m1.535879399s ago: executing program 0 (id=1795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 58.715315059s ago: executing program 4 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1b}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 58.206274307s ago: executing program 2 (id=1797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 58.150694332s ago: executing program 4 (id=1798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 57.98648883s ago: executing program 2 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 57.709640679s ago: executing program 2 (id=1800): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r1, 0x0, 0x3, 0x1}}, 0x20) 57.482098438s ago: executing program 2 (id=1801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 56.976865106s ago: executing program 4 (id=1802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESOCT], 0xffc9) 56.703895435s ago: executing program 4 (id=1803): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 56.362691688s ago: executing program 4 (id=1804): r0 = userfaultfd(0x80801) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 51.022932159s ago: executing program 0 (id=1808): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 51.022449158s ago: executing program 3 (id=1809): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000ffff27bd01000000df2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a05004c0012800e00010069703667726574617000000038000280140007000000000000000000ffff"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) process_madvise(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x4, 0x0) 51.022225121s ago: executing program 3 (id=1810): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0xffff, 0x6, 0x4, 0x27ff, 0x2800, 0x42, 0xbb6, 0x19, 0x8, {0x8, 0x802}, 0xd0, 0x7}}) 51.005079865s ago: executing program 0 (id=1811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 51.004596784s ago: executing program 3 (id=1812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 51.00416917s ago: executing program 0 (id=1813): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 50.643617189s ago: executing program 3 (id=1814): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000a80)="d5", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) 50.277651602s ago: executing program 0 (id=1815): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0xd0) 50.01513922s ago: executing program 0 (id=1816): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 49.495709336s ago: executing program 3 (id=1817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xff3) 42.138989791s ago: executing program 32 (id=1801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 38.872645799s ago: executing program 33 (id=1804): r0 = userfaultfd(0x80801) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 34.71871674s ago: executing program 34 (id=1816): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 34.018958314s ago: executing program 35 (id=1817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xff3) 20.07568863s ago: executing program 1 (id=1846): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) 20.074778397s ago: executing program 1 (id=1847): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000040)=0xfffffe3f) 20.057075846s ago: executing program 1 (id=1848): creat(&(0x7f0000000100)='./file0\x00', 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x200000000000000, 0x1}}, 0x40) 20.040016337s ago: executing program 1 (id=1849): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x800000000000}) 19.881133374s ago: executing program 1 (id=1850): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000000540)=ANY=[], 0x10}, {0x0, 0x28}], 0x2, 0x0, 0x0, 0x44011}, 0x0) 14.96830543s ago: executing program 1 (id=1851): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) 0s ago: executing program 36 (id=1851): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) kernel console output (not intermixed with test programs): g 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 112.650876][ T31] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 112.650901][ T31] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 112.650926][ T31] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.650968][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 112.650989][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.666214][ T31] usb 2-1: config 0 descriptor?? [ 112.669016][ T6152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.669272][ T6152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.715894][ T31] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 112.981445][ T10] usb 2-1: USB disconnect, device number 4 [ 113.007914][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 113.623929][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 113.856444][ T37] audit: type=1400 audit(1756886503.400:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6196 comm="syz.1.102" src=1 dest=20000 netif=wpan0 [ 113.951516][ T6201] Bluetooth: MGMT ver 1.23 [ 114.279171][ T6211] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 114.279193][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.109'. [ 114.568174][ T6220] Bluetooth: MGMT ver 1.23 [ 115.127861][ T6238] netlink: 'syz.1.120': attribute type 30 has an invalid length. [ 115.346482][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.507098][ T31] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.507133][ T31] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.507173][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.507194][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.565605][ T6239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.603028][ T31] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.956510][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.036468][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.198407][ T5931] usb 3-1: USB disconnect, device number 4 [ 116.885046][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 117.830914][ T6319] dummy0: entered promiscuous mode [ 117.941709][ T6323] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 117.941732][ T6323] netlink: 244 bytes leftover after parsing attributes in process `syz.0.158'. [ 118.646564][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.810162][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 118.812643][ T31] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.812672][ T31] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.812697][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.812727][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 118.812751][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.879092][ T31] usb 5-1: config 0 descriptor?? [ 119.301476][ T31] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 119.306490][ T31] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 119.306521][ T31] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 119.306545][ T31] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 119.306572][ T31] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 119.316829][ T31] magicmouse 0003:05AC:0324.0004: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.4-1/input0 [ 119.317472][ T31] magicmouse 0003:05AC:0324.0004: magicmouse input not registered [ 119.392694][ T31] magicmouse 0003:05AC:0324.0004: probe with driver magicmouse failed with error -12 [ 119.505666][ T1230] usb 5-1: USB disconnect, device number 2 [ 119.649619][ T6360] fido_id[6360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 120.086577][ T1230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.238799][ T1230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.238830][ T1230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.238867][ T1230] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 120.238889][ T1230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.320267][ T1230] usb 1-1: config 0 descriptor?? [ 120.768633][ T1230] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x2 [ 120.772649][ T1230] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 120.950940][ T1230] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 120.950996][ T1230] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 120.953883][ T1230] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 120.996986][ T1230] usb 1-1: USB disconnect, device number 4 [ 121.142254][ T6387] fido_id[6387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 121.927009][ T1230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.996586][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.089721][ T1230] usb 4-1: Using ep0 maxpacket: 16 [ 122.113840][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.113873][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.113908][ T1230] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 122.113930][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.158919][ T1230] usb 4-1: config 0 descriptor?? [ 122.160560][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.160595][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.160617][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.160659][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 122.160679][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.194682][ T9] usb 1-1: config 0 descriptor?? [ 122.608270][ T1230] konepure 0003:1E7D:2DB4.0006: item fetching failed at offset 0/4 [ 122.609060][ T1230] konepure 0003:1E7D:2DB4.0006: parse failed [ 122.609132][ T1230] konepure 0003:1E7D:2DB4.0006: probe with driver konepure failed with error -22 [ 122.645049][ T9] hid (null): bogus close delimiter [ 122.668525][ T9] kye 0003:0458:5011.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 122.698476][ T9] kye 0003:0458:5011.0007: bogus close delimiter [ 122.698504][ T9] kye 0003:0458:5011.0007: item 0 4 2 10 parsing failed [ 122.699342][ T9] kye 0003:0458:5011.0007: parse failed [ 122.699411][ T9] kye 0003:0458:5011.0007: probe with driver kye failed with error -22 [ 122.890563][ T5931] usb 1-1: USB disconnect, device number 5 [ 122.897088][ T1903] usb 4-1: USB disconnect, device number 4 [ 123.017897][ T6439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.209'. [ 123.586095][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 123.626454][ T6020] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.781010][ T6020] usb 2-1: Using ep0 maxpacket: 16 [ 123.783482][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.783513][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.783535][ T6020] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.783575][ T6020] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.783598][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.872677][ T6020] usb 2-1: config 0 descriptor?? [ 124.351465][ T6020] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input6 [ 124.411214][ T6475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.226'. [ 124.411682][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.226'. [ 124.454026][ T6020] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 124.575616][ T6020] usb 2-1: USB disconnect, device number 5 [ 124.637115][ T6480] fido_id[6480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 125.511254][ T6505] sp0: Synchronizing with TNC [ 125.708234][ T6515] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.243'. [ 126.011585][ T37] audit: type=1326 audit(1756886515.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 126.015270][ T37] audit: type=1326 audit(1756886515.560:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 126.023821][ T37] audit: type=1326 audit(1756886515.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 126.076988][ T37] audit: type=1326 audit(1756886515.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 126.077043][ T37] audit: type=1326 audit(1756886515.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 126.676196][ T6542] program syz.4.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.166498][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.308432][ T1903] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 127.329816][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.329844][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.329969][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.330023][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 127.330048][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 127.332437][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.332464][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.332483][ T9] usb 3-1: Product: syz [ 127.332494][ T9] usb 3-1: Manufacturer: syz [ 127.371881][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 127.372978][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 127.419587][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 127.421013][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.466020][ T1903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.466046][ T1903] usb 2-1: config 0 has no interface number 0 [ 127.466094][ T1903] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 127.466116][ T1903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.496122][ T1903] usb 2-1: config 0 descriptor?? [ 127.530215][ T1903] usb 2-1: selecting invalid altsetting 1 [ 127.553635][ T1903] dvb_ttusb_budget: ttusb_init_controller: error [ 127.553657][ T1903] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 127.673773][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 127.908308][ T1230] usb 3-1: USB disconnect, device number 5 [ 128.032789][ T1903] DVB: Unable to find symbol cx22700_attach() [ 128.144330][ T1903] DVB: Unable to find symbol tda10046_attach() [ 128.144345][ T1903] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 128.165345][ T1903] usb 2-1: USB disconnect, device number 6 [ 129.106613][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.278141][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.278177][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.278218][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 129.278241][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.293149][ T9] usb 3-1: config 0 descriptor?? [ 129.643060][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 129.771301][ T6622] dummy0: entered promiscuous mode [ 129.782333][ T9] elecom 0003:056E:010D.0009: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.2-1/input0 [ 129.828053][ T6622] dummy0: left promiscuous mode [ 129.958341][ T1230] usb 3-1: USB disconnect, device number 6 [ 130.135461][ T6628] fido_id[6628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 130.185806][ T6633] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 130.185831][ T6633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.261111][ T6633] vhci_hcd vhci_hcd.0: Device attached [ 130.272621][ T6635] vhci_hcd: connection closed [ 130.299345][ T3622] vhci_hcd: stop threads [ 130.300026][ T3622] vhci_hcd: release socket [ 130.300091][ T3622] vhci_hcd: disconnect device [ 130.841325][ T6650] sp0: Synchronizing with TNC [ 130.854195][ T6654] sp0: Found TNC [ 131.656520][ T1230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.810568][ T1230] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.810602][ T1230] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.810642][ T1230] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.810664][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.844759][ T6672] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.862569][ T1230] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.157320][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.306463][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 132.309419][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.309504][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.309543][ T31] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 132.309564][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.428553][ T31] usb 2-1: config 0 descriptor?? [ 132.479937][ T1903] usb 5-1: USB disconnect, device number 3 [ 132.853177][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.853334][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.895333][ T31] hid_mf 0003:0079:1801.000A: item fetching failed at offset 0/2 [ 132.896139][ T31] hid_mf 0003:0079:1801.000A: HID parse failed. [ 132.896208][ T31] hid_mf 0003:0079:1801.000A: probe with driver hid_mf failed with error -22 [ 133.097298][ T31] usb 2-1: USB disconnect, device number 7 [ 133.861647][ T6735] capability: warning: `syz.0.338' uses 32-bit capabilities (legacy support in use) [ 134.106409][ T1230] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.260824][ T1230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.260876][ T1230] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 134.260898][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.308599][ T1230] usb 2-1: config 0 descriptor?? [ 134.742662][ T1230] logitech 0003:046D:C50C.000B: unbalanced delimiter at end of report description [ 134.743503][ T1230] logitech 0003:046D:C50C.000B: parse failed [ 134.743606][ T1230] logitech 0003:046D:C50C.000B: probe with driver logitech failed with error -22 [ 134.970170][ T6766] netlink: 'syz.0.350': attribute type 10 has an invalid length. [ 134.974301][ T1230] usb 2-1: USB disconnect, device number 8 [ 135.063592][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.080974][ T6766] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 135.285061][ T6774] tipc: Enabling of bearer rejected, failed to enable media [ 135.462103][ T6778] netlink: 56 bytes leftover after parsing attributes in process `syz.2.358'. [ 135.462262][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 135.959935][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.366'. [ 135.960039][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.366'. [ 136.161277][ T6020] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.311037][ T6020] usb 4-1: Using ep0 maxpacket: 32 [ 136.313566][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.313597][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.315173][ T6020] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.315197][ T6020] usb 4-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 136.315217][ T6020] usb 4-1: Manufacturer: syz [ 136.388536][ T6020] usb 4-1: config 0 descriptor?? [ 136.405337][ T6020] hub 4-1:0.0: USB hub found [ 136.613285][ T6020] hub 4-1:0.0: 1 port detected [ 136.756669][ T1903] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.814941][ T6020] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 136.814967][ T6020] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 136.839681][ T6020] usbhid 4-1:0.0: can't add hid device: -71 [ 136.839805][ T6020] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.888737][ T6020] usb 4-1: USB disconnect, device number 5 [ 136.926454][ T1903] usb 3-1: Using ep0 maxpacket: 16 [ 136.936648][ T1903] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 136.936676][ T1903] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 136.936695][ T1903] usb 3-1: Product: syz [ 136.936708][ T1903] usb 3-1: SerialNumber: syz [ 136.953550][ T1903] usb 3-1: config 0 descriptor?? [ 136.972621][ T1903] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 136.975206][ T1903] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 136.975700][ T1903] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 136.975784][ T1903] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 137.185938][ T9] usb 3-1: USB disconnect, device number 7 [ 137.376546][ T1903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.536482][ T1903] usb 5-1: Using ep0 maxpacket: 32 [ 137.544146][ T1903] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.544175][ T1903] usb 5-1: config 0 has no interface number 0 [ 137.544267][ T1903] usb 5-1: config 0 interface 184 has no altsetting 0 [ 137.551425][ T1903] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.551451][ T1903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.551469][ T1903] usb 5-1: Product: syz [ 137.551481][ T1903] usb 5-1: Manufacturer: syz [ 137.551494][ T1903] usb 5-1: SerialNumber: syz [ 137.556941][ T1903] usb 5-1: config 0 descriptor?? [ 137.591005][ T1903] smsc75xx v1.0.0 [ 138.206746][ T1903] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 138.206776][ T1903] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 138.206794][ T1903] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 138.207399][ T1903] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 138.249684][ T1903] usb 5-1: USB disconnect, device number 4 [ 138.399188][ T6853] netlink: 'syz.3.393': attribute type 62 has an invalid length. [ 138.698343][ T6860] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 138.699771][ T10] kernel write not supported for file task/188/attr/keycreate (pid: 10 comm: kworker/0:1) [ 138.766515][ T1903] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 138.931763][ T1903] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 138.931790][ T1903] usb 1-1: config 0 has no interface number 0 [ 138.955288][ T1903] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 138.955317][ T1903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.955335][ T1903] usb 1-1: Product: syz [ 138.955348][ T1903] usb 1-1: Manufacturer: syz [ 138.955360][ T1903] usb 1-1: SerialNumber: syz [ 138.982964][ T1903] usb 1-1: config 0 descriptor?? [ 139.228176][ T1903] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 139.249775][ T1903] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 139.250905][ T1903] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 139.250963][ T1903] usb 1-1: media controller created [ 139.255671][ T1903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.427529][ T6885] max out of range [ 139.513969][ T1903] DVB: Unable to find symbol dib7000p_attach() [ 139.513985][ T1903] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 139.513998][ T1903] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 139.514814][ T1903] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 139.514869][ T1903] usb 1-1: media controller created [ 139.531902][ T6883] can0: slcan on ptm0. [ 139.539042][ T1903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.632247][ T1903] dib0700: the master dib7090 has to be initialized first [ 139.632263][ T1903] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 139.654548][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 139.654570][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 139.654595][ T6888] netlink: 'syz.2.410': attribute type 14 has an invalid length. [ 139.654608][ T6888] netlink: 'syz.2.410': attribute type 13 has an invalid length. [ 139.725246][ T6881] can0 (unregistered): slcan off ptm0. [ 139.786512][ T1903] rc_core: IR keymap rc-dib0700-rc5 not found [ 139.786532][ T1903] Registered IR keymap rc-empty [ 139.788654][ T1903] dvb-usb: could not initialize remote control. [ 139.788666][ T1903] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 139.883826][ T6893] netlink: 72 bytes leftover after parsing attributes in process `syz.1.412'. [ 139.883846][ T6893] tc_dump_action: action bad kind [ 140.006094][ T1230] usb 1-1: USB disconnect, device number 6 [ 140.048445][ T6897] ======================================================= [ 140.048445][ T6897] WARNING: The mand mount option has been deprecated and [ 140.048445][ T6897] and is ignored by this kernel. Remove the mand [ 140.048445][ T6897] option from the mount to silence this warning. [ 140.048445][ T6897] ======================================================= [ 140.115458][ T1230] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 140.920966][ T1903] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 140.994834][ T6930] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 141.090554][ T1903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.090586][ T1903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.090625][ T1903] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 141.090647][ T1903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.107947][ T1903] usb 2-1: config 0 descriptor?? [ 141.266599][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.416587][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 141.421984][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.425867][ T10] usb 5-1: config 4 interface 0 has no altsetting 0 [ 141.447032][ T10] usb 5-1: string descriptor 0 read error: -22 [ 141.449066][ T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 141.449091][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 141.571391][ T10] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 141.638938][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.639369][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 141.639421][ T10] usb 5-1: media controller created [ 141.654531][ T1903] stadia 0003:18D1:9400.000C: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0 [ 141.654564][ T1903] stadia 0003:18D1:9400.000C: no inputs found [ 141.654576][ T1903] stadia 0003:18D1:9400.000C: force feedback init failed [ 141.765824][ T5931] usb 2-1: USB disconnect, device number 9 [ 141.834764][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.886011][ T6946] fido_id[6946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 142.012237][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 142.209088][ T10] usb 5-1: USB disconnect, device number 5 [ 143.236990][ T6986] xt_limit: Overflow, try lower: 271964/0 [ 143.575272][ T6997] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 143.575329][ T6997] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 143.575381][ T6997] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 143.575502][ T6997] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 143.596648][ T6997] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 143.596711][ T6997] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 143.596759][ T6997] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 143.596881][ T6997] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 143.596926][ T6997] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 143.596972][ T6997] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 143.597063][ T6997] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 143.597113][ T6997] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 143.597162][ T6997] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 143.597245][ T6997] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 144.113961][ T7009] team0: Device gtp0 is of different type [ 144.797216][ T7033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.201225][ T7051] syz.3.486 uses obsolete (PF_INET,SOCK_PACKET) [ 145.776594][ T7069] rdma_op ffff88805a773270 conn xmit_rdma 0000000000000000 [ 146.492411][ T7096] process 'syz.0.508' launched '/dev/fd/3' with NULL argv: empty string added [ 146.526482][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.676151][ T7102] netlink: 87 bytes leftover after parsing attributes in process `syz.2.511'. [ 146.690872][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.690902][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.690941][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 146.690963][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.758361][ T31] usb 2-1: config 0 descriptor?? [ 147.193038][ T31] kye 0003:0458:5011.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 147.261055][ T31] kye 0003:0458:5011.000D: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 147.261089][ T31] kye 0003:0458:5011.000D: tablet-enabling feature report not found [ 147.261104][ T31] kye 0003:0458:5011.000D: tablet enabling failed [ 147.433933][ T31] usb 2-1: USB disconnect, device number 10 [ 147.766473][ T5931] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.816514][ T6020] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 147.935963][ T5931] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 147.935994][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.966409][ T6020] usb 1-1: Using ep0 maxpacket: 32 [ 147.972691][ T6020] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 147.972719][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.014951][ T5931] usb 3-1: config 0 descriptor?? [ 148.038276][ T6020] usb 1-1: config 0 descriptor?? [ 148.470093][ T5931] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 148.470129][ T5931] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 148.470156][ T5931] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 148.470182][ T5931] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 148.470206][ T5931] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 148.487463][ T5931] elecom 0003:056E:00E6.000E: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.2-1/input0 [ 148.567103][ T6020] konepure 0003:1E7D:2DBE.000F: hidraw1: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 148.664005][ T9] usb 3-1: USB disconnect, device number 8 [ 148.759257][ T7152] fido_id[7152]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 148.789234][ T6020] usb 1-1: USB disconnect, device number 7 [ 148.838294][ T7157] netlink: 'syz.3.537': attribute type 10 has an invalid length. [ 148.963514][ T7158] fido_id[7158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 149.469195][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 149.840445][ T7189] overlayfs: missing 'workdir' [ 149.862835][ T37] audit: type=1326 audit(1756886539.410:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.862886][ T37] audit: type=1326 audit(1756886539.410:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.862933][ T37] audit: type=1326 audit(1756886539.410:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.862973][ T37] audit: type=1326 audit(1756886539.410:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.874104][ T37] audit: type=1326 audit(1756886539.410:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.874148][ T37] audit: type=1326 audit(1756886539.420:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.874192][ T37] audit: type=1326 audit(1756886539.420:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.879831][ T37] audit: type=1326 audit(1756886539.430:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.879898][ T37] audit: type=1326 audit(1756886539.430:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 149.879934][ T37] audit: type=1326 audit(1756886539.430:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7187 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64b4cdebe9 code=0x7ffc0000 [ 150.580944][ T7214] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 150.617609][ T6020] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 150.769010][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.769043][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.769082][ T6020] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 150.769103][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.822722][ T6020] usb 4-1: config 0 descriptor?? [ 151.365956][ T7238] vlan0: entered promiscuous mode [ 151.404668][ T7238] team0: Port device vlan0 added [ 151.496558][ T6020] usb 4-1: USB disconnect, device number 6 [ 151.914619][ T7256] comedi comedi0: Minor 7 could not be opened [ 152.429912][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 152.873788][ T7290] tipc: Started in network mode [ 152.873817][ T7290] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 152.894514][ T7290] tipc: Enabled bearer , priority 10 [ 153.636968][ T7314] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 153.683528][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.707303][ T7314] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.765042][ T5846] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 153.989028][ T6020] tipc: Node number set to 10398378 [ 154.025281][ T7330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.438251][ T5846] Bluetooth: hci2: command tx timeout [ 154.896654][ T5931] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.063330][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 155.072390][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.072418][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.072456][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.072479][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.128595][ T5931] usb 4-1: config 0 descriptor?? [ 155.135231][ T5931] hub 4-1:0.0: USB hub found [ 155.351235][ T5931] hub 4-1:0.0: 29 ports detected [ 155.361819][ T5931] hub 4-1:0.0: insufficient power available to use all downstream ports [ 155.628212][ T7375] netlink: 56 bytes leftover after parsing attributes in process `syz.1.644'. [ 155.649020][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.644'. [ 155.791451][ T5931] usb 4-1: USB disconnect, device number 7 [ 156.646550][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.666608][ T6020] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.798659][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 156.798688][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.805242][ T10] usb 3-1: config 0 descriptor?? [ 156.820416][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.820447][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.820469][ T6020] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.820509][ T6020] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.820530][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.826051][ T6020] usb 5-1: config 0 descriptor?? [ 156.989544][ T7404] xt_socket: unknown flags 0xd0 [ 157.046524][ T5931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.212876][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.212908][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.212946][ T5931] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 157.213023][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.226497][ T1230] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.291953][ T6020] plantronics 0003:047F:FFFF.0011: unbalanced delimiter at end of report description [ 157.292639][ T6020] plantronics 0003:047F:FFFF.0011: parse failed [ 157.292740][ T6020] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 157.326889][ T5931] usb 2-1: config 0 descriptor?? [ 157.378783][ T1230] usb 1-1: Using ep0 maxpacket: 8 [ 157.383478][ T1230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 157.383524][ T1230] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 157.383546][ T1230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.395803][ T1230] usb 1-1: config 0 descriptor?? [ 157.437906][ T10] ath6kl: Failed to read usb control message: -71 [ 157.437950][ T10] ath6kl: Unable to read the bmi data from the device: -71 [ 157.437962][ T10] ath6kl: unable to read target info byte count: -71 [ 157.444911][ T10] ath6kl: Failed to init ath6kl core: -71 [ 157.496192][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 157.525442][ T6020] usb 5-1: USB disconnect, device number 6 [ 157.620174][ T10] usb 3-1: USB disconnect, device number 9 [ 157.763455][ T5931] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 157.819970][ T5931] hid-retrode 0003:0403:97C1.0012: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 157.867909][ T1230] corsair 0003:1B1C:1B09.0013: unbalanced delimiter at end of report description [ 157.868728][ T1230] corsair 0003:1B1C:1B09.0013: parse failed [ 157.868830][ T1230] corsair 0003:1B1C:1B09.0013: probe with driver corsair failed with error -22 [ 157.994701][ T6020] usb 2-1: USB disconnect, device number 11 [ 158.042155][ T7412] loop6: detected capacity change from 0 to 524288000 [ 158.049652][ T5927] usb 1-1: USB disconnect, device number 8 [ 159.077098][ T6020] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.104973][ T7439] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 159.235569][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.235615][ T6020] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 159.235639][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.270318][ T6020] usb 4-1: config 0 descriptor?? [ 159.319731][ T5931] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.479611][ T5931] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 159.479637][ T5931] usb 1-1: config 0 has no interface number 0 [ 159.479684][ T5931] usb 1-1: config 0 interface 176 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.479710][ T5931] usb 1-1: config 0 interface 176 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.479745][ T5931] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 159.479767][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.505275][ T5931] usb 1-1: config 0 descriptor?? [ 159.727123][ T6020] logitech-djreceiver 0003:046D:C71F.0014: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 159.951612][ T10] usb 4-1: USB disconnect, device number 8 [ 159.975379][ T5931] uclogic 0003:256C:006D.0015: interface is invalid, ignoring [ 160.056557][ T7456] fido_id[7456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 160.192617][ T1903] usb 1-1: USB disconnect, device number 9 [ 160.266556][ T5931] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 160.419631][ T5931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.419660][ T5931] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.419682][ T5931] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.425178][ T5931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 160.425207][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.425225][ T5931] usb 2-1: Product: syz [ 160.425238][ T5931] usb 2-1: Manufacturer: syz [ 160.425250][ T5931] usb 2-1: SerialNumber: syz [ 160.453410][ T5931] hub 2-1:1.0: bad descriptor, ignoring hub [ 160.453449][ T5931] hub 2-1:1.0: probe with driver hub failed with error -5 [ 160.695072][ T5931] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 161.169517][ T1903] usb 2-1: USB disconnect, device number 12 [ 161.182774][ T1903] usblp0: removed [ 161.556667][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.709240][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.709270][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.719279][ T9] usb 4-1: config 0 descriptor?? [ 161.730510][ T9] cp210x 4-1:0.0: cp210x converter detected [ 161.886472][ T6020] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.046984][ T6020] usb 3-1: Using ep0 maxpacket: 16 [ 162.050534][ T6020] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 162.050581][ T6020] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 162.050624][ T6020] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 162.050647][ T6020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.116668][ T6020] usb 3-1: config 0 descriptor?? [ 162.297544][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 162.371261][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 162.371550][ T7510] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 162.371579][ T7510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.392779][ T1230] usb 4-1: USB disconnect, device number 9 [ 162.487374][ T1230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 162.551537][ T6020] saitek 0003:06A3:0621.0016: unknown main item tag 0x0 [ 162.551574][ T6020] saitek 0003:06A3:0621.0016: unknown main item tag 0x0 [ 162.551599][ T6020] saitek 0003:06A3:0621.0016: unknown main item tag 0x0 [ 162.551624][ T6020] saitek 0003:06A3:0621.0016: unknown main item tag 0x0 [ 162.551650][ T6020] saitek 0003:06A3:0621.0016: unknown main item tag 0x0 [ 162.587102][ T6020] saitek 0003:06A3:0621.0016: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 162.651724][ T7516] netlink: 260 bytes leftover after parsing attributes in process `syz.0.709'. [ 162.651749][ T7516] netlink: 260 bytes leftover after parsing attributes in process `syz.0.709'. [ 162.718788][ T1230] cp210x 4-1:0.0: device disconnected [ 162.795955][ T6020] usb 3-1: USB disconnect, device number 10 [ 162.946584][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.040127][ T7522] fido_id[7522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 163.099427][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.099460][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.099499][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 163.099521][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.151011][ T9] usb 5-1: config 0 descriptor?? [ 163.576127][ T9] playstation 0003:054C:0DF2.0017: unbalanced delimiter at end of report description [ 163.594522][ T9] playstation 0003:054C:0DF2.0017: Parse failed [ 163.594601][ T9] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -22 [ 163.813454][ T9] usb 5-1: USB disconnect, device number 7 [ 164.433249][ T1230] libceph: connect (1)[c::]:6789 error -101 [ 164.436087][ T1230] libceph: mon0 (1)[c::]:6789 connect error [ 164.442776][ T1230] libceph: connect (1)[c::]:6789 error -101 [ 164.442984][ T1230] libceph: mon0 (1)[c::]:6789 connect error [ 164.491411][ T7565] tipc: Enabling of bearer rejected, failed to enable media [ 164.699516][ T1230] libceph: connect (1)[c::]:6789 error -101 [ 164.701146][ T1230] libceph: mon0 (1)[c::]:6789 connect error [ 165.016541][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.094051][ T1230] IPVS: starting estimator thread 0... [ 165.103855][ T7586] IPVS: ip_vs_add_dest(): server weight less than zero [ 165.169786][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 165.172595][ T9] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 165.172654][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.172680][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.172720][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 165.172743][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.186511][ T7587] IPVS: using max 7 ests per chain, 16800 per kthread [ 165.186638][ T7560] ceph: No mds server is up or the cluster is laggy [ 165.229264][ T1230] libceph: connect (1)[c::]:6789 error -101 [ 165.229472][ T1230] libceph: mon0 (1)[c::]:6789 connect error [ 165.264415][ T9] usb 5-1: config 0 descriptor?? [ 165.285050][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 165.509605][ T7595] netlink: 'syz.1.744': attribute type 5 has an invalid length. [ 165.714701][ T9] usb 5-1: USB disconnect, device number 8 [ 165.714802][ C1] pxrc 5-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 165.796830][ T7603] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 166.247737][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 166.247754][ T37] audit: type=1326 audit(1756886555.800:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 166.258692][ T37] audit: type=1326 audit(1756886555.800:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 166.328164][ T37] audit: type=1326 audit(1756886555.880:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 166.330534][ T37] audit: type=1326 audit(1756886555.880:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 166.330793][ T37] audit: type=1326 audit(1756886555.880:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 166.331428][ T37] audit: type=1326 audit(1756886555.880:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 166.332818][ T37] audit: type=1326 audit(1756886555.880:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 166.443673][ T7620] bridge1: entered promiscuous mode [ 166.443704][ T7620] bridge1: entered allmulticast mode [ 166.446414][ T6020] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.483664][ T7620] team0: Port device bridge1 added [ 166.597929][ T6020] usb 1-1: Using ep0 maxpacket: 8 [ 166.600521][ T6020] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.602312][ T6020] usb 1-1: config 179 has no interface number 0 [ 166.602366][ T6020] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.602388][ T6020] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.602413][ T6020] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.602444][ T6020] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.602466][ T6020] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.602506][ T6020] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.602527][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.708230][ T7614] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.951554][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.952904][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.077387][ T37] audit: type=1800 audit(1756886556.620:42): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.761" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 167.176367][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 167.176434][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 167.176759][ T6020] usb 1-1: USB disconnect, device number 10 [ 167.786512][ T1230] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.836587][ T1903] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.950623][ T1230] usb 3-1: Using ep0 maxpacket: 16 [ 167.955537][ T1230] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.955561][ T1230] usb 3-1: config 0 has no interface number 0 [ 167.961629][ T1230] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 167.961655][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.961674][ T1230] usb 3-1: Product: syz [ 167.961689][ T1230] usb 3-1: Manufacturer: syz [ 167.961702][ T1230] usb 3-1: SerialNumber: syz [ 167.987939][ T1903] usb 5-1: Using ep0 maxpacket: 32 [ 167.992302][ T1903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 167.997103][ T1903] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.997127][ T1903] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.997145][ T1903] usb 5-1: Product: syz [ 167.997158][ T1903] usb 5-1: Manufacturer: syz [ 167.997172][ T1903] usb 5-1: SerialNumber: syz [ 168.014730][ T1903] usb 5-1: config 0 descriptor?? [ 168.023036][ T7646] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 168.087039][ T1903] hub 5-1:0.0: bad descriptor, ignoring hub [ 168.087077][ T1903] hub 5-1:0.0: probe with driver hub failed with error -5 [ 168.090458][ T1230] usb 3-1: config 0 descriptor?? [ 168.113559][ T7658] sp0: Synchronizing with TNC [ 168.340624][ T1230] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 168.356969][ T1230] gspca_spca1528: reg_w err -71 [ 168.376663][ T1230] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 168.380531][ T1230] usb 3-1: USB disconnect, device number 11 [ 168.396787][ T5927] usb 5-1: USB disconnect, device number 9 [ 168.656584][ T7671] warning: `syz.0.780' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 168.766432][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.926846][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 168.928914][ T5927] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 168.970067][ T5927] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 168.970095][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 168.970115][ T5927] usb 5-1: Product: syz [ 169.003643][ T1230] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 169.033878][ T5927] usb 5-1: config 0 descriptor?? [ 169.037798][ T7646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.040048][ T5927] hub 5-1:0.0: bad descriptor, ignoring hub [ 169.040085][ T5927] hub 5-1:0.0: probe with driver hub failed with error -5 [ 169.163005][ T1230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.163037][ T1230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.163074][ T1230] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 169.163095][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.219828][ T1230] usb 2-1: config 0 descriptor?? [ 169.397003][ T1903] usb 5-1: USB disconnect, device number 10 [ 169.660194][ T1230] cp2112 0003:10C4:EA90.0018: item fetching failed at offset 5/7 [ 169.661189][ T1230] cp2112 0003:10C4:EA90.0018: parse failed [ 169.661349][ T1230] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -22 [ 169.737118][ T7694] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 169.737183][ T7694] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 169.737282][ T7694] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 169.737409][ T7694] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 169.737460][ T7694] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 169.737509][ T7694] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 169.737633][ T7694] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 169.737685][ T7694] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 169.737735][ T7694] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 169.737819][ T7694] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 169.737866][ T7694] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 169.737914][ T7694] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 169.738005][ T7694] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 169.738054][ T7694] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 169.738103][ T7694] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 169.738178][ T7694] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 169.738231][ T7694] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 169.738275][ T7694] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 169.894795][ T9] usb 2-1: USB disconnect, device number 13 [ 169.959662][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 170.346566][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.516697][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 170.521726][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.521758][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.521792][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 170.521815][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.579864][ T9] usb 4-1: config 0 descriptor?? [ 171.050827][ T9] uclogic 0003:5543:0042.0019: unbalanced delimiter at end of report description [ 171.051661][ T9] uclogic 0003:5543:0042.0019: parse failed [ 171.051766][ T9] uclogic 0003:5543:0042.0019: probe with driver uclogic failed with error -22 [ 171.248859][ T1230] usb 4-1: USB disconnect, device number 10 [ 171.866619][ T1230] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.036582][ T1230] usb 5-1: Using ep0 maxpacket: 32 [ 172.039394][ T1230] usb 5-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.039422][ T1230] usb 5-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.039446][ T1230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.039477][ T1230] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 172.039498][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.108558][ T1230] usb 5-1: config 0 descriptor?? [ 172.560193][ T1230] asus 0003:048D:CE50.001A: item fetching failed at offset 2/5 [ 172.561024][ T1230] asus 0003:048D:CE50.001A: Asus hid parse failed: -22 [ 172.561128][ T1230] asus 0003:048D:CE50.001A: probe with driver asus failed with error -22 [ 172.809129][ T9] usb 5-1: USB disconnect, device number 11 [ 172.933725][ T7771] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 172.933747][ T7771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.825'. [ 172.933763][ T7771] nbd: illegal input index 65544 [ 173.136745][ T1230] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 173.289105][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.289147][ T1230] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 173.289166][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.349769][ T1230] usb 3-1: config 0 descriptor?? [ 173.516492][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.669118][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 173.679181][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 173.679208][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.679227][ T10] usb 4-1: Product: syz [ 173.679240][ T10] usb 4-1: Manufacturer: syz [ 173.679253][ T10] usb 4-1: SerialNumber: syz [ 173.696019][ T10] usb 4-1: config 0 descriptor?? [ 173.701629][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 173.758661][ T7796] autofs: Bad value for 'fd' [ 173.818009][ T1230] steelseries 0003:1038:12C2.001B: unknown main item tag 0x0 [ 173.818046][ T1230] steelseries 0003:1038:12C2.001B: unknown main item tag 0x0 [ 173.818073][ T1230] steelseries 0003:1038:12C2.001B: unknown main item tag 0x0 [ 173.818099][ T1230] steelseries 0003:1038:12C2.001B: unknown main item tag 0x0 [ 173.818132][ T1230] steelseries 0003:1038:12C2.001B: unknown main item tag 0x0 [ 173.818158][ T1230] steelseries 0003:1038:12C2.001B: unknown main item tag 0x0 [ 173.818184][ T1230] steelseries 0003:1038:12C2.001B: unknown main item tag 0x0 [ 173.980572][ T10] gspca_sn9c2028: read1 error -32 [ 174.053678][ T9] usb 3-1: USB disconnect, device number 12 [ 174.195329][ T10] gspca_sn9c2028: read1 error -71 [ 174.195418][ T10] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 174.231448][ T10] usb 4-1: USB disconnect, device number 11 [ 174.989710][ T7832] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.471074][ T7848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.906522][ T6020] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 176.068871][ T6020] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.068899][ T6020] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.068924][ T6020] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.068956][ T6020] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 176.068977][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.083118][ T6020] usb 2-1: config 0 descriptor?? [ 176.166439][ T1230] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 176.343596][ T1230] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 176.343629][ T1230] usb 5-1: config 1 has no interface number 0 [ 176.344270][ T1230] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 176.344298][ T1230] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 176.344324][ T1230] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.377371][ T1230] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 176.377400][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.377418][ T1230] usb 5-1: Product: syz [ 176.379720][ T1230] usb 5-1: Manufacturer: syz [ 176.379737][ T1230] usb 5-1: SerialNumber: syz [ 176.517861][ T7866] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 176.663183][ T6020] kye 0003:0458:501A.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 176.705335][ T6020] kye 0003:0458:501A.001C: hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 176.705592][ T6020] kye 0003:0458:501A.001C: tablet-enabling feature report not found [ 176.705616][ T6020] kye 0003:0458:501A.001C: tablet enabling failed [ 176.815164][ T7866] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 176.856525][ T6020] usb 2-1: USB disconnect, device number 14 [ 177.152674][ T1230] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 177.233191][ T1230] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 177.233217][ T1230] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 177.235696][ T1230] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 177.235716][ T1230] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 177.256472][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.299331][ T1230] usb 5-1: USB disconnect, device number 12 [ 177.319914][ T1230] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 177.434989][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.435020][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.435047][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 177.435089][ T9] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 177.435111][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.438127][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 177.507179][ T9] usb 1-1: config 0 descriptor?? [ 177.531821][ T1230] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 177.599662][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 177.603631][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.603655][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.635222][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.635250][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.635270][ T31] usb 3-1: Product: syz [ 177.635284][ T31] usb 3-1: Manufacturer: syz [ 177.635298][ T31] usb 3-1: SerialNumber: syz [ 177.636600][ T5846] Bluetooth: hci2: command tx timeout [ 177.718427][ T7898] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 177.718534][ T7898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.961693][ T9] sony 0003:12BA:0100.001D: unknown main item tag 0x0 [ 177.979383][ T9] sony 0003:12BA:0100.001D: hidraw0: USB HID v0.00 Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0 [ 177.979414][ T9] sony 0003:12BA:0100.001D: failed to claim input [ 178.139660][ T31] usb 3-1: cannot find UAC_HEADER [ 178.207907][ T1230] usb 1-1: USB disconnect, device number 11 [ 178.400160][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 178.417670][ T31] usb 3-1: USB disconnect, device number 13 [ 178.565837][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.289034][ T7937] IPVS: Error connecting to the multicast addr [ 179.338446][ T7939] openvswitch: netlink: IPv6 tunnel dst address is zero [ 180.136587][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.306430][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 180.314050][ T31] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 180.314075][ T31] usb 2-1: config 0 has no interface number 0 [ 180.318040][ T31] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 180.318066][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.318084][ T31] usb 2-1: Product: syz [ 180.318097][ T31] usb 2-1: Manufacturer: syz [ 180.318110][ T31] usb 2-1: SerialNumber: syz [ 180.340577][ T31] usb 2-1: config 0 descriptor?? [ 180.359933][ T31] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 180.360021][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 180.375711][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.378886][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 180.378946][ T31] usb 2-1: media controller created [ 180.504773][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.620471][ T7963] cxusb: i2c wr: len=85 is too big! [ 180.620471][ T7963] [ 180.628151][ T31] cxusb: set interface failed [ 180.628168][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 180.914493][ T31] DVB: Unable to find symbol lgdt330x_attach() [ 180.914508][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 181.142916][ T37] audit: type=1326 audit(1756886570.680:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f828ebe9 code=0x7ffc0000 [ 181.142967][ T37] audit: type=1326 audit(1756886570.690:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f828ebe9 code=0x7ffc0000 [ 181.159142][ T37] audit: type=1326 audit(1756886570.710:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f94f828ebe9 code=0x7ffc0000 [ 181.159201][ T37] audit: type=1326 audit(1756886570.710:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f828ebe9 code=0x7ffc0000 [ 181.159239][ T37] audit: type=1326 audit(1756886570.710:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f828ebe9 code=0x7ffc0000 [ 181.177209][ T37] audit: type=1326 audit(1756886570.720:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f94f828ebe9 code=0x7ffc0000 [ 181.177258][ T37] audit: type=1326 audit(1756886570.730:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f828ebe9 code=0x7ffc0000 [ 181.247072][ T31] rc_core: IR keymap rc-dvico-portable not found [ 181.247092][ T31] Registered IR keymap rc-empty [ 181.260812][ T31] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 181.287339][ T31] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10 [ 181.343834][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 181.343858][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 181.369675][ T31] usb 2-1: USB disconnect, device number 15 [ 181.652100][ T8011] program syz.0.935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.799038][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 182.556453][ T5931] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 182.710107][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.710132][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.710151][ T5931] usb 4-1: config 1 has no interface number 0 [ 182.710201][ T5931] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.710226][ T5931] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 182.710261][ T5931] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.713318][ T5931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.713344][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.713363][ T5931] usb 4-1: Product: syz [ 182.713376][ T5931] usb 4-1: Manufacturer: syz [ 182.713389][ T5931] usb 4-1: SerialNumber: syz [ 182.724468][ T8052] bridge0: port 3(syz_tun) entered blocking state [ 182.724600][ T8052] bridge0: port 3(syz_tun) entered disabled state [ 182.725120][ T8052] syz_tun: entered allmulticast mode [ 182.771858][ T8052] syz_tun: entered promiscuous mode [ 182.791647][ T8052] bridge0: port 3(syz_tun) entered blocking state [ 182.791851][ T8052] bridge0: port 3(syz_tun) entered forwarding state [ 183.398072][ T5931] cdc_ncm 4-1:1.1: bind() failure [ 183.437699][ T5931] usb 4-1: USB disconnect, device number 12 [ 183.733450][ T8081] devpts: Bad value for 'max' [ 184.069026][ T8089] netlink: 204 bytes leftover after parsing attributes in process `syz.2.971'. [ 184.069048][ T8089] netlink: 72 bytes leftover after parsing attributes in process `syz.2.971'. [ 184.069092][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'. [ 184.335596][ T8100] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 184.335634][ T8100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.645750][ T8114] usb usb1: check_ctrlrecip: process 8114 (syz.2.985) requesting ep 01 but needs 81 [ 184.810684][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 184.810844][ T8119] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 184.810872][ T8119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.491786][ T8147] sctp: [Deprecated]: syz.3.1000 (pid 8147) Use of int in maxseg socket option. [ 185.491786][ T8147] Use struct sctp_assoc_value instead [ 185.615116][ T8148] mkiss: ax0: crc mode is auto. [ 185.913424][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.586537][ T1903] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 186.739749][ T1903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.739780][ T1903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.739818][ T1903] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 186.739840][ T1903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.761553][ T1903] usb 5-1: config 0 descriptor?? [ 187.053651][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 187.053893][ T8201] openvswitch: netlink: Unknown nsh attribute 0 [ 187.053985][ T8201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.208795][ T1903] usbhid 5-1:0.0: can't add hid device: -71 [ 187.208926][ T1903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 187.287230][ T1903] usb 5-1: USB disconnect, device number 13 [ 187.457856][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1028'. [ 187.650296][ T8212] sctp: [Deprecated]: syz.2.1029 (pid 8212) Use of int in max_burst socket option. [ 187.650296][ T8212] Use struct sctp_assoc_value instead [ 188.793687][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1043'. [ 189.882841][ T8281] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1060'. [ 190.681776][ T8312] syz.1.1075 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.722170][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1077'. [ 190.846489][ T6020] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.017293][ T6020] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 191.017328][ T6020] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.017351][ T6020] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.017385][ T6020] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 191.017406][ T6020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.077954][ T6020] usb 3-1: config 0 descriptor?? [ 191.518019][ T6020] sony 0003:054C:024B.001E: unbalanced delimiter at end of report description [ 191.518850][ T6020] sony 0003:054C:024B.001E: parse failed [ 191.518951][ T6020] sony 0003:054C:024B.001E: probe with driver sony failed with error -22 [ 191.671202][ T8342] tipc: Invalid UDP bearer configuration [ 191.671247][ T8342] tipc: Enabling of bearer rejected, failed to enable media [ 191.715774][ T6020] usb 3-1: USB disconnect, device number 14 [ 191.820829][ T8347] team_slave_0: entered promiscuous mode [ 191.820880][ T8347] team_slave_1: entered promiscuous mode [ 191.821321][ T8345] team_slave_0: left promiscuous mode [ 191.821413][ T8345] team_slave_1: left promiscuous mode [ 191.881629][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1095'. [ 191.923696][ T8350] gretap0: entered promiscuous mode [ 191.959836][ T8350] gretap0: left promiscuous mode [ 192.657476][ T8378] random: crng reseeded on system resumption [ 192.720040][ T8378] Restarting kernel threads ... [ 192.722961][ T8378] Done restarting kernel threads. [ 193.176811][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1118'. [ 193.528008][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 193.528037][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 193.656514][ T6020] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 193.823983][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.824017][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.824125][ T6020] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 193.824258][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.838730][ T6020] usb 2-1: config 0 descriptor?? [ 194.287683][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.287829][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.310588][ T37] audit: type=1326 audit(1756886583.860:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 194.311838][ T37] audit: type=1326 audit(1756886583.860:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 194.326691][ T37] audit: type=1326 audit(1756886583.880:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 194.327024][ T37] audit: type=1326 audit(1756886583.880:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 194.327279][ T37] audit: type=1326 audit(1756886583.880:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 194.328680][ T37] audit: type=1326 audit(1756886583.880:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 194.331399][ T6020] samsung 0003:0419:0600.001F: item fetching failed at offset 5/7 [ 194.332168][ T6020] samsung 0003:0419:0600.001F: parse failed [ 194.332232][ T6020] samsung 0003:0419:0600.001F: probe with driver samsung failed with error -22 [ 194.396832][ T37] audit: type=1326 audit(1756886583.950:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 194.396883][ T37] audit: type=1326 audit(1756886583.950:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4012ebe9 code=0x7ffc0000 [ 194.525843][ T31] usb 2-1: USB disconnect, device number 16 [ 194.849681][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 195.806825][ T8479] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1158'. [ 197.016574][ T5931] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.089127][ T8517] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.1176'. [ 197.089150][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 197.089168][ T8517] netlink: 4528 bytes leftover after parsing attributes in process `syz.3.1176'. [ 197.170280][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.170309][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.170351][ T5931] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 197.170373][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.209863][ T8521] mkiss: ax0: crc mode is auto. [ 197.231313][ T5931] usb 5-1: config 0 descriptor?? [ 197.659274][ T8527] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1182'. [ 197.659299][ T8527] block nbd1: Unsupported socket: shutdown callout must be supported. [ 197.701539][ T5931] koneplus 0003:1E7D:2D51.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 197.867161][ T5931] usb 5-1: USB disconnect, device number 14 [ 198.096850][ T8542] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 198.406788][ T8554] autofs: Bad value for 'fd' [ 198.756741][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 199.358279][ T8590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1211'. [ 199.898799][ T37] audit: type=1326 audit(1756886589.450:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8606 comm="syz.1.1219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58b72eebe9 code=0x0 [ 200.405632][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1228'. [ 200.795848][ T8635] IPVS: Scheduler module ip_vs_sip not found [ 202.615911][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 203.276457][ T6020] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 203.431810][ T6020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.431862][ T6020] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 203.431885][ T6020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.444556][ T6020] usb 3-1: config 0 descriptor?? [ 203.526544][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 203.698237][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 203.702679][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.702765][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.702789][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.702824][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 203.702845][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.728847][ T31] usb 2-1: config 0 descriptor?? [ 203.986512][ T6020] hid_mf 0003:0079:1846.0021: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 203.986545][ T6020] hid_mf 0003:0079:1846.0021: Invalid report, this should never happen! [ 203.986559][ T6020] hid_mf 0003:0079:1846.0021: Force feedback init failed. [ 204.120746][ T6020] usb 3-1: USB disconnect, device number 15 [ 204.211353][ T8753] fido_id[8753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 204.427128][ T6020] usb 2-1: USB disconnect, device number 17 [ 204.886404][ T5931] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 205.046826][ T5931] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 205.046889][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.046915][ T5931] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.046939][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.046964][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.066806][ T5931] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 205.066867][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.066892][ T5931] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.066915][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.066939][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.078496][ T5931] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 205.078554][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.078579][ T5931] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.078603][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.078626][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.118590][ T5931] usb 5-1: string descriptor 0 read error: -22 [ 205.118734][ T5931] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 205.118756][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.208731][ T5931] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 205.357202][ T9] usb 5-1: USB disconnect, device number 15 [ 205.940047][ T37] audit: type=1326 audit(1756886595.490:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 205.940324][ T37] audit: type=1326 audit(1756886595.490:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 205.940901][ T37] audit: type=1326 audit(1756886595.490:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 205.941894][ T37] audit: type=1326 audit(1756886595.490:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 205.942148][ T37] audit: type=1326 audit(1756886595.490:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8783 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 206.376464][ T6020] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 206.533288][ T6020] usb 5-1: Using ep0 maxpacket: 8 [ 206.536117][ T6020] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.557333][ T6020] usb 5-1: config 4 interface 0 has no altsetting 0 [ 206.569550][ T6020] usb 5-1: string descriptor 0 read error: -22 [ 206.569648][ T6020] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 206.569671][ T6020] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 206.654060][ T6020] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 206.674658][ T6020] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.675077][ T6020] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 206.675126][ T6020] usb 5-1: media controller created [ 206.750856][ T6020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.967314][ T6020] zl10353_read_register: readreg error (reg=127, ret==0) [ 208.087407][ T6020] usb 5-1: USB disconnect, device number 16 [ 208.476978][ T8857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.766544][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1337'. [ 209.171506][ T8881] netlink: 'syz.3.1349': attribute type 4 has an invalid length. [ 209.171527][ T8881] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1349'. [ 209.565513][ T8899] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 210.166997][ T8921] block nbd4: NBD_DISCONNECT [ 211.724412][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 211.724447][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.724471][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 211.724502][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 211.852919][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'. [ 212.377628][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 212.428121][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 212.503957][ T8994] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 212.537999][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 212.541042][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.541073][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.541112][ T10] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 212.541134][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.548838][ T10] usb 3-1: config 0 descriptor?? [ 212.586367][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 212.592143][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 212.592241][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 212.592283][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 212.592305][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.633099][ T9] usb 2-1: config 0 descriptor?? [ 212.672648][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1403'. [ 213.002204][ T10] hid (null): unknown global tag 0xe [ 213.071807][ T10] aquacomputer_d5next 0003:0C70:F0B6.0023: unknown global tag 0xe [ 213.071832][ T10] aquacomputer_d5next 0003:0C70:F0B6.0023: item 0 1 1 14 parsing failed [ 213.072715][ T10] aquacomputer_d5next 0003:0C70:F0B6.0023: probe with driver aquacomputer_d5next failed with error -22 [ 213.141471][ T9] kye 0003:0458:5019.0024: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 213.142551][ T9] kye 0003:0458:5019.0024: unexpected long global item [ 213.143359][ T9] kye 0003:0458:5019.0024: parse failed [ 213.143427][ T9] kye 0003:0458:5019.0024: probe with driver kye failed with error -22 [ 213.207097][ T9] usb 3-1: USB disconnect, device number 16 [ 213.283506][ T6020] usb 2-1: USB disconnect, device number 18 [ 214.751628][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 215.461866][ T9085] program syz.3.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.755926][ T9095] Illegal XDP return value 65535 on prog (id 103) dev N/A, expect packet loss! [ 216.168750][ T9111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1457'. [ 216.386910][ T9121] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1462'. [ 216.667272][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 216.667296][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 216.667320][ T9131] netlink: 'syz.1.1467': attribute type 11 has an invalid length. [ 216.667412][ T9131] netlink: 'syz.1.1467': attribute type 13 has an invalid length. [ 216.833892][ T9135] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 217.296471][ T1903] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.374832][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 217.374854][ T9158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1480'. [ 217.374869][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 217.374883][ T9158] netlink: 'syz.1.1480': attribute type 5 has an invalid length. [ 217.458594][ T1903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.458625][ T1903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.458663][ T1903] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 217.458684][ T1903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.486530][ T1903] usb 5-1: config 0 descriptor?? [ 217.766534][ T1230] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 217.923662][ T1230] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 217.923690][ T1230] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 217.923710][ T1230] usb 2-1: config 162 has no interface number 0 [ 217.923726][ T1230] usb 2-1: config 162 has no interface number 1 [ 217.923791][ T1230] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.923836][ T1230] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 217.923859][ T1230] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 217.923884][ T1230] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 217.923908][ T1230] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 217.923932][ T1230] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 217.923957][ T1230] usb 2-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 217.923982][ T1230] usb 2-1: config 162 interface 79 has no altsetting 0 [ 217.923998][ T1230] usb 2-1: config 162 interface 183 has no altsetting 0 [ 217.936526][ T1230] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 217.936555][ T1230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.936575][ T1230] usb 2-1: Product: syz [ 217.936588][ T1230] usb 2-1: Manufacturer: syz [ 217.936602][ T1230] usb 2-1: SerialNumber: syz [ 218.148122][ T1903] hid-led 0003:0FC5:B080.0025: probe with driver hid-led failed with error -71 [ 218.214361][ T1903] usb 5-1: USB disconnect, device number 17 [ 218.322752][ T1230] pl2303 2-1:162.79: required endpoints missing [ 218.343752][ T1230] pl2303 2-1:162.183: pl2303 converter detected [ 218.355917][ T1230] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 218.364658][ T1230] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 218.365130][ T1230] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 218.365636][ T1230] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 218.366053][ T1230] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 218.393348][ T1230] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 218.408243][ T1230] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 218.408691][ T1230] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 218.409336][ T1230] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 218.409857][ T1230] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 218.410272][ T1230] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 218.468171][ T1230] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 218.516701][ T1230] usb 2-1: USB disconnect, device number 19 [ 218.547505][ T1230] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 218.548502][ T1230] pl2303 2-1:162.183: device disconnected [ 219.043670][ T37] audit: type=1326 audit(1756886608.580:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 219.043948][ T37] audit: type=1326 audit(1756886608.590:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 219.099282][ T37] audit: type=1326 audit(1756886608.650:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 219.100074][ T37] audit: type=1326 audit(1756886608.650:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 219.100115][ T37] audit: type=1326 audit(1756886608.650:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 219.103465][ T37] audit: type=1326 audit(1756886608.650:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 219.103509][ T37] audit: type=1326 audit(1756886608.650:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 219.103656][ T37] audit: type=1326 audit(1756886608.650:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9193 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 219.222394][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1499'. [ 219.556730][ T6020] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 219.605690][ T9210] ALSA: seq fatal error: cannot create timer (-22) [ 219.708147][ T6020] usb 2-1: Using ep0 maxpacket: 16 [ 219.711995][ T6020] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 219.712102][ T6020] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 219.712130][ T6020] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.712152][ T6020] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 219.712179][ T6020] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.712213][ T6020] usb 2-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 219.712236][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.807165][ T6020] usb 2-1: config 0 descriptor?? [ 219.836813][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1509'. [ 220.273413][ T6020] nzxt-smart2 0003:1E71:200E.0026: item fetching failed at offset 0/3 [ 220.275529][ T6020] nzxt-smart2 0003:1E71:200E.0026: probe with driver nzxt-smart2 failed with error -22 [ 220.449147][ T6020] usb 2-1: USB disconnect, device number 20 [ 221.391242][ T9261] option changes via remount are deprecated (pid=9258 comm=syz.4.1530) [ 221.980911][ T9285] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1543'. [ 221.980936][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1543'. [ 222.009952][ T9284] sp0: Synchronizing with TNC [ 222.019190][ T9283] [U] è` [ 222.228405][ T9292] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1546'. [ 222.475723][ T9302] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1552'. [ 222.648787][ T9306] netlink: 'syz.2.1553': attribute type 178 has an invalid length. [ 222.779542][ T9313] kernel profiling enabled (shift: 5) [ 223.906574][ T1230] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 224.069458][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.069509][ T1230] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 224.069533][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.107875][ T1230] usb 3-1: config 0 descriptor?? [ 224.278593][ T6020] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 224.435455][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.435491][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.435601][ T6020] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.435625][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.524790][ T6020] usb 2-1: config 0 descriptor?? [ 224.583246][ T1230] lua 0003:1E7D:2C2E.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 224.585754][ T59] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 224.744119][ T9] usb 3-1: USB disconnect, device number 17 [ 224.839939][ T9364] fido_id[9364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 224.981692][ T6020] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 225.081085][ T6020] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0028/input/input12 [ 225.426360][ T6020] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 225.461184][ T6020] usb 2-1: USB disconnect, device number 21 [ 226.031406][ T9392] fido_id[9392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 226.226437][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 226.386171][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 226.386219][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.386243][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 226.429458][ T45] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 226.429493][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.465986][ T45] usb 4-1: config 0 descriptor?? [ 226.473843][ T59] Bluetooth: hci0: Malformed Event: 0x13 [ 226.567383][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 226.911004][ T45] holtek_kbd 0003:04D9:A055.0029: item fetching failed at offset 5/7 [ 226.911911][ T45] holtek_kbd 0003:04D9:A055.0029: probe with driver holtek_kbd failed with error -22 [ 227.116711][ T45] usb 4-1: USB disconnect, device number 13 [ 228.956535][ T6020] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 229.116405][ T6020] usb 2-1: Using ep0 maxpacket: 16 [ 229.122843][ T6020] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 229.122870][ T6020] usb 2-1: config 0 has no interface number 0 [ 229.122921][ T6020] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 229.128546][ T6020] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 229.128573][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.128592][ T6020] usb 2-1: Product: syz [ 229.128604][ T6020] usb 2-1: Manufacturer: syz [ 229.128618][ T6020] usb 2-1: SerialNumber: syz [ 229.219016][ T6020] usb 2-1: config 0 descriptor?? [ 229.874972][ T6020] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 229.922929][ T6020] usb 2-1: USB disconnect, device number 22 [ 230.310057][ T5927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 230.466426][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 230.470227][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 230.470260][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.470301][ T5927] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 230.470324][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.530715][ T5927] usb 3-1: config 0 descriptor?? [ 231.020374][ T5927] playstation 0003:054C:0DF2.002A: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 231.198791][ T5927] playstation 0003:054C:0DF2.002A: Failed to retrieve feature with reportID 9: -71 [ 231.198820][ T5927] playstation 0003:054C:0DF2.002A: Failed to retrieve DualSense pairing info: -71 [ 231.198874][ T5927] playstation 0003:054C:0DF2.002A: Failed to get MAC address from DualSense [ 231.198890][ T5927] playstation 0003:054C:0DF2.002A: Failed to create dualsense. [ 231.203665][ T9554] tmpfs: Bad value for 'mpol' [ 231.205098][ T5927] playstation 0003:054C:0DF2.002A: probe with driver playstation failed with error -71 [ 231.268878][ T5927] usb 3-1: USB disconnect, device number 18 [ 231.336998][ T9552] fido_id[9552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 231.556479][ T5931] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.624425][ T9568] use of bytesused == 0 is deprecated and will be removed in the future, [ 231.624441][ T9568] use the actual size instead. [ 231.715578][ T5931] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.715607][ T5931] usb 5-1: config 0 has no interface number 0 [ 231.715655][ T5931] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.715682][ T5931] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.715704][ T5931] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.715754][ T5931] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 231.715776][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.766454][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 231.784899][ T5931] usb 5-1: config 0 descriptor?? [ 231.920132][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 231.920225][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.924252][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 231.924341][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.924362][ T9] usb 2-1: Product: syz [ 231.924375][ T9] usb 2-1: Manufacturer: syz [ 231.924388][ T9] usb 2-1: SerialNumber: syz [ 232.029811][ T9] usb 2-1: config 0 descriptor?? [ 232.163411][ T9] usb 2-1: selecting invalid altsetting 0 [ 232.250993][ T5931] hid (null): report_id 35660 is invalid [ 232.456837][ T5931] uclogic 0003:28BD:0042.002B: failed retrieving string descriptor #100: -71 [ 232.456899][ T5931] uclogic 0003:28BD:0042.002B: failed retrieving pen parameters: -71 [ 232.456915][ T5931] uclogic 0003:28BD:0042.002B: pen probing failed: -71 [ 232.456931][ T5931] uclogic 0003:28BD:0042.002B: failed probing parameters: -71 [ 232.457037][ T5931] uclogic 0003:28BD:0042.002B: probe with driver uclogic failed with error -71 [ 232.470928][ T5931] usb 5-1: USB disconnect, device number 18 [ 232.593281][ T9] usb 2-1: USB disconnect, device number 23 [ 232.735341][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.153672][ T9606] program syz.4.1693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.156867][ T5927] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 234.336603][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 234.336654][ T5927] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 234.336678][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.348485][ T5927] usb 3-1: config 0 descriptor?? [ 234.366755][ T9633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.796443][ T6020] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 234.855562][ T5927] belkin 0003:050D:3201.002C: unbalanced collection at end of report description [ 234.871266][ T5927] belkin 0003:050D:3201.002C: parse failed [ 234.871343][ T5927] belkin 0003:050D:3201.002C: probe with driver belkin failed with error -22 [ 234.947078][ T6020] usb 4-1: Using ep0 maxpacket: 8 [ 234.954089][ T6020] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 234.971805][ T6020] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 234.971834][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.971854][ T6020] usb 4-1: Product: syz [ 234.971867][ T6020] usb 4-1: Manufacturer: syz [ 234.971881][ T6020] usb 4-1: SerialNumber: syz [ 235.022385][ T6020] usb 4-1: config 0 descriptor?? [ 235.033737][ T6020] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 235.033806][ T6020] usb 4-1: setting power ON [ 235.033826][ T6020] dvb-usb: bulk message failed: -22 (2/0) [ 235.056507][ T5931] usb 3-1: USB disconnect, device number 19 [ 235.089355][ T6020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.092808][ T6020] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 235.092867][ T6020] usb 4-1: media controller created [ 235.274236][ T9645] dvb-usb: bulk message failed: -22 (3/0) [ 235.274259][ T9645] cxusb: i2c wr: len=80 is too big! [ 235.274259][ T9645] [ 235.290077][ T6020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.423209][ T6020] usb 4-1: selecting invalid altsetting 6 [ 235.423233][ T6020] usb 4-1: digital interface selection failed (-22) [ 235.423250][ T6020] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 235.430040][ T6020] usb 4-1: setting power OFF [ 235.430291][ T6020] dvb-usb: bulk message failed: -22 (2/0) [ 235.430308][ T6020] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 235.430321][ T6020] (NULL device *): no alternate interface [ 235.640845][ T6020] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 235.673676][ T6020] usb 4-1: USB disconnect, device number 14 [ 235.776562][ T1230] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 235.936579][ T1230] usb 2-1: Using ep0 maxpacket: 16 [ 235.940660][ T1230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.940693][ T1230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.940716][ T1230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.940759][ T1230] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.940781][ T1230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.953769][ T1230] usb 2-1: config 0 descriptor?? [ 236.410665][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410699][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410726][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410753][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410779][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410805][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410831][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410857][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410883][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.410909][ T1230] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 236.460965][ T1230] microsoft 0003:045E:07DA.002D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 236.460997][ T1230] microsoft 0003:045E:07DA.002D: no inputs found [ 236.461010][ T1230] microsoft 0003:045E:07DA.002D: could not initialize ff, continuing anyway [ 236.655663][ T45] usb 2-1: USB disconnect, device number 24 [ 236.884444][ T9702] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 236.953526][ T9700] fido_id[9700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 238.255878][ T9748] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 238.255948][ T9748] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 238.256001][ T9748] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 238.256120][ T9748] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 238.256168][ T9748] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 238.257304][ T9748] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 238.257359][ T9748] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 238.257407][ T9748] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 238.257576][ T9748] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 238.257623][ T9748] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 238.257669][ T9748] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 238.257757][ T9748] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 238.296550][ T1230] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.454855][ T1230] usb 5-1: Using ep0 maxpacket: 8 [ 238.462773][ T1230] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 238.462797][ T1230] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 238.462835][ T1230] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.462857][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.700941][ T5931] usb 5-1: USB disconnect, device number 19 [ 238.782455][ T9763] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 238.785129][ T9763] [U] J"—E:ÀÆ" [ 238.841017][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 238.996985][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.997019][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 238.997237][ T9] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 238.997260][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.005897][ T9] usb 3-1: config 0 descriptor?? [ 239.008826][ T9758] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 239.127908][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1774'. [ 239.127954][ T9771] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 239.436207][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 239.495049][ T9] sony 0003:1345:3008.002E: hiddev0,hidraw0: USB HID v80.05 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 239.495081][ T9] sony 0003:1345:3008.002E: failed to claim input [ 239.666797][ T45] usb 3-1: USB disconnect, device number 20 [ 243.523764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 244.226311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 244.908658][ T9823] usb usb8: usbfs: process 9823 (syz.2.1788) did not claim interface 0 before use [ 244.913279][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'. [ 244.913301][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 244.913325][ T9824] netlink: 'syz.4.1796': attribute type 6 has an invalid length. [ 250.114589][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1805'. [ 250.114614][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1805'. [ 253.237338][ C1] sched: DL replenish lagged too much [ 255.723233][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.723312][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.822699][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.860270][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.886504][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.889682][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.890963][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.627626][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.660222][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.661375][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.662512][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.663855][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.916614][ T59] Bluetooth: hci5: command tx timeout [ 265.796562][ T59] Bluetooth: hci6: command tx timeout [ 266.996481][ T59] Bluetooth: hci5: command tx timeout [ 267.878432][ T59] Bluetooth: hci6: command tx timeout [ 269.086458][ T59] Bluetooth: hci5: command tx timeout [ 269.698395][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.722720][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.724050][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.725572][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.754103][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.956616][ T5857] Bluetooth: hci6: command tx timeout [ 270.385093][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 270.405339][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 270.418168][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 270.427230][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 270.428099][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 271.157990][ T59] Bluetooth: hci5: command tx timeout [ 271.876610][ T59] Bluetooth: hci7: command tx timeout [ 272.046537][ T59] Bluetooth: hci6: command tx timeout [ 272.516640][ T59] Bluetooth: hci8: command tx timeout [ 273.960794][ T59] Bluetooth: hci7: command tx timeout [ 274.596508][ T59] Bluetooth: hci8: command tx timeout [ 276.038036][ T59] Bluetooth: hci7: command tx timeout [ 276.305990][ T37] audit: type=1326 audit(1756886665.850:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 276.306040][ T37] audit: type=1326 audit(1756886665.850:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 276.357966][ T37] audit: type=1326 audit(1756886665.910:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 276.358016][ T37] audit: type=1326 audit(1756886665.910:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 276.358059][ T37] audit: type=1326 audit(1756886665.910:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 276.358813][ T37] audit: type=1326 audit(1756886665.910:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 276.484370][ T37] audit: type=1326 audit(1756886666.030:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.1.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b72eebe9 code=0x7ffc0000 [ 276.677485][ T59] Bluetooth: hci8: command tx timeout [ 278.116808][ T59] Bluetooth: hci7: command tx timeout [ 278.756484][ T59] Bluetooth: hci8: command tx timeout [ 304.734784][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.753186][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.763956][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.780978][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.781783][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.285457][ T59] Bluetooth: hci0: command tx timeout [ 312.356462][ T5857] Bluetooth: hci0: command tx timeout [ 314.436371][ T5857] Bluetooth: hci0: command tx timeout [ 316.526509][ T5857] Bluetooth: hci0: command tx timeout [ 317.163833][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.163911][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.117879][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.135470][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.166840][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.168078][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.168883][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.124324][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 323.151065][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 323.152345][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 323.153592][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 323.154431][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 324.276479][ T5857] Bluetooth: hci4: command tx timeout [ 325.238065][ T5857] Bluetooth: hci9: command tx timeout [ 326.356441][ T5857] Bluetooth: hci4: command tx timeout [ 327.316497][ T5857] Bluetooth: hci9: command tx timeout [ 328.436808][ T5857] Bluetooth: hci4: command tx timeout [ 329.396538][ T5857] Bluetooth: hci9: command tx timeout [ 330.198268][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 330.217972][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 330.219269][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 330.220482][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 330.230045][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 330.520042][ T5857] Bluetooth: hci4: command tx timeout [ 331.283742][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 331.309323][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 331.312722][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 331.314487][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 331.315362][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 331.486443][ T5857] Bluetooth: hci9: command tx timeout [ 332.356657][ T5857] Bluetooth: hci10: command tx timeout [ 333.398530][ T5857] Bluetooth: hci11: command tx timeout [ 334.436375][ T5857] Bluetooth: hci10: command tx timeout [ 335.476450][ T5857] Bluetooth: hci11: command tx timeout [ 336.516510][ T5857] Bluetooth: hci10: command tx timeout [ 337.566435][ T5857] Bluetooth: hci11: command tx timeout [ 338.604715][ T5857] Bluetooth: hci10: command tx timeout [ 339.638001][ T5857] Bluetooth: hci11: command tx timeout [ 366.084547][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 366.114402][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 366.115703][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 366.138428][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 366.139240][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 368.196477][ T5857] Bluetooth: hci12: command tx timeout [ 370.276567][ T5857] Bluetooth: hci12: command tx timeout [ 372.356438][ T5857] Bluetooth: hci12: command tx timeout [ 374.436437][ T5857] Bluetooth: hci12: command tx timeout [ 378.621044][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.621123][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.188021][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 383.242406][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 383.266480][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 383.267730][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 383.268535][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 383.618513][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 383.638627][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 383.643589][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 383.644893][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 383.645708][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 385.396458][ T5859] Bluetooth: hci13: command tx timeout [ 385.716426][ T5859] Bluetooth: hci14: command tx timeout [ 385.807092][ T5859] Bluetooth: hci5: command 0x0406 tx timeout [ 385.807109][ T5157] Bluetooth: hci6: command 0x0406 tx timeout [ 387.476578][ T5157] Bluetooth: hci13: command tx timeout [ 387.796519][ T5157] Bluetooth: hci14: command tx timeout [ 389.556541][ T5157] Bluetooth: hci13: command tx timeout [ 389.876577][ T5157] Bluetooth: hci14: command tx timeout [ 391.456136][ T5859] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 391.473870][ T5859] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 391.492032][ T5859] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 391.497857][ T5859] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 391.498676][ T5859] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 391.640852][ T5859] Bluetooth: hci13: command tx timeout [ 391.956402][ T5859] Bluetooth: hci14: command tx timeout [ 392.078878][ T5852] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 392.102092][ T5852] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 392.103357][ T5852] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 392.104541][ T5852] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 392.105327][ T5852] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 396.116428][T10024] Bluetooth: hci7: command 0x0406 tx timeout [ 396.116750][T10024] Bluetooth: hci8: command 0x0406 tx timeout [ 409.316982][ T38] INFO: task kworker/u8:7:1166 blocked for more than 143 seconds. [ 409.317011][ T38] Not tainted syzkaller #0 [ 409.317021][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.317033][ T38] task:kworker/u8:7 state:D stack:23496 pid:1166 tgid:1166 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 409.317088][ T38] Workqueue: events_unbound free_mem_alloc_deferred [ 409.317121][ T38] Call Trace: [ 409.317128][ T38] [ 409.317142][ T38] __schedule+0x16f3/0x4c20 [ 409.317194][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.317217][ T38] ? __pfx___schedule+0x10/0x10 [ 409.317257][ T38] ? schedule+0x91/0x360 [ 409.317281][ T38] schedule+0x165/0x360 [ 409.317320][ T38] schedule_timeout+0x9a/0x270 [ 409.317349][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 409.317382][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.317404][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.317424][ T38] ? wait_for_completion+0x267/0x5d0 [ 409.317448][ T38] wait_for_completion+0x2bf/0x5d0 [ 409.317484][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 409.317507][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 409.317529][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 409.317554][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 409.317580][ T38] rcu_barrier+0x463/0x570 [ 409.317610][ T38] free_mem_alloc_deferred+0x16/0x30 [ 409.317629][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 409.317650][ T38] process_scheduled_works+0xade/0x17b0 [ 409.317702][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.317742][ T38] worker_thread+0x8a0/0xda0 [ 409.317791][ T38] kthread+0x70e/0x8a0 [ 409.317819][ T38] ? __pfx_worker_thread+0x10/0x10 [ 409.317840][ T38] ? __pfx_kthread+0x10/0x10 [ 409.317868][ T38] ? __pfx_kthread+0x10/0x10 [ 409.317894][ T38] ret_from_fork+0x3f9/0x770 [ 409.317919][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 409.317947][ T38] ? __switch_to_asm+0x39/0x70 [ 409.317964][ T38] ? __switch_to_asm+0x33/0x70 [ 409.317979][ T38] ? __pfx_kthread+0x10/0x10 [ 409.318004][ T38] ret_from_fork_asm+0x1a/0x30 [ 409.318039][ T38] [ 409.318138][ T38] INFO: task syz.3.1817:9873 blocked for more than 143 seconds. [ 409.318152][ T38] Not tainted syzkaller #0 [ 409.318161][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.318170][ T38] task:syz.3.1817 state:D stack:28264 pid:9873 tgid:9872 ppid:5845 task_flags:0x400040 flags:0x00004004 [ 409.318216][ T38] Call Trace: [ 409.318226][ T38] [ 409.318239][ T38] __schedule+0x16f3/0x4c20 [ 409.318274][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 409.318305][ T38] ? __pfx___schedule+0x10/0x10 [ 409.318357][ T38] rt_mutex_schedule+0x77/0xf0 [ 409.318376][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 409.318409][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 409.318433][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 409.318454][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 409.318475][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 409.318491][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.318524][ T38] ? __tun_chr_ioctl+0x37d/0x1df0 [ 409.318564][ T38] ? __tun_chr_ioctl+0x37d/0x1df0 [ 409.318584][ T38] mutex_lock_nested+0x16a/[ 409.318584][ T38] mutex_lock_nested+0x16a/0x1d0 [ 409.318609][ T38] __tun_chr_ioctl+0x37d/0x1df0 [ 409.318639][ T38] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 409.318667][ T38] ? __fget_files+0x2a/0x420 [ 409.318688][ T38] ? __fget_files+0x3a6/0x420 [ 409.318709][ T38] ? __fget_files+0x2a/0x420 [ 409.318734][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 409.318754][ T38] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 409.318776][ T38] __se_sys_ioctl+0xff/0x170 [ 409.318799][ T38] do_syscall_64+0xfa/0x3b0 [ 409.318821][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.318842][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.318860][ T38] ? clear_bhb_loop+0x60/0xb0 [ 409.318882][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.318905][ T38] RIP: 0033:0x7faad055ebe9 [ 409.318925][ T38] RSP: 002b:00007faace7c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.318944][ T38] RAX: ffffffffffffffda RBX: 00007faad0795fa0 RCX: 00007faad055ebe9 [ 409.318958][ T38] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 409.318971][ T38] RBP: 00007faad05e1e19 R08: 0000000000000000 R09: 0000000000000000 [ 409.318983][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.318994][ T38] R13: 00007faad0796038 R14: 00007faad0795fa0 R15: 00007ffe96d11888 [ 409.319027][ T38] [ 409.319034][ T38] INFO: task syz.3.1817:9874 blocked for more than 143 seconds. [ 409.319046][ T38] Not tainted syzkaller #0 [ 409.319056][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.319064][ T38] task:syz.3.1817 state:D stack:29224 pid:9874 tgid:9872 ppid:5845 task_flags:0x400040 flags:0x00004004 [ 409.319108][ T38] Call Trace: [ 409.319113][ T38] [ 409.319123][ T38] __schedule+0x16f3/0x4c20 [ 409.319165][ T38] ? kasan_save_track+0x3e/0x80 [ 409.319189][ T38] ? __pfx___schedule+0x10/0x10 [ 409.319229][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.319254][ T38] rt_mutex_schedule+0x77/0xf0 [ 409.319272][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 409.319291][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 409.319335][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 409.319357][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 409.319377][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 409.319394][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.319427][ T38] ? __tun_chr_ioctl+0x37d/0x1df0 [ 409.319464][ T38] ? __tun_chr_ioctl+0x37d/0x1df0 [ 409.319485][ T38] mutex_lock_nested+0x16a/0x1d0 [ 409.319509][ T38] __tun_chr_ioctl+0x37d/0x1df0 [ 409.319539][ T38] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 409.319566][ T38] ? __fget_files+0x2a/0x420 [ 409.319587][ T38] ? __fget_files+0x3a6/0x420 [ 409.319608][ T38] ? __fget_files+0x2a/0x420 [ 409.319634][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 409.319652][ T38] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 409.319674][ T38] __se_sys_ioctl+0xff/0x170 [ 409.319697][ T38] do_syscall_64+0xfa/0x3b0 [ 409.319718][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.319739][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.319757][ T38] ? clear_bhb_loop+0x60/0xb0 [ 409.319779][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.319797][ T38] RIP: 0033:0x7faad055ebe9 [ 409.319812][ T38] RSP: 002b:00007faace7a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.319830][ T38] RAX: ffffffffffffffda RBX: 00007faad0796090 RCX: 00007faad055ebe9 [ 409.319844][ T38] RDX: 0000000000000ff3 RSI: 00000000400454d0 RDI: 0000000000000003 [ 409.319856][ T38] RBP: 00007faad05e1e19 R08: 0000000000000000 R09: 0000000000000000 [ 409.319868][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.319879][ T38] R13: 00007faad0796128 R14: 00007faad0796090 R15: 00007ffe96d11888 [ 409.319911][ T38] [ 409.319918][ T38] INFO: task syz-executor:9889 blocked for more than 143 seconds. [ 409.319931][ T38] Not tainted syzkaller #0 [ 409.319940][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.319947][ T38] task:syz-executor state:D stack:26952 pid:9889 tgid:9889 ppid:1 task_flags:0x400140 flags:0x00004004 [ 409.319991][ T38] Call Trace: [ 409.319997][ T38] [ 409.320009][ T38] __schedule+0x16f3/0x4c20 [ 409.320056][ T38] ? __pfx___schedule+0x10/0x10 [ 409.320097][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.320122][ T38] rt_mutex_schedule+0x77/0xf0 [ 409.320139][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 409.320157][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 409.320195][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 409.320217][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 409.320237][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 409.320253][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.320287][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 409.320312][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 409.320347][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 409.320362][ T38] mutex_lock_nested+0x16a/0x1d0 [ 409.320387][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 409.320415][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 409.320451][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 409.320468][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 409.320489][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.320513][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 409.320533][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.320573][ T38] netlink_rcv_skb+0x205/0x470 [ 409.320592][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.320614][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.320637][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.320671][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.320701][ T38] netlink_unicast+0x843/0xa10 [ 409.320730][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 409.320751][ T38] ? netlink_sendmsg+0x642/0xb30 [ 409.320770][ T38] ? skb_put+0x11b/0x210 [ 409.320798][ T38] netlink_sendmsg+0x805/0xb30 [ 409.320829][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.320859][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.320877][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.320899][ T38] __sock_sendmsg+0x21c/0x270 [ 409.320923][ T38] __sys_sendto+0x3c7/0x520 [ 409.320948][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 409.320998][ T38] ? exc_page_fault+0x76/0xf0 [ 409.321023][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 409.321049][ T38] __x64_sys_sendto+0xde/0x100 [ 409.321074][ T38] do_syscall_64+0xfa/0x3b0 [ 409.321095][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.321116][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.321134][ T38] ? clear_bhb_loop+0x60/0xb0 [ 409.321156][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.321173][ T38] RIP: 0033:0x7f84533a0a7c [ 409.321188][ T38] RSP: 002b:00007ffe8d716e50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 409.321206][ T38] RAX: ffffffffffffffda RBX: 00007f8454104620 RCX: 00007f84533a0a7c [ 409.321220][ T38] RDX: 0000000000000028 RSI: 00007f8454104670 RDI: 0000000000000003 [ 409.321232][ T38] RBP: 0000000000000000 R08: 00007ffe8d716ea4 R09: 000000000000000c [ 409.321245][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 409.321256][ T38] R13: 0000000000000000 R14: 00007f8454104670 R15: 0000000000000000 [ 409.321286][ T38] [ 409.321294][ T38] INFO: task syz-executor:9894 blocked for more than 143 seconds. [ 409.321306][ T38] Not tainted syzkaller #0 [ 409.321315][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.321324][ T38] task:syz-executor state:D stack:26952 pid:9894 tgid:9894 ppid:1 task_flags:0x400140 flags:0x00004004 [ 409.321374][ T38] Call Trace: [ 409.321379][ T38] [ 409.321391][ T38] __schedule+0x16f3/0x4c20 [ 409.321440][ T38] ? __pfx___schedule+0x10/0x10 [ 409.321481][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.321505][ T38] rt_mutex_schedule+0x77/0xf0 [ 409.321523][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 409.321542][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 409.321579][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 409.321599][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 409.321619][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 409.321635][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.321668][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 409.321693][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 409.321719][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 409.321734][ T38] mutex_lock_nested+0x16a/0x1d0 [ 409.321758][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 409.321786][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 409.321823][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 409.321840][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 409.321859][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.321883][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 409.321902][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.321942][ T38] netlink_rcv_skb+0x205/0x470 [ 409.321960][ T38] ? __lock_acquire+0xab9/0xd20 [ 409.321982][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.322005][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.322039][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.322069][ T38] netlink_unicast+0x843/0xa10 [ 409.322098][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 409.322120][ T38] ? netlink_sendmsg+0x642/0xb30 [ 409.322139][ T38] ? skb_put+0x11b/0x210 [ 409.322165][ T38] netlink_sendmsg+0x805/0xb30 [ 409.322197][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.322227][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.322244][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.322267][ T38] __sock_sendmsg+0x21c/0x270 [ 409.322289][ T38] __sys_sendto+0x3c7/0x520 [ 409.322314][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 409.322370][ T38] ? exc_page_fault+0x76/0xf0 [ 409.322395][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 409.322420][ T38] __x64_sys_sendto+0xde/0x100 [ 409.322446][ T38] do_syscall_64+0xfa/0x3b0 [ 409.322467][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.322488][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.322506][ T38] ? clear_bhb_loop+0x60/0xb0 [ 409.322528][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.322545][ T38] RIP: 0033:0x7f0cb6660a7c [ 409.322560][ T38] RSP: 002b:00007fffabc330e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 409.322575][ T38] RAX: ffffffffffffffda RBX: 00007f0cb73c4620 RCX: 00007f0cb6660a7c [ 409.322587][ T38] RDX: 0000000000000028 RSI: 00007f0cb73c4670 RDI: 0000000000000003 [ 409.322598][ T38] RBP: 0000000000000000 R08: 00007fffabc33134 R09: 000000000000000c [ 409.322609][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 409.322621][ T38] R13: 0000000000000000 R14: 00007f0cb73c4670 R15: 0000000000000000 [ 409.322651][ T38] [ 409.322677][ T38] [ 409.322677][ T38] Showing all locks held in the system: [ 409.322687][ T38] 4 locks held by kworker/0:0/9: [ 409.322697][ T38] #0: ffff888059b85938 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.322750][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.322809][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.322854][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.322899][ T38] 4 locks held by kworker/0:1/10: [ 409.322909][ T38] #0: ffff888059b85938 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.322959][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.323018][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.323061][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.323105][ T38] 2 locks held by ksoftirqd/0/15: [ 409.323116][ T38] 2 locks held by rcuc/0/20: [ 409.323126][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.323170][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.323216][ T38] 1 lock held by khungtaskd/38: [ 409.323226][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 409.323270][ T38] 4 locks held by kworker/u9:0/59: [ 409.323280][ T38] #0: ffff8880593c1138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.323324][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.323381][ T38] #2: ffff888065cb4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 409.323422][ T38] #3: ffff888065cb40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 409.323475][ T38] 3 locks held by kworker/u8:7/1166: [ 409.323486][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.323530][ T38] #1: ffffc900049cfbc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.323575][ T38] #2: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 409.323616][ T38] 3 locks held by kworker/1:2/1230: [ 409.323627][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.323671][ T38] #1: ffffc90004b6fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.323715][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 409.323764][ T38] 3 locks held by kworker/u8:10/1308: [ 409.323775][ T38] #0: ffff88814cadf138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.323819][ T38] #1: ffffc90004dcfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.323864][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 409.323909][ T38] 4 locks held by kworker/0:2/1593: [ 409.323919][ T38] #0: ffff888059b85938 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.323968][ T38] #1: ffffc9000571fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.324013][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.324057][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.324101][ T38] 4 locks held by kworker/0:3/1903: [ 409.324112][ T38] #0: ffff888059b95538 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.324160][ T38] #1: ffffc90005bbfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.324218][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.324261][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.324319][ T38] 4 locks held by kworker/u9:1/5157: [ 409.324336][ T38] #0: ffff8880618c4138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.324385][ T38] #1: ffffc9001019fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.324430][ T38] #2: ffff8880694640a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 409.324474][ T38] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 409.324522][ T38] 2 locks held by getty/5597: [ 409.324532][ T38] #0: ffff88823bf3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.324577][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 409.324621][ T38] 5 locks held by kworker/u9:2/5846: [ 409.324632][ T38] #0: ffff88803a128938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.324676][ T38] #1: ffffc90004d8fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.324721][ T38] #2: ffff888066364e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 409.324761][ T38] #3: ffff8880663640a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 409.324806][ T38] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 409.324852][ T38] 6 locks held by kworker/u9:3/5852: [ 409.324862][ T38] #0: ffff88805c023138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.324907][ T38] #1: ffffc90004e0fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.324950][ T38] #2: ffff888028238e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 409.324990][ T38] #3: ffff8880282380a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 409.325034][ T38] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 409.325078][ T38] #5: ffff88805af97358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 409.325128][ T38] 4 locks held by kworker/u9:7/5859: [ 409.325138][ T38] #0: ffff88803331e138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.325186][ T38] #1: ffffc90004e6fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.325230][ T38] #2: ffff888064af40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 409.325274][ T38] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 409.325322][ T38] 4 locks held by kworker/0:4/5914: [ 409.325339][ T38] #0: ffff888059965138 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.325383][ T38] #1: ffffc9000595fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.325441][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.325485][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.325531][ T38] 4 locks held by kworker/0:6/5930: [ 409.325541][ T38] #0: ffff888059966938 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.325590][ T38] #1: ffffc90005a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.325648][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.325691][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.325736][ T38] 4 locks held by kworker/0:7/5931: [ 409.325746][ T38] #0: ffff8880599ae938 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.325794][ T38] #1: ffffc90005a6fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.325852][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.325894][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.325940][ T38] 1 lock held by syz.2.1801/9835: [ 409.325950][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 409.325996][ T38] 1 lock held by syz.4.1804/9840: [ 409.326006][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 409.326050][ T38] 4 locks held by kworker/0:9/9842: [ 409.326060][ T38] #0: ffff8880599ad938 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.326105][ T38] #1: ffffc900044bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.326164][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.686390][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.686438][ T38] 4 locks held by kworker/0:10/9843: [ 409.686449][ T38] #0: ffff888059946938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.686495][ T38] #1: ffffc90003b87bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.686554][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.686596][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.686639][ T38] 1 lock held by syz.0.1816/9871: [ 409.686650][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 409.686694][ T38] 1 lock held by syz.3.1817/9873: [ 409.686704][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 409.686751][ T38] 1 lock held by syz.3.1817/9874: [ 409.686762][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 409.686808][ T38] 1 lock held by syz-executor/9889: [ 409.686818][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.686859][ T38] 1 lock held by syz-executor/9894: [ 409.686869][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.686910][ T38] 4 locks held by kworker/0:11/9896: [ 409.686919][ T38] #0: ffff88802ce8e538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.686969][ T38] #1: ffffc900042e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.687028][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.687072][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.687116][ T38] 1 lock held by syz-executor/9899: [ 409.687127][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.687167][ T38] 1 lock held by syz-executor/9903: [ 409.687177][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.687218][ T38] 4 locks held by kworker/0:12/9934: [ 409.687228][ T38] #0: ffff888059b87138 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.687276][ T38] #1: ffffc90004277bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.687341][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.687385][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.687429][ T38] 4 locks held by kworker/0:14/9943: [ 409.687440][ T38] #0: ffff888059967138 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.687488][ T38] #1: ffffc90003f27bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.687547][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.687590][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.687634][ T38] 4 locks held by kworker/0:15/9944: [ 409.687645][ T38] #0: ffff888059b84138 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.687693][ T38] #1: ffffc90003f17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.687751][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.687795][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.687840][ T38] 2 locks held by syz.1.1851/9962: [ 409.687851][ T38] #0: ffffffff8ed38940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.687897][ T38] #1: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 409.687939][ T38] 1 lock held by syz-executor/9967: [ 409.687949][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.687990][ T38] 1 lock held by syz-executor/9978: [ 409.688000][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688040][ T38] 1 lock held by syz-executor/9982: [ 409.688050][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688090][ T38] 8 locks held by kworker/0:16/9984: [ 409.688101][ T38] 1 lock held by syz-executor/9986: [ 409.688112][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688152][ T38] 1 lock held by syz-executor/9991: [ 409.688162][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688203][ T38] 4 locks held by kworker/0:18/9994: [ 409.688214][ T38] #0: ffff888059967138 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.688266][ T38] #1: ffffc90004ccfbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.688318][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 409.688362][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 409.688407][ T38] 1 lock held by syz-executor/9996: [ 409.688418][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688458][ T38] 1 lock held by syz-executor/10009: [ 409.688469][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688513][ T38] 1 lock held by syz-executor/10013: [ 409.688523][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688563][ T38] 1 lock held by syz-executor/10017: [ 409.688574][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688614][ T38] 1 lock held by syz-executor/10021: [ 409.688624][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 409.688667][ T38] [ 409.688672][ T38] ============================================= [ 409.688672][ T38] [ 409.688698][ T38] NMI backtrace for cpu 1 [ 409.688722][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 409.688770][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.688796][ T38] Call Trace: [ 409.688811][ T38] [ 409.688829][ T38] dump_stack_lvl+0x189/0x250 [ 409.688898][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.688961][ T38] ? __pfx__printk+0x10/0x10 [ 409.689038][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 409.689094][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 409.689149][ T38] ? __pfx__printk+0x10/0x10 [ 409.689205][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.689264][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 409.689312][ T38] watchdog+0xf93/0xfe0 [ 409.689338][ T38] ? watchdog+0x1de/0xfe0 [ 409.689365][ T38] kthread+0x70e/0x8a0 [ 409.689391][ T38] ? __pfx_watchdog+0x10/0x10 [ 409.689411][ T38] ? __pfx_kthread+0x10/0x10 [ 409.689438][ T38] ? __pfx_kthread+0x10/0x10 [ 409.689462][ T38] ret_from_fork+0x3f9/0x770 [ 409.689486][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 409.689513][ T38] ? __switch_to_asm+0x39/0x70 [ 409.689529][ T38] ? __switch_to_asm+0x33/0x70 [ 409.689544][ T38] ? __pfx_kthread+0x10/0x10 [ 409.689568][ T38] ret_from_fork_asm+0x1a/0x30 [ 409.689600][ T38] [ 409.689607][ T38] Sending NMI from CPU 1 to CPUs 0: [ 409.689631][ C0] NMI backtrace for cpu 0 [ 409.689644][ C0] CPU: 0 UID: 0 PID: 9984 Comm: kworker/0:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 409.689663][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.689673][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 409.689692][ C0] RIP: 0010:__lock_acquire+0x41a/0xd20 [ 409.689713][ C0] Code: 90 0f 0b 90 90 90 31 c9 48 8b 3c 24 84 db 0f 84 e3 01 00 00 41 8b 46 20 66 85 c0 0f 88 d6 01 00 00 0f b6 89 c5 00 00 00 84 c9 <0f> b6 d3 44 0f b6 e9 44 0f 44 ea 44 8b a7 18 0b 00 00 41 8d 4c 24 [ 409.689726][ C0] RSP: 0018:ffffc900060be510 EFLAGS: 00000002 [ 409.689739][ C0] RAX: 0000000000020576 RBX: 0000000000000003 RCX: 0000000000000001 [ 409.689749][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803a323b80 [ 409.689760][ C0] RBP: 0000000000000576 R08: 0000000000000000 R09: ffffffff88df77bf [ 409.689770][ C0] R10: 0aaaaaaaaaaa0000 R11: 00080aaaaaaaaaaa R12: 0000000000020000 [ 409.689781][ C0] R13: 0000000000000000 R14: ffff88803a324830 R15: ffff88803a3246a0 [ 409.689793][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 409.689806][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.689817][ C0] CR2: 00007f58b7527dac CR3: 0000000033a98000 CR4: 00000000003526f0 [ 409.689831][ C0] Call Trace: [ 409.689837][ C0] [ 409.689846][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 409.689860][ C0] lock_acquire+0x120/0x360 [ 409.689876][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 409.689895][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 409.689908][ C0] __dev_queue_xmit+0x29e/0x3b70 [ 409.689921][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 409.689938][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 409.689954][ C0] ? synproxy_pernet+0x23/0x240 [ 409.689973][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 409.689986][ C0] ? synproxy_pernet+0x23/0x240 [ 409.690002][ C0] ? __nf_conntrack_confirm+0x93/0x1050 [ 409.690021][ C0] ? synproxy_pernet+0x23/0x240 [ 409.690039][ C0] ? __asan_memset+0x22/0x50 [ 409.690056][ C0] ? __lock_acquire+0xab9/0xd20 [ 409.690076][ C0] ? ip_output+0x2a1/0x3c0 [ 409.690097][ C0] ? ip_finish_output2+0xbae/0x11d0 [ 409.690113][ C0] ip_finish_output2+0xd5a/0x11d0 [ 409.690128][ C0] ? ip_finish_output2+0x452/0x11d0 [ 409.690145][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 409.690161][ C0] ? ip_skb_dst_mtu+0x866/0xab0 [ 409.690175][ C0] ? ip_finish_output+0x33a/0x3f0 [ 409.690195][ C0] ip_output+0x2a1/0x3c0 [ 409.690213][ C0] ? ip_output+0x60/0x3c0 [ 409.690231][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 409.690255][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 409.690272][ C0] ? nft_sock_get_eval_cgroupv2+0x88/0x270 [ 409.690291][ C0] ? synproxy_pernet+0x45/0x270 [ 409.690306][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 409.690328][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 409.690348][ C0] ? nf_ip_checksum+0x13c/0x510 [ 409.690368][ C0] nft_synproxy_do_eval+0x345/0x570 [ 409.690389][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 409.690408][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 409.690428][ C0] nft_do_chain+0x40c/0x1920 [ 409.690453][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 409.690480][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 409.690494][ C0] ? __schedule+0x1709/0x4c20 [ 409.690518][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 409.690533][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 409.690559][ C0] nft_do_chain_inet+0x25d/0x340 [ 409.690578][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 409.690602][ C0] ? NF_HOOK+0x9a/0x3a0 [ 409.690618][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 409.690637][ C0] nf_hook_slow+0xc5/0x220 [ 409.690655][ C0] NF_HOOK+0x206/0x3a0 [ 409.690672][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 409.690687][ C0] ? NF_HOOK+0x9a/0x3a0 [ 409.690703][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 409.690717][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 409.690734][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 409.690752][ C0] ? skb_dst+0x4f/0xd0 [ 409.690767][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 409.690785][ C0] NF_HOOK+0x309/0x3a0 [ 409.690801][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 409.690817][ C0] ? NF_HOOK+0x9a/0x3a0 [ 409.690832][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 409.690848][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 409.690868][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 409.690883][ C0] __netif_receive_skb+0x143/0x380 [ 409.690898][ C0] ? rt_spin_unlock+0x65/0x80 [ 409.690915][ C0] ? process_backlog+0x27b/0x900 [ 409.690931][ C0] process_backlog+0x31e/0x900 [ 409.690951][ C0] __napi_poll+0xb3/0x540 [ 409.690967][ C0] net_rx_action+0x707/0xe00 [ 409.690990][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 409.691008][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 409.691028][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 409.691048][ C0] handle_softirqs+0x22f/0x710 [ 409.691068][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 409.691088][ C0] __local_bh_enable_ip+0x179/0x270 [ 409.691105][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 409.691122][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 409.691136][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 409.691157][ C0] ? neigh_periodic_work+0x57/0xe90 [ 409.691174][ C0] neigh_periodic_work+0xc37/0xe90 [ 409.691192][ C0] ? neigh_periodic_work+0x57/0xe90 [ 409.691208][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 409.691225][ C0] process_scheduled_works+0xade/0x17b0 [ 409.691252][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.691275][ C0] worker_thread+0x8a0/0xda0 [ 409.691302][ C0] kthread+0x70e/0x8a0 [ 409.691321][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.691337][ C0] ? __pfx_kthread+0x10/0x10 [ 409.691358][ C0] ? __pfx_kthread+0x10/0x10 [ 409.691376][ C0] ret_from_fork+0x3f9/0x770 [ 409.691393][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 409.691412][ C0] ? __switch_to_asm+0x39/0x70 [ 409.691425][ C0] ? __switch_to_asm+0x33/0x70 [ 409.691438][ C0] ? __pfx_kthread+0x10/0x10 [ 409.691456][ C0] ret_from_fork_asm+0x1a/0x30 [ 409.691475][ C0] [ 409.691634][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 409.691647][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 409.691667][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.691677][ T38] Call Trace: [ 409.691684][ T38] [ 409.691692][ T38] dump_stack_lvl+0x99/0x250 [ 409.691716][ T38] ? __asan_memcpy+0x40/0x70 [ 409.691734][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.691757][ T38] ? __pfx__printk+0x10/0x10 [ 409.691788][ T38] vpanic+0x281/0x750 [ 409.691813][ T38] ? __pfx_vpanic+0x10/0x10 [ 409.691834][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 409.691851][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.691883][ T38] panic+0xb9/0xc0 [ 409.691904][ T38] ? __pfx_panic+0x10/0x10 [ 409.691930][ T38] ? irq_work_queue+0xc3/0x140 [ 409.691955][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 409.691977][ T38] watchdog+0xfd2/0xfe0 [ 409.692004][ T38] ? watchdog+0x1de/0xfe0 [ 409.692030][ T38] kthread+0x70e/0x8a0 [ 409.692056][ T38] ? __pfx_watchdog+0x10/0x10 [ 409.692077][ T38] ? __pfx_kthread+0x10/0x10 [ 409.692104][ T38] ? __pfx_kthread+0x10/0x10 [ 409.692129][ T38] ret_from_fork+0x3f9/0x770 [ 409.692153][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 409.692180][ T38] ? __switch_to_asm+0x39/0x70 [ 409.692196][ T38] ? __switch_to_asm+0x33/0x70 [ 409.692211][ T38] ? __pfx_kthread+0x10/0x10 [ 409.692235][ T38] ret_from_fork_asm+0x1a/0x30 [ 409.692266][ T38] [ 409.692561][ T38] Kernel Offset: disabled